last executing test programs:

25.030942646s ago: executing program 3 (id=89):
r0 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_complete(0x0, r0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r2, r2, 0x2)
openat$random(0xffffffffffffff9c, &(0x7f0000000100), 0x282100, 0x0)
openat$sndtimer(0xffffffffffffff9c, 0x0, 0x40100)
getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x22, 0x0, 0x0)
syz_ublk_add_dev(r1, 0x0, r0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed)
mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x38000c0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc_mnt/irq/1/smp_affinity\x00', 0x82, 0x61)
read$FUSE(r3, &(0x7f00000013c0)={0x2020}, 0x2020)

25.024542816s ago: executing program 3 (id=92):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x6, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r0}, @generic={0xbf, 0x3, 0xa}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x3c}, @generic={0x95}], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_usb_connect(0x2, 0x3b, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x10, 0xc7, 0xeb, 0x10, 0x91e4, 0x5d86, 0x11cd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x29, 0x1, 0x6, 0x0, 0x10, 0xf, "", [{{0x9, 0x4, 0x52, 0x0, 0x0, 0x8, 0x2, 0x50, 0xff, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0xb3da}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x6a, 0x1ff, 0x5}}]}}]}}]}}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0})

23.692636859s ago: executing program 3 (id=99):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x4, 0x4, 0xa, 0x80, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x9, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x1, 0x1, 0x300, r0}, @ldst={0x2, 0x0, 0x3, 0xa, 0x0, 0xfffc}, @alu={0x7, 0x1, 0xb, 0x2, 0xa}, @alu={0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc}, @call={0x85, 0x0, 0x0, 0x1}, @jmp={0x5, 0x0, 0x5, 0x0, 0x0, 0x1}, @exit, @exit], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

23.630795992s ago: executing program 3 (id=100):
syz_mount_image$ext4(&(0x7f0000000980)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x11, &(0x7f0000000040)={[{@grpquota}, {@noinit_itable}, {@data_err_abort}, {@noblock_validity}, {@noload}, {@data_writeback}]}, 0x1, 0x643, &(0x7f0000000a80)="$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")
syz_mount_image$ext4(&(0x7f0000000c00)='ext4\x00', &(0x7f0000000080)='./file2\x00', 0x28c8800, &(0x7f0000000540)={[{@noblock_validity}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@lazytime}, {@test_dummy_encryption}, {@orlov}, {@nombcache}, {@nobh}, {@barrier}, {@debug}, {@test_dummy_encryption_v1}, {@data_ordered}]}, 0x1, 0x462, &(0x7f0000001100)="$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")
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c)
r1 = socket$igmp6(0xa, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e"], 0x80}}, 0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x4c00, 0x0)
ioctl$PTP_EXTTS_REQUEST2(r2, 0x40103d0b, &(0x7f0000000400)={0x40, 0x7})
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)
syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000340)='./file0\x00', 0x210000, &(0x7f0000000240)={[{@nodelalloc}, {@dioread_lock}, {@debug}, {@abort}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x7}}, {@commit={'commit', 0x3d, 0x9}}, {@auto_da_alloc}]}, 0x1, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=")
mknodat$null(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2000, 0x103)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000380)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}})
write$FUSE_NOTIFY_DELETE(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2b000000060000000000000000000000010000000000000001000000000000000200000000000000a62d00"], 0x2b)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000000), 0xfe, 0x250, &(0x7f0000000300)="$eJzs3T9oJFUcB/DvzO565m7RUxtB/AMiooFwdoLN2SgcyHGICCqciNgod8J5h11iZWOhtUoqmyB2RktJE2wUwSpqitgIGiwMFlqs7M4G8mc1ZnfdkcznA5OZybyZ3xt2vm+3ebsBGutskvNJWknmk3SSFHsb3FctZ4e7y3Prl5Ne7+lfi0G7ar+ye96ZJEtJHk2yVhZ5tZ3cWH1+6/eNJx9853rngY9Wn5ub6U0ObW9tPrXz4cW3P73wyI2vv/35YpHz6e67r+krRvyvXSS3/xfF/ieKdt094N+49OYn3/Vzf0eS+wf576RM9eK9e+2mtU4e/uDvzn3vl2/ummVfgenr9Tr998ClHtA4ZZJuinIhSbVdlgsL1Wf471uny9euXntj/pWr16+8XPdIBUxLN9l84vNTn505kP+fWlX+gZOrn/9nLq380N/eadXdG2Am7q5W/fzPv7j4UOQfGkf+obnkH5pL/qG55B+aS/6hueQfTrDOPx+Wf2gu+Yfmkn9orr35BwCapXdqnFnDt05/IjIwc3WPPwAAAAAAAAAAAAAAAAAAwGHLc+uXd5dxr1Ecs/2X7yfbjydpj6rfGvwecXLz4O/p34p+s3212uN2dOiFeye8wIQ+rnn29S0/1lv/q3vqrb94JVl6K8m5dvvw81cMn7/x3XbE8c5LExY4poP5fOzZ2dY/6M+Veutf2Ei+6I8/50aNP2XuHKxHjz/do79i+Uiv/zHhBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJiZvwIAAP//1rxsXQ==")
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000000)={[{@test_dummy_encryption}, {@init_itable}, {@norecovery}]}, 0x3, 0x470, &(0x7f0000000dc0)="$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")
mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, &(0x7f0000000000))
r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x4040, 0x0)
ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, &(0x7f0000000080)={{0x9, 0xfffffff8}, {0x3, 0x8001}, 0x6, 0x1})
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x3, 0x0, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00')
getdents(r5, &(0x7f0000000080)=""/7, 0x49)
r6 = timerfd_create(0x5, 0x80800)
splice(r5, &(0x7f0000000180), r6, &(0x7f0000000600)=0x10000, 0x101, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x2000008, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0)
accept4$vsock_stream(r2, &(0x7f0000000480)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000)
ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000040))
socket$inet6_udp(0xa, 0x2, 0x0)

22.996135271s ago: executing program 3 (id=110):
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_usb_connect$midi(0x5, 0x31, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x133e, 0x815, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1f, 0x1, 0x1, 0x9, 0x10, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0xb, [], [{{0x9, 0x5, 0x5, 0x3, 0x20, 0x6, 0x7, 0x0, {0x4}}}]}}}}}]}}, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00')
fchdir(r0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0)
lseek(r1, 0x1, 0x2)
getdents(r1, 0x0, 0x58)

22.124716582s ago: executing program 3 (id=111):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
setxattr$trusted_overlay_opaque(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200), &(0x7f0000000240), 0x2, 0x2)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200000200000085000000860000001c110010", @ANYRES32=r3, @ANYRESHEX=r3], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x0, @val=@tcx}, 0x40)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x2)
r7 = dup(r6)
r8 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r9 = dup(r8)
bind$802154_raw(r9, &(0x7f00000016c0)={0x27, @long={0x3, 0x3, {0xaaaaaaaaaaaa0302}}}, 0x50)
ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x4f00, 0x100, 0x100, 0x1, 0x4000}})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r7, 0x28, 0x0, &(0x7f0000000340)=0xb3, 0x8)
syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[], 0x0)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r10 = open$dir(&(0x7f0000000080)='./proc\x00', 0x40e041, 0x20)
poll(&(0x7f0000000300)=[{r2, 0x14a}, {r5, 0x1}], 0x2, 0x647d)
r11 = openat(r10, &(0x7f0000000680)='./file0\x00', 0x103202, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}, {@metacopy_on}]})
write(r11, &(0x7f00000006c0)='3', 0x1)
ioctl$BLKTRACESTOP(r11, 0x1275, 0x0)

22.069117985s ago: executing program 32 (id=111):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
setxattr$trusted_overlay_opaque(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200), &(0x7f0000000240), 0x2, 0x2)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200000200000085000000860000001c110010", @ANYRES32=r3, @ANYRESHEX=r3], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x0, @val=@tcx}, 0x40)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x2)
r7 = dup(r6)
r8 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r9 = dup(r8)
bind$802154_raw(r9, &(0x7f00000016c0)={0x27, @long={0x3, 0x3, {0xaaaaaaaaaaaa0302}}}, 0x50)
ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x4f00, 0x100, 0x100, 0x1, 0x4000}})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r7, 0x28, 0x0, &(0x7f0000000340)=0xb3, 0x8)
syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[], 0x0)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r10 = open$dir(&(0x7f0000000080)='./proc\x00', 0x40e041, 0x20)
poll(&(0x7f0000000300)=[{r2, 0x14a}, {r5, 0x1}], 0x2, 0x647d)
r11 = openat(r10, &(0x7f0000000680)='./file0\x00', 0x103202, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}, {@metacopy_on}]})
write(r11, &(0x7f00000006c0)='3', 0x1)
ioctl$BLKTRACESTOP(r11, 0x1275, 0x0)

11.49712133s ago: executing program 4 (id=179):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05000000050000000200000007"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1, r0}, 0xc)

11.430473064s ago: executing program 4 (id=180):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x40000, 0x0, r1}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x20}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xa0}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
r7 = accept4$unix(r5, &(0x7f00000003c0)=@abs, &(0x7f0000000440)=0x6e, 0x800)
r8 = getpid()
sched_setscheduler(r8, 0x1, &(0x7f0000000240)=0x7)
r9 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fstat(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, <r10=>0x0, <r11=>0x0})
sendmmsg$unix(r7, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000005c0)="b37b2836f0212abf46ee2d440fb11b7081b784407e71b22b0aa4f6d8f98f1b279468d70c3339c5e69089b7d81b5f46e4ad99b254727dffee9cd4f39c0b261a85fec7649f700cd6235194f119683a1a9eb018a0bb9ffefbdc29878ea71c3aa7a1f7e8d3a2da961af9e58b825b299f8cf249", 0x71}, {&(0x7f0000000500)="ec291d5b86031db88c95a663ee28deca3cbed651848d5ad507a8d34992b7f2649357c10b7534b902b013c73853fb8af4876d9d00e23302c353e7ac0487730cb3403556bede059d0071e788a0e32df9bfaab74c10da490d6d79435ef6b4b8fa1d844b18384c9598ef10c8305a49bfbe719468280f6ca13f80b65e7e51aceaff0d77c7bc8e20eb23fc39e6e8ed47cc7b18cf054955ee16143bf232b47483704a0f66a9", 0xa2}, {&(0x7f00000006c0)="d55e8a08b0d8138017d926f876b33bc351086702cd381f3d06e45c2750d7c34d0d64c1626b6d0b257506f06f7de78d988c73cd94d296a7cf8eed68c91b2b3d4d44e9676680f7bfd96e425f67741d9fc9cc152b01ff98161b161d0c9780430119a349a58a6b72e5049b27a3d0dc55e936bf17a49b992f8b9f21ac93ff79e68c4603139bb606f9e261f2da75ebd6b17737e794c6e1648231f45caea2eb7cfdacfe99df906c380ec31f0dd0120c09535930684b920d29f7fc2aee92fc1de7d824faa8319c321fe568f5410c19b4ff78f7e520debba410656c7ae010b82ddefade7b36a834d4b5074b399eeba18bbe60fa01d6c2ffffb3e0c3ef", 0xf8}, {&(0x7f00000007c0)="dac43accaaf96e2b3024828e07854748c15de441f5647afa211d0c1452d91c83d7826a62f567d642", 0x28}], 0x4, &(0x7f0000000b80)=[@cred={{0x1c, 0x1, 0x2, {r8, r10}}}, @cred={{0x1c, 0x1, 0x2, {r4}}}], 0x40, 0x20008000}}, {{&(0x7f0000000bc0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000dc0)=[{&(0x7f0000000c40)="95635d64d6e0d4142e165c63b4b574e7fdc7", 0x12}, {&(0x7f0000000c80)="531df6e8091cea0ce85d90dc", 0xc}, {&(0x7f0000000cc0)="5c843dc3b6c608b01e866ce2bea04d0a05e720b565560fb6340d8ad09e184bb9e81abba3d53d4d42a20e9b8d8ee36269bc3841d8471e8c4ee853110dda0e3f9f48282ec093b07be5b2af5d30689b4f835dea", 0x52}, {&(0x7f0000000d40)="30d482886f7c3f724580daec326ee9c7ec91200fc740acf70563a4da06d5fae147bf75186c6b224c8a10a25cda350d04811d77989a799e264d2583feae140bf44c8e18500ec5bd4444173011037158845d3d6f21cb3a8c2c5504d8b9f9", 0x5d}], 0x4, &(0x7f0000000e40)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r3, 0xffffffffffffffff, r0, r1, r5, r6]}}, @rights={{0x20, 0x1, 0x1, [r5, r0, r7, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r4, 0x0, r11}}}], 0x70, 0x80}}, {{&(0x7f0000000ec0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f00000012c0)=[{&(0x7f0000000f40)="7c89130fea331c85b2d6c89a17e1aa59957a62d34fcc0b6eb233308b47194addce2905376dafdfce168c20889150b2a80f7b298e01fcef56e8dc0849d781cd74c190e02c5c7000878259cbb7ca6fa5b01db59cc96e0213b1d8218c3795822b0826609d74d7511b237847412ff359487251a090468f89f8c5ed92b3b9b358c5372c873d973d3697844e45ead67b", 0x8d}, {&(0x7f0000001000)="1979a897eb862d609f3e55a893188d6c7452d5c26b9021a4b0926d8e418c3719ba166d19347c8482bfcad4099725947f5adae298fe6c9dcf26d65c53987cd2601051", 0x42}, {&(0x7f0000001080)="c4d6001832e37212ec1866432736a76259eb8afb57ada5a199b5ac4dc65a65e91f61bbd52655d5cbcb3bb5bab86aa3e7a544229f042c4f06452679fe612e1998509c83f4bd956753c4f7dadc3f5441ea884ea8158503900c0aed4d5f0e41e0f1ebccda71336f8cb197c6", 0x6a}, {&(0x7f0000001140)="d9bf0fcf614f1614ce2b362e87296b663984a4551c721159ed8ffb17fb94240ff23368951ff5d04fe6208fec40143055f0a9055d36811917e7ee3f3545293d9bd0c26e220e9c5a5e7ff885748a79d308095f4a1a2ac4a049581bb2f8206568f128ff228a5768d099da8cb662b830acce0274367342f45c27592fe3de2b33de429ec55daa0a5cf359b727", 0x8a}, {&(0x7f0000000900)="e65b8241f7c5128b41e9fbfb8bfcc7cb87cbced3b49f644d94e498b579df97fb2f1bb1adde1aba8bd15b015f2f5dd1bee53a58bccae4a2a930769cc8ae1aec5dc7180ba20aafba4fd1d09c3064c153ca066c5fa07534fabc4e3481a11b877b8b13ed7091043d7675d228e029d550af4255558b791e7c9968aad4787c3c23e31803c41df0b2d8d8fe1c9bc7f59f0d1a2c365009146bfc7ffb867774b56043ec69e2adf00742712ea9d40a52c9e3b595ce35555480ea6d1a8deee4903a6bdf47a9711222701b7c6072ebbe80a325c24781e31e", 0xd2}, {&(0x7f0000001280)="7f82076396594e3c45d89a9f0fdc4a8e3eae06342122b0c08a3eb41b34cba008bbd73354ff9dcc2a3a4b271042342e7fab479a28d01a0c0b", 0x38}], 0x6, &(0x7f0000001480)=[@cred={{0x1c}}], 0x20, 0x24000000}}], 0x3, 0x4005)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="40000000180015ffe0000000ffffffff0a2000000002000000000000240009801c00000008000000140005"], 0x40}], 0x1}, 0xc040)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x17)
r13 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r13, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000680)=@chain)
r14 = creat(&(0x7f0000000000)='./file0\x00', 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r14, 0x8933, &(0x7f0000000040)={'vxcan1\x00', <r15=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x5, 0x14, 0xffffffff, 0x8, r14, 0x1, '\x00', r15, r14, 0x2, 0x0, 0xfffffffd, 0xb}, 0x50)

10.594338563s ago: executing program 4 (id=185):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r0, 0x0, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xc96f, 0x45}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004013}, 0x40000c0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r1=>0x0})
sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, r0, 0x800, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x84)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1c)
ioctl$KVM_CAP_DISABLE_QUIRKS2(r2, 0x4068aea3, &(0x7f00000000c0))
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000207d1e512d00000000000109022400010000000009040000010300020009210000000122050009058103"], 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0xa10844, &(0x7f0000000000), 0x1, 0x51a, &(0x7f0000000ac0)="$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")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
fallocate(r4, 0x0, 0x4, 0x88ffff)
syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x4400, &(0x7f00000002c0)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844b100e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x123b, &(0x7f0000000600)="$eJzs3E9rHGUcB/Bftlvzp+aPWqvtQR/wIh6WJgdPggRJQbKg1EZoBWFqJrpk3S2ZJbAiVk9efR2eexN8B7n4Grzl0mMP4sjObGrSJkQC2Vb9fA6ZH8/zfGeeIbMLM8yz++/99PX2VtHaygbRmJqKxr2I9ChFikYceGO93t6+s77abq/dTOnG6q3ld1NKC2/++tm30xFx6dMHC79Mx97S5/sPV37fu7J3df/PW191itQpUq8/SFm62+8PsrvdhbTZKbZbKX3czbMiT51eke8c6s/T1jsRMUxZb3N+7t5OXhQp6w3Tdj5Mg34a7AxT9mXW6aVWq5Xm54ITXTx9yMbPj8qyjCjLi/FClGVZzl4Ytb8Y87EQ30fES/FyvBKX49W4Eq/F63G1GjWB2QMAAAAAAAAAAAAAAAAAAMD/yFPr/2MuLo3X/y/GkvX/AAAAAAAAAAAAAAAAAAAAMAGf3L6zvtpur91MaSai++Puxu5Gva37l0Z/upHH9ViMP6Ja/V+r6xsftteup8pS/NC9P87f3924UOVXD/LL1c8JjPPNqu8gv1zn0zj/oM5Px9wovxWdKr8Si3H5+OOvHM2Pjz8Tb791KN+Kxfjti+hHNzarY/+d/245pQ8+aj+Rv1aNAwAAgP+CVnrs2Pv3Vuuk/jr/+P769OcDT9xfN+Na89meOxHF8JvtrNHNd6qie1DMPNVyfkWcMT6a/mljZuM8Jx/xsKyK6aNdjTPtMB9/HE4e04iJ/VP+QTH1fEzjuSrq56Vxxquueer1fI7FbBxteZbfSkzKoUsXAAAAAAAAAACAf5FzeJ2wMd71qKUZx7xZ9v7kTxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/mIHjgUAAAAAhPlbp9GxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFMFAAD//yYfuE0=")
chdir(&(0x7f0000000140)='./file0\x00')
r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x40)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
splice(r5, &(0x7f0000000040)=0x800000000000, r6, 0x0, 0x805, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x181441, 0x148)
fallocate(r7, 0x20, 0x4000, 0x8000)
ioctl$KVM_MEMORY_ENCRYPT_REG_REGION(0xffffffffffffffff, 0x8010aebb, &(0x7f0000000040)={0xeeee0000, 0x100000})
r8 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$TIOCOUTQ(r8, 0x5411, &(0x7f00000000c0))
ioctl$KDGKBDIACR(r8, 0x4b4a, &(0x7f0000000040)=""/96)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="b27f3e00000029fd8201c4"], 0x0}, 0x0)

10.194879152s ago: executing program 0 (id=187):
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1bf)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000340)=ANY=[])

10.157143063s ago: executing program 0 (id=188):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fd4000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000100)="f081550000a000000f0048180045000fbe252e8a094d36420f705626002e660f3a176a4b00b9800000c00f3267420f01c30f5966ba2c0cb8c087678eef66ba470f080ced45c1947166baf80cb817d27c8bef66bafc0cb02cee0000058a3bc4827dbcae009008f2", 0x67}], 0x1, 0x48, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x0, &(0x7f00000000c0)=[@cr4={0x1, 0x9e2}], 0x1)
ioctl$KVM_RUN(r2, 0xae80, 0xc00)

10.052002189s ago: executing program 0 (id=189):
r0 = socket(0x10, 0x803, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]})
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x437, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50561}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

10.02467704s ago: executing program 2 (id=190):
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x2010000, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYBLOB="5490f41e89db5c6987bb89944e3ce8a9d74aa557beeb12bf7bf4a19bec956b719f048f1e043475577b7adb3114dbb00a614a03808dfe14f5f5c2dd1b71c4d5a6a09435057b932b0b", @ANYRESHEX], 0x3, 0x240, &(0x7f0000000500)="$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")
r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000080)=0x10)
ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000140)={{0x2, 0x4e21, @remote}, {0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x2c, {0x2, 0x4e24, @loopback}, 'veth0_macvtap\x00'})
syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fremovexattr(r1, &(0x7f00000000c0)=@random={'system.', 'veth0_macvtap\x00'})
mkdirat(r1, &(0x7f00000004c0)='./bus/file0\x00', 0x2)
renameat2(r1, &(0x7f0000000240)='./bus/file0\x00', r1, &(0x7f00000001c0)='./file0\x00', 0x2)

9.950762233s ago: executing program 2 (id=191):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00'})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000300)=0x3, 0x4)
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1, 0x553a, &(0x7f0000006040)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x2000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x93)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003100)=[{{&(0x7f0000000580)=@can, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000600)=""/92, 0x5c}, {&(0x7f0000000680)=""/198, 0xc6}, {&(0x7f0000000780)=""/209, 0xd1}, {&(0x7f0000000880)=""/103, 0x67}, {&(0x7f0000000980)=""/123, 0x7b}, {&(0x7f0000000a00)=""/149, 0x95}, {&(0x7f0000000ac0)=""/130, 0x82}, {&(0x7f0000000b80)=""/53, 0x35}, {&(0x7f0000000bc0)=""/81, 0x51}, {&(0x7f0000000c40)=""/209, 0xd1}], 0xa, &(0x7f0000000e00)}, 0x6}, {{&(0x7f0000000e40)=@un=@abs, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000ec0)=""/110, 0x6e}], 0x1}, 0x8}, {{&(0x7f0000000f80)=@nfc_llcp, 0x80, &(0x7f0000001280)=[{&(0x7f0000001000)=""/145, 0x91}, {&(0x7f00000010c0)=""/172, 0xac}, {&(0x7f0000001180)=""/202, 0xca}], 0x3, &(0x7f00000012c0)=""/232, 0xe8}, 0x81}, {{&(0x7f00000013c0)=@in, 0x80, &(0x7f00000014c0)=[{&(0x7f0000001440)=""/127, 0x7f}], 0x1, &(0x7f0000001500)=""/87, 0x57}}, {{0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f0000001580)=""/53, 0x35}, {&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f0000002940)=""/4, 0x4}, {&(0x7f0000002980)=""/137, 0x89}], 0x4, &(0x7f0000002a80)=""/50, 0x32}, 0x4}, {{&(0x7f0000002ac0)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000002b40)=""/224, 0xe0}, {&(0x7f0000002c40)=""/208, 0xd0}, {&(0x7f0000002d40)=""/80, 0x50}], 0x3, &(0x7f0000002e00)=""/243, 0xf3}, 0x9}, {{&(0x7f0000002f00)=@nfc, 0x80, &(0x7f0000003000)=[{&(0x7f0000002f80)=""/7, 0x7}, {&(0x7f0000002fc0)=""/18, 0x12}], 0x2, &(0x7f0000003040)=""/165, 0xa5}}], 0x7, 0x141, 0x0)
pipe2$9p(&(0x7f0000001900), 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4c142, 0x0)
truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd)
sendfile(r5, r5, 0x0, 0xe3aa6ea)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r6 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000140)=@ethtool_gstrings={0x1b, 0x9}})
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612)
nanosleep(&(0x7f0000000200)={0x0, 0x2faf080}, 0x0)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0xe8, 0x0, 0xac}]})
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
creat(&(0x7f0000000040)='./bus\x00', 0x0)
unshare(0x2040400)

9.950488803s ago: executing program 0 (id=192):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x1000)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2)
syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x3008401, &(0x7f0000002ac0)=ANY=[], 0x2, 0x200, &(0x7f0000000680)="$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")
ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020660b, &(0x7f0000000040)={0x4fc, 0x10000002000003})
unshare(0x400)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000000000/0x400000)=nil)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0xf)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x80382, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = socket$inet6(0xa, 0x80002, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8)
prlimit64(0x0, 0xb, &(0x7f0000000140), 0x0)
r2 = getpid()
r3 = syz_pidfd_open(r2, 0x0)
setns(r3, 0x24020000)
r4 = syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
rt_sigqueueinfo(r4, 0x7, &(0x7f0000000080)={0x35, 0x20a, 0xfffffff2})
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0x5}, 0x1c)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000)
sendmsg$inet(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x8000)
sendto$inet6(r0, &(0x7f0000000440)="b0b4", 0x2, 0x4044800, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1e, 0x5, 0x0, &(0x7f0000000100)={<r6=>0xffffffffffffffff})
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x18, 0x30, 0xffff, 0x1000000, 0x0, {0x0, 0x0, 0x1300}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x2000c010}, 0x0)

9.908024275s ago: executing program 0 (id=193):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
socketpair(0x28, 0xa, 0x0, &(0x7f0000000080))
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r3, &(0x7f0000000080), &(0x7f0000003240)=""/177}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r4}, 0xc)
ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f00004a3000/0x2000)=nil})
ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, &(0x7f0000000000)={0x9, 0x2a})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = epoll_create1(0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
r8 = fcntl$dupfd(r6, 0x406, r5)
r9 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r6, &(0x7f00000022c0)={0x4002})
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000002280)={0x20000008})
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r7, &(0x7f00000002c0)={0xa0000013})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

9.80863175s ago: executing program 0 (id=194):
socket$igmp(0x2, 0x3, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
userfaultfd(0x80801)
syz_usb_connect(0x0, 0x62, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d24060101030200010006000609240305050306058109240306010304050507"], 0x0)

9.732937253s ago: executing program 33 (id=194):
socket$igmp(0x2, 0x3, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
userfaultfd(0x80801)
syz_usb_connect(0x0, 0x62, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d24060101030200010006000609240305050306058109240306010304050507"], 0x0)

8.990619558s ago: executing program 2 (id=202):
r0 = syz_socket_connect_nvme_tcp()
r1 = socket$netlink(0x10, 0x3, 0x14)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = accept4$unix(r3, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e, 0x80000)
syz_emit_ethernet(0x2a, &(0x7f0000000100)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @remote, @empty, @multicast, @dev={0xac, 0x14, 0x14, 0x43}}}}}, &(0x7f0000000140)={0x0, 0x3, [0x38b, 0x48e, 0x770, 0xac6]})
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000000180)={0x5, {{0xa, 0x4e23, 0xf13, @private0, 0x1}}}, 0x88)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/key-users\x00', 0x0, 0x0)
r7 = accept4(r5, &(0x7f0000000280)=@nl=@unspec, &(0x7f0000000300)=0x80, 0x0)
sendmsg$NFNL_MSG_CTHELPER_DEL(r7, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, 0x2, 0x9, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1b}, @NFCTH_QUEUE_NUM={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7fff}, @NFCTH_TUPLE={0xc, 0x2, [@CTA_TUPLE_ZONE={0x6}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000010}, 0xc080)
mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1)
sendmsg$nl_route_sched(r7, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)=@delqdisc={0xcc, 0x25, 0x100, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0xc}, {0x5, 0xfff2}, {0x2, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xffffd1c4}, @qdisc_kind_options=@q_cbq={{0x8}, {0x34, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x32, '\x00', 0x7, 0xf, 0x3f98, 0xb0}}, @TCA_CBS_PARMS={0x18, 0x1, {0xe9, '\x00', 0x3, 0x9, 0x7, 0x5}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x4}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}, @TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf, 0x4, 0x1, 0x8, 0x1, 0xffffffff, 0xd, 0x4}}, {0xc, 0x2, [0x0, 0x4, 0x1, 0xae1]}}]}, @qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x6, 0x1}}}, @qdisc_kind_options=@q_ingress={0xc}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x200}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040)
ioctl$FIBMAP(r1, 0x1, &(0x7f0000000600)=0xfffff8de)
mlock2(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1)
ioctl$AUTOFS_IOC_ASKUMOUNT(r4, 0x80049370, &(0x7f0000000640))
connect$inet(r6, &(0x7f0000000680)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f00000006c0)={0xc, @private=0xa010102, 0x4e21, 0x4, 'lc\x00', 0x9a523fe82fbb1335, 0x3, 0x4}, 0x2c)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000700)={'batadv0\x00', <r8=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x19, 0x7, 0x3, 0xff, 0x8000, r6, 0x82, '\x00', r8, r6, 0x2, 0x4, 0x5, 0x0, @value=r6}, 0x50)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f00000007c0)={0x101ff, 0x7, 0x50000, 0x1000, &(0x7f0000ffd000/0x1000)=nil})
mkdirat(r6, &(0x7f0000000800)='./file0\x00', 0x18)
accept4(r7, &(0x7f0000000840)=@phonet, &(0x7f00000008c0)=0x80, 0x80800)
ioctl$UFFDIO_MOVE(r6, 0xc028aa05, &(0x7f0000000900)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xe000)=nil, 0x4000, 0x2})
clock_gettime(0x0, &(0x7f0000008240)={<r9=>0x0, <r10=>0x0})
recvmmsg(r2, &(0x7f0000007fc0)=[{{&(0x7f0000000940)=@can, 0x80, &(0x7f0000000d80)=[{&(0x7f00000009c0)=""/129, 0x81}, {&(0x7f0000000a80)=""/6, 0x6}, {&(0x7f0000000ac0)=""/84, 0x54}, {&(0x7f0000000b40)=""/115, 0x73}, {&(0x7f0000000bc0)=""/247, 0xf7}, {&(0x7f0000000cc0)=""/133, 0x85}], 0x6, &(0x7f0000000e00)=""/195, 0xc3}, 0x10001}, {{&(0x7f0000000f00)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000003300)=[{&(0x7f0000000f80)=""/64, 0x40}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000001fc0)=""/103, 0x67}, {&(0x7f0000002040)=""/170, 0xaa}, {&(0x7f0000002100)}, {&(0x7f0000002140)=""/241, 0xf1}, {&(0x7f0000002240)=""/4096, 0x1000}, {&(0x7f0000003240)=""/192, 0xc0}], 0x8, &(0x7f0000003380)}, 0xb}, {{&(0x7f00000033c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000003a80)=[{&(0x7f0000003440)=""/238, 0xee}, {&(0x7f0000003540)=""/56, 0x38}, {&(0x7f0000003580)}, {&(0x7f00000035c0)=""/160, 0xa0}, {&(0x7f0000003680)=""/145, 0x91}, {&(0x7f0000003740)=""/158, 0x9e}, {&(0x7f0000003800)=""/228, 0xe4}, {&(0x7f0000003900)=""/142, 0x8e}, {&(0x7f00000039c0)=""/180, 0xb4}], 0x9, &(0x7f0000003b40)=""/4096, 0x1000}, 0x5}, {{0x0, 0x0, &(0x7f0000004d00)=[{&(0x7f0000004b40)=""/45, 0x2d}, {&(0x7f0000004b80)=""/80, 0x50}, {&(0x7f0000004c00)=""/164, 0xa4}, {&(0x7f0000004cc0)}], 0x4, &(0x7f0000004d40)=""/120, 0x78}, 0x9}, {{&(0x7f0000004dc0)=@in, 0x80, &(0x7f0000004f00)=[{&(0x7f0000004e40)=""/182, 0xb6}], 0x1, &(0x7f0000004f40)=""/223, 0xdf}, 0xfffffffa}, {{&(0x7f0000005040)=@can, 0x80, &(0x7f00000051c0)=[{&(0x7f00000050c0)=""/39, 0x27}, {&(0x7f0000005100)=""/162, 0xa2}], 0x2, &(0x7f0000005200)=""/240, 0xf0}, 0x3}, {{&(0x7f0000005300)=@caif=@dbg, 0x80, &(0x7f0000005480)=[{&(0x7f0000005380)=""/43, 0x2b}, {&(0x7f00000053c0)=""/173, 0xad}], 0x2, &(0x7f00000054c0)=""/221, 0xdd}, 0x7}, {{&(0x7f00000055c0), 0x80, &(0x7f0000006980)=[{&(0x7f0000005640)=""/4096, 0x1000}, {&(0x7f0000006640)=""/62, 0x3e}, {&(0x7f0000006680)=""/186, 0xba}, {&(0x7f0000006740)=""/83, 0x53}, {&(0x7f00000067c0)=""/79, 0x4f}, {&(0x7f0000006840)=""/103, 0x67}, {&(0x7f00000068c0)=""/164, 0xa4}], 0x7, &(0x7f0000006a00)=""/255, 0xff}, 0x5}, {{&(0x7f0000006b00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000006c80)=[{&(0x7f0000006b80)=""/96, 0x60}, {&(0x7f0000006c00)=""/73, 0x49}], 0x2, &(0x7f0000006cc0)=""/206, 0xce}, 0x47904929}, {{&(0x7f0000006dc0)=@nl=@proc, 0x80, &(0x7f0000007f80)=[{&(0x7f0000006e40)=""/50, 0x32}, {&(0x7f0000006e80)=""/246, 0xf6}, {&(0x7f0000006f80)=""/4096, 0x1000}], 0x3}, 0xc70}], 0xa, 0x0, &(0x7f0000008280)={r9, r10+10000000})
getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000082c0), 0x10)
open_tree(r6, &(0x7f0000008300)='./file0\x00', 0x88100)
r11 = accept4$tipc(r6, &(0x7f0000008340), &(0x7f0000008380)=0x10, 0x80800)
bind$tipc(r11, &(0x7f00000083c0)=@name={0x1e, 0x2, 0x3, {{0x1, 0x1}, 0x3}}, 0x10)
futex(&(0x7f0000008400)=0x2, 0x7, 0x1, &(0x7f0000008480), &(0x7f00000084c0)=0x2, 0x0)

8.841654725s ago: executing program 4 (id=204):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x1000)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2)
syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x3008401, &(0x7f0000002ac0)=ANY=[], 0x2, 0x200, &(0x7f0000000680)="$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")
ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020660b, &(0x7f0000000040)={0x4fc, 0x10000002000003})
unshare(0x400)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000000000/0x400000)=nil)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0xf)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x80382, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = socket$inet6(0xa, 0x80002, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8)
prlimit64(0x0, 0xb, &(0x7f0000000140), 0x0)
r2 = getpid()
r3 = syz_pidfd_open(r2, 0x0)
setns(r3, 0x24020000)
r4 = syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
rt_sigqueueinfo(r4, 0x7, &(0x7f0000000080)={0x35, 0x20a, 0xfffffff2})

8.72722796s ago: executing program 4 (id=207):
syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000980)=ANY=[], 0x4, 0x291, &(0x7f0000000600)="$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")
r0 = syz_usb_connect$cdc_ncm(0x2, 0x8f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109027d0002010080000904000001020d0000052406000105240000000d240f0103050000fd0000000406241aff072908241c0101090000142413099f33760000000000000000c8a04d113905241510000905810300020800040904010000020d00000904010102020d000009bc82020002e1ad000905"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000300)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000c00)={0x20, 0x80, 0x1c, {0x9f32, 0x1, 0xfffffffe, 0x5, 0x8, 0x6, 0x4482, 0x2, 0xfffd, 0x8c8, 0x4000, 0x9}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

8.574576647s ago: executing program 4 (id=209):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x4, 0x4, 0xa, 0x80, 0x0}, 0x50)
close(0x3)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xa, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x1, 0x1, 0xc00, r0}, @ldst={0x2, 0x0, 0x3, 0xa, 0x0, 0xfffc}, @alu={0x7, 0x1, 0xb, 0x2, 0xa}, @alu={0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc}, @call={0x85, 0x0, 0x0, 0x1}, @jmp={0x5, 0x0, 0x5, 0x0, 0x0, 0x1}, @exit, @ldst={0x1, 0x0, 0x3, 0x1}, @exit], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

8.507252121s ago: executing program 34 (id=209):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x4, 0x4, 0xa, 0x80, 0x0}, 0x50)
close(0x3)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xa, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x1, 0x1, 0xc00, r0}, @ldst={0x2, 0x0, 0x3, 0xa, 0x0, 0xfffc}, @alu={0x7, 0x1, 0xb, 0x2, 0xa}, @alu={0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc}, @call={0x85, 0x0, 0x0, 0x1}, @jmp={0x5, 0x0, 0x5, 0x0, 0x0, 0x1}, @exit, @ldst={0x1, 0x0, 0x3, 0x1}, @exit], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

8.080328721s ago: executing program 2 (id=211):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f00000007c0)={0x1f, 0x0, @none, 0x4}, 0xe)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000040)={0x9, 0x1}, 0x2)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x210000, &(0x7f0000000140)={[{@nodelalloc}, {@dioread_lock}, {@jqfmt_vfsv1}, {@abort}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x7}}, {@bh}, {@auto_da_alloc}]}, 0x1, 0x56f, &(0x7f0000003780)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x3, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x8, 0x1, 0x40, 0x42}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000240)={r1, &(0x7f0000000100), 0x0}, 0x20)
chdir(&(0x7f00000003c0)='./bus\x00')
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x40)

7.948763727s ago: executing program 2 (id=212):
setresuid(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$XFS_IOC_READLINK_BY_HANDLE(r0, 0xc038586c, &(0x7f0000000280)={r0, &(0x7f0000000040)='!*$\xfe\xfef\xcb\x00', 0x20300, &(0x7f0000000140)={@_ha_fsid={[0x2, 0x7cb]}, {0x5, 0x40, 0x73e129cb, 0x4}}, 0x5, &(0x7f0000000200), &(0x7f0000000240)=0x7ff})
mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000800850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/thread-self/fail-nth\x00', 0x2002, 0xc0)
write(r2, &(0x7f0000000000)='7', 0x1)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r2, 0x0)
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f000045c000/0x2000)=nil, &(0x7f0000d27000/0x1000)=nil, 0x2000, 0x1, 0x2})

7.226838301s ago: executing program 2 (id=218):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x2, 0x7ffc0002}]})
getuid()
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
clock_gettime(0x0, &(0x7f0000000080))
userfaultfd(0x80001)
bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x1f, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000090070000000000f8ff000000711825000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)

7.190939982s ago: executing program 35 (id=218):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x2, 0x7ffc0002}]})
getuid()
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
clock_gettime(0x0, &(0x7f0000000080))
userfaultfd(0x80001)
bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x1f, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000090070000000000f8ff000000711825000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)

6.429677638s ago: executing program 8 (id=220):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000001c40)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000060000000400000000000007000000000000000061"], 0x0, 0x2a}, 0x28)
bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000000340)=@base={0x8, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x700, '\x00', 0x0, r0, 0x0, 0x1}, 0x50)

6.429359838s ago: executing program 8 (id=224):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000001000)={0x0, &(0x7f0000002000)=[@wrmsr={0x65, 0x20, {0x400000f1}}], 0x20})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000440)={'sit0\x00', 0x0})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f6, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @broadcast}}}})
socket$inet6(0xa, 0x80002, 0x0)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x40042, 0x101)
io_setup(0x20, &(0x7f0000001140))
write(0xffffffffffffffff, &(0x7f00000000c0)="1800000016005f0214fffffffffffff80700000001", 0x15)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5400000002030101000000fcffffff000700000a09000200000000090100000008000540000000000800054000000022090002000000fcb9010000000800"], 0x54}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000)
syz_usb_connect$uac2(0x2, 0x89, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1235, 0x8210, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x77, 0x3, 0x1, 0x0, 0x40, 0x8, {0x8, 0xb, 0x1, 0x2, 0x1, 0xb, 0x20, 0xff}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x9, 0x7, 0x17, 0x2}, [@selector_unit={0x5, 0x24, 0xb, 0x1}, @processing_unit={0x9, 0x24, 0x8, 0x3, 0x3, [0x2, 0x1]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x5, 0x7, 0x2, {0x8, 0x25, 0x1, 0x0, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x3, 0x7, 0x2, {0x8, 0x25, 0x1, 0x1, 0x30, 0x1, 0x7}}}}}}}}]}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000003000)={0x1, 0x0, [{0x40000001, 0x0, 0x0, 0x31237648, 0x8001}]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

3.121324543s ago: executing program 8 (id=239):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xd)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000f40)=ANY=[@ANYBLOB="50000000480011012abd7000fedbdf250a006000", @ANYRES32=0x0, @ANYBLOB="02000000080002000700000008000200070000000800020000000000140001"], 0x50}}, 0x10)
pipe(&(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
timerfd_settime(r3, 0x0, &(0x7f0000000180)={{0x77359400}}, 0x0)
r4 = socket(0x10, 0x803, 0x0)
write(r4, &(0x7f0000000900)="2600000022004701050007008980e8ff02006d20002b1f00c0e9f7094a51f10101033500b088", 0x26)
r5 = syz_usb_connect(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYRES32=r1], 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000640)=ANY=[@ANYBLOB="0003000000000000006ddfa866d9f33c6bde26f76cce36ff84bf4c249d99b94d965685b3a743d17df7586652b936446a20e5311df7c0554ace76c178fd93b3606a166902e77c96e7919c9e1590343ab58ee2a3fb0af5c8c713c7c6cd4d1aabc57dac4f05c58b7a7ceda4ba3d0a9430aec7f1ab716fef510724766a706ddb49a3a106432c2a1e7f68b95988af699f8c9ae265497b13ce0ecd4fb76022e72caeb4dd47e0c2e8e4db6941b4731812f6c643e9061964e2"], 0x0, 0x0, 0x0, 0x0})
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
syz_usb_connect$cdc_ecm(0x2, 0x66, &(0x7f0000000c00)=ANY=[@ANYBLOB="12015002020000202505a1a4400001020301090254000101e2b0060904000f02020600bd07240600000fbb052400ff010d240f0109000000038000007d052401020104240201052415090009058103ff0308050109058202ff03014964090503022000054109e27edee8426f9e3017bf"], &(0x7f0000000840)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x201, 0xc, 0x6, 0x5, 0x40, 0x2}, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="050f05001e2300388e1d00"], 0x9, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x445}}, {0xba, &(0x7f00000003c0)=ANY=[@ANYBLOB="ba03200593b1cf1f30ea982e942474b5b440246449c0264fbf9dc5c217390500cee023de132b77dab1f58b69210689d5d8ca1e01e337e324847c20411347668bc2381ce458bb0248e995856582728717acdb23f8b6aff9a20f879ca139023b968851627de97997030db00d53a02555520b031f759ef219b99016cb27ea0f51624d4d6c5ed34acc19ea076be6ab9378c23df8355dacca039d1ca986d04e23f4ff68277a3e7972209c6aebffdbf10a413840853ccb393b73697fe1"]}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x412}}, {0xc4, &(0x7f0000000500)=@string={0xc4, 0x3, "6528beae0be84f040285a8349da986d21fce82b12ce92d1749448b921513af1999c61ac55ede24b5ea59157c11e47bc4849298a6f1d68011a9a1c0cce3982178c371eb9fb847f1194e3415b7bff955824f29b151d0bb4b3904925b1227430c0348d4cb3faf4daa0a3c6f4b6ffd3142eb0b92fcc8facb9ef16bdd070663afa209059399d676fd620bab0ffc2047cf3e5bdb4c6c1da93479112e909a78f7d5b66c3ce1f3ab0fa6a60660b55efc7166b1e0413500"/194}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x42f}}, {0x9e, &(0x7f0000000ac0)=ANY=[@ANYBLOB="9e035c0af9240e54e3ee4d5bc9f5eb8f977a827366946d28fc915389ccc4f8f90b69c83811afdb98c097b2398d92565055d71e17ffbfccb6beae9a8545afedc1552cb031427edd455d2c7417d298b0ed61b564c83de08758ab1e2008008f3189ecb41e7281eb2eca72c27d5694aea4cf9fc5c4a2bbeaefe0c0faa9cd7ef588b509e8e9f56a39568548124b40f832ae34719b03c90c78d6cf8c268d2cdf90", @ANYRESOCT=r4]}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x421}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x1007}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x4c0a}}]})
sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3805000000b8", @ANYRES16=r6, @ANYBLOB="010025bd700000dcdf2509000000"], 0x1c}, 0x1, 0x0, 0x0, 0x488c1}, 0x6010)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r7 = syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x6, 0x2000004, 0x8010, r2, 0x20000000)
syz_io_uring_setup(0xcef, &(0x7f0000000480)={0x0, 0xce5c, 0x1000, 0x2, 0xa4, 0x0, r3}, &(0x7f00000002c0), &(0x7f0000000a40)=<r10=>0x0, &(0x7f0000000a80))
syz_io_uring_complete(r9, r10)
setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f00000010c0)={0x80000001, 0x3ffffff, 0xffffffff, 0x3}, 0x10)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\n\x00'/20, @ANYRES32=0x0, @ANYBLOB="1400060000000000040000000800000009000000"], 0x2c}}, 0x840)
r11 = socket$nl_route(0x10, 0x3, 0x0)
r12 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x14, 0x15, 0x1, 0x0, 0x0, {0xa}}, 0x14}}, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000001800356a00000000000000000a800000ff030006000000001400010002"], 0x30}}, 0x0)
process_vm_writev(r7, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0xd8d0481}], 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)

1.716852989s ago: executing program 6 (id=250):
r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
read$FUSE(r0, &(0x7f0000000840)={0x2020}, 0x2020)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000080)={0x1000, {{0xa, 0x4e20, 0xfffffff8, @empty, 0xc}}}, 0x88)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c4)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000000c0)={0x60, 0x0, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x4, 0x1, @priority={{{}, {}, {0x0, 0x4, 0x9}}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000c11}, 0x4004810)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x240, 0x240, 0x0, 0x350, 0x370, 0x350, 0x4, 0x0, {[{{@arp={@private, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_to_batadv\x00', 'batadv0\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "bc2e329885ea3654891fbae8c6c66e07212432bde429bcda7deb48d85c6f5e269c2021c8f8dc09af0b3f2e10e8ac79cc67e264613c4be6838ee2daacf7926a6e"}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr, @broadcast}}}, {{@arp={@private, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0\x00', 'veth0_to_bond\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000040)=0x9, 0x4)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x3a, &(0x7f0000002240)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x10, 0x11, 0x0, @empty, @empty}, {0x4e22, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x8, 0x2000000000004}}}}}}, 0x0)
recvmmsg(r1, &(0x7f0000000040), 0x400000000000338, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x6, 0x9, &(0x7f00000002c0)={{0xff, @rand_addr, 0x0, 0x2, 'wlc\x00', 0x29, 0x2, 0x3}, {@dev={0xac, 0x14, 0x14, 0x3f}, 0xffff, 0x3, 0x5, 0x6a, 0x2}}, 0x44)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x804000, &(0x7f0000000480), 0x1, 0x3d0, &(0x7f00000004c0)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x0, 0x3ff, 0x0, 0x6})
r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000240)={0xdf, 0x0, 0x4000})
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000940)={0x2, 0x0, @ioapic={0x5000, 0x8104, 0x1, 0xfffffffe, 0x0, [{0x7, 0xc, 0x7, '\x00', 0x38}, {0x9, 0xde, 0x7a, '\x00', 0x9}, {0x2, 0xb3, 0x1, '\x00', 0x5}, {0x5, 0x9, 0x6, '\x00', 0x4}, {0x5, 0x5, 0x6, '\x00', 0x7c}, {0x0, 0x80, 0x0, '\x00', 0x6}, {0x4, 0x8, 0xff, '\x00', 0x45}, {0x52, 0xc, 0x9, '\x00', 0x7}, {0x7, 0x6, 0x73, '\x00', 0x3}, {0x1, 0xb7, 0x89, '\x00', 0x7}, {0x16, 0x24, 0xa9, '\x00', 0x81}, {0x3, 0x1, 0x17, '\x00', 0xb}, {0x6, 0x5, 0x5, '\x00', 0x3}, {0x19, 0x9, 0x89, '\x00', 0x4}, {0x5, 0x1, 0x3, '\x00', 0x1}, {0x8, 0x9, 0xcb, '\x00', 0x5}, {0x4, 0xe, 0xb, '\x00', 0x5}, {0x9, 0x0, 0xfa, '\x00', 0x5}, {0x44, 0x3, 0x3}, {0xf4, 0x8, 0x7, '\x00', 0xf8}, {0x4, 0x7, 0x31, '\x00', 0xf7}, {0x7, 0x87, 0xe6, '\x00', 0xb}, {0xff, 0x8, 0x3, '\x00', 0xa}, {0x7, 0x87, 0x4, '\x00', 0xff}]}})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000070, 0x0, 0x400006}]})

1.588501265s ago: executing program 1 (id=251):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000007680)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x190, 0x111, 0x4b4, 0x190, 0x700, 0x2c8, 0x278, 0x278, 0x2c8, 0x278, 0x3, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @empty, [], [], 'pimreg\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x0, 0x0, 0x6f}, 0x0, 0x128, 0x190, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0x8, [0x4, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x200, 0x1, 0x0, 0x1], [0x20, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x1]}}, @common=@ah={{0x30}, {[0x4d6, 0x4d2], 0x2, 0x5, 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, [0x0, 0x0, 0xffffff00], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$VHOST_SET_VRING_ENDIAN(r1, 0x4008af13, &(0x7f0000000240)={0x3, 0x1})
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f00000000c0), &(0x7f0000000100)=r3}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x1000000, &(0x7f00000018c0)=ANY=[], 0xf9, 0x1501, &(0x7f00000002c0)="$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")
bind$802154_raw(0xffffffffffffffff, 0x0, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="6c0100001000130700000000fcdbdf080000000000000000000000000000000020010000004e210002020000001d00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x10810}, 0x48080)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2a442, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4012011, r8, 0x0)
mkdir(0x0, 0x0)
renameat2(0xffffffffffffff9c, 0x0, r8, 0x0, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
fsync(r8)
setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4)
ioctl$OCFS2_IOC_RESVSP64(r3, 0x4030582a, &(0x7f0000000040)={0x0, 0x2, 0x7, 0x3, 0x564f, 0x4})
sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000)

1.588288845s ago: executing program 5 (id=252):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x4, 0x4, 0xa, 0x80, 0x0}, 0x50)
r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f0000000000), &(0x7f0000000140)=r1}, 0x20)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0)
clock_adjtime(0x0, &(0x7f0000000040)={0x37db, 0x3, 0x8000, 0x0, 0x0, 0x9, 0x0, 0x200000000, 0x3, 0x80000, 0x2, 0x800000000000000, 0x0, 0x100000000, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x1, 0x6})
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x9, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @ldst={0x2, 0x0, 0x3, 0xa, 0x0, 0xfffc}, @alu={0x7, 0x1, 0xb, 0x2, 0xa}, @alu={0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc}, @call={0x85, 0x0, 0x0, 0x1}, @jmp={0x5, 0x0, 0x5, 0x0, 0x0, 0x1}, @exit, @exit], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.546383927s ago: executing program 5 (id=254):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f00004a3000/0x2000)=nil})
ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, &(0x7f0000000000)={0x9, 0x2a})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000080)={[0x2, 0x25000, 0x1ff8, 0xd000], 0xd, 0x46, 0x1})

1.446870501s ago: executing program 6 (id=255):
r0 = syz_mount_image$f2fs(&(0x7f0000000200), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="6e6f67635f6d657267652c6e6f666c7573685f6d657267652c6163746976655fa62488964c8f7ec0fef23567a86c6c6f635f6d6f64654e72657573652c636865636b706f696e743d64697361626c652c64697361626c655f726f6c6c5f666f72776172642c6e6f626172726965722c6261636b67726f756e645f67633d6f6666286673796e635f6d6f64653d706f73d669782c757365725f78617474722c646174615f666c7573682c6d6f64653d61646170746976652c6a71666d743d7666736f6c642c6ec06f30f483c1d7da2d870a2b912448d9fc7f309c65ed7f71e088a7f86f42282124971415ac98f237e474a7f8c8661fee99ce8d9ceb68cf53a3b80228cc12c344fd1e6d4b085e44272d272a5fed88cbff28e55133b030e49fa1205fee"], 0x1, 0x5505, &(0x7f0000002480)="$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")
pipe2(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, &(0x7f0000000100)=0xfffffffa, 0x4)
bind$inet(r2, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10)
recvmmsg(0xffffffffffffffff, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/130, 0x82}, 0xdb2a}], 0x1, 0x40032061, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x28040041, &(0x7f00000000c0)={0x2, 0x24e23, @loopback}, 0x10)
sendmsg$inet(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="17", 0x1}], 0x1}, 0x48c0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000040)=0x193a, 0x4)
recvmmsg(r2, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0)
write$FUSE_INIT(r1, &(0x7f0000000400)={0x6f, 0x0, 0x0, {0x7, 0x28, 0x80000001, 0x0, 0x0, 0x0, 0x2, 0x1}}, 0xfffffede)
vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x1000000000000000)
fcntl$setpipe(r1, 0x407, 0x100000)
r3 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0)
ftruncate(r3, 0x2007ffc)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x4}, 0x68)
sendfile(r3, r3, 0x0, 0x2000000000006)
io_setup(0x6, &(0x7f0000000000)=<r4=>0x0)
io_submit(r4, 0x6, &(0x7f0000000900)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x3, 0x7ff, r0, &(0x7f0000000240)="2c1e30cd05f7e6084b8de2a172a1243489a087d4abd43a4d5a2f587e29b6d78bfb3c9ae3ac42eb23bf3dc658da47173b74bc30cfcf04d5bff241f8eb8274449f46e9454a688a6c4e4050921842cc38ea202a0f86c6cbbb19d42e5d2155bcadf9b294a686ba5d71fb", 0x68, 0x2, 0x0, 0x1, r3}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x40, r0, 0x0, 0x0, 0x2, 0x0, 0x2, r3}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x5, 0x3, r0, 0x0, 0x0, 0x1, 0x0, 0x0, r3}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x8, 0x9, r3, &(0x7f0000000700), 0x0, 0xffffffff7fffffff, 0x0, 0x2, r3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x5, 0x8, r0, &(0x7f0000000780)="f91fd361af810af8b708b11f6af681a29278691b8320d160691314085b", 0x1d, 0x4, 0x0, 0x3, r3}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x6, 0x5, r0, &(0x7f0000000800)="85a2353f110588db58f8d7013e6209989c64376596484b37250a5cbb6374371f53117db5fc0147e56359cd614abe4d76cb13dccf0481e929d5d811ac5563ee2c88cae7c601f07ebaf05e4a6714391ec6a259684a3bb2d77ce4b439ea9aace8e9629c2ac8d68b65876a81677b98e69234f4ee67f784667d31f189b196ee23c82c0249d00add", 0x85, 0x29, 0x0, 0x3, r3}])
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1018ed8, &(0x7f0000000440)={[{@sysvgroups}, {@noload}, {@mblk_io_submit}, {@jqfmt_vfsv0}, {@discard}, {@nouid32}, {@grpquota}, {@quota}]}, 0x6, 0x659, &(0x7f00000013c0)="$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")
creat(&(0x7f00000000c0)='./bus\x00', 0x1c3)

1.355808086s ago: executing program 5 (id=256):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x1000)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2)
syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x3008401, &(0x7f0000002ac0)=ANY=[], 0x2, 0x200, &(0x7f0000000680)="$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")
ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020660b, &(0x7f0000000040)={0x4fc, 0x10000002000003})
unshare(0x400)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000000000/0x400000)=nil)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0xf)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x80382, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = socket$inet6(0xa, 0x80002, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8)
prlimit64(0x0, 0xb, &(0x7f0000000140), 0x0)
r2 = getpid()
r3 = syz_pidfd_open(r2, 0x0)
setns(r3, 0x24020000)
rt_sigqueueinfo(0x0, 0x7, &(0x7f0000000080)={0x35, 0x20a, 0xfffffff2})

1.2678027s ago: executing program 5 (id=257):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xf, 0x4, 0x8, 0x1}, 0x37)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0xe, 0xf, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000080018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000ff7f0000b7030000000000008500000083000000bf090000000000005509010000"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x25}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r1, r4, 0x5}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r1}, &(0x7f0000000100), &(0x7f0000000140)=r0}, 0x20)
sendmsg(r2, &(0x7f00000029c0)={0x0, 0x803e, &(0x7f0000001680)=[{&(0x7f0000001400)='H', 0x20001401}], 0x1}, 0x0)

719.987195ms ago: executing program 1 (id=258):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0xa5ac96153ea70e4b, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = userfaultfd(0x801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000001040)={0xaa, 0x494})
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00007e1000/0x4000)=nil, 0x4000}, 0x2})
ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000080)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}})
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', <r4=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000005b80)={@loopback={0xfec0ffffffffffff}, 0x32, r4})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
r7 = dup2(r5, r6)
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x6f, r4})
syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0)
syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x210008, &(0x7f0000000280)={[{@debug}, {@max_batch_time={'max_batch_time', 0x3d, 0xffffffffffff93f8}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0xffffffffffffffff, 0x2, &(0x7f0000000380)=0x8)
r8 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
connect$unix(r9, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r10, &(0x7f0000005500)=[{{&(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000004c0), 0x0, 0x0, 0x0, 0x10}}, {{&(0x7f0000000500)=@abs={0x1, 0x0, 0x4e20}, 0x42, &(0x7f0000000680)=[{&(0x7f0000000580)="b3295d0efefb7077d59167a7ffd310f5df20bbd15d0bb9daeaee02d965f3a80888e53359b8e23835bec1f77fe0911aa45f5fc22e39c8eeda65727dad7e131a547ff738315b2bd7ab6e322330bdf1cc2466ceb72ce9e933aff8253d33594c456965b9320b48bddd13a2b05fced92076f9a3b217766a0d291167f478042ba2061f544432d203387f65f72bcbbd74e7c92112b8d4b7bc77c69cddf7f6ffdf398e8289817f27cc957c661d3ed0854c3e299e7f0282ff23d84f6dd8c588f987ddf21078", 0xc1}], 0x1, &(0x7f0000005480)=[@rights={{0x30, 0x1, 0x1, [r10, 0xffffffffffffffff, r5, r1, 0xffffffffffffffff, 0xffffffffffffffff, r5, r7]}}, @cred={{0x1c, 0x1, 0x2, {r8}}}, @cred={{0x1c, 0x1, 0x2, {r8}}}], 0x70, 0x11}}], 0x2, 0x4002800)

682.059037ms ago: executing program 7 (id=259):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0)
write(r0, &(0x7f0000000340)="65486d795fe26defdeed7dda726561645f74b9ff9be37786fe66e431205f2e760c6966", 0x23)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a030000000000000000000002"], 0x0, 0x56}, 0x20)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_newneigh={0x34, 0x1c, 0x401, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r2, 0x80, 0x6, 0x7}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}, @NDA_FDB_EXT_ATTRS={0xc, 0xe, 0x0, 0x1, [@NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x2}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c880}, 0x9840)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x80482, 0x0)
write$vga_arbiter(r3, &(0x7f0000000000)=@other={'decodes', ' ', 'io'}, 0xb)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071182a000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @cgroup_sock=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

638.19133ms ago: executing program 7 (id=260):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)={@empty, 0x1, 0x0, 0x30, 0x0, [{@empty}, {@broadcast}, {@multicast1}]}})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000)
getsockopt$inet_udp_int(r1, 0x11, 0xb, 0x0, &(0x7f0000000000))
syz_open_dev$tty1(0xc, 0x4, 0x1)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
io_setup(0x2007, &(0x7f0000000980))
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0)
write(r2, &(0x7f00000006c0)='3', 0x1)

395.249381ms ago: executing program 6 (id=261):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1740, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000010c0)=ANY=[], 0xfc, 0x2d5, &(0x7f0000000400)="$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")
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r2}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4)
r6 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112)
getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8)

394.862241ms ago: executing program 5 (id=262):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0)
ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000000040)={r1})
socket$key(0xf, 0x3, 0x2)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="09000000010000000800000040"], 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4}, 0xc)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newsa={0x190, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@private2, 0x0, 0x0, 0x0, 0xffff}, {@in=@broadcast, 0x4d4, 0x32}, @in6=@private2, {0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, 0x0, 0x1000, 0xa, 0x4, 0x0, 0x50}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth={0x58, 0x1, {{'xcbc(aes)\x00'}, 0x80, "8478b0098a3a72ec6b13aa7d25e76d65"}}]}, 0x190}, 0x1, 0x0, 0x0, 0x40}, 0x40082)
write(r1, &(0x7f00000006c0)='3', 0x1)

372.950672ms ago: executing program 7 (id=263):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1740, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x40})
ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x3, 0x31237648, 0x6, 0x2, 0x7}]})
fcntl$setsig(0xffffffffffffffff, 0xa, 0x4)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000dc8000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x28, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

302.679705ms ago: executing program 1 (id=264):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
unshare(0x22020600)
prlimit64(0x0, 0x2, &(0x7f0000000000)={0x1000000000000009, 0xffffffffffffffff}, 0x0)
prctl$PR_MCE_KILL(0x23, 0x7, 0x7fffffffeffe)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10a942, 0x9f667fd378a54ed4)
write$P9_RREADLINK(r1, &(0x7f0000000040)={0x10, 0x17, 0x2, {0xffffffffffffffc1, './file0'}}, 0xfffffdab)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff0001}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/kvm/halt_successful_poll\x00', 0x0, 0x0)
read$char_usb(r2, 0x0, 0x4000)
r3 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000b40)='task\x00')
fchdir(r4)
mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0)
syz_open_procfs(r3, &(0x7f0000000100)='map_files\x00')
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0)

302.380245ms ago: executing program 5 (id=265):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_int(r1, 0x107, 0x12, 0x0, &(0x7f0000000180))
shutdown(r0, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000711234000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @loopback, 0x5}, 0x1c)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{0xa00}, {0x0, 0x100000000000000}]}, 0xa50)
sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20080058)
connect$inet6(r0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000001fc0)=[{{&(0x7f0000000000)=@phonet, 0x80, &(0x7f0000000340)=[{&(0x7f00000001c0)=""/17, 0x11}, {0x0}], 0x2, &(0x7f0000000480)=""/188, 0xbc}, 0x8}, {{&(0x7f0000000540)=@pppoe, 0x80, &(0x7f0000001f00)}, 0x5}], 0x2, 0x40, 0x0)
r3 = syz_usb_connect(0x2, 0x68, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0)
syz_usb_control_io$printer(r3, 0x0, 0x0)
syz_usb_control_io$uac1(r3, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000940)={0x20, 0x14, 0x6, "3a4ef626c605"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac2(r3, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000340)={0x20, 0x9, 0x1, 't'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

293.548746ms ago: executing program 6 (id=266):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x1000)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2)
syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x3008401, &(0x7f0000002ac0)=ANY=[], 0x2, 0x200, &(0x7f0000000680)="$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")
ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020660b, &(0x7f0000000040)={0x4fc, 0x10000002000003})
unshare(0x400)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000000000/0x400000)=nil)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0xf)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x80382, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = socket$inet6(0xa, 0x80002, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8)
prlimit64(0x0, 0xb, &(0x7f0000000140), 0x0)
r2 = getpid()
r3 = syz_pidfd_open(r2, 0x0)
setns(r3, 0x24020000)
r4 = syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0)
rt_sigqueueinfo(r4, 0x7, &(0x7f0000000080)={0x35, 0x20a, 0xfffffff2})

224.069599ms ago: executing program 6 (id=267):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x1000)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2)
syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x3008401, &(0x7f0000002ac0)=ANY=[], 0x2, 0x200, &(0x7f0000000680)="$eJzsmbFrFEEUxr+Z3ds7gwRtLGwsDBjR7O3uqaSJEMFSEKKo5WHWEN3k5LJC7kDwsLHRzkKwtbG0sLCy8C+w1UIFwcIrBQthZGZnd4e93fMOTwXzfpDJN/PezLz3YF6xB4Ig9iyfPn778PDc8qWTAPZjAXW9/sXKfbjh//7JnROPV84/ffHu2Zvt+buviucxAEJUXve9aHIAvF61EIPZyYoQmM/tC0YIWuMyOI5rfQUMbiJ/CEUyCcFwTfvcNHRnnxZR6F7vROs3NqPQk4Mvh0AOLTM+GdRwwLAOoKGiE4IZ9p1e/1Y7isJuUdREes+IaVrBK8up41vlWEFaPSGk/9UH9wdyrmsDDzyrnw8OX+sWGNa0XkYdruvmJTHyP2zn51uT5D9jcVbd9WjSXc+VOLj05wNLRPpGptkly/g3SvcfidpMzmHFFfmgs5VDw7QHmj6f/1nu+LVPY/xjhLaPmN7ORdGF34jQKSlUJvL+JDv7MaM/2bCz/tGMt243d3r9pc2t9ka4EW4HQeuMd8rzTgdN1YiScUz/a6j+NGecX6vwdZiD3XYcd/1dIO762TxIxjwBrL3sfJVbDkD1P47Fo+oI1VNV2vXyO5j+4+q/VItWuee9ypwIgiAIgiAIgiAIgiAIgiDKOQKG5JcwwfQH0TKCi+oL5c8AAAD//40vYXw=")
ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020660b, &(0x7f0000000040)={0x4fc, 0x10000002000003})
unshare(0x400)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000000000/0x400000)=nil)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0xf)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x80382, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = socket$inet6(0xa, 0x80002, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8)
prlimit64(0x0, 0xb, &(0x7f0000000140), 0x0)
r2 = getpid()
r3 = syz_pidfd_open(r2, 0x0)
setns(r3, 0x24020000)
rt_sigqueueinfo(0x0, 0x7, &(0x7f0000000080)={0x35, 0x20a, 0xfffffff2})

158.684402ms ago: executing program 7 (id=268):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0)
memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf0\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\x05\x00\x00\x00\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2)
open$dir(&(0x7f0000000000)='./file0\x00', 0x224500, 0x20)
ioctl$KVM_RUN(r3, 0xae80, 0x4000000000000)

158.257992ms ago: executing program 6 (id=269):
open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, &(0x7f00000000c0)="66b8006800000f23c80f21f86635080000000f23f80f00d166b8519900000f23d00f21f86635000000000f23f80f20e06635400000000f22e02665f30f22e40f0f14a0b806018ed00f0fbd0070bf360f23892e650f32", 0x56}], 0x1, 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
modify_ldt$write2(0x11, &(0x7f0000000100)={0xb31, 0x20000000, 0x1000, 0x1}, 0x10)
r2 = dup(r1)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x21, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0x4d, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000640)={0x0, 0x23ad697ddad057f0})
open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file2\x00', 0x101)
ioctl$KVM_NMI(r3, 0xae9a)
ioctl$KVM_RUN(r3, 0xae80, 0x7e0f)

157.987582ms ago: executing program 1 (id=270):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0)
timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0)
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r5, 0xffffffffffffffff, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8)
rename(&(0x7f0000000800)='./file0\x00', &(0x7f00000006c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00')
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0)
syz_clone(0x40011, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
read$FUSE(r7, &(0x7f0000006540)={0x2020}, 0xfffffce2)
renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8000000)
r8 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r8, 0x28, 0x8, &(0x7f0000000100)=0x147ae147ae147ad, 0x112)
memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf0\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\x05\x00\x00\x00\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2)
open$dir(&(0x7f0000000000)='./file0\x00', 0x224500, 0x20)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

58.941847ms ago: executing program 8 (id=271):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1740, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/kallsyms\x00', 0x0, 0x0)
pread64(r3, &(0x7f0000000000)=""/82, 0x52, 0x10001)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x80001, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$x86(r6, &(0x7f0000000200)={0x0, 0x0, 0x14})
r7 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f0000000040)})
ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r5, 0x4068aea3, &(0x7f0000000180)={0xc5, 0x0, r5})
ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]})
ioctl$KVM_RUN(r7, 0xae80, 0x0)
openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000000c0)={[0xf, 0xdfdf, 0x10015, 0x2d3, 0x9, 0x3, 0xcf, 0xfffffffffffffffd, 0x2, 0x7ffffffffffffffc, 0x1, 0x9, 0x5, 0x4, 0xfffffffffffffffd], 0x0, 0x1119c4})
ioctl$KVM_RUN(r7, 0xae80, 0x0)

58.555687ms ago: executing program 7 (id=272):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0)
setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040)=0x40, 0x4)
ioctl$KVM_CAP_X86_USER_SPACE_MSR(r0, 0x4068aea3, &(0x7f0000000080))
r2 = open_tree(r1, &(0x7f0000000100)='./file0\x00', 0x80800)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r0)
sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r3, 0x20, 0x70bd27, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0x5e}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x8094)
r4 = openat(r0, &(0x7f0000000280)='./file0\x00', 0x10000, 0x1a4)
ioctl$FIOCLEX(r4, 0x5451)
sendmsg$nl_route(r4, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=@getaddr={0x14, 0x16, 0x14, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2000000}, 0x4080)
quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000802, 0x0, &(0x7f00000003c0)={0x8, 0xfff, 0x9, 0x8000000000000001, 0x6, 0x3, 0xf, 0x80000000, 0x7f})
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0)
inotify_add_watch(r0, &(0x7f0000000440)='./file0\x00', 0x1000040)
write$binfmt_register(r1, &(0x7f0000000480)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x4, 0x3a, 'TIPC\x00', 0x3a, '^%', 0x3a, './file0', 0x3a, [0x4f, 0x46, 0x46]}, 0x31)
ioctl$XFS_IOC_FSGEOMETRY_V1(r0, 0x80705864, &(0x7f00000004c0))
r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x84, r5, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:updpwd_exec_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x32}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}]}, 0x84}, 0x1, 0x0, 0x0, 0x81}, 0x4010)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), r4)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000800)={'syztnl2\x00', &(0x7f0000000780)={'syztnl0\x00', <r8=>0x0, 0x2f, 0x4, 0xe, 0x7, 0x48, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0xd}, 0x10, 0x80, 0x80000001, 0x8}})
sendmsg$MPTCP_PM_CMD_GET_ADDR(r6, &(0x7f0000000980)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000940)={&(0x7f0000000840)={0xd4, r7, 0x1, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xe}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xff}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x39}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000000)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000cc0)={&(0x7f00000009c0)="875d095991eb7a0475b1c96e5794f5ac8756b43aa9400111c42729fed05d631c5a04edd1dfe49747234502c5e858a811ed37ee88c672d6f51b4e3c91e0dabb99da7b617184a224876c2e7c398659efe76df394b06eb95e60aba7a10690de43651de13376c64a0d07880b255e9dee2a6e82ef72d2f12fab8546373de584a73bf4b936187d08913bf99e3382f4f63975b679dd3ac67a81cf760a1f588341747d17aca6b7cee2f29cc0a02dd37febfea94472045e04a623c74d1d33e44fcafd83", &(0x7f0000000a80)=""/179, &(0x7f0000000b40)="f2e64cbce61836df82081d38fef7703599bd77c19343ebe2e084156b038fbb9fa34d67684b51c9ec825427814f7abdf4e5f5279851abb6108c29aaea313bfc3f4ed6feb39fdd463ef412a979b8925465e7ff8b", &(0x7f0000000bc0)="892d6c042e77e79751017c09a4d647db1b5d70f654578e2cee6036371162e31802ec804f00f7a10898850b9e86fc1a0b0f6d4910670ebbcfbb03bee830a50711eb592f4bfbfe1f8d3eef1c631a5df8002f0982f6ff7d0f0576d048700bdc01afdfd78cab18c1fa0654828d5aa075f131cb4ac65329877e11a572e2417b11a2ff3386555b057d8f366b80f19d8e72c9894250b27d54beb11d227122c58e1a856de6a4824dd13361e7bc105b601225e77176e864213b4041c63decdc733331b1fde1e35763775a777a3dbb76f560fb004fbe1fff705dc6f6f4feb1b6", 0x74, r0, 0x4}, 0x38)
getsockname$packet(r4, &(0x7f0000000d40)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000d80)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000e80)={&(0x7f0000000d00), 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)=@ipv6_getroute={0x78, 0x1a, 0xc00, 0x70bd29, 0x25dfdbfc, {0xa, 0x20, 0x80, 0x5, 0xfd, 0x2, 0xc8, 0x8, 0x2100}, [@RTA_OIF={0x8, 0x4, r8}, @RTA_OIF={0x8, 0x4, r8}, @RTA_EXPIRES={0x8, 0x17, 0x2}, @RTA_IIF={0x8, 0x3, r9}, @RTA_MULTIPATH={0xc, 0x9, {0x6, 0x8, 0xd, r8}}, @RTA_MARK={0x8, 0x10, 0x4}, @RTA_MARK={0x8, 0x10, 0x3}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @ILA_ATTR_IDENT_TYPE={0x5}}, @RTA_GATEWAY={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0xa, 0x0}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20008010}, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001140)={&(0x7f0000000ec0)="ecff7f548391329c171c037dc4d7f14e76f5bcdb33945b6e106249a184ae13909501b43686c5b9cf203b96af79f2200736a2a2dc51bed111131995f8a15fc5dbd7781e4b325abd3ea5250ed7d4b558f1072cbd42fa6473cff991790b79e04a7ff9e614ed7469d7be32065ba1ec0fc5d55d7c5a64d1bd7fe5688150576c7a47a609194dbdf7a3d5857e53b9", &(0x7f0000000f80)=""/91, &(0x7f0000001000)="046f1da2544183c1f5df2f59411a927af27669e1b3188781953a584807d864df7f90fac2f05bb76e6fe975a4f25430c80fb5bb7936b6d8713be886502fc188f9af413643d99c189395ab3b68f92cdc8a054f491fbc9780e7b2cac7fab566465d56987b2e17bd714de05a83fd32b110a4e7b566e72c49765f8b6c8b00bfe65c195ec80996d444b0f1d5ce20a036f9b6dd917a2ac1d716", &(0x7f00000010c0)="c4305e950a74a2bbe825ac6e29db0a607d5cec66ce943a68539fbe351534896e9110365dd6ba3bd3786e0951592e9b6c1c03d5866bad800fdf669fc03064143c1181fb43", 0x35c7efd1, r1, 0x4}, 0x38)
r10 = socket$nl_audit(0x10, 0x3, 0x9)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), r1)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000001200)={'wlan0\x00', <r12=>0x0})
sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f0000001380)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001340)={&(0x7f0000001240)={0xf8, r11, 0x2d04fc5645ccda46, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x6, 0x6}, {0x2, 0x2}, {0x2, 0x3}, {0xb0, 0x2}, {0x0, 0x6}, {0x2, 0x3}, {0x81}, {0x5, 0x2}, {0x3, 0x4}], "8fa4a7a11cf993d9"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0xc, 0x4}, {0x0, 0x4}, {0x4b, 0x6}, {0x1}, {0x5, 0x3}, {0x9, 0x7}, {0x3}], "4c83ed20e2275d2b"}}, @NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x5, 0x1}, {0xe, 0x4}], "1ef37931dc6875cf"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x6, 0x3}, {0x6e, 0x4}, {0x7, 0x3}, {0x9, 0x4}, {0x2, 0x6}, {0x1, 0x7}, {0x3, 0x4}, {0x40, 0x6}, {0x80, 0x5}, {0x5, 0x2}, {0x6, 0x6}, {0x51, 0x2}], "8a17d37db2731d67"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xca, 0x2}, {0x4, 0x6}, {0xc9, 0x2}, {0xb, 0x1}, {0x7, 0x7}, {0x81, 0x1}, {0x80}, {0xd, 0x5}], "cb53334a9d9bea50"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x9, 0x2}, {0x4f, 0x1}, {0xd8, 0x5}, {0xf, 0x4}, {0xfa, 0x7}, {0xb, 0x3}, {0x61, 0x7}, {0xd4}, {0x4, 0x2}], "0d10c596ccf68328"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x0, 0x6}, {0xc, 0x6}, {0x7f, 0x7}, {0x9, 0x5}, {0x4, 0x4}, {0x1, 0x3}, {0x1, 0x1}, {0x0, 0x4}, {0x7}, {0x3, 0x4}, {0x3}, {0x5, 0x1}, {0x3, 0x3}, {0x2, 0x6}, {0x2, 0x1}, {0xb, 0x7}, {0x1, 0x6}], "5ed2369a2516cf83"}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x8010}, 0x40000c0)
write$P9_RMKNOD(r1, &(0x7f00000013c0)={0x14, 0x13, 0x1, {0x4, 0x3, 0x3}}, 0x14)

58.329187ms ago: executing program 7 (id=273):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xf, 0x4, 0x8, 0x1}, 0x37)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0xe, 0xf, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000080018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000ff7f0000b7030000000000008500000083000000bf090000000000005509010000"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x25}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r1, r4, 0x5}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r1}, &(0x7f0000000100), &(0x7f0000000140)=r0}, 0x20)
sendmsg(r2, &(0x7f00000029c0)={0x0, 0x803e, &(0x7f0000001680)=[{&(0x7f0000001400)='H', 0x20001401}], 0x1}, 0x0)

37.191098ms ago: executing program 1 (id=274):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)={@empty, 0x1, 0x0, 0x30, 0x0, [{@empty}, {@broadcast}, {@multicast1}]}})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000)
getsockopt$inet_udp_int(r1, 0x11, 0xb, 0x0, &(0x7f0000000000))
syz_open_dev$tty1(0xc, 0x4, 0x1)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0)
write(r2, &(0x7f00000006c0)='3', 0x1)

0s ago: executing program 1 (id=275):
write(0xffffffffffffffff, &(0x7f0000000040)="6834a126728f507e492598afc0a555c43e4c4a7bcfd19ea529e6c61ed9dcf6e16dc3331b070ce5c63566e4eaad090648de85dd1662488f6316674982b2422528a7", 0x41)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/notes', 0x60000, 0x0)
fspick(r2, &(0x7f0000000340)='./file0\x00', 0x1)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="54010000210001000000000000000000e0000001000000000000000000000000e000000100"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000001c0004005c"], 0x154}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0xfffffffffffffffe, 0x5479, 0x1035, 0x200000000006, 0x40000000, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0xbf4, 0xfff, 0x8000000000005, 0x800000068], 0x2000, 0x80cd4})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

kernel console output (not intermixed with test programs):

[   33.319615][  T488]  dump_stack_lvl+0x110/0x170
[   33.324304][  T488]  ? __cfi_dump_stack_lvl+0x8/0x8
[   33.329333][  T488]  dump_stack+0x15/0x24
[   33.333500][  T488]  should_fail_ex+0x3bf/0x510
[   33.338176][  T488]  should_fail+0xb/0x10
[   33.342330][  T488]  should_fail_usercopy+0x1a/0x20
[   33.347350][  T488]  _copy_from_user+0x1e/0xc0
[   33.351950][  T488]  __se_sys_memfd_create+0x12b/0x3c0
[   33.357234][  T488]  __x64_sys_memfd_create+0x5b/0x70
[   33.362516][  T488]  x64_sys_call+0x235/0x9a0
[   33.367080][  T488]  do_syscall_64+0x4c/0xa0
[   33.371504][  T488]  ? clear_bhb_loop+0x30/0x80
[   33.376193][  T488]  ? clear_bhb_loop+0x30/0x80
[   33.380990][  T488]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   33.386895][  T488] RIP: 0033:0x7fb72e79e159
[   33.391321][  T488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   33.411031][  T488] RSP: 002b:00007fb72f5f9e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[   33.419628][  T488] RAX: ffffffffffffffda RBX: 0000000000005554 RCX: 00007fb72e79e159
[   33.427620][  T488] RDX: 00007fb72f5f9ee0 RSI: 0000000000000000 RDI: 00007fb72e83524b
[   33.435728][  T488] RBP: 000020000000ae00 R08: 00000000ffffffff R09: 0000000000000000
[   33.443711][  T488] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000000
[   33.451691][  T488] R13: 00007fb72f5f9ee0 R14: 00007fb72f5f9ea0 R15: 00002000000000c0
[   33.459676][  T488]  </TASK>
[   33.464740][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[   33.477184][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   33.486167][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[   33.494624][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   33.504206][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   33.526874][   T28] audit: type=1400 audit(1789951698.644:231): avc:  denied  { read write } for  pid=491 comm="syz.3.54" name="vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   33.529332][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   33.551593][   T28] audit: type=1400 audit(1789951698.684:232): avc:  denied  { open } for  pid=491 comm="syz.3.54" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   33.562223][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   33.595432][   T28] audit: type=1400 audit(1789951698.684:233): avc:  denied  { ioctl } for  pid=491 comm="syz.3.54" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   33.613410][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   33.637009][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready
[   33.645325][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready
[   33.815805][  T503] syz.1.58 (503): drop_caches: 3
[   33.832160][   T28] audit: type=1400 audit(1789951698.954:234): avc:  denied  { unmount } for  pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   33.917707][    T6] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   34.110638][  T337] usb 3-1: USB disconnect, device number 5
[   34.120334][    T6] usb 5-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40
[   34.123173][  T510] loop2: detected capacity change from 0 to 512
[   34.133401][    T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   34.136692][  T510] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   34.147988][    T6] usb 5-1: Product: syz
[   34.155633][  T389] usb 2-1: new full-speed USB device number 8 using dummy_hcd
[   34.159839][    T6] usb 5-1: Manufacturer: syz
[   34.172837][    T6] usb 5-1: SerialNumber: syz
[   34.181967][  T510] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   34.197400][   T24] usbhid 1-1:0.0: can't add hid device: -71
[   34.203828][  T510] EXT4-fs (loop2): 1 truncate cleaned up
[   34.209612][  T510] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   34.209698][   T24] usbhid: probe of 1-1:0.0 failed with error -71
[   34.239008][   T28] audit: type=1400 audit(1789951699.364:235): avc:  denied  { read append open } for  pid=509 comm="syz.2.61" path="/9/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/cpuset.effective_mems" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   34.246971][   T24] usb 1-1: USB disconnect, device number 3
[   34.299850][   T28] audit: type=1400 audit(1789951699.424:236): avc:  denied  { map } for  pid=509 comm="syz.2.61" path="/9/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/cpuset.effective_mems" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   34.345114][   T28] audit: type=1400 audit(1789951699.424:237): avc:  denied  { write } for  pid=509 comm="syz.2.61" path="/9/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/cpuset.effective_mems" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   34.390452][   T28] audit: type=1400 audit(1789951699.484:238): avc:  denied  { write } for  pid=509 comm="syz.2.61" name="igmp" dev="proc" ino=4026532425 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[   34.390644][  T389] usb 2-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=b9.bf
[   34.413801][  T499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   34.428568][  T289] EXT4-fs (loop2): unmounting filesystem.
[   34.433409][  T499] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   34.442009][  T389] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   34.452969][    T6] snd-usb-audio: probe of 5-1:1.0 failed with error -71
[   34.455668][  T389] usb 2-1: Product: syz
[   34.468488][    T6] usb 5-1: USB disconnect, device number 4
[   34.468549][  T389] usb 2-1: Manufacturer: syz
[   34.479737][  T389] usb 2-1: SerialNumber: syz
[   34.486168][  T389] usb 2-1: config 0 descriptor??
[   34.507606][   T28] audit: type=1400 audit(1789951699.624:239): avc:  denied  { ioctl } for  pid=518 comm="syz.2.63" path="socket:[16947]" dev="sockfs" ino=16947 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   34.508160][  T389] usb 2-1: Waiting for MOTU Microbook II to boot up...
[   34.541150][  T389] usb 2-1: failed setting the sample rate for Motu MicroBook II: -22
[   34.549420][  T389] snd-usb-audio: probe of 2-1:0.0 failed with error -22
[   34.637736][   T24] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   34.745977][    T6] usb 2-1: USB disconnect, device number 8
[   34.817705][   T24] usb 1-1: Using ep0 maxpacket: 16
[   34.817719][  T295] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   34.832697][   T24] usb 1-1: unable to get BOS descriptor or descriptor too short
[   34.841438][   T24] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[   34.853961][   T24] usb 1-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40
[   34.863095][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   34.871187][   T24] usb 1-1: Product: syz
[   34.875379][   T24] usb 1-1: Manufacturer: syz
[   34.880110][   T24] usb 1-1: SerialNumber: syz
[   34.999251][  T295] usb 3-1: unable to get BOS descriptor or descriptor too short
[   35.008875][  T295] usb 3-1: config 63 has an invalid interface number: 66 but max is 0
[   35.017154][  T295] usb 3-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config
[   35.028573][  T295] usb 3-1: config 63 has no interface number 0
[   35.034766][  T295] usb 3-1: config 63 interface 66 has no altsetting 0
[   35.044255][  T295] usb 3-1: string descriptor 0 read error: -22
[   35.057743][  T295] usb 3-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4
[   35.070625][  T295] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   35.088741][  T514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   35.089691][  T295] usb 3-1: Found UVC 0.07 device <unnamed> (174f:8acf)
[   35.107426][  T514] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   35.124417][  T295] usb 3-1: No valid video chain found.
[   35.134663][  T514] loop0: detected capacity change from 0 to 512
[   35.179311][  T514] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   35.199629][  T514] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   35.250561][   T24] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found
[   35.267842][   T24] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found
[   35.289474][  T540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   35.298152][  T540] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   35.309079][   T24] usb 1-1: USB disconnect, device number 4
[   35.318519][  T531] usb 3-1: USB disconnect, device number 6
[   35.327779][    T6] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[   35.497722][  T295] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   35.520472][    T6] usb 2-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=b9.bf
[   35.529871][  T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   35.545921][    T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   35.554185][    T6] usb 2-1: Product: syz
[   35.562411][    T6] usb 2-1: Manufacturer: syz
[   35.568084][    T6] usb 2-1: SerialNumber: syz
[   35.573821][    T6] usb 2-1: config 0 descriptor??
[   35.580220][    T6] usb 2-1: Waiting for MOTU Microbook II to boot up...
[   35.587235][    T6] usb 2-1: failed setting the sample rate for Motu MicroBook II: -22
[   35.595530][    T6] snd-usb-audio: probe of 2-1:0.0 failed with error -22
[   35.677749][  T295] usb 4-1: Using ep0 maxpacket: 8
[   35.684070][  T295] usb 4-1: config 0 has an invalid interface number: 31 but max is 0
[   35.692444][  T295] usb 4-1: config 0 has no interface number 0
[   35.700427][  T295] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[   35.709792][  T295] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   35.718005][  T295] usb 4-1: Product: syz
[   35.722333][  T295] usb 4-1: Manufacturer: syz
[   35.725624][  T543] loop4: detected capacity change from 0 to 40427
[   35.726940][  T295] usb 4-1: SerialNumber: syz
[   35.737982][  T543] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64)
[   35.738006][  T543] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   35.747965][  T543] F2FS-fs (loop4): Image doesn't support compression
[   35.757102][  T295] usb 4-1: config 0 descriptor??
[   35.765329][  T543] F2FS-fs (loop4): Image doesn't support compression
[   35.774735][  T543] F2FS-fs (loop4): invalid crc value
[   35.783543][  T507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   35.783761][  T287] EXT4-fs (loop0): unmounting filesystem.
[   35.793629][  T507] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   35.799334][  T543] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[   35.809156][  T507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   35.826937][  T507] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   35.843814][  T543] F2FS-fs (loop4): Start checkpoint disabled!
[   35.853468][  T543] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0
[   35.861361][  T543] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[   35.869978][  T543] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[   35.896773][  T531] usb 2-1: USB disconnect, device number 9
[   35.914572][  T543] F2FS-fs (loop4): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled
[   35.974832][  T291] F2FS-fs (loop4): Inconsistent error blkaddr:5633, sit bitmap:0
[   35.982760][  T291] CPU: 1 PID: 291 Comm: syz-executor Not tainted syzkaller #0
[   35.988013][  T295] usb 4-1: USB disconnect, device number 5
[   35.990373][  T291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   35.990387][  T291] Call Trace:
[   36.009548][  T291]  <TASK>
[   36.012474][  T291]  __dump_stack+0x21/0x24
[   36.016806][  T291]  dump_stack_lvl+0x110/0x170
[   36.021474][  T291]  ? __cfi_dump_stack_lvl+0x8/0x8
[   36.026491][  T291]  dump_stack+0x15/0x24
[   36.030639][  T291]  __f2fs_is_valid_blkaddr+0xd2e/0x15a0
[   36.036193][  T291]  f2fs_is_valid_blkaddr+0x23/0x30
[   36.041308][  T291]  f2fs_map_blocks+0xcc1/0x4060
[   36.046168][  T291]  ? __cfi_f2fs_map_blocks+0x10/0x10
[   36.051539][  T291]  ? kvm_sched_clock_read+0x18/0x40
[   36.056741][  T291]  ? sched_clock+0x9/0x10
[   36.061159][  T291]  ? sched_clock_cpu+0x6e/0x260
[   36.066011][  T291]  ? __cfi_sched_clock_cpu+0x10/0x10
[   36.071292][  T291]  ? __alloc_pages+0x1fa/0x610
[   36.076060][  T291]  ? xas_start+0x31d/0x3e0
[   36.080483][  T291]  ? xa_load+0xad/0xd0
[   36.084551][  T291]  f2fs_mpage_readpages+0xa46/0x1b20
[   36.089849][  T291]  ? cgroup_rstat_updated+0xf0/0x360
[   36.095133][  T291]  ? dquot_release_reservation_block+0xa0/0xa0
[   36.101287][  T291]  ? cgroup_rstat_updated+0xf0/0x360
[   36.106573][  T291]  ? xas_nomem+0x6b/0x1f0
[   36.110900][  T291]  f2fs_readahead+0xfc/0x240
[   36.115491][  T291]  ? __cfi_f2fs_readahead+0x10/0x10
[   36.120689][  T291]  read_pages+0x1bf/0xe10
[   36.125025][  T291]  ? page_cache_ra_unbounded+0x850/0x850
[   36.130662][  T291]  ? filemap_add_folio+0x113/0x260
[   36.135773][  T291]  page_cache_ra_unbounded+0x6ff/0x850
[   36.141241][  T291]  ? __cfi_page_cache_ra_unbounded+0x10/0x10
[   36.147240][  T291]  ? mem_cgroup_swap_full+0x1a0/0x1a0
[   36.152645][  T291]  page_cache_ra_order+0xb0c/0xe50
[   36.157779][  T291]  ? cgroup_rstat_updated+0xf0/0x360
[   36.163078][  T291]  ? __cfi_page_cache_ra_order+0x10/0x10
[   36.168739][  T291]  ? __kasan_check_read+0x11/0x20
[   36.173762][  T291]  ? folio_memcg_lock+0x96/0x1b0
[   36.178700][  T291]  ? unlock_page_memcg+0x114/0x130
[   36.183808][  T291]  ondemand_readahead+0x821/0xda0
[   36.188835][  T291]  ? get_delayacct_enabled+0x19/0x30
[   36.194118][  T291]  ? page_cache_sync_ra+0x4a0/0x4a0
[   36.199320][  T291]  page_cache_sync_ra+0x427/0x4a0
[   36.204357][  T291]  f2fs_readdir+0x473/0x990
[   36.208899][  T291]  ? cgroup_rstat_updated+0xf0/0x360
[   36.214187][  T291]  ? __cfi_f2fs_readdir+0x10/0x10
[   36.219215][  T291]  ? handle_mm_fault+0x18d8/0x26b0
[   36.224328][  T291]  ? down_read_killable+0xbc/0x110
[   36.229453][  T291]  ? __cfi_down_read_killable+0x10/0x10
[   36.235007][  T291]  ? security_file_permission+0x94/0xb0
[   36.240559][  T291]  iterate_dir+0x26d/0x610
[   36.244979][  T291]  ? __cfi_f2fs_readdir+0x10/0x10
[   36.250011][  T291]  __se_sys_getdents64+0xf2/0x250
[   36.255034][  T291]  ? __x64_sys_getdents64+0x90/0x90
[   36.260242][  T291]  ? __cfi_filldir64+0x10/0x10
[   36.265003][  T291]  ? do_user_addr_fault+0x9a5/0x1030
[   36.270294][  T291]  ? debug_smp_processor_id+0x17/0x20
[   36.275669][  T291]  __x64_sys_getdents64+0x7b/0x90
[   36.280696][  T291]  x64_sys_call+0x15c/0x9a0
[   36.285208][  T291]  do_syscall_64+0x4c/0xa0
[   36.289719][  T291]  ? clear_bhb_loop+0x30/0x80
[   36.294405][  T291]  ? clear_bhb_loop+0x30/0x80
[   36.299089][  T291]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   36.305076][  T291] RIP: 0033:0x7f3ec55c6af3
[   36.309495][  T291] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8
[   36.329187][  T291] RSP: 002b:00007ffe1fdf9b18 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[   36.337869][  T291] RAX: ffffffffffffffda RBX: 000055558b2c6910 RCX: 00007f3ec55c6af3
[   36.345846][  T291] RDX: 0000000000008000 RSI: 000055558b2c6940 RDI: 0000000000000005
[   36.353900][  T291] RBP: 000055558b2c6940 R08: 00007f3ec57f2e20 R09: 0000000000000001
[   36.362096][  T291] R10: 0000000000000000 R11: 0000000000000293 R12: 000055558b2c6914
[   36.370330][  T291] R13: ffffffffffffffe8 R14: 0000000000000010 R15: 00007ffe1fdfbdc0
[   36.378301][  T291]  </TASK>
[   36.388420][  T291] F2FS-fs (loop4): Inconsistent error blkaddr:5633, sit bitmap:0
[   36.397004][  T291] CPU: 1 PID: 291 Comm: syz-executor Not tainted syzkaller #0
[   36.404547][  T291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   36.414723][  T291] Call Trace:
[   36.418009][  T291]  <TASK>
[   36.420937][  T291]  __dump_stack+0x21/0x24
[   36.425278][  T291]  dump_stack_lvl+0x110/0x170
[   36.429967][  T291]  ? __cfi_dump_stack_lvl+0x8/0x8
[   36.434992][  T291]  ? f2fs_lookup_read_extent_cache_block+0x22d/0x420
[   36.441671][  T291]  dump_stack+0x15/0x24
[   36.446092][  T291]  __f2fs_is_valid_blkaddr+0xd2e/0x15a0
[   36.451734][  T291]  f2fs_is_valid_blkaddr+0x23/0x30
[   36.456854][  T291]  f2fs_get_read_data_page+0x4ef/0x850
[   36.462317][  T291]  ? __cfi_f2fs_get_read_data_page+0x10/0x10
[   36.468386][  T291]  f2fs_find_data_page+0x198/0x3a0
[   36.473532][  T291]  f2fs_readdir+0x4a2/0x990
[   36.478051][  T291]  ? cgroup_rstat_updated+0xf0/0x360
[   36.483344][  T291]  ? __cfi_f2fs_readdir+0x10/0x10
[   36.488377][  T291]  ? handle_mm_fault+0x18d8/0x26b0
[   36.493488][  T291]  ? down_read_killable+0xbc/0x110
[   36.498598][  T291]  ? __cfi_down_read_killable+0x10/0x10
[   36.504309][  T291]  ? security_file_permission+0x94/0xb0
[   36.510215][  T291]  iterate_dir+0x26d/0x610
[   36.514634][  T291]  ? __cfi_f2fs_readdir+0x10/0x10
[   36.519663][  T291]  __se_sys_getdents64+0xf2/0x250
[   36.524688][  T291]  ? __x64_sys_getdents64+0x90/0x90
[   36.529887][  T291]  ? __cfi_filldir64+0x10/0x10
[   36.534742][  T291]  ? do_user_addr_fault+0x9a5/0x1030
[   36.540045][  T291]  ? debug_smp_processor_id+0x17/0x20
[   36.545457][  T291]  __x64_sys_getdents64+0x7b/0x90
[   36.550485][  T291]  x64_sys_call+0x15c/0x9a0
[   36.554994][  T291]  do_syscall_64+0x4c/0xa0
[   36.559417][  T291]  ? clear_bhb_loop+0x30/0x80
[   36.564096][  T291]  ? clear_bhb_loop+0x30/0x80
[   36.568772][  T291]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   36.574750][  T291] RIP: 0033:0x7f3ec55c6af3
[   36.579249][  T291] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8
[   36.598939][  T291] RSP: 002b:00007ffe1fdf9b18 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[   36.607350][  T291] RAX: ffffffffffffffda RBX: 000055558b2c6910 RCX: 00007f3ec55c6af3
[   36.615320][  T291] RDX: 0000000000008000 RSI: 000055558b2c6940 RDI: 0000000000000005
[   36.623291][  T291] RBP: 000055558b2c6940 R08: 00007f3ec57f2e20 R09: 0000000000000001
[   36.631265][  T291] R10: 0000000000000000 R11: 0000000000000293 R12: 000055558b2c6914
[   36.639406][  T291] R13: ffffffffffffffe8 R14: 0000000000000010 R15: 00007ffe1fdfbdc0
[   36.647387][  T291]  </TASK>
[   36.652396][  T389] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   36.660621][    T8] kworker/u4:0: attempt to access beyond end of device
[   36.660621][    T8] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[   36.718076][   T28] kauditd_printk_skb: 7 callbacks suppressed
[   36.718091][   T28] audit: type=1400 audit(1789951701.844:247): avc:  denied  { read write } for  pid=550 comm="syz.4.73" name="uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   36.747398][   T28] audit: type=1400 audit(1789951701.844:248): avc:  denied  { open } for  pid=550 comm="syz.4.73" path="/dev/uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   36.747498][   T24] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   36.781659][  T552] loop4: detected capacity change from 0 to 512
[   36.800041][  T552] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   36.809181][  T552] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   36.847710][  T389] usb 1-1: Using ep0 maxpacket: 8
[   36.858332][  T389] usb 1-1: config 0 has an invalid interface number: 31 but max is 0
[   36.866470][  T389] usb 1-1: config 0 has an invalid interface descriptor of length 7, skipping
[   36.877228][  T389] usb 1-1: config 0 has no interface number 0
[   36.889636][  T389] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[   36.898901][  T389] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   36.906987][  T389] usb 1-1: Product: syz
[   36.911479][  T389] usb 1-1: Manufacturer: syz
[   36.916116][  T389] usb 1-1: SerialNumber: syz
[   36.926121][  T389] usb 1-1: config 0 descriptor??
[   36.933332][   T24] usb 3-1: Using ep0 maxpacket: 16
[   36.939633][   T24] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 192, changing to 11
[   36.950944][   T24] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   36.963966][   T24] usb 3-1: config 0 interface 0 has no altsetting 0
[   36.970771][   T24] usb 3-1: New USB device found, idVendor=05ac, idProduct=1440, bcdDevice= 0.00
[   36.985842][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   36.995941][   T24] usb 3-1: config 0 descriptor??
[   37.031664][  T560] loop3: detected capacity change from 0 to 512
[   37.042165][  T560] EXT4-fs (loop3): VFS: Found ext4 filesystem with unknown checksum algorithm.
[   37.050482][  T313] udevd[313]: incorrect ext4 checksum on /dev/loop3
[   37.109939][  T562] loop3: detected capacity change from 0 to 256
[   37.118425][   T28] audit: type=1400 audit(1789951702.244:249): avc:  denied  { mount } for  pid=561 comm="syz.3.76" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   37.140917][  T389] usb 1-1: Found UVC 0.04 device syz (046d:08c3)
[   37.149922][  T389] usb 1-1: No valid video chain found.
[   37.172235][  T389] usb 1-1: USB disconnect, device number 5
[   37.178941][  T562] FAT-fs (loop3): error, clusters badly computed (2 != 1)
[   37.194718][  T562] FAT-fs (loop3): Filesystem has been set read-only
[   37.210316][  T548] netlink: 'syz.2.72': attribute type 12 has an invalid length.
[   37.227787][  T548] netlink: 'syz.2.72': attribute type 29 has an invalid length.
[   37.236382][  T548] netlink: 148 bytes leftover after parsing attributes in process `syz.2.72'.
[   37.250902][   T28] audit: type=1400 audit(1789951702.374:250): avc:  denied  { bind } for  pid=566 comm="syz.1.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   37.270944][  T548] netlink: 'syz.2.72': attribute type 1 has an invalid length.
[   37.301632][  T548] netlink: 'syz.2.72': attribute type 2 has an invalid length.
[   37.313919][  T567] kvm: pic: non byte write
[   37.436663][   T28] audit: type=1400 audit(1789951702.554:251): avc:  denied  { read } for  pid=573 comm="syz.1.78" name="usbmon0" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   37.483516][   T28] audit: type=1400 audit(1789951702.554:252): avc:  denied  { open } for  pid=573 comm="syz.1.78" path="/dev/usbmon0" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   37.549714][  T291] EXT4-fs (loop4): unmounting filesystem.
[   37.597271][  T562] FAT-fs (loop3): error, fat_get_cluster: detected the cluster chain loop (i_pos 198)
[   37.607603][  T562] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 198)
[   37.679331][  T580] loop0: detected capacity change from 0 to 512
[   37.691420][  T580] FAT-fs (loop0): Unrecognized mount option "" or missing value
[   37.729744][   T28] audit: type=1400 audit(1789951702.854:253): avc:  denied  { unmount } for  pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   37.796324][  T586] xt_hashlimit: size too large, truncated to 1048576
[   37.808501][  T587] loop4: detected capacity change from 0 to 512
[   37.959726][  T593] netlink: 24 bytes leftover after parsing attributes in process `syz.3.81'.
[   38.166812][   T28] audit: type=1400 audit(1789951703.284:254): avc:  denied  { associate } for  pid=595 comm="syz.4.83" name="blkio.bfq.group_wait_time" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   38.173431][   T24] usbhid 3-1:0.0: can't add hid device: -71
[   38.219411][   T24] usbhid: probe of 3-1:0.0 failed with error -71
[   38.242838][   T24] usb 3-1: USB disconnect, device number 7
[   38.272798][   T28] audit: type=1400 audit(1789951703.324:255): avc:  denied  { create } for  pid=595 comm="syz.4.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   38.357760][  T612] netlink: 8 bytes leftover after parsing attributes in process `syz.2.86'.
[   38.368939][  T602] loop4: detected capacity change from 0 to 256
[   38.417775][  T601] Bluetooth: hci0: Frame reassembly failed (-84)
[   38.441980][  T612] loop2: detected capacity change from 0 to 4096
[   38.458409][  T612] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   38.775543][   T28] audit: type=1400 audit(1789951703.800:256): avc:  denied  { ioctl } for  pid=610 comm="syz.1.87" path="/dev/ptp0" dev="devtmpfs" ino=264 ioctlcmd=0x3d0f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   38.815542][  T565] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   38.837754][  T612] EXT4-fs (loop2): Test dummy encryption mode enabled
[   38.861460][  T612] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003]
[   38.946317][  T612] System zones: 0-5
[   39.050707][  T612] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   39.102368][  T622] loop0: detected capacity change from 0 to 128
[   39.131414][  T622] FAULT_INJECTION: forcing a failure.
[   39.131414][  T622] name failslab, interval 1, probability 0, space 0, times 0
[   39.158884][  T622] CPU: 0 PID: 622 Comm: syz.0.88 Not tainted syzkaller #0
[   39.166052][  T622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   39.176137][  T622] Call Trace:
[   39.178981][  T612] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[   39.179436][  T622]  <TASK>
[   39.179446][  T622]  __dump_stack+0x21/0x24
[   39.194767][  T622]  dump_stack_lvl+0x110/0x170
[   39.199479][  T622]  ? __cfi_dump_stack_lvl+0x8/0x8
[   39.204549][  T622]  ? __kasan_slab_free+0x11/0x20
[   39.209518][  T622]  dump_stack+0x15/0x24
[   39.213708][  T622]  should_fail_ex+0x3bf/0x510
[   39.218415][  T622]  __should_failslab+0xac/0xf0
[   39.223204][  T622]  should_failslab+0x9/0x20
[   39.227732][  T622]  slab_pre_alloc_hook+0x30/0x1d0
[   39.232792][  T622]  kmem_cache_alloc_lru+0x49/0x280
[   39.237964][  T622]  ? fat_alloc_inode+0x2c/0xc0
[   39.242776][  T622]  fat_alloc_inode+0x2c/0xc0
[   39.247495][  T612] fscrypt: AES-256-XTS using blk-crypto-fallback
[   39.247658][  T622]  ? __cfi_fat_alloc_inode+0x10/0x10
[   39.247688][  T622]  new_inode_pseudo+0x70/0x1f0
[   39.264066][  T622]  new_inode+0x28/0x1e0
[   39.268228][  T622]  fat_build_inode+0x201/0x3d0
[   39.273280][  T622]  vfat_lookup+0x335/0x590
[   39.277703][  T622]  ? slab_pre_alloc_hook+0x30/0x1d0
[   39.282996][  T622]  ? __cfi_vfat_lookup+0x10/0x10
[   39.287919][  T622]  ? _raw_spin_lock+0x94/0xf0
[   39.292588][  T622]  ? __cfi__raw_spin_lock+0x10/0x10
[   39.297782][  T622]  ? __d_alloc+0x4d5/0x6d0
[   39.302203][  T622]  ? d_alloc+0x1f4/0x260
[   39.306434][  T622]  lookup_one_qstr_excl+0x125/0x270
[   39.311797][  T622]  do_renameat2+0x650/0xfc0
[   39.316305][  T622]  ? __cfi_do_renameat2+0x10/0x10
[   39.321417][  T622]  ? strncpy_from_user+0x172/0x2c0
[   39.326707][  T622]  ? getname_flags+0x205/0x510
[   39.331548][  T622]  __x64_sys_renameat2+0xd8/0xf0
[   39.336504][  T622]  x64_sys_call+0x6b8/0x9a0
[   39.341083][  T622]  do_syscall_64+0x4c/0xa0
[   39.345495][  T622]  ? clear_bhb_loop+0x30/0x80
[   39.350247][  T622]  ? clear_bhb_loop+0x30/0x80
[   39.354921][  T622]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   39.360808][  T622] RIP: 0033:0x7f34d099e159
[   39.365217][  T622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   39.385233][  T622] RSP: 002b:00007f34d18db028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c
[   39.393664][  T622] RAX: ffffffffffffffda RBX: 00007f34d0c25fa0 RCX: 00007f34d099e159
[   39.401628][  T622] RDX: 0000000000000004 RSI: 0000200000000240 RDI: 0000000000000004
[   39.409615][  T622] RBP: 00007f34d18db090 R08: 0000000000000002 R09: 0000000000000000
[   39.417671][  T622] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001
[   39.425903][  T622] R13: 00007f34d0c26038 R14: 00007f34d0c25fa0 R15: 00007ffd6f5c78e8
[   39.433954][  T622]  </TASK>
[   39.626580][  T639] loop4: detected capacity change from 0 to 40427
[   39.634318][  T639] F2FS-fs (loop4): Fix alignment : done, start(4096) end(16896) block(12288)
[   39.644270][  T639] F2FS-fs (loop4): invalid crc value
[   39.649990][  T639] F2FS-fs (loop4): invalid crc value
[   39.660950][  T639] F2FS-fs (loop4): Failed to get valid F2FS checkpoint
[   39.713887][  T639] loop4: detected capacity change from 0 to 512
[   39.720825][  T639] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[   39.747812][  T618] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[   39.777735][  T531] usb 4-1: new full-speed USB device number 6 using dummy_hcd
[   39.795115][  T642] kvm [638]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00
[   39.803583][  T642] kvm [638]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00
[   39.947890][  T618] usb 2-1: Using ep0 maxpacket: 8
[   39.954301][  T618] usb 2-1: config 0 has an invalid interface number: 31 but max is 0
[   39.959203][  T531] usb 4-1: unable to get BOS descriptor or descriptor too short
[   39.962758][  T618] usb 2-1: config 0 has an invalid interface descriptor of length 7, skipping
[   39.970677][  T531] usb 4-1: not running at top speed; connect to a high speed hub
[   39.987139][  T618] usb 2-1: config 0 has no interface number 0
[   39.993731][  T531] usb 4-1: config 6 has an invalid interface number: 82 but max is 0
[   39.994751][  T618] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[   40.001994][  T531] usb 4-1: config 6 has no interface number 0
[   40.011098][  T618] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   40.019300][  T531] usb 4-1: New USB device found, idVendor=91e4, idProduct=5d86, bcdDevice=11.cd
[   40.025619][  T618] usb 2-1: Product: syz
[   40.035016][  T531] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   40.038975][  T618] usb 2-1: Manufacturer: syz
[   40.047195][  T531] usb 4-1: Product: syz
[   40.051635][  T618] usb 2-1: SerialNumber: syz
[   40.056161][  T531] usb 4-1: Manufacturer: syz
[   40.061957][  T618] usb 2-1: config 0 descriptor??
[   40.067704][  T531] usb 4-1: SerialNumber: syz
[   40.272859][  T618] usb 2-1: Found UVC 0.04 device syz (046d:08c3)
[   40.279460][  T618] usb 2-1: No valid video chain found.
[   40.282564][  T531] usb-storage 4-1:6.82: USB Mass Storage device detected
[   40.287005][  T618] usb 2-1: USB disconnect, device number 10
[   40.342045][  T531] usb 4-1: USB disconnect, device number 6
[   40.427698][  T314] Bluetooth: hci0: command 0x1003 tx timeout
[   40.427755][  T317] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   40.440088][  T612] Bluetooth: hci0: Opcode 0x0c20 failed: -4
[   40.485006][  T289] EXT4-fs (loop2): unmounting filesystem.
[   40.502464][  T652] FAULT_INJECTION: forcing a failure.
[   40.502464][  T652] name failslab, interval 1, probability 0, space 0, times 0
[   40.515142][  T652] CPU: 1 PID: 652 Comm: syz.2.98 Not tainted syzkaller #0
[   40.522276][  T652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   40.532418][  T652] Call Trace:
[   40.535700][  T652]  <TASK>
[   40.538627][  T652]  __dump_stack+0x21/0x24
[   40.542956][  T652]  dump_stack_lvl+0x110/0x170
[   40.547626][  T652]  ? __cfi_dump_stack_lvl+0x8/0x8
[   40.552680][  T652]  ? resched_curr+0x114/0x3a0
[   40.557467][  T652]  dump_stack+0x15/0x24
[   40.561641][  T652]  should_fail_ex+0x3bf/0x510
[   40.566310][  T652]  __should_failslab+0xac/0xf0
[   40.571074][  T652]  should_failslab+0x9/0x20
[   40.575679][  T652]  kmem_cache_alloc_node+0x42/0x330
[   40.580930][  T652]  ? __alloc_skb+0xe8/0x4a0
[   40.585432][  T652]  __alloc_skb+0xe8/0x4a0
[   40.589754][  T652]  inet6_rt_notify+0x34d/0x520
[   40.594512][  T652]  ? fib6_purge_rt+0x5e0/0x660
[   40.599451][  T652]  ? atomic_notifier_call_chain+0x108/0x120
[   40.605432][  T652]  ? __cfi_inet6_rt_notify+0x10/0x10
[   40.607696][    T6] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   40.610741][  T652]  ? call_fib_notifiers+0xa0/0xc0
[   40.610768][  T652]  fib6_del+0xb88/0xef0
[   40.627448][  T652]  ? __cfi_fib6_del+0x10/0x10
[   40.632132][  T652]  ? __kasan_check_write+0x14/0x20
[   40.637332][  T652]  ? _raw_spin_lock_bh+0x94/0xf0
[   40.642269][  T652]  __ip6_del_rt+0x9a/0x150
[   40.646778][  T652]  ip6_del_rt+0xbe/0x110
[   40.651036][  T652]  ? __cfi_ip6_del_rt+0x10/0x10
[   40.655889][  T652]  ? masq_inet6_event+0xe6/0x130
[   40.660903][  T652]  cleanup_prefix_route+0x13f/0x2d0
[   40.666109][  T652]  ipv6_del_addr+0x707/0x8c0
[   40.670737][  T652]  inet6_addr_del+0x34b/0x4f0
[   40.675405][  T652]  addrconf_del_ifaddr+0x11d/0x180
[   40.680504][  T652]  ? __cfi_addrconf_del_ifaddr+0x10/0x10
[   40.686128][  T652]  inet6_ioctl+0x1fc/0x290
[   40.690538][  T652]  ? __cfi_inet6_ioctl+0x10/0x10
[   40.695469][  T652]  ? ioctl_has_perm+0x1b8/0x4f0
[   40.700409][  T652]  ? ioctl_has_perm+0x3a6/0x4f0
[   40.705270][  T652]  sock_do_ioctl+0x114/0x330
[   40.709848][  T652]  ? sock_show_fdinfo+0xb0/0xb0
[   40.714694][  T652]  ? selinux_file_ioctl+0x3ad/0x4c0
[   40.719885][  T652]  sock_ioctl+0x475/0x700
[   40.724225][  T652]  ? __cfi_sock_ioctl+0x10/0x10
[   40.729276][  T652]  ? __fget_files+0x2d1/0x330
[   40.734073][  T652]  ? security_file_ioctl+0x95/0xc0
[   40.739178][  T652]  ? __cfi_sock_ioctl+0x10/0x10
[   40.744024][  T652]  __se_sys_ioctl+0x12f/0x1b0
[   40.748794][  T652]  __x64_sys_ioctl+0x7b/0x90
[   40.753729][  T652]  x64_sys_call+0x58b/0x9a0
[   40.758226][  T652]  do_syscall_64+0x4c/0xa0
[   40.762656][  T652]  ? clear_bhb_loop+0x30/0x80
[   40.767340][  T652]  ? clear_bhb_loop+0x30/0x80
[   40.772014][  T652]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   40.778014][  T652] RIP: 0033:0x7f863659e159
[   40.782424][  T652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   40.802280][  T652] RSP: 002b:00007f8637397028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   40.810777][  T652] RAX: ffffffffffffffda RBX: 00007f8636825fa0 RCX: 00007f863659e159
[   40.814672][    T6] usb 1-1: Using ep0 maxpacket: 16
[   40.818861][  T652] RDX: 0000200000000000 RSI: 0000000000008936 RDI: 0000000000000004
[   40.818880][  T652] RBP: 00007f8637397090 R08: 0000000000000000 R09: 0000000000000000
[   40.818891][  T652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   40.818902][  T652] R13: 00007f8636826038 R14: 00007f8636825fa0 R15: 00007ffffca56388
[   40.818918][  T652]  </TASK>
[   40.868728][  T658] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[   40.880155][  T658] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869)
[   40.889949][  T658] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal
[   40.890020][    T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   40.910037][    T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   40.911337][  T657] 9pnet_fd: Insufficient options for proto=fd
[   40.920019][    T6] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   40.939084][    T6] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   40.948138][    T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   40.956864][    T6] usb 1-1: config 0 descriptor??
[   41.028355][  T313] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   41.040230][  T658] xt_hashlimit: size too large, truncated to 1048576
[   41.114739][  T670] EXT4-fs: Mount option(s) incompatible with ext2
[   41.176924][  T668] ./dev/sda1: Can't open blockdev
[   41.186186][  T670] EXT4-fs (loop3): Test dummy encryption mode enabled
[   41.195775][  T670] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   41.231917][  T670] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   41.282449][  T670] EXT4-fs error (device loop3): ext4_orphan_get:1431: comm syz.3.100: bad orphan inode 131083
[   41.303675][  T670] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   41.323140][  T670] EXT4-fs (loop3): re-mounted. Quota mode: none.
[   41.377726][  T295] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[   41.401878][  T670] overlayfs: upper fs needs to support d_type.
[   41.417865][  T670] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[   41.515833][  T290] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /20/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[   41.563615][  T693] FAULT_INJECTION: forcing a failure.
[   41.563615][  T693] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[   41.577718][  T295] usb 2-1: Using ep0 maxpacket: 32
[   41.578725][  T693] CPU: 1 PID: 693 Comm: syz.2.109 Not tainted syzkaller #0
[   41.587383][    T6] usbhid 1-1:0.0: can't add hid device: -71
[   41.590079][  T693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   41.590092][  T693] Call Trace:
[   41.590098][  T693]  <TASK>
[   41.590104][  T693]  __dump_stack+0x21/0x24
[   41.590136][  T693]  dump_stack_lvl+0x110/0x170
[   41.590160][  T693]  ? __cfi_dump_stack_lvl+0x8/0x8
[   41.590187][  T693]  dump_stack+0x15/0x24
[   41.598387][  T295] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   41.606197][  T693]  should_fail_ex+0x3bf/0x510
[   41.615752][    T6] usbhid: probe of 1-1:0.0 failed with error -71
[   41.616746][  T693]  should_fail_alloc_page+0x61/0x90
[   41.630852][    T6] usb 1-1: USB disconnect, device number 6
[   41.641553][  T693]  prepare_alloc_pages+0x131/0x570
[   41.641590][  T693]  ? __alloc_pages_bulk+0x9d0/0x9d0
[   41.641613][  T693]  ? __cfi_avc_has_perm_noaudit+0x10/0x10
[   41.646368][  T295] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   41.652635][  T693]  ? x64_sys_call+0x58b/0x9a0
[   41.652672][  T693]  __alloc_pages+0x15b/0x610
[   41.652697][  T693]  ? __cfi___alloc_pages+0x10/0x10
[   41.652722][  T693]  ? percpu_counter_add_batch+0x13c/0x160
[   41.673841][  T295] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00
[   41.674051][  T693]  ? __kasan_check_read+0x11/0x20
[   41.689123][  T295] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   41.689486][  T693]  ? __vm_enough_memory+0x11a/0x360
[   41.730135][  T295] usb 2-1: config 0 descriptor??
[   41.732001][  T693]  __folio_alloc+0x12/0x40
[   41.746700][  T693]  shmem_alloc_and_acct_folio+0x6dd/0x8c0
[   41.752460][  T693]  ? shmem_replace_folio+0x660/0x660
[   41.758055][  T693]  ? xas_start+0x324/0x3e0
[   41.762503][  T693]  ? xas_load+0x394/0x3c0
[   41.766864][  T693]  ? __filemap_get_folio+0x848/0xa70
[   41.772173][  T693]  ? prep_new_page+0x1c/0x110
[   41.776970][  T693]  ? __cfi___filemap_get_folio+0x10/0x10
[   41.782634][  T693]  shmem_get_folio_gfp+0xd6d/0x20f0
[   41.787866][  T693]  ? xas_find+0x1c2/0x820
[   41.792227][  T693]  shmem_fault+0x1ab/0x670
[   41.796673][  T693]  ? __mod_node_page_state+0x9e/0xd0
[   41.801986][  T693]  ? __cfi_shmem_fault+0x10/0x10
[   41.806953][  T693]  ? __mod_node_page_state+0x9e/0xd0
[   41.812263][  T693]  ? vma_data_pages+0xfc/0x130
[   41.817057][  T693]  do_fault+0x19de/0x1e30
[   41.821411][  T693]  ? pte_marker_clear+0x220/0x220
[   41.826478][  T693]  ? __kasan_check_read+0x11/0x20
[   41.831535][  T693]  handle_mm_fault+0x1363/0x26b0
[   41.836582][  T693]  ? arch_stack_walk+0xfc/0x150
[   41.841482][  T693]  ? __cfi_handle_mm_fault+0x10/0x10
[   41.846802][  T693]  ? down_read_trylock+0x27f/0x660
[   41.852047][  T693]  ? __cfi_vmx_vcpu_pi_load+0x10/0x10
[   41.857551][  T693]  ? slab_post_alloc_hook+0x4f/0x2d0
[   41.862877][  T693]  ? kmem_cache_alloc+0x166/0x320
[   41.867941][  T693]  ? lock_mm_and_find_vma+0x9e/0x320
[   41.873258][  T693]  ? do_user_addr_fault+0x2eb/0x1030
[   41.878577][  T693]  do_user_addr_fault+0x61e/0x1030
[   41.883730][  T693]  exc_page_fault+0x51/0xb0
[   41.888269][  T693]  asm_exc_page_fault+0x27/0x30
[   41.893163][  T693] RIP: 0010:copy_user_short_string+0xa/0x40
[   41.899180][  T693] Code: 83 f8 12 74 0a 89 d1 f3 a4 89 c8 0f 01 ca c3 89 d0 0f 01 ca c3 01 ca eb e7 90 90 90 90 90 90 90 89 d1 83 e2 07 c1 e9 03 74 12 <4c> 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10
[   41.918905][  T693] RSP: 0018:ffffc900117e7688 EFLAGS: 00050206
[   41.925001][  T693] RAX: ffffffff82692d01 RBX: 0000000000000018 RCX: 0000000000000003
[   41.933001][  T693] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc900117e7740
[   41.941002][  T693] RBP: ffffc900117e76b0 R08: ffffc900117e7757 R09: 1ffff920022fceea
[   41.949175][  T693] R10: dffffc0000000000 R11: fffff520022fceeb R12: 00007fffffffefe8
[   41.957170][  T693] R13: 000000004018aee1 R14: ffffc900117e7740 R15: 0000000000000000
[   41.965175][  T693]  ? refcount_dec_and_lock_irqsave+0x91/0x100
[   41.971276][  T693]  ? _copy_from_user+0x78/0xc0
[   41.976069][  T693]  kvm_arch_vcpu_ioctl+0xc03/0x2390
[   41.981304][  T693]  ? __cfi_avc_has_perm+0x10/0x10
[   41.986365][  T693]  ? __cfi_kvm_arch_vcpu_ioctl+0x10/0x10
[   41.992023][  T693]  ? is_bpf_text_address+0x177/0x190
[   41.997341][  T693]  ? kernel_text_address+0xa0/0xd0
[   42.002483][  T693]  ? __kernel_text_address+0xd/0x30
[   42.007742][  T693]  ? unwind_get_return_address+0x4d/0x90
[   42.013395][  T693]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[   42.019742][  T693]  ? arch_stack_walk+0xfc/0x150
[   42.024620][  T693]  ? stack_trace_save+0xa6/0xf0
[   42.029497][  T693]  ? __stack_depot_save+0x36/0x490
[   42.034644][  T693]  ? _parse_integer_limit+0x18e/0x1d0
[   42.040069][  T693]  ? __asan_set_shadow_00+0xe/0x10
[   42.045305][  T693]  ? do_vfs_ioctl+0x1b68/0x1cd0
[   42.050269][  T693]  ? __ia32_compat_sys_ioctl+0x860/0x860
[   42.055910][  T693]  ? kstrtouint+0x74/0xe0
[   42.060239][  T693]  ? kstrtouint_from_user+0x113/0x170
[   42.065708][  T693]  ? __cfi_kstrtouint_from_user+0x10/0x10
[   42.071427][  T693]  ? ioctl_has_perm+0x1b8/0x4f0
[   42.076289][  T693]  ? memcpy+0x56/0x70
[   42.080271][  T693]  ? __kasan_check_write+0x14/0x20
[   42.085379][  T693]  ? mutex_lock_killable+0x93/0x1b0
[   42.090580][  T693]  ? __cfi_mutex_lock_killable+0x10/0x10
[   42.096382][  T693]  kvm_vcpu_ioctl+0x6fb/0xc00
[   42.101156][  T693]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[   42.106368][  T693]  ? selinux_file_ioctl+0x3ad/0x4c0
[   42.111770][  T693]  ? __cfi_selinux_file_ioctl+0x10/0x10
[   42.117318][  T693]  ? mutex_unlock+0x8f/0x230
[   42.121912][  T693]  ? __cfi_mutex_unlock+0x10/0x10
[   42.126940][  T693]  ? __fget_files+0x2d1/0x330
[   42.131618][  T693]  ? security_file_ioctl+0x95/0xc0
[   42.136768][  T693]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[   42.141968][  T693]  __se_sys_ioctl+0x12f/0x1b0
[   42.146820][  T693]  __x64_sys_ioctl+0x7b/0x90
[   42.151423][  T693]  x64_sys_call+0x58b/0x9a0
[   42.156018][  T693]  do_syscall_64+0x4c/0xa0
[   42.160437][  T693]  ? clear_bhb_loop+0x30/0x80
[   42.165125][  T693]  ? clear_bhb_loop+0x30/0x80
[   42.169825][  T693]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   42.175719][  T693] RIP: 0033:0x7f863659e159
[   42.180134][  T693] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   42.199764][  T693] RSP: 002b:00007f8637397028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   42.208179][  T693] RAX: ffffffffffffffda RBX: 00007f8636825fa0 RCX: 00007f863659e159
[   42.216152][  T693] RDX: 0000000000000000 RSI: 000000004018aee1 RDI: 0000000000000005
[   42.224208][  T693] RBP: 00007f8637397090 R08: 0000000000000000 R09: 0000000000000000
[   42.232191][  T693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   42.240161][  T693] R13: 00007f8636826038 R14: 00007f8636825fa0 R15: 00007ffffca56388
[   42.248140][  T693]  </TASK>
[   42.254734][   T28] kauditd_printk_skb: 36 callbacks suppressed
[   42.254751][   T28] audit: type=1400 audit(1789951707.380:293): avc:  denied  { ioctl } for  pid=671 comm="syz.1.105" path="/21/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   42.295986][  T295] koneplus 0003:1E7D:2D51.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.1-1/input0
[   42.361461][  T290] EXT4-fs (loop3): unmounting filesystem.
[   42.510965][   T28] audit: type=1400 audit(1789951707.640:294): avc:  denied  { create } for  pid=671 comm="syz.1.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[   42.530333][  T295] koneplus 0003:1E7D:2D51.0002: couldn't init struct koneplus_device
[   42.538556][  T295] koneplus 0003:1E7D:2D51.0002: couldn't install mouse
[   42.546249][  T295] koneplus: probe of 0003:1E7D:2D51.0002 failed with error -71
[   42.562105][   T28] audit: type=1400 audit(1789951707.690:295): avc:  denied  { mounton } for  pid=701 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[   42.577023][  T295] usb 2-1: USB disconnect, device number 11
[   42.657357][  T701] bridge0: port 1(bridge_slave_0) entered blocking state
[   42.664707][  T701] bridge0: port 1(bridge_slave_0) entered disabled state
[   42.672910][  T701] device bridge_slave_0 entered promiscuous mode
[   42.682898][  T701] bridge0: port 2(bridge_slave_1) entered blocking state
[   42.690412][  T701] bridge0: port 2(bridge_slave_1) entered disabled state
[   42.704677][  T701] device bridge_slave_1 entered promiscuous mode
[   42.708901][  T705] fido_id[705]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[   42.722050][  T700] set_capacity_and_notify: 4 callbacks suppressed
[   42.722069][  T700] loop4: detected capacity change from 0 to 40427
[   42.739459][  T700] F2FS-fs (loop4): Fix alignment : done, start(4096) end(16896) block(12288)
[   42.748798][  T700] F2FS-fs (loop4): invalid crc value
[   42.754391][  T700] F2FS-fs (loop4): invalid crc value
[   42.759930][  T700] F2FS-fs (loop4): Failed to get valid F2FS checkpoint
[   42.907271][  T701] bridge0: port 2(bridge_slave_1) entered blocking state
[   42.914397][  T701] bridge0: port 2(bridge_slave_1) entered forwarding state
[   42.921727][  T701] bridge0: port 1(bridge_slave_0) entered blocking state
[   42.928806][  T701] bridge0: port 1(bridge_slave_0) entered forwarding state
[   42.936367][   T28] audit: type=1400 audit(1789951708.060:296): avc:  denied  { getopt } for  pid=717 comm="syz.4.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   42.954091][  T599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   42.963800][  T599] bridge0: port 1(bridge_slave_0) entered disabled state
[   42.981217][  T599] bridge0: port 2(bridge_slave_1) entered disabled state
[   42.999051][  T601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   43.013907][  T601] bridge0: port 1(bridge_slave_0) entered blocking state
[   43.021020][  T601] bridge0: port 1(bridge_slave_0) entered forwarding state
[   43.031422][  T601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   43.039928][  T601] bridge0: port 2(bridge_slave_1) entered blocking state
[   43.047327][  T601] bridge0: port 2(bridge_slave_1) entered forwarding state
[   43.055663][  T603] device bridge_slave_1 left promiscuous mode
[   43.068966][  T603] bridge0: port 2(bridge_slave_1) entered disabled state
[   43.076244][  T726] loop1: detected capacity change from 0 to 1024
[   43.083003][  T603] device bridge_slave_0 left promiscuous mode
[   43.089570][  T603] bridge0: port 1(bridge_slave_0) entered disabled state
[   43.098289][  T603] device veth1_macvtap left promiscuous mode
[   43.099859][  T726] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   43.104374][  T603] device veth0_vlan left promiscuous mode
[   43.126737][   T28] audit: type=1400 audit(1789951708.250:297): avc:  denied  { reparent } for  pid=725 comm="syz.1.123" name="file1" dev="loop1" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   43.246899][  T601] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   43.257696][  T295] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   43.262207][  T601] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   43.283247][  T601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   43.295743][  T701] device veth0_vlan entered promiscuous mode
[   43.302412][  T601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   43.317090][  T601] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   43.324990][  T601] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   43.335077][  T701] device veth1_macvtap entered promiscuous mode
[   43.342593][  T601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   43.351568][  T601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   43.359980][  T601] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   43.375780][  T601] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   43.384554][  T601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   43.393563][  T601] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   43.402613][  T601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   43.417872][  T618] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   43.419754][   T28] audit: type=1400 audit(1789951708.550:298): avc:  denied  { mounton } for  pid=701 comm="syz-executor" path="/root/syzkaller.0lgDHI/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   43.490132][  T295] usb 5-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40
[   43.506787][  T295] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   43.515390][  T295] usb 5-1: Product: syz
[   43.520126][  T295] usb 5-1: Manufacturer: syz
[   43.524823][  T295] usb 5-1: SerialNumber: syz
[   43.964205][  T742] loop5: detected capacity change from 0 to 512
[   44.075403][  T618] usb 1-1: device descriptor read/64, error -71
[   44.468529][  T295] snd-usb-audio: probe of 5-1:1.0 failed with error -71
[   44.499357][  T295] usb 5-1: USB disconnect, device number 5
[   44.518157][   T28] audit: type=1400 audit(1789951709.650:299): avc:  denied  { mount } for  pid=744 comm="syz.2.127" name="/" dev="configfs" ino=14381 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[   44.541655][  T565] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   44.580464][  T749] Driver unsupported XDP return value 0 on prog  (id 12) dev N/A, expect packet loss!
[   44.590367][   T28] audit: type=1400 audit(1789951709.650:300): avc:  denied  { search } for  pid=744 comm="syz.2.127" name="/" dev="configfs" ino=14381 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   44.621419][   T28] audit: type=1400 audit(1789951709.650:301): avc:  denied  { write } for  pid=744 comm="syz.2.127" name="usb_gadget" dev="configfs" ino=14382 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   44.645777][   T28] audit: type=1400 audit(1789951709.650:302): avc:  denied  { add_name } for  pid=744 comm="syz.2.127" name="g_uac2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   44.667705][  T618] usb 1-1: device descriptor read/64, error -71
[   44.711059][  T726] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=726 comm=syz.1.123
[   44.728612][  T726] EXT4-fs warning (device loop1): ext4_rmdir:3243: inode #11: comm syz.1.123: empty directory 'file0' has too many links (111)
[   44.827702][   T19] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   44.937686][  T618] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[   44.964929][  T288] EXT4-fs (loop1): unmounting filesystem.
[   44.994924][  T755] loop1: detected capacity change from 0 to 1024
[   45.016950][  T755] EXT4-fs: Ignoring removed bh option
[   45.022687][   T19] usb 6-1: Using ep0 maxpacket: 16
[   45.029678][   T19] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   45.041660][   T19] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   45.051974][   T19] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   45.066644][  T755] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   45.075925][  T755] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   45.075937][  T759] FAULT_INJECTION: forcing a failure.
[   45.075937][  T759] name failslab, interval 1, probability 0, space 0, times 0
[   45.075962][  T759] CPU: 1 PID: 759 Comm: syz.4.131 Not tainted syzkaller #0
[   45.086850][   T19] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   45.098876][  T759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   45.098894][  T759] Call Trace:
[   45.098901][  T759]  <TASK>
[   45.098907][  T759]  __dump_stack+0x21/0x24
[   45.098940][  T759]  dump_stack_lvl+0x110/0x170
[   45.098964][  T759]  ? __cfi_dump_stack_lvl+0x8/0x8
[   45.108934][   T19] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   45.115173][  T759]  dump_stack+0x15/0x24
[   45.127584][   T19] usb 6-1: config 0 descriptor??
[   45.128601][  T759]  should_fail_ex+0x3bf/0x510
[   45.128626][  T759]  ? __kvm_mmu_topup_memory_cache+0x194/0x490
[   45.161386][  T750] loop2: detected capacity change from 0 to 16
[   45.162988][  T759]  __should_failslab+0xac/0xf0
[   45.168717][  T750] erofs: (device loop2): erofs_init_device: empty device tag @ pos 0
[   45.173750][  T759]  should_failslab+0x9/0x20
[   45.173784][  T759]  kmem_cache_alloc+0x3b/0x320
[   45.202057][  T759]  ? __kvm_mmu_topup_memory_cache+0x194/0x490
[   45.208161][  T759]  __kvm_mmu_topup_memory_cache+0x194/0x490
[   45.214095][  T759]  kvm_mmu_topup_memory_cache+0x20/0x30
[   45.219666][  T759]  kvm_mmu_load+0x99/0x2570
[   45.224189][  T759]  ? kvm_hv_setup_tsc_page+0x5f2/0xa80
[   45.229688][  T759]  ? queue_delayed_work_on+0x10d/0x160
[   45.235181][  T759]  ? kvm_apic_has_interrupt+0x776/0x780
[   45.240759][  T759]  vcpu_enter_guest+0x4d3b/0x7050
[   45.245809][  T759]  ? __cfi_avc_has_perm+0x10/0x10
[   45.250851][  T759]  ? pvclock_gtod_update_fn+0x270/0x270
[   45.256419][  T759]  ? 0xffffffffa0003dc8
[   45.260674][  T759]  ? is_bpf_text_address+0x177/0x190
[   45.265985][  T759]  ? kernel_text_address+0xa0/0xd0
[   45.271122][  T759]  ? __kernel_text_address+0xd/0x30
[   45.276339][  T759]  ? unwind_get_return_address+0x4d/0x90
[   45.280793][  T761] input: syz0 as /devices/virtual/input/input4
[   45.281986][  T759]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[   45.294489][  T759]  ? arch_stack_walk+0xfc/0x150
[   45.299379][  T759]  ? stack_trace_save+0xa6/0xf0
[   45.304276][  T759]  ? vmx_vcpu_pi_load+0x14c/0x840
[   45.309320][  T759]  ? __cfi_vmx_vcpu_pi_load+0x10/0x10
[   45.314809][  T759]  ? _parse_integer_limit+0x18e/0x1d0
[   45.320199][  T759]  ? __asan_set_shadow_00+0xe/0x10
[   45.325332][  T759]  ? do_vfs_ioctl+0x1b68/0x1cd0
[   45.330207][  T759]  ? vmx_vcpu_load_vmcs+0x479/0x730
[   45.335425][  T759]  ? __this_cpu_preempt_check+0x13/0x20
[   45.341074][  T759]  ? xfd_validate_state+0x70/0x150
[   45.346213][  T759]  ? fpu_swap_kvm_fpstate+0x81/0x5d0
[   45.351614][  T759]  ? __local_bh_enable_ip+0x58/0x80
[   45.356839][  T759]  kvm_arch_vcpu_ioctl_run+0xe6d/0x1f60
[   45.362409][  T759]  kvm_vcpu_ioctl+0x8ed/0xc00
[   45.367115][  T759]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[   45.372353][  T759]  ? selinux_file_ioctl+0x3ad/0x4c0
[   45.377584][  T759]  ? __cfi_selinux_file_ioctl+0x10/0x10
[   45.383333][  T759]  ? mutex_unlock+0x8f/0x230
[   45.387953][  T759]  ? __cfi_mutex_unlock+0x10/0x10
[   45.393084][  T759]  ? __fget_files+0x2d1/0x330
[   45.397780][  T759]  ? security_file_ioctl+0x95/0xc0
[   45.402912][  T759]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[   45.408228][  T759]  __se_sys_ioctl+0x12f/0x1b0
[   45.412921][  T759]  __x64_sys_ioctl+0x7b/0x90
[   45.417523][  T759]  x64_sys_call+0x58b/0x9a0
[   45.422041][  T759]  do_syscall_64+0x4c/0xa0
[   45.426476][  T759]  ? clear_bhb_loop+0x30/0x80
[   45.431167][  T759]  ? clear_bhb_loop+0x30/0x80
[   45.435859][  T759]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   45.441771][  T759] RIP: 0033:0x7f3ec559e159
[   45.446209][  T759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   45.465827][  T759] RSP: 002b:00007f3ec64e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   45.474277][  T759] RAX: ffffffffffffffda RBX: 00007f3ec5826090 RCX: 00007f3ec559e159
[   45.482275][  T759] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[   45.490263][  T759] RBP: 00007f3ec64e5090 R08: 0000000000000000 R09: 0000000000000000
[   45.498252][  T759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   45.506224][  T759] R13: 00007f3ec5826128 R14: 00007f3ec5826090 R15: 00007ffe1fdfb9c8
[   45.514201][  T759]  </TASK>
[   45.518750][  T618] usb 1-1: device descriptor read/64, error -71
[   45.549812][  T313] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   45.582493][  T750] process 'syz.2.129' launched './file1' with NULL argv: empty string added
[   45.685189][  T765] device-mapper: ioctl: Invalid ioctl structure: name m, dev fc00
[   45.817757][  T618] usb 1-1: device descriptor read/64, error -71
[   45.833805][  T288] EXT4-fs (loop1): unmounting filesystem.
[   45.891366][  T772] Zero length message leads to an empty skb
[   45.925062][   T19] usbhid 6-1:0.0: can't add hid device: -71
[   45.932039][   T19] usbhid: probe of 6-1:0.0 failed with error -71
[   45.946910][   T19] usb 6-1: USB disconnect, device number 2
[   45.957875][  T618] usb usb1-port1: attempt power cycle
[   46.077963][  T781] netlink: 'syz.1.137': attribute type 10 has an invalid length.
[   46.123354][  T781] capability: warning: `syz.1.137' uses 32-bit capabilities (legacy support in use)
[   46.403797][  T782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   46.412443][  T782] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   46.427698][  T618] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[   46.478933][  T618] usb 1-1: device descriptor read/8, error -71
[   46.509535][  T786] loop2: detected capacity change from 0 to 40427
[   46.519103][  T786] F2FS-fs (loop2): Invalid segment count (6)
[   46.525133][  T786] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[   46.533926][  T786] F2FS-fs (loop2): invalid crc value
[   46.540966][  T786] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[   46.565628][  T786] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0
[   46.572932][  T786] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   46.629124][  T618] usb 1-1: device descriptor read/8, error -71
[   46.705289][  T289] syz-executor: attempt to access beyond end of device
[   46.705289][  T289] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   46.860510][  T811] FAULT_INJECTION: forcing a failure.
[   46.860510][  T811] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   46.873966][  T811] CPU: 1 PID: 811 Comm: syz.5.148 Not tainted syzkaller #0
[   46.881208][  T811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   46.891285][  T811] Call Trace:
[   46.894570][  T811]  <TASK>
[   46.897495][  T811]  __dump_stack+0x21/0x24
[   46.901908][  T811]  dump_stack_lvl+0x110/0x170
[   46.906603][  T811]  ? __cfi_dump_stack_lvl+0x8/0x8
[   46.911682][  T811]  ? __kasan_check_write+0x14/0x20
[   46.916792][  T811]  ? _raw_spin_lock+0x94/0xf0
[   46.921501][  T811]  ? __cfi__raw_spin_lock+0x10/0x10
[   46.926722][  T811]  dump_stack+0x15/0x24
[   46.930900][  T811]  should_fail_ex+0x3bf/0x510
[   46.935590][  T811]  should_fail+0xb/0x10
[   46.939763][  T811]  should_fail_usercopy+0x1a/0x20
[   46.944796][  T811]  _copy_from_user+0x1e/0xc0
[   46.949395][  T811]  copy_from_bpfptr+0x6d/0x90
[   46.954078][  T811]  bpf_prog_load+0xbc8/0x1670
[   46.958755][  T811]  ? map_freeze+0x3a0/0x3a0
[   46.963267][  T811]  ? selinux_bpf+0xc7/0xf0
[   46.967697][  T811]  ? security_bpf+0x93/0xb0
[   46.972208][  T811]  __sys_bpf+0x57b/0x850
[   46.976557][  T811]  ? bpf_link_show_fdinfo+0x330/0x330
[   46.981931][  T811]  ? __cfi_ksys_write+0x10/0x10
[   46.986787][  T811]  ? do_user_addr_fault+0x9a5/0x1030
[   46.992088][  T811]  ? debug_smp_processor_id+0x17/0x20
[   46.997498][  T811]  __x64_sys_bpf+0x7c/0x90
[   47.001927][  T811]  x64_sys_call+0x488/0x9a0
[   47.006443][  T811]  do_syscall_64+0x4c/0xa0
[   47.011046][  T811]  ? clear_bhb_loop+0x30/0x80
[   47.015734][  T811]  ? clear_bhb_loop+0x30/0x80
[   47.020438][  T811]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   47.026338][  T811] RIP: 0033:0x7fbf95d9e159
[   47.030752][  T811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   47.050443][  T811] RSP: 002b:00007fbf96bea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   47.058862][  T811] RAX: ffffffffffffffda RBX: 00007fbf96025fa0 RCX: 00007fbf95d9e159
[   47.066927][  T811] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005
[   47.074895][  T811] RBP: 00007fbf96bea090 R08: 0000000000000000 R09: 0000000000000000
[   47.082869][  T811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   47.090852][  T811] R13: 00007fbf96026038 R14: 00007fbf96025fa0 R15: 00007ffdf8be1a88
[   47.098938][  T811]  </TASK>
[   47.102751][  T618] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[   47.103540][  T388] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[   47.172582][  T812] loop2: detected capacity change from 0 to 512
[   47.180263][  T812] EXT4-fs (loop2): Test dummy encryption mode enabled
[   47.191331][  T618] usb 1-1: device descriptor read/8, error -71
[   47.202871][  T812] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   47.348757][  T618] usb 1-1: device descriptor read/8, error -71
[   47.378838][  T388] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   47.391938][  T388] usb 5-1: config 0 interface 0 has no altsetting 0
[   47.398690][  T388] usb 5-1: New USB device found, idVendor=056a, idProduct=0039, bcdDevice= 0.00
[   47.408208][  T388] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   47.417320][  T388] usb 5-1: config 0 descriptor??
[   47.457712][    T6] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[   47.467801][  T618] usb usb1-port1: unable to enumerate USB device
[   47.492442][   T28] kauditd_printk_skb: 19 callbacks suppressed
[   47.492457][   T28] audit: type=1400 audit(1789951712.620:322): avc:  denied  { name_bind } for  pid=830 comm="syz.0.153" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[   47.520209][   T28] audit: type=1400 audit(1789951712.620:323): avc:  denied  { node_bind } for  pid=830 comm="syz.0.153" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[   47.611531][  T836] loop0: detected capacity change from 0 to 2048
[   47.618568][   T28] audit: type=1400 audit(1789951712.750:324): avc:  denied  { mounton } for  pid=835 comm="syz.0.155" path="/syzcgroup/unified/syz0/cgroup.procs" dev="cgroup2" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1
[   47.644081][    T6] usb 6-1: Using ep0 maxpacket: 32
[   47.650339][  T836] EXT4-fs: Ignoring removed nomblk_io_submit option
[   47.652324][  T289] EXT4-fs (loop2): unmounting filesystem.
[   47.657378][  T836] ext2: Bad value for 'mb_optimize_scan'
[   47.668981][    T6] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   47.691518][    T6] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   47.711677][    T6] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00
[   47.727792][    T6] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   47.737367][    T6] usb 6-1: config 0 descriptor??
[   47.865546][  T388] wacom 0003:056A:0039.0003: hidraw0: USB HID v0.7a Device [HID 056a:0039] on usb-dummy_hcd.4-1/input0
[   47.944041][  T817] ipt_REJECT: ECHOREPLY no longer supported.
[   47.997728][   T24] usb 1-1: new full-speed USB device number 11 using dummy_hcd
[   48.027724][  T295] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[   48.073520][  T794] loop4: detected capacity change from 0 to 1024
[   48.080600][  T794] EXT4-fs: Ignoring removed bh option
[   48.089703][  T794] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   48.143447][  T850] fuse: Unknown parameter '0x0000000000000004'
[   48.149782][   T24] usb 1-1: device descriptor read/64, error -71
[   48.159031][    T6] koneplus 0003:1E7D:2D51.0004: hidraw1: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.5-1/input0
[   48.202035][   T19] usb 5-1: USB disconnect, device number 6
[   48.207968][  T857] loop1: detected capacity change from 0 to 512
[   48.211669][  T295] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   48.245630][  T295] usb 3-1: config 0 interface 0 has no altsetting 0
[   48.253123][  T295] usb 3-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.00
[   48.262265][  T295] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   48.271246][  T295] usb 3-1: config 0 descriptor??
[   48.437730][   T24] usb 1-1: device descriptor read/64, error -71
[   48.522979][  T388] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[   48.559441][  T618] usb 6-1: USB disconnect, device number 3
[   48.678809][  T861] loop2: detected capacity change from 0 to 512
[   48.707840][   T24] usb 1-1: new full-speed USB device number 12 using dummy_hcd
[   48.717781][  T388] usb 2-1: Using ep0 maxpacket: 16
[   48.725023][  T388] usb 2-1: config 32 has an invalid interface number: 64 but max is 0
[   48.762584][  T388] usb 2-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config
[   48.778022][  T388] usb 2-1: config 32 has no interface number 0
[   48.784667][  T388] usb 2-1: New USB device found, idVendor=0bd3, idProduct=0569, bcdDevice= 0.5b
[   48.800022][  T291] EXT4-fs (loop4): unmounting filesystem.
[   48.806990][  T388] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   48.826806][  T388] usb 2-1: Found UVC 0.00 device <unnamed> (0bd3:0569)
[   48.837610][  T388] usb 2-1: No valid video chain found.
[   48.897751][   T24] usb 1-1: device descriptor read/64, error -71
[   49.161765][   T28] audit: type=1400 audit(1789951714.290:325): avc:  denied  { create } for  pid=856 comm="syz.1.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[   49.182248][   T24] usb 1-1: device descriptor read/64, error -71
[   49.308010][   T24] usb usb1-port1: attempt power cycle
[   49.717784][   T24] usb 1-1: new full-speed USB device number 13 using dummy_hcd
[   49.778919][   T24] usb 1-1: device descriptor read/8, error -71
[   49.812001][  T313] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   49.858474][  T860] netlink: 9 bytes leftover after parsing attributes in process `syz.2.158'.
[   49.867918][  T860] device gretap0 entered promiscuous mode
[   49.881150][   T28] audit: type=1400 audit(1789951715.010:326): avc:  denied  { create } for  pid=841 comm="syz.2.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[   49.956901][   T24] usb 1-1: device descriptor read/8, error -71
[   50.029367][  T618] usb 2-1: USB disconnect, device number 12
[   50.668881][  T860] loop2: detected capacity change from 0 to 131072
[   50.676419][  T860] F2FS-fs (loop2): Invalid log sectorsize (67108873)
[   50.683221][  T860] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   50.711960][   T28] audit: type=1400 audit(1789951715.210:327): avc:  denied  { write } for  pid=878 comm="syz.5.167" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[   50.731649][  T860] F2FS-fs (loop2): invalid crc value
[   50.737811][   T24] usb 1-1: new full-speed USB device number 14 using dummy_hcd
[   50.765392][  T860] F2FS-fs (loop2): Found nat_bits in checkpoint
[   50.781143][  T891] loop0: detected capacity change from 0 to 256
[   50.820019][  T860] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   50.827147][  T860] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[   50.827474][  T891] exfat: Deprecated parameter 'utf8'
[   50.866627][  T860] F2FS-fs (loop2): f2fs_unlink: inode (ino=7) has zero i_nlink
[   50.876075][  T295] hid (null): report_id 0 is invalid
[   50.878398][  T891] exfat: Deprecated parameter 'utf8'
[   50.891706][  T898] kernel profiling enabled (shift: 17)
[   50.895643][  T891] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x30348f56, utbl_chksum : 0xe619d30d)
[   51.137720][  T531] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[   51.197734][   T24] usb 1-1: device not accepting address 14, error -71
[   51.204678][   T24] usb usb1-port1: unable to enumerate USB device
[   51.247737][  T618] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[   51.317679][  T531] usb 6-1: Using ep0 maxpacket: 16
[   51.323942][  T531] usb 6-1: config 0 has no interfaces?
[   51.331096][  T531] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[   51.340393][  T531] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   51.348471][  T531] usb 6-1: Product: syz
[   51.352656][  T531] usb 6-1: Manufacturer: syz
[   51.357359][  T531] usb 6-1: SerialNumber: syz
[   51.363047][  T531] r8152-cfgselector 6-1: config 0 descriptor??
[   51.427688][  T618] usb 5-1: Using ep0 maxpacket: 16
[   51.433993][  T618] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 192, changing to 11
[   51.445225][  T618] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   51.458193][  T862] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[   51.465816][  T618] usb 5-1: config 0 interface 0 has no altsetting 0
[   51.472829][  T618] usb 5-1: New USB device found, idVendor=05ac, idProduct=1440, bcdDevice= 0.00
[   51.482020][  T618] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   51.490861][  T618] usb 5-1: config 0 descriptor??
[   51.557705][   T24] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[   51.580029][   T28] audit: type=1400 audit(1789951716.710:328): avc:  denied  { bind } for  pid=894 comm="syz.5.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   51.657695][  T862] usb 2-1: Using ep0 maxpacket: 16
[   51.664070][  T862] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00
[   51.673180][  T862] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   51.681903][  T862] usb 2-1: config 0 descriptor??
[   51.687957][  T862] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected
[   51.697772][  T901] netlink: 'syz.4.173': attribute type 12 has an invalid length.
[   51.705548][  T901] netlink: 'syz.4.173': attribute type 29 has an invalid length.
[   51.713460][  T901] netlink: 148 bytes leftover after parsing attributes in process `syz.4.173'.
[   51.722512][  T901] netlink: 'syz.4.173': attribute type 1 has an invalid length.
[   51.730216][  T901] netlink: 'syz.4.173': attribute type 2 has an invalid length.
[   51.747716][   T24] usb 1-1: Using ep0 maxpacket: 16
[   51.754023][   T24] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   51.765083][   T24] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[   51.775084][   T24] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[   51.788434][   T24] usb 1-1: config 0 interface 0 has no altsetting 0
[   51.795104][   T24] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[   51.804478][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   51.813320][   T24] usb 1-1: config 0 descriptor??
[   51.888883][   T28] audit: type=1400 audit(1789951717.020:329): avc:  denied  { setopt } for  pid=902 comm="syz.1.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   51.894394][  T903] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   51.922551][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[   51.930680][  T862] usb 2-1: Detected FT232B
[   51.931013][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   51.943524][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[   51.952017][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   51.960452][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   51.968906][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   51.977343][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   51.985611][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   52.015063][  T618] input: HID 05ac:1440 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:05AC:1440.0006/input/input8
[   52.092672][  T618] appleir 0003:05AC:1440.0006: input,hiddev96,hidraw0: USB HID v0.04 Device [HID 05ac:1440] on usb-dummy_hcd.4-1/input0
[   52.131189][  T295] usb 3-1: string descriptor 0 read error: -71
[   52.137590][  T531] r8152-cfgselector 6-1: Unknown version 0x0000
[   52.144627][  T289] F2FS-fs (loop2): inconsistent node block, nid:8, node_footer[nid:5,ino:5,ofs:0,cpver:1219692001,blkaddr:15361]
[   52.145012][  T295] uclogic 0003:256C:006E.0005: failed retrieving string descriptor #200: -71
[   52.166339][  T531] r8152-cfgselector 6-1: USB disconnect, device number 4
[   52.173520][  T295] uclogic 0003:256C:006E.0005: failed retrieving pen parameters: -71
[   52.183601][   T28] audit: type=1400 audit(1789951717.310:330): avc:  denied  { write } for  pid=907 comm="syz.5.175" name="dev_mcast" dev="proc" ino=4026532960 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[   52.188989][  T295] uclogic 0003:256C:006E.0005: failed probing pen v2 parameters: -71
[   52.221640][  T295] uclogic 0003:256C:006E.0005: failed probing parameters: -71
[   52.229690][  T891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   52.238598][  T295] uclogic: probe of 0003:256C:006E.0005 failed with error -71
[   52.246289][  T891] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   52.256757][  T295] usb 3-1: USB disconnect, device number 8
[   52.269170][   T24] hid (null): invalid report_count 2075921239
[   52.281214][   T24] hid (null): unknown global tag 0xd
[   52.289029][  T911] FAULT_INJECTION: forcing a failure.
[   52.289029][  T911] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   52.302418][   T24] hid (null): invalid report_count 38340
[   52.303911][  T911] CPU: 0 PID: 911 Comm: syz.5.177 Not tainted syzkaller #0
[   52.315278][  T911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   52.325334][  T911] Call Trace:
[   52.328614][  T911]  <TASK>
[   52.331545][  T911]  __dump_stack+0x21/0x24
[   52.335887][  T911]  dump_stack_lvl+0x110/0x170
[   52.340568][  T911]  ? __cfi_dump_stack_lvl+0x8/0x8
[   52.345596][  T911]  ? format_decode+0x1bb/0x1520
[   52.350455][  T911]  dump_stack+0x15/0x24
[   52.354633][  T911]  should_fail_ex+0x3bf/0x510
[   52.359572][  T911]  should_fail+0xb/0x10
[   52.363723][  T911]  should_fail_usercopy+0x1a/0x20
[   52.368748][  T911]  _copy_from_user+0x1e/0xc0
[   52.373431][  T911]  kstrtouint_from_user+0xda/0x170
[   52.378550][  T911]  ? __cfi_kstrtouint_from_user+0x10/0x10
[   52.384278][  T911]  ? __kasan_check_read+0x11/0x20
[   52.389563][  T911]  ? _copy_to_user+0x72/0x90
[   52.394158][  T911]  ? simple_read_from_buffer+0x10f/0x160
[   52.399805][  T911]  proc_fail_nth_write+0x8b/0x200
[   52.404836][  T911]  ? __cfi_proc_fail_nth_write+0x10/0x10
[   52.410474][  T911]  ? security_file_permission+0x8a/0xb0
[   52.416126][  T911]  ? security_file_permission+0x94/0xb0
[   52.421683][  T911]  ? __cfi_proc_fail_nth_write+0x10/0x10
[   52.427753][  T911]  vfs_write+0x3fb/0xd00
[   52.431993][  T911]  ? __kasan_check_read+0x11/0x20
[   52.437105][  T911]  ? __cfi_vfs_write+0x10/0x10
[   52.441964][  T911]  ? __kasan_check_write+0x14/0x20
[   52.447088][  T911]  ? mutex_lock+0x93/0x1b0
[   52.451527][  T911]  ? __cfi_mutex_lock+0x10/0x10
[   52.456398][  T911]  ? __fdget_pos+0x2cd/0x380
[   52.461004][  T911]  ? ksys_write+0x70/0x260
[   52.465430][  T911]  ksys_write+0x14a/0x260
[   52.469769][  T911]  ? __cfi_ksys_write+0x10/0x10
[   52.474621][  T911]  ? fput+0x154/0x1a0
[   52.478619][  T911]  ? debug_smp_processor_id+0x17/0x20
[   52.483994][  T911]  __x64_sys_write+0x7b/0x90
[   52.488585][  T911]  x64_sys_call+0x27b/0x9a0
[   52.493093][  T911]  do_syscall_64+0x4c/0xa0
[   52.497613][  T911]  ? clear_bhb_loop+0x30/0x80
[   52.502293][  T911]  ? clear_bhb_loop+0x30/0x80
[   52.507057][  T911]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   52.512958][  T911] RIP: 0033:0x7fbf95d5e98e
[   52.517381][  T911] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   52.537158][  T911] RSP: 002b:00007fbf96be9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   52.545581][  T911] RAX: ffffffffffffffda RBX: 00007fbf96bea6c0 RCX: 00007fbf95d5e98e
[   52.553567][  T911] RDX: 0000000000000001 RSI: 00007fbf96bea0a0 RDI: 0000000000000005
[   52.561538][  T911] RBP: 00007fbf96bea090 R08: 0000000000000000 R09: 0000000000000000
[   52.569518][  T911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   52.577493][  T911] R13: 00007fbf96026038 R14: 00007fbf96025fa0 R15: 00007ffdf8be1a88
[   52.585468][  T911]  </TASK>
[   52.590490][   T24] hid (null): invalid report_size 48260
[   52.596205][   T24] hid (null): unknown global tag 0xe
[   52.603675][   T24] hid (null): unknown global tag 0xd
[   52.610224][   T24] hid (null): unknown global tag 0xc
[   52.617011][   T24] hid (null): unknown global tag 0xe
[   52.623791][   T24] hid (null): unknown global tag 0x55
[   52.631160][  T862] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[   52.652949][  T862] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0
[   52.661608][   T24] usb 1-1: USB disconnect, device number 15
[   52.675620][  T862] usb 2-1: USB disconnect, device number 13
[   52.703245][  T862] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[   52.717383][  T862] ftdi_sio 2-1:0.0: device disconnected
[   52.750985][  T913] loop5: detected capacity change from 0 to 128
[   52.768578][  T913] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[   52.990817][    T6] usb 5-1: USB disconnect, device number 7
[   53.047761][  T295] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[   53.055368][  T531] usb 6-1: new full-speed USB device number 5 using dummy_hcd
[   53.086055][   T28] audit: type=1400 audit(1789951718.210:331): avc:  denied  { accept } for  pid=918 comm="syz.4.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[   53.145843][  T921] xt_hashlimit: size too large, truncated to 1048576
[   53.195987][  T920] cgroup: fork rejected by pids controller in /syz1
[   53.247745][  T295] usb 3-1: Using ep0 maxpacket: 16
[   53.254175][  T531] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[   53.265379][  T295] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   53.276716][  T531] usb 6-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0x61, skipping
[   53.287320][  T295] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   53.297213][  T531] usb 6-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   53.310116][  T295] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   53.323062][  T295] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   53.332319][  T295] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   53.341560][  T531] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   53.350783][  T295] usb 3-1: config 0 descriptor??
[   53.355876][  T531] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   53.364450][  T531] usb 6-1: Product: syz
[   53.368762][  T531] usb 6-1: Manufacturer: syz
[   53.374091][  T531] usb 6-1: SerialNumber: syz
[   53.379995][  T913] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[   53.520293][ T1027] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.527396][ T1027] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.535059][ T1027] device bridge_slave_0 entered promiscuous mode
[   53.542439][ T1027] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.549538][ T1027] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.556948][ T1027] device bridge_slave_1 entered promiscuous mode
[   53.613967][ T1027] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.621237][ T1027] bridge0: port 2(bridge_slave_1) entered forwarding state
[   53.628811][ T1027] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.635846][ T1027] bridge0: port 1(bridge_slave_0) entered forwarding state
[   53.659889][  T601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   53.667595][  T601] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.675636][  T601] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.686979][  T601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   53.695296][  T601] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.702350][  T601] bridge0: port 1(bridge_slave_0) entered forwarding state
[   53.711391][  T601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   53.720010][  T601] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.727320][  T601] bridge0: port 2(bridge_slave_1) entered forwarding state
[   53.741991][  T601] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   53.751832][  T601] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   53.768818][  T601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   53.783964][  T601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   53.793258][  T601] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   53.800909][  T601] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   53.809626][ T1027] device veth0_vlan entered promiscuous mode
[   53.824239][  T601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   53.833961][ T1027] device veth1_macvtap entered promiscuous mode
[   53.843776][  T601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   53.854472][  T601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   53.891047][   T28] audit: type=1400 audit(1789951719.010:332): avc:  denied  { mount } for  pid=1027 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   53.913748][  T598] device bridge_slave_1 left promiscuous mode
[   53.924514][  T598] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.934611][  T598] device bridge_slave_0 left promiscuous mode
[   53.941969][  T598] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.951105][  T598] device veth1_macvtap left promiscuous mode
[   53.957227][  T598] device veth0_vlan left promiscuous mode
[   53.976115][  T295] usbhid 3-1:0.0: can't add hid device: -71
[   53.992485][  T295] usbhid: probe of 3-1:0.0 failed with error -71
[   54.000271][  T295] usb 3-1: USB disconnect, device number 9
[   54.197751][  T388] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[   54.377683][  T388] usb 5-1: Using ep0 maxpacket: 32
[   54.383974][  T388] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   54.395400][  T531] cdc_ncm 6-1:1.0: bind() failure
[   54.395417][  T388] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   54.403567][  T531] cdc_ncm: probe of 6-1:1.1 failed with error -71
[   54.410301][  T388] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00
[   54.425924][  T388] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   54.426474][  T531] cdc_mbim: probe of 6-1:1.1 failed with error -71
[   54.435415][  T388] usb 5-1: config 0 descriptor??
[   54.447399][  T531] usb 6-1: USB disconnect, device number 5
[   54.475323][ T1046] device gretap1 entered promiscuous mode
[   54.493862][ T1049] loop2: detected capacity change from 0 to 128
[   54.542024][ T1053] loop0: detected capacity change from 0 to 16
[   54.559505][ T1053] erofs: (device loop0): mounted with root inode @ nid 36.
[   54.571556][ T1053] syz.0.192: attempt to access beyond end of device
[   54.571556][ T1053] loop0: rw=0, sector=8, nr_sectors = 32 limit=16
[   54.603304][  T287] syz-executor: attempt to access beyond end of device
[   54.603304][  T287] loop0: rw=0, sector=296, nr_sectors = 32 limit=16
[   54.619087][  T287] erofs: (device loop0): erofs_readdir: fail to readdir of logical block 0 of nid 36
[   54.653096][ T1034] loop4: detected capacity change from 0 to 512
[   54.691459][ T1034] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   54.723670][ T1034] ext4 filesystem being mounted at /50/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   54.723979][ T1051] loop2: detected capacity change from 0 to 40427
[   54.745277][ T1051] F2FS-fs (loop2): Invalid SB checksum offset: 0
[   54.751992][   T28] audit: type=1400 audit(1789951719.870:333): avc:  denied  { create } for  pid=1033 comm="syz.4.185" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   54.808065][ T1051] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[   54.841266][ T1051] F2FS-fs (loop2): invalid crc value
[   54.879077][ T1051] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[   54.987249][ T1051] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0
[   54.997499][ T1064] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.997751][ T1051] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   55.004693][ T1064] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.020379][ T1064] device bridge_slave_0 entered promiscuous mode
[   55.027995][ T1064] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.035135][ T1064] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.042790][ T1064] device bridge_slave_1 entered promiscuous mode
[   55.156728][  T388] usbhid 5-1:0.0: can't add hid device: -71
[   55.163227][  T388] usbhid: probe of 5-1:0.0 failed with error -71
[   55.173055][  T388] usb 5-1: USB disconnect, device number 8
[   55.179991][   T28] audit: type=1400 audit(1789951720.310:334): avc:  denied  { read write open } for  pid=1050 comm="syz.2.191" path="/34/file1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   55.217390][  T598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   55.225410][  T598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   55.240290][  T598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   55.248821][  T598] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   55.257067][  T598] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.264156][  T598] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.271760][   T28] audit: type=1400 audit(1789951720.400:335): avc:  denied  { ioctl } for  pid=1050 comm="syz.2.191" path="/34/file1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=10 ioctlcmd=0xae89 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   55.272849][  T598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   55.313583][  T598] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   55.323300][  T598] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.330443][  T598] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.341039][ T1081] loop5: detected capacity change from 0 to 128
[   55.348979][  T598] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   55.356740][  T598] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   55.365197][  T598] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   55.376663][  T598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   55.397006][  T599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   55.405194][  T599] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   55.416207][  T599] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   55.424723][ T1064] device veth0_vlan entered promiscuous mode
[   55.441638][ T1064] device veth1_macvtap entered promiscuous mode
[   55.466733][  T599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   55.475708][  T599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   55.484441][  T289] syz-executor: attempt to access beyond end of device
[   55.484441][  T289] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[   55.484832][  T599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   55.574853][   T28] audit: type=1400 audit(1789951720.700:336): avc:  denied  { unmount } for  pid=1064 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[   55.595444][   T28] audit: type=1400 audit(1789951720.700:337): avc:  denied  { accept } for  pid=1086 comm="syz.2.202" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   55.670451][  T291] EXT4-fs (loop4): unmounting filesystem.
[   55.687698][   T24] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[   55.714121][ T1097] loop4: detected capacity change from 0 to 16
[   55.714151][ T1094] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=1094 comm=syz.1.206
[   55.721097][ T1097] erofs: (device loop4): mounted with root inode @ nid 36.
[   55.740103][ T1094] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1094 comm=syz.1.206
[   55.760032][ T1097] syz.4.204: attempt to access beyond end of device
[   55.760032][ T1097] loop4: rw=0, sector=8, nr_sectors = 32 limit=16
[   55.784789][  T291] syz-executor: attempt to access beyond end of device
[   55.784789][  T291] loop4: rw=0, sector=296, nr_sectors = 32 limit=16
[   55.798564][  T291] erofs: (device loop4): erofs_readdir: fail to readdir of logical block 0 of nid 36
[   55.859034][   T28] audit: type=1400 audit(1789951720.990:338): avc:  denied  { create } for  pid=1099 comm="syz.1.208" name="#9" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   55.887823][  T618] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[   55.902247][   T28] audit: type=1400 audit(1789951721.020:339): avc:  denied  { link } for  pid=1099 comm="syz.1.208" name="#9" dev="tmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   55.917692][   T24] usb 6-1: Using ep0 maxpacket: 16
[   55.938811][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   55.946175][   T28] audit: type=1400 audit(1789951721.020:340): avc:  denied  { rename } for  pid=1099 comm="syz.1.208" name="#a" dev="tmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   55.950050][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   55.981892][   T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   55.995000][   T24] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   56.009419][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   56.024184][   T24] usb 6-1: config 0 descriptor??
[   56.077737][  T618] usb 7-1: Using ep0 maxpacket: 16
[   56.084157][  T618] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 8
[   56.101665][  T618] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[   56.117664][  T618] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   56.135999][  T618] usb 7-1: Product: syz
[   56.140431][  T618] usb 7-1: Manufacturer: syz
[   56.145103][  T618] usb 7-1: SerialNumber: syz
[   56.155025][  T618] usb 7-1: config 0 descriptor??
[   56.200051][ T1113] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.207282][ T1113] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.215777][ T1113] device bridge_slave_0 entered promiscuous mode
[   56.224307][ T1113] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.231438][ T1113] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.241422][ T1113] device bridge_slave_1 entered promiscuous mode
[   56.315377][ T1113] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.322481][ T1113] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.329902][ T1113] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.336941][ T1113] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.361661][  T598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   56.369602][  T598] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.376920][  T598] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.387463][  T598] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   56.395815][  T598] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.402930][  T598] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.413390][  T598] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   56.422135][  T598] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.429298][  T598] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.447880][  T599] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   56.458840][   T10] device bridge_slave_1 left promiscuous mode
[   56.462640][ T1118] loop2: detected capacity change from 0 to 1024
[   56.465094][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.474210][ T1118] EXT4-fs: Ignoring removed bh option
[   56.484905][   T10] device bridge_slave_0 left promiscuous mode
[   56.491715][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.500710][   T10] device veth1_macvtap left promiscuous mode
[   56.501260][ T1118] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   56.507460][   T10] device veth0_vlan left promiscuous mode
[   56.527272][ T1118] EXT4-fs error (device loop2): ext4_find_dest_de:2115: inode #12: block 7: comm syz.2.211: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0
[   56.547372][ T1118] EXT4-fs (loop2): Remounting filesystem read-only
[   56.565053][  T289] EXT4-fs error (device loop2): ext4_read_inline_dir:1611: inode #12: block 7: comm syz-executor: path /36/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[   56.587469][  T289] EXT4-fs (loop2): Remounting filesystem read-only
[   56.594965][  T289] EXT4-fs error (device loop2): ext4_read_inline_dir:1611: inode #12: block 7: comm syz-executor: path /36/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[   56.617459][  T289] EXT4-fs (loop2): Remounting filesystem read-only
[   56.624499][  T289] EXT4-fs error (device loop2): empty_inline_dir:1895: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[   56.644805][  T289] EXT4-fs (loop2): Remounting filesystem read-only
[   56.651658][  T289] EXT4-fs warning (device loop2): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   56.666146][  T289] EXT4-fs error (device loop2): ext4_read_inline_dir:1611: inode #12: block 7: comm syz-executor: path /36/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[   56.666220][   T24] usbhid 6-1:0.0: can't add hid device: -71
[   56.688439][   T24] usbhid: probe of 6-1:0.0 failed with error -71
[   56.700966][  T289] EXT4-fs (loop2): Remounting filesystem read-only
[   56.707957][  T289] EXT4-fs error (device loop2): ext4_read_inline_dir:1611: inode #12: block 7: comm syz-executor: path /36/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[   56.710984][  T598] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   56.730176][  T289] EXT4-fs (loop2): Remounting filesystem read-only
[   56.740986][   T24] usb 6-1: USB disconnect, device number 6
[   56.744847][  T289] EXT4-fs error (device loop2): empty_inline_dir:1895: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[   56.773127][  T289] EXT4-fs (loop2): Remounting filesystem read-only
[   56.781326][  T598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   56.787268][  T289] EXT4-fs warning (device loop2): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   56.805530][  T289] EXT4-fs error (device loop2): ext4_read_inline_dir:1611: inode #12: block 7: comm syz-executor: path /36/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[   56.808182][ T1113] device veth0_vlan entered promiscuous mode
[   56.835174][  T598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   56.837792][  T289] EXT4-fs (loop2): Remounting filesystem read-only
[   56.850308][  T598] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   56.857908][  T289] EXT4-fs error (device loop2): ext4_read_inline_dir:1611: inode #12: block 7: comm syz-executor: path /36/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[   56.868547][  T598] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   56.885456][  T289] EXT4-fs (loop2): Remounting filesystem read-only
[   56.895650][  T289] EXT4-fs error (device loop2): empty_inline_dir:1895: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[   56.918548][  T598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   56.918926][  T289] EXT4-fs warning (device loop2): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   56.931801][ T1113] device veth1_macvtap entered promiscuous mode
[   56.951005][  T289] EXT4-fs warning (device loop2): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   56.953915][  T598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   56.966153][  T289] EXT4-fs warning (device loop2): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   56.989731][  T289] EXT4-fs warning (device loop2): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   57.004679][  T289] EXT4-fs warning (device loop2): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   57.019931][  T598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   57.028854][  T289] EXT4-fs warning (device loop2): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   57.060306][  T289] EXT4-fs warning (device loop2): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   57.079766][  T289] EXT4-fs warning (device loop2): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   57.280456][ T1138] loop7: detected capacity change from 0 to 512
[   57.329707][ T1138] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[   57.341768][ T1138] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   57.438750][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.445879][ T1143] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.453428][ T1143] device bridge_slave_0 entered promiscuous mode
[   57.462709][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.470213][ T1143] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.478060][ T1143] device bridge_slave_1 entered promiscuous mode
[   57.497787][  T905] usb 6-1: new low-speed USB device number 7 using dummy_hcd
[   57.557799][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.564915][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.572255][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.579307][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.610935][  T601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   57.619691][  T601] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.627069][  T601] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.644876][  T601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   57.653419][  T601] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.660748][  T601] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.671289][  T601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   57.680414][  T601] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.687477][  T601] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.708104][  T905] usb 6-1: Invalid ep0 maxpacket: 64
[   57.842407][ T1144] fuse: Bad value for 'user_id'
[   57.852692][  T601] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   57.860584][  T905] usb 6-1: new low-speed USB device number 8 using dummy_hcd
[   57.865995][  T601] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   57.898223][  T601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   57.912933][  T601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   57.921983][  T601] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   57.931095][  T601] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   57.940141][ T1143] device veth0_vlan entered promiscuous mode
[   57.956274][  T601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   57.966225][ T1143] device veth1_macvtap entered promiscuous mode
[   57.978409][  T601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   57.996612][  T598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   58.077713][  T905] usb 6-1: Invalid ep0 maxpacket: 64
[   58.083605][  T905] usb usb6-port1: attempt power cycle
[   58.149726][   T10] device bridge_slave_1 left promiscuous mode
[   58.156018][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.158416][ T1160] loop1: detected capacity change from 0 to 512
[   58.169648][   T10] device bridge_slave_0 left promiscuous mode
[   58.175991][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.178463][   T28] kauditd_printk_skb: 9 callbacks suppressed
[   58.178476][   T28] audit: type=1400 audit(1789951723.300:350): avc:  denied  { mounton } for  pid=1153 comm="syz.1.223" path="/10/file0" dev="tmpfs" ino=80 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   58.295828][   T10] device veth1_macvtap left promiscuous mode
[   58.302430][   T10] device veth0_vlan left promiscuous mode
[   58.360100][ T1113] EXT4-fs (loop7): unmounting filesystem.
[   58.391730][ T1160] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   58.413711][ T1166] netlink: 16 bytes leftover after parsing attributes in process `syz.8.224'.
[   58.432878][ T1160] EXT4-fs (loop1): unmounting filesystem.
[   58.653653][   T40] usb 7-1: USB disconnect, device number 2
[   58.698044][  T618] usb 9-1: new full-speed USB device number 2 using dummy_hcd
[   58.877961][ T1160] loop1: detected capacity change from 0 to 131072
[   58.887233][ T1160] F2FS-fs (loop1): Test dummy encryption mode enabled
[   58.895511][ T1160] F2FS-fs (loop1): invalid crc value
[   58.905005][ T1160] F2FS-fs (loop1): Found nat_bits in checkpoint
[   58.939780][ T1160] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   58.947839][  T905] usb 6-1: new low-speed USB device number 9 using dummy_hcd
[   58.958175][  T388] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[   58.989045][  T905] usb 6-1: Invalid ep0 maxpacket: 64
[   59.080499][   T40] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[   59.147957][  T905] usb 6-1: new low-speed USB device number 10 using dummy_hcd
[   59.148187][  T388] usb 8-1: Using ep0 maxpacket: 16
[   59.164220][  T388] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   59.175552][  T388] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   59.185749][  T388] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   59.188025][  T905] usb 6-1: Invalid ep0 maxpacket: 64
[   59.198987][  T388] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   59.209706][  T905] usb usb6-port1: unable to enumerate USB device
[   59.213459][  T388] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   59.234690][  T388] usb 8-1: config 0 descriptor??
[   59.267762][   T40] usb 7-1: Using ep0 maxpacket: 8
[   59.274569][   T40] usb 7-1: config 0 has an invalid interface number: 31 but max is 0
[   59.283036][   T40] usb 7-1: config 0 has no interface number 0
[   59.290896][   T40] usb 7-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[   59.302447][   T40] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   59.312437][   T40] usb 7-1: Product: syz
[   59.316640][   T40] usb 7-1: Manufacturer: syz
[   59.321794][   T40] usb 7-1: SerialNumber: syz
[   59.327225][   T40] usb 7-1: config 0 descriptor??
[   59.458369][   T10] device bridge_slave_1 left promiscuous mode
[   59.464606][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.472657][   T10] device bridge_slave_0 left promiscuous mode
[   59.478989][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.487052][   T10] device veth1_macvtap left promiscuous mode
[   59.493171][   T10] device veth0_vlan left promiscuous mode
[   59.534948][   T40] usb 7-1: USB disconnect, device number 3
[   59.843156][  T388] usbhid 8-1:0.0: can't add hid device: -71
[   59.849212][  T388] usbhid: probe of 8-1:0.0 failed with error -71
[   59.857310][  T388] usb 8-1: USB disconnect, device number 2
[   60.204523][ T1193] set_capacity_and_notify: 1 callbacks suppressed
[   60.204536][ T1193] loop1: detected capacity change from 0 to 256
[   60.268648][  T565] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   60.318369][  T388] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[   60.375220][   T10] Bluetooth: hci0: Frame reassembly failed (-84)
[   60.392864][ T1196] loop5: detected capacity change from 0 to 40427
[   60.408581][ T1196] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[   60.426625][ T1196] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[   60.434297][ T1200] 9pnet: p9_errstr2errno: server reported unknown error ���)9nGq�R��
[   60.435605][ T1196] F2FS-fs (loop5): invalid crc value
[   60.451681][ T1196] F2FS-fs (loop5): Found nat_bits in checkpoint
[   60.491850][ T1196] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[   60.499009][   T28] audit: type=1400 audit(1789951725.620:351): avc:  denied  { listen } for  pid=1199 comm="syz.1.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   60.518931][  T388] usb 7-1: Using ep0 maxpacket: 16
[   60.519052][ T1196] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[   60.525255][  T388] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00
[   60.541426][  T388] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   60.563225][  T388] usb 7-1: config 0 descriptor??
[   60.572173][  T388] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected
[   60.772508][ T1191] loop6: detected capacity change from 0 to 512
[   60.782410][ T1217] loop5: detected capacity change from 0 to 512
[   60.807090][ T1217] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[   60.816952][ T1217] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   60.843052][ T1191] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[   60.854486][ T1191] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   60.944519][  T388] usb 7-1: Detected FT232A
[   60.949817][  T388] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0
[   60.977339][  T388] usb 7-1: USB disconnect, device number 4
[   60.984358][  T388] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[   60.994527][  T388] ftdi_sio 7-1:0.0: device disconnected
[   61.308717][  T618] usb 9-1: unable to read config index 0 descriptor/start: -71
[   61.320722][  T618] usb 9-1: can't read configurations, error -71
[   61.401371][ T1226] netlink: 8 bytes leftover after parsing attributes in process `syz.8.239'.
[   61.480333][ T1228] loop1: detected capacity change from 0 to 512
[   61.488930][ T1228] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #2: comm syz.1.240: missing EA_INODE flag
[   61.500700][ T1228] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.240: error while reading EA inode 2 err=-117
[   61.513350][ T1228] EXT4-fs (loop1): 1 orphan inode deleted
[   61.519117][ T1228] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   61.529480][ T1228] EXT4-fs (loop1): shut down requested (2)
[   61.540247][ T1228] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   61.542353][   T28] audit: type=1400 audit(1789951726.670:352): avc:  denied  { read } for  pid=85 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[   61.549214][ T1228] EXT4-fs (loop1): re-mounted. Quota mode: writeback.
[   61.571427][   T28] audit: type=1400 audit(1789951726.670:353): avc:  denied  { search } for  pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   61.599268][   T28] audit: type=1400 audit(1789951726.670:354): avc:  denied  { write } for  pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   61.620834][   T28] audit: type=1400 audit(1789951726.670:355): avc:  denied  { add_name } for  pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   61.642662][   T28] audit: type=1400 audit(1789951726.670:356): avc:  denied  { create } for  pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   61.663577][   T28] audit: type=1400 audit(1789951726.670:357): avc:  denied  { append open } for  pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   61.673057][ T1230] SELinux:  policydb table sizes (0,0) do not match mine (8,7)
[   61.686964][   T28] audit: type=1400 audit(1789951726.670:358): avc:  denied  { getattr } for  pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   61.694225][ T1230] SELinux: failed to load policy
[   61.728421][   T28] audit: type=1400 audit(1789951726.790:359): avc:  denied  { load_policy } for  pid=1227 comm="syz.1.240" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[   61.756865][  T701] EXT4-fs (loop5): unmounting filesystem.
[   61.763486][ T1064] EXT4-fs (loop6): unmounting filesystem.
[   61.817738][  T618] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[   61.967731][  T618] usb 9-1: device descriptor read/64, error -71
[   62.237730][  T618] usb 9-1: device descriptor read/64, error -71
[   62.314533][ T1027] EXT4-fs (loop1): unmounting filesystem.
[   62.329165][ T1247] loop1: detected capacity change from 0 to 512
[   62.335825][ T1247] ext4: Bad value for 'sb'
[   62.354376][ T1249] FAULT_INJECTION: forcing a failure.
[   62.354376][ T1249] name failslab, interval 1, probability 0, space 0, times 0
[   62.367391][ T1249] CPU: 0 PID: 1249 Comm: syz.1.245 Not tainted syzkaller #0
[   62.368302][  T618] usb usb9-port1: attempt power cycle
[   62.374688][ T1249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   62.374703][ T1249] Call Trace:
[   62.374709][ T1249]  <TASK>
[   62.374716][ T1249]  __dump_stack+0x21/0x24
[   62.400829][ T1249]  dump_stack_lvl+0x110/0x170
[   62.405508][ T1249]  ? __cfi_dump_stack_lvl+0x8/0x8
[   62.410534][ T1249]  dump_stack+0x15/0x24
[   62.414703][ T1249]  should_fail_ex+0x3bf/0x510
[   62.419368][ T1249]  __should_failslab+0xac/0xf0
[   62.424137][ T1249]  should_failslab+0x9/0x20
[   62.428626][ T1249]  __kmem_cache_alloc_node+0x3d/0x2d0
[   62.433988][ T1249]  ? kvmalloc_node+0x28a/0x460
[   62.438755][ T1249]  ? kvmalloc_node+0x28a/0x460
[   62.443504][ T1249]  __kmalloc_node+0xa2/0x1e0
[   62.448088][ T1249]  ? kstrtoull+0x137/0x1d0
[   62.452507][ T1249]  kvmalloc_node+0x28a/0x460
[   62.457089][ T1249]  ? __cfi_kvmalloc_node+0x10/0x10
[   62.462185][ T1249]  ? kstrtouint_from_user+0x113/0x170
[   62.467544][ T1249]  ? __cfi_kstrtouint_from_user+0x10/0x10
[   62.467851][  T314] Bluetooth: hci0: command 0x1003 tx timeout
[   62.473252][ T1249]  proc_sys_call_handler+0x3be/0x7e0
[   62.473283][ T1249]  ? proc_sys_open+0x280/0x280
[   62.473303][ T1249]  ? selinux_file_permission+0x2a5/0x510
[   62.473326][ T1249]  ? security_file_permission+0x8a/0xb0
[   62.473351][ T1249]  proc_sys_write+0x22/0x30
[   62.473374][ T1249]  vfs_write+0x5ef/0xd00
[   62.479811][  T317] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   62.485070][ T1249]  ? __cfi_vfs_write+0x10/0x10
[   62.492040][ T1203] Bluetooth: hci0: Opcode 0x0c20 failed: -22
[   62.495457][ T1249]  ? __cfi_mutex_lock+0x10/0x10
[   62.495490][ T1249]  ? __fdget_pos+0x2cd/0x380
[   62.535993][ T1249]  ? ksys_write+0x70/0x260
[   62.540425][ T1249]  ksys_write+0x14a/0x260
[   62.544849][ T1249]  ? __cfi_ksys_write+0x10/0x10
[   62.549705][ T1249]  ? debug_smp_processor_id+0x17/0x20
[   62.555090][ T1249]  __x64_sys_write+0x7b/0x90
[   62.559851][ T1249]  x64_sys_call+0x27b/0x9a0
[   62.564354][ T1249]  do_syscall_64+0x4c/0xa0
[   62.568785][ T1249]  ? clear_bhb_loop+0x30/0x80
[   62.573461][ T1249]  ? clear_bhb_loop+0x30/0x80
[   62.578133][ T1249]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   62.584023][ T1249] RIP: 0033:0x7f9e84b9e159
[   62.588450][ T1249] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   62.608050][ T1249] RSP: 002b:00007f9e85abc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   62.616465][ T1249] RAX: ffffffffffffffda RBX: 00007f9e84e25fa0 RCX: 00007f9e84b9e159
[   62.624434][ T1249] RDX: 0000000000000015 RSI: 00002000000006c0 RDI: 0000000000000003
[   62.632402][ T1249] RBP: 00007f9e85abc090 R08: 0000000000000000 R09: 0000000000000000
[   62.640458][ T1249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   62.648428][ T1249] R13: 00007f9e84e26038 R14: 00007f9e84e25fa0 R15: 00007ffebcf28a38
[   62.656435][ T1249]  </TASK>
[   62.827223][ T1262] loop6: detected capacity change from 0 to 512
[   62.858737][ T1262] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[   62.890710][ T1266] loop1: detected capacity change from 0 to 256
[   62.910703][ T1266] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[   62.947746][  T618] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[   62.954206][ T1266] syz.1.251: attempt to access beyond end of device
[   62.954206][ T1266] loop1: rw=524288, sector=440, nr_sectors = 256 limit=256
[   62.971796][ T1266] syz.1.251: attempt to access beyond end of device
[   62.971796][ T1266] loop1: rw=524288, sector=696, nr_sectors = 256 limit=256
[   62.985776][ T1266] syz.1.251: attempt to access beyond end of device
[   62.985776][ T1266] loop1: rw=0, sector=440, nr_sectors = 8 limit=256
[   63.000104][ T1266] syz.1.251: attempt to access beyond end of device
[   63.000104][ T1266] loop1: rw=0, sector=440, nr_sectors = 8 limit=256
[   63.014587][  T618] usb 9-1: device descriptor read/8, error -71
[   63.019661][ T1266] syz.1.251: attempt to access beyond end of device
[   63.019661][ T1266] loop1: rw=0, sector=440, nr_sectors = 8 limit=256
[   63.034430][ T1266] syz.1.251: attempt to access beyond end of device
[   63.034430][ T1266] loop1: rw=0, sector=440, nr_sectors = 8 limit=256
[   63.034973][ T1064] EXT4-fs (loop6): unmounting filesystem.
[   63.047914][ T1266] syz.1.251: attempt to access beyond end of device
[   63.047914][ T1266] loop1: rw=0, sector=440, nr_sectors = 8 limit=256
[   63.068126][ T1278] binder: 1270:1278 ioctl c0306201 0 returned -14
[   63.075279][ T1276] syz.1.251: attempt to access beyond end of device
[   63.075279][ T1276] loop1: rw=2049, sector=296, nr_sectors = 8 limit=256
[   63.085730][ T1266] syz.1.251: attempt to access beyond end of device
[   63.085730][ T1266] loop1: rw=0, sector=440, nr_sectors = 8 limit=256
[   63.106971][ T1266] syz.1.251: attempt to access beyond end of device
[   63.106971][ T1266] loop1: rw=0, sector=440, nr_sectors = 8 limit=256
[   63.138147][ T1282] binder: 1270:1282 ioctl c0306201 0 returned -14
[   63.169236][ T1284] loop5: detected capacity change from 0 to 16
[   63.193745][ T1284] erofs: (device loop5): mounted with root inode @ nid 36.
[   63.208740][  T618] usb 9-1: device descriptor read/8, error -71
[   63.319565][ T1281] loop6: detected capacity change from 0 to 40427
[   63.334561][ T1281] F2FS-fs (loop6): Unrecognized mount option "active_�$��L�~���5g�lloc_modeNreuse" or missing value
[   63.477674][  T618] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[   63.518736][  T618] usb 9-1: device descriptor read/8, error -71
[   63.668756][  T618] usb 9-1: device descriptor read/8, error -71
[   63.754570][   T28] kauditd_printk_skb: 25 callbacks suppressed
[   63.754588][   T28] audit: type=1326 audit(1789951728.880:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1289 comm="syz.1.258" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e84b9e159 code=0x7ffc0000
[   63.763255][ T1290] ext4: Bad value for 'max_batch_time'
[   63.785751][   T28] audit: type=1326 audit(1789951728.880:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1289 comm="syz.1.258" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e84b9e159 code=0x7ffc0000
[   63.797773][  T618] usb usb9-port1: unable to enumerate USB device
[   63.818935][   T28] audit: type=1326 audit(1789951728.880:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1289 comm="syz.1.258" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e84b9e159 code=0x7ffc0000
[   63.841884][ T1292] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[   63.850535][   T28] audit: type=1326 audit(1789951728.880:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1289 comm="syz.1.258" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e84b9e159 code=0x7ffc0000
[   63.882705][   T28] audit: type=1326 audit(1789951728.880:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1289 comm="syz.1.258" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7f9e84b9e159 code=0x7ffc0000
[   63.929849][   T28] audit: type=1326 audit(1789951728.880:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1289 comm="syz.1.258" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e84b9e159 code=0x7ffc0000
[   63.974345][   T28] audit: type=1326 audit(1789951728.880:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1289 comm="syz.1.258" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e84b9e159 code=0x7ffc0000
[   63.999521][   T28] audit: type=1326 audit(1789951728.880:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1289 comm="syz.1.258" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e84b9e159 code=0x7ffc0000
[   64.024256][   T28] audit: type=1326 audit(1789951728.880:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1289 comm="syz.1.258" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9e84b9e159 code=0x7ffc0000
[   64.050220][   T28] audit: type=1326 audit(1789951728.880:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1289 comm="syz.1.258" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e84b9e159 code=0x7ffc0000
[   64.105008][ T1294] syz.7.260 (1294): drop_caches: 3
[   64.177898][ T1297] syz.5.262 (1297): drop_caches: 3
[   64.253650][ T1310] erofs: (device loop6): mounted with root inode @ nid 36.
[   64.308371][ T1315] erofs: (device loop6): mounted with root inode @ nid 36.
[   64.477683][  T618] usb 6-1: new full-speed USB device number 11 using dummy_hcd
[   64.499657][ T1335] syz.1.274 (1335): drop_caches: 3
[   64.517654][    C1] ==================================================================
[   64.525764][    C1] BUG: KASAN: use-after-free in __run_timers+0x341/0x9b0
[   64.532790][    C1] Write of size 8 at addr ffff8881174e0a00 by task swapper/1/0
[   64.540446][    C1] 
[   64.542760][    C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0
[   64.549769][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   64.559906][    C1] Call Trace:
[   64.563190][    C1]  <IRQ>
[   64.566033][    C1]  __dump_stack+0x21/0x24
[   64.570365][    C1]  dump_stack_lvl+0x110/0x170
[   64.575114][    C1]  ? __cfi_dump_stack_lvl+0x8/0x8
[   64.580134][    C1]  ? __run_timers+0x341/0x9b0
[   64.584811][    C1]  print_address_description+0x71/0x200
[   64.590367][    C1]  print_report+0x4a/0x60
[   64.594697][    C1]  kasan_report+0x122/0x150
[   64.599307][    C1]  ? __run_timers+0x341/0x9b0
[   64.604005][    C1]  __asan_report_store8_noabort+0x17/0x20
[   64.609749][    C1]  __run_timers+0x341/0x9b0
[   64.614316][    C1]  ? sched_clock_cpu+0x6e/0x260
[   64.619175][    C1]  ? calc_index+0x200/0x200
[   64.623700][    C1]  ? kvm_sched_clock_read+0x18/0x40
[   64.629617][    C1]  run_timer_softirq+0x6a/0xf0
[   64.634402][    C1]  handle_softirqs+0x1d7/0x600
[   64.639158][    C1]  __irq_exit_rcu+0x52/0xf0
[   64.643649][    C1]  irq_exit_rcu+0x9/0x10
[   64.647882][    C1]  sysvec_apic_timer_interrupt+0xa9/0xc0
[   64.653516][    C1]  </IRQ>
[   64.656438][    C1]  <TASK>
[   64.659357][    C1]  asm_sysvec_apic_timer_interrupt+0x1b/0x20
[   64.665328][    C1] RIP: 0010:default_idle+0xf/0x20
[   64.670349][    C1] Code: cc 00 00 cc cc 00 00 cc cc 00 00 90 90 90 90 90 90 90 90 90 90 90 b8 0c 67 40 a5 55 48 89 e5 66 90 0f 00 2d 83 89 64 00 fb f4 <5d> c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 90 90 90 90 90
[   64.689945][    C1] RSP: 0018:ffffc90000147dd8 EFLAGS: 00000257
[   64.696175][    C1] RAX: ffff8881f6f00000 RBX: ffff888100331440 RCX: dedbc76f20746300
[   64.704135][    C1] RDX: 0000000000000001 RSI: ffffffff85ca6e80 RDI: ffffffff85ca6e40
[   64.712095][    C1] RBP: ffffc90000147dd8 R08: ffff8881f6f348b3 R09: 1ffff1103ede6916
[   64.720060][    C1] R10: 0000000000000000 R11: ffffffff8501a690 R12: dffffc0000000000
[   64.728036][    C1] R13: 0000000000000001 R14: ffff888100331440 R15: dffffc0000000000
[   64.736101][    C1]  ? __cfi_default_idle+0x10/0x10
[   64.741145][    C1]  arch_cpu_idle+0x1c/0x20
[   64.745667][    C1]  default_idle_call+0x71/0x1d0
[   64.750529][    C1]  do_idle+0x354/0x640
[   64.754616][    C1]  ? ct_irq_exit+0x9/0x10
[   64.758959][    C1]  ? irqentry_exit+0x30/0x40
[   64.763552][    C1]  ? idle_inject_timer_fn+0x60/0x60
[   64.768750][    C1]  cpu_startup_entry+0x43/0x60
[   64.773622][    C1]  start_secondary+0x119/0x120
[   64.778419][    C1]  secondary_startup_64_no_verify+0xce/0xdb
[   64.784349][    C1]  </TASK>
[   64.787418][    C1] 
[   64.789825][    C1] Allocated by task 1203:
[   64.794141][    C1]  kasan_set_track+0x4b/0x70
[   64.798730][    C1]  kasan_save_alloc_info+0x1f/0x30
[   64.803836][    C1]  __kasan_kmalloc+0x95/0xb0
[   64.808423][    C1]  __kmalloc+0xb4/0x1e0
[   64.812577][    C1]  hci_alloc_dev_priv+0x27/0x1bd0
[   64.817695][    C1]  hci_uart_tty_ioctl+0x3c4/0xa70
[   64.822993][    C1]  tty_ioctl+0x8ef/0xc60
[   64.827248][    C1]  __se_sys_ioctl+0x12f/0x1b0
[   64.831933][    C1]  __x64_sys_ioctl+0x7b/0x90
[   64.836529][    C1]  x64_sys_call+0x58b/0x9a0
[   64.841029][    C1]  do_syscall_64+0x4c/0xa0
[   64.845617][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   64.851504][    C1] 
[   64.853820][    C1] Freed by task 1203:
[   64.857791][    C1]  kasan_set_track+0x4b/0x70
[   64.862383][    C1]  kasan_save_free_info+0x2b/0x40
[   64.867399][    C1]  ____kasan_slab_free+0x132/0x180
[   64.872505][    C1]  __kasan_slab_free+0x11/0x20
[   64.877381][    C1]  slab_free_freelist_hook+0xc2/0x190
[   64.882920][    C1]  __kmem_cache_free+0xb7/0x1b0
[   64.887781][    C1]  kfree+0x6f/0xf0
[   64.891499][    C1]  hci_release_dev+0x12a3/0x13b0
[   64.896432][    C1]  bt_host_release+0x82/0x90
[   64.901017][    C1]  device_release+0xa4/0x1d0
[   64.905605][    C1]  kobject_put+0x19d/0x280
[   64.910016][    C1]  put_device+0x1f/0x30
[   64.914170][    C1]  hci_dev_cmd+0x279/0x740
[   64.918581][    C1]  hci_sock_ioctl+0x41e/0x7f0
[   64.923252][    C1]  sock_do_ioctl+0x114/0x330
[   64.927840][    C1]  sock_ioctl+0x475/0x700
[   64.932162][    C1]  __se_sys_ioctl+0x12f/0x1b0
[   64.936868][    C1]  __x64_sys_ioctl+0x7b/0x90
[   64.941461][    C1]  x64_sys_call+0x58b/0x9a0
[   64.946067][    C1]  do_syscall_64+0x4c/0xa0
[   64.950497][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   64.956427][    C1] 
[   64.958759][    C1] Last potentially related work creation:
[   64.964473][    C1]  kasan_save_stack+0x3a/0x60
[   64.969168][    C1]  __kasan_record_aux_stack+0xb6/0xc0
[   64.974563][    C1]  kasan_record_aux_stack_noalloc+0xb/0x10
[   64.980409][    C1]  insert_work+0x51/0x300
[   64.984763][    C1]  __queue_work+0x9d0/0xd50
[   64.989272][    C1]  queue_work_on+0xde/0x150
[   64.993777][    C1]  __hci_cmd_sync_sk+0xaa8/0xd80
[   64.998890][    C1]  hci_cmd_sync_status+0x53/0x120
[   65.004019][    C1]  hci_dev_cmd+0x642/0x740
[   65.008471][    C1]  hci_sock_ioctl+0x41e/0x7f0
[   65.013169][    C1]  sock_do_ioctl+0x114/0x330
[   65.017779][    C1]  sock_ioctl+0x475/0x700
[   65.022115][    C1]  __se_sys_ioctl+0x12f/0x1b0
[   65.026906][    C1]  __x64_sys_ioctl+0x7b/0x90
[   65.031496][    C1]  x64_sys_call+0x58b/0x9a0
[   65.035999][    C1]  do_syscall_64+0x4c/0xa0
[   65.040468][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   65.046384][    C1] 
[   65.048715][    C1] Second to last potentially related work creation:
[   65.055290][    C1]  kasan_save_stack+0x3a/0x60
[   65.059970][    C1]  __kasan_record_aux_stack+0xb6/0xc0
[   65.065338][    C1]  kasan_record_aux_stack_noalloc+0xb/0x10
[   65.071147][    C1]  insert_work+0x51/0x300
[   65.075490][    C1]  __queue_work+0x9d0/0xd50
[   65.080015][    C1]  queue_work_on+0xde/0x150
[   65.084526][    C1]  hci_cmd_timeout+0x191/0x200
[   65.089377][    C1]  process_one_work+0x717/0xc30
[   65.094230][    C1]  worker_thread+0xa4d/0x11d0
[   65.098899][    C1]  kthread+0x281/0x320
[   65.102966][    C1]  ret_from_fork+0x1f/0x30
[   65.107392][    C1] 
[   65.109711][    C1] The buggy address belongs to the object at ffff8881174e0000
[   65.109711][    C1]  which belongs to the cache kmalloc-8k of size 8192
[   65.123756][    C1] The buggy address is located 2560 bytes inside of
[   65.123756][    C1]  8192-byte region [ffff8881174e0000, ffff8881174e2000)
[   65.137205][    C1] 
[   65.139523][    C1] The buggy address belongs to the physical page:
[   65.145934][    C1] page:ffffea00045d3800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1174e0
[   65.156167][    C1] head:ffffea00045d3800 order:3 compound_mapcount:0 compound_pincount:0
[   65.164484][    C1] flags: 0x4000000000010200(slab|head|zone=1)
[   65.170563][    C1] raw: 4000000000010200 ffffea00045a1c00 dead000000000003 ffff888100043500
[   65.179319][    C1] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000
[   65.187902][    C1] page dumped because: kasan: bad access detected
[   65.194301][    C1] page_owner tracks the page as allocated
[   65.200012][    C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 402, tgid 402 (syz.4.26), ts 28385575758, free_ts 28357074955
[   65.222511][    C1]  post_alloc_hook+0x1f5/0x210
[   65.227281][    C1]  prep_new_page+0x1c/0x110
[   65.231788][    C1]  get_page_from_freelist+0x2ca9/0x2d20
[   65.237337][    C1]  __alloc_pages+0x1fa/0x610
[   65.241948][    C1]  alloc_slab_page+0x6e/0xf0
[   65.246530][    C1]  new_slab+0x98/0x3e0
[   65.250592][    C1]  ___slab_alloc+0x70f/0xb70
[   65.255192][    C1]  __slab_alloc+0x5e/0xa0
[   65.259524][    C1]  __kmem_cache_alloc_node+0x204/0x2d0
[   65.264986][    C1]  kmalloc_trace+0x29/0xb0
[   65.269417][    C1]  audit_log_d_path+0xc6/0x240
[   65.274210][    C1]  audit_log_d_path_exe+0x42/0x70
[   65.279250][    C1]  audit_log_task+0x214/0x300
[   65.284111][    C1]  audit_seccomp+0x7f/0x160
[   65.288617][    C1]  __seccomp_filter+0xb08/0x1a50
[   65.293551][    C1]  __secure_computing+0xea/0x290
[   65.298496][    C1] page last free stack trace:
[   65.303422][    C1]  free_unref_page_prepare+0x81b/0x820
[   65.308884][    C1]  free_unref_page+0x93/0x530
[   65.313558][    C1]  __free_pages+0x67/0x100
[   65.317975][    C1]  __free_slab+0xc7/0x1a0
[   65.322301][    C1]  __unfreeze_partials+0x15a/0x190
[   65.327406][    C1]  put_cpu_partial+0xa9/0x100
[   65.332083][    C1]  __slab_free+0x1c4/0x280
[   65.336499][    C1]  ___cache_free+0xbf/0xd0
[   65.340947][    C1]  qlist_free_all+0xc6/0x140
[   65.345538][    C1]  kasan_quarantine_reduce+0x14a/0x170
[   65.350994][    C1]  __kasan_slab_alloc+0x24/0x80
[   65.355853][    C1]  slab_post_alloc_hook+0x4f/0x2d0
[   65.360982][    C1]  __kmem_cache_alloc_node+0x194/0x2d0
[   65.366790][    C1]  __kmalloc_node+0xa2/0x1e0
[   65.371406][    C1]  kvmalloc_node+0x28a/0x460
[   65.375995][    C1]  seq_read_iter+0x1f1/0xd80
[   65.380676][    C1] 
[   65.383171][    C1] Memory state around the buggy address:
[   65.388798][    C1]  ffff8881174e0900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   65.396866][    C1]  ffff8881174e0980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   65.405008][    C1] >ffff8881174e0a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   65.413163][    C1]                    ^
[   65.417232][    C1]  ffff8881174e0a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   65.425376][    C1]  ffff8881174e0b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   65.433514][    C1] ==================================================================
[   65.441573][    C1] Disabling lock debugging due to kernel taint
[   65.447739][    C1] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN
[   65.459442][    C1] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[   65.467848][    C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G    B              syzkaller #0
[   65.476520][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   65.486829][    C1] RIP: 0010:__queue_work+0x582/0xd50
[   65.492134][    C1] Code: b4 00 00 00 e8 ff 53 29 00 48 bb 00 00 00 00 00 fc ff df 4c 89 ef e8 9d bb b9 03 4c 8b 65 d0 4c 8b 6d c0 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 10 df 6e 00 49 8b 3e e8 38 b7 b9 03
[   65.511736][    C1] RSP: 0018:ffffc900001b0c78 EFLAGS: 00010046
[   65.517804][    C1] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff888100331440
[   65.525773][    C1] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff
[   65.533743][    C1] RBP: ffffc900001b0d08 R08: 0000000000000007 R09: 00000000fffffffb
[   65.541797][    C1] R10: dffffc0000000000 R11: ffffed1022e9c139 R12: ffff8881174e09c8
[   65.549768][    C1] R13: ffff888132f0e400 R14: 0000000000000000 R15: 000000007fffffff
[   65.557750][    C1] FS:  0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[   65.566820][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   65.573403][    C1] CR2: 000000110c311742 CR3: 0000000141dd9000 CR4: 00000000003526a0
[   65.581567][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   65.589541][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   65.597530][    C1] Call Trace:
[   65.600807][    C1]  <IRQ>
[   65.603655][    C1]  delayed_work_timer_fn+0x61/0x80
[   65.608778][    C1]  ? __cfi_delayed_work_timer_fn+0x10/0x10
[   65.614612][    C1]  call_timer_fn+0x46/0x2a0
[   65.619291][    C1]  ? __cfi_delayed_work_timer_fn+0x10/0x10
[   65.625185][    C1]  __run_timers+0x672/0x9b0
[   65.629698][    C1]  ? calc_index+0x200/0x200
[   65.634291][    C1]  ? kvm_sched_clock_read+0x18/0x40
[   65.639495][    C1]  run_timer_softirq+0x6a/0xf0
[   65.644348][    C1]  handle_softirqs+0x1d7/0x600
[   65.649115][    C1]  __irq_exit_rcu+0x52/0xf0
[   65.653616][    C1]  irq_exit_rcu+0x9/0x10
[   65.657854][    C1]  sysvec_apic_timer_interrupt+0xa9/0xc0
[   65.663673][    C1]  </IRQ>
[   65.666605][    C1]  <TASK>
[   65.669639][    C1]  asm_sysvec_apic_timer_interrupt+0x1b/0x20
[   65.675653][    C1] RIP: 0010:default_idle+0xf/0x20
[   65.680680][    C1] Code: cc 00 00 cc cc 00 00 cc cc 00 00 90 90 90 90 90 90 90 90 90 90 90 b8 0c 67 40 a5 55 48 89 e5 66 90 0f 00 2d 83 89 64 00 fb f4 <5d> c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 90 90 90 90 90
[   65.700283][    C1] RSP: 0018:ffffc90000147dd8 EFLAGS: 00000257
[   65.706369][    C1] RAX: ffff8881f6f00000 RBX: ffff888100331440 RCX: dedbc76f20746300
[   65.714358][    C1] RDX: 0000000000000001 RSI: ffffffff85ca6e80 RDI: ffffffff85ca6e40
[   65.722353][    C1] RBP: ffffc90000147dd8 R08: ffff8881f6f348b3 R09: 1ffff1103ede6916
[   65.730324][    C1] R10: 0000000000000000 R11: ffffffff8501a690 R12: dffffc0000000000
[   65.738315][    C1] R13: 0000000000000001 R14: ffff888100331440 R15: dffffc0000000000
[   65.746284][    C1]  ? __cfi_default_idle+0x10/0x10
[   65.751426][    C1]  arch_cpu_idle+0x1c/0x20
[   65.755836][    C1]  default_idle_call+0x71/0x1d0
[   65.760866][    C1]  do_idle+0x354/0x640
[   65.764936][    C1]  ? ct_irq_exit+0x9/0x10
[   65.769260][    C1]  ? irqentry_exit+0x30/0x40
[   65.773845][    C1]  ? idle_inject_timer_fn+0x60/0x60
[   65.779141][    C1]  cpu_startup_entry+0x43/0x60
[   65.783929][    C1]  start_secondary+0x119/0x120
[   65.788705][    C1]  secondary_startup_64_no_verify+0xce/0xdb
[   65.794616][    C1]  </TASK>
[   65.797638][    C1] Modules linked in:
[   65.801556][    C1] ---[ end trace 0000000000000000 ]---
[   65.807006][    C1] RIP: 0010:__queue_work+0x582/0xd50
[   65.812293][    C1] Code: b4 00 00 00 e8 ff 53 29 00 48 bb 00 00 00 00 00 fc ff df 4c 89 ef e8 9d bb b9 03 4c 8b 65 d0 4c 8b 6d c0 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 10 df 6e 00 49 8b 3e e8 38 b7 b9 03
[   65.832156][    C1] RSP: 0018:ffffc900001b0c78 EFLAGS: 00010046
[   65.838219][    C1] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff888100331440
[   65.846196][    C1] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff
[   65.854336][    C1] RBP: ffffc900001b0d08 R08: 0000000000000007 R09: 00000000fffffffb
[   65.862438][    C1] R10: dffffc0000000000 R11: ffffed1022e9c139 R12: ffff8881174e09c8
[   65.870510][    C1] R13: ffff888132f0e400 R14: 0000000000000000 R15: 000000007fffffff
[   65.878506][    C1] FS:  0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[   65.887441][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   65.894044][    C1] CR2: 000000110c311742 CR3: 0000000141dd9000 CR4: 00000000003526a0
[   65.902020][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   65.909995][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   65.917963][    C1] Kernel panic - not syncing: Fatal exception in interrupt
[   65.925514][    C1] Kernel Offset: disabled
[   65.929840][    C1] Rebooting in 86400 seconds..