last executing test programs:

1m12.185970527s ago: executing program 2 (id=16):
r0 = socket$inet6(0xa, 0x80002, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bridge\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x1, 0x1fffffc, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x3}, {0xfff3}}}, 0x24}}, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x49, &(0x7f0000000240)=0x5, 0x4)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000840)='./file0/file0\x00', 0x200097, &(0x7f0000000780)=ANY=[@ANYRESHEX=r1, @ANYBLOB="d38a2cbe9fc2b705d8f90b4784a743baab765a8e1db81a8ef6b3ea9428294b075bc239d2e50c4c0cf9bb80afa004605a2e569f976d05b66603c9a9bcd082fb8276cf4c5fed1b16d461f83faae63d1f1cdeac3d5b12a83d167c1c4e533b9dcb67c0b57ce8f243c92922f6a2d68b2e941d690a9acbd5764209f6c1195b3cc79652", @ANYRES8=r1, @ANYRES16=r2, @ANYRES32=r0], 0xfd, 0x553b, &(0x7f00000058c0)="$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")
r4 = add_key$user(&(0x7f00000001c0), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000240)="b1", 0x1, 0xffffffffffffffff)
r5 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
r6 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r5)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000940)={r6, 0x11f}, 0x0, &(0x7f0000000b80)="cb44032c2a3a518de9000000c11a536275a146d65e2988ef1a4992f9a2675b2853d82c107d0fd00990b531004a27f0395fdb7d3b545b60254e6e9e7a9ccd908c1cbdb120730ded7b4d10b0612763631dd3db62ddf7f799a4257d4bf67e86244beee88b1e3e5bac3ad4dea44fc08db9f741b76996bf785368bc3b20816471f5254e6e9e7a9ccd90d32ebcf5ea2c79482fb0e0cfb8bf19da1095e6b47db929f5277a39b2c121f0adffeafb4747c5853fdaca77fe20bbb66b8e86486c2ea7e519a50fb23e48e6cec9abcbf97d60de6c9d205a4e26b68fd5d7c3d516dce08adf9b56f1b52064b2c41eb07799a24f8e80f676428a27963412330fc4", 0x0)
r7 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, r6)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000000)=@secondary)
keyctl$KEYCTL_MOVE(0x1e, r4, 0xffffffffffffffff, r7, 0x0)
r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$sock_TIOCINQ(r8, 0x541b, &(0x7f0000000340))

1m11.618217404s ago: executing program 2 (id=23):
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffdfffff})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="09000000160000000800000040"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x15, 0xf, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xcd8}, {{0x18, 0x1, 0x1, 0x0, r0, 0x0, 0x0, 0x0, 0xff80}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1m11.618011394s ago: executing program 2 (id=24):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x0)
setresuid(0xee01, r1, 0x0)
quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000040)=@md0, r1, 0x0)
write(r0, &(0x7f0000000000)='3', 0x4e)
futex(0x0, 0x4, 0x1, 0x0, 0x0, 0x2002)

1m11.347172686s ago: executing program 2 (id=27):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[], 0xff, 0x553a, &(0x7f0000006040)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed)
mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/11/smp_affinity\x00', 0x1, 0x0)
write$P9_RREADDIR(r0, &(0x7f0000000380)={0xb, 0x29, 0x2, {0x10001}}, 0xb)
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000140)=ANY=[@ANYRESHEX=r0, @ANYRES8=r0, @ANYRES16=r0, @ANYRESHEX=r0, @ANYRES8=r0, @ANYBLOB="09a06030f95dcaec116ace42f025dc2649cc9dd69c2d751ed0badc06350b68a95f9d07460d9a4c044030cb1e1e5a0bb4bdbfe4deeb376a09fecf6cc8732f498a642a715cc073fcb4e8567a8de2162a937e69c54b01be25e5edf513750bbb74f5b7dc519639e6a5adec00ff89eae2690be2381ef17f743aa0b936b47bb041cfbe9665d0a7eccb7f650b1ced01f29777e0262e855271578d6bd960d5a787071a64a21a6e9b653de8e627427679e633c3dffb1b29607854e9760a3f2a0b7c7a94a16d8d6f6777ad5f63403fae7883fb"], 0x24, 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)

1m9.978212201s ago: executing program 2 (id=37):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0xb, [@var={0x8, 0x0, 0x0, 0xe, 0x2, 0x2}]}, {0x0, [0x10, 0x5f, 0x30, 0x0, 0x30, 0x2e, 0x0, 0x2e, 0x5f]}}, 0x0, 0x33, 0x0, 0x0, 0xffffffff}, 0x28)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x1, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b)
write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f00000001c0)='./file0\x00', 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8041, 0x104)
fsetxattr$security_capability(r5, &(0x7f0000000040), 0x0, 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000880)={{0x80e3000, 0xc000, 0x8, 0xd, 0x3, 0x0, 0x45, 0x6, 0x0, 0x2e, 0x8}, {0x5000, 0x2, 0x10, 0x2, 0x3e, 0x9, 0x7f, 0x7, 0x1, 0x5, 0x3}, {0xd000, 0xb000, 0xe, 0x3, 0x1, 0x0, 0x7, 0x60, 0x0, 0xa7, 0x3, 0x4}, {0x8000000, 0xdddd0000, 0xe, 0x6, 0x4, 0x2, 0x1, 0xf8, 0x9, 0x9, 0xf}, {0x5ffff, 0x70000, 0x4, 0x2, 0x15, 0x6, 0xab, 0x7c, 0x1, 0x83, 0xf7, 0x6}, {0x1000, 0xdddd1000, 0x8, 0x4, 0xb1, 0x8, 0x7, 0x9, 0x9, 0x13, 0x8, 0x10}, {0x9000, 0x2, 0x4, 0x5, 0x0, 0x5, 0x4, 0x3, 0x3, 0x84, 0x9, 0x79}, {0x41000, 0xf000, 0xc, 0x5, 0xf, 0x7, 0x0, 0xe2, 0x2, 0x8, 0xf0, 0x7}, {0x0, 0x802f}, {0x3000, 0xfffd}, 0xc0080025, 0x0, 0x0, 0x2024, 0x4, 0x0, 0x50000, [0x800, 0x9, 0x60, 0x4132]})
syz_kvm_setup_cpu$x86(r1, r6, &(0x7f000019a000/0x18000)=nil, &(0x7f0000000540)=[@textreal={0x8, 0x0}], 0x1, 0x61, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00'])
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0)

1m9.482817704s ago: executing program 2 (id=43):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xac}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)
r0 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x864000, &(0x7f0000000100)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@default_permissions}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'g'}}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}]}}, 0x1, 0x0, &(0x7f00000001c0)="008d21084950fd79c0b201b5efb6666acb9f09d2f819ab2eb29a24cddf8128d05483100ec378c2c58df4a5f143ce2929115791c7e060150e8de89c7ca3bd60f3")
socket(0xc, 0x1, 0x0) (async)
socket(0xc, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
flock(r1, 0x2)
r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$LOOP_SET_FD(r2, 0x4c00, r2) (async)
ioctl$LOOP_SET_FD(r2, 0x4c00, r2)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
read$FUSE(0xffffffffffffffff, &(0x7f0000007600)={0x2020, 0x0, 0x0, <r5=>0x0, <r6=>0x0}, 0x2)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000024c0)={0x90, 0x0, 0x0, {0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, {0x2, 0xb3b, 0x0, 0x0, 0x20000000000007f, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, r5, r6, 0x3, 0x5}}}, 0x90)
getresgid(&(0x7f0000002b80)=<r7=>0x0, &(0x7f0000002bc0), &(0x7f0000002c00))
read$FUSE(r1, &(0x7f0000002c40)={0x2020, 0x0, 0x0, <r8=>0x0}, 0x2020)
syz_open_procfs(0x0, &(0x7f0000002080)='net/udp6\x00') (async)
r9 = syz_open_procfs(0x0, &(0x7f0000002080)='net/udp6\x00')
read$FUSE(r9, &(0x7f0000004200)={0x2020, 0x0, 0x0, <r10=>0x0, <r11=>0x0}, 0x2020)
chown(&(0x7f0000002140)='./file0\x00', r10, r11) (async)
chown(&(0x7f0000002140)='./file0\x00', r10, r11)
newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x0) (async)
newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r12=>0x0}, 0x0)
setresuid(0x0, r12, 0x0) (async)
setresuid(0x0, r12, 0x0)
read$FUSE(r0, &(0x7f0000004c80)={0x2020, 0x0, 0x0, 0x0, <r13=>0x0}, 0x2020)
statx(r1, &(0x7f0000006ec0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x2000, 0x4, &(0x7f0000006f00)={0x0, 0x0, 0x0, 0x0, <r14=>0x0})
getgid() (async)
r15 = getgid()
getresuid(&(0x7f0000007100), &(0x7f0000007140), &(0x7f0000007180)=<r16=>0x0)
lstat(&(0x7f00000071c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000007200)) (async)
lstat(&(0x7f00000071c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000007200)={0x0, 0x0, 0x0, 0x0, 0x0, <r17=>0x0})
syz_fuse_handle_req(r2, &(0x7f0000000400)="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", 0x2000, &(0x7f00000073c0)={&(0x7f0000002400)={0x50, 0x0, 0xe6, {0x7, 0x2d, 0xd, 0x400c0000, 0x3, 0x0, 0xc, 0x8, 0x0, 0x0, 0x143, 0xfc3}}, &(0x7f0000002480)={0x18, 0xfffffffffffffffe, 0x8, {0x7}}, &(0x7f00000024c0)={0x18, 0xfffffffffffffffe, 0x10001, {0x8}}, &(0x7f0000002580)={0x18, 0x0, 0x1, {0x7ff}}, &(0x7f00000025c0)={0x18, 0x0, 0x1, {0x5}}, &(0x7f0000002600)={0x28, 0xffffffffffffffda, 0xcb, {{0xa, 0x4, 0x2}}}, &(0x7f0000002640)={0x60, 0xfffffffffffffffe, 0x8, {{0xff, 0xfffffffffffffeff, 0x24c, 0xe, 0x10000, 0x15, 0xa, 0x3}}}, &(0x7f00000026c0)={0x18, 0x0, 0x7a90, {0x6}}, &(0x7f0000002700)={0x11, 0x0, 0x9, {'\x00'}}, &(0x7f0000002740)={0x20, 0x0, 0x5, {0x0, 0x10}}, &(0x7f00000028c0)={0x78, 0x0, 0x3ff, {0x3, 0x68f3433c, 0x0, {0x6, 0x8000000000000001, 0x7, 0x7896, 0x8, 0xffff, 0x1, 0x80000000, 0x7fffffff, 0x1000, 0xffff3849, 0x0, 0x0, 0x5, 0x10c}}}, &(0x7f00000029c0)={0x90, 0x0, 0xffff, {0x1, 0x2, 0x4, 0x10, 0x9, 0x1ff, {0x0, 0x80000000, 0x7ff, 0x0, 0x2ae6, 0x1, 0x3, 0x16a, 0x31cbb2e9, 0xa000, 0x2, 0x0, r6, 0x7, 0x2}}}, &(0x7f0000002a80)={0xf0, 0xffffffffffffffda, 0xb3, [{0x6, 0x9, 0xc, 0x2, '!\'.*&{\\$\\,n}'}, {0x3, 0x4, 0x8, 0x7ff, 'group_id'}, {0x1, 0xff, 0x1, 0x0, '-'}, {0x6, 0x3, 0x3, 0x96e, '\'!@'}, {0x2, 0x6, 0x3, 0x6, '\\!:'}, {0x5, 0x1, 0x1, 0x9, '^'}, {0x2, 0x2, 0x0, 0x4}]}, &(0x7f0000006cc0)={0x1f0, 0x0, 0xfffffffffffffff8, [{{0x4, 0x3, 0x9, 0x7, 0x40, 0x2, {0x0, 0x7d9, 0x0, 0x7ff, 0xc, 0x6, 0x7, 0x3, 0x2, 0xa000, 0xdb, 0xee01, r7, 0x7, 0x5}}, {0x4, 0xb9, 0x5, 0x1ff, ']}(\x01@'}}, {{0x4, 0x2, 0x7, 0xfffffffffffff43d, 0x8001, 0x1, {0x6, 0x8000, 0x7, 0xe2e, 0x3ff, 0x7, 0x80000001, 0x5, 0x7, 0x0, 0x6b, r8, r11, 0x10001, 0x3}}, {0x5, 0xe, 0x0, 0x6}}, {{0x4, 0x1, 0x8, 0xb358, 0x3, 0xffff0c47, {0x4, 0x1, 0x8000000000000000, 0x4, 0x2, 0x7, 0x10, 0x3c8a, 0x6, 0x4000, 0xfff, r12, r13, 0x9, 0x8001}}, {0x3, 0x0, 0xc, 0x7, 'smackfsfloor'}}]}, &(0x7f0000007000)={0xa0, 0x0, 0x10000, {{0x4, 0x3, 0x7, 0x7, 0xd, 0xd, {0x6, 0x5b6, 0x3, 0x9, 0x951, 0x4, 0x5, 0x0, 0xa, 0x2000, 0x7, r14, r15, 0x401, 0x3}}, {0x0, 0xe}}}, &(0x7f00000070c0)={0x20, 0xffffffffffffffda, 0x8, {0xfffffffa, 0x4, 0x7, 0x10000}}, &(0x7f0000007280)={0x130, 0xfffffffffffffff5, 0x2, {0x2, 0x8db, 0x0, '\x00', {0x1, 0xe630d8cb, 0x2, 0xfffffddb, r16, r17, 0x2000, '\x00', 0x0, 0x800, 0xe, 0x5, {0x10001, 0x6}, {0x81, 0x16b2}, {0x2c, 0x8000}, {0x100, 0xff}, 0x80, 0x4, 0x9, 0x6d3b}}}})
sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000002c0)={0x18, 0x0, 0x1, 0x0, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4048800}, 0x0)
bind$unix(r3, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r3, 0x0) (async)
listen(r3, 0x0)
mount$9p_unix(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)) (async)
mount$9p_unix(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100))
close_range(r3, 0xffffffffffffffff, 0x0)
getdents64(r0, &(0x7f0000000200)=""/223, 0xdf)

1m9.457600446s ago: executing program 32 (id=43):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xac}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)
r0 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x864000, &(0x7f0000000100)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@default_permissions}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'g'}}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}]}}, 0x1, 0x0, &(0x7f00000001c0)="008d21084950fd79c0b201b5efb6666acb9f09d2f819ab2eb29a24cddf8128d05483100ec378c2c58df4a5f143ce2929115791c7e060150e8de89c7ca3bd60f3")
socket(0xc, 0x1, 0x0) (async)
socket(0xc, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
flock(r1, 0x2)
r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$LOOP_SET_FD(r2, 0x4c00, r2) (async)
ioctl$LOOP_SET_FD(r2, 0x4c00, r2)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
read$FUSE(0xffffffffffffffff, &(0x7f0000007600)={0x2020, 0x0, 0x0, <r5=>0x0, <r6=>0x0}, 0x2)
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000024c0)={0x90, 0x0, 0x0, {0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, {0x2, 0xb3b, 0x0, 0x0, 0x20000000000007f, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, r5, r6, 0x3, 0x5}}}, 0x90)
getresgid(&(0x7f0000002b80)=<r7=>0x0, &(0x7f0000002bc0), &(0x7f0000002c00))
read$FUSE(r1, &(0x7f0000002c40)={0x2020, 0x0, 0x0, <r8=>0x0}, 0x2020)
syz_open_procfs(0x0, &(0x7f0000002080)='net/udp6\x00') (async)
r9 = syz_open_procfs(0x0, &(0x7f0000002080)='net/udp6\x00')
read$FUSE(r9, &(0x7f0000004200)={0x2020, 0x0, 0x0, <r10=>0x0, <r11=>0x0}, 0x2020)
chown(&(0x7f0000002140)='./file0\x00', r10, r11) (async)
chown(&(0x7f0000002140)='./file0\x00', r10, r11)
newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x0) (async)
newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r12=>0x0}, 0x0)
setresuid(0x0, r12, 0x0) (async)
setresuid(0x0, r12, 0x0)
read$FUSE(r0, &(0x7f0000004c80)={0x2020, 0x0, 0x0, 0x0, <r13=>0x0}, 0x2020)
statx(r1, &(0x7f0000006ec0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x2000, 0x4, &(0x7f0000006f00)={0x0, 0x0, 0x0, 0x0, <r14=>0x0})
getgid() (async)
r15 = getgid()
getresuid(&(0x7f0000007100), &(0x7f0000007140), &(0x7f0000007180)=<r16=>0x0)
lstat(&(0x7f00000071c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000007200)) (async)
lstat(&(0x7f00000071c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000007200)={0x0, 0x0, 0x0, 0x0, 0x0, <r17=>0x0})
syz_fuse_handle_req(r2, &(0x7f0000000400)="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", 0x2000, &(0x7f00000073c0)={&(0x7f0000002400)={0x50, 0x0, 0xe6, {0x7, 0x2d, 0xd, 0x400c0000, 0x3, 0x0, 0xc, 0x8, 0x0, 0x0, 0x143, 0xfc3}}, &(0x7f0000002480)={0x18, 0xfffffffffffffffe, 0x8, {0x7}}, &(0x7f00000024c0)={0x18, 0xfffffffffffffffe, 0x10001, {0x8}}, &(0x7f0000002580)={0x18, 0x0, 0x1, {0x7ff}}, &(0x7f00000025c0)={0x18, 0x0, 0x1, {0x5}}, &(0x7f0000002600)={0x28, 0xffffffffffffffda, 0xcb, {{0xa, 0x4, 0x2}}}, &(0x7f0000002640)={0x60, 0xfffffffffffffffe, 0x8, {{0xff, 0xfffffffffffffeff, 0x24c, 0xe, 0x10000, 0x15, 0xa, 0x3}}}, &(0x7f00000026c0)={0x18, 0x0, 0x7a90, {0x6}}, &(0x7f0000002700)={0x11, 0x0, 0x9, {'\x00'}}, &(0x7f0000002740)={0x20, 0x0, 0x5, {0x0, 0x10}}, &(0x7f00000028c0)={0x78, 0x0, 0x3ff, {0x3, 0x68f3433c, 0x0, {0x6, 0x8000000000000001, 0x7, 0x7896, 0x8, 0xffff, 0x1, 0x80000000, 0x7fffffff, 0x1000, 0xffff3849, 0x0, 0x0, 0x5, 0x10c}}}, &(0x7f00000029c0)={0x90, 0x0, 0xffff, {0x1, 0x2, 0x4, 0x10, 0x9, 0x1ff, {0x0, 0x80000000, 0x7ff, 0x0, 0x2ae6, 0x1, 0x3, 0x16a, 0x31cbb2e9, 0xa000, 0x2, 0x0, r6, 0x7, 0x2}}}, &(0x7f0000002a80)={0xf0, 0xffffffffffffffda, 0xb3, [{0x6, 0x9, 0xc, 0x2, '!\'.*&{\\$\\,n}'}, {0x3, 0x4, 0x8, 0x7ff, 'group_id'}, {0x1, 0xff, 0x1, 0x0, '-'}, {0x6, 0x3, 0x3, 0x96e, '\'!@'}, {0x2, 0x6, 0x3, 0x6, '\\!:'}, {0x5, 0x1, 0x1, 0x9, '^'}, {0x2, 0x2, 0x0, 0x4}]}, &(0x7f0000006cc0)={0x1f0, 0x0, 0xfffffffffffffff8, [{{0x4, 0x3, 0x9, 0x7, 0x40, 0x2, {0x0, 0x7d9, 0x0, 0x7ff, 0xc, 0x6, 0x7, 0x3, 0x2, 0xa000, 0xdb, 0xee01, r7, 0x7, 0x5}}, {0x4, 0xb9, 0x5, 0x1ff, ']}(\x01@'}}, {{0x4, 0x2, 0x7, 0xfffffffffffff43d, 0x8001, 0x1, {0x6, 0x8000, 0x7, 0xe2e, 0x3ff, 0x7, 0x80000001, 0x5, 0x7, 0x0, 0x6b, r8, r11, 0x10001, 0x3}}, {0x5, 0xe, 0x0, 0x6}}, {{0x4, 0x1, 0x8, 0xb358, 0x3, 0xffff0c47, {0x4, 0x1, 0x8000000000000000, 0x4, 0x2, 0x7, 0x10, 0x3c8a, 0x6, 0x4000, 0xfff, r12, r13, 0x9, 0x8001}}, {0x3, 0x0, 0xc, 0x7, 'smackfsfloor'}}]}, &(0x7f0000007000)={0xa0, 0x0, 0x10000, {{0x4, 0x3, 0x7, 0x7, 0xd, 0xd, {0x6, 0x5b6, 0x3, 0x9, 0x951, 0x4, 0x5, 0x0, 0xa, 0x2000, 0x7, r14, r15, 0x401, 0x3}}, {0x0, 0xe}}}, &(0x7f00000070c0)={0x20, 0xffffffffffffffda, 0x8, {0xfffffffa, 0x4, 0x7, 0x10000}}, &(0x7f0000007280)={0x130, 0xfffffffffffffff5, 0x2, {0x2, 0x8db, 0x0, '\x00', {0x1, 0xe630d8cb, 0x2, 0xfffffddb, r16, r17, 0x2000, '\x00', 0x0, 0x800, 0xe, 0x5, {0x10001, 0x6}, {0x81, 0x16b2}, {0x2c, 0x8000}, {0x100, 0xff}, 0x80, 0x4, 0x9, 0x6d3b}}}})
sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000002c0)={0x18, 0x0, 0x1, 0x0, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4048800}, 0x0)
bind$unix(r3, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r3, 0x0) (async)
listen(r3, 0x0)
mount$9p_unix(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)) (async)
mount$9p_unix(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100))
close_range(r3, 0xffffffffffffffff, 0x0)
getdents64(r0, &(0x7f0000000200)=""/223, 0xdf)

36.658227623s ago: executing program 1 (id=243):
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000500)=[@nested_load_syzos={0x136, 0x38, {0x2, 0x0, [@nested_vmlaunch={0x12f, 0x18}]}}, @nested_create_vm={0x12d, 0x18, 0x1}, @nested_amd_clgi={0x17f, 0x10}, @nested_vmresume={0x130, 0x18, 0x1}, @nested_create_vm={0x12d, 0x18}, @in_dx={0x69, 0x20, {0x3f5c, 0x4}}, @in_dx={0x69, 0x20, {0xf712, 0x7}}, @rdmsr={0x66, 0x18, {0xaae}}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @in_dx={0x69, 0x20, {0xc3f1}}, @in_dx={0x69, 0x20, {0x4c6b, 0x6}}, @wrmsr={0x65, 0x20, {0xa49, 0x8}}, @wr_crn={0x67, 0x20, {0x8, 0x15a08}}, @out_dx={0x6a, 0x28, {0xc846, 0x3, 0x73b2}}, @uexit={0x0, 0x18, 0x9}, @wr_crn={0x67, 0x20, {0x0, 0x2}}], 0x1e0})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @local}, 0xc)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

36.607672754s ago: executing program 1 (id=245):
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
recvmmsg(r0, 0x0, 0x0, 0x40000002, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil})
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

36.535560808s ago: executing program 1 (id=248):
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
syz_mount_image$fuse(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x400a8, &(0x7f0000000200)=ANY=[@ANYRESHEX=r0], 0x5, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{0x1000, 0x4, 0xffed, 0xa001}, 'syz0\x00', 0xfffffffd})
ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3)
ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x2f)
ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sched_setscheduler(0x0, 0x2, 0x0)
syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r2 = socket(0x10, 0xa, 0x0)
listen(r2, 0x0)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000000)={0x1000, 0x0, 0xffffffffffffff12, 0x100000000, 0x8000000000000000, 0x8020000000006, 0x5, 0x1800000000000000}, 0x0, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = getpid()
r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0)
writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000100)="93d90400000300", 0x7}, {&(0x7f0000000000)="9ac58e06000000ed", 0x8}], 0x2)
sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5)
r6 = fsmount(r0, 0x0, 0x0)
fchdir(r6)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80)
ftruncate(r7, 0x2007ffb)

36.5061953s ago: executing program 1 (id=249):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000003c0)={'syz0\x00', {0x9, 0x0, 0x1, 0x400}, 0x54, [0xfffffffe, 0x5, 0x0, 0x0, 0x1, 0x0, 0x8, 0xfffffffd, 0x0, 0xc, 0x0, 0x8000000, 0x7, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x9ed, 0x7, 0x0, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x40000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x90000000, 0x255, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffc, 0xffbffff8, 0x1000, 0x100, 0x1, 0x3f8, 0x10, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6, 0x2, 0x4, 0x0, 0x0, 0x6], [0x714, 0x20000, 0x0, 0xffd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0xb5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x9, 0x4, 0x8, 0x0, 0x0, 0x40, 0x44, 0x5, 0xe, 0x0, 0x2, 0x0, 0x0, 0x8, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x2, 0x5, 0x55], [0x0, 0x0, 0x0, 0x5d71, 0x0, 0xbd8f, 0x1, 0x4, 0x0, 0xfffffffd, 0x3, 0x9, 0x4, 0x0, 0x0, 0x3, 0xfdfffffc, 0x0, 0x2, 0x0, 0x10001, 0x810, 0x2, 0x0, 0x10000000, 0x800000, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0xffffffff, 0x7fff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0xc09, 0x6, 0x101, 0x1, 0x1d, 0x10, 0xfffffffe, 0x4, 0x80000000], [0x4, 0x0, 0x2, 0xfffffffe, 0x400, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfefffffc, 0x0, 0x7ce1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2, 0x0, 0x8, 0xfffffc01, 0x91a, 0x3, 0x0, 0xdca2, 0x6, 0x0, 0x0, 0x1000, 0x0, 0x5, 0x0, 0x2001, 0xfffffffd, 0x80, 0xffffffff, 0xffffffff, 0x0, 0xae, 0x0, 0xc, 0x400000, 0x2, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x40008001, 0x40000, 0x2, 0x1]}, 0x45c)
ioctl(0xffffffffffffffff, 0x890b, &(0x7f0000000500)='\x00\x00\x00\x00\x00\x00')
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10)
write(r0, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac)

36.48248806s ago: executing program 1 (id=251):
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000001840)='./file2\x00', 0x10000, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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")
rename(&(0x7f0000000140)='./file2\x00', &(0x7f0000001880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
rename(&(0x7f0000001980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file2\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0)
write(r0, &(0x7f0000000b80)='0fc5:1227:co', 0xc)
socket$inet6(0xa, 0x1, 0xcbe)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./bus\x00', 0x14542, &(0x7f0000000b40)=ANY=[], 0x1, 0x11ff, &(0x7f0000002480)="$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")
syz_clone(0x1000, &(0x7f0000000200)="6008a0c507eb8520e1aac5a34d8f5b02054b37c59f8a8bb42169f3c72cc281b248baff199ad4ccecc0090b88eb9b895057087ae9ccf7d2373773a73d14d7960c2036cb38aa5d52ec7fdcc44c67d9c0a8b579d776470e49d06cf7c13b9a5556037568a490c67bbacce16c3c7093f501a67c3bd1b502cfea3768700b39", 0x7c, &(0x7f00000002c0), 0x0, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0x208e24b)

36.29013111s ago: executing program 1 (id=256):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x62}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
syz_emit_ethernet(0x1346, &(0x7f00000002c0)=ANY=[], 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x9f, &(0x7f00000000c0)={&(0x7f0000000480)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0)

30.374271867s ago: executing program 5 (id=295):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00'}, 0x94)
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000500)=[@nested_load_syzos={0x136, 0x38, {0x2, 0x0, [@nested_vmlaunch={0x12f, 0x18}]}}, @nested_create_vm={0x12d, 0x18, 0x1}, @nested_amd_clgi={0x17f, 0x10}, @nested_vmresume={0x130, 0x18, 0x1}, @nested_create_vm={0x12d, 0x18}, @in_dx={0x69, 0x20, {0x3f5c, 0x4}}, @in_dx={0x69, 0x20, {0xf712, 0x7}}, @rdmsr={0x66, 0x18, {0xaae}}, @in_dx={0x69, 0x20, {0xc3f1}}, @in_dx={0x69, 0x20, {0x4c6b, 0x6}}, @code={0xa, 0x4f, {"430f01ca26450f01df430fce66b886008ed0b9800000c00f3235010000000f30450f01c2f30fa7d842a00000000000000100c443dd6bf423c4619173fa2e"}}, @wrmsr={0x65, 0x20, {0xa49, 0x8}}, @wr_crn={0x67, 0x20, {0x8, 0x15a08}}, @out_dx={0x6a, 0x28, {0xc846, 0x3, 0x73b2}}, @uexit={0x0, 0x18, 0x9}, @wr_crn={0x67, 0x20, {0x0, 0x2}}], 0x217})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @local}, 0xc)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

30.357469327s ago: executing program 5 (id=296):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00'}, 0x94)
syz_kvm_add_vcpu$x86(0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

30.326061189s ago: executing program 5 (id=297):
syz_mount_image$fuse(0x0, &(0x7f0000000200)='./bus\x00', 0x283016, 0x0, 0x11, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x800000, 0x0, 0x1, 0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c3c42, 0x0)
read(r0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000000), 0x220000c, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@xino_auto}]})
r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x149000, 0x0)
getdents64(r1, 0x0, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0)
r2 = socket$inet(0x2, 0x2, 0x1)
setsockopt$sock_int(r2, 0x1, 0x5, &(0x7f0000000340)=0x6, 0x4)
sendmsg$inet(r2, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @multicast1}, 0x10, &(0x7f0000000dc0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000007000000830b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20008024)
open(&(0x7f0000000040)='./file2\x00', 0x0, 0xf3)
r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
syz_usb_connect(0x2, 0xb3, &(0x7f0000000840)=ANY=[@ANYBLOB="12010002ef0201405a22d4e1ada7f5d200010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e0010000000000000000006009001516050001151605000924", @ANYRES32=r3], &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0})

28.456591947s ago: executing program 5 (id=304):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000080000000c00000003"], 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x3, r0, 0x20}, 0x38)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000"], 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x32}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x3008003, &(0x7f0000002ac0)=ANY=[], 0x2, 0x211, &(0x7f00000004c0)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x40000, 0x52)
fadvise64(r1, 0x54056, 0x55156, 0x3)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
syz_emit_ethernet(0xc2, &(0x7f0000000280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x4000, 0x1, 0xffff, 0x0, 0x1, 0x7, @multicast2, @multicast1, {[@cipso={0x86, 0x77, 0xffffffffffffffff, [{0x0, 0xe, "08c82ce8da6ee06cb8dd9452"}, {0x5, 0x9, "000000f4bfe0f0"}, {0x2, 0x12, "01008548c8ee4a000000000000000000"}, {0x0, 0x9, "00de6c83d50000"}, {0x2, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a8525dc91e5c6"}, {0x6, 0xa, "0000000000800000"}, {0x7, 0x12, "73bc23f9ffffffa3a00900a301c84600"}, {0x1, 0xc, "c8f46976e79ea788f03d"}]}, @cipso={0x86, 0x6, 0x20}]}}}}}}}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x0, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setparam(r2, &(0x7f00000006c0)=0x4)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x11)
socket$inet_tcp(0x2, 0x1, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$IPT_SO_GET_REVISION_TARGET(r6, 0x0, 0x43, &(0x7f0000000000)={'IDLETIMER\x00'}, &(0x7f0000000080)=0x1e)
setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x4, 0x4)
socket$pppl2tp(0x18, 0x1, 0x1)

26.343246136s ago: executing program 5 (id=309):
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000001840)='./file2\x00', 0x10000, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$eJzs3Am4T1X3OPC19t6H62b4JpnP2uvwTYZNkoSSZEiSJCRzQpIkSZK4ZEpCEjLeJHPInG665nnInHTzSpIkJCTZ/+c2/P16h5/3fX/9/vq/d32e5zz2cs7aZ+27nu89w/Pc79ddh1VvVKNKfWaGf4f+bYC//JMEAAkAMBAAcgBAAABlc5bNmb4/i8akf+sk4n9JgxlXugJxJUn/Mzbpf8Ym/c/YpP8Zm/Q/Y5P+Z2zS/4xN+i9EhjYr39WyZdxN3v//f079T5Ll+p8h4D/aIf3/T6P/paOl/xmb9D9jk/5nbNL/jCy40gWIK0w+/xmb9F+IDO0Pf6e84dyVfqct27+wCSGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQ/w+c85cYAPhtfKXrEkIIIYQQQgghxB/Hv3ulKxBCCCGEEEIIIcT/PgQFGgwEkAkyQwJkgUS4CrJCNsgOOSAGV0NOuAZywbWQG/JAXsgH+aEAFIQQCCwwRFAICkMcroMicD0UhWJQHEqAg5JQCm6A0nAjlIGboCzcDOXgFigPFX4+Z7rboTLcAVXgTqgK1aA61IC7oCbcDbXgHqgN90IduA/qwv1QDx6A+tAAGsKD0AgegsbQBJpCM2gOLaDlZfKTc/y9/OehB7wAPaEXJEFv6AMvQl/oB/1hAAyEl2AQvAyD4RUYAkNhGLwKw+E1GAGvw0gYBaPhDRgDY2EcjIcJMBGS4U2YBG/BZHj7oWwwFabBdJgBM2EWvAOzYQ7MhXdhHsyHBZCcZREshiXwHiyF9yEFPoBl8CGkwnJYASthFayGNbAW1sF62AAbYRNshi2wFbbBR7AddsBO2AW7YQ/shY9hH3wC++FTSMPP/sX8s7/Ph24ICKhQoUGDmTATJmACJmIiZsWsmB2zYwxjmBNzYi7MhbkxN+bFvJiE+bEgFkRCQkbGQlgI4xjHIlgEi2JRLI7F0aHDUlgKS+ONWAbLYFksi+WwHJbHClgBb8VbsRJWwspYGatgFayKVbE6Vse78C68G2thLayNtbEO1sG6WBfrYT2sj/WxITbERtgIG2NjbIpNsTk2x5bYElthK2yNrbEttsV22A7bY3vsgB2wI3bETtgJO2Nn7IJdsCt2xW74HD6Hz+Pz+AK+gL2wquqNfbAP9sW+2B8H4AB8CQfhy/gyvoJDcCgOw1fxVXwNR+AZHImjcDSOxkpqLI7D8chqIiZjMmaGSTgZJ+MUnIpTcTrOwJk4C2fhbJyDc/BdnIfzcT4uxIW4GJfgElyK72MKpuAyPIupuBxX4EpchatxFa7FdbgWN+BG3ICbcTNuxa34EX6EO3AH7sJduAf34Mf4MX6Cn+AQTMM0PIAH8CAexEN4CA/jYTyCR/AoHsVjeAyP43E8gSfxFJ7E03gaz+BZPAcA5/E8XsALeBEvpn/4VTqjjMqkMqkElaASVaLKqrKq7Cq7iqmYyqlyqlwql8qtcqu8Kq/Kr/KrgqqgIkWKVaQKqUIqruKqiCqiiqqiqrgqrpxyqpQqpUqr0qqMKqPKqptVOXWLKq8qqDbuVnWrqqTausrqDlVFVVFVVTVVXdVQNVRNVVPVUrVUbVVb1VF1VF11v6qnemN/bKDSO9NIDcXGahg2Vc1Uc9VCvYYPq1ZqBLZWbVRb9agahSOxvWrlOqgnVEc1Djupp9R4fFp1UROxq3pWdVPPqe7qedVDtXY9VS81BXurPmo69lX9VH81QM3Gaiq9Y9XVK+r5zEPVMPWqWoyvqRHqdTVSjVKj1RtqjBqrxqnxaoKaqJLVm2qSektNVm+rKWqqmqamqxlqppql3lGz1Rw1V72r5qn5aoFaqBapxWqJek8tVe+rFPWBWqY+VKlquVqhVqpVarVao9aqdWq92qA2qk1qs9qitqpt6iO1Xe1QO9UutVvtUXvVx2qf+kTtV5+qNPWZOqD+og6qz9Uh9YU6rL5UR9RX6qj6Wh1T36jj6lt1Qp1Up9R36rT6Xp1RZ9U59YM6r35UF9RP6qLyCjRqpbU2OtCZdGadoLPoRH2Vzqqz6ew6h47pq3VOfY3Opa/VuXUendfk0/l1AV1Qh5q01awjXUgX1nF9nS6ir9dFdTFdXJfQTpfUpfQNurS+UZfRN+my+mZdTt+iy+sKuqIHfZuupG/XlfUduoq+U1fV1XR1XUPfpWvqu3UtfY+ure/VdfR9uq6+X9fTD+j6uoFuqB/UjfRDurFuopvqZrq5bqFb6od1K/2Ibq3b6Lb6Ud1OP6bb68d1B/2E7qif1J30U7qzflp30c/orvpZ3U0/p7vrn/RF7XVP3Usn6d66j35R99X9dH89QA/UL+lB+mU9WL+ih+iheph+VQ/Xr+kR+nU9Uo/So/Ubeoweq8fp8XqCnqiT9Zt6kn5LT9Zv6yl6qp6mp+sZeqbu/+tMc/+J/Lf+Tv7gn8++VW/TH+nteofeqXfp3XqP3qv36n16n96v9+s0naYP6AP6oD6oD+lD+rA+rI/oI/qoPqqP6WP6uD6uT+iT+gf9nT6tv9dn9Fl9Vv+gz+vz+sKvPwMwaJTRxpjAZDKZTYLJYhLNVSaryWaymxwmZq42Oc01Jpe51uQ2eUxek8/kNwVMQRMaMtawiUwhU9jEzXWmiLneFDXFTHFTwjhT0pQyN/yP8y9XX0vT0rQyrUxr09q0NW1NO9POtDftTQfTwXQ0HU0n08l0Np1NF9PFdDVdTTfTzXQ33U0P08P0ND1NkkkyfcyLpq/pZ/qbAWageckMMoPMYDPYDDFDzDAzzAw3w80IM8KMNCPNaDPajDFjzDgzzkwwE0yyz2EmmUlmsplsppgpZtrAHGaGmWFmmVlmtplt5pq5Zp6ZZxaYBWaRWWSWmCVmqVlqUkyKWWaWmVSz3Cw3K81Ks9qsNmvNWrPerDcbzUaz2Ww2qWab2Wa2m+1mp9lpdpvdZq/Za/aZfWa/2W/STJo5YA6Yg+agOWQOmcPmsDlijpij5qg5Zo6Z4+a4OWFOmFPmlDltTpsz5ow5Z86Z8+a8uWAumIvmYvptX6ACFZjABJmCTEFCkBAkBolB1iBrkD3IHsSCWJAzyBnkCq4Ncgd5grxBviB/UCAoGIQBBTbgIAoKBYWDeHBdUCS4PigaFAuKByUCF5QMSgU3BKWDG4MywU1B2eDmoFxwS1A+qBBUDG4NbgsqBbcHlYM7girBnUHVoFpQPagR3BXUDO4OagX3BLWDe4M6wX1B3eD+oF7wQFA/aBA0DB4MGgUPBY2DJkHToFnQPGgRtPxD5/f+TJ5HXM+wV5gU9g77hC+GfcN+Yf9wQDgwfCkcFL4cDg5fCYeEQ8Nh4avh8PC1cET4ejgyHBWODt8Ix4Rjw3Hh+HBCODFMDt8MJ4VvhZPDt8Mp4dRwWjA9nBHODGeF74Szwznh3PDdcF44P1wQLgwXhYtD/OWWGFLCD8Jl4Ydharg8XBGuDFeFq8M14dpwXbg+3BBuDDeFm8sO+uXQcHu4I9wZ7gp3h3vCveHH4b7wk3B/+GmYFn4WHgj/Eh4MPw8PhV+Eh8MvwyPhV+HR8OvwWPhNeDz8NjwRngxPhd+Fp8PvwzPh2fBc+EN4PvwxvBD+FF4MffrNffrlnQwZykSZKIESKJESKStlpeyUnWIUo5yUk3JRLspNuSkv5aX8lJ8KUkFKx8RUiApRnOJUhIpQUSpKxak4OXJUikpRaSpNZagMlaWyVI7KUXkqTxWpIt1Gt9HtdDvdQXfQnXQnVaNqVINqUE2qSbWoFtWm2lSH6lBdqkv1qB7Vp/rUkBpSI2pEjakxNaWm1JyaU0tqSa2oFbWm1tSW2lI7akftqT11oA7UkTpSJ+pEnakzdaEu1JW6UjfqRt2pO/WgHtSTelISJVEf6kN9qS/1p/40kAbSIBpEg2kwDaEhNIyG0XAaTiNoBI2kUTSa3qAxNJbG0XiaQBMpmZJpEk2iyTSZptAUmkbTaAbNoFk0i2bTbJpLc2kezaMFtIAW0SJaQktoKS2lFEqhZbSMUimVVtAKWkWraA2toXW0jjbQBtpEm2gLbaFttI2203baSTtpN+2mvbSX9tE+2k/7KY3S6AAdoIN0kA7RITpMh+kIHaGjdJSO0TE6TsfpBJ2gU3SKTtNpOkNn6Bydo/P0I12gn+gieUqwWWyivcpmtdlsdpvD/nWc1+az+W0BW9CGNrfN87uYrLVFbTFb3Jawzpa0pewNfxOXtxVsRXurvc1Wsrfbyra8zQL/Na5p77a17D22tr3X1rB3/S6uY++zde1Dtp5tYuvbZrahbWEb2YdsY9vENrXNbHPbwrazj9n29nHbwT5hO9on/yZeat+36+x6u8FutPvsJ/ac/cEetV/b8/ZH29P2sgPtS3aQfdkOtq/YIXbo72MAO9q+YcfYsXacHW8n2Il/E0+z0+0MO9POsu/Y2XbO38RL7Ht2nk2xC+xCu8gu/jlOrynFfmCX2Q9tql1uV9iVdpVdbdfYtf+31pV2s91it9q99mO73e6wO+0uu9vu+TlOX8d++6lNs5/ZI/Yre9B+bg/ZY/aw/fLnOH19x+w39rj91p6wJ+0p+509bb+3Z+zZn9efvvbv7E/2ovUWGFmxZsMBZ+LMnMBZOJGv4qycjbNzDo7x1ZyTr+FcfC3n5jycl/Nxfi7ABTlkYsvMERfiwhzn67gIX89FuRgX5xLsuCSX4hu4NN/IZfgmLss3czm+hctzBa7It/JtXIlv58p8B1fhO7kqV+PqXIPv4pp8N9fie7g238t1+D6uy/dzPX6A63MDbsgPciN+iBtzE27Kzbg5t+CW/DC34ke4Nbfhtvwot+PHuD0/zh34Ce7IT3Infoo789PchZ/hrvwsd+PnuDs/zz34Be7JvTiJe3MffpH7cj/uzwN4IL/Eg/hlHsyv8BAeysP4VR7Or/EIfp1H8igezW/wGB7L43g8T+CJnMxv8iR+iyfz2zyFp/I0ns4zeCbP4nd4Ns/hufwuz+P5vIAX8iJezEv4PV7K73MKf8DL+ENO5eW8glfyKl7Na3gtr+P1vIE38ibezFt4K2/jj3g77+CdvIt38x7eyx/zPv6E9/OnnMaf8QH+Cx/kz/kQf8GH+Us+wl/xUf6aj/E3fJy/5RN8kk/xd3yav+czfJbP8Q98nn/kC/wTX2TPEGGkIh2ZKIgyRZmjhChLlBhdFWWNskXZoxxRLLo6yhldE+WKro1yR3mivFG+KH9UICoYhRFFNuIoigpFhaN4dF1UJLo+KhoVi4pHJSIXlYxKRTdEpaMbozLRTVHZ6OaoXHRLVD6qEFWMbo1uiypFt0eVozuiKtGdUdWoWlQ9qhHdFdWM7o5qRfdEtaN7ozLRfVHd6P6oXvRAVD9qEDWMHowaRQ9FjaMmUdOoWdQ8ahG1jB6OWkWPRK2jNlHb6NGoXfRY1D56POoQPRF1jJ68tL9Y8MvV9K/2J0W9I/3rG7J79KL44viS+HvxpfH34ynxD+LL4h/GU+PL4yviK+Or4qvja+Jr4+vi6+Mb4hvjm+Kb41viW+Pe18gMDtMfhMG4wGVymV2Cy+IS3VUuq8vmsrscLuaudjndNS6Xu9bldnlcXpfP5XcFXEEXOnLWsYtcIVfYxd11roi73hV1xVxxV8I5V9KVci1cS9fStXKPuNaujWvrHnWPusfcY+7xhF8Ld53cU66ze9p1cc+4Z9yzrpt7znV3z7se7gXX0/VySS7J9XF9XF/X1/V3/d1AN9ANcoPcYDfYDXFD3DA3zA13w90IN8KNdCPdaDfajXFj3Dg3zk1wE1yyS3aT3CQ32U12U9wUN81NczPcDDfLzXKz3Ww3181189w8t8AtcIvcIrfELXFL3VKX4lLcMrfMpbpUt8KtcKvcKrfGrXHr3Dq3wW1wm9wmt8VtcdvcNrfdbXc73U632+12e91et8/tc/vdfpfm0twBd8AddAfdIfeFO+y+dEfcV+6o+9odc9+44+5bd8KddKec16fd9+6MO+vOuR/cefeju+B+chedd8mxN2OTYm/FJsfejk2JTY1Ni02PzYjNjM2KvRObHZsTmxt7NzYvNj+2ILYwtii2OLYk9l5saez9WErsg9iy2Iex1Njy2IrYytiq2OqY9wW2R76QL+zj/jpfxF/vi/pivrgv4Z0v6Uv5G3xpf6Mv42/yZf3Nvpy/xZf3FXxF38Q39c18c9/Ct/QP+1b+Ed/at/Ft/aO+nX/Mt/eP+w7+Cd/RP+k7+ad8Z/+07+Kf8V39s/N/7bLv4V/wPX0vn+R7+z7+Rd/X9/P9/QA/0L/kB/mX/WD/ih/ih/ph/lU/3L/mR/jX/Ug/yo/2b/gxfqwf58f7CX6iT/Zv+kn+LT/Zv+2n+Kl+mp/uZ/iZfpZ/x8/2c/xc/66f5+f7BX6hX+QX+yX+Pb/Uv+9T/Ad+mf/Qp/rlfoVf6Vf51X6NX+vX+fV+g9/oN/nNfovf6rf5j/x2v8Pv9Lv8br/H7/Uf+33+E7/ff+rT/Gf+gP+LP+g/94f8F/6w/9If8V/5o/5rf8x/44/7b/0Jf9Kf8t/50/57f8af9ef8D/68/9Ff8D/5i/I3a0IIIYQQ/xR9mf29/87/qV+3dH0AINuOfIf/es5NuX8Z91P7OsYA4IleXRv8tjVokJSU9OuxqRqCwgsBIHYp/+fvH/g1Xg5t4THoAG2g9N+tr5+q+PN93383f/xmgESALL/lpD8eJcJfz3/jP5i/yXt8ufkXAhQtfCkn/US/xZfmL/MP5t/T7jLzZ/k8GaD1f8nJCpfiS/OXgkfgSejwuyOFEEIIIYQQQohf9FPnu13u+Tb9+Ty/uZSTGS7Fl3s+v4zKf8QahBBCCCGEEEII8d97+rnujz/coUObzv/Jg8x/jjL+BAMEgD9BGTL48w+u9G8mIYQQQgghxB/t0k3/la5ECCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYTIuP79bwhT//TBV3qNQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghxJX2fwIAAP//5g1V0w==")
rename(&(0x7f0000000140)='./file2\x00', &(0x7f0000001880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
rename(&(0x7f0000001980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file2\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0)
write(r0, &(0x7f0000000b80)='0fc5:1227:co', 0xc)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./bus\x00', 0x14542, &(0x7f0000000b40)=ANY=[], 0x1, 0x11ff, &(0x7f0000002480)="$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")
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0)
syz_clone(0x1000, &(0x7f0000000200)="6008a0c507eb8520e1aac5a34d8f5b02054b37c59f8a8bb42169f3c72cc281b248baff199ad4ccecc0090b88eb9b895057087ae9ccf7d2373773a73d14d7960c2036cb38aa5d52ec7fdcc44c67d9c0a8b579d776470e49d06cf7c13b9a5556037568a490c67bbacce16c3c7093f501a67c3bd1b502cfea3768700b39", 0x7c, &(0x7f00000002c0), 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b)

26.141485035s ago: executing program 5 (id=310):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
clock_nanosleep(0xfffffff6, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0xfffffffffffffffe)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="60000000100005040100000000000000000000000003000000000000000000000a00030076657468300000003400128009000100766574680000000024000280200001"], 0x60}}, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x8, 0x14, 0x804, 0x7, 0xffff, 0x120000, 0x5, 0x0, 0x8, 0x8000000000000001, 0x2, 0xe, 0x101, 0x3, 0x1], 0x8000000, 0x141200})
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

20.633317953s ago: executing program 33 (id=256):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x62}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
syz_emit_ethernet(0x1346, &(0x7f00000002c0)=ANY=[], 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x9f, &(0x7f00000000c0)={&(0x7f0000000480)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0)

11.038370353s ago: executing program 34 (id=310):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
clock_nanosleep(0xfffffff6, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0xfffffffffffffffe)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="60000000100005040100000000000000000000000003000000000000000000000a00030076657468300000003400128009000100766574680000000024000280200001"], 0x60}}, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x8, 0x14, 0x804, 0x7, 0xffff, 0x120000, 0x5, 0x0, 0x8, 0x8000000000000001, 0x2, 0xe, 0x101, 0x3, 0x1], 0x8000000, 0x141200})
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

9.444356858s ago: executing program 0 (id=371):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r0)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x38, r2, 0x101, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xe}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x4, 0x0, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40d0}, 0x24040844)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r3)
r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r3)
sendmsg$NLBL_CIPSOV4_C_LIST(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="0100e07bae17fedbdf2513"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8010)
sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x128, r4, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x114, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7e0d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc7c3}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4882e750}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaa8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x304b}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3852b527}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xa741bb2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc02d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7ab20994}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2e9c1fbe}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6fd500f5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x19e9592b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x40719f6d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x54272657}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5cc848fe}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5521}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4a31df1c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x79a9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x60b1fd87}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6114b8ea}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2881}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5b1fa4ee}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x158e}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x310a64ec}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7703ebe2}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc9d7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbda5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x99fd}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6aeb}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x18c2}]}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x8000}, 0xc840)
syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3040, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x1, 0xc0, 0x10, {0x8, 0xb, 0x0, 0x2, 0x1, 0x1, 0x30, 0x7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xe, 0xd4, 0x84, {0xa, 0x25, 0x25, 0x0, 0x41, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x210, 0xdd, 0xa, 0x2, {0xa, 0x25, 0x25, 0x80000000, 0x5, 0x9}}}}}}}}]}}, 0x0)

7.735658838s ago: executing program 0 (id=381):
syz_mount_image$fuse(0x0, &(0x7f0000000200)='./bus\x00', 0x283016, 0x0, 0x11, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x800000, 0x0, 0x1, 0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c3c42, 0x0)
read(r0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000000), 0x220000c, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@xino_auto}]})
r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x149000, 0x0)
getdents64(r1, 0x0, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0)
r2 = socket$inet(0x2, 0x2, 0x1)
setsockopt$sock_int(r2, 0x1, 0x5, &(0x7f0000000340)=0x6, 0x4)
sendmsg$inet(r2, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @multicast1}, 0x10, &(0x7f0000000dc0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000007000000830b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20008024)
r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
syz_usb_connect(0x2, 0xb3, &(0x7f0000000840)=ANY=[@ANYBLOB="12010002ef0201405a22d4e1ada7f5d200010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e0010000000000000000006009001516050001151605000924", @ANYRES32=r3], &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0})

5.528246361s ago: executing program 0 (id=390):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
write(r0, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58)
close_range(r0, r0, 0x0)
r1 = socket(0x1e, 0x1, 0x0)
r2 = socket$inet6(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendto$inet6(r2, &(0x7f0000000000), 0x0, 0x800, 0x0, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0)
connect$tipc(r1, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000640)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRESOCT, @ANYRES8=0x0, @ANYRES32=0x0, @ANYRES64, @ANYRESDEC=0x0], 0x1, 0x304, &(0x7f0000000bc0)="$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")
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
fdatasync(r3)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r4, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x2000)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
ftruncate(r3, 0x4a8e)

5.252345884s ago: executing program 6 (id=391):
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRESDEC=r1], 0xfffffffffffffeba}, 0x4004000)
recvmmsg(r0, &(0x7f0000003340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003040)=""/243, 0xf3}, 0x1}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000032c0)=""/71, 0x47}, 0x81}], 0x2, 0x40000002, 0x0)
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x1000801, &(0x7f00000000c0)=ANY=[@ANYRES64=0x0], 0x23, 0x203, &(0x7f0000000ec0)="$eJzsmT+IE0EUxr+Z3ducQQQbCxEsPDCit9ndqFxzhYKlIJx/GyF463G6d5FkhcuBRbCxsbQQbG0sLSxSWdjZ2WqhgmBhKrHUkZmdzU52k6BJlMC9H9zcN+/NvJn3MrxmQRDEnuXzpx8fH59fuXwKwH4soaTtX61sDTfWf3h6/+ST1QvPXr5//mb7wINuPh4DIMSfny9jv36RzYUY3L0E/BQJUiuugOOE1tfA4FrGZr07BMMNbb6jNFO6sU8bo5DdakTrtzej0JODL4dADjUgu4INoNdhWAewqI9gxv1a7d279QhoJiIKU7Eg0nMKrr8V4+qn7neOY9Uogazp9UcPO3LuarsH3q+fDw5f6xoY1rReQQmu62YlMfI/bGfxrUL+M0jyX4iDywXXTSsRQvwSk0dOs9eWq98H12RvbA6K8F+EzHa2kY+McMnaTnkEy1tY9lO22od63bfFXV/mo84TCdW4ABRc78pRdHGKyI5+54OuSjnXn5gNHDf6kw2776/GW/eqrfbu8uZWfSPcCLeDoHbWO+15Z4KqakTJOKb/Lar+VDbiL4xY6zAHO/U4bvo7QNz0+/MgGY2Ou/aq8U3t4ar/cVSOJTHkU1Fpl4afwfQfV/+lqlgjL08QBEEQBEEQBEEQBEEQBDEWJzc/Cgb9xYyl38SGEFxSq38HAAD//9jrahY=")
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
syz_open_dev$usbmon(&(0x7f0000000000), 0x8, 0x1)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x10, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb6b, 0x800c1, 0x4, 0x1, 0x1, 0x7, 0xff, 0x1000, 0xc, 0xf, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0x63c, 0xe, 0x6, 0x100, 0x6, 0x1bfe, 0xb, 0x7, 0x40, 0x8, 0x6, 0x3, 0x0, 0x11000, 0x4, 0x5, 0x79b, 0x5, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860a, 0x81, 0xa9, 0x81, 0x2, 0x180000, 0x4003, 0x28b, 0x5, 0x2af, 0x3, 0x85, 0x5, 0x1, 0xb, 0x4, 0x7, 0xd, 0x0, 0x9, 0x8, 0x8, 0x0, 0x0, 0x3, 0x0, 0x10000, 0x3fa, 0xffffffff, 0x6, 0x6, 0x49, 0x80000000, 0xfdffbfff, 0x2, 0xfffffffe, 0x84, 0x100, 0x0, 0x252, 0x3, 0xb, 0x2, 0x20006, 0xc50, 0xff, 0xb, 0x10000002, 0xd9a, 0xc8, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x1, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x4, 0x400, 0x66cd, 0x8, 0x8, 0x5, 0x1fc, 0x1ff, 0xfffffffd]}})
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil})
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000100)=ANY=[@ANYRESHEX=r4, @ANYRES16=0x0], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80800001}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000005000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r7, 0x4)
sendmsg$inet(r6, &(0x7f0000002fc0)={0x0, 0x0, 0x0}, 0x20040090)
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0)
ioctl$KVM_CLEAR_DIRTY_LOG(r3, 0xc018aec0, &(0x7f0000000b00)={0x10200, 0x180, 0x40, &(0x7f0000000700)=[0x2, 0x1, 0x2, 0x3, 0x2, 0x7, 0x5, 0x7, 0x7fffffff, 0x100000001, 0x1, 0x2, 0x4, 0x8, 0x0, 0x6, 0x4, 0xdcf, 0xd76, 0x0, 0x5, 0x1, 0xbe0, 0x4, 0x4, 0xcb5, 0x81, 0x8, 0x6, 0x0, 0x2, 0x101, 0xf, 0x1, 0x0, 0x300000000000000, 0x80000000, 0x0, 0x1, 0x9, 0xfffffffffffffff9, 0x80, 0x401, 0x80000000, 0xfffffffffffffffb, 0x2a, 0x8, 0x6, 0x101, 0xfffffffffffffffd, 0x0, 0x800, 0x90d, 0x7, 0x200, 0x4, 0xfffffffffffff12b, 0x9, 0x401, 0x7, 0xe, 0x198, 0x9, 0xf, 0xfffffffffffffffa, 0x1, 0x8, 0x3, 0x5, 0x8, 0xfffffffffffffc01, 0xfffffffffffffff9, 0x400000, 0x5, 0x4, 0x88c, 0x6, 0x8, 0xfffffffffffffc00, 0x7fffffffffffffff, 0x1, 0x10001, 0x0, 0x7, 0x9, 0x9, 0xffff, 0x7, 0x0, 0x9, 0xa, 0x1, 0x6, 0x3ff, 0x0, 0xa77, 0x7, 0x9, 0x1, 0x80000, 0x0, 0x4, 0x17b2, 0x7f, 0x6, 0x6, 0x1, 0x4, 0xa47, 0x7fffffffffffffff, 0x100, 0xfffffffffffff801, 0x80, 0x139a9522, 0x10000, 0x3, 0x2, 0x8, 0xc, 0x4, 0x7, 0x10001, 0x6874, 0x435, 0x7, 0x4, 0x6, 0xfffffffffffffff9]})

4.579574036s ago: executing program 0 (id=393):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
clock_nanosleep(0xfffffff6, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0xfffffffffffffffe)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xffff5fbf}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000011)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

4.527804408s ago: executing program 7 (id=394):
creat(0x0, 0x109)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x492492492492846, 0x0)
connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) (fail_nth: 2)

4.240385061s ago: executing program 6 (id=395):
keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000000), 0x1000000000000232, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4)
fcntl$setstatus(r1, 0x4, 0x42000)
read$FUSE(r1, &(0x7f0000006100)={0x2020, 0x0, 0x0, <r2=>0x0}, 0x2020)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800, 0x2}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0)
writev(r3, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x10113}], 0x1)
r4 = syz_mount_image$fuse(0x0, 0x0, 0x3000019, 0x0, 0x1, 0x0, 0x0)
r5 = socket$can_raw(0x1d, 0x3, 0x1)
r6 = dup(r5)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xd, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r8}, 0xc)
sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000940)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000900)={0x0}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000001)
close(r0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), 0xd0001, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{}, {@aname={'aname', 0x3d, 'lo\x00'}}, {@noextend}], [{@smackfshat={'smackfshat', 0x3d, ',\\@'}}, {@euid_eq={'euid', 0x3d, r2}}]}})
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00'})
sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@ipv6_getroute={0xec, 0x1a, 0x20, 0x70bd27, 0x25dfdbff, {0xa, 0x14, 0x10, 0xe, 0x0, 0x1, 0x0, 0x3, 0x1400}, [@RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @ILA_ATTR_CSUM_MODE={0x5}}, @RTA_PREF={0x5, 0x14, 0x7}, @RTA_METRICS={0x90, 0x8, 0x0, 0x1, "462fcb444121f21c8a13518474cf1f49136a9587fe707dee42f52d0fa8fcec2485105cca5180c84193dd3e876d33e7c17a742a9bbdccf79ea4b65a95a2f6aca6d6d61559dc0e69d1a85a9a0127715c978ba097d921c8fcfca4ea687efce422b22e2a8647a8bd70033f17b028cc2d8fe62ae75a5fa93fd7054663f06eaf3a98a046ac58dae2d64058c738eb7d"}, @RTA_PRIORITY={0x8, 0x6, 0x9}, @RTA_GATEWAY={0x14, 0x5, @private2}, @RTA_UID={0x8, 0x19, r2}, @RTA_PREF={0x5, 0x14, 0x1}]}, 0xec}, 0x1, 0x0, 0x0, 0x4c051}, 0x8004)
listen(0xffffffffffffffff, 0x6)
getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xb, 0x0, &(0x7f00000004c0))

4.229850162s ago: executing program 7 (id=396):
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0x0, 0x1000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0xc, 0x10}, {0xffff1000, 0x200000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, 0x7}, {0x2000, 0x5000, 0xc, 0xfb, 0x4, 0x4, 0x0, 0x2, 0x3, 0xf6, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0xb4, 0x0, 0x0, 0xff, 0x0, 0x8, 0x0, 0x7, 0xfc}, {0xeeee8000, 0xffff1000, 0x10, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2, 0x83}, {0x0, 0x0, 0x0, 0x0, 0x8, 0x6, 0x34, 0x20, 0x0, 0x5, 0x5}, {0xd000, 0xeeef0000, 0xd, 0xfe, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x4}, {0x2, 0x2000, 0x0, 0x0, 0x0, 0x3, 0x0, 0xca, 0x26}, {0x80a0000, 0x7}, {0x60000}, 0xddf8ffdb, 0x0, 0x10000, 0x50, 0x40000000000, 0x0, 0x0, [0x0, 0x200000000000, 0x4, 0x40]})
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)=0xf)
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$TCFLSH(r0, 0x400455c8, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x3)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0x1e)

4.166173965s ago: executing program 7 (id=398):
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1ae7, 0x9001, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x2}}}}}]}}]}}, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000500)=[@nested_load_syzos={0x136, 0x38, {0x2, 0x0, [@nested_vmlaunch={0x12f, 0x18}]}}, @nested_create_vm={0x12d, 0x18, 0x1}, @nested_amd_clgi={0x17f, 0x10}, @nested_vmresume={0x130, 0x18, 0x1}, @nested_create_vm={0x12d, 0x18}, @in_dx={0x69, 0x20, {0x3f5c, 0x4}}, @rdmsr={0x66, 0x18, {0xaae}}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @in_dx={0x69, 0x20, {0xc3f1}}, @in_dx={0x69, 0x20, {0x4c6b, 0x6}}, @wrmsr={0x65, 0x20, {0xa49, 0x8}}, @wr_crn={0x67, 0x20, {0x8, 0x15a08}}, @out_dx={0x6a, 0x28, {0xc846, 0x3, 0x73b2}}, @uexit={0x0, 0x18, 0x9}, @wr_crn={0x67, 0x20, {0x0, 0x2}}, @enable_nested={0x12c, 0x18}, @in_dx={0x69, 0x20, {0x41e9, 0x1}}, @enable_nested={0x12c, 0x18}, @wrmsr={0x65, 0x20, {0x2d9, 0x4}}], 0x230})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @local}, 0xc)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

4.045398881s ago: executing program 3 (id=399):
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = open(0x0, 0x8000, 0x112)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

4.014046272s ago: executing program 3 (id=400):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0xb, [@var={0x8, 0x0, 0x0, 0xe, 0x2, 0x2}]}, {0x0, [0x10, 0x5f, 0x30, 0x0, 0x30, 0x2e, 0x0, 0x2e, 0x5f]}}, 0x0, 0x33, 0x0, 0x0, 0xffffffff}, 0x28)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x1, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b)
write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f00000001c0)='./file0\x00', 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8041, 0x104)
fsetxattr$security_capability(r5, &(0x7f0000000040), 0x0, 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000880)={{0x80e3000, 0xc000, 0x8, 0xd, 0x3, 0x0, 0x45, 0x6, 0x0, 0x2e, 0x8}, {0x5000, 0x2, 0x10, 0x2, 0x3e, 0x9, 0x7f, 0x7, 0x1, 0x5, 0x3}, {0xd000, 0xb000, 0xe, 0x3, 0x1, 0x0, 0x7, 0x60, 0x0, 0xa7, 0x3, 0x4}, {0x8000000, 0xdddd0000, 0xe, 0x6, 0x4, 0x2, 0x1, 0xf8, 0x9, 0x9, 0xf}, {0x5ffff, 0x70000, 0x4, 0x2, 0x15, 0x6, 0xab, 0x7c, 0x1, 0x83, 0xf7, 0x6}, {0x1000, 0xdddd1000, 0x8, 0x4, 0xb1, 0x8, 0x7, 0x9, 0x9, 0x13, 0x8, 0x10}, {0x9000, 0x2, 0x4, 0x5, 0x0, 0x5, 0x4, 0x3, 0x3, 0x84, 0x9, 0x79}, {0x41000, 0xf000, 0xc, 0x5, 0xf, 0x7, 0x0, 0xe2, 0x2, 0x8, 0xf0, 0x7}, {0x0, 0x802f}, {0x3000, 0xfffd}, 0xc0080025, 0x0, 0x0, 0x2024, 0x4, 0x0, 0x50000, [0x800, 0x9, 0x60, 0x4132]})
openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00'])
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0)

3.120644804s ago: executing program 0 (id=401):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x2099, 0x3, 0x20000006, 0x7ffffff9}, 0x10)
write(r1, &(0x7f00000000c0)="1800000016005f0227fffffffffffff881ff000001000000", 0x18)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @empty}, 0x1c)
recvmmsg(r2, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f00000003c0)}, 0x10009}], 0x1, 0x30100, 0x0)
recvfrom(r2, 0x0, 0x0, 0x10022, 0x0, 0x0)
setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000040)=[{{0x0, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x4}, {0x1, 0x1, 0x0, 0x1}}, {{0x2, 0x1, 0x1}, {0x1, 0x0, 0x0, 0x1}}], 0x18)
sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0)
ioctl$sock_netdev_private(r0, 0x894a, &(0x7f0000000000)="a93a")

3.101655125s ago: executing program 6 (id=402):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000180)={'syztnl2\x00', <r2=>0x0, 0x700, 0x8000, 0x967, 0x5, {{0x15, 0x4, 0x0, 0x32, 0x54, 0x67, 0x0, 0x1, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x39}, @remote, {[@timestamp={0x44, 0x2c, 0x61, 0x0, 0x7, [0x400, 0xfffffffc, 0x7, 0x40, 0x8df8, 0x5, 0x8482, 0x8, 0x8000, 0x9d]}, @timestamp={0x44, 0x14, 0xfc, 0x0, 0xd, [0x9, 0x0, 0x8, 0xfff]}]}}}}})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/sched/sched_switch/filter\x00', 0x2, 0x0)
write(r3, &(0x7f0000000100)='prev_pid == 9-', 0xe)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000002540)=ANY=[@ANYBLOB="5d45f25e059feb0100180000000007000000000000000004007f875d3debba0020000000e1b0a0a6136221311578f35bc4c3c59280ffc2acf4836687b204626a9be127416dca6d24acf338ac9469a0c9d099b701b461732c7b864dfbf6403329a78f84b9d805ba6c0b7b1605f38b86a87ed4cd5e1a40a6bea16304c4f3"], 0x0, 0x26}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="18000003ed000000eabf6e8a924171c595000000000000002140"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @tracing, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x92f5e}, 0x6d)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e00000003060000008000000900c5b4f7b9e800", @ANYRES32, @ANYBLOB='\n\x00'/20, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0000000004000000050000000700000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00'], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r5}, &(0x7f00000002c0), &(0x7f0000000440)=r0}, 0x20)
read$FUSE(0xffffffffffffffff, &(0x7f00000004c0)={0x2020, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}, 0x2020)
unshare(0x64000600)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r7, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x4}, 0x68)
sched_setaffinity(r6, 0x8, &(0x7f0000002500)=0xc3)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0x1b)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r8}, 0x0, &(0x7f0000000100)='%+9llu \x00'}, 0x20)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x275a, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = socket$inet6(0xa, 0x1, 0x0)
r11 = socket$inet6(0xa, 0x3, 0x8000000003c)
setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
setsockopt$inet6_buf(r10, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118)
connect$inet6(r10, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r12, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

3.034788328s ago: executing program 6 (id=404):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00'}, 0x94)
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000500)=[@nested_load_syzos={0x136, 0x38, {0x2, 0x0, [@nested_vmlaunch={0x12f, 0x18}]}}, @nested_create_vm={0x12d, 0x18, 0x1}, @nested_amd_clgi={0x17f, 0x10}, @nested_vmresume={0x130, 0x18, 0x1}, @nested_create_vm={0x12d, 0x18}, @in_dx={0x69, 0x20, {0x3f5c, 0x4}}, @in_dx={0x69, 0x20, {0xf712, 0x7}}, @rdmsr={0x66, 0x18, {0xaae}}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @in_dx={0x69, 0x20, {0xc3f1}}, @in_dx={0x69, 0x20, {0x4c6b, 0x6}}, @code={0xa, 0x4f, {"430f01ca26450f01df430fce66b886008ed0b9800000c00f3235010000000f30450f01c2f30fa7d842a00000000000000100c443dd6bf423c4619173fa2e"}}, @wrmsr={0x65, 0x20, {0xa49, 0x8}}], 0x1af})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @local}, 0xc)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r0, 0xae9a)
ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200})
ioctl$KVM_RUN(r0, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981})
ioctl$KVM_RUN(r0, 0xae80, 0x0)

3.021559948s ago: executing program 3 (id=406):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setns(0xc9, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r3, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff004001000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) (async, rerun: 32)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000380)={0x1, 0x0, [{0x48, 0x0, 0xd41e}]}) (rerun: 32)

2.970231251s ago: executing program 6 (id=407):
r0 = mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x2dc1, 0x2000000, 0xbd4c341840b03bf2, 0xffffffffffffffff, 0x8000000)
munmap$IORING_OFF_CQ_RING(r0, 0x9)
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000600)={{&(0x7f00002a2000/0x1000)=nil, 0x1000}, 0x1})
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000080000000000000009000000731132000000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = syz_open_pts(0xffffffffffffffff, 0x64580)
ioctl$TCSETAW(r3, 0x5407, &(0x7f00000000c0)={0x4, 0x2, 0x7fff, 0x9, 0x10, "62f033b92097dd70"})
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10)
recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}, 0xf4c}], 0x1, 0x40010081, 0x0)
rename(&(0x7f0000000280)='./file0/../file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00')
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000400)=0x1, 0xa)
connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10)
sendto(r5, &(0x7f0000000540)="f6", 0xffa6, 0xd63a66976f7dfbe1, 0x0, 0x0)
syz_emit_ethernet(0x86, &(0x7f0000002180)={@broadcast, @random="42e17dbe6edb", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2e5cea", 0x50, 0x3c, 0x0, @local, @mcast2, {[@srh={0x29, 0x0, 0x4, 0x0, 0xd, 0x0, 0xb}], {0xf5, 0x200, 0x48, 0x0, @wg=@cookie={0x3, 0x1, "c80c03000000340db2f999357b6d1e416f09e55e5cc6531d", "11a886ad86c414dbb912c9492279249260e92303a8f0b7cc89f9735acfc9a140"}}}}}}}, 0x0)
setsockopt$inet6_udp_int(r4, 0x11, 0xa, &(0x7f0000000040)=0x4, 0x4)
mknod$loop(&(0x7f0000000100)='./file0/file0\x00', 0x1, 0x1)
sendmsg(r4, &(0x7f0000002c40)={&(0x7f0000000140)=@in={0x2, 0x4e24, @empty}, 0x80, &(0x7f0000001780)=[{&(0x7f00000001c0)='k', 0x1}], 0x1}, 0x0)

2.670266065s ago: executing program 4 (id=411):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
clock_nanosleep(0xfffffff6, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0xfffffffffffffffe)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xffff5fbf}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000011)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2.670028245s ago: executing program 3 (id=412):
keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000000), 0x1000000000000232, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4)
fcntl$setstatus(r1, 0x4, 0x42000)
read$FUSE(r1, &(0x7f0000006100)={0x2020, 0x0, 0x0, <r2=>0x0}, 0x2020)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800, 0x2}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0)
writev(r3, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x10113}], 0x1)
r4 = syz_mount_image$fuse(0x0, 0x0, 0x3000019, 0x0, 0x1, 0x0, 0x0)
r5 = socket$can_raw(0x1d, 0x3, 0x1)
r6 = dup(r5)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xd, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r8}, 0xc)
sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000940)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000900)={0x0}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000001)
close(r0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), 0xd0001, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{}, {@aname={'aname', 0x3d, 'lo\x00'}}, {@noextend}], [{@smackfshat={'smackfshat', 0x3d, ',\\@'}}, {@euid_eq={'euid', 0x3d, r2}}]}})
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00'})
sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@ipv6_getroute={0xec, 0x1a, 0x20, 0x70bd27, 0x25dfdbff, {0xa, 0x14, 0x10, 0xe, 0x0, 0x1, 0x0, 0x3, 0x1400}, [@RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @ILA_ATTR_CSUM_MODE={0x5}}, @RTA_PREF={0x5, 0x14, 0x7}, @RTA_METRICS={0x90, 0x8, 0x0, 0x1, "462fcb444121f21c8a13518474cf1f49136a9587fe707dee42f52d0fa8fcec2485105cca5180c84193dd3e876d33e7c17a742a9bbdccf79ea4b65a95a2f6aca6d6d61559dc0e69d1a85a9a0127715c978ba097d921c8fcfca4ea687efce422b22e2a8647a8bd70033f17b028cc2d8fe62ae75a5fa93fd7054663f06eaf3a98a046ac58dae2d64058c738eb7d"}, @RTA_PRIORITY={0x8, 0x6, 0x9}, @RTA_GATEWAY={0x14, 0x5, @private2}, @RTA_UID={0x8, 0x19, r2}, @RTA_PREF={0x5, 0x14, 0x1}]}, 0xec}, 0x1, 0x0, 0x0, 0x4c051}, 0x8004)
listen(0xffffffffffffffff, 0x6)

2.278957894s ago: executing program 0 (id=413):
r0 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000))
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='dev\x00', 0x1ff)
r1 = add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$set_timeout(0xf, r1, 0x2)
syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
ioprio_set$uid(0x3, 0x0, 0x2000)

2.108094351s ago: executing program 7 (id=414):
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000080)="d81290b9744b3f4c028267be8cad3ff45722ee92068da78dfb625334a3b3920d2af83c9ff5b2e3cbc993bf0c68f040a4c5a480ef546cc7eca57ecaa77675c356559373586ea2119190028ccd742fbb7e47e9f181627dd867c0041e5cabe99dc0884a8571bae240202d4da81ff64b0fb7cb38895e3cd3a792e81d2b68def084396d21305639cd97d044ba2d0e6fb6556c4afa15f5d1fa99ba2042118bed4c379556d50fcb18f240aab354a0e61cd1991376bcd2a5e6368786cc3aee80c16f0435ad25b47d9dc51634ee3f5fe025639a22a7474dce897576a6904fc77b285a50173abf39f23a3b8030182ac9c19f653120932815eaf48d7b", 0xf7)
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x8000)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x4, 0x5, 0x200, 0x1000, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x4, 0x5}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x4)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x10001, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0, <r4=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{0xffffffffffffffff, <r5=>0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)='%pB    \x00'}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x26, &(0x7f0000000580)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @map_fd={0x18, 0x9, 0x1, 0x0, r3}, @alu={0x4, 0x1, 0x4, 0x0, 0x8, 0x8, 0xffffffffffffffff}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @exit, @map_idx={0x18, 0x3, 0x5, 0x0, 0xc}, @map_val={0x18, 0x6, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0xfffff800}], &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000040))

2.046247414s ago: executing program 7 (id=415):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x18, &(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000a8500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b8000005000000005baf2312bbc2", 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.045960265s ago: executing program 7 (id=416):
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7ff)
r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201000000000040f30455070000000000010902240001000040b109040000010300010009210101000122050009058103"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)={0x20, 0x12, 0x5, {0x5, 0x1, '\x00t\x00'}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x4, 0x0, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40d0}, 0x24040844)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r3)
r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r3)
sendmsg$NLBL_CIPSOV4_C_LIST(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="0100e07bae17fedbdf2513000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8010)
syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x4401)
socket$inet(0x2, 0x2, 0x0) (async)
setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x0) (async)
getpid() (async)
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) (async)
sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7ff) (async)
syz_usb_connect$hid(0x2, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201000000000040f30455070000000000010902240001000040b109040000010300010009210101000122050009058103"], 0x0) (async)
syz_usb_control_io(r2, 0x0, 0x0) (async)
syz_usb_control_io(r2, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)={0x20, 0x12, 0x5, {0x5, 0x1, '\x00t\x00'}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$NFC_CMD_GET_TARGET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x4, 0x0, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40d0}, 0x24040844) (async)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r3) (async)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r3) (async)
sendmsg$NLBL_CIPSOV4_C_LIST(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="0100e07bae17fedbdf2513000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8010) (async)
syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x4401) (async)

1.865873913s ago: executing program 4 (id=417):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00'}, 0x94)
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000500)=[@nested_load_syzos={0x136, 0x38, {0x2, 0x0, [@nested_vmlaunch={0x12f, 0x18}]}}, @nested_create_vm={0x12d, 0x18, 0x1}, @nested_amd_clgi={0x17f, 0x10}, @nested_vmresume={0x130, 0x18, 0x1}, @nested_create_vm={0x12d, 0x18}, @in_dx={0x69, 0x20, {0x3f5c, 0x4}}, @in_dx={0x69, 0x20, {0xf712, 0x7}}, @rdmsr={0x66, 0x18, {0xaae}}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @in_dx={0x69, 0x20, {0xc3f1}}, @in_dx={0x69, 0x20, {0x4c6b, 0x6}}, @code={0xa, 0x4f, {"430f01ca26450f01df430fce66b886008ed0b9800000c00f3235010000000f30450f01c2f30fa7d842a00000000000000100c443dd6bf423c4619173fa2e"}}, @wrmsr={0x65, 0x20, {0xa49, 0x8}}], 0x1af})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @local}, 0xc)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r0, 0xae9a)
ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200})
ioctl$KVM_RUN(r0, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981})
ioctl$KVM_RUN(r0, 0xae80, 0x0)

1.846180834s ago: executing program 4 (id=418):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0xb, [@var={0x8, 0x0, 0x0, 0xe, 0x2, 0x2}]}, {0x0, [0x10, 0x5f, 0x30, 0x0, 0x30, 0x2e, 0x0, 0x2e, 0x5f]}}, 0x0, 0x33, 0x0, 0x0, 0xffffffff}, 0x28)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x1, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b)
write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f00000001c0)='./file0\x00', 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8041, 0x104)
fsetxattr$security_capability(r5, &(0x7f0000000040), 0x0, 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000880)={{0x80e3000, 0xc000, 0x8, 0xd, 0x3, 0x0, 0x45, 0x6, 0x0, 0x2e, 0x8}, {0x5000, 0x2, 0x10, 0x2, 0x3e, 0x9, 0x7f, 0x7, 0x1, 0x5, 0x3}, {0xd000, 0xb000, 0xe, 0x3, 0x1, 0x0, 0x7, 0x60, 0x0, 0xa7, 0x3, 0x4}, {0x8000000, 0xdddd0000, 0xe, 0x6, 0x4, 0x2, 0x1, 0xf8, 0x9, 0x9, 0xf}, {0x5ffff, 0x70000, 0x4, 0x2, 0x15, 0x6, 0xab, 0x7c, 0x1, 0x83, 0xf7, 0x6}, {0x1000, 0xdddd1000, 0x8, 0x4, 0xb1, 0x8, 0x7, 0x9, 0x9, 0x13, 0x8, 0x10}, {0x9000, 0x2, 0x4, 0x5, 0x0, 0x5, 0x4, 0x3, 0x3, 0x84, 0x9, 0x79}, {0x41000, 0xf000, 0xc, 0x5, 0xf, 0x7, 0x0, 0xe2, 0x2, 0x8, 0xf0, 0x7}, {0x0, 0x802f}, {0x3000, 0xfffd}, 0xc0080025, 0x0, 0x0, 0x2024, 0x4, 0x0, 0x50000, [0x800, 0x9, 0x60, 0x4132]})
openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00'])
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0)

1.820506765s ago: executing program 3 (id=419):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57)
r1 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00')
preadv(r1, &(0x7f0000001b80)=[{&(0x7f00000000c0)=""/92, 0x84}], 0x1, 0x2f, 0xfd4c)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$KVM_CREATE_VCPU(r2, 0xc004ae02, 0x40001)

1.726080469s ago: executing program 3 (id=420):
r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, &(0x7f0000000100)=0x10, 0x80000)
process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x41, &(0x7f0000000240)=[{&(0x7f0000000080)=""/198}, {&(0x7f0000000000)=""/41}, {&(0x7f0000000180)=""/174}], 0x286, 0x0)
sendto$inet(r0, &(0x7f0000000140), 0x0, 0x4000801, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10)
r1 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="4800000010001fff00000000fbdbdf2500400000", @ANYRES32=0x0, @ANYBLOB="2c41040000000000280012800b0001006272696467650000180002800a00140001"], 0x48}}, 0x4040)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
close_range(r3, r3, 0x200000000000000)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0, &(0x7f0000000480)}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0, <r5=>0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={0xffffffffffffffff, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000007c0)=[0x0, 0x0, 0x0], ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x1, 0x9, &(0x7f0000000800)=[0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf2, &(0x7f0000000880)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000008c0), &(0x7f0000000900), 0x8, 0x5b, 0x8, 0x8, &(0x7f0000000940)}}, 0x10)
r7 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000940)='bpf_lsm_file_permission\x00')
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x18, 0xe, &(0x7f0000000640)=@raw=[@map_idx_val={0x18, 0x7, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7fffffff}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xffffffffffffffff}], &(0x7f00000006c0)='syzkaller\x00', 0x8, 0xae, &(0x7f0000000700)=""/174, 0x40f00, 0x0, '\x00', r6, @fallback=0x2e, r0, 0x8, &(0x7f0000000ac0)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000b00)={0x5, 0x3, 0x3, 0x86c8}, 0x10, r7, 0xffffffffffffffff, 0x0, &(0x7f0000000b40), 0x0, 0x10, 0x7f}, 0x94)
syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)

1.026425012s ago: executing program 4 (id=421):
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = open(0x0, 0x8000, 0x112)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

960.356725ms ago: executing program 4 (id=422):
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x184)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8082, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02})
readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/84, 0x54}], 0x1)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newlink={0x30, 0x10, 0x1, 0x70bd28, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_TXQLEN={0x8, 0xd, 0x1}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207)
ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x100b, 0x4})
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0})
dup3(r3, r2, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000940)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x10b8, &(0x7f0000000400)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x80000001, 0x3e}, @ptr={0x70742a85, 0x20000000, &(0x7f0000000580)=""/226, 0xe2, 0x1, 0x26}, @fda={0x66646185, 0x9, 0x1, 0xb4}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1040}], 0x0, 0x0, 0x0})
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file1\x00', 0x20400, 0x20)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000daa000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0)
recvmmsg(r5, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}], 0x1}}], 0x1, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x1e8}, 0x1, 0x0, 0x0, 0x4004880}, 0x4004000)

559.127034ms ago: executing program 4 (id=423):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8917, &(0x7f0000000000)={'syz_tun\x00', {0x2, 0x4e24, @local}})
socket(0x80000000000000a, 0x2, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
socket$packet(0x11, 0x3, 0x300)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x2000c015}, 0x2404c8c0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x5a, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x4, 0x200008, 0x8, 0x20001}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r3], 0x4c}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x6293a, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40845}, 0x4000000)
ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x6)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10)
sendto$inet(r1, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
brk(0x4)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x800000000000000, 0x0, 0x0, 0x800, 0x0, 0x8}, 0x0, &(0x7f0000000080)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x3ac8}, 0x0, 0x0)
recvfrom(r1, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb)

0s ago: executing program 6 (id=424):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000003c0)={'syz0\x00', {0x9, 0x0, 0x1, 0x400}, 0x54, [0xfffffffe, 0x5, 0x0, 0x0, 0x1, 0x0, 0x8, 0xfffffffd, 0x0, 0xc, 0x0, 0x0, 0x7, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x9ed, 0x7, 0x0, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x40000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x90000000, 0x255, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffc, 0xffbffff8, 0x1000, 0x100, 0x1, 0x3f8, 0x10, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6, 0x2, 0x4, 0x0, 0x0, 0x6], [0x714, 0x20000, 0x0, 0xffd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0xb5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x9, 0x4, 0x8, 0x0, 0x0, 0x40, 0x44, 0x5, 0xe, 0x0, 0x2, 0x0, 0x0, 0x8, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x2, 0x5, 0x55], [0x0, 0x0, 0x0, 0x5d71, 0x0, 0xbd8f, 0x1, 0x4, 0x0, 0xfffffffd, 0x3, 0x9, 0x4, 0x0, 0x0, 0x3, 0xfdfffffc, 0x0, 0x2, 0x0, 0x10001, 0x810, 0x2, 0x0, 0x10000000, 0x800000, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0xffffffff, 0x7fff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0xc09, 0x6, 0xfffffffc, 0x1, 0x1d, 0x10, 0xfffffffe, 0x4, 0x80000000], [0x4, 0x0, 0x2, 0xfffffffe, 0x400, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfefffffc, 0x0, 0x7ce1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2, 0x0, 0x8, 0xfffffc01, 0x91a, 0x3, 0x0, 0xdca2, 0x6, 0x0, 0x0, 0x1000, 0x0, 0x5, 0x0, 0x2001, 0xfffffffd, 0x80, 0xffffffff, 0xffffffff, 0x0, 0xae, 0x0, 0xc, 0x400000, 0x2, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x40008001, 0x40000, 0x2, 0x1]}, 0x45c)
ioctl(0xffffffffffffffff, 0x890b, &(0x7f0000000500)='\x00\x00\x00\x00\x00\x00')
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10)
write(r0, &(0x7f00000000c0)="8f2a0a65bd8c002b03042c0e0580a7b6070d63e286a5cefe", 0x5ac)

kernel console output (not intermixed with test programs):

81][  T591] erofs: (device loop5): z_erofs_readahead: readahead error at page 140 @ nid 36
[   32.299563][  T591] erofs: (device loop5): z_erofs_readahead: readahead error at page 139 @ nid 36
[   32.311022][  T591] erofs: (device loop5): z_erofs_readahead: readahead error at page 111 @ nid 36
[   32.328230][  T591] erofs: (device loop5): z_erofs_readahead: readahead error at page 110 @ nid 36
[   32.338605][  T591] erofs: (device loop5): z_erofs_readahead: readahead error at page 109 @ nid 36
[   32.676960][  T591] erofs: (device loop5): z_erofs_readahead: readahead error at page 108 @ nid 36
[   33.012120][  T591] erofs: (device loop5): z_erofs_readahead: readahead error at page 107 @ nid 36
[   33.051037][  T591] erofs: (device loop5): z_erofs_readahead: readahead error at page 106 @ nid 36
[   33.060929][  T591] handle_bad_sector: 1258 callbacks suppressed
[   33.060940][  T591] attempt to access beyond end of device
[   33.060940][  T591] loop5: rw=524288, want=13478624064, limit=16
[   33.078905][  T591] attempt to access beyond end of device
[   33.078905][  T591] loop5: rw=524288, want=13478624072, limit=16
[   33.093818][  T618] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d)
[   33.108091][  T591] attempt to access beyond end of device
[   33.108091][  T591] loop5: rw=524288, want=14550774184, limit=16
[   33.121956][  T591] attempt to access beyond end of device
[   33.121956][  T591] loop5: rw=524288, want=14550774192, limit=16
[   33.136153][  T591] attempt to access beyond end of device
[   33.136153][  T591] loop5: rw=524288, want=13716630408, limit=16
[   33.149223][  T591] attempt to access beyond end of device
[   33.149223][  T591] loop5: rw=524288, want=13716630416, limit=16
[   33.161031][  T591] attempt to access beyond end of device
[   33.161031][  T591] loop5: rw=524288, want=790416, limit=16
[   33.174116][  T591] attempt to access beyond end of device
[   33.174116][  T591] loop5: rw=524288, want=790424, limit=16
[   33.185482][  T591] attempt to access beyond end of device
[   33.185482][  T591] loop5: rw=524288, want=104, limit=16
[   33.196696][  T591] attempt to access beyond end of device
[   33.196696][  T591] loop5: rw=524288, want=112, limit=16
[   33.238597][  T634] fuse: Bad value for 'fd'
[   33.289248][  T638] EXT4-fs (loop1): bad s_min_extra_isize: 544
[   33.400695][  T638] FAT-fs (loop1): "posix" option is obsolete, not supported now
[   33.453956][  T647] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
[   34.285545][  T662] netlink: 80 bytes leftover after parsing attributes in process `syz.4.96'.
[   34.330482][   T24] kauditd_printk_skb: 323 callbacks suppressed
[   34.330560][   T24] audit: type=1326 audit(1789612269.679:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=590 comm="syz.5.81" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9c181de98e code=0x7ffc0000
[   34.419810][  T664] process 'syz.1.98' launched './file0' with NULL argv: empty string added
[   34.431216][  T293] usb 6-1: USB disconnect, device number 2
[   34.443334][   T24] audit: type=1326 audit(1789612269.679:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=590 comm="syz.5.81" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9c181de98e code=0x7ffc0000
[   34.468034][   T24] audit: type=1326 audit(1789612269.679:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=590 comm="syz.5.81" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9c181de98e code=0x7ffc0000
[   34.494209][   T24] audit: type=1326 audit(1789612269.679:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=590 comm="syz.5.81" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9c181de98e code=0x7ffc0000
[   34.519291][   T24] audit: type=1326 audit(1789612269.679:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=590 comm="syz.5.81" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9c181de98e code=0x7ffc0000
[   34.544030][   T24] audit: type=1326 audit(1789612269.689:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=590 comm="syz.5.81" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9c181de98e code=0x7ffc0000
[   34.569877][   T24] audit: type=1326 audit(1789612269.689:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=590 comm="syz.5.81" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9c181de98e code=0x7ffc0000
[   34.594975][   T24] audit: type=1326 audit(1789612269.689:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=590 comm="syz.5.81" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9c181de98e code=0x7ffc0000
[   34.620502][   T24] audit: type=1326 audit(1789612269.689:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=590 comm="syz.5.81" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9c181de98e code=0x7ffc0000
[   34.663206][   T24] audit: type=1326 audit(1789612269.689:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=590 comm="syz.5.81" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9c181de98e code=0x7ffc0000
[   34.910320][  T300] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   34.970319][  T663] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   34.980698][  T679] F2FS-fs (loop5): Invalid log sectorsize (67108873)
[   34.987490][  T679] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[   34.995790][  T679] F2FS-fs (loop5): Unrecognized mount option "9" or missing value
[   35.115784][  T695] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
[   35.140425][  T695] ext4 filesystem being mounted at /21/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   35.240318][  T663] usb 2-1: Using ep0 maxpacket: 8
[   35.280589][  T663] usb 2-1: too many configurations: 189, using maximum allowed: 8
[   35.310430][  T300] usb 5-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config
[   35.334336][  T300] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[   35.354668][  T300] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   35.410387][  T663] usb 2-1: unable to read config index 0 descriptor/start: -61
[   35.446655][  T663] usb 2-1: can't read configurations, error -61
[   35.485977][  T300] aiptek 5-1:17.0: interface has no int in endpoints, but must have minimum 1
[   35.600365][  T663] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   35.840350][  T663] usb 2-1: Using ep0 maxpacket: 8
[   35.880642][  T663] usb 2-1: too many configurations: 189, using maximum allowed: 8
[   35.988220][  T293] usb 5-1: USB disconnect, device number 3
[   36.080547][  T663] usb 2-1: unable to read config index 0 descriptor/start: -61
[   36.088164][  T663] usb 2-1: can't read configurations, error -61
[   36.094605][  T663] usb usb2-port1: attempt power cycle
[   36.114678][  T710] FAULT_INJECTION: forcing a failure.
[   36.114678][  T710] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[   36.128034][  T497] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[   36.128055][  T710] CPU: 1 PID: 710 Comm: syz.3.113 Not tainted syzkaller #0
[   36.142660][  T710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   36.152701][  T710] Call Trace:
[   36.155968][  T710]  __dump_stack+0x21/0x24
[   36.160284][  T710]  dump_stack_lvl+0x1a7/0x208
[   36.164941][  T710]  ? show_regs_print_info+0x18/0x18
[   36.170111][  T710]  dump_stack+0x15/0x1c
[   36.174249][  T710]  should_fail+0x3ab/0x500
[   36.178671][  T710]  should_fail_alloc_page+0x4f/0x60
[   36.183850][  T710]  __alloc_pages_nodemask+0x11a/0x640
[   36.189199][  T710]  ? stack_trace_save+0xf0/0xf0
[   36.194024][  T710]  ? gfp_pfmemalloc_allowed+0x130/0x130
[   36.199546][  T710]  ? stack_trace_save+0xa6/0xf0
[   36.204389][  T710]  ? stack_trace_snprint+0xe0/0xe0
[   36.209496][  T710]  skb_page_frag_refill+0x1fe/0x3c0
[   36.214672][  T710]  tun_get_user+0x67c/0x31c0
[   36.219238][  T710]  ? __x64_sys_openat+0x136/0x160
[   36.224238][  T710]  ? tun_do_read+0x1cf0/0x1cf0
[   36.228989][  T710]  ? kstrtouint_from_user+0x1c4/0x220
[   36.234334][  T710]  ? memset+0x35/0x40
[   36.238288][  T710]  ? __fsnotify_parent+0x6d2/0x7c0
[   36.243372][  T710]  ? perf_trace_selinux_audited+0x60/0x740
[   36.249169][  T710]  ? selinux_file_permission+0x2a5/0x510
[   36.254782][  T710]  ? fsnotify_perm+0x66/0x4a0
[   36.259443][  T710]  tun_chr_write_iter+0x1c1/0x270
[   36.264459][  T710]  vfs_write+0x770/0xd70
[   36.268701][  T710]  ? kernel_write+0x3c0/0x3c0
[   36.273355][  T710]  ? __fget_files+0x2e1/0x340
[   36.278002][  T710]  ? __fdget_pos+0x1f7/0x380
[   36.282568][  T710]  ? ksys_write+0x70/0x260
[   36.286964][  T710]  ksys_write+0x14a/0x260
[   36.291263][  T710]  ? __ia32_sys_read+0x90/0x90
[   36.296016][  T710]  ? debug_smp_processor_id+0x17/0x20
[   36.301376][  T710]  __x64_sys_write+0x7b/0x90
[   36.305947][  T710]  do_syscall_64+0x31/0x40
[   36.310344][  T710]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   36.316219][  T710] RIP: 0033:0x7efd3b47798e
[   36.320615][  T710] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   36.340230][  T710] RSP: 002b:00007efd39f0ffb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   36.348623][  T710] RAX: ffffffffffffffda RBX: 00007efd39f106c0 RCX: 00007efd3b47798e
[   36.356574][  T710] RDX: 0000000000000062 RSI: 0000200000000040 RDI: 00000000000000c8
[   36.364554][  T710] RBP: 00007efd39f10090 R08: 0000000000000000 R09: 0000000000000000
[   36.372513][  T710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   36.380470][  T710] R13: 00007efd3b73f038 R14: 00007efd3b73efa0 R15: 00007ffeb60eb8c8
[   36.450340][  T497] usb 6-1: Using ep0 maxpacket: 16
[   36.530944][  T730] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
[   36.539885][  T730] ext4 filesystem being mounted at /23/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   36.570416][  T497] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   36.580685][  T497] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[   36.589666][  T497] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   36.612466][  T497] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   36.631509][  T497] usb 6-1: config 0 descriptor??
[   36.680329][  T300] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   36.755044][  T663] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   36.910554][  T663] usb 2-1: Using ep0 maxpacket: 8
[   36.950608][  T663] usb 2-1: too many configurations: 189, using maximum allowed: 8
[   37.041187][  T300] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   37.068718][  T699] erofs: (device loop5): mounted with root inode @ nid 36.
[   37.080462][  T663] usb 2-1: unable to read config index 0 descriptor/start: -61
[   37.122133][  T663] usb 2-1: can't read configurations, error -61
[   37.171856][  T300] usb 4-1: New USB device found, idVendor=1ae7, idProduct=9001, bcdDevice= 0.00
[   37.192980][  T699] erofs: (device loop5): z_erofs_readahead: readahead error at page 143 @ nid 36
[   37.250618][  T300] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   37.267292][  T699] erofs: (device loop5): z_erofs_readahead: readahead error at page 142 @ nid 36
[   37.339858][  T699] erofs: (device loop5): z_erofs_readahead: readahead error at page 141 @ nid 36
[   37.406285][  T663] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   37.416343][  T300] usb 4-1: config 0 descriptor??
[   37.434926][  T699] erofs: (device loop5): z_erofs_readahead: readahead error at page 140 @ nid 36
[   37.453132][  T699] erofs: (device loop5): z_erofs_readahead: readahead error at page 139 @ nid 36
[   37.462438][  T699] erofs: (device loop5): z_erofs_readahead: readahead error at page 111 @ nid 36
[   37.471730][  T699] erofs: (device loop5): z_erofs_readahead: readahead error at page 110 @ nid 36
[   37.481022][  T699] erofs: (device loop5): z_erofs_readahead: readahead error at page 109 @ nid 36
[   37.490138][  T699] erofs: (device loop5): z_erofs_readahead: readahead error at page 108 @ nid 36
[   37.499394][  T699] erofs: (device loop5): z_erofs_readahead: readahead error at page 107 @ nid 36
[   37.508568][  T699] erofs: (device loop5): z_erofs_readahead: readahead error at page 106 @ nid 36
[   37.520560][  T663] usb 2-1: Using ep0 maxpacket: 8
[   37.529376][  T702] usb 6-1: USB disconnect, device number 3
[   37.560408][  T663] usb 2-1: too many configurations: 189, using maximum allowed: 8
[   37.605489][  T751] overlayfs: unrecognized mount option "verity=off" or missing value
[   37.607774][  T746] EXT4-fs (loop5): bad s_min_extra_isize: 544
[   37.711808][  T663] usb 2-1: unable to read config index 0 descriptor/start: -61
[   37.719792][  T663] usb 2-1: can't read configurations, error -61
[   37.726674][  T663] usb usb2-port1: unable to enumerate USB device
[   37.790453][  T300] usbhid 4-1:0.0: can't add hid device: -71
[   37.796991][  T300] usbhid: probe of 4-1:0.0 failed with error -71
[   37.854626][  T300] usb 4-1: USB disconnect, device number 2
[   37.890310][  T473] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   38.190360][  T473] usb 1-1: Using ep0 maxpacket: 16
[   38.303917][  T774] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue
[   38.313342][  T473] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   38.361102][  T774] ext4 filesystem being mounted at /19/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   38.372546][  T473] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[   38.740805][  T473] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   38.750203][  T473] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   38.768507][  T473] usb 1-1: Product: syz
[   38.773558][  T473] usb 1-1: Manufacturer: syz
[   38.810443][   T54] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   38.823910][  T473] usb 1-1: SerialNumber: syz
[   38.831454][  T772] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[   38.842695][  T772] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   38.980638][  T772] F2FS-fs (loop4): Unrecognized mount option "" or missing value
[   39.201923][  T771] EXT4-fs (loop4): dax option not supported
[   39.214908][  T771] binfmt_misc: register: failed to install interpreter file ./cgroup
[   39.340356][   T54] usb 4-1: Using ep0 maxpacket: 16
[   39.370404][  T473] usb 1-1: 0:2 : does not exist
[   39.380090][  T473] usb 1-1: USB disconnect, device number 3
[   39.444306][  T790] EXT4-fs (loop1): mounted filesystem without journal. Opts: minixdf,errors=continue,noblock_validity,commit=0x0000000000000005,noinit_itable,max_batch_time=0x0000000000000004,abort,auto_da_alloc,lazytime,noauto_da_alloc,debug_want_extra_isize=0x0000000000000008,,errors=continue
[   39.460382][   T54] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   39.480945][   T54] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[   39.489972][   T54] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   39.529098][   T54] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   39.538900][   T54] usb 4-1: config 0 descriptor??
[   39.550351][   T15] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   39.810335][   T15] usb 5-1: Using ep0 maxpacket: 16
[   39.821913][  T778] erofs: (device loop3): mounted with root inode @ nid 36.
[   39.830762][  T778] erofs: (device loop3): z_erofs_readahead: readahead error at page 143 @ nid 36
[   39.839999][  T778] erofs: (device loop3): z_erofs_readahead: readahead error at page 142 @ nid 36
[   39.849264][  T778] erofs: (device loop3): z_erofs_readahead: readahead error at page 141 @ nid 36
[   39.858522][  T778] erofs: (device loop3): z_erofs_readahead: readahead error at page 140 @ nid 36
[   39.867796][  T778] erofs: (device loop3): z_erofs_readahead: readahead error at page 139 @ nid 36
[   39.877161][  T778] erofs: (device loop3): z_erofs_readahead: readahead error at page 111 @ nid 36
[   39.886581][   T24] kauditd_printk_skb: 91 callbacks suppressed
[   39.886591][  T778] erofs: (device loop3): z_erofs_readahead: readahead error at page 110 @ nid 36
[   39.886599][   T24] audit: type=1326 audit(1789612275.959:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=777 comm="syz.3.134" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3b4b7159 code=0x7ffc0000
[   39.889124][   T24] audit: type=1326 audit(1789612275.959:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=777 comm="syz.3.134" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3b4b7159 code=0x7ffc0000
[   39.892992][  T778] erofs: (device loop3): z_erofs_readahead: readahead error at page 109 @ nid 36
[   39.903263][   T24] audit: type=1326 audit(1789612275.979:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=777 comm="syz.3.134" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3b4b7159 code=0x7ffc0000
[   39.926803][  T778] erofs: (device loop3): z_erofs_readahead: readahead error at page 108 @ nid 36
[   39.951475][   T24] audit: type=1326 audit(1789612276.009:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=777 comm="syz.3.134" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7efd3b4b7159 code=0x7ffc0000
[   39.960328][   T54] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   39.985814][   T15] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   39.994218][  T778] erofs: (device loop3): z_erofs_readahead: readahead error at page 107 @ nid 36
[   40.018787][   T24] audit: type=1326 audit(1789612276.059:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=777 comm="syz.3.134" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3b4b7159 code=0x7ffc0000
[   40.028877][  T778] erofs: (device loop3): z_erofs_readahead: readahead error at page 106 @ nid 36
[   40.036331][   T15] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   40.045475][  T778] handle_bad_sector: 24 callbacks suppressed
[   40.045488][  T778] attempt to access beyond end of device
[   40.045488][  T778] loop3: rw=524288, want=13478624064, limit=16
[   40.070057][   T24] audit: type=1326 audit(1789612276.059:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=777 comm="syz.3.134" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7efd3b4b6ec2 code=0x7ffc0000
[   40.087384][  T778] attempt to access beyond end of device
[   40.087384][  T778] loop3: rw=524288, want=13478624072, limit=16
[   40.090023][   T15] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   40.096322][  T778] attempt to access beyond end of device
[   40.096322][  T778] loop3: rw=524288, want=14550774184, limit=16
[   40.107705][   T24] audit: type=1326 audit(1789612276.059:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=777 comm="syz.3.134" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7efd3b4b6f57 code=0x7ffc0000
[   40.189589][  T778] attempt to access beyond end of device
[   40.189589][  T778] loop3: rw=524288, want=14550774192, limit=16
[   40.189612][   T15] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[   40.201657][  T778] attempt to access beyond end of device
[   40.201657][  T778] loop3: rw=524288, want=13716630408, limit=16
[   40.225897][   T15] usb 5-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00
[   40.225914][  T778] attempt to access beyond end of device
[   40.225914][  T778] loop3: rw=524288, want=13716630416, limit=16
[   40.235044][   T15] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   40.246657][  T778] attempt to access beyond end of device
[   40.246657][  T778] loop3: rw=524288, want=790416, limit=16
[   40.246705][  T778] attempt to access beyond end of device
[   40.246705][  T778] loop3: rw=524288, want=790424, limit=16
[   40.246727][  T778] attempt to access beyond end of device
[   40.246727][  T778] loop3: rw=524288, want=104, limit=16
[   40.255868][   T15] usb 5-1: config 0 descriptor??
[   40.267277][  T778] attempt to access beyond end of device
[   40.267277][  T778] loop3: rw=524288, want=112, limit=16
[   40.277520][   T24] audit: type=1326 audit(1789612276.059:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=777 comm="syz.3.134" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7efd3b473e51 code=0x7ffc0000
[   40.328660][   T24] audit: type=1326 audit(1789612276.059:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=777 comm="syz.3.134" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7efd3b4b7f49 code=0x7ffc0000
[   40.353688][   T24] audit: type=1326 audit(1789612276.059:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=777 comm="syz.3.134" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7efd3b473ebb code=0x7ffc0000
[   40.500377][   T54] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   40.510698][   T54] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[   40.680492][   T54] usb 1-1: New USB device found, idVendor=0499, idProduct=1008, bcdDevice= 0.40
[   40.689825][   T54] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   40.700113][   T54] usb 1-1: Product: syz
[   40.704383][   T54] usb 1-1: Manufacturer: syz
[   40.709056][   T54] usb 1-1: SerialNumber: syz
[   40.772866][  T808] udc-core: couldn't find an available UDC or it's busy
[   40.780141][  T808] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   40.787983][  T785] netlink: 8 bytes leftover after parsing attributes in process `syz.4.135'.
[   40.952208][  T796] Zero length message leads to an empty skb
[   40.960466][   T15] usbhid 5-1:0.0: can't add hid device: -71
[   40.966564][   T15] usbhid: probe of 5-1:0.0 failed with error -71
[   40.981976][   T15] usb 5-1: USB disconnect, device number 4
[   41.030805][   T54] snd-usb-audio: probe of 1-1:1.0 failed with error -2
[   41.039976][   T54] usb 1-1: USB disconnect, device number 4
[   41.045997][  T473] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[   41.330328][  T473] usb 6-1: device descriptor read/64, error -71
[   41.442129][   T54] usb 4-1: USB disconnect, device number 3
[   41.468275][  T822] EXT4-fs (loop4): Mount option "dax=always" incompatible with ext2
[   41.760603][  T473] usb 6-1: device descriptor read/64, error -71
[   42.050516][  T473] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[   42.340402][  T473] usb 6-1: device descriptor read/64, error -71
[   42.820494][  T473] usb 6-1: device descriptor read/64, error -71
[   42.960652][  T473] usb usb6-port1: attempt power cycle
[   43.390343][  T473] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[   43.417000][  T869] udc-core: couldn't find an available UDC or it's busy
[   43.570525][  T473] usb 6-1: device descriptor read/8, error -71
[   43.736375][  T880] netlink: 8 bytes leftover after parsing attributes in process `syz.4.162'.
[   43.746011][  T880] bridge0: port 1(bridge_slave_0) entered disabled state
[   43.800463][  T473] usb 6-1: device descriptor read/8, error -71
[   43.811104][  T485] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   43.830857][  T888] FAT-fs (loop4): Unrecognized mount option "./file0" or missing value
[   44.070330][  T485] usb 2-1: Using ep0 maxpacket: 16
[   44.120330][  T300] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   44.190409][  T485] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   44.200596][  T485] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[   44.209598][  T485] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   44.218684][  T485] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   44.227306][  T485] usb 2-1: config 0 descriptor??
[   44.290326][  T473] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[   44.380396][  T473] usb 6-1: Using ep0 maxpacket: 16
[   44.490396][  T300] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   44.501756][  T473] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   44.509892][  T865] erofs: (device loop1): mounted with root inode @ nid 36.
[   44.511903][  T300] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   44.529008][  T473] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   44.533721][  T865] erofs: (device loop1): z_erofs_readahead: readahead error at page 143 @ nid 36
[   44.540058][  T473] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   44.549252][  T865] erofs: (device loop1): z_erofs_readahead: readahead error at page 142 @ nid 36
[   44.558943][  T300] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   44.568402][  T865] erofs: (device loop1): z_erofs_readahead: readahead error at page 141 @ nid 36
[   44.580908][  T473] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[   44.590344][  T865] erofs: (device loop1): z_erofs_readahead: readahead error at page 140 @ nid 36
[   44.611900][  T865] erofs: (device loop1): z_erofs_readahead: readahead error at page 139 @ nid 36
[   44.612126][  T300] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00
[   44.621560][  T865] erofs: (device loop1): z_erofs_readahead: readahead error at page 111 @ nid 36
[   44.639441][  T865] erofs: (device loop1): z_erofs_readahead: readahead error at page 110 @ nid 36
[   44.639482][  T473] usb 6-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00
[   44.648940][  T865] erofs: (device loop1): z_erofs_readahead: readahead error at page 109 @ nid 36
[   44.658053][  T300] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   44.676507][  T300] usb 5-1: config 0 descriptor??
[   44.681700][  T473] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   44.690584][  T473] usb 6-1: config 0 descriptor??
[   44.696110][  T865] erofs: (device loop1): z_erofs_readahead: readahead error at page 108 @ nid 36
[   44.712215][  T865] erofs: (device loop1): z_erofs_readahead: readahead error at page 107 @ nid 36
[   44.723997][  T865] erofs: (device loop1): z_erofs_readahead: readahead error at page 106 @ nid 36
[   44.766765][  T906] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[   44.890608][   T24] kauditd_printk_skb: 1190 callbacks suppressed
[   44.890617][   T24] audit: type=1326 audit(1789612280.969:1833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=864 comm="syz.1.156" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1c9772498e code=0x7ffc0000
[   44.921732][   T24] audit: type=1326 audit(1789612280.969:1834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=864 comm="syz.1.156" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1c9772498e code=0x7ffc0000
[   44.947038][   T24] audit: type=1326 audit(1789612280.969:1835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=864 comm="syz.1.156" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1c9772498e code=0x7ffc0000
[   44.971941][   T24] audit: type=1326 audit(1789612280.969:1836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=864 comm="syz.1.156" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1c9772498e code=0x7ffc0000
[   44.997060][   T24] audit: type=1326 audit(1789612280.969:1837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=864 comm="syz.1.156" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1c9772498e code=0x7ffc0000
[   45.021879][   T24] audit: type=1326 audit(1789612280.969:1838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=864 comm="syz.1.156" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1c9772498e code=0x7ffc0000
[   45.046716][   T24] audit: type=1326 audit(1789612280.969:1839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=864 comm="syz.1.156" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1c9772498e code=0x7ffc0000
[   45.071476][   T24] audit: type=1326 audit(1789612280.969:1840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=864 comm="syz.1.156" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1c9772498e code=0x7ffc0000
[   45.096168][   T24] audit: type=1326 audit(1789612280.969:1841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=864 comm="syz.1.156" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1c9772498e code=0x7ffc0000
[   45.120854][   T24] audit: type=1326 audit(1789612280.979:1842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=864 comm="syz.1.156" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1c9772498e code=0x7ffc0000
[   45.147154][  T886] netlink: 8 bytes leftover after parsing attributes in process `syz.5.165'.
[   45.345217][  T473] usbhid 6-1:0.0: can't add hid device: -71
[   45.352089][  T473] usbhid: probe of 6-1:0.0 failed with error -71
[   45.369482][  T473] usb 6-1: USB disconnect, device number 7
[   45.521735][  T916] exfat: Unknown parameter 'zero_size_dir'
[   45.903550][  T916] Alternate GPT is invalid, using primary GPT.
[   45.910315][  T916]  loop4: p2 p3 p7
[   46.150131][  T663] usb 2-1: USB disconnect, device number 6
[   46.360839][  T940] erofs: (device loop3): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 125300)
[   47.410356][  T300] usbhid 5-1:0.0: can't add hid device: -71
[   47.417834][  T300] usbhid: probe of 5-1:0.0 failed with error -71
[   47.427357][  T300] usb 5-1: USB disconnect, device number 5
[   48.477430][  T300] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[   48.544948][  T984] EXT4-fs (loop5): mounted filesystem without journal. Opts: minixdf,errors=continue,noblock_validity,commit=0x0000000000000005,noinit_itable,max_batch_time=0x0000000000000004,abort,auto_da_alloc,lazytime,noauto_da_alloc,debug_want_extra_isize=0x0000000000000008,,errors=continue
[   48.765259][  T300] usb 5-1: Using ep0 maxpacket: 16
[   48.894705][  T990] EXT4-fs (loop5): shut down requested (2)
[   48.950809][  T300] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   48.962547][  T300] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   48.982320][  T300] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   48.994769][  T300] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[   49.011561][  T300] usb 5-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00
[   49.020709][  T300] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   49.029454][  T300] usb 5-1: config 0 descriptor??
[   49.333759][  T995] bridge0: port 1(bridge_slave_0) entered disabled state
[   49.341738][  T995] bridge0: port 2(bridge_slave_1) entered disabled state
[   49.357069][  T995] netlink: 'syz.1.196': attribute type 16 has an invalid length.
[   49.364998][  T995] netlink: 'syz.1.196': attribute type 17 has an invalid length.
[   49.378060][  T995] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.385175][  T995] bridge0: port 1(bridge_slave_0) entered forwarding state
[   49.392976][  T995] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.400007][  T995] bridge0: port 2(bridge_slave_1) entered forwarding state
[   49.413645][  T995] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0.257: link becomes ready
[   49.422238][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[   49.431144][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   49.439410][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[   49.449569][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   49.457872][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   49.466040][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   49.474440][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   49.483537][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   49.494474][  T975] netlink: 8 bytes leftover after parsing attributes in process `syz.4.190'.
[   49.660383][  T300] usbhid 5-1:0.0: can't add hid device: -71
[   49.666514][  T300] usbhid: probe of 5-1:0.0 failed with error -71
[   49.675024][  T300] usb 5-1: USB disconnect, device number 6
[   49.850417][   T15] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[   50.106850][ T1004] input input11: cannot allocate more than FF_MAX_EFFECTS effects
[   50.261483][   T15] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   50.271459][   T15] usb 2-1: New USB device found, idVendor=1ae7, idProduct=9001, bcdDevice= 0.00
[   50.280556][   T15] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   50.289230][   T15] usb 2-1: config 0 descriptor??
[   51.360343][   T15] usbhid 2-1:0.0: can't add hid device: -71
[   51.366403][   T15] usbhid: probe of 2-1:0.0 failed with error -71
[   51.379104][   T15] usb 2-1: USB disconnect, device number 7
[   51.587218][ T1024] input input12: cannot allocate more than FF_MAX_EFFECTS effects
[   51.972832][   T24] kauditd_printk_skb: 495 callbacks suppressed
[   51.972880][   T24] audit: type=1326 audit(1789612287.889:2338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1025 comm="syz.3.207" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3b4b7159 code=0x7ffc0000
[   52.074718][   T24] audit: type=1326 audit(1789612287.889:2339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1025 comm="syz.3.207" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3b4b7159 code=0x7ffc0000
[   52.099954][   T24] audit: type=1326 audit(1789612287.899:2340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1025 comm="syz.3.207" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efd3b4b7159 code=0x7ffc0000
[   52.125065][   T24] audit: type=1326 audit(1789612287.899:2341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1025 comm="syz.3.207" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3b4b7159 code=0x7ffc0000
[   52.150583][   T24] audit: type=1326 audit(1789612287.899:2342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1025 comm="syz.3.207" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3b4b7159 code=0x7ffc0000
[   52.175621][  T702] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[   52.183221][   T24] audit: type=1326 audit(1789612287.909:2343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1025 comm="syz.3.207" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7efd3b4b7159 code=0x7ffc0000
[   52.208459][   T24] audit: type=1326 audit(1789612287.909:2344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1025 comm="syz.3.207" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3b4b7159 code=0x7ffc0000
[   52.250884][   T24] audit: type=1326 audit(1789612287.909:2345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1025 comm="syz.3.207" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3b4b7159 code=0x7ffc0000
[   52.281969][   T24] audit: type=1326 audit(1789612287.909:2346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1025 comm="syz.3.207" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efd3b4b7159 code=0x7ffc0000
[   52.306979][   T24] audit: type=1326 audit(1789612287.949:2347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1025 comm="syz.3.207" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3b4b7159 code=0x7ffc0000
[   52.361322][ T1044] input input13: cannot allocate more than FF_MAX_EFFECTS effects
[   52.500314][    T5] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[   52.550400][  T663] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   52.570410][  T702] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   52.581931][  T702] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   52.670389][  T702] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[   52.681173][  T702] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[   52.689926][  T702] usb 2-1: Manufacturer: syz
[   52.699084][  T702] usb 2-1: config 0 descriptor??
[   52.790314][  T663] usb 1-1: Using ep0 maxpacket: 16
[   52.910376][  T663] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   52.920760][  T663] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   52.931897][  T663] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   52.943042][  T663] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[   52.956093][  T663] usb 1-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00
[   52.960383][    T5] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[   52.967890][  T663] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   52.976095][    T5] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[   52.993023][  T663] usb 1-1: config 0 descriptor??
[   53.210380][    T5] usb 6-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00
[   53.219494][    T5] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   53.227624][    T5] usb 6-1: Product: syz
[   53.231823][    T5] usb 6-1: Manufacturer: syz
[   53.236442][    T5] usb 6-1: SerialNumber: syz
[   53.270355][  T702] usbhid 2-1:0.0: can't add hid device: -71
[   53.276356][  T702] usbhid: probe of 2-1:0.0 failed with error -71
[   53.291315][  T702] usb 2-1: USB disconnect, device number 8
[   53.450681][ T1042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.213'.
[   53.493790][ T1037] udc-core: couldn't find an available UDC or it's busy
[   53.514686][ T1037] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   53.561869][    T5] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900
[   53.670373][  T663] usbhid 1-1:0.0: can't add hid device: -71
[   53.680882][  T663] usbhid: probe of 1-1:0.0 failed with error -71
[   53.692160][  T663] usb 1-1: USB disconnect, device number 5
[   53.794588][ T1037] udc-core: couldn't find an available UDC or it's busy
[   53.810347][ T1060] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d)
[   53.842055][ T1037] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   53.881563][    T5] usb 6-1: USB disconnect, device number 8
[   53.888564][    T5] usblp0: removed
[   54.210337][   T15] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[   54.410095][ T1076] input input14: cannot allocate more than FF_MAX_EFFECTS effects
[   54.410327][  T663] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   54.460555][   T15] usb 2-1: Using ep0 maxpacket: 32
[   54.660381][   T15] usb 2-1: config 8 has an invalid interface number: 54 but max is 3
[   54.668492][   T15] usb 2-1: config 8 has an invalid interface number: 196 but max is 3
[   54.676704][   T15] usb 2-1: config 8 has an invalid interface number: 129 but max is 3
[   54.684868][   T15] usb 2-1: config 8 has an invalid interface number: 188 but max is 3
[   54.693038][   T15] usb 2-1: config 8 has no interface number 0
[   54.699233][   T15] usb 2-1: config 8 has no interface number 1
[   54.705336][   T15] usb 2-1: config 8 has no interface number 2
[   54.711432][    T5] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[   54.718893][   T15] usb 2-1: config 8 has no interface number 3
[   54.725137][   T15] usb 2-1: config 8 interface 54 altsetting 4 bulk endpoint 0x8 has invalid maxpacket 32
[   54.735018][   T15] usb 2-1: config 8 interface 54 altsetting 4 endpoint 0xE has invalid maxpacket 1024, setting to 64
[   54.745896][   T15] usb 2-1: config 8 interface 54 altsetting 4 endpoint 0xC has invalid maxpacket 1023, setting to 64
[   54.757030][   T15] usb 2-1: config 8 interface 54 altsetting 4 endpoint 0x7 has invalid maxpacket 1024, setting to 64
[   54.767899][   T15] usb 2-1: config 8 interface 54 altsetting 4 has a duplicate endpoint with address 0x8, skipping
[   54.778505][   T15] usb 2-1: config 8 interface 54 altsetting 4 has an invalid endpoint with address 0x0, skipping
[   54.789039][   T15] usb 2-1: config 8 interface 196 altsetting 7 has a duplicate endpoint with address 0xE, skipping
[   54.790342][  T663] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   54.799778][   T15] usb 2-1: config 8 interface 196 altsetting 7 has an invalid endpoint with address 0x80, skipping
[   54.799798][   T15] usb 2-1: config 8 interface 196 altsetting 7 has an invalid endpoint with address 0x80, skipping
[   54.809608][  T473] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   54.820284][   T15] usb 2-1: config 8 interface 196 altsetting 7 has a duplicate endpoint with address 0x3, skipping
[   54.820303][   T15] usb 2-1: config 8 interface 196 altsetting 7 has an invalid endpoint with address 0x0, skipping
[   54.849168][  T663] usb 1-1: New USB device found, idVendor=1ae7, idProduct=9001, bcdDevice= 0.00
[   54.860080][   T15] usb 2-1: config 8 interface 196 altsetting 7 has a duplicate endpoint with address 0x3, skipping
[   54.879532][  T663] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   54.887705][   T15] usb 2-1: config 8 interface 196 altsetting 7 has a duplicate endpoint with address 0x1, skipping
[   54.887921][  T663] usb 1-1: config 0 descriptor??
[   54.898495][   T15] usb 2-1: config 8 interface 196 altsetting 7 has a duplicate endpoint with address 0x5, skipping
[   54.914129][   T15] usb 2-1: config 8 interface 196 altsetting 7 endpoint 0xA has an invalid bInterval 117, changing to 10
[   54.925437][   T15] usb 2-1: config 8 interface 196 altsetting 7 has a duplicate endpoint with address 0x9, skipping
[   54.936146][   T15] usb 2-1: config 8 interface 129 altsetting 4 has an invalid endpoint with address 0x80, skipping
[   54.946874][   T15] usb 2-1: config 8 interface 129 altsetting 4 has a duplicate endpoint with address 0xA, skipping
[   54.957554][   T15] usb 2-1: config 8 interface 129 altsetting 4 has an invalid endpoint with address 0x80, skipping
[   54.968592][   T15] usb 2-1: config 8 interface 129 altsetting 4 has an invalid endpoint with address 0x0, skipping
[   54.979217][    T5] usb 6-1: Using ep0 maxpacket: 16
[   54.984409][   T15] usb 2-1: config 8 interface 129 altsetting 4 endpoint 0x2 has invalid maxpacket 512, setting to 64
[   54.995293][   T15] usb 2-1: config 8 interface 129 altsetting 4 has a duplicate endpoint with address 0x2, skipping
[   55.006042][   T15] usb 2-1: config 8 interface 129 altsetting 4 has a duplicate endpoint with address 0xE, skipping
[   55.016725][   T15] usb 2-1: config 8 interface 129 altsetting 4 has a duplicate endpoint with address 0x1, skipping
[   55.027492][   T15] usb 2-1: config 8 interface 129 altsetting 4 has a duplicate endpoint with address 0x8, skipping
[   55.038165][   T15] usb 2-1: config 8 interface 129 altsetting 4 has an invalid endpoint with address 0x70, skipping
[   55.048876][   T15] usb 2-1: config 8 interface 129 altsetting 4 endpoint 0xF has invalid maxpacket 1023, setting to 64
[   55.059827][   T15] usb 2-1: config 8 interface 129 altsetting 4 has a duplicate endpoint with address 0x3, skipping
[   55.070630][   T15] usb 2-1: config 8 interface 129 altsetting 4 has 12 endpoint descriptors, different from the interface descriptor's value: 11
[   55.083838][   T15] usb 2-1: config 8 interface 188 altsetting 4 has a duplicate endpoint with address 0xD, skipping
[   55.094549][   T15] usb 2-1: config 8 interface 188 altsetting 4 has a duplicate endpoint with address 0x3, skipping
[   55.105238][   T15] usb 2-1: config 8 interface 188 altsetting 4 has a duplicate endpoint with address 0x8, skipping
[   55.115976][    T5] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   55.126056][   T15] usb 2-1: config 8 interface 188 altsetting 4 has an invalid endpoint with address 0x80, skipping
[   55.131136][  T473] usb 4-1: Using ep0 maxpacket: 8
[   55.136751][    T5] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[   55.150739][   T15] usb 2-1: config 8 interface 188 altsetting 4 has an invalid endpoint with address 0x0, skipping
[   55.161427][    T5] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   55.170482][   T15] usb 2-1: config 8 interface 188 altsetting 4 has a duplicate endpoint with address 0x4, skipping
[   55.181184][    T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   55.189542][   T15] usb 2-1: config 8 interface 188 altsetting 4 has a duplicate endpoint with address 0xC, skipping
[   55.203073][    T5] usb 6-1: config 0 descriptor??
[   55.208054][   T15] usb 2-1: config 8 interface 54 has no altsetting 0
[   55.215955][   T15] usb 2-1: config 8 interface 196 has no altsetting 0
[   55.222815][   T15] usb 2-1: config 8 interface 129 has no altsetting 0
[   55.229590][   T15] usb 2-1: config 8 interface 188 has no altsetting 0
[   55.260440][  T473] usb 4-1: config 6 has an invalid interface number: 35 but max is 0
[   55.268621][  T473] usb 4-1: config 6 has no interface number 0
[   55.274760][  T473] usb 4-1: config 6 interface 35 has no altsetting 0
[   55.300432][  T663] usbhid 1-1:0.0: can't add hid device: -71
[   55.306436][  T663] usbhid: probe of 1-1:0.0 failed with error -71
[   55.316719][  T663] usb 1-1: USB disconnect, device number 6
[   55.390496][   T15] usb 2-1: Dual-Role OTG device on HNP port
[   55.410393][   T15] usb 2-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice=85.20
[   55.419498][   T15] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   55.427524][   T15] usb 2-1: Product: ῀嫊ৠ뎆鐒ꥰ饺ᶜ츴ﳃ飸㨂葉嶺鞺粆ᚺ퓽ᑡ椎᪍Ṥ౔㶂속㌪淰㖣黷裲玾쒅ꁭ撤膊箙틘虔਄쮬鄣ￂ劬篌樓毃셈⼤㯺ằ좫→慺䜢ꑕ龶⬶١锘萰伂﷪জᗃ郓ꦔ
[   55.451036][   T15] usb 2-1: Manufacturer: ㋷辍㐧杳蓀썖ا꾒嵚臡ퟳஒ䃈멤䩛幽鍵䏃ꤐ獦镂ꄂⴗ앚婭悇뮪沊柊殂羁嫠摰숗墓嘒ᘕؙ࿽蓵ꎉ嶸ኔᝑ安䫇끗ꛥ㊧㏈⺚콌﷦ᔒ뮁춵ﶗ鉍ᘘ驎ﶙ⭊Ы籸龂㬹ᝇ騠㡎셙刬꾟듖쌛쬹䈹㌻聨莌㽍უ⅄橗磴陔櫏㿹䍐Ԛ輘갟꽁ᮇ㊦ꠁ槒
[   55.470395][  T473] usb 4-1: New USB device found, idVendor=0403, idProduct=e0f7, bcdDevice= 6.77
[   55.483405][   T15] usb 2-1: SerialNumber: syz
[   55.495873][ T1086] erofs: (device loop5): mounted with root inode @ nid 36.
[   55.505927][ T1086] erofs: (device loop5): z_erofs_readahead: readahead error at page 143 @ nid 36
[   55.510406][ T1065] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   55.515177][ T1086] erofs: (device loop5): z_erofs_readahead: readahead error at page 142 @ nid 36
[   55.522527][ T1065] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   55.531346][  T473] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   55.538623][ T1086] erofs: (device loop5): z_erofs_readahead: readahead error at page 141 @ nid 36
[   55.546427][  T473] usb 4-1: Product: syz
[   55.555424][ T1086] erofs: (device loop5): z_erofs_readahead: readahead error at page 140 @ nid 36
[   55.568652][ T1086] erofs: (device loop5): z_erofs_readahead: readahead error at page 139 @ nid 36
[   55.568751][  T473] usb 4-1: Manufacturer: syz
[   55.577932][ T1086] erofs: (device loop5): z_erofs_readahead: readahead error at page 111 @ nid 36
[   55.586367][  T473] usb 4-1: SerialNumber: syz
[   55.591738][ T1086] erofs: (device loop5): z_erofs_readahead: readahead error at page 110 @ nid 36
[   55.605530][ T1086] erofs: (device loop5): z_erofs_readahead: readahead error at page 109 @ nid 36
[   55.614794][ T1086] erofs: (device loop5): z_erofs_readahead: readahead error at page 108 @ nid 36
[   55.623939][ T1086] erofs: (device loop5): z_erofs_readahead: readahead error at page 107 @ nid 36
[   55.633064][ T1086] erofs: (device loop5): z_erofs_readahead: readahead error at page 106 @ nid 36
[   55.642338][ T1086] handle_bad_sector: 24 callbacks suppressed
[   55.642347][ T1086] attempt to access beyond end of device
[   55.642347][ T1086] loop5: rw=524288, want=13478624064, limit=16
[   55.659980][ T1086] attempt to access beyond end of device
[   55.659980][ T1086] loop5: rw=524288, want=13478624072, limit=16
[   55.671703][ T1086] attempt to access beyond end of device
[   55.671703][ T1086] loop5: rw=524288, want=14550774184, limit=16
[   55.683527][ T1086] attempt to access beyond end of device
[   55.683527][ T1086] loop5: rw=524288, want=14550774192, limit=16
[   55.696162][ T1086] attempt to access beyond end of device
[   55.696162][ T1086] loop5: rw=524288, want=13716630408, limit=16
[   55.707875][ T1086] attempt to access beyond end of device
[   55.707875][ T1086] loop5: rw=524288, want=13716630416, limit=16
[   55.719559][ T1086] attempt to access beyond end of device
[   55.719559][ T1086] loop5: rw=524288, want=790416, limit=16
[   55.730810][ T1086] attempt to access beyond end of device
[   55.730810][ T1086] loop5: rw=524288, want=790424, limit=16
[   55.742053][ T1086] attempt to access beyond end of device
[   55.742053][ T1086] loop5: rw=524288, want=104, limit=16
[   55.753071][ T1086] attempt to access beyond end of device
[   55.753071][ T1086] loop5: rw=524288, want=112, limit=16
[   55.772475][  T663] usb 6-1: USB disconnect, device number 9
[   55.840165][ T1095] EXT4-fs (loop0): bad s_min_extra_isize: 544
[   55.932052][  T473] ftdi_sio 4-1:6.35: FTDI USB Serial Device converter detected
[   56.053373][  T473] usb 4-1: Detected FT232RL
[   56.515730][  T473] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[   56.572396][  T473] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[   56.620754][  T473] ftdi_sio 4-1:6.35: GPIO initialisation failed: -71
[   56.636909][  T473] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0
[   56.656508][  T473] usb 4-1: USB disconnect, device number 4
[   56.663295][  T473] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[   56.672981][  T473] ftdi_sio 4-1:6.35: device disconnected
[   56.710709][   T15] usbhid 2-1:8.188: couldn't find an input interrupt endpoint
[   56.727801][   T15] usb 2-1: USB disconnect, device number 9
[   56.771934][ T1112] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   56.785468][ T1112] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   56.796285][ T1112] EXT4-fs (loop0): 1 truncate cleaned up
[   56.797493][ T1119] input input15: cannot allocate more than FF_MAX_EFFECTS effects
[   56.802106][ T1112] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsddf,init_itable,nolazytime,noblock_validity,,errors=continue
[   56.845869][ T1115] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[   58.110384][  T733] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   58.189307][ T1156] input input16: cannot allocate more than FF_MAX_EFFECTS effects
[   58.283127][ T1168] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[   58.388895][ T1176] exFAT-fs (loop1): error, exfat_alloc_cluster: invalid used clusters(t:15,u:4294930443)
[   58.388895][ T1176] 
[   58.405538][ T1176] exFAT-fs (loop1): Filesystem has been set read-only
[   58.412666][ T1176] exFAT-fs (loop1): error, failed to bmap (inode : ffff88811a76b670 iblock : 0, err : -5)
[   58.530422][  T473] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[   58.900660][  T473] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   58.926621][  T473] usb 5-1: New USB device found, idVendor=1ae7, idProduct=9001, bcdDevice= 0.00
[   58.973678][  T473] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   59.038500][  T473] usb 5-1: config 0 descriptor??
[   59.440356][  T733] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   59.450166][  T733] usb 1-1: New USB device found, idVendor=1ae7, idProduct=9001, bcdDevice= 0.00
[   59.459281][  T733] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   59.475660][  T733] usb 1-1: config 0 descriptor??
[   59.520372][  T473] usbhid 5-1:0.0: can't add hid device: -71
[   59.526429][  T473] usbhid: probe of 5-1:0.0 failed with error -71
[   59.536870][  T473] usb 5-1: USB disconnect, device number 7
[   59.860341][  T733] usbhid 1-1:0.0: can't add hid device: -71
[   59.866442][  T733] usbhid: probe of 1-1:0.0 failed with error -71
[   59.873849][  T733] usb 1-1: USB disconnect, device number 7
[   60.045523][ T1185] FAULT_INJECTION: forcing a failure.
[   60.045523][ T1185] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[   60.058802][ T1185] CPU: 1 PID: 1185 Comm: syz.3.258 Not tainted syzkaller #0
[   60.066088][ T1185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   60.076146][ T1185] Call Trace:
[   60.079434][ T1185]  __dump_stack+0x21/0x24
[   60.083765][ T1185]  dump_stack_lvl+0x1a7/0x208
[   60.088443][ T1185]  ? show_regs_print_info+0x18/0x18
[   60.093641][ T1185]  dump_stack+0x15/0x1c
[   60.097795][ T1185]  should_fail+0x3ab/0x500
[   60.102209][ T1185]  should_fail_alloc_page+0x4f/0x60
[   60.107415][ T1185]  __alloc_pages_nodemask+0x11a/0x640
[   60.112785][ T1185]  ? gfp_pfmemalloc_allowed+0x130/0x130
[   60.118332][ T1185]  ? ext4_map_blocks+0x82b/0x1b10
[   60.123354][ T1185]  push_pipe+0x36b/0x630
[   60.127594][ T1185]  pipe_zero+0xa7/0x520
[   60.131745][ T1185]  ? ext4_set_iomap+0x58e/0x800
[   60.136593][ T1185]  iov_iter_zero+0x338/0x900
[   60.141185][ T1185]  ? __iomap_dio_rw+0x205/0x1070
[   60.146121][ T1185]  ? __kasan_kmalloc+0xe6/0x100
[   60.150965][ T1185]  ? ext4_alloc_da_blocks+0x190/0x190
[   60.156334][ T1185]  ? iomap_dio_rw+0x35/0x80
[   60.160824][ T1185]  iomap_dio_actor+0x2ea/0x5f0
[   60.165568][ T1185]  iomap_apply+0x2b9/0x720
[   60.169962][ T1185]  ? trace_raw_output_iomap_iter+0x250/0x250
[   60.175923][ T1185]  ? __kasan_check_read+0x11/0x20
[   60.180925][ T1185]  __iomap_dio_rw+0x73b/0x1070
[   60.185665][ T1185]  ? __iomap_dio_rw+0x1070/0x1070
[   60.190667][ T1185]  ? stack_trace_snprint+0xe0/0xe0
[   60.195754][ T1185]  ? iomap_dio_complete+0x6b0/0x6b0
[   60.200925][ T1185]  ? splice_direct_to_actor+0x97d/0xb20
[   60.206450][ T1185]  iomap_dio_rw+0x35/0x80
[   60.210760][ T1185]  ext4_file_read_iter+0x40e/0x530
[   60.215845][ T1185]  generic_file_splice_read+0x3ea/0x5f0
[   60.221368][ T1185]  ? splice_shrink_spd+0xb0/0xb0
[   60.226282][ T1185]  ? fsnotify_perm+0x2f0/0x4a0
[   60.231288][ T1185]  ? security_file_permission+0x83/0xa0
[   60.236827][ T1185]  ? rw_verify_area+0x1c0/0x360
[   60.241655][ T1185]  splice_direct_to_actor+0x40a/0xb20
[   60.247000][ T1185]  ? do_splice_direct+0x2d0/0x2d0
[   60.252002][ T1185]  ? pipe_to_sendpage+0x320/0x320
[   60.257001][ T1185]  ? rw_verify_area+0x1c0/0x360
[   60.261840][ T1185]  do_splice_direct+0x1c2/0x2d0
[   60.266673][ T1185]  ? do_splice_to+0x180/0x180
[   60.271326][ T1185]  ? fsnotify_perm+0x66/0x4a0
[   60.275986][ T1185]  ? security_file_permission+0x83/0xa0
[   60.281508][ T1185]  do_sendfile+0x8df/0x1040
[   60.285985][ T1185]  ? __kasan_check_write+0x14/0x20
[   60.291072][ T1185]  ? do_preadv+0x390/0x390
[   60.295464][ T1185]  ? fput_many+0x15a/0x1a0
[   60.299853][ T1185]  ? ksys_write+0x1fa/0x260
[   60.304331][ T1185]  __x64_sys_sendfile64+0x199/0x1f0
[   60.309507][ T1185]  ? __ia32_sys_sendfile+0x190/0x190
[   60.314770][ T1185]  ? debug_smp_processor_id+0x17/0x20
[   60.320116][ T1185]  ? fpregs_assert_state_consistent+0xb1/0xe0
[   60.326157][ T1185]  ? exit_to_user_mode_prepare+0x2f/0xa0
[   60.331764][ T1185]  do_syscall_64+0x31/0x40
[   60.336156][ T1185]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   60.342038][ T1185] RIP: 0033:0x7efd3b4b7159
[   60.346444][ T1185] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   60.366025][ T1185] RSP: 002b:00007efd39f10028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[   60.374416][ T1185] RAX: ffffffffffffffda RBX: 00007efd3b73efa0 RCX: 00007efd3b4b7159
[   60.382364][ T1185] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004
[   60.390313][ T1185] RBP: 00007efd39f10090 R08: 0000000000000000 R09: 0000000000000000
[   60.398262][ T1185] R10: 0000040000000800 R11: 0000000000000246 R12: 0000000000000001
[   60.406211][ T1185] R13: 00007efd3b73f038 R14: 00007efd3b73efa0 R15: 00007ffeb60eb8c8
[   60.552407][ T1195] input input17: cannot allocate more than FF_MAX_EFFECTS effects
[   60.729444][   T24] kauditd_printk_skb: 170 callbacks suppressed
[   60.729455][   T24] audit: type=1400 audit(1789612296.799:2518): avc:  denied  { map } for  pid=1210 comm="syz.0.267" path="/dev/ashmem" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   61.164390][ T1206] F2FS-fs (loop3): invalid crc value
[   61.194015][   T24] audit: type=1326 audit(1789612297.269:2519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1217 comm="syz.0.269" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58ba446159 code=0x7ffc0000
[   61.231855][ T1206] F2FS-fs (loop3): Found nat_bits in checkpoint
[   61.267056][   T24] audit: type=1326 audit(1789612297.299:2520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1217 comm="syz.0.269" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f58ba446159 code=0x7ffc0000
[   61.314832][   T24] audit: type=1326 audit(1789612297.299:2521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1217 comm="syz.0.269" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58ba446159 code=0x7ffc0000
[   61.341822][   T24] audit: type=1326 audit(1789612297.299:2522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1217 comm="syz.0.269" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7f58ba446159 code=0x7ffc0000
[   61.367013][   T24] audit: type=1326 audit(1789612297.299:2523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1217 comm="syz.0.269" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58ba446159 code=0x7ffc0000
[   61.403420][ T1206] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   61.429591][   T24] audit: type=1326 audit(1789612297.299:2524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1217 comm="syz.0.269" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f58ba446159 code=0x7ffc0000
[   61.455933][   T24] audit: type=1326 audit(1789612297.299:2525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1217 comm="syz.0.269" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58ba446159 code=0x7ffc0000
[   61.487889][   T24] audit: type=1326 audit(1789612297.299:2526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1217 comm="syz.0.269" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f58ba446159 code=0x7ffc0000
[   61.513451][   T24] audit: type=1326 audit(1789612297.299:2527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1217 comm="syz.0.269" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58ba446159 code=0x7ffc0000
[   61.580368][  T485] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[   61.680309][   T15] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[   61.762447][ T1232] overlayfs: "xino" feature enabled using 2 upper inode bits.
[   61.897149][ T1242] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[   61.970444][  T485] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   61.980618][  T485] usb 1-1: New USB device found, idVendor=1ae7, idProduct=9001, bcdDevice= 0.00
[   61.989702][  T485] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   62.006135][  T485] usb 1-1: config 0 descriptor??
[   62.011399][ T1246] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   62.023492][ T1246] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[   62.033502][ T1246] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[   62.051289][   T15] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   62.070760][   T15] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   62.180796][   T15] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[   62.190012][   T15] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[   62.198087][   T15] usb 6-1: Manufacturer: syz
[   62.210036][   T15] usb 6-1: config 0 descriptor??
[   62.390365][  T485] usbhid 1-1:0.0: can't add hid device: -71
[   62.396429][  T485] usbhid: probe of 1-1:0.0 failed with error -71
[   62.404315][  T485] usb 1-1: USB disconnect, device number 8
[   62.760351][   T15] usbhid 6-1:0.0: can't add hid device: -71
[   62.766516][   T15] usbhid: probe of 6-1:0.0 failed with error -71
[   62.779691][   T15] usb 6-1: USB disconnect, device number 10
[   62.887135][ T1253] EXT4-fs (loop0): mounted filesystem without journal. Opts: minixdf,errors=continue,noblock_validity,commit=0x0000000000000005,noinit_itable,max_batch_time=0x0000000000000004,abort,auto_da_alloc,lazytime,noauto_da_alloc,debug_want_extra_isize=0x0000000000000008,,errors=continue
[   63.032343][ T1257] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d)
[   63.086120][ T1257] exFAT-fs (loop3): hint_cluster is invalid (1)
[   63.093276][ T1257] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000)
[   63.103766][ T1261] EXT4-fs (loop4): mounted filesystem without journal. Opts: minixdf,errors=continue,noblock_validity,commit=0x0000000000000005,noinit_itable,max_batch_time=0x0000000000000004,abort,auto_da_alloc,lazytime,noauto_da_alloc,debug_want_extra_isize=0x0000000000000008,,errors=continue
[   63.120385][ T1257] exFAT-fs (loop3): Filesystem has been set read-only
[   63.144134][ T1257] exFAT-fs (loop3): error, failed to bmap (inode : ffff88811a784d30 iblock : 9, err : -5)
[   63.214883][ T1257] handle_bad_sector: 7 callbacks suppressed
[   63.214896][ T1257] attempt to access beyond end of device
[   63.214896][ T1257] loop3: rw=2049, want=34359738496, limit=256
[   63.277714][ T1266] attempt to access beyond end of device
[   63.277714][ T1266] loop3: rw=2049, want=34359738496, limit=256
[   63.289741][ T1266] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000)
[   63.298581][ T1266] exFAT-fs (loop3): error, failed to bmap (inode : ffff88811a784d30 iblock : 9, err : -5)
[   63.411401][ T1274] overlayfs: "xino" feature enabled using 2 upper inode bits.
[   63.553113][ T1277] erofs: (device loop5): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 125300)
[   63.956239][ T1300] Bluetooth: hci0: Frame reassembly failed (-84)
[   63.962788][ T1300] Bluetooth: hci0: Frame reassembly failed (-84)
[   63.969170][    T9] Bluetooth: hci0: Frame reassembly failed (-84)
[   63.976454][ T1300] Bluetooth: hci0: Frame reassembly failed (-84)
[   64.091315][  T300] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   64.399238][ T1309] overlayfs: "xino" feature enabled using 2 upper inode bits.
[   64.470359][  T300] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   64.480307][  T300] usb 4-1: New USB device found, idVendor=1ae7, idProduct=9001, bcdDevice= 0.00
[   64.489406][  T300] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   64.499014][  T300] usb 4-1: config 0 descriptor??
[   64.700377][  T663] usb 6-1: new full-speed USB device number 11 using dummy_hcd
[   64.890344][  T300] usbhid 4-1:0.0: can't add hid device: -71
[   64.896502][  T300] usbhid: probe of 4-1:0.0 failed with error -71
[   64.904059][  T300] usb 4-1: USB disconnect, device number 5
[   65.060388][  T663] usb 6-1: not running at top speed; connect to a high speed hub
[   65.140339][  T663] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   65.290398][  T663] usb 6-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad
[   65.305697][  T663] usb 6-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0
[   65.314339][  T663] usb 6-1: Product: syz
[   65.318595][  T663] usb 6-1: Manufacturer: syz
[   65.380953][  T663] uvcvideo: Found UVC 1.00 device syz (225a:e1d4)
[   65.620332][  T663] uvcvideo: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround.
[   65.640348][  T663] uvcvideo: Failed to query (129) UVC probe control : -71 (exp. 26).
[   65.648537][  T663] uvcvideo: Failed to initialize the device (-5).
[   65.661097][  T663] usb 6-1: USB disconnect, device number 11
[   65.902479][ T1317] input input18: cannot allocate more than FF_MAX_EFFECTS effects
[   66.000320][  T663] Bluetooth: hci0: command 0x1003 tx timeout
[   66.006452][ T1301] Bluetooth: hci0: sending frame failed (-49)
[   66.062238][   T24] kauditd_printk_skb: 6 callbacks suppressed
[   66.062250][   T24] audit: type=1400 audit(1789612302.139:2534): avc:  denied  { read } for  pid=1325 comm="syz.0.303" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   66.062483][ T1326] FAULT_INJECTION: forcing a failure.
[   66.062483][ T1326] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   66.069414][   T24] audit: type=1400 audit(1789612302.139:2535): avc:  denied  { open } for  pid=1325 comm="syz.0.303" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   66.103864][ T1326] CPU: 0 PID: 1326 Comm: syz.0.303 Not tainted syzkaller #0
[   66.134483][ T1326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   66.144539][ T1326] Call Trace:
[   66.147834][ T1326]  __dump_stack+0x21/0x24
[   66.152161][ T1326]  dump_stack_lvl+0x1a7/0x208
[   66.156841][ T1326]  ? thaw_kernel_threads+0x220/0x220
[   66.162123][ T1326]  ? vsnprintf+0x189d/0x1990
[   66.166708][ T1326]  ? show_regs_print_info+0x18/0x18
[   66.171905][ T1326]  dump_stack+0x15/0x1c
[   66.176052][ T1326]  should_fail+0x3ab/0x500
[   66.180463][ T1326]  should_fail_usercopy+0x1a/0x20
[   66.185482][ T1326]  _copy_to_user+0x20/0x90
[   66.189896][ T1326]  simple_read_from_buffer+0xe9/0x160
[   66.195264][ T1326]  proc_fail_nth_read+0x1a6/0x220
[   66.200285][ T1326]  ? proc_fault_inject_write+0x310/0x310
[   66.205913][ T1326]  ? rw_verify_area+0x1c0/0x360
[   66.210757][ T1326]  ? proc_fault_inject_write+0x310/0x310
[   66.216384][ T1326]  vfs_read+0x209/0xa50
[   66.220532][ T1326]  ? kernel_read+0x70/0x70
[   66.224939][ T1326]  ? __kasan_check_write+0x14/0x20
[   66.230047][ T1326]  ? mutex_lock+0x92/0xf0
[   66.234368][ T1326]  ? mutex_trylock+0xb0/0xb0
[   66.238949][ T1326]  ? __fget_files+0x2e1/0x340
[   66.243619][ T1326]  ? __fdget_pos+0x2d2/0x380
[   66.248204][ T1326]  ? ksys_read+0x70/0x260
[   66.252694][ T1326]  ksys_read+0x14a/0x260
[   66.256935][ T1326]  ? vfs_write+0xd70/0xd70
[   66.261351][ T1326]  ? debug_smp_processor_id+0x17/0x20
[   66.266713][ T1326]  __x64_sys_read+0x7b/0x90
[   66.271200][ T1326]  do_syscall_64+0x31/0x40
[   66.275594][ T1326]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   66.281463][ T1326] RIP: 0033:0x7f58ba40698e
[   66.285858][ T1326] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   66.305438][ T1326] RSP: 002b:00007f58b8e9efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   66.313828][ T1326] RAX: ffffffffffffffda RBX: 00007f58b8e9f6c0 RCX: 00007f58ba40698e
[   66.321777][ T1326] RDX: 000000000000000f RSI: 00007f58b8e9f0a0 RDI: 0000000000000004
[   66.329732][ T1326] RBP: 00007f58b8e9f090 R08: 0000000000000000 R09: 0000000000000000
[   66.337681][ T1326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   66.345626][ T1326] R13: 00007f58ba6ce038 R14: 00007f58ba6cdfa0 R15: 00007fff14bfac08
[   66.463780][ T1331] erofs: (device loop0): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 125300)
[   66.640611][   T54] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[   66.920301][   T54] usb 6-1: Using ep0 maxpacket: 16
[   67.040487][   T54] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   67.050774][   T54] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[   67.059791][   T54] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   67.069170][   T54] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   67.080809][   T54] usb 6-1: config 0 descriptor??
[   67.251757][ T1339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.307'.
[   67.665689][   T24] audit: type=1326 audit(1789612303.419:2536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1334 comm="syz.3.306" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3b4b7159 code=0x7ffc0000
[   67.786893][   T24] audit: type=1326 audit(1789612303.419:2537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1334 comm="syz.3.306" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3b4b7159 code=0x7ffc0000
[   67.824072][ T1328] erofs: (device loop5): mounted with root inode @ nid 36.
[   67.840374][  T663] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[   67.855203][ T1328] erofs: (device loop5): z_erofs_readahead: readahead error at page 143 @ nid 36
[   67.870484][   T24] audit: type=1326 audit(1789612303.429:2538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1334 comm="syz.3.306" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efd3b4b7159 code=0x7ffc0000
[   67.900327][ T1328] erofs: (device loop5): z_erofs_readahead: readahead error at page 142 @ nid 36
[   67.919867][ T1328] erofs: (device loop5): z_erofs_readahead: readahead error at page 141 @ nid 36
[   67.941051][ T1328] erofs: (device loop5): z_erofs_readahead: readahead error at page 140 @ nid 36
[   67.960673][   T24] audit: type=1326 audit(1789612303.429:2539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1334 comm="syz.3.306" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3b4b7159 code=0x7ffc0000
[   67.987034][ T1328] erofs: (device loop5): z_erofs_readahead: readahead error at page 139 @ nid 36
[   68.007274][ T1328] erofs: (device loop5): z_erofs_readahead: readahead error at page 111 @ nid 36
[   68.016596][   T24] audit: type=1326 audit(1789612303.429:2540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1334 comm="syz.3.306" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3b4b7159 code=0x7ffc0000
[   68.039348][ T1328] erofs: (device loop5): z_erofs_readahead: readahead error at page 110 @ nid 36
[   68.043144][   T24] audit: type=1326 audit(1789612303.429:2541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1334 comm="syz.3.306" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7efd3b4b7159 code=0x7ffc0000
[   68.060659][ T1328] erofs: (device loop5): z_erofs_readahead: readahead error at page 109 @ nid 36
[   68.075405][   T24] audit: type=1326 audit(1789612303.429:2542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1334 comm="syz.3.306" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3b4b7159 code=0x7ffc0000
[   68.084601][  T300] Bluetooth: hci0: command 0x1001 tx timeout
[   68.109289][   T24] audit: type=1326 audit(1789612303.429:2543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1334 comm="syz.3.306" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3b4b7159 code=0x7ffc0000
[   68.140217][ T1328] erofs: (device loop5): z_erofs_readahead: readahead error at page 108 @ nid 36
[   68.150293][ T1301] Bluetooth: hci0: sending frame failed (-49)
[   68.156573][ T1328] erofs: (device loop5): z_erofs_readahead: readahead error at page 107 @ nid 36
[   68.166498][ T1328] erofs: (device loop5): z_erofs_readahead: readahead error at page 106 @ nid 36
[   68.176263][ T1328] attempt to access beyond end of device
[   68.176263][ T1328] loop5: rw=524288, want=13478624064, limit=16
[   68.189113][ T1328] attempt to access beyond end of device
[   68.189113][ T1328] loop5: rw=524288, want=13478624072, limit=16
[   68.201049][ T1328] attempt to access beyond end of device
[   68.201049][ T1328] loop5: rw=524288, want=14550774184, limit=16
[   68.213156][ T1328] attempt to access beyond end of device
[   68.213156][ T1328] loop5: rw=524288, want=14550774192, limit=16
[   68.225197][ T1328] attempt to access beyond end of device
[   68.225197][ T1328] loop5: rw=524288, want=13716630408, limit=16
[   68.237158][ T1328] attempt to access beyond end of device
[   68.237158][ T1328] loop5: rw=524288, want=13716630416, limit=16
[   68.250030][ T1328] attempt to access beyond end of device
[   68.250030][ T1328] loop5: rw=524288, want=790416, limit=16
[   68.261544][  T663] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 221, changing to 7
[   68.272779][ T1328] attempt to access beyond end of device
[   68.272779][ T1328] loop5: rw=524288, want=790424, limit=16
[   68.284287][ T1328] attempt to access beyond end of device
[   68.284287][ T1328] loop5: rw=524288, want=104, limit=16
[   68.295473][ T1328] attempt to access beyond end of device
[   68.295473][ T1328] loop5: rw=524288, want=112, limit=16
[   68.306696][ T1328] attempt to access beyond end of device
[   68.306696][ T1328] loop5: rw=524288, want=56, limit=16
[   68.317798][ T1328] attempt to access beyond end of device
[   68.317798][ T1328] loop5: rw=524288, want=40, limit=16
[   68.329010][ T1328] attempt to access beyond end of device
[   68.329010][ T1328] loop5: rw=524288, want=48, limit=16
[   68.340101][ T1328] attempt to access beyond end of device
[   68.340101][ T1328] loop5: rw=524288, want=13612835632, limit=16
[   68.351983][  T473] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   68.364346][  T300] usb 6-1: USB disconnect, device number 12
[   68.470392][  T663] usb 1-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40
[   68.479600][  T663] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   68.493683][ T1349] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[   68.500643][  T663] usb 1-1: Product: syz
[   68.509971][  T663] usb 1-1: Manufacturer: syz
[   68.514859][  T663] usb 1-1: SerialNumber: syz
[   68.581363][ T1351] exFAT-fs (loop5): error, exfat_alloc_cluster: invalid used clusters(t:15,u:4294930446)
[   68.581363][ T1351] 
[   68.600318][ T1351] exFAT-fs (loop5): Filesystem has been set read-only
[   68.607142][ T1351] exFAT-fs (loop5): error, failed to bmap (inode : ffff88811a76b250 iblock : 0, err : -5)
[   68.740379][  T473] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   68.750151][  T473] usb 4-1: New USB device found, idVendor=1ae7, idProduct=9001, bcdDevice= 0.00
[   68.780359][  T473] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   68.801130][  T473] usb 4-1: config 0 descriptor??
[   68.880431][  T663] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found
[   68.903903][  T663] usb 1-1: USB disconnect, device number 9
[   69.131091][  T334] udevd[334]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   69.150371][  T473] usbhid 4-1:0.0: can't add hid device: -71
[   69.156355][  T473] usbhid: probe of 4-1:0.0 failed with error -71
[   69.180702][  T473] usb 4-1: USB disconnect, device number 6
[   70.041427][ T1365] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64)
[   70.050718][ T1365] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   70.070729][ T1365] F2FS-fs (loop3): invalid crc value
[   70.089951][ T1365] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[   70.142247][ T1365] F2FS-fs (loop3): recover fsync data on readonly fs
[   70.160340][  T663] Bluetooth: hci0: command 0x1009 tx timeout
[   70.160641][ T1365] F2FS-fs (loop3): Try to recover 1th superblock, ret: -30
[   70.180610][ T1365] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   72.422476][ T1386] netlink: 8 bytes leftover after parsing attributes in process `syz.3.321'.
[   72.700348][   T15] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[   73.060384][   T15] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 221, changing to 7
[   73.270303][   T15] usb 4-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40
[   73.279367][   T15] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   73.307859][   T15] usb 4-1: Product: syz
[   73.312237][   T15] usb 4-1: Manufacturer: syz
[   73.316817][   T15] usb 4-1: SerialNumber: syz
[   73.630358][   T54] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[   73.690347][   T15] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found
[   73.723358][   T15] usb 4-1: USB disconnect, device number 7
[   74.000495][   T54] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   74.020667][   T54] usb 1-1: New USB device found, idVendor=1ae7, idProduct=9001, bcdDevice= 0.00
[   74.029725][   T54] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   74.051253][   T54] usb 1-1: config 0 descriptor??
[   74.162638][   T24] kauditd_printk_skb: 87 callbacks suppressed
[   74.162649][   T24] audit: type=1400 audit(1789612310.239:2631): avc:  denied  { mounton } for  pid=1397 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[   74.164054][ T1398] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[   74.243639][ T1397] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.260627][ T1397] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.270810][ T1397] device bridge_slave_0 entered promiscuous mode
[   74.291894][ T1397] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.298988][ T1397] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.336170][ T1397] device bridge_slave_1 entered promiscuous mode
[   74.420418][   T54] usbhid 1-1:0.0: can't add hid device: -71
[   74.426728][   T54] usbhid: probe of 1-1:0.0 failed with error -71
[   74.441005][ T1397] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.447374][   T54] usb 1-1: USB disconnect, device number 10
[   74.448089][ T1397] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.461244][ T1397] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.468267][ T1397] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.525061][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   74.535444][  T304] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.552365][  T304] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.572388][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   74.588189][  T304] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.595307][  T304] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.620952][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   74.636860][  T304] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.644150][  T304] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.675834][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   74.689217][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   74.721093][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   74.744125][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   74.760746][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   74.770790][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   74.792246][ T1397] device veth0_vlan entered promiscuous mode
[   74.815656][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   74.832398][ T1397] device veth1_macvtap entered promiscuous mode
[   74.850321][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   74.882638][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   74.902128][   T24] audit: type=1400 audit(1789612310.979:2632): avc:  denied  { mounton } for  pid=1397 comm="syz-executor" path="/root/syzkaller.AypoYq/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   74.951144][   T24] audit: type=1400 audit(1789612311.009:2633): avc:  denied  { setopt } for  pid=1407 comm="syz.0.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   74.981219][  T456] device bridge_slave_1 left promiscuous mode
[   75.010416][  T456] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.030127][  T456] device bridge_slave_0 left promiscuous mode
[   75.050514][  T456] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.084044][  T456] device veth1_macvtap left promiscuous mode
[   75.090091][  T456] device veth0_vlan left promiscuous mode
[   75.264284][ T1416] device syz_tun entered promiscuous mode
[   75.271266][ T1416] device syz_tun left promiscuous mode
[   75.382689][   T24] audit: type=1326 audit(1789612311.419:2634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1422 comm="syz.4.332" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ccb927159 code=0x7ffc0000
[   75.500058][   T24] audit: type=1326 audit(1789612311.419:2635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1422 comm="syz.4.332" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ccb927159 code=0x7ffc0000
[   75.553348][   T24] audit: type=1326 audit(1789612311.429:2636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1422 comm="syz.4.332" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5ccb927159 code=0x7ffc0000
[   75.605491][   T24] audit: type=1326 audit(1789612311.429:2637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1422 comm="syz.4.332" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ccb927159 code=0x7ffc0000
[   75.666770][   T24] audit: type=1326 audit(1789612311.429:2638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1422 comm="syz.4.332" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ccb927159 code=0x7ffc0000
[   75.718439][   T24] audit: type=1326 audit(1789612311.429:2639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1422 comm="syz.4.332" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f5ccb927159 code=0x7ffc0000
[   75.770328][   T24] audit: type=1326 audit(1789612311.429:2640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1422 comm="syz.4.332" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ccb927159 code=0x7ffc0000
[   76.210334][   T15] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[   76.450307][   T15] usb 5-1: Using ep0 maxpacket: 16
[   76.570342][   T15] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   76.580486][   T15] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[   76.589442][   T15] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   76.599858][   T15] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   76.623203][   T15] usb 5-1: config 0 descriptor??
[   76.922046][ T1433] erofs: (device loop4): mounted with root inode @ nid 36.
[   76.935810][ T1433] erofs: (device loop4): z_erofs_readahead: readahead error at page 143 @ nid 36
[   76.945725][ T1433] erofs: (device loop4): z_erofs_readahead: readahead error at page 142 @ nid 36
[   76.955244][ T1433] erofs: (device loop4): z_erofs_readahead: readahead error at page 141 @ nid 36
[   76.964656][ T1433] erofs: (device loop4): z_erofs_readahead: readahead error at page 140 @ nid 36
[   76.974005][ T1433] erofs: (device loop4): z_erofs_readahead: readahead error at page 139 @ nid 36
[   76.983643][ T1433] erofs: (device loop4): z_erofs_readahead: readahead error at page 111 @ nid 36
[   76.993244][ T1433] erofs: (device loop4): z_erofs_readahead: readahead error at page 110 @ nid 36
[   77.004475][ T1433] erofs: (device loop4): z_erofs_readahead: readahead error at page 109 @ nid 36
[   77.013786][ T1433] erofs: (device loop4): z_erofs_readahead: readahead error at page 108 @ nid 36
[   77.023188][ T1433] erofs: (device loop4): z_erofs_readahead: readahead error at page 107 @ nid 36
[   77.032474][ T1433] erofs: (device loop4): z_erofs_readahead: readahead error at page 106 @ nid 36
[   77.042110][ T1433] handle_bad_sector: 3 callbacks suppressed
[   77.042123][ T1433] attempt to access beyond end of device
[   77.042123][ T1433] loop4: rw=524288, want=13478624064, limit=16
[   77.060671][ T1433] attempt to access beyond end of device
[   77.060671][ T1433] loop4: rw=524288, want=13478624072, limit=16
[   77.073794][ T1433] attempt to access beyond end of device
[   77.073794][ T1433] loop4: rw=524288, want=14550774184, limit=16
[   77.086019][ T1433] attempt to access beyond end of device
[   77.086019][ T1433] loop4: rw=524288, want=14550774192, limit=16
[   77.098199][ T1433] attempt to access beyond end of device
[   77.098199][ T1433] loop4: rw=524288, want=13716630408, limit=16
[   77.111079][ T1433] attempt to access beyond end of device
[   77.111079][ T1433] loop4: rw=524288, want=13716630416, limit=16
[   77.127959][ T1433] attempt to access beyond end of device
[   77.127959][ T1433] loop4: rw=524288, want=790416, limit=16
[   77.140465][ T1433] attempt to access beyond end of device
[   77.140465][ T1433] loop4: rw=524288, want=790424, limit=16
[   77.151822][ T1433] attempt to access beyond end of device
[   77.151822][ T1433] loop4: rw=524288, want=104, limit=16
[   77.172975][ T1433] attempt to access beyond end of device
[   77.172975][ T1433] loop4: rw=524288, want=112, limit=16
[   77.190369][   T15] usb 5-1: USB disconnect, device number 8
[   77.228983][  T456] Bluetooth: hci0: Frame reassembly failed (-84)
[   77.240365][ T1442] Bluetooth: hci0: Frame reassembly failed (-84)
[   77.246943][ T1442] Bluetooth: hci0: Frame reassembly failed (-84)
[   77.265575][ T1442] Bluetooth: hci0: Frame reassembly failed (-84)
[   77.452449][ T1444] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[   77.460203][ T1444] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   77.528899][ T1444] F2FS-fs (loop3): Found nat_bits in checkpoint
[   77.582001][ T1444] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   77.589172][ T1444] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   77.653707][ T1455] erofs: (device loop0): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 125300)
[   77.654931][  T279] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix.
[   77.664259][  T279] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix.
[   77.672873][  T279] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix.
[   77.681034][  T279] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix.
[   77.688606][  T279] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix.
[   77.696438][  T279] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix.
[   77.704324][  T279] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix.
[   78.267718][ T1464] FAULT_INJECTION: forcing a failure.
[   78.267718][ T1464] name failslab, interval 1, probability 0, space 0, times 0
[   78.307406][ T1464] CPU: 1 PID: 1464 Comm: syz.6.341 Not tainted syzkaller #0
[   78.314717][ T1464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   78.324768][ T1464] Call Trace:
[   78.328062][ T1464]  __dump_stack+0x21/0x24
[   78.332390][ T1464]  dump_stack_lvl+0x1a7/0x208
[   78.337064][ T1464]  ? show_regs_print_info+0x18/0x18
[   78.342261][ T1464]  ? avc_has_perm_noaudit+0x172/0x260
[   78.347630][ T1464]  ? avc_denied+0x1b0/0x1b0
[   78.352129][ T1464]  dump_stack+0x15/0x1c
[   78.356284][ T1464]  should_fail+0x3ab/0x500
[   78.360696][ T1464]  ? __d_alloc+0x2d/0x690
[   78.365004][ T1464]  __should_failslab+0xa4/0xe0
[   78.369744][ T1464]  should_failslab+0x9/0x20
[   78.374226][ T1464]  kmem_cache_alloc+0x3d/0x2d0
[   78.378965][ T1464]  ? selinux_inode_follow_link+0x370/0x370
[   78.384745][ T1464]  __d_alloc+0x2d/0x690
[   78.388877][ T1464]  d_alloc_parallel+0xe2/0x1390
[   78.393709][ T1464]  ? security_inode_permission+0xb0/0x100
[   78.399402][ T1464]  ? inode_permission+0xf1/0x520
[   78.404315][ T1464]  ? fuse_do_getattr+0x630/0x630
[   78.409226][ T1464]  ? link_path_walk+0x949/0xbd0
[   78.414052][ T1464]  ? d_hash_and_lookup+0x1f0/0x1f0
[   78.419139][ T1464]  ? __kasan_check_write+0x14/0x20
[   78.424231][ T1464]  ? down_read_killable+0xe0/0xe0
[   78.429231][ T1464]  path_openat+0x992/0x3040
[   78.433711][ T1464]  ? getname_flags+0xba/0x510
[   78.438369][ T1464]  ? do_filp_open+0x400/0x400
[   78.443022][ T1464]  do_filp_open+0x1df/0x400
[   78.447503][ T1464]  ? vfs_tmpfile+0x2c0/0x2c0
[   78.452071][ T1464]  ? get_unused_fd_flags+0x92/0xa0
[   78.457162][ T1464]  do_sys_openat2+0x19f/0x750
[   78.461814][ T1464]  ? __kasan_check_write+0x14/0x20
[   78.466901][ T1464]  ? fput_many+0x15a/0x1a0
[   78.471292][ T1464]  ? do_sys_open+0xe0/0xe0
[   78.475684][ T1464]  ? fput+0x1a/0x20
[   78.479465][ T1464]  ? ksys_write+0x1fa/0x260
[   78.483944][ T1464]  ? __ia32_sys_read+0x90/0x90
[   78.488682][ T1464]  __x64_sys_open+0x11c/0x140
[   78.493348][ T1464]  do_syscall_64+0x31/0x40
[   78.497739][ T1464]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   78.503604][ T1464] RIP: 0033:0x7f8540d31159
[   78.507996][ T1464] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   78.527575][ T1464] RSP: 002b:00007f853f769028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[   78.535971][ T1464] RAX: ffffffffffffffda RBX: 00007f8540fb9090 RCX: 00007f8540d31159
[   78.543920][ T1464] RDX: 0000000000000083 RSI: 0000000000000040 RDI: 0000200000000180
[   78.551865][ T1464] RBP: 00007f853f769090 R08: 0000000000000000 R09: 0000000000000000
[   78.559811][ T1464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   78.567759][ T1464] R13: 00007f8540fb9128 R14: 00007f8540fb9090 R15: 00007ffec63a37c8
[   78.646657][ T1468] netlink: 8 bytes leftover after parsing attributes in process `syz.0.343'.
[   78.722160][ T1468] EXT4-fs (loop0): Test dummy encryption mode enabled
[   78.762767][ T1468] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,acl,usrquota,errors=remount-ro,
[   78.791838][ T1468] fscrypt: AES-256-CTS-CBC using implementation "cts(cbc-aes-aesni)"
[   79.050471][  T663] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[   79.290841][  T473] Bluetooth: hci0: command 0x1003 tx timeout
[   79.296910][ T1301] Bluetooth: hci0: sending frame failed (-49)
[   79.303358][  T663] usb 4-1: Using ep0 maxpacket: 16
[   79.370359][   T54] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[   79.420385][  T663] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   79.430722][  T663] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   79.441917][  T663] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   79.452068][  T663] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[   79.465159][  T663] usb 4-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00
[   79.474437][  T663] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   79.484022][  T663] usb 4-1: config 0 descriptor??
[   79.650340][   T54] usb 7-1: device descriptor read/64, error -71
[   79.941348][ T1477] netlink: 8 bytes leftover after parsing attributes in process `syz.3.345'.
[   80.050336][   T54] usb 7-1: device descriptor read/64, error -71
[   80.140355][  T663] usbhid 4-1:0.0: can't add hid device: -71
[   80.146460][  T663] usbhid: probe of 4-1:0.0 failed with error -71
[   80.159092][  T663] usb 4-1: USB disconnect, device number 8
[   80.330387][   T54] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[   80.620375][   T54] usb 7-1: device descriptor read/64, error -71
[   80.712880][ T1492] FAULT_INJECTION: forcing a failure.
[   80.712880][ T1492] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[   80.726379][ T1492] CPU: 1 PID: 1492 Comm: syz.3.349 Not tainted syzkaller #0
[   80.733670][ T1492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   80.743701][ T1492] Call Trace:
[   80.746974][ T1492]  __dump_stack+0x21/0x24
[   80.751277][ T1492]  dump_stack_lvl+0x1a7/0x208
[   80.755928][ T1492]  ? show_regs_print_info+0x18/0x18
[   80.761098][ T1492]  dump_stack+0x15/0x1c
[   80.765227][ T1492]  should_fail+0x3ab/0x500
[   80.769618][ T1492]  should_fail_alloc_page+0x4f/0x60
[   80.774793][ T1492]  __alloc_pages_nodemask+0x11a/0x640
[   80.780159][ T1492]  ? gfp_pfmemalloc_allowed+0x130/0x130
[   80.785702][ T1492]  ? __kasan_check_write+0x14/0x20
[   80.790794][ T1492]  ? __switch_to+0x53e/0x10a0
[   80.795451][ T1492]  ? trace_event_raw_event_sched_switch+0x2dd/0x470
[   80.802040][ T1492]  new_slab+0x84/0x3f0
[   80.806090][ T1492]  ___slab_alloc+0x2f8/0x4c0
[   80.810661][ T1492]  ? getname_flags+0xba/0x510
[   80.815309][ T1492]  __slab_alloc+0x63/0xa0
[   80.819614][ T1492]  ? getname_flags+0xba/0x510
[   80.824263][ T1492]  ? getname_flags+0xba/0x510
[   80.828916][ T1492]  kmem_cache_alloc+0x1a4/0x2d0
[   80.833740][ T1492]  ? getname_flags+0xba/0x510
[   80.838391][ T1492]  getname_flags+0xba/0x510
[   80.842867][ T1492]  getname+0x19/0x20
[   80.846736][ T1492]  do_sys_openat2+0xde/0x750
[   80.851303][ T1492]  ? __kasan_check_read+0x11/0x20
[   80.856307][ T1492]  ? preempt_schedule_irq+0xca/0x120
[   80.861567][ T1492]  ? do_sys_open+0xe0/0xe0
[   80.865958][ T1492]  ? sysvec_reschedule_ipi+0x69/0x70
[   80.871219][ T1492]  __x64_sys_open+0x11c/0x140
[   80.875873][ T1492]  do_syscall_64+0x31/0x40
[   80.880265][ T1492]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   80.886133][ T1492] RIP: 0033:0x7efd3b4b7159
[   80.890523][ T1492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   80.910108][ T1492] RSP: 002b:00007efd39ece028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[   80.918604][ T1492] RAX: ffffffffffffffda RBX: 00007efd3b73f180 RCX: 00007efd3b4b7159
[   80.926640][ T1492] RDX: 0000000000000010 RSI: 000000000004c27e RDI: 0000200000000040
[   80.934590][ T1492] RBP: 00007efd39ece090 R08: 0000000000000000 R09: 0000000000000000
[   80.942538][ T1492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   80.950488][ T1492] R13: 00007efd3b73f218 R14: 00007efd3b73f180 R15: 00007ffeb60eb8c8
[   81.240311][   T54] usb 7-1: device descriptor read/64, error -71
[   81.370296][  T473] Bluetooth: hci0: command 0x1001 tx timeout
[   81.376446][   T54] usb usb7-port1: attempt power cycle
[   81.382671][ T1301] Bluetooth: hci0: sending frame failed (-49)
[   81.720360][  T293] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[   81.810324][   T54] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[   82.030363][   T54] usb 7-1: device descriptor read/8, error -71
[   82.039997][ T1501] erofs: (device loop0): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 125300)
[   82.090381][  T293] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   82.110448][  T293] usb 4-1: New USB device found, idVendor=1ae7, idProduct=9001, bcdDevice= 0.00
[   82.139799][  T293] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   82.150808][  T293] usb 4-1: config 0 descriptor??
[   82.240463][   T54] usb 7-1: device descriptor read/8, error -71
[   82.510327][  T293] usbhid 4-1:0.0: can't add hid device: -71
[   82.516334][  T293] usbhid: probe of 4-1:0.0 failed with error -71
[   82.540695][  T293] usb 4-1: USB disconnect, device number 9
[   82.883148][   T24] kauditd_printk_skb: 99 callbacks suppressed
[   82.883159][   T24] audit: type=1400 audit(1789612318.959:2740): avc:  denied  { setattr } for  pid=1516 comm="syz.0.357" path="/dev/ptmx" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1
[   83.127079][   T24] audit: type=1400 audit(1789612319.199:2741): avc:  denied  { read write } for  pid=1526 comm="syz.6.360" name="ppp" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   83.167227][   T24] audit: type=1400 audit(1789612319.229:2742): avc:  denied  { open } for  pid=1526 comm="syz.6.360" path="/dev/ppp" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   83.191229][   T24] audit: type=1400 audit(1789612319.229:2743): avc:  denied  { ioctl } for  pid=1526 comm="syz.6.360" path="/dev/ppp" dev="devtmpfs" ino=153 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   83.450313][   T54] Bluetooth: hci0: command 0x1009 tx timeout
[   83.694707][ T1535] FAULT_INJECTION: forcing a failure.
[   83.694707][ T1535] name failslab, interval 1, probability 0, space 0, times 0
[   83.709140][ T1535] CPU: 1 PID: 1535 Comm: syz.0.363 Not tainted syzkaller #0
[   83.716551][ T1535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   83.726783][ T1535] Call Trace:
[   83.730076][ T1535]  __dump_stack+0x21/0x24
[   83.734528][ T1535]  dump_stack_lvl+0x1a7/0x208
[   83.739200][ T1535]  ? show_regs_print_info+0x18/0x18
[   83.744403][ T1535]  dump_stack+0x15/0x1c
[   83.748561][ T1535]  should_fail+0x3ab/0x500
[   83.752968][ T1535]  ? kvm_mmu_topup_memory_cache+0xd8/0x210
[   83.758767][ T1535]  __should_failslab+0xa4/0xe0
[   83.763513][ T1535]  should_failslab+0x9/0x20
[   83.767995][ T1535]  kmem_cache_alloc+0x3d/0x2d0
[   83.772735][ T1535]  ? kvm_mmu_topup_memory_cache+0xd8/0x210
[   83.778529][ T1535]  kvm_mmu_topup_memory_cache+0xd8/0x210
[   83.784150][ T1535]  kvm_mmu_load+0x70/0x1600
[   83.788641][ T1535]  vcpu_enter_guest+0x4775/0x7060
[   83.793667][ T1535]  ? local_bh_enable+0x30/0x30
[   83.798431][ T1535]  ? 0xffffffffa0030000
[   83.802567][ T1535]  ? is_bpf_text_address+0x177/0x190
[   83.807843][ T1535]  ? __kernel_text_address+0xa0/0x100
[   83.813193][ T1535]  ? unwind_get_return_address+0x4d/0x90
[   83.818819][ T1535]  ? stack_trace_save+0xf0/0xf0
[   83.823652][ T1535]  ? arch_stack_walk+0xee/0x140
[   83.828496][ T1535]  ? stack_trace_save+0xa6/0xf0
[   83.833328][ T1535]  ? stack_trace_snprint+0xe0/0xe0
[   83.838426][ T1535]  ? kasan_set_track+0x5b/0x70
[   83.843169][ T1535]  ? kasan_set_track+0x4a/0x70
[   83.847909][ T1535]  ? kasan_set_free_info+0x23/0x40
[   83.852994][ T1535]  ? ____kasan_slab_free+0x125/0x160
[   83.858275][ T1535]  ? __kasan_slab_free+0x11/0x20
[   83.863195][ T1535]  ? slab_free_freelist_hook+0xc5/0x190
[   83.869064][ T1535]  ? kmem_cache_free+0x100/0x2d0
[   83.873993][ T1535]  ? putname+0xfe/0x150
[   83.878126][ T1535]  ? do_sys_openat2+0x68e/0x750
[   83.882970][ T1535]  ? __x64_sys_openat+0x136/0x160
[   83.887977][ T1535]  ? do_syscall_64+0x31/0x40
[   83.892546][ T1535]  ? entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   83.898600][ T1535]  ? _kstrtoull+0x3bb/0x4c0
[   83.903120][ T1535]  ? kstrtouint_from_user+0x1c4/0x220
[   83.908480][ T1535]  ? __kasan_check_read+0x11/0x20
[   83.913507][ T1535]  ? vmx_vcpu_pi_load+0xac/0x3f0
[   83.918430][ T1535]  ? __local_bh_enable_ip+0x53/0x80
[   83.923620][ T1535]  ? kvm_load_guest_fpu+0x159/0x290
[   83.928805][ T1535]  kvm_arch_vcpu_ioctl_run+0xc39/0x1a70
[   83.934606][ T1535]  kvm_vcpu_ioctl+0x87e/0xcd0
[   83.939268][ T1535]  ? kernel_write+0x3c0/0x3c0
[   83.943931][ T1535]  ? kvm_create_vcpu_debugfs+0x190/0x190
[   83.949811][ T1535]  ? selinux_file_ioctl+0x3ad/0x4c0
[   83.954997][ T1535]  ? mutex_trylock+0xb0/0xb0
[   83.959574][ T1535]  ? __fget_files+0x2e1/0x340
[   83.964236][ T1535]  ? selinux_file_alloc_security+0x120/0x120
[   83.970193][ T1535]  ? __fget_files+0x2e1/0x340
[   83.974850][ T1535]  ? security_file_ioctl+0x84/0xa0
[   83.979955][ T1535]  ? kvm_create_vcpu_debugfs+0x190/0x190
[   83.985570][ T1535]  __se_sys_ioctl+0x121/0x1a0
[   83.990235][ T1535]  __x64_sys_ioctl+0x7b/0x90
[   83.994813][ T1535]  do_syscall_64+0x31/0x40
[   83.999209][ T1535]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   84.005082][ T1535] RIP: 0033:0x7f58ba446159
[   84.009482][ T1535] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   84.029079][ T1535] RSP: 002b:00007f58b8e9f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   84.037496][ T1535] RAX: ffffffffffffffda RBX: 00007f58ba6cdfa0 RCX: 00007f58ba446159
[   84.045448][ T1535] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[   84.053422][ T1535] RBP: 00007f58b8e9f090 R08: 0000000000000000 R09: 0000000000000000
[   84.061376][ T1535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   84.069328][ T1535] R13: 00007f58ba6ce038 R14: 00007f58ba6cdfa0 R15: 00007fff14bfac08
[   84.160897][ T1538] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.168120][ T1538] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.177454][ T1538] device bridge_slave_0 entered promiscuous mode
[   84.184876][ T1538] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.198868][ T1538] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.206458][ T1538] device bridge_slave_1 entered promiscuous mode
[   84.237845][ T1538] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.244981][ T1538] bridge0: port 2(bridge_slave_1) entered forwarding state
[   84.252278][ T1538] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.259325][ T1538] bridge0: port 1(bridge_slave_0) entered forwarding state
[   85.129814][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.188912][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.214497][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   85.222121][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   85.234231][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   85.242832][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   85.253037][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.260072][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[   85.279031][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   85.279486][ T1565] netlink: 8 bytes leftover after parsing attributes in process `syz.0.371'.
[   85.287483][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   85.305040][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.312108][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[   85.323691][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   85.331881][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   85.341183][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   85.349284][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   85.364010][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   85.372480][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   85.383226][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   85.391169][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   85.399088][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   85.406580][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   85.416296][ T1538] device veth0_vlan entered promiscuous mode
[   85.426051][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   85.434386][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   85.443516][ T1538] device veth1_macvtap entered promiscuous mode
[   85.453219][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   85.460837][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   85.469029][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   85.479755][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   85.488150][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   85.502168][   T24] audit: type=1400 audit(1789612321.579:2744): avc:  denied  { mount } for  pid=1538 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   85.541344][   T24] audit: type=1400 audit(1789612321.619:2745): avc:  denied  { create } for  pid=1568 comm="syz.7.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   85.561231][   T24] audit: type=1400 audit(1789612321.619:2746): avc:  denied  { connect } for  pid=1568 comm="syz.7.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   85.581449][   T24] audit: type=1400 audit(1789612321.619:2747): avc:  denied  { shutdown } for  pid=1568 comm="syz.7.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   85.601569][   T24] audit: type=1400 audit(1789612321.619:2748): avc:  denied  { block_suspend } for  pid=1568 comm="syz.7.372" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   85.610457][  T485] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[   85.721275][  T456] device bridge_slave_1 left promiscuous mode
[   85.722291][ T1574] erofs: (device loop7): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 125300)
[   85.729237][  T456] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.745534][  T456] device bridge_slave_0 left promiscuous mode
[   85.751752][  T456] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.759427][  T456] device veth1_macvtap left promiscuous mode
[   85.765635][  T456] device veth0_vlan left promiscuous mode
[   86.010382][  T485] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 221, changing to 7
[   86.180398][  T485] usb 1-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40
[   86.189559][  T485] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   86.197631][  T485] usb 1-1: Product: syz
[   86.201897][  T485] usb 1-1: Manufacturer: syz
[   86.206512][  T485] usb 1-1: SerialNumber: syz
[   86.535071][ T1584] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[   86.560551][  T485] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found
[   86.595798][  T485] usb 1-1: USB disconnect, device number 11
[   86.849122][ T1594] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   86.986257][ T1606] overlayfs: "xino" feature enabled using 2 upper inode bits.
[   87.460439][  T663] usb 1-1: new full-speed USB device number 12 using dummy_hcd
[   87.810628][  T663] usb 1-1: not running at top speed; connect to a high speed hub
[   88.060360][  T663] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   88.082072][   T24] audit: type=1326 audit(1789612324.159:2749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1617 comm="syz.6.385" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8540d31159 code=0x7ffc0000
[   88.108206][   T24] audit: type=1326 audit(1789612324.159:2750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1617 comm="syz.6.385" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8540d31159 code=0x7ffc0000
[   88.134474][   T24] audit: type=1326 audit(1789612324.159:2751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1617 comm="syz.6.385" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8540d31159 code=0x7ffc0000
[   88.190486][   T24] audit: type=1326 audit(1789612324.159:2752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1617 comm="syz.6.385" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8540d31159 code=0x7ffc0000
[   88.210390][  T663] usb 1-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad
[   88.238746][   T24] audit: type=1326 audit(1789612324.159:2753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1617 comm="syz.6.385" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8540d31159 code=0x7ffc0000
[   88.244812][  T663] usb 1-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0
[   88.291452][   T24] audit: type=1326 audit(1789612324.189:2754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1617 comm="syz.6.385" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f8540d31159 code=0x7ffc0000
[   88.302095][  T663] usb 1-1: Product: syz
[   88.320495][  T663] usb 1-1: Manufacturer: syz
[   88.349781][   T24] audit: type=1326 audit(1789612324.189:2755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1617 comm="syz.6.385" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8540d31159 code=0x7ffc0000
[   88.372223][  T663] uvcvideo: Found UVC 1.00 device syz (225a:e1d4)
[   88.374866][   T24] audit: type=1326 audit(1789612324.189:2756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1617 comm="syz.6.385" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8540d31159 code=0x7ffc0000
[   88.397387][  T663] uvcvideo: No streaming interface found for terminal 2.
[   88.432408][   T24] audit: type=1326 audit(1789612324.189:2757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1617 comm="syz.6.385" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8540d31159 code=0x7ffc0000
[   88.480629][   T24] audit: type=1326 audit(1789612324.189:2758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1617 comm="syz.6.385" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8540d31159 code=0x7ffc0000
[   88.657847][ T1557] usb 1-1: USB disconnect, device number 12
[   89.319513][ T1636] handle_bad_sector: 7 callbacks suppressed
[   89.319529][ T1636] attempt to access beyond end of device
[   89.319529][ T1636] loop0: rw=2049, want=1041, limit=128
[   89.349962][ T1635] attempt to access beyond end of device
[   89.349962][ T1635] loop0: rw=524288, want=369, limit=128
[   89.362869][ T1636] attempt to access beyond end of device
[   89.362869][ T1636] loop0: rw=0, want=153, limit=128
[   89.373680][ T1636] attempt to access beyond end of device
[   89.373680][ T1636] loop0: rw=0, want=153, limit=128
[   89.384421][ T1636] attempt to access beyond end of device
[   89.384421][ T1636] loop0: rw=0, want=153, limit=128
[   89.395174][ T1636] attempt to access beyond end of device
[   89.395174][ T1636] loop0: rw=0, want=153, limit=128
[   89.405908][ T1636] attempt to access beyond end of device
[   89.405908][ T1636] loop0: rw=0, want=153, limit=128
[   89.416659][ T1636] attempt to access beyond end of device
[   89.416659][ T1636] loop0: rw=0, want=153, limit=128
[   89.427685][ T1636] attempt to access beyond end of device
[   89.427685][ T1636] loop0: rw=0, want=153, limit=128
[   89.438464][ T1636] attempt to access beyond end of device
[   89.438464][ T1636] loop0: rw=0, want=153, limit=128
[   89.450631][ T1636] Buffer I/O error on dev loop0, logical block 145, async page read
[   89.458715][ T1636] Buffer I/O error on dev loop0, logical block 146, async page read
[   89.466944][ T1636] Buffer I/O error on dev loop0, logical block 147, async page read
[   89.475151][ T1636] Buffer I/O error on dev loop0, logical block 148, async page read
[   89.483550][ T1636] Buffer I/O error on dev loop0, logical block 149, async page read
[   89.491675][ T1636] Buffer I/O error on dev loop0, logical block 150, async page read
[   89.499726][ T1636] Buffer I/O error on dev loop0, logical block 151, async page read
[   89.507797][ T1636] Buffer I/O error on dev loop0, logical block 152, async page read
[   89.515860][ T1636] Buffer I/O error on dev loop0, logical block 145, async page read
[   89.524338][ T1636] Buffer I/O error on dev loop0, logical block 146, async page read
[   89.581545][ T1641] erofs: (device loop6): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 125300)
[   90.233643][ T1652] FAULT_INJECTION: forcing a failure.
[   90.233643][ T1652] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   90.246784][ T1652] CPU: 1 PID: 1652 Comm: syz.7.394 Not tainted syzkaller #0
[   90.254045][ T1652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   90.264081][ T1652] Call Trace:
[   90.267370][ T1652]  __dump_stack+0x21/0x24
[   90.271696][ T1652]  dump_stack_lvl+0x1a7/0x208
[   90.276350][ T1652]  ? thaw_kernel_threads+0x220/0x220
[   90.281607][ T1652]  ? vsnprintf+0x189d/0x1990
[   90.286178][ T1652]  ? show_regs_print_info+0x18/0x18
[   90.291361][ T1652]  dump_stack+0x15/0x1c
[   90.295496][ T1652]  should_fail+0x3ab/0x500
[   90.299885][ T1652]  should_fail_usercopy+0x1a/0x20
[   90.304884][ T1652]  _copy_to_user+0x20/0x90
[   90.309280][ T1652]  simple_read_from_buffer+0xe9/0x160
[   90.314638][ T1652]  proc_fail_nth_read+0x1a6/0x220
[   90.319659][ T1652]  ? proc_fault_inject_write+0x310/0x310
[   90.325290][ T1652]  ? rw_verify_area+0x1c0/0x360
[   90.330125][ T1652]  ? proc_fault_inject_write+0x310/0x310
[   90.335744][ T1652]  vfs_read+0x209/0xa50
[   90.339876][ T1652]  ? kernel_read+0x70/0x70
[   90.344272][ T1652]  ? __kasan_check_write+0x14/0x20
[   90.349359][ T1652]  ? mutex_lock+0x92/0xf0
[   90.353675][ T1652]  ? mutex_trylock+0xb0/0xb0
[   90.358265][ T1652]  ? __fget_files+0x2e1/0x340
[   90.362929][ T1652]  ? __fdget_pos+0x2d2/0x380
[   90.367510][ T1652]  ? ksys_read+0x70/0x260
[   90.371823][ T1652]  ksys_read+0x14a/0x260
[   90.376071][ T1652]  ? vfs_write+0xd70/0xd70
[   90.380480][ T1652]  ? debug_smp_processor_id+0x17/0x20
[   90.385841][ T1652]  __x64_sys_read+0x7b/0x90
[   90.390450][ T1652]  do_syscall_64+0x31/0x40
[   90.394851][ T1652]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   90.400723][ T1652] RIP: 0033:0x7f42ae78698e
[   90.405123][ T1652] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   90.424711][ T1652] RSP: 002b:00007f42ad1fdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   90.433098][ T1652] RAX: ffffffffffffffda RBX: 00007f42ad1fe6c0 RCX: 00007f42ae78698e
[   90.441043][ T1652] RDX: 000000000000000f RSI: 00007f42ad1fe0a0 RDI: 0000000000000005
[   90.448990][ T1652] RBP: 00007f42ad1fe090 R08: 0000000000000000 R09: 0000000000000000
[   90.456935][ T1652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   90.464881][ T1652] R13: 00007f42aea4e128 R14: 00007f42aea4e090 R15: 00007ffe461a7a28
[   90.511309][ T1656] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option
[   90.522715][ T1656] EXT4-fs (loop3): revision level too high, forcing read-only mode
[   90.530801][ T1656] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01d, mo2=0002]
[   90.538991][ T1656] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80)
[   90.548700][ T1656] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features
[   90.557520][ T1656] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,abort,nomblk_io_submit,noblock_validity,nombcache,usrjquota=,jqfmt=vfsv0,barrier=0x000000000000d95a,jqfmt=vfsold,,errors=continue
[   90.780351][  T300] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[   91.722382][ T1690] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0xd9fc9aab, utbl_chksum : 0xe619d30d)
[   91.800396][  T300] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   91.814728][  T300] usb 8-1: New USB device found, idVendor=1ae7, idProduct=9001, bcdDevice= 0.00
[   91.831458][  T300] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   91.850572][  T300] usb 8-1: config 0 descriptor??
[   92.190353][  T300] usbhid 8-1:0.0: can't add hid device: -71
[   92.196580][  T300] usbhid: probe of 8-1:0.0 failed with error -71
[   92.207080][  T300] usb 8-1: USB disconnect, device number 2
[   92.959103][  T663] usb 8-1: new full-speed USB device number 3 using dummy_hcd
[   93.320401][   T24] kauditd_printk_skb: 211 callbacks suppressed
[   93.320506][   T24] audit: type=1326 audit(1789612329.169:2970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1718 comm="syz.4.418" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ccb927159 code=0x7ffc0000
[   93.465307][   T24] audit: type=1326 audit(1789612329.169:2971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1718 comm="syz.4.418" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ccb927159 code=0x7ffc0000
[   93.500328][  T300] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[   93.524429][   T24] audit: type=1326 audit(1789612329.179:2972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1718 comm="syz.4.418" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5ccb927159 code=0x7ffc0000
[   93.575077][   T24] audit: type=1326 audit(1789612329.179:2973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1718 comm="syz.4.418" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ccb927159 code=0x7ffc0000
[   93.625792][   T24] audit: type=1326 audit(1789612329.179:2974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1718 comm="syz.4.418" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ccb927159 code=0x7ffc0000
[   93.650989][  T663] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   93.670443][  T663] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   93.688997][   T24] audit: type=1326 audit(1789612329.179:2975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1718 comm="syz.4.418" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f5ccb927159 code=0x7ffc0000
[   93.704822][  T663] usb 8-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[   93.714151][   T24] audit: type=1326 audit(1789612329.179:2976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1718 comm="syz.4.418" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ccb927159 code=0x7ffc0000
[   93.740278][  T663] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   93.748926][   T24] audit: type=1326 audit(1789612329.189:2977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1718 comm="syz.4.418" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ccb927159 code=0x7ffc0000
[   93.777927][  T663] usb 8-1: config 0 descriptor??
[   93.781536][   T24] audit: type=1326 audit(1789612329.189:2978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1718 comm="syz.4.418" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5ccb927159 code=0x7ffc0000
[   93.810315][   T24] audit: type=1326 audit(1789612329.339:2979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1718 comm="syz.4.418" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ccb927159 code=0x7ffc0000
[   93.840343][  T300] usb 4-1: device descriptor read/64, error -71
[   93.918412][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   93.930546][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.937596][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.941328][ T1732] binder: 1730:1732 ioctl c0306201 200000000080 returned -14
[   93.950523][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[   93.970650][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   93.974327][ T1732] netlink: 16 bytes leftover after parsing attributes in process `syz.4.422'.
[   93.978912][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[   93.995702][ T1732] netlink: 8 bytes leftover after parsing attributes in process `syz.4.422'.
[   93.995711][ T1732] netlink: 8 bytes leftover after parsing attributes in process `syz.4.422'.
[   94.040599][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   94.048957][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   94.057159][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   94.065441][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   94.073779][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   94.169958][ T1734] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.177123][ T1734] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.240364][  T300] usb 4-1: device descriptor read/64, error -71
[   94.281206][  T663] hid-generic 0003:04F3:0755.0002: unknown main item tag 0x0
[   94.288615][  T663] hid-generic 0003:04F3:0755.0002: unknown main item tag 0x0
[   94.296209][  T663] hid-generic 0003:04F3:0755.0002: failed to start in urb: -90
[   94.304164][  T663] hid-generic 0003:04F3:0755.0002: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.7-1/input0
[   94.482159][ T1740] udc-core: couldn't find an available UDC or it's busy
[   94.490497][ T1740] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   94.510312][  T300] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[   94.735376][ T1751] mmap: syz.6.425 (1751) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[   94.758253][   T49] ==================================================================
[   94.758391][ T1753] ------------[ cut here ]------------
[   94.766353][   T49] BUG: KASAN: use-after-free in l2tp_tunnel_del_work+0xcd/0x3d0
[   94.766365][   T49] Read of size 8 at addr ffff88810dc25c80 by task kworker/u4:2/49
[   94.766368][   T49] 
[   94.766378][   T49] CPU: 1 PID: 49 Comm: kworker/u4:2 Not tainted syzkaller #0
[   94.766383][   T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   94.766391][   T49] Workqueue: l2tp l2tp_tunnel_del_work
[   94.772035][ T1753] WARNING: CPU: 0 PID: 1753 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0
[   94.779439][   T49] Call Trace:
[   94.779454][   T49]  __dump_stack+0x21/0x24
[   94.779468][   T49]  dump_stack_lvl+0x1a7/0x208
[   94.787417][ T1753] Modules linked in:
[   94.789552][   T49]  ? show_regs_print_info+0x18/0x18
[   94.789562][   T49]  ? thaw_kernel_threads+0x220/0x220
[   94.789580][   T49]  ? tracing_record_taskinfo_sched_switch+0x80/0x3a0
[   94.797040][ T1753] 
[   94.806980][   T49]  print_address_description+0x7f/0x2c0
[   94.806991][   T49]  ? l2tp_tunnel_del_work+0xcd/0x3d0
[   94.807000][   T49]  kasan_report+0x100/0x140
[   94.807009][   T49]  ? __switch_to_asm+0x3a/0x60
[   94.807024][   T49]  ? l2tp_tunnel_del_work+0xcd/0x3d0
[   94.812683][ T1753] CPU: 0 PID: 1753 Comm: syz.6.426 Not tainted syzkaller #0
[   94.822498][   T49]  __asan_report_load8_noabort+0x14/0x20
[   94.822508][   T49]  l2tp_tunnel_del_work+0xcd/0x3d0
[   94.822517][   T49]  process_one_work+0x6fd/0xbc0
[   94.822532][   T49]  worker_thread+0xa8e/0x13c0
[   94.825928][ T1753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   94.830106][   T49]  kthread+0x324/0x3b0
[   94.830113][   T49]  ? worker_clr_flags+0x190/0x190
[   94.830127][   T49]  ? kthread_blkcg+0xd0/0xd0
[   94.834840][ T1753] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0
[   94.838747][   T49]  ret_from_fork+0x1f/0x30
[   94.838753][   T49] 
[   94.838759][   T49] Allocated by task 1753:
[   94.838785][   T49]  __kasan_kmalloc+0xd4/0x100
[   94.838794][   T49]  __kmalloc+0x19f/0x330
[   94.838812][   T49]  l2tp_session_create+0x39/0xb60
[   94.844173][ T1753] Code: 5d c3 e8 2c 5a 35 fd be 02 00 00 00 eb 0a e8 20 5a 35 fd be 01 00 00 00 4c 89 f7 e8 63 ca 0e fe e9 0f ff ff ff e8 09 5a 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 f8 59 35 fd 4c 89 f7 be 03
[   94.849254][   T49]  pppol2tp_connect+0xbf5/0x1640
[   94.849263][   T49]  __sys_connect+0x3ce/0x450
[   94.849270][   T49]  __x64_sys_connect+0x7a/0x90
[   94.849286][   T49]  do_syscall_64+0x31/0x40
[   94.856062][ T1753] RSP: 0018:ffffc90000af78e0 EFLAGS: 00010293
[   94.858240][   T49]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   94.858242][   T49] 
[   94.858247][   T49] Freed by task 1753:
[   94.858262][   T49]  kasan_set_track+0x4a/0x70
[   94.863865][ T1753] 
[   94.869035][   T49]  kasan_set_free_info+0x23/0x40
[   94.869043][   T49]  ____kasan_slab_free+0x125/0x160
[   94.869051][   T49]  __kasan_slab_free+0x11/0x20
[   94.869058][   T49]  slab_free_freelist_hook+0xc5/0x190
[   94.869074][   T49]  kfree+0xc0/0x270
[   94.873659][ T1753] RAX: ffffffff842f5aa7 RBX: ffff888111641800 RCX: ffff88812724a800
[   94.878279][   T49]  l2tp_session_put+0xb2/0x1a0
[   94.878287][   T49]  pppol2tp_ioctl+0x748/0x960
[   94.878303][   T49]  pppox_ioctl+0x1e4/0x320
[   94.883681][ T1753] RDX: 0000000000000000 RSI: 0000000015146000 RDI: 000000000c04eb7d
[   94.890847][   T49]  sock_do_ioctl+0xda/0x380
[   94.890855][   T49]  sock_ioctl+0x472/0x740
[   94.890863][   T49]  __se_sys_ioctl+0x121/0x1a0
[   94.890879][   T49]  __x64_sys_ioctl+0x7b/0x90
[   94.896598][ T1753] RBP: ffffc90000af7900 R08: ffff888111641883 R09: 1ffff110222c8310
[   94.901565][   T49]  do_syscall_64+0x31/0x40
[   94.901574][   T49]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   94.901577][   T49] 
[   94.901581][   T49] Last potentially related work creation:
[   94.901595][   T49]  kasan_save_stack+0x3a/0x60
[   94.906459][ T1753] R10: dffffc0000000000 R11: ffffed10222c8311 R12: dffffc0000000000
[   94.911063][   T49]  __kasan_record_aux_stack+0xd2/0x100
[   94.911073][   T49]  kasan_record_aux_stack_noalloc+0xb/0x10
[   94.911081][   T49]  call_rcu+0x11a/0x1090
[   94.911088][   T49]  fib6_del+0xbf0/0xf00
[   94.911095][   T49]  fib6_clean_node+0x2a1/0x540
[   94.911102][   T49]  fib6_walk_continue+0x54b/0x740
[   94.911108][   T49]  fib6_walk+0x153/0x290
[   94.911114][   T49]  fib6_clean_all+0x1a1/0x270
[   94.911129][   T49]  rt6_disable_ip+0x12a/0x7a0
[   94.921358][ T1753] R13: dffffc0000000000 R14: 0000000015146000 R15: ffff88810dc25c00
[   94.925219][   T49]  addrconf_ifdown+0x144/0x1890
[   94.925229][   T49]  addrconf_notify+0x3bd/0xea0
[   94.925239][   T49]  raw_notifier_call_chain+0x90/0x100
[   94.925255][   T49]  dev_close_many+0x328/0x4d0
[   94.930353][ T1753] FS:  0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[   94.934824][   T49]  unregister_netdevice_many+0x477/0x19f0
[   94.934832][   T49]  default_device_exit_batch+0x35e/0x3c0
[   94.934842][   T49]  cleanup_net+0x5fe/0xb80
[   94.934849][   T49]  process_one_work+0x6fd/0xbc0
[   94.934863][   T49]  worker_thread+0xa8e/0x13c0
[   94.941285][ T1753] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   94.945552][   T49]  kthread+0x324/0x3b0
[   94.945561][   T49]  ret_from_fork+0x1f/0x30
[   94.945569][   T49] 
[   94.947921][ T1753] CR2: 00007f8538000020 CR3: 000000011adcf000 CR4: 00000000003506b0
[   94.952181][   T49] The buggy address belongs to the object at ffff88810dc25c00
[   94.952181][   T49]  which belongs to the cache kmalloc-512 of size 512
[   94.952190][   T49] The buggy address is located 128 bytes inside of
[   94.952190][   T49]  512-byte region [ffff88810dc25c00, ffff88810dc25e00)
[   94.952194][   T49] The buggy address belongs to the page:
[   94.952226][   T49] page:ffffea0004370900 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10dc24
[   94.956975][ T1753] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   94.961087][   T49] head:ffffea0004370900 order:2 compound_mapcount:0 compound_pincount:0
[   94.961104][   T49] flags: 0x4000000000010200(slab|head)
[   94.961118][   T49] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043080
[   94.961127][   T49] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000
[   94.961131][   T49] page dumped because: kasan: bad access detected
[   94.961140][   T49] page_owner tracks the page as allocated
[   94.966265][ T1753] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   94.985770][   T49] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 9, ts 21346210354, free_ts 21303004045
[   94.985785][   T49]  prep_new_page+0x176/0x190
[   94.985794][   T49]  get_page_from_freelist+0x225f/0x23f0
[   94.985801][   T49]  __alloc_pages_nodemask+0x29a/0x640
[   94.985808][   T49]  new_slab+0x84/0x3f0
[   94.985816][   T49]  ___slab_alloc+0x2f8/0x4c0
[   94.985822][   T49]  __slab_alloc+0x63/0xa0
[   94.985829][   T49]  __kmalloc+0x1f9/0x330
[   94.985845][   T49]  fib6_info_alloc+0x34/0xe0
[   94.990933][ T1753] Call Trace:
[   94.995328][   T49]  ip6_route_info_create+0x4c7/0x1450
[   94.995336][   T49]  addrconf_f6i_alloc+0x19c/0x3f0
[   94.995349][   T49]  ipv6_add_addr+0x442/0xd90
[   95.000554][ T1753]  pppol2tp_release+0x150/0x2b0
[   95.004480][   T49]  addrconf_add_linklocal+0x209/0x660
[   95.004488][   T49]  addrconf_addr_gen+0x53f/0x6a0
[   95.004496][   T49]  addrconf_dev_config+0x299/0x510
[   95.004503][   T49]  addrconf_notify+0x9d8/0xea0
[   95.004520][   T49]  raw_notifier_call_chain+0x90/0x100
[   95.010693][ T1753]  sock_close+0xb8/0x200
[   95.016423][   T49] page last free stack trace:
[   95.016436][   T49]  __free_pages_ok+0x80b/0x830
[   95.016449][   T49]  __free_pages+0xd8/0x390
[   95.018794][ T1753]  ? sock_mmap+0xa0/0xa0
[   95.022709][   T49]  __free_slab+0xcf/0x190
[   95.022716][   T49]  unfreeze_partials+0x150/0x180
[   95.022722][   T49]  put_cpu_partial+0xc1/0x180
[   95.022729][   T49]  __slab_free+0x2c9/0x3a0
[   95.022738][   T49]  ___cache_free+0x10e/0x130
[   95.022745][   T49]  qlink_free+0x50/0x90
[   95.022752][   T49]  qlist_free_all+0x5f/0xb0
[   95.022760][   T49]  kasan_quarantine_reduce+0x14a/0x160
[   95.022767][   T49]  __kasan_slab_alloc+0x2f/0xe0
[   95.022787][   T49]  slab_post_alloc_hook+0x5d/0x2f0
[   95.027461][ T1753]  __fput+0x2dc/0x730
[   95.029656][   T49]  kmem_cache_alloc+0x15a/0x2d0
[   95.029665][   T49]  sock_alloc_inode+0x1b/0xb0
[   95.029680][   T49]  new_inode_pseudo+0x62/0x210
[   95.034645][ T1753]  ? _raw_spin_lock+0x94/0xf0
[   95.039669][   T49]  __sock_create+0x12c/0x770
[   95.039673][   T49] 
[   95.039676][   T49] Memory state around the buggy address:
[   95.039685][   T49]  ffff88810dc25b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   95.039696][   T49]  ffff88810dc25c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   95.044560][ T1753]  ____fput+0x15/0x20
[   95.049803][   T49] >ffff88810dc25c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   95.049807][   T49]                    ^
[   95.049819][   T49]  ffff88810dc25d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   95.053646][ T1753]  task_work_run+0x127/0x190
[   95.061543][   T49]  ffff88810dc25d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   95.061547][   T49] ==================================================================
[   95.061551][   T49] Disabling lock debugging due to kernel taint
[   95.062825][  T300] usb 4-1: device descriptor read/64, error -71
[   95.078145][ T1753]  do_exit+0xa7c/0x24e0
[   95.470317][  T300] usb 4-1: device descriptor read/64, error -71
[   95.503022][ T1753]  ? put_task_struct+0x90/0x90
[   95.627622][  T300] usb usb4-port1: attempt power cycle
[   95.643692][ T1753]  ? __kasan_check_write+0x14/0x20
[   95.675368][  T663] usb 8-1: USB disconnect, device number 3
[   95.676898][ T1753]  ? _raw_spin_lock_irq+0x95/0xf0
[   95.693114][ T1753]  do_group_exit+0x149/0x310
[   95.697714][ T1753]  ? __kasan_check_write+0x14/0x20
[   95.702843][ T1753]  ? recalc_sigpending+0x1ac/0x230
[   95.707944][ T1753]  get_signal+0xfb1/0x1300
[   95.712377][ T1753]  arch_do_signal_or_restart+0xe7/0x11b0
[   95.718004][ T1753]  ? futex_exit_release+0x1e0/0x1e0
[   95.723214][ T1753]  ? selinux_file_ioctl+0x3ad/0x4c0
[   95.728424][ T1753]  ? __ia32_sys_rt_sigreturn+0x730/0x730
[   95.734064][ T1753]  ? __se_sys_futex+0x2ba/0x370
[   95.738909][ T1753]  ? security_file_ioctl+0x84/0xa0
[   95.744025][ T1753]  exit_to_user_mode_loop+0xa2/0xe0
[   95.749227][ T1753]  exit_to_user_mode_prepare+0x76/0xa0
[   95.754711][ T1753]  syscall_exit_to_user_mode+0x1d/0x40
[   95.760160][ T1753]  do_syscall_64+0x3d/0x40
[   95.764590][ T1753]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   95.770502][ T1753] RIP: 0033:0x7f8540d31159
[   95.774891][ T1753] Code: Unable to access opcode bytes at RIP 0x7f8540d3112f.
[   95.782268][ T1753] RSP: 002b:00007f853f78a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[   95.790693][ T1753] RAX: fffffffffffffe00 RBX: 00007f8540fb8fa8 RCX: 00007f8540d31159
[   95.798643][ T1753] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8540fb8fa8
[   95.806633][ T1753] RBP: 00007f8540fb8fa0 R08: 0000000000000000 R09: 0000000000000000
[   95.814660][ T1753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   95.822657][ T1753] R13: 00007f8540fb9038 R14: 00007ffec63a36e0 R15: 00007ffec63a37c8
[   95.830675][ T1753] ---[ end trace 87344a02ebdf483c ]---