last executing test programs:

1m45.206282978s ago: executing program 4 (id=5):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000080)={@multicast1, @rand_addr=0x64010102}, 0xc)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x36}, 0x20000023}, 0x1c)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000280)={0x9})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1df)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
r5 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f00000000c0)={[{@grpjquota, 0x4a}, {@debug}, {@jqfmt_vfsold}, {@noquota}, {@bsdgroups}, {@usrjquota, 0x22}], [], 0x2c}, 0x84, 0x4ca, &(0x7f0000000e80)="$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")
mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2290034, 0x0)
getegid()
write(r4, &(0x7f0000000000)='3', 0x4e)
shutdown(r4, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000004c0)={0x2, 0x4, 0xffffffff, 0x1000, &(0x7f0000001000/0x1000)=nil})
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0x4, &(0x7f0000000600)=ANY=[@ANYRES64=r5], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0xa8bc55ea0f844837, 0x8, '\x00', 0x0, @fallback=0xc, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000100)={[{0x1088, 0x5, 0x9, 0x2, 0x2, 0x0, 0xe, 0x9d, 0x10, 0x6, 0x4, 0x2, 0x8}, {0x4, 0x6, 0x6, 0x42, 0x5, 0x3, 0x3, 0x2, 0x8, 0x5, 0x10, 0xf, 0x8000000000000001}, {0x6, 0x3, 0x8, 0xa, 0x2, 0x80, 0x80, 0x1, 0xde, 0x3, 0x23, 0x5, 0x7f000}], 0x1ff})
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x8, 0x61, 0x200002000001, 0x1, 0x2004c8, 0xfffffffffffffffc, 0x0, 0x36ae, 0x5, 0x6, 0x3, 0x400000000, 0x0, 0xf73c], 0x80a0000})
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fstatfs(r7, &(0x7f0000005800)=""/4096)
sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9810", @ANYRES16=0x0, @ANYBLOB="00082cbd7000fbdbdf252e0000000400af00"], 0x18}, 0x1, 0x0, 0x0, 0x4000081}, 0x4000000)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

1m44.275690807s ago: executing program 4 (id=10):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r2=>0x0})
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x2000000, &(0x7f0000000200), 0x1, 0x445, &(0x7f0000001dc0)="$eJzs3E2IVeUbAPDnnJnxYxz/d/wTTUWglGgRjjrXahVoixZtXAhCH0JDXj/w6oR3ojShLBAhIlpIghDTMlrkokURQbSJoBYtCiJJqBZhWCEt2t2495w7XvQM2dXruU2/H5y573nvued5X85weB845wngP2tNRGyNiKGImIyISt6f5lu8lG2t445Vz+5rbUk0mzt+SyKJiFr17L7OuZL8c0X+s2UR8f+tSTw8fHXcxpGjB6br9drhfH/j7MFnNjaOHN2w/+D03tre2qHqlgemprbcX33wxs313MTLMTW1deS99WtOfvnxa9+0xjuWf9c9jxspWaBzWz+ClWikq50UXG8GzxunXv+o7DEAADdfmq/9h9vr/0oMRbZ4O3/uyUuVeHG07PEBAAAA16/ZHMo/AQAAgMUrkfsDAADAItd5DqBWPbuvs92sZw9W3BtxcVtEjGfxO+8XZ98Ot98fjvzd0pE+xL/rfB9O+g80Hi03/lc7y42/6t1y4899V278p9aVG/+nH8qNv3Z1ufFPzUR8si0rgHD1/S9t1zzoWBIRS/OaBsuv6exDf3vE6k8v3/+OXXX/S+fvf60zXc+LWCfnLpwo6p94JOLi8Yg7hoviJ/Pxk7ymQ682fH18V1H/qosRzbcj1kVx/OiKv3B9iI179tdrm7K/xfGrLzxeKerf/lk2/9EF4o/nxw111YnoxenRXR+sLOjfOZnFv+fu4ut/W9f8/5fX5hjvIf6a2+vbi/rXvZrF373A/Luv/6oe4nbM/dL4saj//S3XcVIAoGdpe22TpJPz7TSdnMzWe7fEaFqfaczet2fm2UO7szXQeIyknaVWth4ZSVr7m/O1SWd/6or9ar6GOFlZ3t6ffHqmvrvsyQMAAMAiNxbx/ROvfDix4or8/+dKlv8DAAAA/36t/P/OubfOtNp/FD4dCQAAAAyKerO337Xy/0snfv085P8AAACwaMn/AQAAYPHr5P9jC9T/W9lVu29TXn/4i8rI0j37l8XmsgcPAAAAXJNW/p9++9j5xpGjB6br9dphDY2BajyU/6cOyniSARtPvxsl3pwAAIC+uLzoL3skAAAAQP+kF5KIaG3rK2vHbl39zkT3t0uSP9vVAZZExHNndrz5/PTs7OHNrf7f5/tnT+f9U2XNAQAAAOjWydM7eTwAAAAAAAAAAAAAADD4bkY58bLnCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwI3zVwAAAP//QNGSjg==")
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'dummy0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000280)=@newqdisc={0x94, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xfff2, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x64, 0x2, {{0x3, 0x8, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x0, 0xffffffff, 0x401, 0x6, 0xf3d2}}]}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0xf8, 0x0, 0x0, 0x0, 0x3}}]}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008840}, 0x40)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=<r6=>0x0)
pipe(&(0x7f00000000c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
write$binfmt_script(r8, 0x0, 0xb)
splice(r7, 0x0, r9, 0x0, 0x80, 0x8)
timer_settime(r6, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
io_submit(0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv4/ping_group_range\x00', 0x2, 0x0)
read$FUSE(r10, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x7c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x4c, 0x2, {{0x0, 0x4, 0x0, 0x0, 0xfffffffc}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_CORRUPT={0x0, 0x4, {0x7, 0x800}}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x6}]}}}]}, 0x7c}}, 0x0)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0)
bind$inet6(r11, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
sendto$inet6(r11, 0x0, 0x0, 0x20040000, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0x1}, 0x1c)

1m43.391456035s ago: executing program 4 (id=15):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000080)={@multicast1, @rand_addr=0x64010102}, 0xc)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x36}, 0x20000023}, 0x1c)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000280)={0x9})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1df)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
r5 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f00000000c0)={[{@grpjquota, 0x4a}, {@debug}, {@jqfmt_vfsold}, {@noquota}, {@bsdgroups}, {@usrjquota, 0x22}], [], 0x2c}, 0x84, 0x4ca, &(0x7f0000000e80)="$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")
mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2290034, 0x0)
getegid()
write(r4, &(0x7f0000000000)='3', 0x4e)
shutdown(r4, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000004c0)={0x2, 0x4, 0xffffffff, 0x1000, &(0x7f0000001000/0x1000)=nil})
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0x4, &(0x7f0000000600)=ANY=[@ANYRES64=r5], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0xa8bc55ea0f844837, 0x8, '\x00', 0x0, @fallback=0xc, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000100)={[{0x1088, 0x5, 0x9, 0x2, 0x2, 0x0, 0xe, 0x9d, 0x10, 0x6, 0x4, 0x2, 0x8}, {0x4, 0x6, 0x6, 0x42, 0x5, 0x3, 0x3, 0x2, 0x8, 0x5, 0x10, 0xf, 0x8000000000000001}, {0x6, 0x3, 0x8, 0xa, 0x2, 0x80, 0x80, 0x1, 0xde, 0x3, 0x23, 0x5, 0x7f000}], 0x1ff})
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x8, 0x61, 0x200002000001, 0x1, 0x2004c8, 0xfffffffffffffffc, 0x0, 0x36ae, 0x5, 0x6, 0x3, 0x400000000, 0x0, 0xf73c], 0x80a0000})
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fstatfs(r7, &(0x7f0000005800)=""/4096)
sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9810", @ANYRES16=0x0, @ANYBLOB="00082cbd7000fbdbdf252e0000000400af00"], 0x18}, 0x1, 0x0, 0x0, 0x4000081}, 0x4000000)
r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
pread64(r8, &(0x7f0000000180)=""/59, 0x57, 0xac8c)

1m43.184747765s ago: executing program 4 (id=18):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00')
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(0x0, 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000)
socket(0x1e, 0x4, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r4 = openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r2}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="611234000000000061134c0000000000bf2000000000000015000200000001103d030100000000009500000000000000bc26000000000000bf67000000000000070300000fff070067020000030000001606000000000078bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f909ad4301000000000095000000000000000500000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r4}, 0x94)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$inet6_int(r5, 0x29, 0xc8, 0x0, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, 0x0, 0x0)
r7 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_udp_int(r7, 0x11, 0xa, &(0x7f0000000140)=0x27b, 0x4)
connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x8}, 0x1c)
connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e25, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
write(r7, &(0x7f0000000200)="89", 0xffe3)
write$binfmt_format(r0, &(0x7f0000000080)='1\x00', 0x2)

1m43.161413881s ago: executing program 32 (id=18):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00')
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(0x0, 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000)
socket(0x1e, 0x4, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r4 = openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r2}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="611234000000000061134c0000000000bf2000000000000015000200000001103d030100000000009500000000000000bc26000000000000bf67000000000000070300000fff070067020000030000001606000000000078bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f909ad4301000000000095000000000000000500000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r4}, 0x94)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$inet6_int(r5, 0x29, 0xc8, 0x0, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, 0x0, 0x0)
r7 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_udp_int(r7, 0x11, 0xa, &(0x7f0000000140)=0x27b, 0x4)
connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x8}, 0x1c)
connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e25, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
write(r7, &(0x7f0000000200)="89", 0xffe3)
write$binfmt_format(r0, &(0x7f0000000080)='1\x00', 0x2)

1m41.491559502s ago: executing program 3 (id=26):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0xce22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x1c)
listen(r0, 0x2)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000001140)=@file={0x0, './trace\x00'}, 0x6e)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="ad5a97"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="200103"], 0x0})
syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000100)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="ac184d"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000c40)={0x14, &(0x7f0000000bc0)={0x20, 0x5, 0x6, {0x6, 0x22, "aa32f597"}}, &(0x7f0000000c00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x81a}}}, &(0x7f0000000e80)={0x44, &(0x7f0000000c80)={0x0, 0xd, 0x2c, "36eec875918955027faa00f14b79ca085a2df7ec7a0482ea461bbc4ce7fab2a7e45c5d93084fb7e1dc191075"}, &(0x7f0000000cc0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000d00)={0x0, 0x8, 0x1, 0xfa}, &(0x7f0000000d40)={0x20, 0x81, 0x2, "bef5"}, &(0x7f0000000d80)={0x20, 0x82, 0x1, "17"}, &(0x7f0000000dc0)={0x20, 0x83, 0x3, "0c7bf0"}, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], &(0x7f0000000e40)={0x20, 0x85, 0x3, "8475e5"}})
syz_usb_control_io$hid(r2, 0x0, 0x0)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000380)={<r3=>0x0, 0x8000000004, 0x3, 0x1})
ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000780)={r3, 0x7e, 0x1, [0x7, 0x7fffffff, 0xb, 0x31c0000000000000, 0x1ff], [0x5, 0x5, 0x40, 0x400, 0x4, 0xb, 0x5, 0x80000000, 0x3, 0x932e, 0xfffffffffffffff6, 0x4, 0x5, 0x7, 0x4, 0x8, 0x7f, 0x3, 0xfffffffffffffffc, 0x5, 0x3, 0x5, 0x555, 0x9, 0x10000, 0x200, 0x1e, 0x5, 0x3, 0x3, 0x6, 0x6, 0x8, 0x33519957, 0x3, 0x5, 0x40, 0xc59, 0x1, 0xffffffffffffff5d, 0xffff, 0x4, 0x4, 0x9, 0x4d4, 0x9, 0x3, 0x4, 0xa28, 0x3, 0x55a, 0x5, 0x0, 0x8, 0x4, 0x81, 0x67d1d22f, 0x2, 0x3, 0x0, 0x9307, 0x5, 0x3, 0x4, 0x5, 0x8, 0xfffffffffffffff8, 0xc4, 0x531, 0x100000000, 0x10001, 0x200f, 0x1ebd57f9, 0x0, 0x9, 0xb1f, 0x1, 0x2, 0x6, 0xdc6, 0x7fff, 0x5, 0x6a, 0x6, 0xe, 0x9, 0x31, 0xffff, 0x910, 0xffffffffffffa107, 0x6, 0x8000000000000000, 0x9, 0x9, 0x9, 0x7, 0x3, 0x81, 0x8, 0x743, 0x8, 0x0, 0x100000000, 0x88, 0x3, 0xa, 0x50, 0x5, 0x2bd5adb7, 0xf, 0x0, 0xfff, 0x6, 0x32518080, 0x8000000000000, 0xffffffffffffff81, 0xff2b, 0x4, 0x100000001, 0x400, 0xfffffffffffffff5]})
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @loopback, 0xffffffff}, 0x1c)
listen(r1, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/current_tracer\x00', 0x2, 0x0)
r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockopt$WPAN_WANTACK(r5, 0x300, 0x0, 0x0, 0x0)
sendto$inet6(r0, &(0x7f0000001040)="d210c4c329e3f18140dd4353b944be95b2068540f6b21fe78f618d7e6fff8a42e75fbb2b2a44bd3f1cd0706a6daad3a10b3b71a1a0ebb05e94f85cd778b843d64e7f261ce00cbdb7d661e194c297cf1a220fe81d25bd40d1eef6f0c9ef23c9d6a6a0156508a65fcd175702c31c58e8c39b174140b08f0d998a1f7b43774bab7314666e08f9a9e766d0f3e78311fe3e4704129429da0de597406f93e9a58d61ae14180ca6fadb9c1f74fcbf565f67eeed75502dc9f4badfd5f24966c79b6acc54", 0xc0, 0x24040040, &(0x7f0000001100)={0xa, 0x4e24, 0x7, @remote, 0xfffffffa}, 0x1c)
preadv(r4, &(0x7f0000002b40)=[{&(0x7f0000000200)=""/237, 0xed}], 0x1, 0xf, 0x94b8)
r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00')
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20)
listen(r7, 0x2)
preadv(r6, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/225, 0xe1}, {&(0x7f0000001240)=""/106, 0x6a}, {&(0x7f0000000000)=""/149, 0x95}, {&(0x7f0000000300)=""/71, 0x47}], 0x4, 0x7, 0x20000000)

1m38.057694368s ago: executing program 3 (id=39):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000080)={@multicast1, @rand_addr=0x64010102}, 0xc)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x36}, 0x20000023}, 0x1c)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000280)={0x9})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1df)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f00000000c0)={[{@grpjquota, 0x4a}, {@debug}, {@jqfmt_vfsold}, {@noquota}, {@bsdgroups}, {@usrjquota, 0x22}], [], 0x2c}, 0x84, 0x4ca, &(0x7f0000000e80)="$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")
mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2290034, 0x0)
getegid()
write(r4, &(0x7f0000000000)='3', 0x4e)
shutdown(r4, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x0)

1m37.68373806s ago: executing program 3 (id=43):
r0 = socket$igmp6(0xa, 0x3, 0x2)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000a0000000000004fefaf6b15b2c6ebeba259dc0b7258fd8e06502ec4c63acadfa3e985e220f82f5005f41b85f15c773082058195e4ab1339934db7f59e99cce074809df438d1e0698a8a200a4c403e60ae47892eb5d4e5db81752f961bdfb15b0247054ce140faff78b7f7726049a3b2287b02913f85"], &(0x7f0000000840)=""/184, 0x26, 0xb8, 0x1}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r1, 0xffffffffffffff90, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/149, 0x95}}, 0x10)
openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
openat$selinux_policy(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
syz_mount_image$msdos(&(0x7f0000000280), &(0x7f0000000300)='.\x02\x00', 0x4000, &(0x7f0000000040)=ANY=[], 0xfe, 0x1211, &(0x7f0000000900)="$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")
open(&(0x7f0000000140)='./file1\x00', 0x2, 0x1c0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f046bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
timerfd_gettime(0xffffffffffffffff, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000200000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0)
recvmmsg(r5, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}, 0x77}, {{0x0, 0x0, 0x0}, 0x4f5}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000002600)}, 0x5}, {{0x0, 0x0, 0x0}, 0x7}], 0x5, 0x120, 0x0)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000100)='./my_config\x00', 0x210000, &(0x7f0000000140)={[{@dioread_nolock}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=")
r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./mnt/trace_pipe\x00', 0x20000, 0x8)
read(r6, 0x0, 0x0)
r7 = syz_open_procfs(0xffffffffffffffff, 0x0)
write$binfmt_script(r7, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x20, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000e300000000000000006301a0"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x94)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590)

1m35.972916711s ago: executing program 3 (id=49):
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000180)={0xfffff000, 0x2, 0x4, 0x0, 0x0, 0x400})
gettid()
lsetxattr$security_capability(&(0x7f0000000340)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000380), &(0x7f0000000400)=@v2={0x2000000, [{0x401, 0x7}, {0x180000}]}, 0x14, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0xfffffffc, 0x0, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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")
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000b00)={@desc={0x1, 0x0, @desc3}, 0x40, 0x0, '\x00', @b})
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt/encrypted_dir\x00', 0x800, 0x1)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000040)=@v1={0x0, @adiantum, 0x4, @desc3})
chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x2a)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000580)=@can_delroute={0x34, 0x19, 0x1, 0x70bd2a, 0x25dfdbfe, {0x1d, 0x1, 0x6}, [@CGW_CS_XOR={0x8, 0x5, {0x0, 0x6, 0xb, 0xfd}}, @CGW_MOD_SET={0x15, 0x4, {{{0x0, 0x1}, 0x1, 0x3, 0x0, 0x0, "0529140d797acd0e"}, 0x3}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20}, 0x4040010)
pwritev2(r2, &(0x7f00000001c0)=[{&(0x7f0000000280)="ff", 0x1}], 0x1, 0xe7b, 0x0, 0x0)
times(&(0x7f0000000200))
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x200008, &(0x7f0000000080)=ANY=[], 0x1, 0x392, &(0x7f0000001000)="$eJzs3T1vW2UUAOATt/mExBkQEiDEq24sVhL+QCPUSohIoFCj0gFxS5xixY0j2wpyhaADEiv/gL1iZENC/IEMsLOxZWHsUNXIX6mdul+kyaXq80jRPfZ7jvO+tnx1FuscXv3x5s52s7SdtaJwMUUhIgp3I5Z7Ud/U4FroxTMx6na8W7z619uffHbtw/WNjUubKV1ev/LeWkpp6Z3fvv7m5wu/t1759JelX2fjYPnzw3/W/j54/eCNw/tXvqo2U7WZduutlKXr9Xoru16rpK1qc6eU0se1StaspOpus9IYW9+u1ff22inb3Vpc2GtUms2U7bbTTqWdWvXUarRTdiOr7qZSqZQWF4InKd/Z3MzW+/HcY/IuntWGOAWNxnrW/Q7PPrRSvpPLhgCAXJ20/595qv7/WmGk/5+LR/b/06H/fy6mny5ttP//zy/C/1y3/58ZfH/H6f8BAAAAAAAAAAAAAOBFcLfTKXY6neLw2hn+SHjwOOftccoe+vyP/eW9P07XyA/35iJqP+yX98v9a399fTuqUYtKrEQx7nVvC0P9+PIHG5dWUs9yLN78rld/4Y+I8rnx+tUoxvLk+tV+fTqqj+51OhZG69fii3htcv3axPqZWPlppL4Uxfjzy6hHLbZ6t7cH9d+upvT+RxvH6md7eQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8HEpp6K3oz73fL0fMx/5gfn/pQcLy+Hz8fv3RfP2VKMa9yfP5VybO5z8fb57P9+wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMNRs39rJarVK46yC4cz/3jMzw+DRVVP99NvHluZjPHn2Sa9zwqDwTFXzg0NOWLrf6XR6wY3vn/tW5872ozxJMB0Rj8npDN7Ak/+vVyNi9Jlz4zmzEXGqJ13qBoX83/BnDvK4GwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEC+joZ+dx9M5b0bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8tJs39rJarVK4xSDvM8IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwIvk3AAD//8s8Cyw=")
r4 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x800)
setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000100)=0x80000001, 0x35)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0)

1m35.441560912s ago: executing program 3 (id=50):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x7, 0x1, 0x0, 0xc3d, 0x0, 0x2004cb, 0xffffffdfffffffff, 0xa1d, 0x7, 0x100005, 0x79, 0x3, 0x3], 0x3332d000, 0x202})
setns(0xc9, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000000380)={'nat\x00', 0x2, [{}, {}]}, 0x48)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_int(r4, 0x107, 0xc, &(0x7f00000002c0), &(0x7f0000000300)=0x4)
fcntl$getownex(r4, 0x10, &(0x7f0000000000)={0x0, <r5=>0x0})
prlimit64(r5, 0x3, &(0x7f0000000080)={0x4, 0x7077}, &(0x7f00000000c0))
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$F2FS_IOC_SET_PIN_FILE(r6, 0x4004f50d, &(0x7f0000000340))
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000280)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x8, 0xfffff00c}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10)
syz_emit_ethernet(0x3a, &(0x7f0000000400)={@local, @remote, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xcb37, 0x0, 0x2}}}}}}, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)=@x86={0x1, 0xc, 0xa, 0x0, 0x2, 0x3, 0x6, 0xb, 0xfd, 0x4, 0x1, 0x3, 0x0, 0x101, 0x5, 0x28, 0x2, 0x4, 0xff, '\x00', 0x1, 0xef})
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x4000, 0xe000, 0x0, 0x77, 0x4, 0x3, 0xcb, 0x2, 0x0, 0x6, 0x6, 0xf4}, {0x2, 0x7000, 0x3, 0xeb, 0xff, 0x0, 0x0, 0xbf, 0x7, 0xfc, 0x3, 0x7b}, {0x80a0000, 0x1000, 0xe, 0x0, 0x7, 0xc4, 0x8, 0x1, 0x55, 0x3, 0x4, 0xfc}, {0x1, 0x0, 0x9, 0x4, 0xf9, 0x0, 0x9, 0x1, 0x3, 0x0, 0x9, 0xfc}, {0x0, 0x8000000, 0x3, 0x1, 0x0, 0x4, 0x0, 0x6, 0x2, 0x34, 0xff}, {0xc000, 0x1, 0xe, 0x7f, 0x8, 0x0, 0x2, 0x1c, 0xa3, 0xff, 0x19}, {0xffffffff, 0xdddd1000, 0xa, 0x87, 0x0, 0x6, 0x7, 0x20, 0x0, 0x83}, {0x25000, 0x6000, 0x4, 0x0, 0xa4, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0xfe}, {0x4000, 0x9}, {0x3000, 0xfffd}, 0xddf8ffdb, 0x0, 0x0, 0x120, 0x2, 0xf801, 0xdddd1000, [0x9, 0x0, 0xfffffdffffffffff, 0xfffffffeffffffff]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1m35.217954027s ago: executing program 3 (id=51):
socket$packet(0x11, 0x2, 0x300)
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x4, @remote}, 0x10)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_IFALIASn={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x600}, 0x0)

1m35.150395894s ago: executing program 33 (id=51):
socket$packet(0x11, 0x2, 0x300)
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x4, @remote}, 0x10)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_IFALIASn={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x600}, 0x0)

1m26.528566096s ago: executing program 2 (id=104):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000080)={{0x7, 0x7}, {0x84, 0xf}, 0x1, 0x7})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007159000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000280)=0x3c, 0x1)

1m26.102353821s ago: executing program 2 (id=108):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
syz_open_procfs$namespace(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe)
keyctl$session_to_parent(0x12)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000002100050125bd70000000000002000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x28}}, 0x0)
write$UHID_INPUT(r1, &(0x7f0000002b40)={0xe, {"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", 0x942}}, 0x1006)
r6 = socket$packet(0x11, 0x3, 0x300)
statx(r1, &(0x7f0000000200)='./file0\x00', 0x2000, 0x80, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{@in6=@mcast1}}}, &(0x7f0000000a40)=0xe8)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2, &(0x7f0000000a80)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_loose}, {@access_user}], [{@fowner_eq={'fowner', 0x3d, r7}}, {@uid_lt={'uid<', r8}}]}})
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r1)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000008c0)={&(0x7f0000000f00)={0x358, r9, 0x40a, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x800}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8a}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffff9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffff8}]}, @TIPC_NLA_LINK={0xec, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2925}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x61d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6141}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5fe50607}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfffffff0}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x94, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @local}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x100, @local, 0xf}}}}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2aa}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1000}]}, @TIPC_NLA_LINK={0xf4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc19d}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x32ba}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2eaeb1db}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}]}, 0x358}, 0x1, 0x0, 0x0, 0x800}, 0x8080)
setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa962bfffff, 0x13012, r6, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0)

1m25.25647337s ago: executing program 2 (id=115):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x88, 0x40, &(0x7f0000000300)=@filter={'filter\x00', 0xc, 0x4, 0x280, 0xffffffff, 0x148, 0x98, 0x0, 0x98, 0xffffffff, 0x1e8, 0x1e8, 0x1e8, 0x98, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x1000}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x6, {0x3ff}}}}, {{@ip={@multicast2, @remote, 0x0, 0xffffff00, 'macvlan1\x00', 'pim6reg1\x00', {}, {}, 0x16, 0x1, 0x3c}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0xfffffffd}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0)

1m25.193654675s ago: executing program 2 (id=116):
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0)
ioctl$RTC_SET_TIME(r0, 0x4024700a, 0x0)
syz_emit_ethernet(0x100, &(0x7f00000000c0)={@random="6be121751408", @remote, @val={@void, {0x8100, 0x6, 0x0, 0x1}}, {@llc_tr={0x11, {@llc={0x0, 0xf0, "878e", "e9241d05982a1476e7e33033e9c38e9867445aea6bffecf608ae94c27d17ba11e32bb7285410b666b6d79c1c8d8c76ec4a54d96bdd23fd9153bb444d10c2244be9a33a8430a5b64f14cf3e335848d1809d6f65b874f8a5223622a4b2f4367fcc04e622ec97993dc765a0f5a968589ec45b936956f2e46dc94d918c8de271cce2998bcaa488e7fc379f5c9a550897ec56e6e6b59b1b938c1458e33dd93a70fd2257b8f1694a458d07e8b05661f020b024bcf7db5e271808cd34e7ddda3dfc677a24d7b0e1dee98c6e2aba3ca968932e9e89f4b07a1aa85ca3261bd27a612b54e68a9a12566b0acca3efde"}}}}}, &(0x7f00000001c0)={0x0, 0x3, [0xc09, 0x1db, 0x960, 0x487]})

1m25.041374193s ago: executing program 2 (id=118):
r0 = socket$key(0xf, 0x3, 0x2)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0)
r2 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x79, &(0x7f00000001c0)=[@cr4={0x1, 0x108044}], 0x1)
close(r4)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x9, 0x8, 0x80, 0x40, 0x42, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r8}, 0x38)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r9, r4}, 0xc)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x3, 0x11, r0, 0x4000)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone3(&(0x7f0000000400)={0x80400, &(0x7f0000000000), 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58)
syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f00000001c0)=ANY=[@ANYRES32=r2, @ANYRES16, @ANYBLOB="4034f75ac2c846edc8c44a7c476ea460ebb9cc49a866228983f7c272da739a565c452bec202a5a004df3868fb451fcb76b9defa24d5ffd5a5751f4f54f0c66de3a368233a69bca7baa2f884cc5cadcc1e47df944b6762a52b9327345c1c0cb1bfadebbc19391b6525675d389a6c02853be2827dafd86ff8e045bc20d6693252cae36940afbabd93fb2b8389ae50ed5cac457bd8b85d5bd0e6482be1cc8f5c8dfe7b3f9403fe0c8f9a93a4d893c7c0824f8932754360225c8571df1cb0e31540acd4b2907469ed8ea", @ANYRES16=r2, @ANYRES32=0x0, @ANYRES64, @ANYRESDEC=0x0], 0x1, 0x304, &(0x7f0000000bc0)="$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")
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_serviced\x00', 0x275a, 0x0)
write$binfmt_script(r10, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f00006e0000/0x2000)=nil, 0x2000, 0x2, 0x40010, r10, 0x0)
ftruncate(r10, 0x4a8e)

1m24.069601182s ago: executing program 2 (id=119):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000)
r2 = gettid()
process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x310, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$sock_linger(r3, 0x1, 0xd, 0x0, 0x0)
bind$bt_sco(r3, &(0x7f0000000400), 0x8)
setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000080), 0x4)
read$FUSE(r0, &(0x7f0000007fc0)={0x2020}, 0x2020)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$sock(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="240000005f00050000000000000000000000000002000000000000000500020001000000", 0x24}], 0x1}, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
r6 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x4c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xa}, {0x4, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xffffffff, 0x3, 0x54, 0x5, 0x4, 0x1}}}}]}, 0x4c}}, 0x44080)
sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@deltaction={0x1e0, 0x31, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @TCA_ACT_TAB={0x4c, 0x1, [{0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000000}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}, @TCA_ACT_TAB={0x74, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xee66}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x34}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7be8}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3d}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3d2}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x101}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa6ac}}]}, @TCA_ACT_TAB={0x8c, 0x1, [{0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xda07}}, {0x14, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7f}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x58}}, {0x14, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x55}, 0x10)
recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
shutdown(r5, 0x0)
sendmsg$sock(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="1c0000005e0001000000000000000000000000000200000008000000", 0x1c}], 0x1}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x8413, &(0x7f0000000100)={[{@delalloc}, {}, {@nodioread_nolock}, {@acl}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@noblock_validity}, {@usrjquota}, {@jqfmt_vfsv0}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000}}, {@inlinecrypt}, {@sysvgroups}]}, 0x18, 0x569, &(0x7f0000000780)="$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")
mount(0x0, &(0x7f00000009c0)='.\x00', 0x0, 0x22be836, 0x0)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)

1m9.034502363s ago: executing program 34 (id=119):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000)
r2 = gettid()
process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x310, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$sock_linger(r3, 0x1, 0xd, 0x0, 0x0)
bind$bt_sco(r3, &(0x7f0000000400), 0x8)
setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000080), 0x4)
read$FUSE(r0, &(0x7f0000007fc0)={0x2020}, 0x2020)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$sock(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="240000005f00050000000000000000000000000002000000000000000500020001000000", 0x24}], 0x1}, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
r6 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x4c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xa}, {0x4, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xffffffff, 0x3, 0x54, 0x5, 0x4, 0x1}}}}]}, 0x4c}}, 0x44080)
sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@deltaction={0x1e0, 0x31, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @TCA_ACT_TAB={0x4c, 0x1, [{0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000000}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}, @TCA_ACT_TAB={0x74, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xee66}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x34}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7be8}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3d}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3d2}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x101}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa6ac}}]}, @TCA_ACT_TAB={0x8c, 0x1, [{0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xda07}}, {0x14, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7f}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x58}}, {0x14, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x55}, 0x10)
recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
shutdown(r5, 0x0)
sendmsg$sock(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="1c0000005e0001000000000000000000000000000200000008000000", 0x1c}], 0x1}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x8413, &(0x7f0000000100)={[{@delalloc}, {}, {@nodioread_nolock}, {@acl}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@noblock_validity}, {@usrjquota}, {@jqfmt_vfsv0}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000}}, {@inlinecrypt}, {@sysvgroups}]}, 0x18, 0x569, &(0x7f0000000780)="$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")
mount(0x0, &(0x7f00000009c0)='.\x00', 0x0, 0x22be836, 0x0)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)

42.541846376s ago: executing program 0 (id=394):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@ipv6_newrule={0x1c, 0x20, 0x1, 0x70bd28, 0x35dfdbfc, {0xa, 0x80, 0x10, 0x0, 0x8, 0x0, 0x0, 0x3, 0x17}}, 0x1c}, 0x1, 0x0, 0x0, 0x140000d0}, 0x20048810)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x2, 0x1, 0x0, 0x90, 0x0, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x0, 0x0, 0x20}, {0x6}, [@mbim_extended={0x8, 0x24, 0x1c, 0x3, 0x6, 0x8}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x11, 0x10, 0xe, 0x10, 0x10, 0x10, 0x10, 0x12, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r6 = dup(r5)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

39.211006836s ago: executing program 0 (id=417):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
unshare(0x20000400)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000000140)='./file1\x00', 0x800080, &(0x7f0000000280)=ANY=[@ANYBLOB='active_logs=4,jqfmt=vfsv0,prjjquota=f2fs\x00,mode=ad,norecovery,fsync_mode=posix,user_xattr,disable_roll_forward,\x00\x00\x00', @ANYRESOCT=0x0, @ANYRESOCT, @ANYRESHEX=0x0, @ANYRESHEX], 0x1, 0x105ea, &(0x7f000000d000)="$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")
r1 = creat(&(0x7f0000000400)='./file1\x00', 0x182)
fallocate(r1, 0x0, 0x1, 0x2000402)
lseek(r1, 0x403, 0x3)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r2 = eventfd(0x0)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r2)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r2})
syz_emit_ethernet(0x3b, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@arp={0x806, @generic={0xfce1, 0x883e, 0x6, 0x10, 0x1, @local, "2c51441f51adb89d836f58202728ebba", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, "16bc639758082c0bd9"}}}}, &(0x7f0000000080)={0x0, 0x3, [0x522, 0x23, 0xf62, 0xb9f]})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000041000000180100002020732500000000802020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff85850000007100000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x36, &(0x7f0000000000)="5fd63edbfd8a4a6077fd87686f9a", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x3}, 0x50)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/43, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f0000000780)=""/87, &(0x7f0000000800)=""/90, 0x1000})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000940)={0x1, 0x0, [{0x1000, 0x2c, &(0x7f0000000200)=""/44}]})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6)
r5 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2)
ioctl$LOOP_SET_FD(r5, 0x4c00, r4)
ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3, 0x0, 0x8})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)

38.069896927s ago: executing program 0 (id=423):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xd1, 0x0, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406d0422c200000000000109022d00010100803209040000020300000009211101000122230009058103"], 0x0)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
pwritev(r2, 0x0, 0x0, 0xfffffff7, 0xffff)
syz_usb_control_io$hid(r1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r3 = memfd_create(&(0x7f0000000bc0)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\r\x00\x00\x00\x00\x00\x00\x00\x1c\f\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0\x9d\xb5XtAs\x86N\t\x8b\xbd\x1f\xb3834d1i\x8b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xbd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;jB9\xd8\xfa\xf8\xd3\xe7b3\xc6\x18\xc7\xb8\xf6\xcdp)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x92\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xefd\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc5\x1d\xe7jDf\x87@\x8fg\x15RJw\x82\xe2\xdcunuk\xff\x8c\xf3\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\xc1\r\x00\x00\x00\x00\x00\x00\\\xf1\xc7\x8cUj\xd5\xa5\x88\x00\x00\x00\x00\x00\x00\t\xfb\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x18+#\xae\v\xa7TW\x92\xc8\x8fEG\xab\xa1\xa1\x02Y\xdb\xb1yd_}\xf9y0\x1c\xdf\x9b\x95\x12\xe0\x1cuC\xf4\xd2%U\xc1@.\x86\\\x15\x98\xb0\x8f\x1bo\x9a\xd3\xea\xc7\x9b\xd3J\xd0\x92\xe7\x8d\xca\xd8\xf8NX\xb5&\xbdQ\x01\xbcYTc]\x9f\x89`7\xc9\xaf\x80\\\xb2C|E\xb5\x9d\xc8\\\x90*@:\xcbX\x99\x95-\x91\aP\x97\x0e\xe6\xd2o\xc9\xf7i4\xc7\"$O\x1ag\x8d\xa3\xb1\xddI\x98s^\x13\xd6\xdf\x96\x8f', 0x2)
ftruncate(r3, 0x80079a0)
mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x2, 0x12, r3, 0x0)
r4 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040))
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000340)={&(0x7f0000583000/0x3000)=nil, &(0x7f0000685000/0x4000)=nil, 0x3000, 0x1})
ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000080)={{&(0x7f00003fe000/0x4000)=nil, 0x4000}})
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x4, 0x0, 0x7fff0000}]})
close_range(r5, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
openat(r2, &(0x7f00000000c0)='./sys\x00', 0x400ac2, 0x0)
syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0xd40c, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)=<r6=>0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r6, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x2, 0xc25, 0x0, 0x0, 0x1000, 0x6, 0x0, 0x0, 0x4}}}, &(0x7f0000000300)=<r7=>0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = dup(r8)
syz_ublk_setup_queues(r9, r7, 0x0, &(0x7f0000000780)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x100, 0xf, 0x33b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3c9b, 0x20, 0x0, 0x142}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x727b, 0x80, 0x2, 0x135}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2000002, 0x4000, 0x3, 0xffffffff}}], 0x1, 0x0, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r10, 0x18000000000002a0, 0xeff, 0xffffffffffffffde, &(0x7f0000001240)="b9ff03076804268c989e14f088a8657986dd", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

36.945869324s ago: executing program 0 (id=429):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000080)={@multicast1, @rand_addr=0x64010102}, 0xc)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x36}, 0x20000023}, 0x1c)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000280)={0x9})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1df)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f00000000c0)={[{@grpjquota, 0x4a}, {@debug}, {@jqfmt_vfsold}, {@noquota}, {@bsdgroups}, {@usrjquota, 0x22}], [], 0x2c}, 0x84, 0x4ca, &(0x7f0000000e80)="$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")
mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2290034, 0x0)
getegid()
write(0xffffffffffffffff, &(0x7f0000000000)='3', 0x4e)
shutdown(0xffffffffffffffff, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000100)={[{0x1088, 0x5, 0x9, 0x2, 0x2, 0x0, 0xe, 0x9d, 0x10, 0x6, 0x4, 0x2, 0x8}, {0x4, 0x6, 0x6, 0x42, 0x5, 0x3, 0x3, 0x2, 0x8, 0x5, 0x10, 0xf, 0x8000000000000001}, {0x6, 0x3, 0x8, 0xa, 0x2, 0x80, 0x80, 0x1, 0xde, 0x3, 0x23, 0x5, 0x7f000}], 0x1ff})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x8, 0x61, 0x200002000001, 0x1, 0x2004c8, 0xfffffffffffffffc, 0x0, 0x36ae, 0x5, 0x6, 0x3, 0x400000000, 0x0, 0xf73c], 0x80a0000})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fstatfs(r5, &(0x7f0000005800)=""/4096)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
pread64(r6, &(0x7f0000000180)=""/59, 0x57, 0xac8c)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

36.825606954s ago: executing program 0 (id=430):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
syz_open_procfs(0x0, &(0x7f0000000200)='task\x00')
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b)
write(r2, &(0x7f0000000000)='7', 0x1)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0900000004000000060000000c04000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50)
pipe2(&(0x7f0000000580), 0x0)
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
recvmmsg(r0, &(0x7f0000003340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/261, 0x105}, 0x5}], 0x1, 0x20000000, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]})
r5 = syz_clone(0x40011, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0)
exit(0x5)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000800))
bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0)
io_setup(0x2, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x20, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}}, 0x10)
io_uring_setup(0x1b7b, 0x0)
syz_ublk_setup_io_uring(0x56c7, 0x0, 0x0, 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, 0x0, 0x20040040)
ppoll(&(0x7f00000000c0)=[{r4, 0x4040}], 0x1, 0x0, 0x0, 0x0)
wait4(r5, 0x0, 0x8, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)

35.897519852s ago: executing program 0 (id=439):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1802007ffd2f20b1dd156c00000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x2edb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000010100000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

20.745129173s ago: executing program 35 (id=439):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1802007ffd2f20b1dd156c00000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x2edb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000010100000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

10.614269837s ago: executing program 5 (id=635):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
unshare(0x10000580)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x320, 0x18c, 0x203, 0x0, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x74, 0x0, 0x8}, {}, {}, {}, {0x0, 0xfe, 0x0, 0x100}, {0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x5973599c}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x20, 0xcd, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5, 0x1}, {}, {0x0, 0x0, 0xfd, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x0, 0x2}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {0x800}, {}, {0x20, 0x6}, {}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {0x0, 0x4b}, {}, {}, {0x0, 0x0, 0xe2}, {0x4}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0xfc}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x2}, {0x0, 0xb}, {0x4}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x100002, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1000b, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x550)
ioctl$KVM_CAP_EXCEPTION_PAYLOAD(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0xa4, 0x0, 0xfffffffffffffffe})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c0000006800e97800000000fa0000000200000000000000040004"], 0x1c}}, 0x40000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(0xffffffffffffffff, 0x8010aebc, &(0x7f0000000540)={0x1, 0x9000})
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xc805, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0)

9.085622273s ago: executing program 1 (id=636):
socket$key(0xf, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) (async, rerun: 32)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) (async, rerun: 32)
getpgrp(0x0) (async)
openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) (async, rerun: 64)
r0 = getpid() (rerun: 64)
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) (async, rerun: 32)
timerfd_create(0x0, 0x0) (async, rerun: 32)
socket$nl_route(0x10, 0x3, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async)
symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) (async)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0xa14000, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async)
chdir(&(0x7f00000003c0)='./bus\x00') (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) (async)
renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file7/file0\x00', 0x0, 0x2)
getdents64(r1, 0xfffffffffffffffe, 0x29) (async)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) (async)
read$msr(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64)
mkdirat(r1, &(0x7f0000000180)='./dev/sda1\x00', 0x136) (rerun: 64)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) (async)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x40086607, 0x0)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1000800, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5524, &(0x7f00000108c0)="$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")

9.083768744s ago: executing program 7 (id=637):
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x40854}, 0x4844)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@ipv6_newrule={0x1c, 0x20, 0x1, 0x70bd28, 0x35dfdbfc, {0xa, 0x80, 0x10, 0x0, 0x8, 0x0, 0x0, 0x3, 0x17}}, 0x1c}, 0x1, 0x0, 0x0, 0x140000d0}, 0x20048810)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x2, 0x1, 0x0, 0x90, 0x0, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x0, 0x0, 0x20}, {0x6}, [@mbim_extended={0x8, 0x24, 0x1c, 0x3, 0x6, 0x8}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x11, 0x10, 0xe, 0x10, 0x10, 0x10, 0x10, 0x12, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r6 = dup(r5)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

9.083408084s ago: executing program 6 (id=638):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000080)={@multicast1, @rand_addr=0x64010102}, 0xc)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x36}, 0x20000023}, 0x1c)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000280)={0x9})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1df)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f00000000c0)={[{@grpjquota, 0x4a}, {@debug}, {@jqfmt_vfsold}, {@noquota}, {@bsdgroups}, {@usrjquota, 0x22}], [], 0x2c}, 0x84, 0x4ca, &(0x7f0000000e80)="$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")
mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2290034, 0x0)
getegid()
write(r2, &(0x7f0000000000)='3', 0x4e)
shutdown(r2, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000100)={[{0x1088, 0x5, 0x9, 0x2, 0x2, 0x0, 0xe, 0x9d, 0x10, 0x6, 0x4, 0x2, 0x8}, {0x4, 0x6, 0x6, 0x42, 0x5, 0x3, 0x3, 0x2, 0x8, 0x5, 0x10, 0xf, 0x8000000000000001}, {0x6, 0x3, 0x8, 0xa, 0x2, 0x80, 0x80, 0x1, 0xde, 0x3, 0x23, 0x5, 0x7f000}], 0x1ff})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x8, 0x61, 0x200002000001, 0x1, 0x2004c8, 0xfffffffffffffffc, 0x0, 0x36ae, 0x5, 0x6, 0x3, 0x400000000, 0x0, 0xf73c], 0x80a0000})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fstatfs(r4, &(0x7f0000005800)=""/4096)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
pread64(r5, &(0x7f0000000180)=""/59, 0x57, 0xac8c)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

9.082914434s ago: executing program 5 (id=639):
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x0, <r0=>0x0}, 0x6)
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r0, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={r1, 0x20, &(0x7f0000000280)={&(0x7f0000000080)=""/238, 0xffffffffffffff80, 0x0, 0x0}}, 0x1e)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
r2 = socket$xdp(0x2c, 0x3, 0x0)
r3 = creat(&(0x7f0000000000)='./bus\x00', 0x1fe)
write$cgroup_int(r3, &(0x7f0000000540), 0xfffffdd8)
madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15)
writev(r1, 0x0, 0x0)
syz_clone(0x40005100, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', 0x0})
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x12c2, &(0x7f00000007c0)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @void, {@ipv6={0x86dd, @gre_packet={0x6, 0x6, "cb84e0", 0x128c, 0x2f, 0x0, @local, @private1, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0xda, 0x0, [0x5, 0x2], "9bcc03624d4ee56a9379b00aa529c2938a1ba0a609c11b00c48edd9515c257cc9011de98c475b7b25278b3352f2d256d27006e5f9bd4e1fbb7473858c07fbf83c091bedce399a4ce0c6ad0baad4a08d1169a0226ab75ab7bc058c598ac213c292e722917120dc1e43d4b65a3c2fcc70bb8e89ebcba542b427f74b263b2a9f5fe74b37fffe90cec835d64d069b2eeb31ac4b48715c9883d92019740029328b13b55f15b0884c763f67e8a1a87fde7a16c3fc3325c5b0f108aa4fc8c051e831737575020e36a0596525026fa2b2200"/218}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [0x4, 0xf], "80b6064a8fa5550861e8e864c755a7ee7ed52f8226dd70d8761cb8246efed80a4bd60940444c5700d0df593e27bd3780489d4f70c49227830bbf297080fdad8a1cc3fa40c66e329f42a1955277818692b9e0ecfcee655868ac872420802dfcd1fd364634a1c66aa5381410b2ac5ef38284c69c42290a789090cfde7353c68ada248b8a3c4d80f4c090b170143a5873e9d2e9623385e354fd883b07488ba888eaedc45e4dec08cfab675b0a5954785003f36480bcff335b1013c7e10fa9eca5885d6874becbf886aa815f50706e78caaee8fda5445b258f9b802fc315f5ed3d1577287fff"}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [0x6, 0x7bf5, 0x3], "87820736c090a4102dfa3c14e59778fed78563940c868b8f998a9570020fcadf5669e51a9e7735a7aa9c632f84f87014363aabde1fbbf5c1f603d04ac9ed4b8db463f5a84da3127790a05f5f2e68f52551372f6d1aa0faa7eff725965358a63203788b876dcf12666476e751dacb88fe2f53b4b6bb6e79ff4613a33257eb624520a1ae7638c87e3c2c9c3fbf6c7aa562e89020d0af0e3a6ea01921bbf405a3d7be19fae32c244c56f7589419fb3611a1c2015d3004ca24cbc34c291969216f853f86f1f822b6ae8ac6a9ce17b4f63c777e9a8de961f5ce6f18aafa6d4f140d2e573b84ef587562ef782ad275fd6efe0392759e21e112a89803d21a416dff000c48ddc740527407f0ef0d2a5319e557cee20b4a6b2c3f1bbe982be1dd80255bab5b3394741fb1831794b80eaca75a5feac3c16e7b6cef9e30d3cc69a6cafe44c5c3666d44a3a63cb2f3fa9629bab0605800b7af6853c188932d96eaee048370570d3a9bf6c2c28e797c1e7a4b74c4301c4ebc9dfa8546d95d3c6eb72b9d31cb58dd8992dc74f3efc29d968368c47f6f6d054a122e74e5539a0027dd052e9e1ae7047ee3975136a1f34e8d1610204c6d4f5fe23a7b1028f54a8d3e8c36df66dc49b5d2b4098ef74da892608e5324e2b100541dfa45bfac91d21550e51b97a9b7cd28efaec842d5dea0587ade8051a312966a5f840f97e05f4fb4d778be7ecc19665e9ccff39932159cfc848f1974c90f14d429ed712df7fd645963cbf54c9f90d82d337bb8e4f7ed03bc3e6f3c0210c0dbdb1e498a615cc6fa4014b807f82bedec7cf81f23c03589be5c6020a3f24f325804c626e0b4541ab7b496d8268e2d8ae7db07ed6ff8f7d2b68d6aabd0857c8248dc71cea77d4e522804128f7c5a3ea3878634d63b71bbee84faa09d3c240e4602938867b19769b5e5c66de04d55100c23d0fbf260d2865ce33a5f860b6d24c36b1e33ebfe384cde90eb74246a68c77f71c8ea6aa84a238f5ac0748f660267640c9d6a89707708f794bc3592e53f8627d1a20394320e3de9be6f541052963d0b9f5e49bf5ed77c437fba7a36d385f47bd0b06442b134e43756a749f173f58f6edb68bccdd3bdbdfdd9e8269ef83be34e4f9ac5221028db82c30d277b80ec88160f73bb1cddaeb26606aeb6abbf51103f18175f0da1ffc34c3e241389b576f72f80621a1a013668ce8d9176a18da2f25b7a36cc077955bb450ac5dee9f20ce5fb6cf326731aaf14b66ae16e472bf6e028dd7c71e5ee580066e7e112bf36d6ba296748f5b0432b10ecc2516347683b68d3096801cc0b57d41ba9df5c969bfdb6680cdb806346225a1a8a7a254d8a8fde7bd1a5b92aadc1c6c65aaf65bf992e99e3ce2d65e5f0ee2481cbc9779f2d98cec041952f46fe6366ca952a3f9e5764aef42d1cb531081861d8e9e64c593ef0b0240f1d41e111957870920dd08a5620f244dab3eae053d9292ec4953480d0dad2d923ae1cc55ccb0b668f3a7679c2dbece4a36c940be1bcbaae9714f3431329a3563fff22835eb38c53bf818d36fc6264a7a9779b6fa5825f1201169cd207828f5d8d1d310db3334b05ca1120901557b20730a4233e3471521f9f6d91d435919dbe289f6fde57119c1772a850ab4a3cb6bc03fcc5fb464a1ffaa7fb991ab762c4a6a65f67187079b4cf4822710739b76dc1d8d08fe2805f728cd03fb88325c8879d4314c9ef5c3df410a7f425f6d307112757427461a7fc13efca6c3ee21ad8d2206a0303a157acdda87b6c67b3c43cded054cafde1de67194b90020b8cf46871d2c5280f15048f754513496d58c763b41c43420840195e73095b06323af31da0640cc51e932a766984ef38249b82383ede778d388c3d64c39f23c5cc5cb84903be86a601c7191fa6781dec2445da503442b589be805bdbf60c0e3ab760bbf1de34570eb94ca38ab9b5ba4a0710c897f06bc649eb04cb713025edf1b019cbf9a501a2f5c6336610f3162dc6e911c0bea8ac31e4bc4d8d0a78a3c5295410fd5b7bced3630967fb0a975e1fba854e90ae914509c179694fd9474160bfc4ffaa2c13e8f7a5d709373ca47c51ae29aa900ac4f4916988e39e70f45ef2163c51ecb42fefa3c92863baa762fad0dd2b75b9d40239695fb347cc67989ff9dfb3cfee2d0fe83856970838b383c22bed99a68aaad07ead458b55375ea9ffbf3897f8e7a6de85c2fd6db601e024ceb9c1c6cb698c016e9171aa0e824ef8344d67d8523450f98073a6d436f0a42e58c9626324c0673e30da3bd809e07af88f5f6a4563368b74445ff66ad016d44b891adfc50d80ae35b8e842ee0d26cdb97d4aefcad8eb9a711319e20f47d0d6d8c05f646b72f5b8de496e3700a8f021bf8a2b200afc3a6315e8ab53681a00195e382452605173610224466fd2afe95a1d9874bc8d8dd1200c1f633acf2d9c9ade12538150da565d33438c1be30c7a8a5b43eae2825f3c2dc9ec940048e0f53b87670742c2878da27033eb69c56faed9a209f66af8e3d87e7ba898d17823c08036e1c26be6ec875ceee7b9c8381867aa3f5302e470be6e124814937635e7932b6f50f4e52f6afff8cd36c7375e14b215d0ef3bf8a3e0a33bac6b71951201ba5ff773a1b41b9c8e13204e4b7088b39d0af0bf5bd4ef578c32390458ea51dc9955bf0bd8ccc20dc6eaa7b7876737842f89dea6904c1ab82b2112417e06d519848f51a8b56f8b4c112979e8a1516f4dab9375fb862cc023bcf87664ef6fff1ac89799dd764f66e44c6fa5ca726ad4c3f5f7266c72dbb31c4251965a3200bb753aa210d8e37bcd5524c18bd2694e3f9a9ecdbfcb03039a1cd4fc5ed539534f4a1d6da0880ad3f3421ee5d9fad1504ed5ea6dde4d905b53bfe208714496f5d0c0794538c2c47bb989926ac38569123ac7fc07c296a1876a91189b44e58d91d16f540c2790012b8e00c93306d97e1b5ad457878a616730361b1e2fe870fff09a19bc1410a0cc666e5db5a57416ca25dcdf6853fff15254840ac99efc59a4e279c16721cc1cacf47a79025db1e74ae340883b42557f446fc4a9b3a56f6ab4f41d386553589768561783442c8fa4b3281558677cc49f108dc2c09c0aaaec8f768760f2daeb3e5dea50818bfb2851a0c879df95c026f947bcb39c6fc0b405c1dc3bea984180404b37e934cb770a7e9c210de242f31f5bc7ad54b8f096d5a4b579950f71778e1e2f6e768fd4b245cd0d3afc3f6bdcf8cca915cf2ea533cd854e396b4eef48a503a0f1acc621e42db7b368a5b91a96deac7e51088aa99f8a26bf393fd662da191518f161c1ee4cdfd001709d4cfab0501172848aca2d93209bdac7fb4f10dfee91a429b7c4be8f62d3d9c45f49f35f1e060ac54a46db314e0de742489c5f9f35c25c39410c66b886b521ddfbe16ba674ce001cb3e98b4a72445e80cbd3b4ab934a6573dac4a280dc37a11309d04e354393900c37bbbef1970139c629d0b75fef65542b2a51d3bc59f55d1729256ae29a46134d42ddb3c5ff803bf2a5133555cbffc50aca7a8717783b6cf8616a7476e7118d65f01455ddb98885723a9171949cd4cb53fa65e2697e77f625c741a3e772144af09233884a17353d0c54c4d705b96f1c10fa1b9e4bfe3fef22fd614516b518de540def17b83e60b76fdddf5c2b6ec1284ba62d4c3472f475ffd4dea322a61d19b30e36bd4d22182450babbb99b395be466c6a8af078ef1eb289de6bcef2d7fedf7e99acd30d4f8c9a985d88e2b21e281c44eddb19fb6b81f210a45a42136d649c6ca59a7aa9d1346f34c4fed933776fa8e1d7d1c9224f160b854235b3f0dfb7b9c8ff9f48bf0dc273c2cc5e45ed610fafe69ec613308622616a59223b75042b9d935f3efcf15fdd7d6d8904736fe463b8dc6443b64ac4a647b7be1558bd4106f8ab47d20f6812d308a31c6bdcc0e4f67a4e83540e5826db09acaa20d3534ac628d1397708c550ded7e85b91c8f26d0ff9b711e2eb09bb7feb7ebea85fdfe012bcfad6adc5250bf1c2b0d95a2c6570150c888d8672136db81c55120d27b86366f7c0496c321d9276d0b0f45553141d68b8f43e2e9031a2f5321902597b267e370b3946cdc7d8cdc2a57778d2f62f2ce709abd0b7efae788616e63a06f6dd79f338a4ef77c3bc676f15ff76c20be374ec8ab88b8a6867b9f83e43f47ff3ea4a9fb85594a103c2dffb95c0765034ad1b22433604d89565ecaa1868520250364e1d54445451eaf41efa56fb205325879ac7bfbe59bac768537dad3b74437bc05ff63ee77528faea90bca2f4f2f8de9d539834a4f57fefc2e2341395b80fb015f9e5b9f60a727d8e6bb33da6b8201fd9b89d88cdee653c982b32517a4ef9bb6d5391e417925e32e30d6a9a3ca203f51fdc40bf64a3481558dbdb87e95810b8ad8e46641dcddb621aabc4dbc56c3b46f5051896ae1e6ff4298cf4c344cb22dc8468cc61ec2cb2c0039573ba8e6672b512183f36bcf32b7dabd7cfe27b8bda3e57bd1237e8ad5c3bd5a9ff83e4dbfcbde2fffebdab89a2cee2f3b76c53d9b8ec6db5001d6e14605c89fa0ef3e9ff9e2399a8810c12d09529e2d19285642c45431c9bfa90ecd2d7d5e4f2874265f144b46e5e6a52321f6e5d5676110afb45727682fc37346548c464a89cc2a2722a5d76e33008d806c94e5b39f09c31f53aa6f9ae450d5134343e2efd856606eff3fded111599dc58cc1db2f3b0dd1d96d8e39513f54620d80ceb669c65a8afda8eb269afc11c7e585b58a90789452248520ab13616d4ebf736a2b0383be48ea44534d19da40884f761dc3388e5b57185e64f9e91bb3de9d015273554f864ed2ed684153994527383cf17bc8b8370f27926b6529524d53a0d5ac85089adaa80bbc5b84fbe6cc99ab56f1f7fa98dc654a5f203b51149f7cef717bbc05169d46850a93cdcf9d67e044b8cb4920f8f2c17f6437ab491c0a3ca42e0a86df7a58709fe4722646ff3a59671a4c2865e6b096d7c6ce8223e61971f31b9d32ab4b58c0081bd4155eb6f76efbfefb13c1e90db16a6e22e37b182e85e7cb7cd012b35866ca8456f4404c09843660cd9941b97adde68e244343b2e69ee20baa711c1ee07c84de9fe7b3febb4f47a82c453ca1a12d4242dfa72c9960003e371563339b42c4a1541209814de5b79d1671665927c4f8a36a4054adb836dfe9f79df6a9f4c136c29a5f619472f340bd84541bf509759df2c1891e178db786a15d201fab9f62dbd948d1bc62ed5e439dd5560213c553583d8dc8e55cdf4c0d75890c12a1b7e698bb0d148f8ba39e095ed671bd54d563d19338375c135b6386a30fe5cb8377339ba7e68f89cccc0f760bd7e6e5445c7980285c8757a21822b8e33ddd098205dfefe39792adb123d1f3298d478c61e7c11dfea3aa9bf1afb7ce504104c3b261d84c5163505b7e0428efb3f01e1bfe2bdbafa98fd887befff6185163de2be9692da03cfbda6b28295709bfd9f080d87e2e8f31dc050817767101a4d4ee77ce09ccc94fe7194eda2c27e16cd21dc9033d5f61174cc4acedd223f8fbe0f8603faf8732f7e34912650656fb6baad2cc31b7c59ba351d4b1a1e9d401c18c3bbee24f937245dee7241b28549d0c56e7b09740f18760f9f4e51ed03c1db607005a85d10e3e9d90dae2bf9c689c83934c45a0fc0efef62006fdab3e823b0ab049c70ddb2435bffb798bf659839bc2948aad83bb865b2d124bb9db1920b04bb85cee801e04853d84e0823d6eb1ce0fd534d8a25f6a294e03d2e3c1509fc164a5494da2ff2e47"}, {0x8, 0x88be, 0x4, {{0x0, 0x1, 0x6, 0x0, 0x1, 0x3, 0x6, 0xd}, 0x1, {0x3}}}, {0x8, 0x22eb, 0x0, {{0x4, 0x2, 0x2, 0x3, 0x1, 0x2, 0x3, 0x7}, 0x2, {0x4, 0x3a, 0x3, 0x4, 0x1, 0x1, 0x2}}}, {0x8, 0x6558, 0x3, "2893d422ba1b4cda0593db720275320487da34286e5a8149c9b1a9dee4879bf57b51932189f6396233d09956819a709f7e40c05fcb3ed0827816f6491a9118aedf25f9e2b3364ce59660a3ffcfaea7395dbd86a2ba70b4d377411205693d628a7b27581ce7d68f88f8263662935d876059fd97d6639e2205d0c27f60"}}}}}}}, 0x0)
syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000890000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000180)="baf80c66b83a5c488566efbafc0cb010eebad004ed0f013f0f01cf660f3881604866b8479600000f23d80f21f86635400000300f23f80f01df0f30baf80c66b8e882b28c66efbafc0c66ed0fe3d8", 0x4e}], 0x1, 0x1, &(0x7f00000002c0)=[@cr4={0x1, 0x210000}], 0x1)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfc, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc845}, 0x0)
futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0)
r7 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)={0x80000000})
epoll_create1(0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6)

7.47514978s ago: executing program 1 (id=640):
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x2a5c3, 0x0)
fcntl$setlease(r0, 0x400, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
r1 = socket$inet6(0xa, 0x80003, 0x6)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0)
socket(0x10, 0x803, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000600)=@nat={'nat\x00', 0x1b, 0x5, 0x5e0, 0x108, 0x0, 0xffffffff, 0x0, 0x2e8, 0x510, 0x510, 0xffffffff, 0x510, 0x510, 0x5, &(0x7f0000000040), {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xff, 0xff, 0xff, 0xff000000], [0xffffff00, 0xff, 0xff000000], 'dvmrp1\x00', 'geneve0\x00', {0xff}, {0xff}, 0x5e, 0xa6, 0x1, 0x1}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@mcast2, [0xff000000, 0xff000000, 0xffffffff, 0xffffffff], 0x4e22, 0x4e23, 0x4e24, 0x4e24, 0x6, 0x6, 0x1ff, 0x1, 0x1000}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x19, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@rand_addr=0x64010101, @gre_key=0xf3f, @gre_key=0x6}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x1c, @ipv6=@mcast2, @ipv4=@local, @port=0x4e23, @icmp_id=0x66}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffffff, 0xff000000, 0xff000000, 0xffffffff], [0xffffffff, 0xff, 0xff, 0xffffff00], 'batadv0\x00', '\x00', {0xff}, {0xff}, 0x87, 0x7, 0x4, 0x2}, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x7, [0x40, 0x4], 0x0, 0x8, 0x4, [@rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x33}, @private1, @mcast1, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @dev={0xfe, 0x80, '\x00', 0x41}, @private0, @mcast1, @private2, @local, @empty, @empty], 0xb}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x18, @ipv4=@dev={0xac, 0x14, 0x14, 0x3d}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @gre_key=0x9, @gre_key=0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x640)
ioctl$int_in(r1, 0x5452, &(0x7f00000001c0)=0x7ff)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9, 0x7, 0x3, 0xff, 0x800, 0x800, 0x10, 0x2be2, 0x8}}}}]}, 0x58}}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})

7.47475398s ago: executing program 7 (id=641):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000005c0)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000000840)=@vmx={0x102, 0x0, 0x2080, {0x0, 0xffc, {0x1}, 0x0, 0x27b98b77}, {"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", "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"}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x20)
syz_read_part_table(0x5c6, &(0x7f0000000bc0)="$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")

7.47421772s ago: executing program 6 (id=642):
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$'], 0x24}, 0x1, 0x0, 0x0, 0x40854}, 0x4844)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@ipv6_newrule={0x1c, 0x20, 0x1, 0x70bd28, 0x35dfdbfc, {0xa, 0x80, 0x10, 0x0, 0x8, 0x0, 0x0, 0x3, 0x17}}, 0x1c}, 0x1, 0x0, 0x0, 0x140000d0}, 0x20048810)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x2, 0x1, 0x0, 0x90, 0x0, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x0, 0x0, 0x20}, {0x6}, [@mbim_extended={0x8, 0x24, 0x1c, 0x3, 0x6, 0x8}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x11, 0x10, 0xe, 0x10, 0x10, 0x10, 0x10, 0x12, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r4 = dup(0xffffffffffffffff)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

7.47397968s ago: executing program 5 (id=643):
r0 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00')
fchdir(r0)
mmap(&(0x7f00000b1000/0x1000)=nil, 0x1000, 0x300000b, 0x204031, r0, 0x6f422000)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x4})
r2 = syz_usb_connect$rtl8150(0x5, 0x41, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_connect(0x1, 0x7a5, &(0x7f0000000680)=ANY=[@ANYRESHEX=r0], &(0x7f0000000280)={0xa, &(0x7f0000000e40)={0xa, 0x6, 0x250, 0x6, 0x10, 0x7f, 0xff, 0x1}, 0x13e, &(0x7f00000016c0)={0x5, 0xf, 0x13e, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x40, 0x6, 0x7}, @generic={0xe8, 0x10, 0x1, "703e9f40c15a11f49ea72f9440f808b80085b7da2f84c32d3446d9f98741cf1d91164eb0155ab7e247898dc3f23f1a8a4bbec4ae3192e7e2bf9448559aebbf56932f2d28d165461d2de7b0b805ab712314475eae499d3a4c874f9f66e2533ba287b878714148d93c89748c2e47432c885c30aef3f1c83ed8e4b97d42b4fd549cfbd727c8d048095dd54d41917cc3b8e35a27db02b9b0d0cde3a62921d90b6773609f7adefcaf354b783d45a204c174a62e6ada35c0c8a5a7410182012f595365ff204c71670e1d2796aa45367df0e4f8ed93eec2ac6ed0eb62bb8ec5484dac30ac1bc17b8a"}, @ssp_cap={0x18, 0x10, 0xa, 0xc, 0x3, 0x1, 0xf00, 0x8, [0xff, 0xffc050, 0xff0000]}, @ss_container_id={0x14, 0x10, 0x4, 0x10, "4d75ca73d23031880e56709979795136"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x42, 0x7, 0x1, 0x4, 0x1}, @ssp_cap={0x10, 0x10, 0xa, 0x81, 0x1, 0x5, 0xf00, 0x2000, [0xff3f00]}]}, 0x4, [{0xfe, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"]}, {0x4, &(0x7f0000001180)=@lang_id={0x4, 0x3, 0x418}}, {0x4, &(0x7f00000011c0)=@lang_id={0x4, 0x3, 0x4ff}}, {0x4, &(0x7f0000001280)=@lang_id={0x4, 0x3, 0x408}}]})
syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f0000001680)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="000000010000007ad8fb025b549ea6c53960c30f443cfb2b2760e3e9c2bdf9fa840264d9abcbd06b06fd540000bae2d99d50ff2a60768df63e73c51ceda17c477f2bf94035be4439402f9734a1115702c39f9b7757d8ead1578a4e596414fe4527c4649c3890c2a6fd48a59e21115590740d939007aef12fb9c7b41d984c17cab98408b56b1e4268af0450601d13ded081d2b9b20f6e635e15f4d0615db66676d70b951fbfc6780c5b04f79b71e2b64dcf31a2c1752cbfd7e3f887750d988475ed9667e808636ff5a1ff609fc5f6d4a91f653b942531c2286c0352e7e9c86277202f18ffed53"]})
syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="400503000000c76e007e36a1e429595a5823ca31b65c314245ae966326b818edac2fd19f1e7facb7be27d4b4f75cc42e9aabb46a0eb44b4c5e3bdeec86cd1a773c470d88bf9ffca6d07b3e6d9c56e776b5b4d658b1bf1727733ff436d60589a29393b4f85424eddfd7a679a62c4d87b24155ea170ae859e27aa78e98260ab50d05686eea83c1542b992695e27a31f671f6b089dd5590e12f70d5aace0c5f01cfb86e01346b8a70599c9150540fbc52db39fae1d2b88c7edf494d8729a3ec904e8fde1f8853f271f5b107a7"]})
process_vm_writev(r1, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000000400)=""/131, 0x83}], 0x1, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@rr={0x7, 0xb, 0xe7, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}], 0x20}, 0x48854)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0)
ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000080)={0x49db, 0x0, 0xfff9, 0xbfff, 0x16, "ec28a144f13d7607"})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}, 0x1})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae03, 0x9d)
write$binfmt_aout(r3, &(0x7f0000000380)=ANY=[], 0xff6b)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00000001c0)={0x0, 0x9, 0x0, 0x2, 0x12, "1b28000440800037dd15b21f54c23003103000"})
write$FUSE_INIT(r0, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x2d, 0xaca, 0x19000008, 0xffff, 0xa28, 0x4, 0x7, 0x0, 0x0, 0x10, 0x3}}, 0x50)
r4 = syz_open_pts(r3, 0x20800)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)=0x44)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x0)
fcntl$setlease(r6, 0x400, 0x0)
close_range(r5, 0xffffffffffffffff, 0x0)

5.745237846s ago: executing program 1 (id=644):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
unshare(0x10000580)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x320, 0x18c, 0x203, 0x0, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x74, 0x0, 0x8}, {}, {}, {}, {0x0, 0xfe, 0x0, 0x100}, {0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x5973599c}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x20, 0xcd, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5, 0x1}, {}, {0x0, 0x0, 0xfd, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x0, 0x2}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {0x800}, {}, {0x20, 0x6}, {}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {0x0, 0x4b}, {}, {}, {0x0, 0x0, 0xe2}, {0x4}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0xfc}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x2}, {0x0, 0xb}, {0x4}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x100002, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1000b, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x550)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c0000006800e97800000000fa0000000200000000000000040004"], 0x1c}}, 0x40000)
r5 = socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$MSR(&(0x7f0000000140), 0x4, 0x0)
ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r1, 0x8010aebc, &(0x7f0000000540)={0x1, 0x9000})
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0xa000000, 0x0, 0x24008000}, 0x4000)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0)

5.744845716s ago: executing program 7 (id=645):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000a80), 0x101200, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
tkill(0x0, 0x13)
syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000007c0), 0xff, 0x73a, &(0x7f0000000800)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2440, 0x0)
ioctl$BINDER_GET_FROZEN_INFO(r3, 0xc00c620f, &(0x7f0000000240)={r0})
ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000040)={0x2, 0x200000005, 0x0, 0x0})
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x802, &(0x7f0000000500)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=', @ANYRESDEC=0x0])
chdir(&(0x7f0000000000)='./file0\x00')
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0)
ftruncate(r4, 0x8008976)
recvmmsg(r1, &(0x7f0000006cc0)=[{{&(0x7f0000000400)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000005c40)=[{&(0x7f0000000540)=""/145, 0x91}, {&(0x7f0000000600)=""/133, 0x85}, {&(0x7f00000006c0)=""/82, 0x52}, {&(0x7f0000001040)=""/78, 0x4e}, {&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/64, 0x40}], 0x7, &(0x7f0000005cc0)=""/4096, 0x1000}, 0x6}], 0x1, 0x400020c1, &(0x7f0000006d00))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r4, 0x0)
read$FUSE(r4, &(0x7f0000001bc0)={0x2020}, 0x2020)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_usb_connect$uac2(0x0, 0x7b, &(0x7f0000000000)=ANY=[@ANYBLOB="12011102000000401e0400304000010203010902690003016f2004080b020201012006090400000001012000092401090007090001090401000001022000090401010101022000090501090800fd0001082501003c0cc5b4090402000001022000090402010101022000090582090002108c4e0825010401020700"], &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x40e}}]})
r5 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4ea7, 0x0, @local, 0x1}, 0x1c)
sendmsg(r5, &(0x7f00000000c0)={0x0, 0x952b, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

5.744479136s ago: executing program 6 (id=646):
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0x0, 0x2, 0x10}, 0xc)
fallocate(r0, 0x0, 0x7, 0x9)
r1 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000000000)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r2, 0x1, &(0x7f0000000040), 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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")

3.931328412s ago: executing program 1 (id=647):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = add_key$keyring(&(0x7f0000000100), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, r1)
setreuid(0xffffffffffffffff, 0xee00)
keyctl$setperm(0x5, r2, 0x2008)
io_setup(0x5, &(0x7f0000000300)=<r3=>0x0)
r4 = eventfd2(0x0, 0x0)
syz_emit_ethernet(0x88, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd61bc4a0600202f00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0c2088be00060002ff0700007d27010088a800b90080d5db64ec000086dd81"], 0x0)
io_submit(r3, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r4}])
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv4/tcp_ehash_entries\x00', 0x0, 0x0)
read(r5, 0x0, 0x0)
io_pgetevents(r3, 0x2, 0x0, 0x0, 0x0, 0x0)
ppoll(&(0x7f0000000180)=[{r4, 0x81}], 0x1, 0x0, 0x0, 0x0)
r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(r6, 0x0, 0x0)
syz_usb_control_io$hid(r6, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=r2], 0x0}, 0x0)
shutdown(r0, 0x0)

3.930918073s ago: executing program 7 (id=648):
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
lseek(r0, 0x851, 0x0)
sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x64, 0x2, 0x9, 0x0, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7}, @NFCTH_STATUS={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x8001}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x50)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2)
getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x34}}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmmsg$inet(r1, &(0x7f0000010840)=[{{&(0x7f00000002c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @empty}}}, @ip_retopts={{0x34, 0x0, 0x7, {[@timestamp_addr={0x44, 0x24, 0x19, 0x1, 0x5, [{@broadcast, 0xfffffff7}, {@rand_addr=0x64010102, 0xb12a}, {@dev={0xac, 0x14, 0x14, 0xa}, 0x1000}, {@multicast1, 0x5}]}]}}}], 0x58}}], 0x1, 0x40000)
syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344, <r4=>0x41424344}, 0x1, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @random="df00004000", @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, {[@ssrr={0x89, 0x7, 0xa2, [@broadcast]}, @generic={0x44, 0x4, "3be9"}, @cipso={0x86, 0x6, 0x1}]}}, {{0x4e24, 0x0, 0x41424344, r4, 0x0, 0x0, 0x5, 0xc2, 0x8}}}}}}, 0x0)

3.930736502s ago: executing program 6 (id=649):
connect$tipc(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x87)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000005880)={{{@in6=@mcast2, @in=@loopback, 0x0, 0xd8c, 0x0, 0x0, 0xa}, {0x40000000000, 0xfffffffffffffffd, 0x8000000000000, 0x0, 0x0, 0x0, 0x10}, {0x3, 0x0, 0x0, 0x6}, 0x9, 0x0, 0x1, 0x0, 0x2}, {{@in=@empty, 0x1fffffc, 0x33}, 0xa, @in6=@mcast1, 0x3504, 0x0, 0x1, 0x3}}, 0xe8)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c)
syz_usb_connect$uac1(0x0, 0xa7, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902950003010000020904000000010100000a240100000302010213240600000600000800000000000a0000000009240300000000030009240603010102008c09240300fe020404000824050402"], 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
capset(0x0, &(0x7f0000000080)={0x6, 0x6, 0x2005, 0x87, 0xffffffff, 0x40})
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x4, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1}}, @func_proto, @datasec={0x2, 0x2, 0x0, 0xf, 0x2, [{0x4, 0x0, 0x1}], "b923"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x2, [], "921c"}]}, {0x0, [0x0, 0x2e]}}, &(0x7f00000006c0)=""/196, 0x68, 0xc4, 0x1}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x0, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x4800)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4)
connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c)
write(r3, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x80)
r4 = syz_open_dev$usbmon(0x0, 0x7, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)
ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, 0x0)
ioctl$MON_IOCG_STATS(r4, 0x80089203, 0x0)
listen(r2, 0x0)

3.928317723s ago: executing program 5 (id=650):
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x40854}, 0x4844)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@ipv6_newrule={0x1c, 0x20, 0x1, 0x70bd28, 0x35dfdbfc, {0xa, 0x80, 0x10, 0x0, 0x8, 0x0, 0x0, 0x3, 0x17}}, 0x1c}, 0x1, 0x0, 0x0, 0x140000d0}, 0x20048810)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x2, 0x1, 0x0, 0x90, 0x0, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x0, 0x0, 0x20}, {0x6}, [@mbim_extended={0x8, 0x24, 0x1c, 0x3, 0x6, 0x8}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x11, 0x10, 0xe, 0x10, 0x10, 0x10, 0x10, 0x12, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r6 = dup(r5)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

2.022443782s ago: executing program 1 (id=651):
setxattr$incfs_id(&(0x7f0000000180)='./cgroup\x00', &(0x7f00000001c0), 0x0, 0x0, 0x2000000)

2.020047263s ago: executing program 7 (id=652):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000080)={@multicast1, @rand_addr=0x64010102}, 0xc)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000280)={0x9})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1df)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f00000000c0)={[{@grpjquota, 0x4a}, {@debug}, {@jqfmt_vfsold}, {@noquota}, {@bsdgroups}, {@usrjquota, 0x22}], [], 0x2c}, 0x84, 0x4ca, &(0x7f0000000e80)="$eJzs3EtvHEUeAPB/tx+JN/Ham90F8oAYAsLiYcfO88AFBFIuSCAQCkdjO1GI81BspCSysEEoHFE+AXBE4hNwggsCTiCuIK4IKUK+JHBAjXqmxxl7xhOPM/aQzO8njV3dXd1V1VVld1WpJ4CONZT/SCJ2RsRPETFQ3lwZYaj869bS/OQfS/OTSWTZa78npXg3l+YnK1Er5+0oNobTiPSDJPbWSXf2ytWzEzMz05eK7dG5cxdHZ69cffbMuYnT06enz48fP374UN+xo+NHWlLO/jyve969sG/3iTevvzx58vpb336e5zcrjm+vOWOwyRS6avYMxdDKe1nliSav/k/XXxVOutuYEZqSt9q8unpK/X8guuJ25Q3ES++3NXPApsqyLNtWs3f5f9liVi1JyicA94lEl4YOVflHf3MpH6nOT1aP5zvBjeejNALKy32r+JSPdEeaj+EHy2OjzfK/iDi5+OfH+SdWzacAAGyGL/Pnn2fKzx2VT/lIGg9Uxft3sTY0GBH/iYhdEfHf4vnl/xGluA9GxEMrrr5wx/SHVm3XPv/80Lfhwq1D/vz3XLG2tfL5L61EGewqtvpL5e9JTp2ZmT5Y3JPh6NmWb4/VXnp5Wu2rF3/8aK30h6qe//JPnn7lWbDIx2/dqybopibmJu623BU33itN6S3Ulj9ZXgnIRwa7I2LPBq6f37MzT322r+7Byi1uWP4GWrDOlH0a8WS5/hdjVflzvUWo/vrk2LGj40dGt8fM9MHRSquo9d33114pgjVDiRX1f7G/ufK3QF7//1pu/+Xf5SPLK5eDSfV67WzzaVz7+cM1xzQbbf+9yeulcG+x7/LE3NylsYjeZLF2//jtcy9P9K2In5d/+ED9/r8r4q9PivP2RkTeiB+OiEciYn+R90cj4rGIONCg/N+88Pjb9ep+feXfXHn5p+r+/Vur/psPdJ39+ou10l9f/R8uhYaLPVMTc7XL9ausN4N3c+8AAADgXrE/InZGko4U03E7I01HRiJ2LM+gzM49ferCO+enyu8IDEZPWpnpGqiaDx0r5obz7fys8art/Pih0rxxlmVZX2l7ZPLCTH97iw4db8ca/T/3a+0rLcD9pql1tLXeaAPuSRtfR89amg9g63lfGzqX/g+da939fzPfhAPaol7/X4i41YasAFusXv9/ow35ALae8T90Lv0fOldt/0/bkg9gS93Ne/2NArtONIiTdG9OomsH0mj8LQCDEc1d8Jc0ojU57GppSfvWUafboxVpRXrHON0Nvojh1dobnkffoiaRbm3zaxzYFhF3aL3LjW2hEri62Rlr918mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA1vg7AAD//4mc0tI=")
mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2290034, 0x0)
getegid()
write(r3, &(0x7f0000000000)='3', 0x4e)
shutdown(r3, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000100)={[{0x1088, 0x5, 0x9, 0x2, 0x2, 0x0, 0xe, 0x9d, 0x10, 0x6, 0x4, 0x2, 0x8}, {0x4, 0x6, 0x6, 0x42, 0x5, 0x3, 0x3, 0x2, 0x8, 0x5, 0x10, 0xf, 0x8000000000000001}, {0x6, 0x3, 0x8, 0xa, 0x2, 0x80, 0x80, 0x1, 0xde, 0x3, 0x23, 0x5, 0x7f000}], 0x1ff})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x8, 0x61, 0x200002000001, 0x1, 0x2004c8, 0xfffffffffffffffc, 0x0, 0x36ae, 0x5, 0x6, 0x3, 0x400000000, 0x0, 0xf73c], 0x80a0000})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fstatfs(r5, &(0x7f0000005800)=""/4096)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0)
pread64(r6, &(0x7f0000000180)=""/59, 0x57, 0xac8c)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

2.019644093s ago: executing program 6 (id=653):
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x0, <r0=>0x0}, 0x6)
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r0, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={r1, 0x20, &(0x7f0000000280)={&(0x7f0000000080)=""/238, 0xffffffffffffff80, 0x0, 0x0}}, 0x1e)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
r2 = socket$xdp(0x2c, 0x3, 0x0)
r3 = creat(&(0x7f0000000000)='./bus\x00', 0x1fe)
write$cgroup_int(r3, &(0x7f0000000540), 0xfffffdd8)
madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15)
writev(r1, 0x0, 0x0)
syz_clone(0x40005100, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', 0x0})
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x12c2, &(0x7f00000007c0)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @void, {@ipv6={0x86dd, @gre_packet={0x6, 0x6, "cb84e0", 0x128c, 0x2f, 0x0, @local, @private1, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0xda, 0x0, [0x5, 0x2], "9bcc03624d4ee56a9379b00aa529c2938a1ba0a609c11b00c48edd9515c257cc9011de98c475b7b25278b3352f2d256d27006e5f9bd4e1fbb7473858c07fbf83c091bedce399a4ce0c6ad0baad4a08d1169a0226ab75ab7bc058c598ac213c292e722917120dc1e43d4b65a3c2fcc70bb8e89ebcba542b427f74b263b2a9f5fe74b37fffe90cec835d64d069b2eeb31ac4b48715c9883d92019740029328b13b55f15b0884c763f67e8a1a87fde7a16c3fc3325c5b0f108aa4fc8c051e831737575020e36a0596525026fa2b2200"/218}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [0x4, 0xf], "80b6064a8fa5550861e8e864c755a7ee7ed52f8226dd70d8761cb8246efed80a4bd60940444c5700d0df593e27bd3780489d4f70c49227830bbf297080fdad8a1cc3fa40c66e329f42a1955277818692b9e0ecfcee655868ac872420802dfcd1fd364634a1c66aa5381410b2ac5ef38284c69c42290a789090cfde7353c68ada248b8a3c4d80f4c090b170143a5873e9d2e9623385e354fd883b07488ba888eaedc45e4dec08cfab675b0a5954785003f36480bcff335b1013c7e10fa9eca5885d6874becbf886aa815f50706e78caaee8fda5445b258f9b802fc315f5ed3d1577287fff"}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [0x6, 0x7bf5, 0x3], "87820736c090a4102dfa3c14e59778fed78563940c868b8f998a9570020fcadf5669e51a9e7735a7aa9c632f84f87014363aabde1fbbf5c1f603d04ac9ed4b8db463f5a84da3127790a05f5f2e68f52551372f6d1aa0faa7eff725965358a63203788b876dcf12666476e751dacb88fe2f53b4b6bb6e79ff4613a33257eb624520a1ae7638c87e3c2c9c3fbf6c7aa562e89020d0af0e3a6ea01921bbf405a3d7be19fae32c244c56f7589419fb3611a1c2015d3004ca24cbc34c291969216f853f86f1f822b6ae8ac6a9ce17b4f63c777e9a8de961f5ce6f18aafa6d4f140d2e573b84ef587562ef782ad275fd6efe0392759e21e112a89803d21a416dff000c48ddc740527407f0ef0d2a5319e557cee20b4a6b2c3f1bbe982be1dd80255bab5b3394741fb1831794b80eaca75a5feac3c16e7b6cef9e30d3cc69a6cafe44c5c3666d44a3a63cb2f3fa9629bab0605800b7af6853c188932d96eaee048370570d3a9bf6c2c28e797c1e7a4b74c4301c4ebc9dfa8546d95d3c6eb72b9d31cb58dd8992dc74f3efc29d968368c47f6f6d054a122e74e5539a0027dd052e9e1ae7047ee3975136a1f34e8d1610204c6d4f5fe23a7b1028f54a8d3e8c36df66dc49b5d2b4098ef74da892608e5324e2b100541dfa45bfac91d21550e51b97a9b7cd28efaec842d5dea0587ade8051a312966a5f840f97e05f4fb4d778be7ecc19665e9ccff39932159cfc848f1974c90f14d429ed712df7fd645963cbf54c9f90d82d337bb8e4f7ed03bc3e6f3c0210c0dbdb1e498a615cc6fa4014b807f82bedec7cf81f23c03589be5c6020a3f24f325804c626e0b4541ab7b496d8268e2d8ae7db07ed6ff8f7d2b68d6aabd0857c8248dc71cea77d4e522804128f7c5a3ea3878634d63b71bbee84faa09d3c240e4602938867b19769b5e5c66de04d55100c23d0fbf260d2865ce33a5f860b6d24c36b1e33ebfe384cde90eb74246a68c77f71c8ea6aa84a238f5ac0748f660267640c9d6a89707708f794bc3592e53f8627d1a20394320e3de9be6f541052963d0b9f5e49bf5ed77c437fba7a36d385f47bd0b06442b134e43756a749f173f58f6edb68bccdd3bdbdfdd9e8269ef83be34e4f9ac5221028db82c30d277b80ec88160f73bb1cddaeb26606aeb6abbf51103f18175f0da1ffc34c3e241389b576f72f80621a1a013668ce8d9176a18da2f25b7a36cc077955bb450ac5dee9f20ce5fb6cf326731aaf14b66ae16e472bf6e028dd7c71e5ee580066e7e112bf36d6ba296748f5b0432b10ecc2516347683b68d3096801cc0b57d41ba9df5c969bfdb6680cdb806346225a1a8a7a254d8a8fde7bd1a5b92aadc1c6c65aaf65bf992e99e3ce2d65e5f0ee2481cbc9779f2d98cec041952f46fe6366ca952a3f9e5764aef42d1cb531081861d8e9e64c593ef0b0240f1d41e111957870920dd08a5620f244dab3eae053d9292ec4953480d0dad2d923ae1cc55ccb0b668f3a7679c2dbece4a36c940be1bcbaae9714f3431329a3563fff22835eb38c53bf818d36fc6264a7a9779b6fa5825f1201169cd207828f5d8d1d310db3334b05ca1120901557b20730a4233e3471521f9f6d91d435919dbe289f6fde57119c1772a850ab4a3cb6bc03fcc5fb464a1ffaa7fb991ab762c4a6a65f67187079b4cf4822710739b76dc1d8d08fe2805f728cd03fb88325c8879d4314c9ef5c3df410a7f425f6d307112757427461a7fc13efca6c3ee21ad8d2206a0303a157acdda87b6c67b3c43cded054cafde1de67194b90020b8cf46871d2c5280f15048f754513496d58c763b41c43420840195e73095b06323af31da0640cc51e932a766984ef38249b82383ede778d388c3d64c39f23c5cc5cb84903be86a601c7191fa6781dec2445da503442b589be805bdbf60c0e3ab760bbf1de34570eb94ca38ab9b5ba4a0710c897f06bc649eb04cb713025edf1b019cbf9a501a2f5c6336610f3162dc6e911c0bea8ac31e4bc4d8d0a78a3c5295410fd5b7bced3630967fb0a975e1fba854e90ae914509c179694fd9474160bfc4ffaa2c13e8f7a5d709373ca47c51ae29aa900ac4f4916988e39e70f45ef2163c51ecb42fefa3c92863baa762fad0dd2b75b9d40239695fb347cc67989ff9dfb3cfee2d0fe83856970838b383c22bed99a68aaad07ead458b55375ea9ffbf3897f8e7a6de85c2fd6db601e024ceb9c1c6cb698c016e9171aa0e824ef8344d67d8523450f98073a6d436f0a42e58c9626324c0673e30da3bd809e07af88f5f6a4563368b74445ff66ad016d44b891adfc50d80ae35b8e842ee0d26cdb97d4aefcad8eb9a711319e20f47d0d6d8c05f646b72f5b8de496e3700a8f021bf8a2b200afc3a6315e8ab53681a00195e382452605173610224466fd2afe95a1d9874bc8d8dd1200c1f633acf2d9c9ade12538150da565d33438c1be30c7a8a5b43eae2825f3c2dc9ec940048e0f53b87670742c2878da27033eb69c56faed9a209f66af8e3d87e7ba898d17823c08036e1c26be6ec875ceee7b9c8381867aa3f5302e470be6e124814937635e7932b6f50f4e52f6afff8cd36c7375e14b215d0ef3bf8a3e0a33bac6b71951201ba5ff773a1b41b9c8e13204e4b7088b39d0af0bf5bd4ef578c32390458ea51dc9955bf0bd8ccc20dc6eaa7b7876737842f89dea6904c1ab82b2112417e06d519848f51a8b56f8b4c112979e8a1516f4dab9375fb862cc023bcf87664ef6fff1ac89799dd764f66e44c6fa5ca726ad4c3f5f7266c72dbb31c4251965a3200bb753aa210d8e37bcd5524c18bd2694e3f9a9ecdbfcb03039a1cd4fc5ed539534f4a1d6da0880ad3f3421ee5d9fad1504ed5ea6dde4d905b53bfe208714496f5d0c0794538c2c47bb989926ac38569123ac7fc07c296a1876a91189b44e58d91d16f540c2790012b8e00c93306d97e1b5ad457878a616730361b1e2fe870fff09a19bc1410a0cc666e5db5a57416ca25dcdf6853fff15254840ac99efc59a4e279c16721cc1cacf47a79025db1e74ae340883b42557f446fc4a9b3a56f6ab4f41d386553589768561783442c8fa4b3281558677cc49f108dc2c09c0aaaec8f768760f2daeb3e5dea50818bfb2851a0c879df95c026f947bcb39c6fc0b405c1dc3bea984180404b37e934cb770a7e9c210de242f31f5bc7ad54b8f096d5a4b579950f71778e1e2f6e768fd4b245cd0d3afc3f6bdcf8cca915cf2ea533cd854e396b4eef48a503a0f1acc621e42db7b368a5b91a96deac7e51088aa99f8a26bf393fd662da191518f161c1ee4cdfd001709d4cfab0501172848aca2d93209bdac7fb4f10dfee91a429b7c4be8f62d3d9c45f49f35f1e060ac54a46db314e0de742489c5f9f35c25c39410c66b886b521ddfbe16ba674ce001cb3e98b4a72445e80cbd3b4ab934a6573dac4a280dc37a11309d04e354393900c37bbbef1970139c629d0b75fef65542b2a51d3bc59f55d1729256ae29a46134d42ddb3c5ff803bf2a5133555cbffc50aca7a8717783b6cf8616a7476e7118d65f01455ddb98885723a9171949cd4cb53fa65e2697e77f625c741a3e772144af09233884a17353d0c54c4d705b96f1c10fa1b9e4bfe3fef22fd614516b518de540def17b83e60b76fdddf5c2b6ec1284ba62d4c3472f475ffd4dea322a61d19b30e36bd4d22182450babbb99b395be466c6a8af078ef1eb289de6bcef2d7fedf7e99acd30d4f8c9a985d88e2b21e281c44eddb19fb6b81f210a45a42136d649c6ca59a7aa9d1346f34c4fed933776fa8e1d7d1c9224f160b854235b3f0dfb7b9c8ff9f48bf0dc273c2cc5e45ed610fafe69ec613308622616a59223b75042b9d935f3efcf15fdd7d6d8904736fe463b8dc6443b64ac4a647b7be1558bd4106f8ab47d20f6812d308a31c6bdcc0e4f67a4e83540e5826db09acaa20d3534ac628d1397708c550ded7e85b91c8f26d0ff9b711e2eb09bb7feb7ebea85fdfe012bcfad6adc5250bf1c2b0d95a2c6570150c888d8672136db81c55120d27b86366f7c0496c321d9276d0b0f45553141d68b8f43e2e9031a2f5321902597b267e370b3946cdc7d8cdc2a57778d2f62f2ce709abd0b7efae788616e63a06f6dd79f338a4ef77c3bc676f15ff76c20be374ec8ab88b8a6867b9f83e43f47ff3ea4a9fb85594a103c2dffb95c0765034ad1b22433604d89565ecaa1868520250364e1d54445451eaf41efa56fb205325879ac7bfbe59bac768537dad3b74437bc05ff63ee77528faea90bca2f4f2f8de9d539834a4f57fefc2e2341395b80fb015f9e5b9f60a727d8e6bb33da6b8201fd9b89d88cdee653c982b32517a4ef9bb6d5391e417925e32e30d6a9a3ca203f51fdc40bf64a3481558dbdb87e95810b8ad8e46641dcddb621aabc4dbc56c3b46f5051896ae1e6ff4298cf4c344cb22dc8468cc61ec2cb2c0039573ba8e6672b512183f36bcf32b7dabd7cfe27b8bda3e57bd1237e8ad5c3bd5a9ff83e4dbfcbde2fffebdab89a2cee2f3b76c53d9b8ec6db5001d6e14605c89fa0ef3e9ff9e2399a8810c12d09529e2d19285642c45431c9bfa90ecd2d7d5e4f2874265f144b46e5e6a52321f6e5d5676110afb45727682fc37346548c464a89cc2a2722a5d76e33008d806c94e5b39f09c31f53aa6f9ae450d5134343e2efd856606eff3fded111599dc58cc1db2f3b0dd1d96d8e39513f54620d80ceb669c65a8afda8eb269afc11c7e585b58a90789452248520ab13616d4ebf736a2b0383be48ea44534d19da40884f761dc3388e5b57185e64f9e91bb3de9d015273554f864ed2ed684153994527383cf17bc8b8370f27926b6529524d53a0d5ac85089adaa80bbc5b84fbe6cc99ab56f1f7fa98dc654a5f203b51149f7cef717bbc05169d46850a93cdcf9d67e044b8cb4920f8f2c17f6437ab491c0a3ca42e0a86df7a58709fe4722646ff3a59671a4c2865e6b096d7c6ce8223e61971f31b9d32ab4b58c0081bd4155eb6f76efbfefb13c1e90db16a6e22e37b182e85e7cb7cd012b35866ca8456f4404c09843660cd9941b97adde68e244343b2e69ee20baa711c1ee07c84de9fe7b3febb4f47a82c453ca1a12d4242dfa72c9960003e371563339b42c4a1541209814de5b79d1671665927c4f8a36a4054adb836dfe9f79df6a9f4c136c29a5f619472f340bd84541bf509759df2c1891e178db786a15d201fab9f62dbd948d1bc62ed5e439dd5560213c553583d8dc8e55cdf4c0d75890c12a1b7e698bb0d148f8ba39e095ed671bd54d563d19338375c135b6386a30fe5cb8377339ba7e68f89cccc0f760bd7e6e5445c7980285c8757a21822b8e33ddd098205dfefe39792adb123d1f3298d478c61e7c11dfea3aa9bf1afb7ce504104c3b261d84c5163505b7e0428efb3f01e1bfe2bdbafa98fd887befff6185163de2be9692da03cfbda6b28295709bfd9f080d87e2e8f31dc050817767101a4d4ee77ce09ccc94fe7194eda2c27e16cd21dc9033d5f61174cc4acedd223f8fbe0f8603faf8732f7e34912650656fb6baad2cc31b7c59ba351d4b1a1e9d401c18c3bbee24f937245dee7241b28549d0c56e7b09740f18760f9f4e51ed03c1db607005a85d10e3e9d90dae2bf9c689c83934c45a0fc0efef62006fdab3e823b0ab049c70ddb2435bffb798bf659839bc2948aad83bb865b2d124bb9db1920b04bb85cee801e04853d84e0823d6eb1ce0fd534d8a25f6a294e03d2e3c1509fc164a5494da2ff2e47"}, {0x8, 0x88be, 0x4, {{0x0, 0x1, 0x6, 0x0, 0x1, 0x3, 0x6, 0xd}, 0x1, {0x3}}}, {0x8, 0x22eb, 0x0, {{0x4, 0x2, 0x2, 0x3, 0x1, 0x2, 0x3, 0x7}, 0x2, {0x4, 0x3a, 0x3, 0x4, 0x1, 0x1, 0x2}}}, {0x8, 0x6558, 0x3, "2893d422ba1b4cda0593db720275320487da34286e5a8149c9b1a9dee4879bf57b51932189f6396233d09956819a709f7e40c05fcb3ed0827816f6491a9118aedf25f9e2b3364ce59660a3ffcfaea7395dbd86a2ba70b4d377411205693d628a7b27581ce7d68f88f8263662935d876059fd97d6639e2205d0c27f60"}}}}}}}, 0x0)
syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000890000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000180)="baf80c66b83a5c488566efbafc0cb010eebad004ed0f013f0f01cf660f3881604866b8479600000f23d80f21f86635400000300f23f80f01df0f30baf80c66b8e882b28c66efbafc0c66ed0fe3d8", 0x4e}], 0x1, 0x1, &(0x7f00000002c0)=[@cr4={0x1, 0x210000}], 0x1)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfc, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc845}, 0x0)
futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0)
r7 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)={0x80000000})
epoll_create1(0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6)

2.018538663s ago: executing program 5 (id=654):
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x2a5c3, 0x0)
fcntl$setlease(r0, 0x400, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
r1 = socket$inet6(0xa, 0x80003, 0x6)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000600)=@nat={'nat\x00', 0x1b, 0x5, 0x5e0, 0x108, 0x0, 0xffffffff, 0x0, 0x2e8, 0x510, 0x510, 0xffffffff, 0x510, 0x510, 0x5, &(0x7f0000000040), {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xff, 0xff, 0xff, 0xff000000], [0xffffff00, 0xff, 0xff000000], 'dvmrp1\x00', 'geneve0\x00', {0xff}, {0xff}, 0x5e, 0xa6, 0x1, 0x1}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@mcast2, [0xff000000, 0xff000000, 0xffffffff, 0xffffffff], 0x4e22, 0x4e23, 0x4e24, 0x4e24, 0x6, 0x6, 0x1ff, 0x1, 0x1000}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x19, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@rand_addr=0x64010101, @gre_key=0xf3f, @gre_key=0x6}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x1c, @ipv6=@mcast2, @ipv4=@local, @port=0x4e23, @icmp_id=0x66}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffffff, 0xff000000, 0xff000000, 0xffffffff], [0xffffffff, 0xff, 0xff, 0xffffff00], 'batadv0\x00', '\x00', {0xff}, {0xff}, 0x87, 0x7, 0x4, 0x2}, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x7, [0x40, 0x4], 0x0, 0x8, 0x4, [@rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x33}, @private1, @mcast1, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @dev={0xfe, 0x80, '\x00', 0x41}, @private0, @mcast1, @private2, @local, @empty, @empty], 0xb}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x18, @ipv4=@dev={0xac, 0x14, 0x14, 0x3d}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @gre_key=0x9, @gre_key=0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x640)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001440)=0xfffffffffffffd9e)
ioctl$int_in(r1, 0x5452, &(0x7f00000001c0)=0x7ff)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9, 0x7, 0x3, 0xff, 0x800, 0x800, 0x10, 0x2be2, 0x8}}}}]}, 0x58}}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})

2.677449ms ago: executing program 1 (id=655):
syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040490d00700100010203010902270001010080320904000003080650000705010200020007058202"], 0x0)
syz_mount_image$erofs(&(0x7f0000000100), &(0x7f0000000580)='./file2\x00', 0x2000000, &(0x7f0000000200)=ANY=[], 0x1, 0x209, &(0x7f0000000a80)="$eJzslL9rFEEUx79vbm+TExFsUthYKKho9nb3UNKkiCBYiZD4q9LDrCHeJieXFcyBRbCx0c5CsLHwH7BIkcrCzn9A0EIFwcKUtq7Mztxm9odZL+xVvg9k8t2ZeTPvfW/3gWGY/5ZvX399eXZxbukcgMO/YwWAHw2ASO0Rxv7PLx+efTF/6dXbT2/erx95vJM/T4YkBxgT0/vcbwF4t9BAlN6UicZJ/X8JItXXIHBG6xsgOFrfgcB1rQMQbml939B9ud9x7q2GgXO3Hy5L4crBk4Mvh04+v90twrJ+lvaQsb6xOex1wzAYGMLSayVLBxLpZb2Zgn9Nmd+CwLyRn3Tx5tMnW/J55I1r+OdBwNNFdEBY1PNzmBp5oywx6j9m7Z3fKNRfWq1+k1BV5HQdHpWKo7NjRk1lvK0pDSAz08TeknRyQrVnhFXbu1gmrvxrFc9b9blqiJhyM0BFVHOfr3dmd+dDMep7HakSDh5uu5P6BVsY9kSVY+ML4OO26h/xa8Ipoz9ZxjfWjtYetDc2h7Ora92VYCVY9/3OBZfgnvfbSSNSo95NoFz/s9BK+tMh4/xmoUsqbGHjUTeKBp4abbLRQhQN/OTZNzru4nb/520dFuEygBOjDABb/6mJbEZkqz0izfZ04y/pMAzDMAzDMAzDMAzDMAzDjMlxEOJq/KvJ7j8BAAD//xK2aU0=")

558.6µs ago: executing program 7 (id=656):
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$'], 0x24}, 0x1, 0x0, 0x0, 0x40854}, 0x4844)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@ipv6_newrule={0x1c, 0x20, 0x1, 0x70bd28, 0x35dfdbfc, {0xa, 0x80, 0x10, 0x0, 0x8, 0x0, 0x0, 0x3, 0x17}}, 0x1c}, 0x1, 0x0, 0x0, 0x140000d0}, 0x20048810)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x2, 0x1, 0x0, 0x90, 0x0, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x0, 0x0, 0x20}, {0x6}, [@mbim_extended={0x8, 0x24, 0x1c, 0x3, 0x6, 0x8}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x11, 0x10, 0xe, 0x10, 0x10, 0x10, 0x10, 0x12, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r4 = dup(0xffffffffffffffff)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

266.32µs ago: executing program 6 (id=657):
fallocate(0xffffffffffffffff, 0x0, 0xfff, 0x9)
r0 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r1, 0x1, &(0x7f0000000040), 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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")

0s ago: executing program 5 (id=658):
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x280440e, &(0x7f0000000180)={[{@debug}, {@test_dummy_encryption_v1}, {@inlinecrypt}, {@delalloc}, {@noinit_itable}, {@norecovery}, {@minixdf}, {@nodioread_nolock}, {@errors_remount}, {@nomblk_io_submit}, {@usrquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0x1, 0xbdb, &(0x7f0000001000)="$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")
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x400007, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x2006}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4c}, 0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x535081, 0x484)
write$rfkill(r1, &(0x7f0000000080)={0x7, 0x6, 0x3}, 0x8)

kernel console output (not intermixed with test programs):

 has no interfaces?
[   54.774406][   T65] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   54.783740][   T65] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   54.795449][   T65] usb 1-1: config 0 descriptor??
[   54.860622][   T28] audit: type=1400 audit(1790301999.165:284): avc:  denied  { bpf } for  pid=985 comm="syz.5.172" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   54.906979][  T981] FAULT_INJECTION: forcing a failure.
[   54.906979][  T981] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   54.931784][  T981] CPU: 0 PID: 981 Comm: syz.1.170 Not tainted syzkaller #0
[   54.939012][  T981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   54.949071][  T981] Call Trace:
[   54.952341][  T981]  <TASK>
[   54.955267][  T981]  __dump_stack+0x21/0x24
[   54.959601][  T981]  dump_stack_lvl+0x110/0x170
[   54.964277][  T981]  ? __cfi_dump_stack_lvl+0x8/0x8
[   54.969309][  T981]  ? security_inode_permission+0xb5/0x110
[   54.975030][  T981]  dump_stack+0x15/0x24
[   54.979187][  T981]  should_fail_ex+0x3bf/0x510
[   54.983856][  T981]  should_fail+0xb/0x10
[   54.988008][  T981]  should_fail_usercopy+0x1a/0x20
[   54.993028][  T981]  _copy_from_user+0x1e/0xc0
[   54.997624][  T981]  csum_and_copy_from_iter+0x204/0x12b0
[   55.003167][  T981]  ? __cfi_csum_and_copy_from_iter+0x10/0x10
[   55.006210][  T222] usb 1-1: USB disconnect, device number 4
[   55.009144][  T981]  ? __kasan_slab_alloc+0x72/0x80
[   55.009170][  T981]  ? avc_alloc_node+0x83/0x4b0
[   55.009189][  T981]  ip_generic_getfrag+0x150/0x2e0
[   55.029703][  T981]  ? __cfi_ip_generic_getfrag+0x10/0x10
[   55.035255][  T981]  __ip_append_data+0x19a1/0x3520
[   55.040286][  T981]  ? __cfi_ip_generic_getfrag+0x10/0x10
[   55.045829][  T981]  ? ip_setup_cork+0x840/0x840
[   55.050587][  T981]  ? lock_sock_nested+0x212/0x290
[   55.055609][  T981]  ip_append_data+0x125/0x1a0
[   55.060281][  T981]  ? __cfi_ip_generic_getfrag+0x10/0x10
[   55.065823][  T981]  udp_sendmsg+0x4eb/0x2170
[   55.070323][  T981]  ? __kernel_text_address+0xd/0x30
[   55.075519][  T981]  ? unwind_get_return_address+0x4d/0x90
[   55.081148][  T981]  ? avc_has_perm+0x163/0x250
[   55.085822][  T981]  ? __cfi_ip_generic_getfrag+0x10/0x10
[   55.091364][  T981]  ? __cfi_udp_sendmsg+0x10/0x10
[   55.096302][  T981]  ? selinux_socket_sendmsg+0x22f/0x340
[   55.101849][  T981]  ? inet_send_prepare+0x60/0x4d0
[   55.106874][  T981]  inet_sendmsg+0xb6/0xd0
[   55.111206][  T981]  sock_write_iter+0x2ea/0x3f0
[   55.115961][  T981]  ? __cfi_sock_write_iter+0x10/0x10
[   55.121248][  T981]  ? fsnotify_perm+0x67/0x5b0
[   55.125934][  T981]  ? security_file_permission+0x8a/0xb0
[   55.131483][  T981]  vfs_write+0x5ef/0xd00
[   55.135721][  T981]  ? __cfi_vfs_write+0x10/0x10
[   55.140476][  T981]  ? __fget_files+0x2d1/0x330
[   55.145149][  T981]  ? __fdget_pos+0x1f2/0x380
[   55.149736][  T981]  ? ksys_write+0x70/0x260
[   55.154152][  T981]  ksys_write+0x14a/0x260
[   55.158478][  T981]  ? __cfi_ksys_write+0x10/0x10
[   55.163327][  T981]  ? debug_smp_processor_id+0x17/0x20
[   55.168695][  T981]  __x64_sys_write+0x7b/0x90
[   55.173280][  T981]  x64_sys_call+0x27b/0x9a0
[   55.177783][  T981]  do_syscall_64+0x4c/0xa0
[   55.182199][  T981]  ? clear_bhb_loop+0x30/0x80
[   55.186869][  T981]  ? clear_bhb_loop+0x30/0x80
[   55.191546][  T981]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   55.197430][  T981] RIP: 0033:0x7f9fe5f9e159
[   55.201843][  T981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   55.221451][  T981] RSP: 002b:00007f9fe6e14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   55.229876][  T981] RAX: ffffffffffffffda RBX: 00007f9fe6225fa0 RCX: 00007f9fe5f9e159
[   55.237857][  T981] RDX: 000000000000fdef RSI: 0000200000000300 RDI: 0000000000000004
[   55.245838][  T981] RBP: 00007f9fe6e14090 R08: 0000000000000000 R09: 0000000000000000
[   55.253805][  T981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   55.261778][  T981] R13: 00007f9fe6226038 R14: 00007f9fe6225fa0 R15: 00007ffc6a9b6978
[   55.269757][  T981]  </TASK>
[   55.409487][  T222] usb 2-1: USB disconnect, device number 5
[   55.533974][   T28] audit: type=1400 audit(1790301999.835:285): avc:  denied  { create } for  pid=991 comm="syz.0.173" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   55.562548][   T28] audit: type=1400 audit(1790301999.855:286): avc:  denied  { read } for  pid=991 comm="syz.0.173" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   55.585463][   T28] audit: type=1400 audit(1790301999.855:287): avc:  denied  { open } for  pid=991 comm="syz.0.173" path="/dev/kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   55.608515][   T28] audit: type=1400 audit(1790301999.855:288): avc:  denied  { ioctl } for  pid=991 comm="syz.0.173" path="/dev/kvm" dev="devtmpfs" ino=83 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   55.787883][  T988] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[   55.877470][  T380] EXT4-fs (loop5): unmounting filesystem.
[   55.889855][  T997] loop6: detected capacity change from 0 to 128
[   55.943918][  T999] loop5: detected capacity change from 0 to 512
[   55.973140][  T997] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[   55.996057][  T997] ext4 filesystem being mounted at /28/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   56.007959][ T1009] loop5: detected capacity change from 0 to 512
[   56.034995][  T524] EXT4-fs (loop6): unmounting filesystem.
[   56.083970][ T1009] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.179: bg 0: block 184: padding at end of block bitmap is not set
[   56.098448][ T1009] EXT4-fs (loop5): Remounting filesystem read-only
[   56.105025][ T1009] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6180: Corrupt filesystem
[   56.105829][ T1016] 9pnet: p9_errstr2errno: server reported unknown error ���00000000000000000003
[   56.114322][ T1009] EXT4-fs (loop5): Remounting filesystem read-only
[   56.129930][ T1009] EXT4-fs (loop5): 1 truncate cleaned up
[   56.135576][ T1009] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[   56.141103][ T1017] x_tables: duplicate underflow at hook 1
[   56.144533][ T1009] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   56.160710][  T439] EXT4-fs error (device loop5): ext4_release_dquot:6864: comm kworker/u4:10: Failed to release dquot type 1
[   56.178085][  T439] EXT4-fs (loop5): Remounting filesystem read-only
[   56.216190][ T1009] EXT4-fs error (device loop5): ext4_lookup:1858: inode #15: comm syz.5.179: iget: bad i_size value: 360287970189639690
[   56.243071][ T1009] EXT4-fs (loop5): Remounting filesystem read-only
[   56.334716][  T380] EXT4-fs (loop5): unmounting filesystem.
[   56.380681][ T1024] loop1: detected capacity change from 0 to 512
[   56.420849][ T1024] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e01c, mo2=0002]
[   56.434338][ T1024] System zones: 1-12
[   56.448760][ T1024] EXT4-fs error (device loop1): dx_probe:823: inode #2: comm syz.1.184: Directory hole found for htree index block 0
[   56.476508][ T1024] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -117
[   56.504288][ T1024] EXT4-fs error (device loop1): dx_probe:823: inode #2: comm syz.1.184: Directory hole found for htree index block 0
[   56.557288][ T1024] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117
[   56.594031][ T1024] EXT4-fs (loop1): re-mounted. Quota mode: writeback.
[   56.797909][   T65] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   56.854774][ T1047] raw_sendmsg: syz.1.189 forgot to set AF_INET. Fix it!
[   56.948276][ T1049] loop1: detected capacity change from 0 to 128
[   56.966420][ T1049] ext4 filesystem being mounted at /45/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   56.988915][   T65] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   57.000035][   T65] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   57.009975][   T65] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[   57.019170][   T65] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   57.046312][   T65] usb 1-1: config 0 descriptor??
[   57.139878][ T1061] loop1: detected capacity change from 0 to 512
[   57.153555][ T1062] loop5: detected capacity change from 0 to 512
[   57.156608][ T1061] EXT4-fs: Ignoring removed nomblk_io_submit option
[   57.183547][ T1061] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[   57.203478][ T1062] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   57.216054][ T1061] EXT4-fs (loop1): 1 truncate cleaned up
[   57.244567][ T1062] EXT4-fs error (device loop5): xattr_find_entry:297: inode #15: comm syz.5.194: corrupted xattr entries
[   57.259479][ T1033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   57.288537][ T1033] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   57.324082][ T1062] EXT4-fs (loop5): Remounting filesystem read-only
[   57.333021][   T65] usbhid 1-1:0.0: can't add hid device: -71
[   57.339026][   T65] usbhid: probe of 1-1:0.0 failed with error -71
[   57.348089][ T1069] x_tables: duplicate underflow at hook 1
[   57.353897][ T1062] EXT4-fs (loop5): 1 truncate cleaned up
[   57.374160][   T65] usb 1-1: USB disconnect, device number 5
[   57.597925][  T814] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   57.787916][  T814] usb 2-1: Using ep0 maxpacket: 32
[   57.795598][  T814] usb 2-1: config 0 has no interfaces?
[   57.807856][  T814] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   57.816919][  T814] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   57.841500][  T814] usb 2-1: config 0 descriptor??
[   57.853706][ T1081] loop6: detected capacity change from 0 to 256
[   57.884694][ T1081] exfat: Deprecated parameter 'utf8'
[   57.901024][ T1081] exfat: Deprecated parameter 'namecase'
[   57.907999][ T1081] exfat: Deprecated parameter 'namecase'
[   57.917499][ T1081] exfat: Deprecated parameter 'utf8'
[   57.943383][ T1081] exFAT-fs (loop6): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d)
[   57.957868][   T65] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   58.048702][ T1068] FAULT_INJECTION: forcing a failure.
[   58.048702][ T1068] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   58.071351][ T1068] CPU: 1 PID: 1068 Comm: syz.1.197 Not tainted syzkaller #0
[   58.078664][ T1068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   58.088731][ T1068] Call Trace:
[   58.092007][ T1068]  <TASK>
[   58.094936][ T1068]  __dump_stack+0x21/0x24
[   58.099281][ T1068]  dump_stack_lvl+0x110/0x170
[   58.103969][ T1068]  ? __cfi_dump_stack_lvl+0x8/0x8
[   58.108999][ T1068]  dump_stack+0x15/0x24
[   58.113163][ T1068]  should_fail_ex+0x3bf/0x510
[   58.117841][ T1068]  should_fail+0xb/0x10
[   58.121991][ T1068]  should_fail_usercopy+0x1a/0x20
[   58.127013][ T1068]  _copy_to_user+0x1e/0x90
[   58.131435][ T1068]  simple_read_from_buffer+0xe9/0x160
[   58.136813][ T1068]  proc_fail_nth_read+0x1a6/0x220
[   58.141841][ T1068]  ? __cfi_proc_fail_nth_read+0x10/0x10
[   58.147389][ T1068]  ? security_file_permission+0x94/0xb0
[   58.152940][ T1068]  ? __cfi_proc_fail_nth_read+0x10/0x10
[   58.158488][ T1068]  vfs_read+0x286/0x930
[   58.162645][ T1068]  ? __cfi_vfs_read+0x10/0x10
[   58.167318][ T1068]  ? __kasan_check_write+0x14/0x20
[   58.172431][ T1068]  ? mutex_lock+0x93/0x1b0
[   58.176847][ T1068]  ? __cfi_mutex_lock+0x10/0x10
[   58.178946][   T65] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   58.181696][ T1068]  ? __fdget_pos+0x2cd/0x380
[   58.197085][ T1068]  ? ksys_read+0x70/0x260
[   58.201434][ T1068]  ksys_read+0x14a/0x260
[   58.202701][   T65] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   58.205673][ T1068]  ? __cfi_ksys_read+0x10/0x10
[   58.220108][ T1068]  ? debug_smp_processor_id+0x17/0x20
[   58.225480][ T1068]  __x64_sys_read+0x7b/0x90
[   58.229985][ T1068]  x64_sys_call+0x2f/0x9a0
[   58.234406][ T1068]  do_syscall_64+0x4c/0xa0
[   58.235979][   T65] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[   58.238823][ T1068]  ? clear_bhb_loop+0x30/0x80
[   58.238844][ T1068]  ? clear_bhb_loop+0x30/0x80
[   58.257158][ T1068]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   58.258640][   T65] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   58.263055][ T1068] RIP: 0033:0x7f9fe5f5e98e
[   58.275399][ T1068] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   58.295009][ T1068] RSP: 002b:00007f9fe6e13fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   58.303416][ T1068] RAX: ffffffffffffffda RBX: 00007f9fe6e146c0 RCX: 00007f9fe5f5e98e
[   58.311381][ T1068] RDX: 000000000000000f RSI: 00007f9fe6e140a0 RDI: 0000000000000006
[   58.319349][ T1068] RBP: 00007f9fe6e14090 R08: 0000000000000000 R09: 0000000000000000
[   58.327317][ T1068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   58.335285][ T1068] R13: 00007f9fe6226038 R14: 00007f9fe6225fa0 R15: 00007ffc6a9b6978
[   58.343260][ T1068]  </TASK>
[   58.347427][   T65] usb 1-1: config 0 descriptor??
[   58.356315][  T222] usb 2-1: USB disconnect, device number 6
[   59.107933][  T308] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[   59.310253][  T308] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[   59.325498][  T308] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   59.349138][  T308] usb 7-1: Product: syz
[   59.353311][  T308] usb 7-1: Manufacturer: syz
[   59.387971][  T308] usb 7-1: SerialNumber: syz
[   59.394342][   T65] usbhid 1-1:0.0: can't add hid device: -71
[   59.401764][   T65] usbhid: probe of 1-1:0.0 failed with error -71
[   59.421548][   T65] usb 1-1: USB disconnect, device number 6
[   59.454427][ T1118] x_tables: duplicate underflow at hook 1
[   59.633271][ T1107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   59.652699][ T1107] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   59.775377][   T28] kauditd_printk_skb: 64 callbacks suppressed
[   59.775390][   T28] audit: type=1400 audit(1790302004.075:352): avc:  denied  { create } for  pid=1123 comm="syz.0.212" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   59.802897][ T1124] netlink: 24 bytes leftover after parsing attributes in process `syz.0.212'.
[   59.840039][   T28] audit: type=1400 audit(1790302004.145:353): avc:  denied  { mounton } for  pid=1123 comm="syz.0.212" path="/42/file0" dev="tmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   59.898451][   T28] audit: type=1400 audit(1790302004.145:354): avc:  denied  { mount } for  pid=1123 comm="syz.0.212" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[   59.932103][   T28] audit: type=1400 audit(1790302004.185:355): avc:  denied  { unmount } for  pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[   59.981889][   T28] audit: type=1400 audit(1790302004.185:356): avc:  denied  { unlink } for  pid=290 comm="syz-executor" name="file0" dev="tmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   60.048552][ T1130] FAULT_INJECTION: forcing a failure.
[   60.048552][ T1130] name failslab, interval 1, probability 0, space 0, times 0
[   60.082913][ T1130] CPU: 1 PID: 1130 Comm: syz.5.215 Not tainted syzkaller #0
[   60.090233][ T1130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   60.100287][ T1130] Call Trace:
[   60.103567][ T1130]  <TASK>
[   60.106497][ T1130]  __dump_stack+0x21/0x24
[   60.110836][ T1130]  dump_stack_lvl+0x110/0x170
[   60.115518][ T1130]  ? __cfi_dump_stack_lvl+0x8/0x8
[   60.120550][ T1130]  dump_stack+0x15/0x24
[   60.124710][ T1130]  should_fail_ex+0x3bf/0x510
[   60.129388][ T1130]  ? security_file_alloc+0x33/0x130
[   60.134606][ T1130]  __should_failslab+0xac/0xf0
[   60.139373][ T1130]  should_failslab+0x9/0x20
[   60.143887][ T1130]  kmem_cache_alloc+0x3b/0x320
[   60.148657][ T1130]  ? __alloc_file+0x28/0x2a0
[   60.153252][ T1130]  security_file_alloc+0x33/0x130
[   60.158285][ T1130]  __alloc_file+0xb5/0x2a0
[   60.162704][ T1130]  alloc_empty_file+0x97/0x180
[   60.167469][ T1130]  alloc_file+0x59/0x600
[   60.171716][ T1130]  ? _raw_spin_unlock+0x4c/0x70
[   60.176571][ T1130]  alloc_file_pseudo+0x180/0x200
[   60.181511][ T1130]  ? __cfi_alloc_file_pseudo+0x10/0x10
[   60.186972][ T1130]  ? __kasan_check_write+0x14/0x20
[   60.192081][ T1130]  ? clear_nlink+0x8a/0xe0
[   60.196500][ T1130]  __shmem_file_setup+0x1df/0x2b0
[   60.201535][ T1130]  shmem_file_setup+0x2f/0x40
[   60.206218][ T1130]  __se_sys_memfd_create+0x1de/0x3c0
[   60.211506][ T1130]  __x64_sys_memfd_create+0x5b/0x70
[   60.216707][ T1130]  x64_sys_call+0x235/0x9a0
[   60.221215][ T1130]  do_syscall_64+0x4c/0xa0
[   60.225641][ T1130]  ? clear_bhb_loop+0x30/0x80
[   60.230325][ T1130]  ? clear_bhb_loop+0x30/0x80
[   60.235004][ T1130]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   60.240895][ T1130] RIP: 0033:0x7fa99b79e159
[   60.245309][ T1130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   60.264913][ T1130] RSP: 002b:00007fa99c64fe08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[   60.273328][ T1130] RAX: ffffffffffffffda RBX: 0000000000001217 RCX: 00007fa99b79e159
[   60.281296][ T1130] RDX: 00007fa99c64fee0 RSI: 0000000000000000 RDI: 00007fa99b83524b
[   60.289265][ T1130] RBP: 0000200000002200 R08: 00000000ffffffff R09: 0000000000000000
[   60.297235][ T1130] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000380
[   60.305207][ T1130] R13: 00007fa99c64fee0 R14: 00007fa99c64fea0 R15: 00002000000007c0
[   60.313180][ T1130]  </TASK>
[   60.372212][  T308] (unnamed net_device) (uninitialized): Assigned a random MAC address: 8a:e8:40:cc:bc:aa
[   60.395226][  T308] rtl8150 7-1:1.0: eth1: rtl8150 is detected
[   60.409311][   T28] audit: type=1400 audit(1790302004.715:357): avc:  denied  { read } for  pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[   60.418637][  T308] usb 7-1: USB disconnect, device number 3
[   60.458467][   T28] audit: type=1400 audit(1790302004.715:358): avc:  denied  { search } for  pid=142 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   60.548139][   T28] audit: type=1400 audit(1790302004.715:359): avc:  denied  { read } for  pid=142 comm="dhcpcd" name="n16" dev="tmpfs" ino=3167 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   60.622084][   T28] audit: type=1400 audit(1790302004.715:360): avc:  denied  { open } for  pid=142 comm="dhcpcd" path="/run/udev/data/n16" dev="tmpfs" ino=3167 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   60.703774][   T28] audit: type=1400 audit(1790302004.715:361): avc:  denied  { getattr } for  pid=142 comm="dhcpcd" path="/run/udev/data/n16" dev="tmpfs" ino=3167 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   60.997920][  T308] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[   61.167809][ T1174] loop0: detected capacity change from 0 to 40427
[   61.186256][ T1174] F2FS-fs (loop0): Invalid SB checksum offset: 0
[   61.187857][  T308] usb 6-1: Using ep0 maxpacket: 16
[   61.204603][ T1174] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[   61.218912][  T308] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   61.223102][ T1174] F2FS-fs (loop0): invalid crc value
[   61.239635][  T308] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   61.267904][  T308] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   61.282466][ T1174] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[   61.292698][  T308] usb 6-1: Product: syz
[   61.297708][  T308] usb 6-1: Manufacturer: syz
[   61.318628][  T308] usb 6-1: SerialNumber: syz
[   61.353652][ T1174] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[   61.370990][ T1174] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   61.411821][ T1184] loop1: detected capacity change from 0 to 40427
[   61.419839][ T1184] F2FS-fs (loop1): Invalid SB checksum offset: 0
[   61.426063][ T1189] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.426366][ T1184] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[   61.433459][ T1189] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.442337][ T1184] F2FS-fs (loop1): invalid crc value
[   61.449589][ T1189] device bridge_slave_0 entered promiscuous mode
[   61.461209][ T1189] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.468435][ T1189] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.476113][ T1189] device bridge_slave_1 entered promiscuous mode
[   61.485392][ T1184] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[   61.536404][ T1184] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[   61.546832][ T1184] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   61.582102][ T1189] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.589177][ T1189] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.596447][ T1189] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.603514][ T1189] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.615907][ T1199] device ip6tnl1 entered promiscuous mode
[   61.623413][  T314] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.645463][  T314] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.672612][  T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   61.680279][  T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   61.692095][  T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   61.716843][  T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   61.728141][  T314] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.735196][  T314] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.755522][  T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   61.765824][ T1207] loop0: detected capacity change from 0 to 256
[   61.772231][ T1206] x_tables: duplicate underflow at hook 1
[   61.776917][  T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   61.781853][ T1207] exfat: Unknown parameter ''
[   61.790376][  T314] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.797794][  T314] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.805275][  T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   61.813595][  T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   61.821557][ T1205] loop6: detected capacity change from 0 to 512
[   61.822058][  T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   61.839139][  T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   61.840908][  T337] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   61.856034][ T1189] device veth0_vlan entered promiscuous mode
[   61.866647][ T1205] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e01c, mo2=0002]
[   61.872903][ T1207] 
[   61.875503][  T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   61.887190][  T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   61.895602][  T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   61.903418][ T1205] System zones: 1-12
[   61.903823][  T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   61.922123][ T1189] device veth1_macvtap entered promiscuous mode
[   61.924376][ T1205] EXT4-fs error (device loop6): dx_probe:823: inode #2: comm syz.6.228: Directory hole found for htree index block 0
[   61.941646][ T1205] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -117
[   61.951350][ T1205] EXT4-fs error (device loop6): dx_probe:823: inode #2: comm syz.6.228: Directory hole found for htree index block 0
[   61.964760][ T1205] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117
[   61.974491][  T314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   61.990630][ T1205] EXT4-fs (loop6): re-mounted. Quota mode: writeback.
[   61.990747][  T314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   62.005403][  T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   62.005694][  T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   62.005967][  T314] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   62.006244][  T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   62.006528][  T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   62.006767][  T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   62.007012][  T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   62.088717][  T441] device bridge_slave_1 left promiscuous mode
[   62.100006][  T441] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.120854][  T308] cdc_ncm 6-1:1.0: failed GET_NTB_PARAMETERS
[   62.126356][  T441] device bridge_slave_0 left promiscuous mode
[   62.126880][  T308] cdc_ncm 6-1:1.0: bind() failure
[   62.133078][  T441] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.141214][  T308] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found
[   62.152978][  T441] device veth1_macvtap left promiscuous mode
[   62.159478][  T441] device veth0_vlan left promiscuous mode
[   62.162073][  T308] cdc_ncm 6-1:1.1: bind() failure
[   62.748692][  T222] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   62.770337][  T308] usb 6-1: USB disconnect, device number 6
[   62.813771][ T1222] loop7: detected capacity change from 0 to 8192
[   62.820924][ T1222] FAT-fs (loop7): Unrecognized mount option "����`�NX#�EeOn��ø�H�Թ���]�����%�Ցew" or missing value
[   62.956163][  T222] usb 1-1: device descriptor read/64, error -71
[   62.962583][  T814] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[   64.230144][  T814] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[   64.239222][  T814] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   64.247197][  T814] usb 2-1: Product: syz
[   64.251545][  T814] usb 2-1: Manufacturer: syz
[   64.256198][  T814] usb 2-1: SerialNumber: syz
[   64.350116][  T222] usb 1-1: device descriptor read/64, error -71
[   64.375023][ T1234] loop5: detected capacity change from 0 to 4096
[   64.389849][ T1234] EXT4-fs: Ignoring removed orlov option
[   64.401812][ T1234] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   64.412507][ T1234] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=284ec1ac, mo2=0002]
[   64.425702][ T1234] System zones: 0-5
[   64.431849][ T1234] EXT4-fs mount: 10 callbacks suppressed
[   64.431862][ T1234] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[   64.449856][ T1234] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.234: bg 0: block 98: padding at end of block bitmap is not set
[   64.462685][ T1215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   64.464210][ T1234] EXT4-fs (loop5): Remounting filesystem read-only
[   64.483875][ T1215] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   64.627924][  T222] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[   64.698978][ T1248] 9pnet_fd: p9_fd_create_tcp (1248): problem connecting socket to 127.0.0.1
[   64.758117][   T19] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[   64.773036][ T1250] x_tables: duplicate underflow at hook 1
[   64.797878][  T709] usb 8-1: new full-speed USB device number 2 using dummy_hcd
[   64.838398][ T1252] loop0: detected capacity change from 0 to 512
[   64.847715][ T1252] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e01c, mo2=0002]
[   64.855797][ T1252] System zones: 1-12
[   64.860400][ T1252] EXT4-fs error (device loop0): dx_probe:823: inode #2: comm syz.0.239: Directory hole found for htree index block 0
[   64.873074][ T1252] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117
[   64.881331][ T1252] EXT4-fs error (device loop0): dx_probe:823: inode #2: comm syz.0.239: Directory hole found for htree index block 0
[   64.893805][ T1252] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117
[   64.902057][ T1252] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   64.925090][ T1252] EXT4-fs (loop0): re-mounted. Quota mode: writeback.
[   64.948375][  T709] usb 8-1: device descriptor read/64, error -71
[   64.949446][   T19] usb 6-1: config 6 interface 0 has no altsetting 0
[   64.962686][   T19] usb 6-1: New USB device found, idVendor=e582, idProduct=416b, bcdDevice=d4.3f
[   64.969434][  T814] (unnamed net_device) (uninitialized): Assigned a random MAC address: ee:bd:34:ba:50:5c
[   64.971826][   T19] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   64.985916][  T814] rtl8150 2-1:1.0: eth1: rtl8150 is detected
[   64.989553][   T19] usb 6-1: Product: syz
[   64.997887][  T814] usb 2-1: USB disconnect, device number 7
[   65.002139][   T19] usb 6-1: Manufacturer: syz
[   65.010090][   T19] usb 6-1: SerialNumber: syz
[   65.104891][  T290] EXT4-fs (loop0): unmounting filesystem.
[   65.132706][ T1273] loop0: detected capacity change from 0 to 128
[   65.146171][ T1273] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   65.154939][ T1273] ext4 filesystem being mounted at /52/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   65.169443][   T28] kauditd_printk_skb: 52 callbacks suppressed
[   65.169455][   T28] audit: type=1400 audit(1790302009.475:414): avc:  denied  { create } for  pid=1272 comm="syz.0.240" name="encrypted_dir" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   65.197581][   T28] audit: type=1400 audit(1790302009.475:415): avc:  denied  { write } for  pid=1272 comm="syz.0.240" name="encrypted_dir" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   65.200816][  T290] EXT4-fs (loop0): unmounting filesystem.
[   65.220218][   T28] audit: type=1400 audit(1790302009.475:416): avc:  denied  { add_name } for  pid=1272 comm="syz.0.240" name="blkio.bfq.time_recursive" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   65.225651][  T709] usb 8-1: device descriptor read/64, error -71
[   65.256154][   T19] usb-storage 6-1:6.0: USB Mass Storage device detected
[   65.281790][   T28] audit: type=1400 audit(1790302009.585:417): avc:  denied  { name_bind } for  pid=1287 comm="syz.0.241" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[   65.304617][   T28] audit: type=1400 audit(1790302009.585:418): avc:  denied  { node_bind } for  pid=1287 comm="syz.0.241" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[   65.330473][   T19] usb 6-1: USB disconnect, device number 7
[   65.339170][   T28] audit: type=1400 audit(1790302009.635:419): avc:  denied  { create } for  pid=1291 comm="syz.0.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=irda_socket permissive=1
[   65.527935][  T709] usb 8-1: new full-speed USB device number 3 using dummy_hcd
[   65.677861][  T709] usb 8-1: device descriptor read/64, error -71
[   65.779249][  T380] EXT4-fs (loop5): unmounting filesystem.
[   65.801738][ T1296] loop5: detected capacity change from 0 to 512
[   65.812382][ T1296] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e01c, mo2=0002]
[   65.820531][ T1296] System zones: 1-12
[   65.824774][ T1296] EXT4-fs error (device loop5): dx_probe:823: inode #2: comm syz.5.243: Directory hole found for htree index block 0
[   65.837418][ T1296] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -117
[   65.846055][ T1296] EXT4-fs error (device loop5): dx_probe:823: inode #2: comm syz.5.243: Directory hole found for htree index block 0
[   65.858556][ T1296] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117
[   65.866721][ T1296] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[   65.875926][  T222] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[   65.885806][ T1296] EXT4-fs (loop5): re-mounted. Quota mode: writeback.
[   65.893106][ T1296] FAULT_INJECTION: forcing a failure.
[   65.893106][ T1296] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[   65.906361][ T1296] CPU: 0 PID: 1296 Comm: syz.5.243 Not tainted syzkaller #0
[   65.913655][ T1296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   65.923707][ T1296] Call Trace:
[   65.926978][ T1296]  <TASK>
[   65.929901][ T1296]  __dump_stack+0x21/0x24
[   65.934238][ T1296]  dump_stack_lvl+0x110/0x170
[   65.938918][ T1296]  ? __cfi_dump_stack_lvl+0x8/0x8
[   65.943947][ T1296]  dump_stack+0x15/0x24
[   65.947858][  T709] usb 8-1: device descriptor read/64, error -71
[   65.948108][ T1296]  should_fail_ex+0x3bf/0x510
[   65.958988][ T1296]  should_fail_alloc_page+0x61/0x90
[   65.964190][ T1296]  prepare_alloc_pages+0x131/0x570
[   65.969311][ T1296]  ? __alloc_pages_bulk+0x9d0/0x9d0
[   65.974492][ T1296]  ? __cfi_gfp_zone+0x10/0x10
[   65.979166][ T1296]  __alloc_pages+0x15b/0x610
[   65.983741][ T1296]  ? __cfi___alloc_pages+0x10/0x10
[   65.988830][ T1296]  ? __cfi___alloc_pages+0x10/0x10
[   65.993923][ T1296]  ? __vmalloc_node_range+0x1398/0x1440
[   65.999448][ T1296]  __get_free_pages+0xe/0x30
[   66.004016][ T1296]  alloc_loaded_vmcs+0x23b/0x4d0
[   66.008931][ T1296]  vmx_vcpu_create+0x616/0x12b0
[   66.013759][ T1296]  ? intel_pmu_refresh+0x4ab/0x1860
[   66.018937][ T1296]  ? __cfi_vmx_vcpu_create+0x10/0x10
[   66.024218][ T1296]  kvm_arch_vcpu_create+0x5c9/0x950
[   66.029396][ T1296]  kvm_vm_ioctl_create_vcpu+0x31d/0x8f0
[   66.034929][ T1296]  kvm_vm_ioctl+0x654/0xb00
[   66.039428][ T1296]  ? __cfi_kvm_vm_ioctl+0x10/0x10
[   66.044433][ T1296]  ? futex_wake+0x5fa/0x8e0
[   66.048920][ T1296]  ? ioctl_has_perm+0x1b8/0x4f0
[   66.053766][ T1296]  ? memcpy+0x56/0x70
[   66.057739][ T1296]  ? ioctl_has_perm+0x40f/0x4f0
[   66.057861][  T222] usb 1-1: Using ep0 maxpacket: 16
[   66.062571][ T1296]  ? has_cap_mac_admin+0x370/0x370
[   66.068490][  T709] usb usb8-port1: attempt power cycle
[   66.072771][ T1296]  ? __kasan_slab_free+0x11/0x20
[   66.072799][ T1296]  ? do_futex+0x2bf/0x430
[   66.087372][ T1296]  ? selinux_file_ioctl+0x3ad/0x4c0
[   66.092566][ T1296]  ? __cfi_do_futex+0x10/0x10
[   66.097239][ T1296]  ? __cfi_selinux_file_ioctl+0x10/0x10
[   66.102768][ T1296]  ? __fget_files+0x2d1/0x330
[   66.107431][ T1296]  ? security_file_ioctl+0x95/0xc0
[   66.112535][ T1296]  ? __cfi_kvm_vm_ioctl+0x10/0x10
[   66.117544][ T1296]  __se_sys_ioctl+0x12f/0x1b0
[   66.122207][ T1296]  __x64_sys_ioctl+0x7b/0x90
[   66.126779][ T1296]  x64_sys_call+0x58b/0x9a0
[   66.131266][ T1296]  do_syscall_64+0x4c/0xa0
[   66.135668][ T1296]  ? clear_bhb_loop+0x30/0x80
[   66.140353][ T1296]  ? clear_bhb_loop+0x30/0x80
[   66.145011][ T1296]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   66.150885][ T1296] RIP: 0033:0x7fa99b79e159
[   66.155281][ T1296] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   66.174866][ T1296] RSP: 002b:00007fa99c650028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   66.183260][ T1296] RAX: ffffffffffffffda RBX: 00007fa99ba25fa0 RCX: 00007fa99b79e159
[   66.191214][ T1296] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000006
[   66.199164][ T1296] RBP: 00007fa99b83506b R08: 0000000000000000 R09: 0000000000000000
[   66.207117][ T1296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   66.215068][ T1296] R13: 00007fa99ba26038 R14: 00007fa99ba25fa0 R15: 00007ffc953b8998
[   66.223024][ T1296]  </TASK>
[   66.232303][  T222] usb 1-1: too many endpoints for config 0 interface 0 altsetting 16: 254, using maximum allowed: 30
[   66.250184][  T222] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[   66.263295][  T222] usb 1-1: config 0 interface 0 has no altsetting 0
[   66.271094][  T222] usb 1-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00
[   66.280278][  T222] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   66.293434][  T222] usb 1-1: config 0 descriptor??
[   66.298557][  T308] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[   66.306870][  T380] EXT4-fs (loop5): unmounting filesystem.
[   66.489024][  T308] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   66.513430][  T308] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[   66.538114][  T308] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   66.557845][  T308] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   66.565871][  T308] usb 7-1: SerialNumber: syz
[   66.637876][  T709] usb 8-1: new full-speed USB device number 4 using dummy_hcd
[   66.669926][  T709] usb 8-1: device descriptor read/8, error -71
[   66.802998][   T28] audit: type=1400 audit(1790302011.105:420): avc:  denied  { create } for  pid=1300 comm="syz.6.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1
[   66.818925][  T709] usb 8-1: device descriptor read/8, error -71
[   66.833192][  T308] usb 7-1: 0:2 : does not exist
[   66.855109][  T308] usb 7-1: USB disconnect, device number 4
[   67.097847][  T709] usb 8-1: new full-speed USB device number 5 using dummy_hcd
[   67.105260][ T1317] x_tables: duplicate underflow at hook 1
[   67.128786][  T709] usb 8-1: device descriptor read/8, error -71
[   67.166500][ T1323] loop1: detected capacity change from 0 to 128
[   67.183132][ T1320] loop5: detected capacity change from 0 to 256
[   67.184425][ T1323] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   67.193761][ T1320] exfat: Deprecated parameter 'utf8'
[   67.204721][ T1323] ext4 filesystem being mounted at /59/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   67.207236][ T1320] exfat: Deprecated parameter 'namecase'
[   67.224330][ T1320] exfat: Deprecated parameter 'namecase'
[   67.230240][ T1320] exfat: Deprecated parameter 'utf8'
[   67.231613][  T288] EXT4-fs (loop1): unmounting filesystem.
[   67.243555][ T1320] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d)
[   67.278873][  T709] usb 8-1: device descriptor read/8, error -71
[   67.358126][ T1335] loop6: detected capacity change from 0 to 512
[   67.370982][ T1335] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e01c, mo2=0002]
[   67.379061][ T1335] System zones: 1-12
[   67.383493][ T1335] EXT4-fs error (device loop6): dx_probe:823: inode #2: comm syz.6.256: Directory hole found for htree index block 0
[   67.396306][ T1335] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -117
[   67.398303][  T709] usb usb8-port1: unable to enumerate USB device
[   67.404579][ T1335] EXT4-fs error (device loop6): dx_probe:823: inode #2: comm syz.6.256: Directory hole found for htree index block 0
[   67.423229][ T1335] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117
[   67.431509][ T1335] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[   67.445445][ T1335] EXT4-fs (loop6): re-mounted. Quota mode: writeback.
[   67.452928][ T1335] FAULT_INJECTION: forcing a failure.
[   67.452928][ T1335] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[   67.463340][ T1330] loop1: detected capacity change from 0 to 40427
[   67.466208][ T1335] CPU: 0 PID: 1335 Comm: syz.6.256 Not tainted syzkaller #0
[   67.479784][ T1335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   67.483190][ T1330] F2FS-fs (loop1): invalid crc value
[   67.489832][ T1335] Call Trace:
[   67.489841][ T1335]  <TASK>
[   67.489848][ T1335]  __dump_stack+0x21/0x24
[   67.489879][ T1335]  dump_stack_lvl+0x110/0x170
[   67.502442][ T1330] F2FS-fs (loop1): Found nat_bits in checkpoint
[   67.505675][ T1335]  ? __cfi_dump_stack_lvl+0x8/0x8
[   67.505709][ T1335]  dump_stack+0x15/0x24
[   67.525718][ T1335]  should_fail_ex+0x3bf/0x510
[   67.530398][ T1335]  should_fail_alloc_page+0x61/0x90
[   67.535598][ T1335]  prepare_alloc_pages+0x131/0x570
[   67.540401][ T1330] F2FS-fs (loop1): Start checkpoint disabled!
[   67.540707][ T1335]  ? __alloc_pages_bulk+0x9d0/0x9d0
[   67.540734][ T1335]  ? __cfi_gfp_zone+0x10/0x10
[   67.547537][ T1330] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0
[   67.551935][ T1335]  __alloc_pages+0x15b/0x610
[   67.551961][ T1335]  ? __cfi___alloc_pages+0x10/0x10
[   67.551983][ T1335]  ? __cfi___alloc_pages+0x10/0x10
[   67.565587][ T1330] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[   67.568358][ T1335]  ? __vmalloc_node_range+0x1398/0x1440
[   67.568386][ T1335]  __get_free_pages+0xe/0x30
[   67.568408][ T1335]  alloc_loaded_vmcs+0x23b/0x4d0
[   67.597848][  T709] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[   67.601020][ T1335]  vmx_vcpu_create+0x616/0x12b0
[   67.601043][ T1335]  ? intel_pmu_refresh+0x4ab/0x1860
[   67.618472][ T1335]  ? __cfi_vmx_vcpu_create+0x10/0x10
[   67.623768][ T1335]  kvm_arch_vcpu_create+0x5c9/0x950
[   67.628967][ T1335]  kvm_vm_ioctl_create_vcpu+0x31d/0x8f0
[   67.634521][ T1335]  kvm_vm_ioctl+0x654/0xb00
[   67.639034][ T1335]  ? __cfi_kvm_vm_ioctl+0x10/0x10
[   67.644055][ T1335]  ? futex_wake+0x5fa/0x8e0
[   67.648562][ T1335]  ? ioctl_has_perm+0x1b8/0x4f0
[   67.651570][   T28] audit: type=1400 audit(1790302011.895:421): avc:  denied  { write open } for  pid=1329 comm="syz.1.254" path="/62/file1/file1" dev="loop1" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   67.653416][ T1335]  ? memcpy+0x56/0x70
[   67.653439][ T1335]  ? ioctl_has_perm+0x40f/0x4f0
[   67.676445][   T28] audit: type=1400 audit(1790302011.945:422): avc:  denied  { read } for  pid=1329 comm="syz.1.254" name="file1" dev="loop1" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   67.680272][ T1335]  ? has_cap_mac_admin+0x370/0x370
[   67.680301][ T1335]  ? __kasan_slab_free+0x11/0x20
[   67.680323][ T1335]  ? do_futex+0x2bf/0x430
[   67.680340][ T1335]  ? selinux_file_ioctl+0x3ad/0x4c0
[   67.685909][   T28] audit: type=1400 audit(1790302011.945:423): avc:  denied  { ioctl } for  pid=1329 comm="syz.1.254" path="/62/file1/file1" dev="loop1" ino=10 ioctlcmd=0x551b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   67.706678][ T1335]  ? __cfi_do_futex+0x10/0x10
[   67.706700][ T1335]  ? __cfi_selinux_file_ioctl+0x10/0x10
[   67.706723][ T1335]  ? __fget_files+0x2d1/0x330
[   67.706741][ T1335]  ? security_file_ioctl+0x95/0xc0
[   67.769953][ T1335]  ? __cfi_kvm_vm_ioctl+0x10/0x10
[   67.774975][ T1335]  __se_sys_ioctl+0x12f/0x1b0
[   67.779638][ T1335]  __x64_sys_ioctl+0x7b/0x90
[   67.784219][ T1335]  x64_sys_call+0x58b/0x9a0
[   67.788708][ T1335]  do_syscall_64+0x4c/0xa0
[   67.793110][ T1335]  ? clear_bhb_loop+0x30/0x80
[   67.797780][ T1335]  ? clear_bhb_loop+0x30/0x80
[   67.802441][ T1335]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   67.808318][ T1335] RIP: 0033:0x7f2aedd9e159
[   67.812718][ T1335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   67.832305][ T1335] RSP: 002b:00007f2aeecb3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   67.840704][ T1335] RAX: ffffffffffffffda RBX: 00007f2aee025fa0 RCX: 00007f2aedd9e159
[   67.848657][ T1335] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000006
[   67.856607][ T1335] RBP: 00007f2aede3506b R08: 0000000000000000 R09: 0000000000000000
[   67.864558][ T1335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   67.872516][ T1335] R13: 00007f2aee026038 R14: 00007f2aee025fa0 R15: 00007ffd6d68f548
[   67.880474][ T1335]  </TASK>
[   67.905834][  T314] kworker/u4:3: attempt to access beyond end of device
[   67.905834][  T314] loop1: rw=1, sector=77824, nr_sectors = 8 limit=40427
[   67.928722][  T314] kworker/u4:3: attempt to access beyond end of device
[   67.928722][  T314] loop1: rw=1, sector=77832, nr_sectors = 2048 limit=40427
[   67.950787][  T314] kworker/u4:3: attempt to access beyond end of device
[   67.950787][  T314] loop1: rw=1, sector=79880, nr_sectors = 2040 limit=40427
[   67.965414][  T314] kworker/u4:3: attempt to access beyond end of device
[   67.965414][  T314] loop1: rw=1, sector=49152, nr_sectors = 8 limit=40427
[   67.980343][  T709] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[   67.988933][  T314] kworker/u4:3: attempt to access beyond end of device
[   67.988933][  T314] loop1: rw=1, sector=49160, nr_sectors = 4088 limit=40427
[   67.997868][  T709] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   68.004696][  T314] kworker/u4:3: attempt to access beyond end of device
[   68.004696][  T314] loop1: rw=1, sector=57344, nr_sectors = 8 limit=40427
[   68.021888][  T709] usb 6-1: Product: syz
[   68.034754][  T709] usb 6-1: Manufacturer: syz
[   68.035193][  T524] EXT4-fs (loop6): unmounting filesystem.
[   68.039647][  T709] usb 6-1: SerialNumber: syz
[   68.056114][  T314] kworker/u4:3: attempt to access beyond end of device
[   68.056114][  T314] loop1: rw=1, sector=57352, nr_sectors = 4064 limit=40427
[   68.072079][  T314] kworker/u4:3: attempt to access beyond end of device
[   68.072079][  T314] loop1: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[   68.094283][ T1346] loop6: detected capacity change from 0 to 256
[   68.110430][ T1346] exfat: Deprecated parameter 'utf8'
[   68.125966][ T1346] exfat: Deprecated parameter 'namecase'
[   68.142960][ T1346] exfat: Deprecated parameter 'namecase'
[   68.157939][ T1346] exfat: Deprecated parameter 'namecase'
[   68.165854][ T1346] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[   68.244107][ T1350] loop6: detected capacity change from 0 to 128
[   68.281711][ T1332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   68.292229][ T1350] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[   68.301392][ T1332] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   68.302742][ T1350] ext4 filesystem being mounted at /44/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   68.597288][  T222] usbhid 1-1:0.0: can't add hid device: -71
[   68.608699][  T222] usbhid: probe of 1-1:0.0 failed with error -71
[   68.826023][  T222] usb 1-1: USB disconnect, device number 9
[   68.937253][  T524] EXT4-fs (loop6): unmounting filesystem.
[   68.954405][  T709] (unnamed net_device) (uninitialized): Assigned a random MAC address: 52:d9:ee:07:2c:72
[   69.152023][ T1361] x_tables: duplicate underflow at hook 1
[   69.217408][  T709] rtl8150 6-1:1.0: eth1: rtl8150 is detected
[   69.242300][ T1364] loop6: detected capacity change from 0 to 128
[   69.266573][ T1364] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[   69.275294][ T1364] ext4 filesystem being mounted at /45/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   69.304871][  T709] usb 6-1: USB disconnect, device number 8
[   69.308504][  T524] EXT4-fs (loop6): unmounting filesystem.
[   69.333883][ T1370] netlink: 16 bytes leftover after parsing attributes in process `syz.6.264'.
[   69.363440][ T1376] FAULT_INJECTION: forcing a failure.
[   69.363440][ T1376] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   69.398672][ T1376] CPU: 0 PID: 1376 Comm: syz.6.266 Not tainted syzkaller #0
[   69.405985][ T1376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   69.416044][ T1376] Call Trace:
[   69.419318][ T1376]  <TASK>
[   69.422243][ T1376]  __dump_stack+0x21/0x24
[   69.426577][ T1376]  dump_stack_lvl+0x110/0x170
[   69.431262][ T1376]  ? __cfi_dump_stack_lvl+0x8/0x8
[   69.436294][ T1376]  ? _parse_integer+0x2a/0x40
[   69.440975][ T1376]  dump_stack+0x15/0x24
[   69.445139][ T1376]  should_fail_ex+0x3bf/0x510
[   69.449812][ T1376]  should_fail+0xb/0x10
[   69.453964][ T1376]  should_fail_usercopy+0x1a/0x20
[   69.458994][ T1376]  _copy_from_user+0x1e/0xc0
[   69.463590][ T1376]  core_sys_select+0x471/0x700
[   69.468354][ T1376]  ? __cfi_core_sys_select+0x10/0x10
[   69.473649][ T1376]  ? __cfi_set_user_sigmask+0x10/0x10
[   69.479024][ T1376]  ? __kasan_check_write+0x14/0x20
[   69.484130][ T1376]  ? mutex_unlock+0x8f/0x230
[   69.488719][ T1376]  __se_sys_pselect6+0x274/0x340
[   69.493658][ T1376]  ? __kasan_check_write+0x14/0x20
[   69.498764][ T1376]  ? __x64_sys_pselect6+0x100/0x100
[   69.503958][ T1376]  ? ksys_write+0x1fa/0x260
[   69.508464][ T1376]  ? __cfi_ksys_write+0x10/0x10
[   69.513310][ T1376]  __x64_sys_pselect6+0xe5/0x100
[   69.518247][ T1376]  x64_sys_call+0x1b0/0x9a0
[   69.522747][ T1376]  do_syscall_64+0x4c/0xa0
[   69.527167][ T1376]  ? clear_bhb_loop+0x30/0x80
[   69.531843][ T1376]  ? clear_bhb_loop+0x30/0x80
[   69.536514][ T1376]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   69.542404][ T1376] RIP: 0033:0x7f2aedd9e159
[   69.546812][ T1376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   69.566413][ T1376] RSP: 002b:00007f2aeecb3028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e
[   69.574825][ T1376] RAX: ffffffffffffffda RBX: 00007f2aee025fa0 RCX: 00007f2aedd9e159
[   69.582790][ T1376] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040
[   69.590760][ T1376] RBP: 00007f2aeecb3090 R08: 0000000000000000 R09: 0000000000000000
[   69.598726][ T1376] R10: 0000200000002080 R11: 0000000000000246 R12: 0000000000000001
[   69.606694][ T1376] R13: 00007f2aee026038 R14: 00007f2aee025fa0 R15: 00007ffd6d68f548
[   69.614674][ T1376]  </TASK>
[   69.707124][ T1384] FAULT_INJECTION: forcing a failure.
[   69.707124][ T1384] name failslab, interval 1, probability 0, space 0, times 0
[   69.856261][ T1384] CPU: 1 PID: 1384 Comm: syz.0.270 Not tainted syzkaller #0
[   69.863579][ T1384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   69.873626][ T1384] Call Trace:
[   69.876894][ T1384]  <TASK>
[   69.879816][ T1384]  __dump_stack+0x21/0x24
[   69.884149][ T1384]  dump_stack_lvl+0x110/0x170
[   69.888824][ T1384]  ? __cfi_dump_stack_lvl+0x8/0x8
[   69.893848][ T1384]  dump_stack+0x15/0x24
[   69.898001][ T1384]  should_fail_ex+0x3bf/0x510
[   69.902673][ T1384]  ? __alloc_file+0x28/0x2a0
[   69.907263][ T1384]  __should_failslab+0xac/0xf0
[   69.912029][ T1384]  should_failslab+0x9/0x20
[   69.916532][ T1384]  kmem_cache_alloc+0x3b/0x320
[   69.921312][ T1384]  __alloc_file+0x28/0x2a0
[   69.925729][ T1384]  alloc_empty_file+0x97/0x180
[   69.930492][ T1384]  path_openat+0xf4/0x2f30
[   69.934912][ T1384]  ? kasan_set_track+0x60/0x70
[   69.939671][ T1384]  ? kasan_set_track+0x4b/0x70
[   69.944432][ T1384]  ? __kasan_slab_alloc+0x72/0x80
[   69.949467][ T1384]  ? slab_post_alloc_hook+0x4f/0x2d0
[   69.954754][ T1384]  ? kmem_cache_alloc+0x166/0x320
[   69.959781][ T1384]  ? getname_flags+0xba/0x510
[   69.964467][ T1384]  ? getname+0x19/0x20
[   69.968537][ T1384]  ? do_sys_openat2+0xeb/0x820
[   69.973301][ T1384]  ? __x64_sys_open+0x11c/0x140
[   69.978156][ T1384]  ? x64_sys_call+0x97b/0x9a0
[   69.982832][ T1384]  ? do_syscall_64+0x4c/0xa0
[   69.987421][ T1384]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   69.993493][ T1384]  ? do_filp_open+0x420/0x420
[   69.998172][ T1384]  do_filp_open+0x1ee/0x420
[   70.002678][ T1384]  ? __cfi_do_filp_open+0x10/0x10
[   70.007705][ T1384]  ? alloc_fd+0x4c1/0x570
[   70.012032][ T1384]  do_sys_openat2+0x15e/0x820
[   70.016711][ T1384]  ? __kasan_check_write+0x14/0x20
[   70.021817][ T1384]  ? do_sys_open+0xe0/0xe0
[   70.026229][ T1384]  ? ksys_write+0x1fa/0x260
[   70.030727][ T1384]  ? __cfi_ksys_write+0x10/0x10
[   70.035575][ T1384]  __x64_sys_open+0x11c/0x140
[   70.040250][ T1384]  x64_sys_call+0x97b/0x9a0
[   70.044752][ T1384]  do_syscall_64+0x4c/0xa0
[   70.049172][ T1384]  ? clear_bhb_loop+0x30/0x80
[   70.053854][ T1384]  ? clear_bhb_loop+0x30/0x80
[   70.058531][ T1384]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   70.064416][ T1384] RIP: 0033:0x7f0ac8d9e159
[   70.068834][ T1384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   70.088439][ T1384] RSP: 002b:00007f0ac9c22028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[   70.096852][ T1384] RAX: ffffffffffffffda RBX: 00007f0ac9025fa0 RCX: 00007f0ac8d9e159
[   70.104819][ T1384] RDX: 78e22799f4a46f8e RSI: 0000000000148640 RDI: 0000200000000000
[   70.112791][ T1384] RBP: 00007f0ac9c22090 R08: 0000000000000000 R09: 0000000000000000
[   70.120764][ T1384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   70.128730][ T1384] R13: 00007f0ac9026038 R14: 00007f0ac9025fa0 R15: 00007ffc886cd5f8
[   70.136701][ T1384]  </TASK>
[   70.283839][ T1400] FAULT_INJECTION: forcing a failure.
[   70.283839][ T1400] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[   70.297144][ T1400] CPU: 1 PID: 1400 Comm: syz.7.273 Not tainted syzkaller #0
[   70.304430][ T1400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   70.314481][ T1400] Call Trace:
[   70.317755][ T1400]  <TASK>
[   70.320685][ T1400]  __dump_stack+0x21/0x24
[   70.325022][ T1400]  dump_stack_lvl+0x110/0x170
[   70.329708][ T1400]  ? __cfi_dump_stack_lvl+0x8/0x8
[   70.334746][ T1400]  ? __cfi_rt_task_fits_cpu+0x10/0x10
[   70.340119][ T1400]  dump_stack+0x15/0x24
[   70.344278][ T1400]  should_fail_ex+0x3bf/0x510
[   70.348952][ T1400]  should_fail_alloc_page+0x61/0x90
[   70.354156][ T1400]  prepare_alloc_pages+0x131/0x570
[   70.359270][ T1400]  ? __alloc_pages_bulk+0x9d0/0x9d0
[   70.364470][ T1400]  ? __cfi_avc_has_perm_noaudit+0x10/0x10
[   70.370186][ T1400]  __alloc_pages+0x15b/0x610
[   70.374780][ T1400]  ? __cfi___alloc_pages+0x10/0x10
[   70.379894][ T1400]  ? percpu_counter_add_batch+0x13c/0x160
[   70.385623][ T1400]  __folio_alloc+0x12/0x40
[   70.390041][ T1400]  shmem_alloc_and_acct_folio+0x6dd/0x8c0
[   70.395760][ T1400]  ? _raw_spin_unlock_irqrestore+0x5a/0x80
[   70.401568][ T1400]  ? shmem_replace_folio+0x660/0x660
[   70.406855][ T1400]  ? preempt_schedule_irq+0xca/0x120
[   70.412151][ T1400]  ? __filemap_get_folio+0x453/0xa70
[   70.417434][ T1400]  ? __sanitizer_cov_trace_const_cmp4+0x1/0x90
[   70.423592][ T1400]  ? __filemap_get_folio+0x848/0xa70
[   70.428876][ T1400]  ? __cfi___filemap_get_folio+0x10/0x10
[   70.434515][ T1400]  shmem_get_folio_gfp+0xd6d/0x20f0
[   70.439724][ T1400]  shmem_fallocate+0x8b9/0xc90
[   70.444492][ T1400]  ? __cfi_shmem_fallocate+0x10/0x10
[   70.449779][ T1400]  ? asm_sysvec_apic_timer_interrupt+0x1b/0x20
[   70.455976][ T1400]  vfs_fallocate+0x4ca/0x5a0
[   70.460565][ T1400]  __x64_sys_fallocate+0xc0/0x110
[   70.465591][ T1400]  x64_sys_call+0x7fa/0x9a0
[   70.470093][ T1400]  do_syscall_64+0x4c/0xa0
[   70.474511][ T1400]  ? clear_bhb_loop+0x30/0x80
[   70.479189][ T1400]  ? clear_bhb_loop+0x30/0x80
[   70.483863][ T1400]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   70.489761][ T1400] RIP: 0033:0x7fbf9bb9e159
[   70.494175][ T1400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   70.513779][ T1400] RSP: 002b:00007fbf9c9e4028 EFLAGS: 00000246 ORIG_RAX: 000000000000011d
[   70.522190][ T1400] RAX: ffffffffffffffda RBX: 00007fbf9be26090 RCX: 00007fbf9bb9e159
[   70.524679][   T28] kauditd_printk_skb: 10 callbacks suppressed
[   70.524690][   T28] audit: type=1400 audit(1790302014.525:434): avc:  denied  { read } for  pid=1396 comm="syz.7.273" name="msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   70.530153][ T1400] RDX: 0000000000008e14 RSI: 0000000000000000 RDI: 0000000000000007
[   70.530164][ T1400] RBP: 00007fbf9c9e4090 R08: 0000000000000000 R09: 0000000000000000
[   70.530174][ T1400] R10: 000000000008ffff R11: 0000000000000246 R12: 0000000000000001
[   70.530184][ T1400] R13: 00007fbf9be26128 R14: 00007fbf9be26090 R15: 00007ffe279a2898
[   70.530197][ T1400]  </TASK>
[   70.566673][ T1402] loop5: detected capacity change from 0 to 128
[   70.624648][ T1404] x_tables: duplicate underflow at hook 1
[   70.633249][   T28] audit: type=1400 audit(1790302014.525:435): avc:  denied  { open } for  pid=1396 comm="syz.7.273" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   70.666374][ T1402] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[   70.678694][ T1402] ext4 filesystem being mounted at /45/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   70.807160][  T380] EXT4-fs (loop5): unmounting filesystem.
[   70.820527][   T28] audit: type=1400 audit(1790302015.115:437): avc:  denied  { open } for  pid=1408 comm="syz.6.277" path="/dev/input/event2" dev="devtmpfs" ino=277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   70.827940][  T222] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[   70.853085][   T28] audit: type=1400 audit(1790302015.115:436): avc:  denied  { read } for  pid=1410 comm="syz.0.278" name="event0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   70.876592][   T28] audit: type=1400 audit(1790302015.155:438): avc:  denied  { ioctl } for  pid=1408 comm="syz.6.277" path="/dev/input/event2" dev="devtmpfs" ino=277 ioctlcmd=0x4592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   71.027898][  T222] usb 2-1: Using ep0 maxpacket: 16
[   71.034176][  T222] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   71.046810][  T222] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   71.056319][  T222] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   71.064476][  T222] usb 2-1: Product: syz
[   71.068857][  T222] usb 2-1: Manufacturer: syz
[   71.073496][  T222] usb 2-1: SerialNumber: syz
[   71.077030][   T28] audit: type=1400 audit(1790302015.375:439): avc:  denied  { bind } for  pid=1410 comm="syz.0.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   71.237901][  T308] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[   71.274285][   T28] audit: type=1400 audit(1790302015.575:440): avc:  denied  { write } for  pid=1423 comm="syz.5.283" name="ip6_flowlabel" dev="proc" ino=4026533023 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[   71.418804][  T308] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   71.428957][  T308] usb 8-1: config 0 has no interfaces?
[   71.435660][  T308] usb 8-1: New USB device found, idVendor=110a, idProduct=1130, bcdDevice=c4.60
[   71.444741][  T308] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=243
[   71.452932][  T308] usb 8-1: Product: syz
[   71.457134][  T308] usb 8-1: Manufacturer: syz
[   71.461756][  T308] usb 8-1: SerialNumber: syz
[   71.466809][  T308] usb 8-1: config 0 descriptor??
[   71.547862][    T6] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[   71.761205][   T28] audit: type=1400 audit(1790302016.055:441): avc:  denied  { read write } for  pid=1428 comm="syz.0.285" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   71.873249][   T28] audit: type=1400 audit(1790302016.055:442): avc:  denied  { open } for  pid=1428 comm="syz.0.285" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   71.897291][   T28] audit: type=1400 audit(1790302016.055:443): avc:  denied  { ioctl } for  pid=1428 comm="syz.0.285" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   71.922632][    T6] usb 6-1: Using ep0 maxpacket: 32
[   71.935183][    T6] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7
[   71.946176][    T6] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 115, changing to 7
[   71.947879][  T814] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[   71.964654][    T6] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40
[   71.973967][    T6] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   71.982213][    T6] usb 6-1: Product: syz
[   71.986415][    T6] usb 6-1: Manufacturer: syz
[   71.991173][    T6] usb 6-1: SerialNumber: syz
[   71.996943][   T19] usb 8-1: USB disconnect, device number 6
[   72.029273][  T222] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS
[   72.035363][  T222] cdc_ncm 2-1:1.0: bind() failure
[   72.041360][  T222] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[   72.048371][  T222] cdc_ncm 2-1:1.1: bind() failure
[   72.058422][  T222] usb 2-1: USB disconnect, device number 8
[   72.150262][  T814] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[   72.159417][  T814] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   72.167414][  T814] usb 7-1: Product: syz
[   72.171604][  T814] usb 7-1: Manufacturer: syz
[   72.176202][  T814] usb 7-1: SerialNumber: syz
[   72.209712][    T6] usb 6-1: Can't get UAC3 power state for id 10
[   72.218925][    T6] usb 6-1: 2:0: failed to get current value for ch 0 (-71)
[   72.247917][    T6] usb 6-1: 2:0: cannot get min/max values for control 2 (id 2)
[   72.262204][    T6] usb 6-1: USB disconnect, device number 9
[   72.271233][  T336] udevd[336]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   72.382354][ T1426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   72.390917][ T1426] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   72.566131][ T1447] x_tables: duplicate underflow at hook 1
[   72.636402][ T1454] loop1: detected capacity change from 0 to 128
[   72.655842][ T1454] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   72.667305][ T1454] ext4 filesystem being mounted at /68/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   72.710612][  T288] EXT4-fs (loop1): unmounting filesystem.
[   72.841439][ T1467] loop5: detected capacity change from 0 to 512
[   72.878261][ T1467] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[   72.893199][  T814] (unnamed net_device) (uninitialized): Assigned a random MAC address: ea:b0:6a:5a:00:5e
[   72.910634][  T814] rtl8150 7-1:1.0: eth1: rtl8150 is detected
[   72.945211][  T814] usb 7-1: USB disconnect, device number 5
[   73.168460][ T1494] loop5: detected capacity change from 0 to 16
[   73.356150][ T1506] input: syz1 as /devices/virtual/input/input5
[   73.597899][   T19] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[   73.637889][    T6] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[   73.777909][   T19] usb 8-1: Using ep0 maxpacket: 32
[   73.784098][   T19] usb 8-1: config 0 has an invalid interface number: 196 but max is 0
[   73.792460][   T19] usb 8-1: config 0 has no interface number 0
[   73.798728][   T19] usb 8-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[   73.808755][   T19] usb 8-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[   73.818690][   T19] usb 8-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[   73.828789][   T19] usb 8-1: config 0 interface 196 has no altsetting 0
[   73.836540][    T6] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   73.846733][    T6] usb 1-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[   73.859807][   T19] usb 8-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a
[   73.868910][   T19] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   73.876976][   T19] usb 8-1: Product: syz
[   73.881163][   T19] usb 8-1: Manufacturer: syz
[   73.885839][   T19] usb 8-1: SerialNumber: syz
[   73.895003][    T6] usb 1-1: New USB device found, idVendor=05ac, idProduct=12a8, bcdDevice= 0.01
[   73.904448][    T6] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   73.915949][   T19] usb 8-1: config 0 descriptor??
[   73.920979][    T6] usb 1-1: Product: syz
[   73.925164][    T6] usb 1-1: Manufacturer: syz
[   73.925199][ T1504] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[   73.929810][    T6] usb 1-1: SerialNumber: syz
[   73.948804][    T6] ipheth 1-1:1.0: Unable to find endpoints
[   74.000296][ T1514] loop1: detected capacity change from 0 to 40427
[   74.007367][ T1514] F2FS-fs (loop1): Invalid SB checksum offset: 0
[   74.013778][ T1514] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[   74.022473][ T1514] F2FS-fs (loop1): invalid crc value
[   74.027922][  T222] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[   74.035590][ T1514] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[   74.061120][ T1514] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[   74.068194][ T1514] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   74.150057][  T814] usb 1-1: USB disconnect, device number 10
[   74.176914][ T1520] x_tables: duplicate underflow at hook 1
[   74.217893][  T222] usb 6-1: Using ep0 maxpacket: 16
[   74.224323][  T222] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   74.240476][  T222] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   74.249586][  T222] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   74.257601][  T222] usb 6-1: Product: syz
[   74.261807][  T222] usb 6-1: Manufacturer: syz
[   74.266388][  T222] usb 6-1: SerialNumber: syz
[   74.401961][ T1524] device bridge1 entered promiscuous mode
[   74.611045][ T1526] FAULT_INJECTION: forcing a failure.
[   74.611045][ T1526] name failslab, interval 1, probability 0, space 0, times 0
[   74.623745][ T1526] CPU: 0 PID: 1526 Comm: syz.6.303 Not tainted syzkaller #0
[   74.631029][ T1526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   74.641075][ T1526] Call Trace:
[   74.644346][ T1526]  <TASK>
[   74.647274][ T1526]  __dump_stack+0x21/0x24
[   74.651591][ T1526]  dump_stack_lvl+0x110/0x170
[   74.656255][ T1526]  ? __cfi_dump_stack_lvl+0x8/0x8
[   74.661270][ T1526]  dump_stack+0x15/0x24
[   74.665428][ T1526]  should_fail_ex+0x3bf/0x510
[   74.670090][ T1526]  __should_failslab+0xac/0xf0
[   74.674851][ T1526]  should_failslab+0x9/0x20
[   74.679340][ T1526]  __kmem_cache_alloc_node+0x3d/0x2d0
[   74.684704][ T1526]  ? key_alloc+0x318/0xf00
[   74.689112][ T1526]  ? slab_post_alloc_hook+0x6d/0x2d0
[   74.694381][ T1526]  ? key_alloc+0x318/0xf00
[   74.698794][ T1526]  __kmalloc_node_track_caller+0xa1/0x1e0
[   74.704513][ T1526]  ? key_alloc+0x2d3/0xf00
[   74.708936][ T1526]  kmemdup+0x2b/0x60
[   74.712817][ T1526]  key_alloc+0x318/0xf00
[   74.717059][ T1526]  keyring_alloc+0x47/0xb0
[   74.721467][ T1526]  lookup_user_key+0x4ed/0x1150
[   74.726310][ T1526]  ? __cfi_lookup_user_key+0x10/0x10
[   74.731599][ T1526]  ? __cfi_lookup_user_key_possessed+0x10/0x10
[   74.737748][ T1526]  ? __kasan_check_write+0x14/0x20
[   74.742852][ T1526]  __se_sys_request_key+0x224/0x350
[   74.748039][ T1526]  ? __x64_sys_request_key+0xb0/0xb0
[   74.753325][ T1526]  __x64_sys_request_key+0x9b/0xb0
[   74.758423][ T1526]  x64_sys_call+0x69c/0x9a0
[   74.762915][ T1526]  do_syscall_64+0x4c/0xa0
[   74.767323][ T1526]  ? clear_bhb_loop+0x30/0x80
[   74.771987][ T1526]  ? clear_bhb_loop+0x30/0x80
[   74.776652][ T1526]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   74.782521][ T1526] RIP: 0033:0x7f2aedd9e159
[   74.786923][ T1526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   74.806537][ T1526] RSP: 002b:00007f2aeecb3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9
[   74.814943][ T1526] RAX: ffffffffffffffda RBX: 00007f2aee025fa0 RCX: 00007f2aedd9e159
[   74.822923][ T1526] RDX: 0000200000001fee RSI: 0000200000001ffb RDI: 0000200000000040
[   74.830888][ T1526] RBP: 00007f2aeecb3090 R08: 0000000000000000 R09: 0000000000000000
[   74.838848][ T1526] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000001
[   74.846798][ T1526] R13: 00007f2aee026038 R14: 00007f2aee025fa0 R15: 00007ffd6d68f548
[   74.854759][ T1526]  </TASK>
[   74.875531][ T1530] ip_tables: iptables: counters copy to user failed while replacing table
[   74.887081][ T1530] loop6: detected capacity change from 0 to 512
[   74.914857][ T1530] EXT4-fs: Ignoring removed nomblk_io_submit option
[   74.929330][ T1530] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[   74.940815][ T1530] EXT4-fs (loop6): 1 truncate cleaned up
[   74.946483][ T1530] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[   75.058141][  T524] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294901760 (level 0)
[   75.221726][  T524] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294967295 (level 1)
[   75.236112][  T524] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 65535 (level 2)
[   75.252208][  T524] EXT4-fs (loop6): unmounting filesystem.
[   75.350936][ T1541] FAULT_INJECTION: forcing a failure.
[   75.350936][ T1541] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[   75.364256][ T1541] CPU: 1 PID: 1541 Comm: syz.6.306 Not tainted syzkaller #0
[   75.371550][ T1541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   75.381607][ T1541] Call Trace:
[   75.384886][ T1541]  <TASK>
[   75.388169][ T1541]  __dump_stack+0x21/0x24
[   75.392511][ T1541]  dump_stack_lvl+0x110/0x170
[   75.397191][ T1541]  ? __cfi_dump_stack_lvl+0x8/0x8
[   75.402224][ T1541]  ? __cfi_push_rt_tasks+0x10/0x10
[   75.407337][ T1541]  ? _raw_spin_unlock+0x4c/0x70
[   75.412194][ T1541]  ? __cfi_push_rt_tasks+0x10/0x10
[   75.417303][ T1541]  dump_stack+0x15/0x24
[   75.421469][ T1541]  should_fail_ex+0x3bf/0x510
[   75.426146][ T1541]  should_fail_alloc_page+0x61/0x90
[   75.431352][ T1541]  prepare_alloc_pages+0x131/0x570
[   75.436472][ T1541]  ? __alloc_pages_bulk+0x9d0/0x9d0
[   75.441676][ T1541]  __alloc_pages+0x15b/0x610
[   75.446268][ T1541]  ? xas_start+0x31d/0x3e0
[   75.450685][ T1541]  ? __cfi___alloc_pages+0x10/0x10
[   75.455805][ T1541]  ? asm_sysvec_reschedule_ipi+0x1b/0x20
[   75.461438][ T1541]  ? append_pipe+0x259/0x6a0
[   75.466032][ T1541]  append_pipe+0x272/0x6a0
[   75.470446][ T1541]  pipe_zero+0xaa/0x140
[   75.474611][ T1541]  iov_iter_zero+0x276/0xf60
[   75.479208][ T1541]  ? __cfi_iov_iter_zero+0x10/0x10
[   75.484323][ T1541]  ? __cfi_push_rt_tasks+0x10/0x10
[   75.489439][ T1541]  shmem_file_read_iter+0x54a/0x800
[   75.494647][ T1541]  generic_file_splice_read+0x1d9/0x530
[   75.500199][ T1541]  ? __cfi_preempt_schedule_irq+0x10/0x10
[   75.505928][ T1541]  ? __cfi_generic_file_splice_read+0x10/0x10
[   75.511997][ T1541]  ? asm_sysvec_reschedule_ipi+0x1b/0x20
[   75.517631][ T1541]  ? __cfi_generic_file_splice_read+0x10/0x10
[   75.523702][ T1541]  splice_direct_to_actor+0x3d0/0xb30
[   75.529083][ T1541]  ? __cfi_direct_splice_actor+0x10/0x10
[   75.534732][ T1541]  ? __cfi_splice_direct_to_actor+0x10/0x10
[   75.540629][ T1541]  ? security_file_permission+0x94/0xb0
[   75.546179][ T1541]  ? rw_verify_area+0xa7/0x1c0
[   75.550942][ T1541]  do_splice_direct+0x1c2/0x2d0
[   75.555796][ T1541]  ? __cfi_do_splice_direct+0x10/0x10
[   75.561176][ T1541]  ? __cfi_selinux_file_permission+0x10/0x10
[   75.567245][ T1541]  vfs_copy_file_range+0xb36/0x1800
[   75.572451][ T1541]  ? __cfi_vfs_copy_file_range+0x10/0x10
[   75.578084][ T1541]  ? __se_sys_copy_file_range+0x238/0x460
[   75.583808][ T1541]  __se_sys_copy_file_range+0x316/0x460
[   75.589353][ T1541]  ? __x64_sys_copy_file_range+0x100/0x100
[   75.595157][ T1541]  ? irqentry_exit+0x37/0x40
[   75.599745][ T1541]  __x64_sys_copy_file_range+0xe5/0x100
[   75.605294][ T1541]  x64_sys_call+0x66b/0x9a0
[   75.609796][ T1541]  do_syscall_64+0x4c/0xa0
[   75.614218][ T1541]  ? clear_bhb_loop+0x30/0x80
[   75.618890][ T1541]  ? clear_bhb_loop+0x30/0x80
[   75.623563][ T1541]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   75.629436][ T1541] RIP: 0033:0x7f2aedd9e159
[   75.633831][ T1541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   75.653415][ T1541] RSP: 002b:00007f2aeec92028 EFLAGS: 00000246 ORIG_RAX: 0000000000000146
[   75.661811][ T1541] RAX: ffffffffffffffda RBX: 00007f2aee026090 RCX: 00007f2aedd9e159
[   75.669763][ T1541] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000006
[   75.677713][ T1541] RBP: 00007f2aeec92090 R08: 0000000000000009 R09: 0000000000000000
[   75.685666][ T1541] R10: 0000200000000500 R11: 0000000000000246 R12: 0000000000000001
[   75.693627][ T1541] R13: 00007f2aee026128 R14: 00007f2aee026090 R15: 00007ffd6d68f548
[   75.701595][ T1541]  </TASK>
[   75.727041][   T28] kauditd_printk_skb: 16 callbacks suppressed
[   75.727063][   T28] audit: type=1400 audit(1790302019.635:460): avc:  denied  { watch watch_reads } for  pid=1538 comm="syz.6.306" path="/54" dev="tmpfs" ino=318 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   75.768008][  T308] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[   75.967871][  T308] usb 2-1: Using ep0 maxpacket: 32
[   75.986482][  T308] usb 2-1: config 0 has no interfaces?
[   75.997424][  T308] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   76.015190][  T308] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   76.040082][  T308] usb 2-1: config 0 descriptor??
[   76.170747][ T1551] loop6: detected capacity change from 0 to 512
[   76.224366][ T1551] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[   76.248466][ T1551] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   76.258629][ T1548] loop0: detected capacity change from 0 to 40427
[   76.264781][  T308] usb 2-1: USB disconnect, device number 9
[   76.268901][ T1548] F2FS-fs (loop0): Invalid SB checksum offset: 0
[   76.277659][ T1548] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[   76.286465][ T1548] F2FS-fs (loop0): invalid crc value
[   76.302775][ T1548] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[   76.360913][ T1548] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[   76.375654][ T1548] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   76.394908][   T19] ipheth 8-1:0.196: ipheth_get_macaddr: usb_control_msg: -71
[   76.412514][   T19] ipheth: probe of 8-1:0.196 failed with error -71
[   76.430842][   T19] usb 8-1: USB disconnect, device number 7
[   76.472289][ T1561] x_tables: duplicate underflow at hook 1
[   76.617446][  T524] EXT4-fs (loop6): unmounting filesystem.
[   76.633927][ T1566] fuse: Bad value for 'fd'
[   76.665000][ T1571] FAULT_INJECTION: forcing a failure.
[   76.665000][ T1571] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   76.691148][ T1571] CPU: 1 PID: 1571 Comm: syz.7.316 Not tainted syzkaller #0
[   76.698462][ T1571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   76.708515][ T1571] Call Trace:
[   76.711794][ T1571]  <TASK>
[   76.714721][ T1571]  __dump_stack+0x21/0x24
[   76.719059][ T1571]  dump_stack_lvl+0x110/0x170
[   76.723723][ T1571]  ? __cfi_dump_stack_lvl+0x8/0x8
[   76.728732][ T1571]  dump_stack+0x15/0x24
[   76.732871][ T1571]  should_fail_ex+0x3bf/0x510
[   76.737530][ T1571]  should_fail+0xb/0x10
[   76.741662][ T1571]  should_fail_usercopy+0x1a/0x20
[   76.746665][ T1571]  _copy_to_user+0x1e/0x90
[   76.751067][ T1571]  simple_read_from_buffer+0xe9/0x160
[   76.756423][ T1571]  proc_fail_nth_read+0x1a6/0x220
[   76.761432][ T1571]  ? __cfi_proc_fail_nth_read+0x10/0x10
[   76.766959][ T1571]  ? security_file_permission+0x94/0xb0
[   76.772493][ T1571]  ? __cfi_proc_fail_nth_read+0x10/0x10
[   76.778022][ T1571]  vfs_read+0x286/0x930
[   76.782158][ T1571]  ? __cfi_vfs_read+0x10/0x10
[   76.786812][ T1571]  ? __kasan_check_write+0x14/0x20
[   76.791903][ T1571]  ? mutex_lock+0x93/0x1b0
[   76.796300][ T1571]  ? __cfi_mutex_lock+0x10/0x10
[   76.801132][ T1571]  ? __fdget_pos+0x2cd/0x380
[   76.805700][ T1571]  ? ksys_read+0x70/0x260
[   76.810015][ T1571]  ksys_read+0x14a/0x260
[   76.814239][ T1571]  ? __cfi_ksys_read+0x10/0x10
[   76.818986][ T1571]  ? fput+0x154/0x1a0
[   76.822951][ T1571]  ? debug_smp_processor_id+0x17/0x20
[   76.828305][ T1571]  __x64_sys_read+0x7b/0x90
[   76.832789][ T1571]  x64_sys_call+0x2f/0x9a0
[   76.837186][ T1571]  do_syscall_64+0x4c/0xa0
[   76.841585][ T1571]  ? clear_bhb_loop+0x30/0x80
[   76.846242][ T1571]  ? clear_bhb_loop+0x30/0x80
[   76.850903][ T1571]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   76.856778][ T1571] RIP: 0033:0x7fbf9bb5e98e
[   76.861172][ T1571] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   76.880760][ T1571] RSP: 002b:00007fbf9ca04fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   76.889155][ T1571] RAX: ffffffffffffffda RBX: 00007fbf9ca056c0 RCX: 00007fbf9bb5e98e
[   76.897106][ T1571] RDX: 000000000000000f RSI: 00007fbf9ca050a0 RDI: 0000000000000005
[   76.905054][ T1571] RBP: 00007fbf9ca05090 R08: 0000000000000000 R09: 0000000000000000
[   76.913004][ T1571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   76.920954][ T1571] R13: 00007fbf9be26038 R14: 00007fbf9be25fa0 R15: 00007ffe279a2898
[   76.928909][ T1571]  </TASK>
[   76.983642][   T28] audit: type=1400 audit(1790302021.285:461): avc:  denied  { connect } for  pid=1576 comm="syz.1.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   77.009963][ T1577] loop7: detected capacity change from 0 to 4096
[   77.027326][ T1577] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   77.036233][ T1577] EXT4-fs (loop7): Test dummy encryption mode enabled
[   77.043834][ T1577] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003]
[   77.055230][  T222] cdc_ncm 6-1:1.0: failed GET_NTB_PARAMETERS
[   77.062548][  T222] cdc_ncm 6-1:1.0: bind() failure
[   77.068559][ T1577] System zones: 0-5
[   77.070232][  T222] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found
[   77.079292][  T222] cdc_ncm 6-1:1.1: bind() failure
[   77.080815][ T1577] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[   77.085539][  T222] usb 6-1: USB disconnect, device number 10
[   77.099116][  T308] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[   77.175586][ T1189] EXT4-fs (loop7): unmounting filesystem.
[   77.213117][   T28] audit: type=1400 audit(1790302021.515:462): avc:  denied  { ioctl } for  pid=1585 comm="syz.5.321" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   77.244744][ T1586] loop5: detected capacity change from 0 to 512
[   77.263726][   T28] audit: type=1400 audit(1790302021.545:463): avc:  denied  { search } for  pid=1585 comm="syz.5.321" name="/" dev="configfs" ino=13342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   77.273187][ T1586] EXT4-fs (loop5): bad s_min_extra_isize: 544
[   77.300451][  T308] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[   77.317845][  T308] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   77.325882][   T28] audit: type=1400 audit(1790302021.545:464): avc:  denied  { write } for  pid=1585 comm="syz.5.321" name="usb_gadget" dev="configfs" ino=13343 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   77.349278][  T308] usb 1-1: Product: syz
[   77.353447][  T308] usb 1-1: Manufacturer: syz
[   77.367842][  T308] usb 1-1: SerialNumber: syz
[   77.382539][   T28] audit: type=1400 audit(1790302021.545:465): avc:  denied  { add_name } for  pid=1585 comm="syz.5.321" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   77.420443][   T28] audit: type=1400 audit(1790302021.545:466): avc:  denied  { create } for  pid=1585 comm="syz.5.321" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1
[   77.459028][   T28] audit: type=1400 audit(1790302021.755:467): avc:  denied  { create } for  pid=1585 comm="syz.5.321" name="u" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1
[   77.552183][ T1584] loop1: detected capacity change from 0 to 40427
[   77.559649][   T28] audit: type=1400 audit(1790302021.865:468): avc:  denied  { unmount } for  pid=380 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[   77.568260][ T1584] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[   77.588047][ T1563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   77.596480][ T1563] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   77.614142][ T1584] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   77.628139][ T1584] F2FS-fs (loop1): invalid crc value
[   77.654406][ T1584] F2FS-fs (loop1): Found nat_bits in checkpoint
[   77.688149][ T1605] x_tables: duplicate underflow at hook 1
[   77.718083][ T1584] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   77.735279][ T1584] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   77.869218][ T1597] loop6: detected capacity change from 0 to 40427
[   77.879446][ T1597] F2FS-fs (loop6): Invalid SB checksum offset: 0
[   77.886130][ T1597] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock
[   77.906246][ T1597] F2FS-fs (loop6): invalid crc value
[   77.913240][ T1597] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[   77.945421][ T1597] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0
[   77.953397][  T288] syz-executor: attempt to access beyond end of device
[   77.953397][  T288] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[   77.953954][ T1597] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[   78.209996][  T308] (unnamed net_device) (uninitialized): Assigned a random MAC address: 1e:3e:ed:31:be:01
[   78.224422][  T308] rtl8150 1-1:1.0: eth1: rtl8150 is detected
[   78.231991][  T308] usb 1-1: USB disconnect, device number 11
[   78.247939][   T28] audit: type=1400 audit(1790302022.545:469): avc:  denied  { sys_module } for  pid=1620 comm="syz.6.328" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[   78.538235][   T24] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[   78.729095][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   78.740149][   T24] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[   78.749540][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   78.761218][   T24] usb 2-1: config 0 descriptor??
[   78.817849][  T308] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[   79.017912][  T308] usb 8-1: Using ep0 maxpacket: 16
[   79.024179][  T308] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   79.036776][  T308] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   79.046053][  T308] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   79.054269][  T308] usb 8-1: Product: syz
[   79.058794][  T308] usb 8-1: Manufacturer: syz
[   79.063426][  T308] usb 8-1: SerialNumber: syz
[   79.176456][ T1643] loop6: detected capacity change from 0 to 1024
[   79.183279][   T24] usbhid 2-1:0.0: can't add hid device: -71
[   79.189670][   T24] usbhid: probe of 2-1:0.0 failed with error -71
[   79.201423][ T1643] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[   79.206140][   T24] usb 2-1: USB disconnect, device number 10
[   79.210014][ T1643] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   79.230884][ T1643] EXT4-fs error (device loop6): ext4_map_blocks:747: inode #15: block 3: comm syz.6.332: lblock 3 mapped to illegal pblock 3 (length 1)
[   79.245058][ T1643] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117
[   79.257895][ T1643] EXT4-fs (loop6): This should not happen!! Data will be lost
[   79.257895][ T1643] 
[   79.269183][ T1643] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #15: block 3: comm syz.6.332: lblock 3 mapped to illegal pblock 3 (length 1)
[   79.283314][ T1643] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #15: block 3: comm syz.6.332: lblock 3 mapped to illegal pblock 3 (length 1)
[   79.297620][ T1643] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #15: block 3: comm syz.6.332: lblock 3 mapped to illegal pblock 3 (length 1)
[   79.311988][ T1643] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #15: block 3: comm syz.6.332: lblock 3 mapped to illegal pblock 3 (length 1)
[   79.326215][ T1643] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #15: block 3: comm syz.6.332: lblock 3 mapped to illegal pblock 3 (length 1)
[   79.340359][ T1643] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #15: block 3: comm syz.6.332: lblock 3 mapped to illegal pblock 3 (length 1)
[   79.359661][ T1643] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #15: block 3: comm syz.6.332: lblock 3 mapped to illegal pblock 3 (length 1)
[   79.374127][ T1643] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #15: block 3: comm syz.6.332: lblock 3 mapped to illegal pblock 3 (length 1)
[   79.388703][ T1643] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #15: block 3: comm syz.6.332: lblock 3 mapped to illegal pblock 3 (length 1)
[   79.687455][ T1655] x_tables: duplicate underflow at hook 1
[   79.803570][ T1658] loop0: detected capacity change from 0 to 256
[   80.029755][  T524] EXT4-fs (loop6): unmounting filesystem.
[   80.207890][   T24] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[   80.387091][ T1666] loop6: detected capacity change from 0 to 40427
[   80.406565][ T1666] F2FS-fs (loop6): Invalid SB checksum offset: 0
[   80.422731][ T1666] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock
[   80.431132][   T24] usb 2-1: device descriptor read/64, error -71
[   80.451501][ T1666] F2FS-fs (loop6): invalid crc value
[   80.454387][ T1672] loop5: detected capacity change from 0 to 8192
[   80.477040][ T1666] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[   80.605306][ T1666] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0
[   80.612762][ T1666] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[   80.717868][   T24] usb 2-1: device descriptor read/64, error -71
[   80.912134][ T1679] capability: warning: `syz.0.342' uses 32-bit capabilities (legacy support in use)
[   80.927936][  T222] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[   80.997862][   T24] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[   81.084661][  T222] usb 6-1: device descriptor read/64, error -71
[   81.107870][  T709] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[   81.155861][ T1693] x_tables: duplicate underflow at hook 1
[   81.167975][   T24] usb 2-1: device descriptor read/64, error -71
[   81.320399][  T709] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[   81.333863][  T709] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   81.349487][  T709] usb 7-1: Product: syz
[   81.358023][  T709] usb 7-1: Manufacturer: syz
[   81.367875][  T222] usb 6-1: device descriptor read/64, error -71
[   81.374377][  T709] usb 7-1: SerialNumber: syz
[   81.437909][   T24] usb 2-1: device descriptor read/64, error -71
[   81.478931][   T28] kauditd_printk_skb: 6 callbacks suppressed
[   81.478944][   T28] audit: type=1400 audit(1790302025.785:476): avc:  denied  { ioctl } for  pid=1694 comm="syz.0.347" path="socket:[24860]" dev="sockfs" ino=24860 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   81.524528][   T28] audit: type=1400 audit(1790302025.825:477): avc:  denied  { getopt } for  pid=1696 comm="syz.0.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   81.557929][   T24] usb usb2-port1: attempt power cycle
[   81.570790][  T308] cdc_ncm 8-1:1.0: failed GET_NTB_PARAMETERS
[   81.576868][  T308] cdc_ncm 8-1:1.0: bind() failure
[   81.583051][  T308] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found
[   81.591139][ T1686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   81.599601][ T1686] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   81.599692][  T308] cdc_ncm 8-1:1.1: bind() failure
[   81.614229][  T308] usb 8-1: USB disconnect, device number 8
[   81.634800][ T1700] loop7: detected capacity change from 0 to 16
[   81.643141][ T1700] erofs: (device loop7): mounted with root inode @ nid 36.
[   81.650567][ T1700] SELinux: (dev loop7, type erofs) getxattr errno 117
[   81.677892][  T222] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[   81.694813][ T1700] FAULT_INJECTION: forcing a failure.
[   81.694813][ T1700] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   81.707959][ T1700] CPU: 0 PID: 1700 Comm: syz.7.349 Not tainted syzkaller #0
[   81.715240][ T1700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   81.725278][ T1700] Call Trace:
[   81.728554][ T1700]  <TASK>
[   81.731472][ T1700]  __dump_stack+0x21/0x24
[   81.735785][ T1700]  dump_stack_lvl+0x110/0x170
[   81.740452][ T1700]  ? __cfi_dump_stack_lvl+0x8/0x8
[   81.745466][ T1700]  dump_stack+0x15/0x24
[   81.749603][ T1700]  should_fail_ex+0x3bf/0x510
[   81.754279][ T1700]  should_fail+0xb/0x10
[   81.758435][ T1700]  should_fail_usercopy+0x1a/0x20
[   81.763457][ T1700]  strncpy_from_user+0x24/0x2c0
[   81.768313][ T1700]  ? kmem_cache_alloc+0x166/0x320
[   81.773328][ T1700]  ? getname_flags+0xba/0x510
[   81.777992][ T1700]  getname_flags+0xf5/0x510
[   81.782490][ T1700]  getname+0x19/0x20
[   81.786372][ T1700]  do_sys_openat2+0xeb/0x820
[   81.790971][ T1700]  ? do_sys_open+0xe0/0xe0
[   81.795386][ T1700]  ? __this_cpu_preempt_check+0x13/0x20
[   81.800930][ T1700]  ? xfd_validate_state+0x70/0x150
[   81.806038][ T1700]  __x64_sys_openat+0x136/0x160
[   81.810877][ T1700]  x64_sys_call+0x783/0x9a0
[   81.815369][ T1700]  do_syscall_64+0x4c/0xa0
[   81.819789][ T1700]  ? clear_bhb_loop+0x30/0x80
[   81.824460][ T1700]  ? clear_bhb_loop+0x30/0x80
[   81.829134][ T1700]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   81.835026][ T1700] RIP: 0033:0x7fbf9bb5e98e
[   81.839426][ T1700] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   81.859010][ T1700] RSP: 002b:00007fbf9ca04f18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[   81.867405][ T1700] RAX: ffffffffffffffda RBX: 00007fbf9ca056c0 RCX: 00007fbf9bb5e98e
[   81.868064][  T222] usb 6-1: device descriptor read/64, error -71
[   81.875369][ T1700] RDX: 0000000000000000 RSI: 00007fbf9bc347a6 RDI: ffffffffffffff9c
[   81.875384][ T1700] RBP: 00007fbf9bc3506b R08: 0000000000000000 R09: 0000000000000000
[   81.875396][ T1700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   81.875407][ T1700] R13: 00007fbf9be26038 R14: 00007fbf9be25fa0 R15: 00007ffe279a2898
[   81.913409][ T1700]  </TASK>
[   81.987859][   T24] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[   82.018789][   T24] usb 2-1: device descriptor read/8, error -71
[   82.135214][ T1711] loop7: detected capacity change from 0 to 512
[   82.141581][  T222] usb 6-1: device descriptor read/64, error -71
[   82.153645][ T1711] EXT4-fs error (device loop7): ext4_orphan_get:1405: inode #15: comm syz.7.352: inode has both inline data and extents flags
[   82.166892][ T1711] EXT4-fs error (device loop7): ext4_orphan_get:1410: comm syz.7.352: couldn't read orphan inode 15 (err -117)
[   82.170438][  T709] (unnamed net_device) (uninitialized): Assigned a random MAC address: 9a:b1:3d:1c:b0:95
[   82.180737][ T1711] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[   82.190834][  T709] rtl8150 7-1:1.0: eth1: rtl8150 is detected
[   82.204886][  T709] usb 7-1: USB disconnect, device number 6
[   82.211242][   T24] usb 2-1: device descriptor read/8, error -71
[   82.224743][ T1189] EXT4-fs (loop7): unmounting filesystem.
[   82.268086][  T222] usb usb6-port1: attempt power cycle
[   82.316151][ T1716] loop7: detected capacity change from 0 to 40427
[   82.323191][ T1716] F2FS-fs (loop7): Invalid SB checksum offset: 0
[   82.330791][ T1716] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock
[   82.339578][ T1716] F2FS-fs (loop7): invalid crc value
[   82.346214][ T1716] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[   82.367612][ T1716] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0
[   82.375110][ T1716] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[   82.477934][   T24] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[   82.509251][   T24] usb 2-1: device descriptor read/8, error -71
[   82.659262][   T24] usb 2-1: device descriptor read/8, error -71
[   82.677860][  T222] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[   82.701476][ T1729] loop7: detected capacity change from 0 to 40427
[   82.710884][ T1729] F2FS-fs (loop7): Invalid SB checksum offset: 0
[   82.717338][ T1729] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock
[   82.726019][  T222] usb 6-1: device descriptor read/8, error -71
[   82.732640][ T1729] F2FS-fs (loop7): invalid crc value
[   82.739223][ T1729] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[   82.762157][ T1729] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0
[   82.769240][ T1729] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[   82.778091][   T24] usb usb2-port1: unable to enumerate USB device
[   82.790146][   T28] audit: type=1400 audit(1790302027.095:478): avc:  denied  { create } for  pid=1728 comm="syz.7.356" name=2E02 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1
[   82.813832][ T1189] syz-executor: attempt to access beyond end of device
[   82.813832][ T1189] loop7: rw=2049, sector=45096, nr_sectors = 32 limit=40427
[   82.878943][  T222] usb 6-1: device descriptor read/8, error -71
[   82.900143][ T1736] x_tables: duplicate underflow at hook 1
[   82.949282][ T1738] loop1: detected capacity change from 0 to 512
[   82.957533][ T1738] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.358: inode has both inline data and extents flags
[   82.971054][ T1738] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.358: couldn't read orphan inode 15 (err -117)
[   82.985163][ T1738] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   83.149499][  T222] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[   83.157600][  T288] EXT4-fs (loop1): unmounting filesystem.
[   83.171683][ T1744] FAULT_INJECTION: forcing a failure.
[   83.171683][ T1744] name failslab, interval 1, probability 0, space 0, times 0
[   83.178906][  T222] usb 6-1: device descriptor read/8, error -71
[   83.184399][ T1744] CPU: 0 PID: 1744 Comm: syz.1.360 Not tainted syzkaller #0
[   83.197695][ T1744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   83.207729][ T1744] Call Trace:
[   83.210992][ T1744]  <TASK>
[   83.213902][ T1744]  __dump_stack+0x21/0x24
[   83.218216][ T1744]  dump_stack_lvl+0x110/0x170
[   83.222875][ T1744]  ? __cfi_dump_stack_lvl+0x8/0x8
[   83.227895][ T1744]  dump_stack+0x15/0x24
[   83.232047][ T1744]  should_fail_ex+0x3bf/0x510
[   83.236718][ T1744]  __should_failslab+0xac/0xf0
[   83.241474][ T1744]  should_failslab+0x9/0x20
[   83.245962][ T1744]  __kmem_cache_alloc_node+0x3d/0x2d0
[   83.251318][ T1744]  ? __inet_diag_dump_start+0x8e/0x980
[   83.256757][ T1744]  ? __inet_diag_dump_start+0x8e/0x980
[   83.262197][ T1744]  kmalloc_trace+0x29/0xb0
[   83.266595][ T1744]  __inet_diag_dump_start+0x8e/0x980
[   83.271861][ T1744]  ? __netlink_lookup+0x387/0x3b0
[   83.276870][ T1744]  inet_diag_dump_start+0x1a/0x20
[   83.281879][ T1744]  __netlink_dump_start+0x4f0/0x860
[   83.287060][ T1744]  inet_diag_handler_cmd+0x1cd/0x2a0
[   83.292327][ T1744]  ? __alloc_skb+0x226/0x4a0
[   83.296897][ T1744]  ? netlink_sendmsg+0x635/0xbd0
[   83.301818][ T1744]  ? __cfi_inet_diag_handler_cmd+0x10/0x10
[   83.307607][ T1744]  ? __cfi_inet_diag_dump_start+0x10/0x10
[   83.313306][ T1744]  ? __cfi_inet_diag_dump+0x10/0x10
[   83.318486][ T1744]  ? __cfi_inet_diag_dump_done+0x10/0x10
[   83.324098][ T1744]  ? __cfi_mutex_lock+0x10/0x10
[   83.328928][ T1744]  ? selinux_nlmsg_lookup+0x277/0x440
[   83.334283][ T1744]  ? __cfi_inet_diag_handler_cmd+0x10/0x10
[   83.340069][ T1744]  sock_diag_rcv_msg+0x167/0x3f0
[   83.344991][ T1744]  netlink_rcv_skb+0x200/0x450
[   83.349736][ T1744]  ? __cfi_sock_diag_rcv_msg+0x10/0x10
[   83.355174][ T1744]  ? __cfi_netlink_rcv_skb+0x10/0x10
[   83.360447][ T1744]  ? __netlink_lookup+0x387/0x3b0
[   83.365452][ T1744]  sock_diag_rcv+0x28/0x40
[   83.369848][ T1744]  netlink_unicast+0x8c1/0xa60
[   83.374592][ T1744]  netlink_sendmsg+0x8b9/0xbd0
[   83.379341][ T1744]  ? __cfi_netlink_sendmsg+0x10/0x10
[   83.384610][ T1744]  ? security_socket_sendmsg+0x93/0xb0
[   83.390054][ T1744]  sock_write_iter+0x2ea/0x3f0
[   83.394798][ T1744]  ? __cfi_sock_write_iter+0x10/0x10
[   83.400068][ T1744]  ? fsnotify_perm+0x67/0x5b0
[   83.404730][ T1744]  ? security_file_permission+0x8a/0xb0
[   83.410259][ T1744]  do_iter_write+0x65a/0xb30
[   83.414831][ T1744]  ? _copy_from_user+0x8f/0xc0
[   83.419582][ T1744]  ? vfs_iter_write+0xa0/0xa0
[   83.424241][ T1744]  ? import_iovec+0x7c/0xb0
[   83.428725][ T1744]  vfs_writev+0x339/0x5f0
[   83.433036][ T1744]  ? do_writev+0x2c0/0x2c0
[   83.437432][ T1744]  ? vfs_write+0xa51/0xd00
[   83.441832][ T1744]  ? __fdget_pos+0x1f2/0x380
[   83.446403][ T1744]  ? do_writev+0x76/0x2c0
[   83.450713][ T1744]  do_writev+0x14e/0x2c0
[   83.454937][ T1744]  ? do_readv+0x450/0x450
[   83.459248][ T1744]  ? fpregs_restore_userregs+0x128/0x260
[   83.464864][ T1744]  __x64_sys_writev+0x7d/0x90
[   83.469522][ T1744]  x64_sys_call+0xad/0x9a0
[   83.473924][ T1744]  do_syscall_64+0x4c/0xa0
[   83.478325][ T1744]  ? clear_bhb_loop+0x30/0x80
[   83.482982][ T1744]  ? clear_bhb_loop+0x30/0x80
[   83.487646][ T1744]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   83.493534][ T1744] RIP: 0033:0x7f9fe5f9e159
[   83.497939][ T1744] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   83.517537][ T1744] RSP: 002b:00007f9fe6e14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[   83.525935][ T1744] RAX: ffffffffffffffda RBX: 00007f9fe6225fa0 RCX: 00007f9fe5f9e159
[   83.533890][ T1744] RDX: 0000000000000001 RSI: 0000200000000300 RDI: 0000000000000004
[   83.541845][ T1744] RBP: 00007f9fe603506b R08: 0000000000000000 R09: 0000000000000000
[   83.549797][ T1744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   83.557751][ T1744] R13: 00007f9fe6226038 R14: 00007f9fe6225fa0 R15: 00007ffc6a9b6978
[   83.565709][ T1744]  </TASK>
[   83.600657][  T222] usb 6-1: device descriptor read/8, error -71
[   83.602728][ T1747] device syzkaller0 entered promiscuous mode
[   83.648000][   T19] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[   83.665599][ T1753] loop1: detected capacity change from 0 to 256
[   83.727927][  T222] usb usb6-port1: unable to enumerate USB device
[   83.769455][ T1755] loop1: detected capacity change from 0 to 40427
[   83.779830][ T1755] F2FS-fs (loop1): Invalid SB checksum offset: 0
[   83.786208][ T1755] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[   83.795682][ T1755] F2FS-fs (loop1): invalid crc value
[   83.802401][ T1755] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[   83.833053][ T1755] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[   83.840174][   T19] usb 8-1: Using ep0 maxpacket: 16
[   83.845383][ T1755] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   83.864295][   T19] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   83.886255][   T19] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   83.896574][   T19] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   83.904619][   T19] usb 8-1: Product: syz
[   83.908856][   T19] usb 8-1: Manufacturer: syz
[   83.913474][   T19] usb 8-1: SerialNumber: syz
[   83.951503][ T1767] netlink: 'syz.1.367': attribute type 2 has an invalid length.
[   84.022545][   T28] audit: type=1400 audit(1790302028.325:479): avc:  denied  { mount } for  pid=1762 comm="syz.6.366" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   84.649491][ T1799] x_tables: duplicate underflow at hook 1
[   84.849236][ T1807] loop1: detected capacity change from 0 to 128
[   84.907012][ T1807] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   84.928008][ T1807] ext4 filesystem being mounted at /87/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   84.929541][ T1798] loop5: detected capacity change from 0 to 40427
[   84.969058][  T288] EXT4-fs (loop1): unmounting filesystem.
[   84.995032][ T1798] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   85.037877][  T313] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[   85.147846][    T6] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[   85.253713][ T1820] loop5: detected capacity change from 0 to 8192
[   85.257834][  T313] usb 1-1: Using ep0 maxpacket: 32
[   85.267097][  T313] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x80, skipping
[   85.268451][ T1820] FAT-fs (loop5): Unrecognized mount option "" or missing value
[   85.285434][  T313] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 512, setting to 64
[   85.300409][  T313] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[   85.321578][  T313] usb 1-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 0.40
[   85.337877][    T6] usb 7-1: Using ep0 maxpacket: 16
[   85.343126][  T313] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   85.352129][    T6] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   85.367926][  T313] usb 1-1: Product: 卍ﾄꂘ౿㼕뒀愁齃랄㮣곌⻶榼豭䖵ꈺ퍙첂㽻晀挿䁜揄塤睴豽玪ᕄ놙༵ൖ昴ڐ
[   85.383126][    T6] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   85.398922][    T6] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   85.411336][  T313] usb 1-1: Manufacturer: ⑃ꥎ花䭦ણ쪈ﻰ転抝䂈⮸蚎꺏錤䩗쳟툌ᘩ筇南嬀썍ꍨ堹뾷睷՞軉똜ᗴ䧕ⲟ⥇軣ֳ箤ꉓ湓빬먂㶹칿ು섡⯡榑橹䩣赴ᆽ뭫◯
[   85.434733][    T6] usb 7-1: Product: syz
[   85.447856][    T6] usb 7-1: Manufacturer: syz
[   85.452554][    T6] usb 7-1: SerialNumber: syz
[   85.465344][  T313] usb 1-1: SerialNumber: х
[   85.568318][   T28] audit: type=1400 audit(1790302029.875:480): avc:  denied  { remount } for  pid=1827 comm="syz.5.380" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   85.588701][ T1828] FAULT_INJECTION: forcing a failure.
[   85.588701][ T1828] name failslab, interval 1, probability 0, space 0, times 0
[   85.601749][ T1828] CPU: 0 PID: 1828 Comm: syz.5.380 Not tainted syzkaller #0
[   85.609046][ T1828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   85.619101][ T1828] Call Trace:
[   85.622385][ T1828]  <TASK>
[   85.625317][ T1828]  __dump_stack+0x21/0x24
[   85.629657][ T1828]  dump_stack_lvl+0x110/0x170
[   85.634350][ T1828]  ? __cfi_dump_stack_lvl+0x8/0x8
[   85.639384][ T1828]  ? alloc_vmap_area+0x17b6/0x18c0
[   85.644501][ T1828]  dump_stack+0x15/0x24
[   85.648665][ T1828]  should_fail_ex+0x3bf/0x510
[   85.653344][ T1828]  __should_failslab+0xac/0xf0
[   85.658114][ T1828]  should_failslab+0x9/0x20
[   85.662631][ T1828]  __kmem_cache_alloc_node+0x3d/0x2d0
[   85.668022][ T1828]  ? __vmalloc_node_range+0x564/0x1440
[   85.673490][ T1828]  ? _raw_spin_unlock+0x4c/0x70
[   85.678354][ T1828]  ? __vmalloc_node_range+0x564/0x1440
[   85.683814][ T1828]  __kmalloc_node+0xa2/0x1e0
[   85.688409][ T1828]  __vmalloc_node_range+0x564/0x1440
[   85.693704][ T1828]  ? __cfi___vmalloc_node_range+0x10/0x10
[   85.699429][ T1828]  ? kasan_save_alloc_info+0x1f/0x30
[   85.704722][ T1828]  ? __kasan_slab_alloc+0x72/0x80
[   85.709759][ T1828]  ? slab_post_alloc_hook+0x6d/0x2d0
[   85.715056][ T1828]  ? fpu_alloc_guest_fpstate+0x27/0x410
[   85.720604][ T1828]  vzalloc+0x78/0x90
[   85.724500][ T1828]  ? fpu_alloc_guest_fpstate+0x27/0x410
[   85.730047][ T1828]  fpu_alloc_guest_fpstate+0x27/0x410
[   85.735425][ T1828]  kvm_arch_vcpu_create+0x4cd/0x950
[   85.740631][ T1828]  kvm_vm_ioctl_create_vcpu+0x31d/0x8f0
[   85.746185][ T1828]  ? irqentry_exit+0x37/0x40
[   85.750779][ T1828]  kvm_vm_ioctl+0x654/0xb00
[   85.755292][ T1828]  ? __cfi_kvm_vm_ioctl+0x10/0x10
[   85.760323][ T1828]  ? kasan_check_range+0x1c1/0x2a0
[   85.765785][ T1828]  ? ioctl_has_perm+0x1b8/0x4f0
[   85.770644][ T1828]  ? memcpy+0x56/0x70
[   85.774625][ T1828]  ? ioctl_has_perm+0x40f/0x4f0
[   85.779480][ T1828]  ? has_cap_mac_admin+0x370/0x370
[   85.784604][ T1828]  ? do_futex+0x2e2/0x430
[   85.788936][ T1828]  ? selinux_file_ioctl+0x3ad/0x4c0
[   85.794149][ T1828]  ? __cfi_do_futex+0x10/0x10
[   85.798869][ T1828]  ? kvm_sched_clock_read+0x18/0x40
[   85.804080][ T1828]  ? __cfi_selinux_file_ioctl+0x10/0x10
[   85.809635][ T1828]  ? sched_clock_cpu+0x6e/0x260
[   85.814495][ T1828]  ? __fget_files+0x2d1/0x330
[   85.819183][ T1828]  ? security_file_ioctl+0x95/0xc0
[   85.824310][ T1828]  ? __cfi_kvm_vm_ioctl+0x10/0x10
[   85.829352][ T1828]  __se_sys_ioctl+0x12f/0x1b0
[   85.834047][ T1828]  __x64_sys_ioctl+0x7b/0x90
[   85.838642][ T1828]  x64_sys_call+0x58b/0x9a0
[   85.843149][ T1828]  do_syscall_64+0x4c/0xa0
[   85.847575][ T1828]  ? clear_bhb_loop+0x30/0x80
[   85.852258][ T1828]  ? clear_bhb_loop+0x30/0x80
[   85.856942][ T1828]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   85.862835][ T1828] RIP: 0033:0x7fa99b79e159
[   85.867248][ T1828] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   85.886855][ T1828] RSP: 002b:00007fa99c650028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   85.895270][ T1828] RAX: ffffffffffffffda RBX: 00007fa99ba25fa0 RCX: 00007fa99b79e159
[   85.903245][ T1828] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000006
[   85.911215][ T1828] RBP: 00007fa99b83506b R08: 0000000000000000 R09: 0000000000000000
[   85.919186][ T1828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   85.927156][ T1828] R13: 00007fa99ba26038 R14: 00007fa99ba25fa0 R15: 00007ffc953b8998
[   85.935131][ T1828]  </TASK>
[   85.948082][ T1828] kvm: failed to allocate vcpu's fpu
[   85.959527][  T313] usb 1-1: USB disconnect, device number 12
[   86.036914][   T19] cdc_ncm 8-1:1.0: failed GET_NTB_PARAMETERS
[   86.048783][   T19] cdc_ncm 8-1:1.0: bind() failure
[   86.061780][   T19] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found
[   86.073251][   T19] cdc_ncm 8-1:1.1: bind() failure
[   86.080854][   T19] usb 8-1: USB disconnect, device number 9
[   86.168215][ T1845] x_tables: duplicate underflow at hook 1
[   86.206774][ T1843] loop1: detected capacity change from 0 to 40427
[   86.215091][ T1843] F2FS-fs (loop1): Invalid SB checksum offset: 0
[   86.221960][ T1843] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[   86.230718][ T1843] F2FS-fs (loop1): invalid crc value
[   86.237357][ T1843] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[   86.273392][ T1843] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[   86.280825][ T1843] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   86.358359][  T396] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[   86.366083][ T1854] loop1: detected capacity change from 0 to 128
[   86.375979][ T1854] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   86.384740][ T1854] ext4 filesystem being mounted at /92/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   86.403619][  T288] EXT4-fs (loop1): unmounting filesystem.
[   86.428147][    T6] cdc_ncm 7-1:1.0: failed GET_NTB_PARAMETERS
[   86.434205][    T6] cdc_ncm 7-1:1.0: bind() failure
[   86.440678][    T6] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found
[   86.447460][    T6] cdc_ncm 7-1:1.1: bind() failure
[   86.453413][    T6] usb 7-1: USB disconnect, device number 7
[   86.717912][  T222] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[   86.810343][  T396] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[   86.820315][  T396] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   86.828425][  T396] usb 6-1: Product: syz
[   86.832629][  T396] usb 6-1: Manufacturer: syz
[   86.837211][  T396] usb 6-1: SerialNumber: syz
[   86.927937][   T19] usb 8-1: new full-speed USB device number 10 using dummy_hcd
[   86.978962][  T222] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   86.990598][  T222] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   87.000375][  T222] usb 2-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00
[   87.009543][  T222] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   87.018687][  T222] usb 2-1: config 0 descriptor??
[   87.083743][ T1868] SELinux: security_context_str_to_sid (E�) failed with errno=-22
[   87.129285][   T19] usb 8-1: unable to get BOS descriptor or descriptor too short
[   87.137622][ T1837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   87.147094][ T1837] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   87.164380][   T19] usb 8-1: not running at top speed; connect to a high speed hub
[   87.174951][   T19] usb 8-1: config 0 has an invalid interface number: 88 but max is 0
[   87.183682][   T19] usb 8-1: config 0 has no interface number 0
[   87.190184][   T19] usb 8-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0
[   87.200257][   T19] usb 8-1: config 0 interface 88 has no altsetting 0
[   87.218920][   T19] usb 8-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31
[   87.231484][   T19] usb 8-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3
[   87.242956][   T19] usb 8-1: Product: syz
[   87.247152][   T19] usb 8-1: Manufacturer: syz
[   87.252047][   T19] usb 8-1: SerialNumber: syz
[   87.257539][   T19] usb 8-1: config 0 descriptor??
[   87.324847][   T28] audit: type=1400 audit(1790302031.625:481): avc:  denied  { mounton } for  pid=1863 comm="syz.0.389" path="/81/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[   87.470513][   T19] usb 8-1: USB disconnect, device number 10
[   87.628861][   T28] audit: type=1400 audit(1790302031.935:482): avc:  denied  { unmount } for  pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   87.650589][  T396] (unnamed net_device) (uninitialized): Assigned a random MAC address: c6:4d:87:55:5f:93
[   87.665688][  T396] rtl8150 6-1:1.0: eth1: rtl8150 is detected
[   87.672798][  T396] usb 6-1: USB disconnect, device number 15
[   87.738677][  T222] usbhid 2-1:0.0: can't add hid device: -71
[   87.744825][  T222] usbhid: probe of 2-1:0.0 failed with error -71
[   87.752029][  T222] usb 2-1: USB disconnect, device number 15
[   87.869187][ T1888] x_tables: duplicate underflow at hook 1
[   87.937861][  T308] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[   87.980587][ T1892] loop7: detected capacity change from 0 to 128
[   88.010142][ T1892] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[   88.018817][ T1892] ext4 filesystem being mounted at /33/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   88.037152][ T1189] EXT4-fs (loop7): unmounting filesystem.
[   88.084622][ T1890] loop6: detected capacity change from 0 to 40427
[   88.091581][ T1890] F2FS-fs (loop6): Invalid SB checksum offset: 0
[   88.097965][ T1890] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock
[   88.106605][ T1890] F2FS-fs (loop6): invalid crc value
[   88.113305][ T1890] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[   88.127843][  T308] usb 1-1: Using ep0 maxpacket: 16
[   88.134240][  T308] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   88.139612][ T1890] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0
[   88.147897][  T308] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   88.152185][ T1890] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[   88.161856][  T308] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   88.181628][  T308] usb 1-1: Product: syz
[   88.185914][  T308] usb 1-1: Manufacturer: syz
[   88.191418][  T308] usb 1-1: SerialNumber: syz
[   88.334992][ T1902] loop6: detected capacity change from 0 to 40427
[   88.342262][ T1902] F2FS-fs (loop6): Invalid SB checksum offset: 0
[   88.347841][  T709] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[   88.348832][ T1902] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock
[   88.364499][ T1902] F2FS-fs (loop6): Unrecognized mount option "����0xfffffffffffffffflazytime" or missing value
[   88.453512][ T1909] FAULT_INJECTION: forcing a failure.
[   88.453512][ T1909] name failslab, interval 1, probability 0, space 0, times 0
[   88.466259][ T1909] CPU: 0 PID: 1909 Comm: syz.6.402 Not tainted syzkaller #0
[   88.473549][ T1909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   88.483593][ T1909] Call Trace:
[   88.486866][ T1909]  <TASK>
[   88.489786][ T1909]  __dump_stack+0x21/0x24
[   88.494104][ T1909]  dump_stack_lvl+0x110/0x170
[   88.498764][ T1909]  ? __cfi_dump_stack_lvl+0x8/0x8
[   88.503782][ T1909]  ? do_futex+0x2e2/0x430
[   88.508100][ T1909]  dump_stack+0x15/0x24
[   88.512246][ T1909]  should_fail_ex+0x3bf/0x510
[   88.516904][ T1909]  __should_failslab+0xac/0xf0
[   88.521656][ T1909]  should_failslab+0x9/0x20
[   88.526142][ T1909]  __kmem_cache_alloc_node+0x3d/0x2d0
[   88.531500][ T1909]  ? __se_sys_memfd_create+0xf2/0x3c0
[   88.536852][ T1909]  ? __this_cpu_preempt_check+0x13/0x20
[   88.542378][ T1909]  ? xfd_validate_state+0x70/0x150
[   88.547473][ T1909]  ? __se_sys_memfd_create+0xf2/0x3c0
[   88.552826][ T1909]  __kmalloc+0xa4/0x1e0
[   88.556960][ T1909]  ? strnlen_user+0x10d/0x190
[   88.561623][ T1909]  __se_sys_memfd_create+0xf2/0x3c0
[   88.566801][ T1909]  __x64_sys_memfd_create+0x5b/0x70
[   88.571977][ T1909]  x64_sys_call+0x235/0x9a0
[   88.576463][ T1909]  do_syscall_64+0x4c/0xa0
[   88.580863][ T1909]  ? clear_bhb_loop+0x30/0x80
[   88.585522][ T1909]  ? clear_bhb_loop+0x30/0x80
[   88.590265][ T1909]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   88.596140][ T1909] RIP: 0033:0x7f2aedd9e159
[   88.600538][ T1909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   88.620125][ T1909] RSP: 002b:00007f2aeecb2e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[   88.628530][ T1909] RAX: ffffffffffffffda RBX: 00000000000004ef RCX: 00007f2aedd9e159
[   88.636492][ T1909] RDX: 00007f2aeecb2ee0 RSI: 0000000000000000 RDI: 00007f2aede3524b
[   88.644455][ T1909] RBP: 00002000000025c0 R08: 00000000ffffffff R09: 0000000000000000
[   88.652413][ T1909] R10: 0000000000000001 R11: 0000000000000202 R12: 00002000000007c0
[   88.660371][ T1909] R13: 00007f2aeecb2ee0 R14: 00007f2aeecb2ea0 R15: 0000200000000440
[   88.668327][ T1909]  </TASK>
[   88.674941][ T1909] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[   88.694313][ T1909] loop6: detected capacity change from 0 to 512
[   88.701500][ T1920] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[   88.717035][  T709] usb 8-1: Using ep0 maxpacket: 16
[   88.719264][ T1909] ext4: Unknown parameter 'ey'
[   88.724771][  T709] usb 8-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00
[   88.736203][  T709] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   88.737925][   T19] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[   88.744532][  T709] usb 8-1: Product: syz
[   88.756216][  T709] usb 8-1: Manufacturer: syz
[   88.761066][  T709] usb 8-1: SerialNumber: syz
[   88.766291][  T709] usb 8-1: config 0 descriptor??
[   88.772069][  T709] ftdi_sio 8-1:0.0: FTDI USB Serial Device converter detected
[   88.779796][  T709] usb 8-1: Detected FT-X
[   88.856436][ T1925] loop6: detected capacity change from 0 to 512
[   88.865936][ T1925] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e01c, mo2=0002]
[   88.875726][ T1925] System zones: 1-12
[   88.882162][ T1925] EXT4-fs error (device loop6): dx_probe:823: inode #2: comm syz.6.403: Directory hole found for htree index block 0
[   88.895017][ T1925] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -117
[   88.903421][ T1925] EXT4-fs error (device loop6): dx_probe:823: inode #2: comm syz.6.403: Directory hole found for htree index block 0
[   88.916904][ T1925] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117
[   88.925171][ T1925] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[   88.937863][   T19] usb 2-1: Using ep0 maxpacket: 16
[   88.944048][   T19] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   88.950693][ T1925] EXT4-fs (loop6): re-mounted. Quota mode: writeback.
[   88.966913][   T19] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   88.976118][   T19] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   88.977086][  T709] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[   88.984268][   T19] usb 2-1: Product: syz
[   88.995256][   T19] usb 2-1: Manufacturer: syz
[   88.999981][   T19] usb 2-1: SerialNumber: syz
[   89.065178][  T524] EXT4-fs (loop6): unmounting filesystem.
[   89.088648][ T1931] FAULT_INJECTION: forcing a failure.
[   89.088648][ T1931] name failslab, interval 1, probability 0, space 0, times 0
[   89.101352][ T1931] CPU: 0 PID: 1931 Comm: syz.5.405 Not tainted syzkaller #0
[   89.108642][ T1931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   89.118701][ T1931] Call Trace:
[   89.121976][ T1931]  <TASK>
[   89.124902][ T1931]  __dump_stack+0x21/0x24
[   89.129244][ T1931]  dump_stack_lvl+0x110/0x170
[   89.133924][ T1931]  ? __cfi_dump_stack_lvl+0x8/0x8
[   89.138956][ T1931]  dump_stack+0x15/0x24
[   89.143121][ T1931]  should_fail_ex+0x3bf/0x510
[   89.147802][ T1931]  __should_failslab+0xac/0xf0
[   89.152570][ T1931]  should_failslab+0x9/0x20
[   89.157073][ T1931]  __kmem_cache_alloc_node+0x3d/0x2d0
[   89.162449][ T1931]  ? bpf_prog_alloc_no_stats+0x9a/0x3f0
[   89.168003][ T1931]  ? avc_has_perm_noaudit+0x390/0x490
[   89.173377][ T1931]  ? bpf_prog_alloc_no_stats+0x9a/0x3f0
[   89.178925][ T1931]  kmalloc_trace+0x29/0xb0
[   89.183339][ T1931]  bpf_prog_alloc_no_stats+0x9a/0x3f0
[   89.188712][ T1931]  bpf_prog_alloc+0x21/0x1c0
[   89.193299][ T1931]  bpf_prog_load+0x811/0x1670
[   89.197983][ T1931]  ? map_freeze+0x3a0/0x3a0
[   89.202488][ T1931]  ? selinux_bpf+0xc7/0xf0
[   89.206915][ T1931]  ? security_bpf+0x93/0xb0
[   89.211422][ T1931]  __sys_bpf+0x57b/0x850
[   89.215648][ T1931]  ? bpf_link_show_fdinfo+0x330/0x330
[   89.221003][ T1931]  ? __cfi_ksys_write+0x10/0x10
[   89.225839][ T1931]  ? debug_smp_processor_id+0x17/0x20
[   89.231194][ T1931]  __x64_sys_bpf+0x7c/0x90
[   89.235588][ T1931]  x64_sys_call+0x488/0x9a0
[   89.240074][ T1931]  do_syscall_64+0x4c/0xa0
[   89.244472][ T1931]  ? clear_bhb_loop+0x30/0x80
[   89.249131][ T1931]  ? clear_bhb_loop+0x30/0x80
[   89.253789][ T1931]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   89.259661][ T1931] RIP: 0033:0x7fa99b79e159
[   89.264056][ T1931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   89.283641][ T1931] RSP: 002b:00007fa99c650028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   89.292035][ T1931] RAX: ffffffffffffffda RBX: 00007fa99ba25fa0 RCX: 00007fa99b79e159
[   89.299989][ T1931] RDX: 0000000000000094 RSI: 0000200000000680 RDI: 0000000000000005
[   89.307940][ T1931] RBP: 00007fa99c650090 R08: 0000000000000000 R09: 0000000000000000
[   89.315896][ T1931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   89.323846][ T1931] R13: 00007fa99ba26038 R14: 00007fa99ba25fa0 R15: 00007ffc953b8998
[   89.331801][ T1931]  </TASK>
[   89.362684][ T1933] loop6: detected capacity change from 0 to 512
[   89.403568][  T709] usb 8-1: FTDI USB Serial Device converter now attached to ttyUSB0
[   89.414628][ T1933] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[   89.426558][ T1933] ext4 filesystem being mounted at /77/bus/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   89.618326][   T24] usb 8-1: USB disconnect, device number 11
[   89.638322][   T24] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[   89.656426][   T24] ftdi_sio 8-1:0.0: device disconnected
[   89.858206][   T19] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS
[   89.865133][   T19] cdc_ncm 2-1:1.0: bind() failure
[   89.871115][   T19] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[   89.877934][   T19] cdc_ncm 2-1:1.1: bind() failure
[   89.888802][   T19] usb 2-1: USB disconnect, device number 16
[   89.983186][  T442] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[   90.017309][  T442] EXT4-fs (loop6): Remounting filesystem read-only
[   90.031230][ T1936] syz.5.406 (1936) used greatest stack depth: 20992 bytes left
[   90.048712][  T524] EXT4-fs (loop6): unmounting filesystem.
[   90.091435][ T1946] loop5: detected capacity change from 0 to 128
[   90.123976][ T1946] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[   90.173888][ T1944] x_tables: duplicate underflow at hook 1
[   90.181587][ T1946] ext4 filesystem being mounted at /71/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   90.243756][  T380] EXT4-fs (loop5): unmounting filesystem.
[   90.293599][ T1951] loop7: detected capacity change from 0 to 7
[   90.300200][ T1953] loop5: detected capacity change from 0 to 512
[   90.318994][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   90.328149][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[   90.337329][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   90.346490][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[   90.354376][ T1834]  loop7: unable to read partition table
[   90.361981][   T28] audit: type=1400 audit(1790302034.665:483): avc:  denied  { view } for  pid=1950 comm="syz.6.411" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[   90.381100][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   90.390238][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[   90.395466][ T1953] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[   90.407170][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   90.416311][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[   90.417902][ T1953] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   90.434487][ T1951]  loop7: unable to read partition table
[   90.441016][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   90.450175][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[   90.458343][ T1951] loop_reread_partitions: partition scan of loop7 (���������C�j̖�P=ý?�}X���	���%��`�4FLQk݊5) failed (rc=-5)
[   90.462036][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   90.479696][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[   90.487762][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   90.496911][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[   90.527815][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   90.528172][ T1962] loop1: detected capacity change from 0 to 1024
[   90.536939][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[   90.537742][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   90.560036][ T1962] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   90.560184][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[   90.579616][   T28] audit: type=1400 audit(1790302034.885:484): avc:  denied  { bind } for  pid=1952 comm="syz.5.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   90.590656][ T1962] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 17179869187)!
[   90.609692][   T28] audit: type=1400 audit(1790302034.885:485): avc:  denied  { setopt } for  pid=1952 comm="syz.5.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   90.634004][ T1962] EXT4-fs (loop1): group descriptors corrupted!
[   90.732109][ T1834] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   90.756316][ T1962] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   90.766000][ T1965] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e01c, mo2=0002]
[   90.776450][ T1965] System zones: 1-12
[   90.782962][  T308] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS
[   90.789680][ T1963] SELinux:  policydb magic number 0xfb7cff8c does not match expected magic number 0xf97cff8c
[   90.800410][ T1963] SELinux: failed to load policy
[   90.805992][   T28] audit: type=1400 audit(1790302035.095:486): avc:  denied  { load_policy } for  pid=1952 comm="syz.5.410" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[   90.806055][ T1962] process 'syz.1.413' launched '/dev/fd/5' with NULL argv: empty string added
[   90.837021][ T1965] EXT4-fs error (device loop6): dx_probe:823: inode #2: comm syz.6.414: Directory hole found for htree index block 0
[   90.857131][  T308] cdc_ncm 1-1:1.0: bind() failure
[   90.879298][  T308] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found
[   90.881653][   T28] audit: type=1400 audit(1790302035.185:487): avc:  denied  { execute } for  pid=1961 comm="syz.1.413" dev="tmpfs" ino=1228 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   90.886080][  T308] cdc_ncm 1-1:1.1: bind() failure
[   90.892603][  T308] usb 1-1: USB disconnect, device number 13
[   90.925551][ T1965] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -117
[   90.939131][ T1965] EXT4-fs error (device loop6): dx_probe:823: inode #2: comm syz.6.414: Directory hole found for htree index block 0
[   90.952207][  T288] EXT4-fs (loop1): unmounting filesystem.
[   90.953327][   T28] audit: type=1400 audit(1790302035.215:488): avc:  denied  { execute_no_trans } for  pid=1961 comm="syz.1.413" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=1228 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   90.986098][ T1965] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117
[   91.014879][ T1965] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[   91.023931][   T19] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[   91.047378][ T1965] EXT4-fs (loop6): re-mounted. Quota mode: writeback.
[   91.155898][  T524] EXT4-fs (loop6): unmounting filesystem.
[   91.210218][   T19] usb 8-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[   91.237854][   T19] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.255988][   T19] usb 8-1: Product: syz
[   91.260322][   T19] usb 8-1: Manufacturer: syz
[   91.264903][   T19] usb 8-1: SerialNumber: syz
[   91.277868][  T709] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[   91.469125][  T709] usb 2-1: Using ep0 maxpacket: 8
[   91.475522][  T709] usb 2-1: unable to get BOS descriptor or descriptor too short
[   91.481546][ T1970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   91.494027][  T709] usb 2-1: config 4 has an invalid interface number: 149 but max is 0
[   91.499063][ T1970] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   91.506526][  T709] usb 2-1: config 4 has no interface number 0
[   91.546857][  T709] usb 2-1: config 4 interface 149 has no altsetting 0
[   91.557538][  T709] usb 2-1: New USB device found, idVendor=19d2, idProduct=5bab, bcdDevice=ca.4b
[   91.577260][  T709] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.596566][  T709] usb 2-1: Product: ј
[   91.601144][  T709] usb 2-1: Manufacturer: 킗㮜㐥ꀜ贉䒒騭῿㋍ݧ癠뭭欥蕆骽톼袸歏쬖抩瀴짃쇢ᒥ磯燢䞧䤳孍쀐ܛꂉ䡀㵬朒퉄℄撬ᚢ曫瑬兦
[   91.640831][  T709] usb 2-1: SerialNumber: 冊ꡞꋂ뵔鄞ꋩ䨺퉵퓩ካ엜輛쮑奕ꣴ⭹ጠ䖔琿ᯭա弇꨷粠䶡⒠㠌雦䂌率ޘ뤽簕졐
[   91.746756][  T380] EXT4-fs (loop5): unmounting filesystem.
[   91.830814][ T2000] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[   91.864974][   T19] rtl8150 8-1:1.0: couldn't reset the device
[   91.867683][ T2000] ext4 filesystem being mounted at /73/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   91.871088][   T19] rtl8150: probe of 8-1:1.0 failed with error -5
[   91.883052][ T2007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   91.889291][   T19] usb 8-1: USB disconnect, device number 12
[   91.925800][ T2007] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   91.935488][  T709] usb 2-1: bad CDC descriptors
[   91.951114][  T709] usb 2-1: USB disconnect, device number 17
[   91.999562][  T380] EXT4-fs (loop5): unmounting filesystem.
[   92.083615][ T2013] x_tables: duplicate underflow at hook 1
[   92.427897][  T709] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[   92.497863][  T396] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[   92.565237][ T2024] F2FS-fs (loop1): Invalid SB checksum offset: 0
[   92.571722][ T2024] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[   92.580725][ T2024] F2FS-fs (loop1): invalid crc value
[   92.587192][ T2024] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[   92.608877][ T2024] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[   92.608955][  T709] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   92.615955][ T2024] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   92.627045][  T709] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   92.650490][  T709] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   92.660832][  T709] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   92.673686][  T709] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00
[   92.682738][  T709] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   92.687847][  T396] usb 7-1: Using ep0 maxpacket: 16
[   92.702956][  T396] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   92.715588][  T396] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   92.725301][  T396] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   92.733354][  T396] usb 7-1: Product: syz
[   92.737582][  T396] usb 7-1: Manufacturer: syz
[   92.743480][  T396] usb 7-1: SerialNumber: syz
[   93.049184][   T24] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[   93.104210][  T709] usbhid 1-1:1.0: can't add hid device: -71
[   93.110515][   T28] audit: type=1400 audit(1790302037.415:489): avc:  denied  { mount } for  pid=2017 comm="syz.0.423" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[   93.136664][  T709] usbhid: probe of 1-1:1.0 failed with error -71
[   93.153463][  T709] usb 1-1: USB disconnect, device number 14
[   93.219793][   T28] audit: type=1400 audit(1790302037.525:490): avc:  denied  { unmount } for  pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[   93.228053][   T24] usb 2-1: Using ep0 maxpacket: 16
[   93.251337][   T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   93.267615][   T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   93.277947][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.286018][   T24] usb 2-1: Product: syz
[   93.290662][   T24] usb 2-1: Manufacturer: syz
[   93.295339][   T24] usb 2-1: SerialNumber: syz
[   93.410743][ T2047] FAULT_INJECTION: forcing a failure.
[   93.410743][ T2047] name failslab, interval 1, probability 0, space 0, times 0
[   93.424718][ T2047] CPU: 1 PID: 2047 Comm: syz.0.430 Not tainted syzkaller #0
[   93.430601][  T396] cdc_ncm 7-1:1.0: failed GET_NTB_PARAMETERS
[   93.432017][ T2047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   93.447848][  T396] cdc_ncm 7-1:1.0: bind() failure
[   93.448012][ T2047] Call Trace:
[   93.448019][ T2047]  <TASK>
[   93.453910][  T396] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found
[   93.456274][ T2047]  __dump_stack+0x21/0x24
[   93.459226][  T396] cdc_ncm 7-1:1.1: bind() failure
[   93.465925][ T2047]  dump_stack_lvl+0x110/0x170
[   93.479929][ T2047]  ? __cfi_dump_stack_lvl+0x8/0x8
[   93.480466][  T396] usb 7-1: USB disconnect, device number 8
[   93.484987][ T2047]  dump_stack+0x15/0x24
[   93.494922][ T2047]  should_fail_ex+0x3bf/0x510
[   93.499609][ T2047]  ? security_inode_alloc+0x33/0x120
[   93.504905][ T2047]  __should_failslab+0xac/0xf0
[   93.509676][ T2047]  should_failslab+0x9/0x20
[   93.514181][ T2047]  kmem_cache_alloc+0x3b/0x320
[   93.518950][ T2047]  security_inode_alloc+0x33/0x120
[   93.524053][ T2047]  inode_init_always+0x6ee/0x950
[   93.528985][ T2047]  new_inode_pseudo+0xa2/0x1f0
[   93.533738][ T2047]  create_pipe_files+0x4f/0x6c0
[   93.538580][ T2047]  __do_pipe_flags+0x4f/0x200
[   93.543250][ T2047]  do_pipe2+0xa7/0x190
[   93.547299][ T2047]  ? __x64_sys_futex+0x100/0x100
[   93.552219][ T2047]  ? pipe_fcntl+0x510/0x510
[   93.556705][ T2047]  ? fpregs_restore_userregs+0x128/0x260
[   93.562319][ T2047]  __x64_sys_pipe2+0x5a/0x70
[   93.566893][ T2047]  x64_sys_call+0x258/0x9a0
[   93.571380][ T2047]  do_syscall_64+0x4c/0xa0
[   93.575781][ T2047]  ? clear_bhb_loop+0x30/0x80
[   93.580438][ T2047]  ? clear_bhb_loop+0x30/0x80
[   93.585097][ T2047]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   93.590971][ T2047] RIP: 0033:0x7f0ac8d9e159
[   93.595366][ T2047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   93.614949][ T2047] RSP: 002b:00007f0ac9c22028 EFLAGS: 00000246 ORIG_RAX: 0000000000000125
[   93.623343][ T2047] RAX: ffffffffffffffda RBX: 00007f0ac9025fa0 RCX: 00007f0ac8d9e159
[   93.631296][ T2047] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000580
[   93.639248][ T2047] RBP: 00007f0ac8e3506b R08: 0000000000000000 R09: 0000000000000000
[   93.647200][ T2047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   93.655151][ T2047] R13: 00007f0ac9026038 R14: 00007f0ac9025fa0 R15: 00007ffc886cd5f8
[   93.663107][ T2047]  </TASK>
[   93.752939][ T2052] set_capacity_and_notify: 4 callbacks suppressed
[   93.752963][ T2052] loop7: detected capacity change from 0 to 128
[   93.784736][ T2052] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[   93.793589][ T2052] ext4 filesystem being mounted at /37/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   93.820671][ T1189] EXT4-fs (loop7): unmounting filesystem.
[   93.864865][ T2056] netlink: 8 bytes leftover after parsing attributes in process `syz.7.432'.
[   93.875106][   T28] audit: type=1404 audit(1790302038.175:491): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1
[   93.901603][   T28] audit: type=1400 audit(1790302038.205:492): avc:  denied  { read write } for  pid=1189 comm="syz-executor" name="loop7" dev="devtmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[   93.926080][   T28] audit: type=1400 audit(1790302038.205:493): avc:  denied  { create } for  pid=2058 comm="syz.7.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0
[   93.949537][   T28] audit: type=1400 audit(1790302038.205:494): avc:  denied  { create } for  pid=2058 comm="syz.7.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0
[   93.977519][   T28] audit: type=1400 audit(1790302038.275:495): avc:  denied  { read write } for  pid=1189 comm="syz-executor" name="loop7" dev="devtmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[   94.002112][   T28] audit: type=1400 audit(1790302038.305:496): avc:  denied  { read write } for  pid=2060 comm="syz.7.435" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0
[   94.025705][   T28] audit: type=1400 audit(1790302038.305:497): avc:  denied  { read write } for  pid=380 comm="syz-executor" name="loop5" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[   94.050536][   T28] audit: type=1400 audit(1790302038.315:498): avc:  denied  { bpf } for  pid=2062 comm="syz.5.433" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0
[   94.073123][   T24] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS
[   94.081498][   T24] cdc_ncm 2-1:1.0: bind() failure
[   94.087771][   T24] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[   94.094771][   T24] cdc_ncm 2-1:1.1: bind() failure
[   94.111465][   T24] usb 2-1: USB disconnect, device number 18
[   94.214697][ T2063] syz.5.433 (2063) used greatest stack depth: 20736 bytes left
[   94.492764][ T2073] mmap: syz.6.438 (2073) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   98.233322][   T28] kauditd_printk_skb: 230 callbacks suppressed
[   98.233335][   T28] audit: type=1400 audit(1790302042.535:727): avc:  denied  { read write } for  pid=288 comm="syz-executor" name="loop1" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[   98.285836][   T28] audit: type=1400 audit(1790302042.545:728): avc:  denied  { read write } for  pid=524 comm="syz-executor" name="loop6" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[   98.327835][   T28] audit: type=1400 audit(1790302042.575:729): avc:  denied  { create } for  pid=2185 comm="syz.1.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0
[   98.357509][   T28] audit: type=1400 audit(1790302042.575:730): avc:  denied  { create } for  pid=2185 comm="syz.1.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0
[   98.400972][   T28] audit: type=1400 audit(1790302042.695:731): avc:  denied  { read write } for  pid=288 comm="syz-executor" name="loop1" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[   98.426932][   T28] audit: type=1400 audit(1790302042.705:732): avc:  denied  { bpf } for  pid=2188 comm="syz.1.481" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0
[   98.447587][   T28] audit: type=1400 audit(1790302042.705:733): avc:  denied  { bpf } for  pid=2188 comm="syz.1.481" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0
[   98.468371][ T2194] FAULT_INJECTION: forcing a failure.
[   98.468371][ T2194] name failslab, interval 1, probability 0, space 0, times 0
[   98.481015][ T2194] CPU: 0 PID: 2194 Comm: syz.1.482 Not tainted syzkaller #0
[   98.488308][ T2194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   98.498356][ T2194] Call Trace:
[   98.501628][ T2194]  <TASK>
[   98.504554][ T2194]  __dump_stack+0x21/0x24
[   98.508889][ T2194]  dump_stack_lvl+0x110/0x170
[   98.513570][ T2194]  ? __cfi_dump_stack_lvl+0x8/0x8
[   98.518605][ T2194]  dump_stack+0x15/0x24
[   98.522762][ T2194]  should_fail_ex+0x3bf/0x510
[   98.527442][ T2194]  ? security_file_alloc+0x33/0x130
[   98.532644][ T2194]  __should_failslab+0xac/0xf0
[   98.537409][ T2194]  should_failslab+0x9/0x20
[   98.541909][ T2194]  kmem_cache_alloc+0x3b/0x320
[   98.546682][ T2194]  ? __alloc_file+0x28/0x2a0
[   98.551278][ T2194]  security_file_alloc+0x33/0x130
[   98.556306][ T2194]  __alloc_file+0xb5/0x2a0
[   98.560725][ T2194]  alloc_empty_file+0x97/0x180
[   98.565487][ T2194]  path_openat+0xf4/0x2f30
[   98.569909][ T2194]  ? kasan_set_track+0x60/0x70
[   98.574673][ T2194]  ? kasan_set_track+0x4b/0x70
[   98.579434][ T2194]  ? __kasan_slab_alloc+0x72/0x80
[   98.584457][ T2194]  ? slab_post_alloc_hook+0x4f/0x2d0
[   98.589751][ T2194]  ? kmem_cache_alloc+0x166/0x320
[   98.594777][ T2194]  ? getname_flags+0xba/0x510
[   98.599453][ T2194]  ? getname+0x19/0x20
[   98.603514][ T2194]  ? do_sys_openat2+0xeb/0x820
[   98.608278][ T2194]  ? __se_sys_openat2+0x222/0x2c0
[   98.613306][ T2194]  ? __x64_sys_openat2+0x9b/0xb0
[   98.618243][ T2194]  ? x64_sys_call+0x54c/0x9a0
[   98.622920][ T2194]  ? do_syscall_64+0x4c/0xa0
[   98.627513][ T2194]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   98.633583][ T2194]  ? do_filp_open+0x420/0x420
[   98.638260][ T2194]  do_filp_open+0x1ee/0x420
[   98.642768][ T2194]  ? __cfi_do_filp_open+0x10/0x10
[   98.647800][ T2194]  ? alloc_fd+0x4c1/0x570
[   98.652141][ T2194]  do_sys_openat2+0x15e/0x820
[   98.656872][ T2194]  ? __cfi_vfs_write+0x10/0x10
[   98.661642][ T2194]  ? do_sys_open+0xe0/0xe0
[   98.666072][ T2194]  ? __kasan_check_write+0x14/0x20
[   98.671196][ T2194]  ? mutex_unlock+0x8f/0x230
[   98.675791][ T2194]  ? __kasan_check_write+0x14/0x20
[   98.680915][ T2194]  __se_sys_openat2+0x222/0x2c0
[   98.685786][ T2194]  ? __x64_sys_openat2+0xb0/0xb0
[   98.690734][ T2194]  __x64_sys_openat2+0x9b/0xb0
[   98.695506][ T2194]  x64_sys_call+0x54c/0x9a0
[   98.700014][ T2194]  do_syscall_64+0x4c/0xa0
[   98.704433][ T2194]  ? clear_bhb_loop+0x30/0x80
[   98.709114][ T2194]  ? clear_bhb_loop+0x30/0x80
[   98.713792][ T2194]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   98.719690][ T2194] RIP: 0033:0x7f9fe5f9e159
[   98.724105][ T2194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   98.743713][ T2194] RSP: 002b:00007f9fe6e14028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b5
[   98.752131][ T2194] RAX: ffffffffffffffda RBX: 00007f9fe6225fa0 RCX: 00007f9fe5f9e159
[   98.760112][ T2194] RDX: 0000200000000180 RSI: 0000200000000100 RDI: 00000000ffffff9c
[   98.768082][ T2194] RBP: 00007f9fe6e14090 R08: 0000000000000000 R09: 0000000000000000
[   98.776057][ T2194] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001
[   98.784033][ T2194] R13: 00007f9fe6226038 R14: 00007f9fe6225fa0 R15: 00007ffc6a9b6978
[   98.792007][ T2194]  </TASK>
[   98.795662][   T28] audit: type=1400 audit(1790302042.705:734): avc:  denied  { bpf } for  pid=2188 comm="syz.1.481" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0
[   98.816046][   T28] audit: type=1400 audit(1790302042.705:735): avc:  denied  { prog_load } for  pid=2188 comm="syz.1.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[   98.835115][   T28] audit: type=1400 audit(1790302042.705:736): avc:  denied  { bpf } for  pid=2188 comm="syz.1.481" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0
[   98.994782][ T2207] IPv6: sit1: Disabled Multicast RS
[   99.668602][ T2215] device vti0 entered promiscuous mode
[  101.511992][ T2289] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2289 comm=syz.7.519
[  101.513831][ T2292] netlink: 4 bytes leftover after parsing attributes in process `syz.1.520'.
[  101.534016][ T2292] netlink: 4 bytes leftover after parsing attributes in process `syz.1.520'.
[  101.542975][ T2292] netlink: 4 bytes leftover after parsing attributes in process `syz.1.520'.
[  101.552236][ T2292] netlink: 4 bytes leftover after parsing attributes in process `syz.1.520'.
[  101.566800][ T2292] netlink: 4 bytes leftover after parsing attributes in process `syz.1.520'.
[  101.579739][ T2292] netlink: 4 bytes leftover after parsing attributes in process `syz.1.520'.
[  101.588963][ T2292] netlink: 4 bytes leftover after parsing attributes in process `syz.1.520'.
[  101.598387][ T2292] netlink: 4 bytes leftover after parsing attributes in process `syz.1.520'.
[  101.617994][ T2292] netlink: 4 bytes leftover after parsing attributes in process `syz.1.520'.
[  101.626922][ T2292] netlink: 4 bytes leftover after parsing attributes in process `syz.1.520'.
[  101.645303][ T2292] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  102.179455][ T2309] xt_hashlimit: size too large, truncated to 1048576
[  103.277583][   T28] kauditd_printk_skb: 518 callbacks suppressed
[  103.277598][   T28] audit: type=1400 audit(1790302047.575:1252): avc:  denied  { read write } for  pid=288 comm="syz-executor" name="loop1" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  103.317860][   T28] audit: type=1400 audit(1790302047.615:1253): avc:  denied  { create } for  pid=2347 comm="syz.1.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0
[  103.348774][   T28] audit: type=1400 audit(1790302047.615:1254): avc:  denied  { create } for  pid=2347 comm="syz.1.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0
[  103.376759][   T28] audit: type=1400 audit(1790302047.645:1255): avc:  denied  { read write } for  pid=288 comm="syz-executor" name="loop1" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  103.401689][   T28] audit: type=1400 audit(1790302047.645:1256): avc:  denied  { create } for  pid=2350 comm="syz.1.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0
[  103.421620][   T28] audit: type=1400 audit(1790302047.645:1257): avc:  denied  { create } for  pid=2350 comm="syz.1.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0
[  103.441557][   T28] audit: type=1400 audit(1790302047.645:1258): avc:  denied  { module_request } for  pid=2350 comm="syz.1.540" kmod="netdev-syzkaller1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0
[  103.469064][   T28] audit: type=1400 audit(1790302047.645:1259): avc:  denied  { sys_module } for  pid=2350 comm="syz.1.540" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=0
[  103.491373][ T2354] FAULT_INJECTION: forcing a failure.
[  103.491373][ T2354] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  103.514572][   T28] audit: type=1400 audit(1790302047.675:1260): avc:  denied  { read write } for  pid=288 comm="syz-executor" name="loop1" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  103.541493][ T2354] CPU: 0 PID: 2354 Comm: syz.1.541 Not tainted syzkaller #0
[  103.548785][ T2354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  103.558823][ T2354] Call Trace:
[  103.562082][ T2354]  <TASK>
[  103.564993][ T2354]  __dump_stack+0x21/0x24
[  103.569312][ T2354]  dump_stack_lvl+0x110/0x170
[  103.573975][ T2354]  ? __cfi_dump_stack_lvl+0x8/0x8
[  103.578981][ T2354]  ? format_decode+0x1bb/0x1520
[  103.583816][ T2354]  dump_stack+0x15/0x24
[  103.587951][ T2354]  should_fail_ex+0x3bf/0x510
[  103.592612][ T2354]  should_fail+0xb/0x10
[  103.596750][ T2354]  should_fail_usercopy+0x1a/0x20
[  103.601751][ T2354]  _copy_from_user+0x1e/0xc0
[  103.606329][ T2354]  kstrtouint_from_user+0xda/0x170
[  103.611433][ T2354]  ? __cfi_kstrtouint_from_user+0x10/0x10
[  103.617131][ T2354]  ? __kasan_check_read+0x11/0x20
[  103.622134][ T2354]  ? _copy_to_user+0x72/0x90
[  103.626711][ T2354]  ? simple_read_from_buffer+0x10f/0x160
[  103.632326][ T2354]  proc_fail_nth_write+0x8b/0x200
[  103.637334][ T2354]  ? __cfi_proc_fail_nth_write+0x10/0x10
[  103.642947][ T2354]  ? security_file_permission+0x8a/0xb0
[  103.648482][ T2354]  ? security_file_permission+0x94/0xb0
[  103.654011][ T2354]  ? __cfi_proc_fail_nth_write+0x10/0x10
[  103.659628][ T2354]  vfs_write+0x3fb/0xd00
[  103.663851][ T2354]  ? __kasan_check_read+0x11/0x20
[  103.668855][ T2354]  ? __cfi_vfs_write+0x10/0x10
[  103.673602][ T2354]  ? __kasan_check_write+0x14/0x20
[  103.678696][ T2354]  ? mutex_lock+0x93/0x1b0
[  103.683090][ T2354]  ? __cfi_mutex_lock+0x10/0x10
[  103.687923][ T2354]  ? __fdget_pos+0x2cd/0x380
[  103.692492][ T2354]  ? ksys_write+0x70/0x260
[  103.696886][ T2354]  ksys_write+0x14a/0x260
[  103.701196][ T2354]  ? __cfi_ksys_write+0x10/0x10
[  103.706024][ T2354]  ? fput+0x154/0x1a0
[  103.709989][ T2354]  ? debug_smp_processor_id+0x17/0x20
[  103.715343][ T2354]  __x64_sys_write+0x7b/0x90
[  103.719917][ T2354]  x64_sys_call+0x27b/0x9a0
[  103.724401][ T2354]  do_syscall_64+0x4c/0xa0
[  103.728801][ T2354]  ? clear_bhb_loop+0x30/0x80
[  103.733462][ T2354]  ? clear_bhb_loop+0x30/0x80
[  103.738117][ T2354]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  103.743991][ T2354] RIP: 0033:0x7f9fe5f5e98e
[  103.748389][ T2354] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  103.767979][ T2354] RSP: 002b:00007f9fe6df2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  103.776377][ T2354] RAX: ffffffffffffffda RBX: 00007f9fe6df36c0 RCX: 00007f9fe5f5e98e
[  103.784341][ T2354] RDX: 0000000000000001 RSI: 00007f9fe6df30a0 RDI: 0000000000000008
[  103.792297][ T2354] RBP: 00007f9fe6df3090 R08: 0000000000000000 R09: 0000000000000000
[  103.800255][ T2354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  103.808211][ T2354] R13: 00007f9fe6226128 R14: 00007f9fe6226090 R15: 00007ffc6a9b6978
[  103.816174][ T2354]  </TASK>
[  103.837833][   T28] audit: type=1400 audit(1790302047.725:1261): avc:  denied  { execmem } for  pid=2352 comm="syz.1.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0
[  105.927478][ T2402] FAULT_INJECTION: forcing a failure.
[  105.927478][ T2402] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  105.977917][ T2402] CPU: 0 PID: 2402 Comm: syz.6.557 Not tainted syzkaller #0
[  105.985221][ T2402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  105.995269][ T2402] Call Trace:
[  105.998542][ T2402]  <TASK>
[  106.001474][ T2402]  __dump_stack+0x21/0x24
[  106.005810][ T2402]  dump_stack_lvl+0x110/0x170
[  106.010488][ T2402]  ? __cfi_dump_stack_lvl+0x8/0x8
[  106.015514][ T2402]  ? copy_data+0x211/0x330
[  106.019933][ T2402]  dump_stack+0x15/0x24
[  106.024088][ T2402]  should_fail_ex+0x3bf/0x510
[  106.028766][ T2402]  should_fail+0xb/0x10
[  106.032915][ T2402]  should_fail_usercopy+0x1a/0x20
[  106.037934][ T2402]  _copy_to_user+0x1e/0x90
[  106.042354][ T2402]  rng_dev_read+0x4b8/0x960
[  106.046855][ T2402]  ? __cfi_rng_dev_read+0x10/0x10
[  106.051895][ T2402]  ? fsnotify_perm+0x3e9/0x5b0
[  106.056663][ T2402]  ? security_file_permission+0x94/0xb0
[  106.062211][ T2402]  ? __cfi_rng_dev_read+0x10/0x10
[  106.067232][ T2402]  vfs_read+0x286/0x930
[  106.071387][ T2402]  ? __cfi_vfs_read+0x10/0x10
[  106.076058][ T2402]  ? __fget_files+0x2d1/0x330
[  106.080731][ T2402]  ? __fdget_pos+0x1f2/0x380
[  106.085316][ T2402]  ? ksys_read+0x70/0x260
[  106.089639][ T2402]  ksys_read+0x14a/0x260
[  106.093879][ T2402]  ? __cfi_ksys_read+0x10/0x10
[  106.098634][ T2402]  ? debug_smp_processor_id+0x17/0x20
[  106.104002][ T2402]  __x64_sys_read+0x7b/0x90
[  106.108497][ T2402]  x64_sys_call+0x2f/0x9a0
[  106.112910][ T2402]  do_syscall_64+0x4c/0xa0
[  106.117324][ T2402]  ? clear_bhb_loop+0x30/0x80
[  106.121994][ T2402]  ? clear_bhb_loop+0x30/0x80
[  106.126663][ T2402]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  106.132552][ T2402] RIP: 0033:0x7f2aedd9e159
[  106.136967][ T2402] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  106.156568][ T2402] RSP: 002b:00007f2aeecb3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  106.164979][ T2402] RAX: ffffffffffffffda RBX: 00007f2aee025fa0 RCX: 00007f2aedd9e159
[  106.172945][ T2402] RDX: 0000000000002020 RSI: 00002000000005c0 RDI: 0000000000000003
[  106.180914][ T2402] RBP: 00007f2aeecb3090 R08: 0000000000000000 R09: 0000000000000000
[  106.188882][ T2402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  106.196851][ T2402] R13: 00007f2aee026038 R14: 00007f2aee025fa0 R15: 00007ffd6d68f548
[  106.204828][ T2402]  </TASK>
[  107.883760][ T2447] sch_tbf: burst 9 is lower than device syzkaller0 mtu (1500) !
[  108.290232][   T28] kauditd_printk_skb: 226 callbacks suppressed
[  108.290255][   T28] audit: type=1400 audit(1790302052.595:1488): avc:  denied  { read write } for  pid=288 comm="syz-executor" name="loop1" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  108.330773][   T28] audit: type=1400 audit(1790302052.625:1489): avc:  denied  { bpf } for  pid=2463 comm="syz.1.581" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0
[  108.351330][   T28] audit: type=1400 audit(1790302052.625:1490): avc:  denied  { map_create } for  pid=2463 comm="syz.1.581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  108.372093][   T28] audit: type=1400 audit(1790302052.625:1491): avc:  denied  { create } for  pid=2463 comm="syz.1.581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0
[  108.392268][   T28] audit: type=1400 audit(1790302052.625:1492): avc:  denied  { read } for  pid=2463 comm="syz.1.581" dev="nsfs" ino=4026532326 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0
[  108.413536][   T28] audit: type=1400 audit(1790302052.625:1493): avc:  denied  { create } for  pid=2463 comm="syz.1.581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0
[  108.438000][   T28] audit: type=1400 audit(1790302052.635:1494): avc:  denied  { read write } for  pid=2463 comm="syz.1.581" name="loop1" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  108.463054][   T28] audit: type=1400 audit(1790302052.635:1495): avc:  denied  { unmount } for  pid=2463 comm="syz.1.581" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=0
[  108.519078][   T28] audit: type=1400 audit(1790302052.635:1496): avc:  denied  { bpf } for  pid=2463 comm="syz.1.581" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0
[  108.540872][   T28] audit: type=1400 audit(1790302052.635:1497): avc:  denied  { prog_load } for  pid=2463 comm="syz.1.581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  109.589451][  T440] tipc: Left network mode
[  110.128440][  T440] device bridge_slave_1 left promiscuous mode
[  110.134571][  T440] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.142015][  T440] device bridge_slave_0 left promiscuous mode
[  110.148254][  T440] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.155924][  T440] device veth1_macvtap left promiscuous mode
[  110.162003][  T440] device veth0_vlan left promiscuous mode
[  112.670979][ T2563] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  113.527819][   T28] kauditd_printk_skb: 209 callbacks suppressed
[  113.527834][   T28] audit: type=1400 audit(1790302057.825:1707): avc:  denied  { read } for  pid=2567 comm="syz.7.618" dev="nsfs" ino=4026532304 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0
[  113.556608][   T28] audit: type=1400 audit(1790302057.825:1708): avc:  denied  { execmem } for  pid=2566 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0
[  113.576153][   T28] audit: type=1400 audit(1790302057.825:1709): avc:  denied  { read write } for  pid=2568 comm="syz.6.619" name="loop6" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  113.600457][   T28] audit: type=1400 audit(1790302057.835:1710): avc:  denied  { read append } for  pid=2568 comm="syz.6.619" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0
[  113.623718][   T28] audit: type=1400 audit(1790302057.855:1711): avc:  denied  { read } for  pid=2567 comm="syz.7.618" dev="nsfs" ino=4026532304 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0
[  113.645019][   T28] audit: type=1400 audit(1790302057.855:1712): avc:  denied  { read write } for  pid=2567 comm="syz.7.618" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0
[  113.668465][   T28] audit: type=1400 audit(1790302057.855:1713): avc:  denied  { read write } for  pid=524 comm="syz-executor" name="loop6" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  114.071862][   T28] audit: type=1400 audit(1790302058.375:1714): avc:  denied  { read write } for  pid=1189 comm="syz-executor" name="loop7" dev="devtmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  114.104187][   T28] audit: type=1400 audit(1790302058.405:1715): avc:  denied  { read write } for  pid=380 comm="syz-executor" name="loop5" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  114.544473][   T28] audit: type=1400 audit(1790302058.835:1716): avc:  denied  { execmem } for  pid=2571 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0
[  116.865550][ T2592] FAULT_INJECTION: forcing a failure.
[  116.865550][ T2592] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  116.882828][ T2592] CPU: 0 PID: 2592 Comm: syz.5.628 Not tainted syzkaller #0
[  116.890131][ T2592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  116.900192][ T2592] Call Trace:
[  116.903473][ T2592]  <TASK>
[  116.906401][ T2592]  __dump_stack+0x21/0x24
[  116.910740][ T2592]  dump_stack_lvl+0x110/0x170
[  116.915480][ T2592]  ? __cfi_dump_stack_lvl+0x8/0x8
[  116.920517][ T2592]  dump_stack+0x15/0x24
[  116.924678][ T2592]  should_fail_ex+0x3bf/0x510
[  116.929354][ T2592]  should_fail+0xb/0x10
[  116.933511][ T2592]  should_fail_usercopy+0x1a/0x20
[  116.938537][ T2592]  _copy_to_user+0x1e/0x90
[  116.942961][ T2592]  simple_read_from_buffer+0xe9/0x160
[  116.948342][ T2592]  proc_fail_nth_read+0x1a6/0x220
[  116.953371][ T2592]  ? __cfi_proc_fail_nth_read+0x10/0x10
[  116.958921][ T2592]  ? security_file_permission+0x94/0xb0
[  116.964483][ T2592]  ? __cfi_proc_fail_nth_read+0x10/0x10
[  116.970038][ T2592]  vfs_read+0x286/0x930
[  116.974197][ T2592]  ? __cfi_vfs_read+0x10/0x10
[  116.978869][ T2592]  ? __kasan_check_write+0x14/0x20
[  116.983985][ T2592]  ? mutex_lock+0x93/0x1b0
[  116.988418][ T2592]  ? __cfi_mutex_lock+0x10/0x10
[  116.993266][ T2592]  ? __fdget_pos+0x2cd/0x380
[  116.997856][ T2592]  ? ksys_read+0x70/0x260
[  117.002182][ T2592]  ksys_read+0x14a/0x260
[  117.006420][ T2592]  ? __cfi_ksys_read+0x10/0x10
[  117.011181][ T2592]  ? debug_smp_processor_id+0x17/0x20
[  117.016555][ T2592]  __x64_sys_read+0x7b/0x90
[  117.021053][ T2592]  x64_sys_call+0x2f/0x9a0
[  117.025472][ T2592]  do_syscall_64+0x4c/0xa0
[  117.029889][ T2592]  ? clear_bhb_loop+0x30/0x80
[  117.034563][ T2592]  ? clear_bhb_loop+0x30/0x80
[  117.039235][ T2592]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  117.045108][ T2592] RIP: 0033:0x7fa99b75e98e
[  117.049500][ T2592] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  117.069082][ T2592] RSP: 002b:00007fa99c64ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  117.077471][ T2592] RAX: ffffffffffffffda RBX: 00007fa99c6506c0 RCX: 00007fa99b75e98e
[  117.085418][ T2592] RDX: 000000000000000f RSI: 00007fa99c6500a0 RDI: 0000000000000003
[  117.093384][ T2592] RBP: 00007fa99c650090 R08: 0000000000000000 R09: 0000000000000000
[  117.101339][ T2592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  117.109287][ T2592] R13: 00007fa99ba26038 R14: 00007fa99ba25fa0 R15: 00007ffc953b8998
[  117.117254][ T2592]  </TASK>
[  118.656977][   T28] kauditd_printk_skb: 78 callbacks suppressed
[  118.657016][   T28] audit: type=1400 audit(1790302062.955:1795): avc:  denied  { read write } for  pid=1189 comm="syz-executor" name="loop7" dev="devtmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  118.697302][   T28] audit: type=1400 audit(1790302062.995:1796): avc:  denied  { read write } for  pid=288 comm="syz-executor" name="loop1" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  119.100847][   T28] audit: type=1400 audit(1790302063.405:1797): avc:  denied  { read write } for  pid=380 comm="syz-executor" name="loop5" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  119.600296][   T28] audit: type=1400 audit(1790302063.905:1798): avc:  denied  { read write } for  pid=2614 comm="syz.7.633" name="loop7" dev="devtmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  119.644227][   T28] audit: type=1400 audit(1790302063.905:1799): avc:  denied  { read } for  pid=2617 comm="syz.5.635" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0
[  119.667313][   T28] audit: type=1400 audit(1790302063.915:1800): avc:  denied  { execmem } for  pid=2612 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0
[  119.687377][   T28] audit: type=1400 audit(1790302063.925:1801): avc:  denied  { read write } for  pid=380 comm="syz-executor" name="loop5" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  119.711778][   T28] audit: type=1400 audit(1790302063.925:1802): avc:  denied  { read write } for  pid=2614 comm="syz.7.633" name="loop7" dev="devtmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  119.735698][   T28] audit: type=1400 audit(1790302063.925:1803): avc:  denied  { execmem } for  pid=2614 comm="syz.7.633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0
[  119.754806][   T28] audit: type=1400 audit(1790302063.935:1804): avc:  denied  { read write } for  pid=2618 comm="syz.1.632" name="loop1" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  124.469210][   T28] kauditd_printk_skb: 82 callbacks suppressed
[  124.469227][   T28] audit: type=1400 audit(1790302068.775:1887): avc:  denied  { read } for  pid=2653 comm="syz.1.644" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0
[  124.508851][   T28] audit: type=1400 audit(1790302068.775:1888): avc:  denied  { execmem } for  pid=2652 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0
[  124.528416][   T28] audit: type=1400 audit(1790302068.775:1889): avc:  denied  { bpf } for  pid=2654 comm="syz.6.646" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0
[  124.549241][   T28] audit: type=1400 audit(1790302068.805:1890): avc:  denied  { read write } for  pid=2656 comm="syz.7.645" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0
[  124.583692][   T28] audit: type=1400 audit(1790302068.805:1891): avc:  denied  { execmem } for  pid=2656 comm="syz.7.645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0
[  124.617828][   T28] audit: type=1400 audit(1790302068.805:1892): avc:  denied  { read write } for  pid=288 comm="syz-executor" name="loop1" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  124.655280][   T28] audit: type=1400 audit(1790302068.875:1893): avc:  denied  { read write } for  pid=2654 comm="syz.6.646" name="loop6" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  124.679340][   T28] audit: type=1400 audit(1790302068.885:1894): avc:  denied  { read write } for  pid=2656 comm="syz.7.645" name="loop7" dev="devtmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  124.703586][   T28] audit: type=1400 audit(1790302068.915:1895): avc:  denied  { execmem } for  pid=2656 comm="syz.7.645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0
[  124.722860][   T28] audit: type=1400 audit(1790302068.915:1896): avc:  denied  { read write } for  pid=2656 comm="syz.7.645" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0
[  130.204655][   T28] kauditd_printk_skb: 45 callbacks suppressed
[  130.204671][   T28] audit: type=1400 audit(1790302074.505:1942): avc:  denied  { read write } for  pid=2682 comm="syz.1.655" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0
[  130.278428][   T28] audit: type=1400 audit(1790302074.505:1943): avc:  denied  { read write } for  pid=2682 comm="syz.1.655" name="loop1" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  130.357844][   T28] audit: type=1400 audit(1790302074.515:1944): avc:  denied  { execmem } for  pid=2681 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0
[  130.407814][   T28] audit: type=1400 audit(1790302074.535:1945): avc:  denied  { write } for  pid=280 comm="syz-executor" path="pipe:[15197]" dev="pipefs" ino=15197 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=0
[  130.431230][   T28] audit: type=1400 audit(1790302074.535:1946): avc:  denied  { write } for  pid=280 comm="syz-executor" path="pipe:[15197]" dev="pipefs" ino=15197 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=0
[  130.454597][   T28] audit: type=1400 audit(1790302074.535:1947): avc:  denied  { write } for  pid=280 comm="syz-executor" path="pipe:[15197]" dev="pipefs" ino=15197 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=0
[  130.481169][   T28] audit: type=1400 audit(1790302074.535:1948): avc:  denied  { write } for  pid=280 comm="syz-executor" path="pipe:[15197]" dev="pipefs" ino=15197 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=0
[  130.517814][   T28] audit: type=1400 audit(1790302074.535:1949): avc:  denied  { write } for  pid=280 comm="syz-executor" path="pipe:[15197]" dev="pipefs" ino=15197 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=0
[  130.567937][   T28] audit: type=1400 audit(1790302074.555:1950): avc:  denied  { bpf } for  pid=2686 comm="syz.7.656" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0
[  130.601741][   T28] audit: type=1400 audit(1790302074.555:1951): avc:  denied  { read } for  pid=2686 comm="syz.7.656" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0
[  131.048503][  T439] device bridge_slave_1 left promiscuous mode
[  131.054631][  T439] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.062097][  T439] device bridge_slave_0 left promiscuous mode
[  131.068296][  T439] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.075965][  T439] device veth1_macvtap left promiscuous mode
[  131.082013][  T439] device veth0_vlan left promiscuous mode
[  131.888960][  T439] device bridge_slave_1 left promiscuous mode
[  131.895059][  T439] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.902470][  T439] device bridge_slave_0 left promiscuous mode
[  131.908620][  T439] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.916210][  T439] device bridge_slave_1 left promiscuous mode
[  131.922388][  T439] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.929704][  T439] device bridge_slave_0 left promiscuous mode
[  131.935778][  T439] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.943760][  T439] device bridge_slave_1 left promiscuous mode
[  131.949889][  T439] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.957195][  T439] device bridge_slave_0 left promiscuous mode
[  131.963374][  T439] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.971372][  T439] device veth1_macvtap left promiscuous mode
[  131.977358][  T439] device veth0_vlan left promiscuous mode
[  131.983370][  T439] device veth1_macvtap left promiscuous mode
[  131.989458][  T439] device veth0_vlan left promiscuous mode
[  131.995438][  T439] device veth1_macvtap left promiscuous mode
[  132.001457][  T439] device veth0_vlan left promiscuous mode