last executing test programs:

6.755506807s ago: executing program 4 (id=85):
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000140)=0x881)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]})
r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x11, &(0x7f0000000000)=0x8, 0x4)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000001c0)={0x6}, 0x8)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x803, 0x9, 0x0, 0x400, 0x80, 0x89, 0xfffffffffffffffd, 0x8, 0x8d], 0x100000, 0x240046})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r2, 0x8010aebc, &(0x7f0000000040)={0x6000, 0x4000})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

6.607550607s ago: executing program 4 (id=87):
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003d80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000100000000000000860600004aa481670b44e3b2de002ebfadfb35aa0000000031ae3a6632e4aac35df89681bdeca16e1bf046ab8363726b916429ce4f0c86d1dffd6717e056244b1ce6f17ca05708e027d0d5cb7280eb337fd120803a859f6b2b88042ce6e1291242dc0f3fb3cf63d89a4a2c4011787a1e97f766c40ea48a48c4"], 0x18}}], 0x1, 0x8090)

6.500663446s ago: executing program 4 (id=88):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x800006dc, 0x0, 0x6, 0x9e93, 0x17, "1012a2c2030800001fe550bf0d08000000e956"})
syz_read_part_table(0x1065, &(0x7f0000000000)="$eJzsz7FJBVEQBdD75D/9GwiisLGl2IDh1qGpkdYjJiYGRvaibcjI2wVb2B+cEwzMcGdgwq568nWWPMzXtby93yRPH2OW9jlqfqv6mvq5TK4yJ1VVx9z+H2hJ7pL782l0z9vyS5JDm5JDjj1tZHKRXnnsa2DzneV1j58BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4NT8BQAA//8aWhOB")

3.976515001s ago: executing program 1 (id=112):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYBLOB, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRES32=r0, @ANYRESDEC=0x0])
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
llistxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x40040, 0x59)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$unix(0x1, 0x1, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x54a, &(0x7f0000000200)="$eJzs3U9vHGcZAPBn1l7HSZzaBQ5QqaWiRUkF2Y1r2locSpEQt0pI5R6MvbGsrL2RvW5jq4LNJ0BCCJA4wYULEh8ACUXiwhEhRYIzSEUgBClIcCgdNLOzdrqZtTdhvUvs30+azPvOv+d5N57ZmZ1XMwGcWc9HxBsR8WGapi9FxHwxvVIM0ekO2XLv3393NRuSSNO3/pZEUkzLFkvTNO1t82K+ytRBjG8mDwScLcZ7+zdXms3GdlGttzdv1Xf29q9ubK6sN9YbW0tLi68uv7b8yvK1kbTzUkS8/pU/ff87P/3q67/8/Dt/vP6XK9/K0por5vfa8Rimj5rZbXr13GzfCtuPGez/Udae6gdF5fxw69w5yYQAABgoO8f/WER8JiJeivmYOvp0FgAAAHgCpV+aiw+S7v27EjMDpgMAAABPkEreBzap1Iq+AHNRqdRq3T68n4gLlWZrp/25G63drbVuX9mFqFZubDQb14q+wgtRTbL6Yl4+rL/cV1+KiKcj4nvz5/N6bbXVXJv0jx8AAABwRlzsu/7/53z3+v9oyXiSAwAAAEZnYdIJAAAAACfO9T8AAACcatVJJwAAAACcuK+9+WY2pL33X6+9vbd7s/X21bXGzs3a5u5qbbW1fau23mqt58/s2zxue81W69YXYmv3dr3d2GnXL+3tX99s7W61r2/E7FgaBAAAADzk6U/f/X0SEZ0vns+HzMykkwLGYvqg1HumZ8ne/4enuuP3xpQUMBZTQyzz3rny6c4T4Mk23T9hwL4OnD76/wPHvdFjYOed33RHlRHnAwAAjN7lT5Xf/z/+fL7jlB+ecHZiOLv67v+n85NKBBi7/P7/sB15nCzAqVIdqgcgcJr9r/f/j5emj5QQAAAwcnP5kFRqxc97c1Gp1GoRl/LXAlaTGxvNxrWIeCoifjdfPZfVF/M1k2OvGQAAAAAAAAAAAAAAAAAAAAAAAACArjRNIgUAAABOtYjKn5NfdZ/lf3n+xbn+3wdmkn/nrwSeiYh3fvTWD26vtNvbi9n0vx9Mb/+wmP7yJH7BAAAAAPr1rtPz8b8mnQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp837999d7Q1DLH5+VHH/+uWIWCiLPx2z+Xg2qhFx4R9JTD+wXhIRUyOI37kTEZ8si59kaR2ELIs/ig+hcyfppLnS+LFQfApl8S+OID6cZXez488bZft/JZ7Px+X733TER+qPa/DxLw6Of1MD9v9LQ8Z45t7P6wPj34l4Zrr8+NeLnwyI/8JQ0avxja/v7w+am/444nLv+yc/4j0Y4bBUb2/equ/s7V/d2FxZb6w3tpaWFl9dfm35leVr9RsbzUbxb2mM7z77iw+Pav+F0u+/pMhmcPtfLNneVEn+/7l3+/7He5XOw/GvvFAS/9c/KZZ4OH6liPPZopzNv9wrd7rlBz33s98+d1T71w7bX32U//8rgzba76Ed5dnh/nQAgBOxs7d/c6XZbGyfdCG7WB5XrI8UssBjDzqawsxkPrGzU/h2Vrg3qg2maZpm+1TJrLsRMcx2khhxSyvl+RwWBh4BJn1kAgAARu3wpH/SmQAAAAAAAAAAAAAAAAAAAMDZNY6nrPXHPHwEcjKKR2gDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIzEfwMAAP//O7TZvA==")
socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CAP_HYPERV_SYNIC2(0xffffffffffffffff, 0x4068aea3, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000600)={0x1, 0x0, [{0x400000b0, 0x0, 0xfffffffffffffffd}]})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = getpid()
r4 = syz_pidfd_open(r3, 0x0)
setns(r4, 0x24020000)
umount2(&(0x7f0000000040)='.\x00', 0x2)
close_range(r1, 0xffffffffffffffff, 0x0)

3.965240644s ago: executing program 1 (id=113):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101})
socket$netlink(0x10, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x6, &(0x7f00000000c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f0000000640)=""/195, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x6}, 0x94)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x3f)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x62000000004, 0x1000000000, 0x5, 0x41, 0xfe, 0x0, 0x2004ce, 0x8000002000, 0xffffffffffffffff, 0x100000000, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x81202})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff)
prlimit64(0x0, 0x9, &(0x7f0000000000)={0xb, 0x9}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x25be893e)
r7 = getpid()
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002679d9910570bc7dff71a0102030109021b0001ff7f20f30904d10201030102980905ff00ff03a605aa"], 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="28000000152a2ec99f28aeb53e4cfc3162a63486efb062d526b76aae31cd87", @ANYRES16=r6, @ANYBLOB="01032cbd7000fedbdf25000000001400020077673100"/34], 0x28}, 0x1, 0x0, 0x0, 0x40000c1}, 0x20040000)
r10 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r10, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10)
socket$vsock_stream(0x28, 0x1, 0x0)

2.407782247s ago: executing program 4 (id=120):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000040)=0x5) (async)
r1 = syz_clone(0x80, &(0x7f0000000080)="b09583ddad2892f2493fb1768ceefda51e3dce268d06fcb1e080fad556426e6d42c23171f1e26c8da155248907d65a42fb3561c1df4dda40090728475641", 0x3e, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="83324e0f8faa3c3357ebefcd79c1eebbc8a7cb1f0d4bce9f330e36e78b53e59ab6b51531aafa6140d1650ae20ef539bb479a03228453a8b92e60983e513c01e33443a866b9430c7368cd809e2ec3c41c9b693b78ebf49e8aaeb2b43fd9269c220245a490fdb2c47efb8b7d99b8c0c45e4ebf8bfb1eb89831fd75a16964339ab27ad9b8d77a4d0294198afbfb1fb9756af55413715e97f9268861")
r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.memory_migrate\x00', 0x2, 0x0)
write$cgroup_int(r2, &(0x7f0000000240)=0x6, 0x12) (async)
pwritev2(r2, &(0x7f00000003c0)=[{&(0x7f0000000280)="6ef33c489e711906d1f214b753b497b5a71fa3d24c4770a47c3accd3719f7d05c78ee3a2c2cdeaba6ce0841b95234dce6ba2594c98c71c47efc3df411057047fb787f4e87f8ca43f181b4b15c61a5acbf14dcd0228bd9f6349462fbfadc55e2756ab1f96c6fe05b32777372f4c8db624c3ec8a1bf916", 0x76}, {&(0x7f0000000300)="7a0a39a80dbefded0ffc5cab932e1ea5603caa162255870dcf6b8d45c5c433256e411e75c8c75c09795254655ebfc5e51f45e4b00c467c3da82c2845bacbc775d98bf5bf3669ce34c8e5e99b3b188ed004d70e2063d4274a9123d323aeea8a2b3619e9cbbc851cebbe3bb6cdf28b1f0323bac26b4a03ace700621295c02af61ca7fc9178f28ecefbac41a1414f055d5091af72dac9c816d13c0a32d2c78df8b4021e53aefcf1c5c29349feb21b640c8f40", 0xb1}], 0x2, 0xfffff801, 0x792c, 0x2) (async)
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000400)={0x6, 0x0, [{0x80000007, 0x5, 0x7, 0x2, 0x8, 0x8, 0x9}, {0xd, 0xc, 0x0, 0x2, 0x9, 0x3ff, 0x3ff00}, {0x7, 0x2, 0x0, 0x3, 0x8, 0x7, 0xa7b}, {0x6, 0x800, 0x1, 0x7ff, 0x2, 0x80, 0x8}, {0x80000001, 0x10000, 0x2, 0x1, 0x5, 0x6, 0x8}, {0x100000002, 0xffffffff, 0x2, 0xfac, 0x6, 0x4, 0x9}]}) (async)
fcntl$lock(r2, 0x7, &(0x7f0000000500)={0x1, 0x32615585aee9ac70, 0x3, 0x100000000, r1})
ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000540)) (async)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x1010, r2, 0xe5c4a000) (async)
sendto(r0, &(0x7f0000000580)="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", 0x1000, 0x4004880, 0x0, 0x0) (async)
fcntl$getownex(r2, 0x10, &(0x7f0000001580)={0x0, <r3=>0x0})
tkill(r3, 0x41)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001680)={{0xffffffffffffffff, <r4=>0xffffffffffffffff}, &(0x7f0000001600), &(0x7f0000001640)}, 0x20)
bpf$OBJ_PIN_MAP(0x6, &(0x7f00000016c0)=@o_path={&(0x7f00000015c0)='./file0\x00', r4, 0x4000, r0}, 0x18)
getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000001700)=""/82, &(0x7f0000001780)=0x52) (async, rerun: 32)
r5 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000002840), 0x0, 0x0) (async, rerun: 32)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002a40)={0xffffffffffffffff, 0x20, &(0x7f0000002a00)={&(0x7f0000002900)=""/19, 0x13, <r6=>0x0, &(0x7f0000002940)=""/139, 0x8b}}, 0x10)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002a80)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000002bc0)={0x1f, 0x4, &(0x7f00000017c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@jmp={0x5, 0x1, 0x7, 0x6, 0x0, 0x73, 0x10}]}, &(0x7f0000001800)='GPL\x00', 0x4, 0x1000, &(0x7f0000001840)=""/4096, 0x41000, 0x20, '\x00', 0x0, @fallback=0x13, r5, 0x8, &(0x7f0000002880)={0x2, 0x4}, 0x8, 0x10, &(0x7f00000028c0)={0x0, 0xe, 0x473, 0x1}, 0x10, r6, 0xffffffffffffffff, 0x5, &(0x7f0000002b00)=[r7, r4, r4], &(0x7f0000002b40)=[{0x2, 0x1, 0xc, 0x7}, {0x0, 0x1, 0x3}, {0x3, 0x3, 0xe, 0x6}, {0x2, 0x1, 0x7, 0x2}, {0x0, 0x3, 0x7, 0xc}], 0x10, 0x400}, 0x94)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000002c80)={0x24000, 0x3, 0x4, 0x8, 0x7ff}) (async)
ioctl$XFS_IOC_FSGROWFSLOG(r5, 0x4008586f, &(0x7f0000002cc0)={0x3, 0x3}) (async)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x8010, r0, 0x11159000) (async)
r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002d00)='/sys/kernel/rcu_expedited', 0x2, 0x5)
connect$inet(r0, &(0x7f0000002d40)={0x2, 0x4e21, @private=0xa010102}, 0x10) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002d80)) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002e40)={{r8, <r9=>0xffffffffffffffff}, &(0x7f0000002dc0), &(0x7f0000002e00)}, 0x20) (async, rerun: 32)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000003000)={'gre0\x00', &(0x7f0000002f80)={'tunl0\x00', <r10=>0x0, 0x1, 0x8, 0x7, 0x100, {{0x9, 0x4, 0x0, 0x32, 0x24, 0x66, 0x0, 0xff, 0x4, 0x0, @private=0xa010100, @multicast1, {[@ra={0x94, 0x4}, @generic={0xf92482d937ea115f, 0x9, "0fa8f2da3f6253"}]}}}}}) (rerun: 32)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003180)={0x11, 0x10, &(0x7f0000002e80)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r8}}, @generic={0x7, 0x4, 0x2, 0x200, 0x40}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000002f00)='GPL\x00', 0x2, 0x38, &(0x7f0000002f40)=""/56, 0x41100, 0x40, '\x00', r10, 0x0, r0, 0x8, 0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003040)={0x3, 0xa, 0x2f, 0x6}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000030c0)=[r5, r5, 0xffffffffffffffff, r7, 0x1], &(0x7f0000003100)=[{0x0, 0x3, 0xa, 0x7}, {0x2, 0x4, 0x7, 0xc}, {0x2, 0x1, 0x8, 0x1}, {0x1, 0x1, 0xf, 0x9}, {0x3, 0x4, 0xa, 0x5}, {0x0, 0x5, 0x6, 0x9}], 0x10, 0xfffffffa}, 0x94)

2.236447243s ago: executing program 4 (id=121):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]})
r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x11, &(0x7f0000000000)=0x8, 0x4)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000001c0)={0x6}, 0x8)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x803, 0x9, 0x0, 0x400, 0x80, 0x89, 0xfffffffffffffffd, 0x8, 0x8d], 0x100000, 0x240046})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r2, 0x8010aebc, &(0x7f0000000040)={0x6000, 0x4000})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1.970255606s ago: executing program 0 (id=126):
syz_mount_image$erofs(&(0x7f0000000100), &(0x7f0000000580)='./file1\x00', 0x1000c01, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRESHEX], 0x2, 0x231, &(0x7f0000000240)="$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")
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f00000001c0)='./file1\x00', 0x8000, &(0x7f0000000040)=ANY=[], 0x1, 0x14fe, &(0x7f0000002a80)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35) (async)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
creat(&(0x7f0000000000)='./file1\x00', 0x6a)
open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) (async)
r1 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0)
getdents64(r1, 0x0, 0x0)
mkdirat(r1, &(0x7f0000000840)='./file1\x00', 0x0)
flock(r1, 0x6) (async)
flock(r1, 0x6)

1.91653316s ago: executing program 0 (id=127):
r0 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000600)={'syztnl1\x00', <r1=>0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x20, 0xfffffffc, 0xdc68}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', r1, 0x29, 0x0, 0x6, 0x7f, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x7, 0x40, 0x6, 0x41}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000540)={'ip6gre0\x00', r1, 0x0, 0x0, 0x0, 0x0, 0xd, @private2, @loopback, 0x40, 0x7800, 0xfffffffc}})
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
recvmmsg(r2, &(0x7f0000002100)=[{{0x0, 0x0, &(0x7f0000001ec0)=[{0x0}, {&(0x7f0000001e00)=""/10, 0xa}], 0x2}, 0x7f}], 0x1, 0x2, 0x0)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
timer_create(0x1, &(0x7f0000000100)={0x0, 0x21, 0x2, @tid=r4}, &(0x7f0000000080))
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x8042, 0x0)
pwrite64(r5, &(0x7f00000000c0)="05c61f", 0x3, 0x8080c61)
fallocate(r5, 0x3, 0x80007, 0x8000c60)
fcntl$lock(r2, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x40000000003ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x6}, 0x4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x80, 0xfd}]}, 0x10)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r7 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r7, 0x0, 0x0, 0x4098884, &(0x7f0000000380)={0xa, 0x4e20, 0xc, @mcast2}, 0x1c)
sendto$inet6(r7, 0x0, 0x0, 0x0, 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000)
r8 = getpid()
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0)
sched_setscheduler(r8, 0x1, &(0x7f0000000240)=0x7)
fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x2, 0x3, 0x101, 0x2, r8})
rt_sigtimedwait(&(0x7f0000000340)={[0xfffffffffffff800]}, 0x0, &(0x7f0000000440)={0x77359400}, 0x8)

1.792563934s ago: executing program 4 (id=129):
r0 = syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000408f0e030000000000000109022400010000000409040008820300030009210000000122180009058103bf0700e0ea9cc08be9fabdc7734bea002fb11b4b394695219bddc4fbd3cc7c8e3f507e7f510dcaa7d2ae469cc9c2b0aa43ab9c38ebf88849d0fcc672a9a43b66eb36cd3d340559057fd563d709e16815"], 0x0) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x79, &(0x7f00000001c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x67, 0x1, 0x1, 0x1, 0x60, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x2, 0x6, 0x0, 0xc, {{0x9, 0x24, 0x6, 0x0, 0x0, "28c9d6f9"}, {0x5, 0x24, 0x0, 0x100}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x73, 0x7, 0x81}, [@mbim_extended={0x8, 0x24, 0x1c, 0xb47, 0x7, 0x4}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x1}, @country_functional={0x12, 0x24, 0x7, 0x2b, 0x37, [0x0, 0xd48, 0x7, 0xed76, 0x5, 0x2]}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x4, 0x4, 0x5}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x3, 0x40, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x4, 0x7, 0x7}}}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x300, 0xfa, 0x8, 0x9, 0xff, 0x4}, 0x5, &(0x7f0000000280)={0x5, 0xf, 0x5}, 0x7, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xf8ff}}, {0x6b, &(0x7f0000000300)=@string={0x6b, 0x3, "06ce5a5acb5828d969873641d45dd9a22da60128976f92ad70949b8bed0527a4b49c28e47073afa5034b54deeebe2157f9a4efa87be9e2f7e6ebc224997b0ca26d952d836a8fbc3670e7eed5e87789c31d9783f0a90d1532b7286a9a5a6dabeb8d719cbf021aef7740"}}, {0x34, &(0x7f0000000380)=@string={0x34, 0x3, "d3c2754ab94d8c6ce118951ea2cc4b6d46906f75867644af10e35ba9aad2376a14bb057f45b94567f193cd264106bf4a406f"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x2809}}, {0xf0, &(0x7f0000000440)=@string={0xf0, 0x3, "7d3db6e680fec589ca7e84c38c8d437b52050b22dfef11f9aa2c9450ca8293015bcbee325f91cfe54be376dd2cfd59e96432e2bf5f543708e665c19bc2a651b14752c75b5ef25c9fb58f5b0d1eef7214b80d68ccbcf11f99d6275c2a76a98e0dab09c1460225650e6ee03bc0a9c0b0ac0f0e162711c87f7cdc8867b4eaf7457c7093ef6e8832fe023061fb88b9aa8292af43b3b22b3c5fc3bc354befd6ca088cca1292ef2fa81256363be075dcb9b57ba367e0f55b9c8e080b3dc0a861b79e07ae7dc8ec90ab46e5e1328557328c2eea3e20b3dbd371d1ff3d0ddf5aeb10c0dc8fdd1d12f80cb11d10e828d2cbdd"}}, {0x11, &(0x7f0000000540)=@string={0x11, 0x3, "9857b37ac327744cdd77e336fa7340"}}]}) (async)
recvmsg(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000002f40)=""/229, 0xe5}, 0x40000004) (async)
close(0xffffffffffffffff) (async)
lseek(0xffffffffffffffff, 0x1, 0x4)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0022180000000501150091a60906a101200182008c0508951329309102c0"], 0x0}, 0x0)
syz_usb_connect(0x3, 0x0, 0x0, 0x0)
io_setup(0xfffffffd, &(0x7f0000000000))

1.041089868s ago: executing program 0 (id=131):
r0 = socket$inet6(0xa, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000}, 0x1c)
r2 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRES8=0x0], 0x3, 0x21f, &(0x7f0000000940)="$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")
r3 = open_tree(r2, &(0x7f0000000080)='./file1\x00', 0x1)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20002000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xf0, 0x3, 0x1, 0x3, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x40}]}, @CTA_NAT_DST={0x20, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}]}, @CTA_SEQ_ADJ_ORIG={0x4c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x21}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8c1c}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7fff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x12000000}]}, @CTA_LABELS_MASK={0x8, 0x17, [0x2]}, @CTA_FILTER={0x54, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xd00}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x10}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x7}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xa06}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x885}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x800}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x11}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x8}, @CTA_FILTER_REPLY_FLAGS={0x8}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x1}, 0x44884)
chdir(&(0x7f0000000140)='./file0\x00')
r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x2)
getdents64(r4, 0xfffffffffffffffe, 0x29)

984.149033ms ago: executing program 0 (id=132):
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x12)
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x6)
fchdir(r1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x68880, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = socket(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f00000002c0)={'gre0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x8, 0x8000, 0x4, 0x8, {{0x5, 0x4, 0x1, 0x8, 0x14, 0x66, 0x0, 0x9, 0x4, 0x0, @remote, @multicast2}}}})
mkdir(&(0x7f0000000000)='./tracefs\x00', 0x196)
mount(0x0, &(0x7f0000000440)='./tracefs\x00', &(0x7f0000000480)='tracefs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./tracefs/trace_options\x00', 0x2, 0x0)
write(r5, 0x0, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r3, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc})
r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x42, 0x0, 0x0)
ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f00000001c0)={"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"})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x3a0600b, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0/file1\x00', 0x2040020, 0x0, 0x1, 0x0, 0x0)
mkdirat(r1, &(0x7f0000000680)='./file0\x00', 0xb5)
rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000080)='./file0\x00')
mount$overlay(0x0, &(0x7f0000000580)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@verity_off, 0x5c}]})
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x189802, 0x0)
ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000140))
syz_mount_image$vfat(&(0x7f0000000780), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c646f733178666c6f7070792c7379735f696d6d757461626c652c6e6f6e756d7461696c3d302c757455c9035b01d2ca8be08c035fc2f066383d312c696f636861727365743d6d61636761656c69632c756e695f786c6174653d312c756e695f786c6174653d312c726f6469722c696f636861727365743d6370", @ANYRESHEX=0x0, @ANYBLOB=',iocharset=cp850,shortname=lower,quiet,uni_xlate=0,\x00'], 0x1, 0x38c, &(0x7f0000000380)="$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")
pwritev(r8, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02", 0x3}], 0x1, 0x0, 0x0)
ioctl$KVM_GET_EMULATED_CPUID(r7, 0xc008ae09, &(0x7f00000000c0)={0x1, 0x0, [{0x40000000, 0x4, 0x4, 0x9b, 0x4, 0x80, 0x6}]})

965.317408ms ago: executing program 0 (id=133):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x3, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRESDEC], 0x0, 0x5a}, 0x28)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000004000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="010000000300"/28], 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x10100003, r4, 0x4}, 0x38)
connect$unix(r1, &(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket$inet6_tcp(0xa, 0x1, 0x0)
faccessat(0xffffffffffffffff, 0x0, 0x81)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
r5 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r5, 0x0, 0x0, 0x240880c0, 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r6, 0x25, &(0x7f0000000000)={0x1})
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r7, 0x7, &(0x7f0000001140)={0x1, 0x2, 0x6, 0x200})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r8, 0x26, &(0x7f0000000380)={0x0, 0x1, 0x101, 0x1})
fcntl$lock(r8, 0x26, &(0x7f0000000140)={0x0, 0x0, 0x76, 0x6031})

927.287239ms ago: executing program 1 (id=134):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, 0x0, 0x0)
sendmmsg$inet(r0, &(0x7f0000003d80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000100000000000000860600004aa481670b44e3b2de002ebfadfb35aa0000000031ae3a6632e4aac35df89681bdeca16e1bf046ab8363726b916429ce4f0c86d1dffd6717e056244b1ce6f17ca05708e027d0d5cb7280eb337fd120803a859f6b2b88042ce6e1291242dc0f3fb3cf63d89a4a2c4011787a1e97f766c40ea48a48c4"], 0x18}}], 0x1, 0x8090)

896.802017ms ago: executing program 1 (id=135):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYBLOB, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRES32=r0, @ANYRESDEC=0x0])
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
llistxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x40040, 0x59)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$unix(0x1, 0x1, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x54a, &(0x7f0000000200)="$eJzs3U9vHGcZAPBn1l7HSZzaBQ5QqaWiRUkF2Y1r2locSpEQt0pI5R6MvbGsrL2RvW5jq4LNJ0BCCJA4wYULEh8ACUXiwhEhRYIzSEUgBClIcCgdNLOzdrqZtTdhvUvs30+azPvOv+d5N57ZmZ1XMwGcWc9HxBsR8WGapi9FxHwxvVIM0ekO2XLv3393NRuSSNO3/pZEUkzLFkvTNO1t82K+ytRBjG8mDwScLcZ7+zdXms3GdlGttzdv1Xf29q9ubK6sN9YbW0tLi68uv7b8yvK1kbTzUkS8/pU/ff87P/3q67/8/Dt/vP6XK9/K0por5vfa8Rimj5rZbXr13GzfCtuPGez/Udae6gdF5fxw69w5yYQAABgoO8f/WER8JiJeivmYOvp0FgAAAHgCpV+aiw+S7v27EjMDpgMAAABPkEreBzap1Iq+AHNRqdRq3T68n4gLlWZrp/25G63drbVuX9mFqFZubDQb14q+wgtRTbL6Yl4+rL/cV1+KiKcj4nvz5/N6bbXVXJv0jx8AAABwRlzsu/7/53z3+v9oyXiSAwAAAEZnYdIJAAAAACfO9T8AAACcatVJJwAAAACcuK+9+WY2pL33X6+9vbd7s/X21bXGzs3a5u5qbbW1fau23mqt58/s2zxue81W69YXYmv3dr3d2GnXL+3tX99s7W61r2/E7FgaBAAAADzk6U/f/X0SEZ0vns+HzMykkwLGYvqg1HumZ8ne/4enuuP3xpQUMBZTQyzz3rny6c4T4Mk23T9hwL4OnD76/wPHvdFjYOed33RHlRHnAwAAjN7lT5Xf/z/+fL7jlB+ecHZiOLv67v+n85NKBBi7/P7/sB15nCzAqVIdqgcgcJr9r/f/j5emj5QQAAAwcnP5kFRqxc97c1Gp1GoRl/LXAlaTGxvNxrWIeCoifjdfPZfVF/M1k2OvGQAAAAAAAAAAAAAAAAAAAAAAAACArjRNIgUAAABOtYjKn5NfdZ/lf3n+xbn+3wdmkn/nrwSeiYh3fvTWD26vtNvbi9n0vx9Mb/+wmP7yJH7BAAAAAPr1rtPz8b8mnQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp837999d7Q1DLH5+VHH/+uWIWCiLPx2z+Xg2qhFx4R9JTD+wXhIRUyOI37kTEZ8si59kaR2ELIs/ig+hcyfppLnS+LFQfApl8S+OID6cZXez488bZft/JZ7Px+X733TER+qPa/DxLw6Of1MD9v9LQ8Z45t7P6wPj34l4Zrr8+NeLnwyI/8JQ0avxja/v7w+am/444nLv+yc/4j0Y4bBUb2/equ/s7V/d2FxZb6w3tpaWFl9dfm35leVr9RsbzUbxb2mM7z77iw+Pav+F0u+/pMhmcPtfLNneVEn+/7l3+/7He5XOw/GvvFAS/9c/KZZ4OH6liPPZopzNv9wrd7rlBz33s98+d1T71w7bX32U//8rgzba76Ed5dnh/nQAgBOxs7d/c6XZbGyfdCG7WB5XrI8UssBjDzqawsxkPrGzU/h2Vrg3qg2maZpm+1TJrLsRMcx2khhxSyvl+RwWBh4BJn1kAgAARu3wpH/SmQAAAAAAAAAAAAAAAAAAAMDZNY6nrPXHPHwEcjKKR2gDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIzEfwMAAP//O7TZvA==")
socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CAP_HYPERV_SYNIC2(0xffffffffffffffff, 0x4068aea3, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000600)={0x1, 0x0, [{0x400000b0, 0x0, 0xfffffffffffffffd}]})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = getpid()
r4 = syz_pidfd_open(r3, 0x0)
setns(r4, 0x24020000)
umount2(&(0x7f0000000040)='.\x00', 0x2)
close_range(r1, 0xffffffffffffffff, 0x0)

895.525887ms ago: executing program 1 (id=136):
clock_adjtime(0x3, &(0x7f00000003c0)={0x2, 0x7ff, 0x7, 0x3, 0xe, 0x3, 0x3, 0x6, 0x6, 0xadef, 0x0, 0x5, 0x42eb, 0xd4, 0x2, 0x2, 0x0, 0x2, 0x6, 0x400, 0x1ff, 0x3, 0x7f8, 0x7fff, 0x4, 0x7}) (async, rerun: 32)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000000)={[{@jqfmt_vfsv0}]}, 0x1, 0x4cf, &(0x7f0000000a00)="$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") (rerun: 32)
r0 = socket$inet6(0xa, 0x3, 0xfa)
setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000380)=0x3, 0x4)
setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000180)=ANY=[@ANYBLOB="00008000000000005eaf853cdd8ce116f971a56b9a23f7c8bcf66c7f3fe496ab3a4c6cd3ac2336173f82ebb0a1ed9f4028b3bf7b5c2039f703c9b9e4ddedc5d02c548246"], 0x8)
sendto$inet6(r0, 0x0, 0xfffffffffffffd2f, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) (rerun: 64)
sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r2, 0x801, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20000080)
read$FUSE(0xffffffffffffffff, &(0x7f0000001640)={0x2020, 0x0, 0x0, <r3=>0x0}, 0x2020)
r4 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x8202, &(0x7f0000003680)={[], [{@uid_lt={'uid<', r3}}, {@smackfsroot={'smackfsroot', 0x3d, 'minixdf'}}]}, 0x0, 0x5fe, &(0x7f0000001040)="$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")
socket$packet(0x11, 0x3, 0x300) (async)
statx(r4, &(0x7f0000000000)='./file0\x00', 0x2000, 0x200, 0x0)

688.253214ms ago: executing program 1 (id=137):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000240)={[{@grpjquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$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") (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async, rerun: 64)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async, rerun: 64)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) (rerun: 64)
sched_setaffinity(r0, 0x8, &(0x7f00000003c0)=0x2) (async)
r3 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0)
write$make_it_fail(r3, &(0x7f0000000040)='N\x00', 0x2) (async)
r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x18)
ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000180)={0x8000, 0xa1, 0x1, 0x10001, 0x1}) (async)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r5 = socket(0x10, 0x2, 0x0)
write(r5, &(0x7f0000000480)="1c0000001a009b8a140000003b00"/28, 0x1c) (async)
recvmmsg(r5, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})

605.976426ms ago: executing program 2 (id=139):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000140)=0x881)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]})
r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x11, &(0x7f0000000000)=0x8, 0x4)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000001c0)={0x6}, 0x8)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x803, 0x9, 0x0, 0x400, 0x80, 0x89, 0xfffffffffffffffd, 0x8, 0x8d], 0x100000, 0x240046})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r2, 0x8010aebc, &(0x7f0000000040)={0x6000, 0x4000})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

564.660137ms ago: executing program 3 (id=140):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8}, 0x94)
syz_emit_ethernet(0x0, 0x0, 0x0)
io_setup(0x7, &(0x7f0000000280)=<r0=>0x0)
r1 = openat$sysfs(0xffffff9c, 0x0, 0x82042, 0x12b)
io_submit(r0, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x3000000, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0xfffffc98}])

564.316687ms ago: executing program 2 (id=141):
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x801, &(0x7f0000000240)=ANY=[], 0xff, 0x252, &(0x7f0000000540)="$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")
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000000)=0x6009, 0x4)
sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000240)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10)
recvfrom(r0, 0x0, 0x0, 0x2021, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00')
read$FUSE(r1, &(0x7f0000000080)={0x2020}, 0x2020)
mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f00000020c0)='devpts\x00', 0x220089c, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000002100)={@remote, @private=0xa010101, 0x1, "770095b3d9d1f7985b2ede1a6fb6b730bd029e1eb21102ddf2f7d6c5533518c3", 0x7750, 0x5, 0x6, 0x3}, 0x3c)
pread64(r2, &(0x7f0000002180)=""/9, 0xfdc5, 0x4ac)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000073014a00000000009500000000fffb00c99b5b27f7732eccf887798b3477"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48)

552.66345ms ago: executing program 2 (id=142):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
syz_mount_image$erofs(&(0x7f00000003c0), &(0x7f0000000880)='./file0\x00', 0x18000c6, &(0x7f0000000000)=ANY=[@ANYRES16=<r0=>0x0, @ANYRES32, @ANYRES16=0x0, @ANYRES8], 0x0, 0x17d, &(0x7f0000001ac0)="$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")
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x288003, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x5, 0x80100)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'pim6reg0\x00', 0x2})
ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0x3)
ioctl$TUNSETLINK(r1, 0x400454cd, 0x324)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYRESOCT=r0, @ANYRES32=r1, @ANYBLOB="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"], 0x58}, 0x1, 0x0, 0x0, 0x4004000}, 0x4008894)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000440)='ext2\x00', 0x6a888, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x20c01, 0x57)
writev(r3, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x1)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
ioctl$FAT_IOCTL_SET_ATTRIBUTES(r1, 0x40047211, &(0x7f0000000040)=0x20)
chdir(&(0x7f0000000140)='./bus\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x12, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711837000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x187)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x208004, 0x21fffc, 0xc, 0x2, 0x3, 0xd1b9})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
write$FUSE_INIT(r4, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x40488102, 0x0, 0x0, 0x7, 0xa15, 0x0, 0x0, 0x1, 0x6}}, 0x50)
ioctl$RNDADDTOENTCNT(r3, 0x40045201, &(0x7f00000004c0)=0x8)
syz_clone3(&(0x7f0000000900)={0x20814000, &(0x7f0000000040)=<r5=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_setup(0x8, &(0x7f0000000600)=<r6=>0x0)
io_submit(r6, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r5, 0x0}])
syz_mount_image$fuse(&(0x7f0000000000), &(0x7f00000000c0)='./file0/file1\x00', 0x2100014, &(0x7f0000000440)=ANY=[], 0x1, 0x0, 0x0)
syz_fuse_handle_req(r4, &(0x7f0000008240)="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", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x90, 0x0, 0x1, {0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x5, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0xc28d, 0x8000000000000004, 0x0, 0xfffffffd, 0x0, 0xc000, 0xfffffffd, 0x0, 0x0, 0x9aa}}}, 0x0, 0x0, 0x0, 0x0, 0x0})

489.850797ms ago: executing program 2 (id=143):
syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x25, 0x55a8, &(0x7f00000014c0)="$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")
setxattr$system_posix_acl(&(0x7f0000000240)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000340), 0x24, 0x3)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x5)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f020004000000000000000058000b4824ca945f64009400ff0325010ebc000b00000000008000f0fffeffe809005300fff5dd000000100001d80cf42098da03870000000000", 0x58}], 0x1)
syz_genetlink_get_family_id$mptcp(&(0x7f0000009380), r1)
syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181)
mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

436.729932ms ago: executing program 3 (id=144):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000000)=0x3, 0x4)

436.551932ms ago: executing program 3 (id=145):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10)
sendmmsg$inet(r0, 0x0, 0x0, 0x8090)

419.644036ms ago: executing program 3 (id=146):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'veth1_virt_wifi\x00', 0x100})
r1 = socket$netlink(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = socket(0x1, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89b0, &(0x7f0000000840)={'ip6tnl0\x00', &(0x7f00000007c0)={'ip6_vti0\x00', 0x0, 0x4, 0x8, 0x9, 0x401, 0x40, @mcast2, @local, 0x80, 0x8, 0x8}})
ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000000040)={'sit0\x00', {0x2, 0x0, @remote}})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="050000000000000071194700000000008510000002000000850000000500000095000000000000009500a504000000006c0ec1084c0d7eb3105f3248024beab8ff4642b3"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x6}, 0x94)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r4, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10)
r5 = userfaultfd(0x801)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000480)=ANY=[@ANYRES64=r4], &(0x7f00000002c0)='GPL\x00', 0x5, 0xc4, &(0x7f00000005c0)=""/196, 0x21600, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000001c0))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000009, 0x8031, 0xffffffffffffffff, 0x0)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r1)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
listen(r1, 0xa)
connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1e000000eb05000009000000000400002c120600", @ANYRES32, @ANYBLOB="09500860b607518b278cfcd8d9d9c300000000000000006313acbd630c74b4f2c800000000ed3da53fe4798102292c7f373e315777a438cf90ef61dcc6772077cc89f471ddd3feab5b47893bdca44b388d54e4bbc0f91e07adaec2fdd85e02f37c24c68f318e83c387099a10c49bb934986d53f7c4170de77254eec3e2af7e3b7d8b645727eb99ecd4c1dc6db7d498c0e8aa5ac818035339ccb0096b175faf15cb3fa148786871f9ff7ae440850a19b2d46030c31f687d8718255a95082176d67e477094844f202624df17e3cd4f8e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000001000000050000000b00"/28], 0x50)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="8f02000000000000850000003e0000001830bcbd5f0232df7e5b73ae6fca19120000", @ANYRES32=r9, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r9, @ANYRES32=r10, @ANYBLOB='\a\x00\x00@\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r9, &(0x7f0000000640), &(0x7f0000000680)=@tcp=r7}, 0x20)
sendto(r7, &(0x7f0000000700)="01", 0x1, 0x0, 0x0, 0x0)
r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r11, 0xffffffffffffffff, 0x0)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00042bbd7000fedbdf254c0000000c00a60008a90066697273746e616d090000000000000066697273746e616d6500000018c9db42392b80c66506e5e7a1d57a95e762530aeb3dc3e62610a3e74f9e181942488ea50a61dbb4ffb6edc0145ff67d5bc59b5f9782cb12de2257a83e108a9a8831fd9df99e613271d6de5df2e3ba8c64c6d2380fa007ce8063b13ecae0963ed9a7378fd9c5b073e8b1f9dd700489f64eb94fb52b68d9987f228177d1815436a8b42a7422e65541fbf9c5a21735033be5c9f1fb23dd295ea9"], 0x40}, 0x1, 0x0, 0x0, 0x2040041}, 0x8880)

104.140182ms ago: executing program 3 (id=147):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg$unix(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2022, &(0x7f0000002340)) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) (async)
close_range(r0, 0xffffffffffffffff, 0x0)
r2 = syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000500)='./file0\x00', 0x4, &(0x7f00000000c0), 0x1, 0x266, &(0x7f00000007c0)="$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")
ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f0000000100)="0a52b7b90845dbae2c9ed565e5041c7edcaae93ed3dc3f8208db760164fb954efb77390a5c7a87a0bc385ab9e2fc8a6a8a5ac8ae6fb88d263de40bd7af1663668ba4bc3d4c5a9010aac4f19f3496fa242d159bcf95085448872d1e819efc2bfd8f3d8a59c9edacb76c87cfd9441efa9b633147a0ca86d75608793a311bc9efc1095ff8e432828346c33b0386a108a8ffc65220048ee0a30321c61c0b4c2949e68eb69dab2530f81c7e7e8ea06e5214e337760a1b81ba0bdac23f432bba6b93579a06dcbd34f4d2b3422e1f0a63a75472a0fa2c76e4f54a17ff20c5da38dfc4894ab2bde45580af8ea6ff43148118b684c786e06aff34ff53731bcb6f0fed173f")

85.348657ms ago: executing program 0 (id=148):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000080)=@arm64={0x0, 0xd, 0x7, '\x00', 0x6})
ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000a52000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x58, 0x0, 0x0)
r3 = getpid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={<r4=>0x0}, &(0x7f0000000100)=0xc)
kcmp(r3, r4, 0x4, r0, r2)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000000)="31212027fb", 0x0, 0x1}, 0x20)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

370.45µs ago: executing program 2 (id=149):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000140)=0x881)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]})
r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x11, &(0x7f0000000000)=0x8, 0x4)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000001c0)={0x6}, 0x8)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x803, 0x9, 0x0, 0x400, 0x80, 0x89, 0xfffffffffffffffd, 0x8, 0x8d], 0x100000, 0x240046})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r2, 0x8010aebc, &(0x7f0000000040)={0x6000, 0x4000})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

121.11µs ago: executing program 3 (id=150):
getdents(0xffffffffffffffff, 0xfffffffffffffffd, 0xbb)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@RTM_NEWMDB={0x38, 0x55, 0x1, 0x70bd2c, 0x25dfdbfe, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x1, 0x2, 0xffe, {@in6_addr=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x800}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000081}, 0x40080c0)
setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x1ff)
connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmmsg$inet(r4, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000003c0)="0f2f", 0xffa6}], 0x1}}, {{0x0, 0x0, &(0x7f0000005c40)=[{&(0x7f00000000c0)='_', 0xfe3c}], 0x1}}, {{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000000100)="19", 0x1}], 0x1}}, {{0x0, 0xfffffffffffffe7c, &(0x7f00000025c0), 0x1}}], 0x4, 0x608d850)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'syz_tun\x00', <r6=>0x0})
syz_usb_connect(0x3, 0x24, &(0x7f0000000340)={{0x12, 0x1, 0x310, 0xdc, 0xe6, 0x1b, 0x20, 0x17ef, 0x720c, 0xd2e5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x80, 0x0, 0x0, "", [{{0x9, 0x4, 0x72, 0x4, 0x0, 0x19, 0x19, 0xc6, 0x1}}]}}]}}, &(0x7f0000000640)={0x0, 0x0, 0x5, &(0x7f00000004c0)={0x5, 0xf, 0x5}})
sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f40)=@getchain={0x74, 0x11, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r6, {0x9, 0xffe0}, {0x0, 0x8}, {0xfff3}}, [{0x8, 0xb, 0x9}, {0x8, 0xb, 0xfffffff8}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x40}, {0x8, 0xb, 0x42fb}, {0x8, 0xb, 0x8001}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x5ce7}, {0x8, 0xb, 0x1}]}, 0x74}}, 0x800)
syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='.\x02\x00', 0x2209820, &(0x7f0000000380)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64=0x0, @ANYRES32, @ANYRES64=0x0, @ANYRES8=r6, @ANYRES64=r1, @ANYRESOCT=0x0, @ANYRES64, @ANYBLOB="4e73ffed029678b24acf42b62a7ebf0ffb61162fed3c98e17878fdc7861ded935ac1221c8b78e02fbb58655ddc297ab592ac65ca1826643d989c42b9bddbd085b521f64b0472f6f38f92d1ae5fad3da5a711d9a36cceaa0a569f173a7f0c5efb58ee54030117cb7332eead32d076b550fcb60f79239c93af994228d7a115118cc0f31fed4a2660ca1e5a603e7901e4a8cf50c1a4572f243e082c4c17474de93de0f9c0423f83c4419c9822cb863ff586d84a5bd70d3e88ebee3838d094410049397ceceb46c2d3b7ea4a4923", @ANYRESOCT], 0x1, 0x2ef, &(0x7f0000000c40)="$eJzs3c1qE1EUAOCTn6ZpEdu1uAi40U1R126CVBADhUoW6sZALUgrQrqJgpBXEEF8AFc+kgsfoquCi0gyY5Pmp5Uynant98G0Z+ZM79yZaefO4p7m9e13ezvvD3YHP79Fvd6IatQjjiLWoxyVSJSGX+p/41pM6ldOrMZyAACX3fZ2p7ko18+3K2SiOrOl2212lua+m7V/5NQpAAAAAAAAAAAAMjY7/z/6c+f/R0T55Pz/UdCfqgcAAC6/0+b/czV0u83OavL+NlWtaf4/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUJxqDNYGg8G9G8nqMB4vtVgrun8AQPaOJsf74+X3IGX8B4AraP74P16K7h8AkL2J8T/ijPG/Ulw3AYAMPX/x8lmz1drcbjTqEYf9XrvXTr4n+SdPW5v3GyPrEVFOth72eu3Kcf5Bkm+MWx3ml2I1zT+cm6/F3TtJfph7vNWayi/HTj6XAAAAAAAAAAAAAAAAAAAAAAq3MSrjL0Uk9f2pcX3/xsbW119vj+v/J/JJlP5/gHJM1fd/+l6NW9Vkrbzw6MsZnw0AAAAAAAAAAAAAAAAAAAD8nw4+fNzr7O+/6eYTlCIi25YrETEKqumWSuaHmAguruVhUI9RUIqZVC0izt3y8KLPTw0z5+3z5ySIOM+PP3oVcebOpb2VmEmt5P9Le7HBSvqXmMOxvuz+w+2+WY/RPV30xKjl93ACAAAAAAAAAAAAAAAAAIBrZlz9W3RPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA448//Xxwspfuets9pQcGnCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFwTfwIAAP///HZwig==")
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[], 0x3, 0x1521, &(0x7f0000004d40)="$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")
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x02\x00', 0x2802c2, 0x40)
getsockname$netlink(r7, &(0x7f0000000b40), &(0x7f0000000b80)=0xc)

0s ago: executing program 2 (id=151):
r0 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000040b827ed0100000000000109022400010000000009040000010300000009210000200122050009058103"], 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0)
ioctl(r3, 0x400c4d04, &(0x7f0000000a00))
syz_kvm_setup_cpu$x86(r3, r1, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="3e67af66b98504000066b8fb15df6266ba000000000f300f71f300640f01c8643e0fc72f670f01cf0f01c9ba400066b80e00000066ef660f38812f0f01c8", 0x3e}], 0x1, 0x41, &(0x7f0000000140)=[@cr4={0x1, 0x20}], 0x1)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x40}}, 0x2, 0x9800, 0x0, 0x4}}, 0x2e)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xa, {[@global=@item_4={0x3, 0x1, 0x2, '\t\x00'}, @global=@item_4={0x3, 0x1, 0xb, "77728b24"}]}}, 0x0}, 0x0)

kernel console output (not intermixed with test programs):



syzkaller
syzkaller login: [   15.582879][   T24] kauditd_printk_skb: 7 callbacks suppressed
[   15.582892][   T24] audit: type=1400 audit(1790296684.520:59): avc:  denied  { transition } for  pid=217 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   15.593767][   T24] audit: type=1400 audit(1790296684.520:60): avc:  denied  { noatsecure } for  pid=217 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   15.601617][   T24] audit: type=1400 audit(1790296684.530:61): avc:  denied  { write } for  pid=217 comm="sh" path="pipe:[14504]" dev="pipefs" ino=14504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[   15.621901][   T24] audit: type=1400 audit(1790296684.530:62): avc:  denied  { rlimitinh } for  pid=217 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   15.640883][   T24] audit: type=1400 audit(1790296684.530:63): avc:  denied  { siginh } for  pid=217 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
Warning: Permanently added '10.128.1.149' (ED25519) to the list of known hosts.
[   22.970842][   T24] audit: type=1400 audit(1790296691.910:64): avc:  denied  { mounton } for  pid=271 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   22.974121][  T271] cgroup: Unknown subsys name 'net'
[   22.993609][   T24] audit: type=1400 audit(1790296691.910:65): avc:  denied  { mount } for  pid=271 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   23.020873][   T24] audit: type=1400 audit(1790296691.940:66): avc:  denied  { unmount } for  pid=271 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   23.021280][  T271] cgroup: Unknown subsys name 'devices'
[   23.167896][  T271] cgroup: Unknown subsys name 'hugetlb'
[   23.173507][  T271] cgroup: Unknown subsys name 'rlimit'
[   23.313665][   T24] audit: type=1400 audit(1790296692.250:67): avc:  denied  { setattr } for  pid=271 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   23.336877][   T24] audit: type=1400 audit(1790296692.250:68): avc:  denied  { mounton } for  pid=271 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   23.350714][  T273] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   23.362240][   T24] audit: type=1400 audit(1790296692.250:69): avc:  denied  { mount } for  pid=271 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   23.393455][  T271] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   23.393724][   T24] audit: type=1400 audit(1790296692.310:70): avc:  denied  { relabelto } for  pid=273 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   23.427631][   T24] audit: type=1400 audit(1790296692.310:71): avc:  denied  { write } for  pid=273 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   23.453256][   T24] audit: type=1400 audit(1790296692.310:72): avc:  denied  { read } for  pid=271 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   23.478758][   T24] audit: type=1400 audit(1790296692.310:73): avc:  denied  { open } for  pid=271 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   23.965362][  T279] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.972727][  T279] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.980163][  T279] device bridge_slave_0 entered promiscuous mode
[   23.988247][  T279] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.995296][  T279] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.002725][  T279] device bridge_slave_1 entered promiscuous mode
[   24.116843][  T280] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.123906][  T280] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.131490][  T280] device bridge_slave_0 entered promiscuous mode
[   24.138690][  T280] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.145736][  T280] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.153238][  T280] device bridge_slave_1 entered promiscuous mode
[   24.187961][  T279] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.195002][  T279] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.202289][  T279] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.209340][  T279] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.217268][  T281] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.224312][  T281] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.231800][  T281] device bridge_slave_0 entered promiscuous mode
[   24.248092][  T281] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.255162][  T281] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.262588][  T281] device bridge_slave_1 entered promiscuous mode
[   24.280355][  T285] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.287431][  T285] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.294747][  T285] device bridge_slave_0 entered promiscuous mode
[   24.301789][  T285] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.308876][  T285] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.316397][  T285] device bridge_slave_1 entered promiscuous mode
[   24.348812][  T286] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.355875][  T286] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.363368][  T286] device bridge_slave_0 entered promiscuous mode
[   24.370427][  T286] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.377485][  T286] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.384859][  T286] device bridge_slave_1 entered promiscuous mode
[   24.488535][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.495787][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.504475][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   24.512325][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   24.541831][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   24.550174][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.557232][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.564736][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   24.573118][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.580210][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.591310][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   24.619001][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   24.664749][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   24.673150][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   24.687521][  T279] device veth0_vlan entered promiscuous mode
[   24.705461][  T279] device veth1_macvtap entered promiscuous mode
[   24.717075][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   24.725198][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   24.732688][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   24.740829][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   24.749903][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   24.757806][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   24.765716][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   24.773918][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.780959][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.788789][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   24.796961][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.803978][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.811332][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   24.819558][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.826611][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.834099][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   24.842398][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.849474][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.856833][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   24.864784][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   24.872551][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   24.890461][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   24.898386][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   24.907622][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.914651][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.922852][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   24.930312][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   24.938580][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.945607][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.952986][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   24.961242][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.968310][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.975787][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   24.983464][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   25.006360][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   25.014757][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   25.023665][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.030769][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   25.038651][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   25.046728][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   25.054625][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   25.062993][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   25.071000][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   25.079019][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   25.087011][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   25.095243][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   25.114680][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   25.122992][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   25.131421][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   25.140526][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   25.148938][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   25.156981][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   25.164859][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   25.173127][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   25.181190][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   25.189347][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   25.200646][  T281] device veth0_vlan entered promiscuous mode
[   25.209905][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   25.217833][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   25.225895][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   25.233462][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   25.257638][  T279] request_module fs-gadgetfs succeeded, but still no fs?
[   25.259221][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   25.273386][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   25.282338][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   25.291668][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   25.300449][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   25.308828][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   25.319523][  T286] device veth0_vlan entered promiscuous mode
[   25.329249][  T281] device veth1_macvtap entered promiscuous mode
[   25.336971][  T279] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation
[   25.347325][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   25.355912][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   25.364673][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   25.373441][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   25.384796][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   25.392563][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   25.400883][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   25.409099][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   25.417097][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   25.425040][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   25.432517][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   25.440014][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   25.447643][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   25.455003][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   25.462626][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   25.470791][  T280] device veth0_vlan entered promiscuous mode
[   25.482103][  T285] device veth0_vlan entered promiscuous mode
[   25.490051][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   25.498699][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   25.509683][  T303] cgroup: syz.3.4 (303) created nested cgroup for controller "memory" which has incomplete hierarchy support. Nested cgroups may change behavior in the future.
[   25.527440][  T303] cgroup: "memory" requires setting use_hierarchy to 1 on the root
[   25.535663][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   25.545062][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   25.562272][  T285] device veth1_macvtap entered promiscuous mode
[   25.571007][  T286] device veth1_macvtap entered promiscuous mode
[   25.578519][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   25.586767][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   25.594931][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   25.602752][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   25.611035][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   25.619237][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   25.627352][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   25.635468][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   25.644741][  T280] device veth1_macvtap entered promiscuous mode
[   25.662737][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   25.672013][  T307] fuse: Bad value for 'fd'
[   25.677482][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   25.689656][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   25.698611][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   25.706983][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   25.725369][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   25.733994][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   25.743106][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   25.745430][  T307] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[   25.753410][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   25.769742][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   25.778308][  T307] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1047: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   25.793227][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   25.793792][  T307] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.3: bg 0: block 248: padding at end of block bitmap is not set
[   25.802426][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   25.818287][  T307] EXT4-fs error (device loop2): ext4_acquire_dquot:6230: comm syz.2.3: Failed to acquire dquot type 1
[   25.825574][  T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   25.836221][  T300] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   25.847334][  T307] EXT4-fs (loop2): 1 truncate cleaned up
[   25.891822][  T307] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue
[   25.934734][  T307] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   26.116525][  T300] usb 4-1: Using ep0 maxpacket: 32
[   26.346358][  T300] usb 4-1: config 4 has an invalid interface number: 114 but max is 0
[   26.369853][  T300] usb 4-1: config 4 has no interface number 0
[   26.437874][  T300] usb 4-1: config 4 interface 114 has no altsetting 0
[   26.488033][  T313] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(2) root(4)
[   26.495723][  T313] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   26.504584][  T313] F2FS-fs (loop4): quotafile must be on filesystem root
[   26.556308][  T310] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[   26.597197][  T300] usb 4-1: New USB device found, idVendor=17ef, idProduct=720c, bcdDevice=d2.e5
[   26.606581][  T300] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   26.614629][  T300] usb 4-1: Product: syz
[   26.619093][  T300] usb 4-1: Manufacturer: syz
[   26.623716][  T300] usb 4-1: SerialNumber: syz
[   26.797858][  T328] netlink: 80 bytes leftover after parsing attributes in process `syz.1.7'.
[   26.867160][  T303] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4'.
[   26.926175][  T310] usb 1-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30
[   26.955343][  T310] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   26.967051][  T310] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[   26.977191][  T310] usb 1-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[   27.044977][  T310] usb 1-1: config 0 interface 0 has no altsetting 0
[   27.051790][  T310] usb 1-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00
[   27.060935][  T310] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   27.082821][  T310] usb 1-1: config 0 descriptor??
[   27.274826][  T335] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   27.307196][  T303] exFAT-fs (loop3): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d)
[   27.407323][  T300] usb 4-1: USB disconnect, device number 2
[   27.546522][  T317] udc-core: couldn't find an available UDC or it's busy
[   27.553539][  T317] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   27.568927][  T310] ryos 0003:1E7D:3138.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:3138] on usb-dummy_hcd.0-1/input0
[   27.626389][  T346] process 'syz.4.11' launched './file0' with NULL argv: empty string added
[   27.826808][  T346] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[   27.835048][  T346] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   27.844540][  T346] F2FS-fs (loop4): invalid crc value
[   27.863423][  T346] F2FS-fs (loop4): Found nat_bits in checkpoint
[   27.897859][  T346] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[   27.905046][  T346] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   27.930849][  T317] EXT4-fs (loop0): dax option not supported
[   27.947848][  T310] usb 1-1: USB disconnect, device number 2
[   27.987155][   T24] kauditd_printk_skb: 215 callbacks suppressed
[   27.987166][   T24] audit: type=1400 audit(1790296696.930:287): avc:  denied  { create } for  pid=360 comm="syz.3.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   28.013213][   T24] audit: type=1400 audit(1790296696.930:288): avc:  denied  { bind } for  pid=360 comm="syz.3.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   28.032714][   T24] audit: type=1400 audit(1790296696.950:289): avc:  denied  { write } for  pid=345 comm="syz.4.11" name="/" dev="loop4" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   28.054392][   T24] audit: type=1400 audit(1790296696.950:290): avc:  denied  { add_name } for  pid=345 comm="syz.4.11" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   28.096556][   T24] audit: type=1400 audit(1790296696.950:291): avc:  denied  { create } for  pid=345 comm="syz.4.11" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   28.139144][   T24] audit: type=1326 audit(1790296696.970:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=360 comm="syz.3.13" exe="/root/ci2-android-5-10/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6ae894f159 code=0x0
[   28.141162][  T363] FAULT_INJECTION: forcing a failure.
[   28.141162][  T363] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   28.163772][   T24] audit: type=1400 audit(1790296696.990:293): avc:  denied  { create } for  pid=345 comm="syz.4.11" name="memory.events.local" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   28.197774][   T24] audit: type=1400 audit(1790296696.990:294): avc:  denied  { read append open } for  pid=345 comm="syz.4.11" path="/1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/memory.events.local" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   28.239152][  T363] CPU: 0 PID: 363 Comm: syz.3.13 Not tainted syzkaller #0
[   28.244048][   T24] audit: type=1400 audit(1790296697.080:295): avc:  denied  { map } for  pid=345 comm="syz.4.11" path="/1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/memory.events.local" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   28.250478][  T363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   28.250482][  T363] Call Trace:
[   28.250507][  T363]  __dump_stack+0x21/0x24
[   28.250518][  T363]  dump_stack_lvl+0x1a7/0x208
[   28.250527][  T363]  ? show_regs_print_info+0x18/0x18
[   28.250565][  T363]  dump_stack+0x15/0x1c
[   28.295785][   T24] audit: type=1400 audit(1790296697.080:296): avc:  denied  { write } for  pid=345 comm="syz.4.11" path="/1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/memory.events.local" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   28.305136][  T363]  should_fail+0x3ab/0x500
[   28.305148][  T363]  should_fail_usercopy+0x1a/0x20
[   28.305160][  T363]  _copy_from_user+0x20/0xd0
[   28.305196][  T363]  iovec_from_user+0x1bc/0x2f0
[   28.345010][  T344] Leaked POSIX lock on dev=0x0:0x21 ino=0x2b  fl_owner=ffff8881290f4000 fl_flags=0x81 fl_type=0x1 fl_pid=340
[   28.371646][  T363]  __import_iovec+0x70/0x390
[   28.371659][  T363]  ? __ia32_sys_shutdown+0x1e0/0x1e0
[   28.371703][  T363]  import_iovec+0x7c/0xb0
[   28.380170][  T345] attempt to access beyond end of device
[   28.380170][  T345] loop4: rw=2049, want=79208, limit=40427
[   28.381174][  T363]  ___sys_sendmsg+0x1fd/0x2e0
[   28.401590][  T346] attempt to access beyond end of device
[   28.401590][  T346] loop4: rw=2049, want=81064, limit=40427
[   28.402093][  T363]  ? __sys_sendmsg+0x280/0x280
[   28.448098][  T363]  ? rw_verify_area+0x1c0/0x360
[   28.452980][  T363]  ? __fdget+0x1a1/0x230
[   28.457283][  T363]  __x64_sys_sendmsg+0x201/0x2d0
[   28.462235][  T363]  ? fput+0x1a/0x20
[   28.466064][  T363]  ? ___sys_sendmsg+0x2e0/0x2e0
[   28.470930][  T363]  ? debug_smp_processor_id+0x17/0x20
[   28.476299][  T363]  ? fpregs_assert_state_consistent+0xb1/0xe0
[   28.482364][  T363]  ? exit_to_user_mode_prepare+0x2f/0xa0
[   28.487988][  T363]  do_syscall_64+0x31/0x40
[   28.492403][  T363]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   28.498318][  T363] RIP: 0033:0x7f6ae894f159
[   28.502734][  T363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   28.522337][  T363] RSP: 002b:00007f6ae7387028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   28.530746][  T363] RAX: ffffffffffffffda RBX: 00007f6ae8bd7090 RCX: 00007f6ae894f159
[   28.538920][  T363] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004
[   28.546883][  T363] RBP: 00007f6ae7387090 R08: 0000000000000000 R09: 0000000000000000
[   28.555024][  T363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   28.563001][  T363] R13: 00007f6ae8bd7128 R14: 00007f6ae8bd7090 R15: 00007ffc519693f8
[   28.585113][  T281] Leaked locks on dev=0x0:0x21 ino=0x2b:
[   28.590879][  T281] POSIX: fl_owner=ffff8881290f4000 fl_flags=0x81 fl_type=0x1 fl_pid=340
[   28.826872][  T368] ======================================================
[   28.826872][  T368] WARNING: the mand mount option is being deprecated and
[   28.826872][  T368]          will be removed in v5.15!
[   28.826872][  T368] ======================================================
[   28.878590][  T368] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.15: Invalid block bitmap block 0 in block_group 0
[   28.892191][  T368] EXT4-fs error (device loop0): ext4_acquire_dquot:6230: comm syz.0.15: Failed to acquire dquot type 0
[   28.903702][  T368] EXT4-fs error (device loop0): ext4_free_blocks:5690: comm syz.0.15: Freeing blocks not in datazone - block = 0, count = 4096
[   28.918442][  T368] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.15: Invalid inode bitmap blk 0 in block_group 0
[   28.931423][  T368] EXT4-fs error (device loop0) in ext4_free_inode:360: Corrupt filesystem
[   28.940386][  T305] EXT4-fs error (device loop0): ext4_release_dquot:6266: comm kworker/u4:3: Failed to release dquot type 0
[   28.952294][  T368] EXT4-fs (loop0): 1 orphan inode deleted
[   28.958421][  T368] EXT4-fs (loop0): mounted filesystem without journal. Opts: ��; max_dir_size_kb=0x0000000000000009,,errors=continue
[   28.961045][  T375] SELinux:  Context system_u:object_r: is not valid (left unmapped).
[   29.030023][  T378] device syz_tun entered promiscuous mode
[   29.036422][  T378] device syz_tun left promiscuous mode
[   29.052414][  T375] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option
[   29.068705][  T375] EXT4-fs (loop3): mounted filesystem without journal. Opts: nomblk_io_submit,grpquota,noinit_itable,,errors=continue
[   29.083407][  T375] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   29.126826][  T382] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   29.139794][  T382] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   29.356169][  T311] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   29.453319][  T386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20'.
[   29.476853][  T389] capability: warning: `syz.2.21' uses deprecated v2 capabilities in a way that may be insecure
[   29.497456][  T391] fuse: Bad value for 'fd'
[   29.776228][  T311] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   29.787211][  T311] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   29.797394][  T311] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   29.810372][  T311] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   29.819508][  T311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   29.828254][  T311] usb 4-1: config 0 descriptor??
[   29.953867][  T408] FAULT_INJECTION: forcing a failure.
[   29.953867][  T408] name failslab, interval 1, probability 0, space 0, times 1
[   29.966690][  T408] CPU: 0 PID: 408 Comm: syz.0.26 Not tainted syzkaller #0
[   29.974003][  T408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   29.984083][  T408] Call Trace:
[   29.987376][  T408]  __dump_stack+0x21/0x24
[   29.991705][  T408]  dump_stack_lvl+0x1a7/0x208
[   29.996377][  T408]  ? show_regs_print_info+0x18/0x18
[   30.001576][  T408]  ? release_sock+0x15b/0x1b0
[   30.006260][  T408]  dump_stack+0x15/0x1c
[   30.010449][  T408]  should_fail+0x3ab/0x500
[   30.014865][  T408]  ? __alloc_skb+0x9e/0x520
[   30.019367][  T408]  __should_failslab+0xa4/0xe0
[   30.024132][  T408]  should_failslab+0x9/0x20
[   30.028653][  T408]  kmem_cache_alloc+0x3d/0x2d0
[   30.033410][  T408]  __alloc_skb+0x9e/0x520
[   30.037743][  T408]  ? netlink_autobind+0x155/0x190
[   30.042782][  T408]  netlink_sendmsg+0x693/0xb70
[   30.047545][  T408]  ? netlink_getsockopt+0x530/0x530
[   30.052743][  T408]  ? kasan_set_track+0x5b/0x70
[   30.057500][  T408]  ? slab_free_freelist_hook+0xc5/0x190
[   30.063047][  T408]  ? security_socket_sendmsg+0x82/0xa0
[   30.068526][  T408]  ? netlink_getsockopt+0x530/0x530
[   30.073751][  T408]  ____sys_sendmsg+0x5be/0x8f0
[   30.078521][  T408]  ? __sys_sendmsg_sock+0x40/0x40
[   30.083551][  T408]  ? import_iovec+0x7c/0xb0
[   30.088202][  T408]  ___sys_sendmsg+0x236/0x2e0
[   30.092891][  T408]  ? __sys_sendmsg+0x280/0x280
[   30.097678][  T408]  ? rw_verify_area+0x1c0/0x360
[   30.102547][  T408]  ? __fdget+0x1a1/0x230
[   30.106812][  T408]  __x64_sys_sendmsg+0x201/0x2d0
[   30.111762][  T408]  ? fput+0x1a/0x20
[   30.115568][  T408]  ? ___sys_sendmsg+0x2e0/0x2e0
[   30.120433][  T408]  ? debug_smp_processor_id+0x17/0x20
[   30.125810][  T408]  ? fpregs_assert_state_consistent+0xb1/0xe0
[   30.131874][  T408]  ? exit_to_user_mode_prepare+0x2f/0xa0
[   30.137502][  T408]  do_syscall_64+0x31/0x40
[   30.141932][  T408]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   30.147822][  T408] RIP: 0033:0x7fa1b5708159
[   30.152237][  T408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   30.171849][  T408] RSP: 002b:00007fa1b4140028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   30.180293][  T408] RAX: ffffffffffffffda RBX: 00007fa1b5990090 RCX: 00007fa1b5708159
[   30.188277][  T408] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004
[   30.196248][  T408] RBP: 00007fa1b4140090 R08: 0000000000000000 R09: 0000000000000000
[   30.204245][  T408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   30.212237][  T408] R13: 00007fa1b5990128 R14: 00007fa1b5990090 R15: 00007ffefab1eb28
[   30.307251][  T311] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving
[   30.316412][  T311] plantronics 0003:047F:FFFF.0002: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[   30.366150][  T310] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   30.408486][  T397] Leaked POSIX lock on dev=0x0:0x21 ino=0x4f  fl_owner=ffff88811e620000 fl_flags=0x81 fl_type=0x1 fl_pid=394
[   30.429250][  T281] Leaked locks on dev=0x0:0x21 ino=0x4f:
[   30.435142][  T281] POSIX: fl_owner=ffff88811e620000 fl_flags=0x81 fl_type=0x1 fl_pid=394
[   30.578564][  T287] usb 4-1: USB disconnect, device number 3
[   30.766245][  T310] usb 2-1: unable to get BOS descriptor or descriptor too short
[   30.846160][  T310] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   30.862669][  T310] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   30.872353][  T310] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   31.036209][  T310] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[   31.045362][  T310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   31.053548][  T310] usb 2-1: Product: syz
[   31.062485][  T310] usb 2-1: Manufacturer: syz
[   31.065306][  T462] fuse: Bad value for 'fd'
[   31.067960][  T310] usb 2-1: SerialNumber: syz
[   31.128985][  T462] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[   31.140131][  T462] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1047: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   31.154783][  T462] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.35: bg 0: block 248: padding at end of block bitmap is not set
[   31.178591][  T462] EXT4-fs error (device loop0): ext4_acquire_dquot:6230: comm syz.0.35: Failed to acquire dquot type 1
[   31.190319][  T462] EXT4-fs (loop0): 1 truncate cleaned up
[   31.196223][  T462] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[   31.226733][  T466] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities
[   31.358330][  T480] 9pnet: Insufficient options for proto=fd
[   31.371921][  T310] usb 2-1: USB disconnect, device number 2
[   31.646782][  T338] udevd[338]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   31.796688][  T499] fuse: Bad value for 'fd'
[   31.898547][  T529] fuse: Bad value for 'fd'
[   31.966672][  T529] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[   32.000839][  T529] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1047: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   32.027696][  T529] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.51: bg 0: block 248: padding at end of block bitmap is not set
[   32.042287][  T529] EXT4-fs error (device loop1): ext4_acquire_dquot:6230: comm syz.1.51: Failed to acquire dquot type 1
[   32.054439][  T529] EXT4-fs (loop1): 1 truncate cleaned up
[   32.060329][  T529] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue
[   32.158859][  T485] Leaked POSIX lock on dev=0x0:0x21 ino=0x65  fl_owner=ffff88810cde2d80 fl_flags=0x81 fl_type=0x1 fl_pid=474
[   32.197822][  T281] Leaked locks on dev=0x0:0x21 ino=0x65:
[   32.203515][  T281] POSIX: fl_owner=ffff88810cde2d80 fl_flags=0x81 fl_type=0x1 fl_pid=474
[   32.231229][  T552] syz.2.59 uses obsolete (PF_INET,SOCK_PACKET)
[   32.286181][  T310] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   32.317814][  T557] Zero length message leads to an empty skb
[   32.646159][  T310] usb 5-1: config 1 has an invalid interface number: 29 but max is 2
[   32.654433][  T310] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   32.664744][  T310] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   32.673750][  T310] usb 5-1: config 1 has no interface number 0
[   32.836157][  T310] usb 5-1: New USB device found, idVendor=1235, idProduct=8211, bcdDevice= 0.40
[   32.845315][  T310] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   32.853376][  T310] usb 5-1: Product: syz
[   32.857647][  T310] usb 5-1: Manufacturer: syz
[   32.862261][  T310] usb 5-1: SerialNumber: syz
[   33.053873][  T568] fuse: Bad value for 'fd'
[   33.120834][  T568] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[   33.138891][  T568] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1047: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   33.153917][  T568] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.65: bg 0: block 248: padding at end of block bitmap is not set
[   33.168600][  T568] __quota_error: 92 callbacks suppressed
[   33.168609][  T568] Quota error (device loop3): write_blk: dquota write failed
[   33.181901][  T568] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota
[   33.186520][  T310] usb 5-1: 1:1 : no or invalid class specific endpoint descriptor
[   33.193015][  T568] EXT4-fs error (device loop3): ext4_acquire_dquot:6230: comm syz.3.65: Failed to acquire dquot type 1
[   33.200005][  T310] usb 5-1: 1:1 : format type 0 is detected, processed as PCM
[   33.213417][  T568] EXT4-fs (loop3): 1 truncate cleaned up
[   33.218458][  T310] usb 5-1: 1:1 : unsupported sample bitwidth 7 in 14 bytes
[   33.225536][  T568] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
[   33.368166][   T24] audit: type=1400 audit(1790296702.300:382): avc:  denied  { unmount } for  pid=567 comm="syz.3.65" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   33.406155][  T310] usb 5-1: 29:2 : does not exist
[   33.413683][  T310] usb 5-1: USB disconnect, device number 2
[   33.486938][   T24] audit: type=1400 audit(1790296702.430:383): avc:  denied  { create } for  pid=584 comm="syz.3.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[   33.517864][  T587] netlink: 4 bytes leftover after parsing attributes in process `syz.3.72'.
[   33.552397][   T24] audit: type=1326 audit(1790296702.490:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=595 comm="syz.0.76" exe="/root/ci2-android-5-10/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa1b5708159 code=0x0
[   33.626651][  T338] udevd[338]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.29/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   33.784958][   T24] audit: type=1400 audit(1790296702.720:385): avc:  denied  { read write } for  pid=602 comm="syz.4.78" name="usbmon9" dev="devtmpfs" ino=181 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   33.809051][   T24] audit: type=1400 audit(1790296702.720:386): avc:  denied  { open } for  pid=602 comm="syz.4.78" path="/dev/usbmon9" dev="devtmpfs" ino=181 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   33.833746][   T24] audit: type=1400 audit(1790296702.770:387): avc:  denied  { ioctl } for  pid=602 comm="syz.4.78" path="/dev/usbmon9" dev="devtmpfs" ino=181 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   33.884402][   T24] audit: type=1400 audit(1790296702.820:388): avc:  denied  { write } for  pid=604 comm="syz.2.79" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[   33.905532][  T607] fuse: Bad value for 'fd'
[   33.978225][  T607] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[   33.988390][  T578] Leaked POSIX lock on dev=0x0:0x29 ino=0x49  fl_owner=ffff8881001f4340 fl_flags=0x81 fl_type=0x1 fl_pid=575
[   34.000218][   T24] audit: type=1400 audit(1790296702.940:389): avc:  denied  { create } for  pid=618 comm="syz.2.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   34.028209][  T280] Leaked locks on dev=0x0:0x29 ino=0x49:
[   34.033948][  T280] POSIX: fl_owner=ffff8881001f4340 fl_flags=0x81 fl_type=0x1 fl_pid=575
[   34.064689][  T607] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1047: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   34.085052][  T607] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.80: bg 0: block 248: padding at end of block bitmap is not set
[   34.103384][  T607] EXT4-fs error (device loop3): ext4_acquire_dquot:6230: comm syz.3.80: Failed to acquire dquot type 1
[   34.116745][  T607] EXT4-fs (loop3): 1 truncate cleaned up
[   34.143229][  T607] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
[   34.266396][  T619] cgroup: fork rejected by pids controller in /syz2
[   34.379760][  T654]  loop4: p1 p2 p3 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215
[   34.380044][  T654] loop4: p1 start 105709568 is beyond EOD, truncated
[   34.482938][  T654] loop4: p2 size 590084 extends beyond EOD, truncated
[   34.505041][  T687] netlink: 'syz.0.90': attribute type 4 has an invalid length.
[   34.523861][  T654] loop4: p5 start 105709568 is beyond EOD, truncated
[   34.531087][  T654] loop4: p6 size 590084 extends beyond EOD, truncated
[   34.538714][  T654] loop4: p7 start 105709568 is beyond EOD, truncated
[   34.545507][  T654] loop4: p8 size 590084 extends beyond EOD, truncated
[   34.553159][  T654] loop4: p9 start 105709568 is beyond EOD, truncated
[   34.560003][  T654] loop4: p10 size 590084 extends beyond EOD, truncated
[   34.567763][  T654] loop4: p11 start 105709568 is beyond EOD, truncated
[   34.574652][  T654] loop4: p12 size 590084 extends beyond EOD, truncated
[   34.582386][  T654] loop4: p13 start 105709568 is beyond EOD, truncated
[   34.589303][  T654] loop4: p14 size 590084 extends beyond EOD, truncated
[   34.602093][  T654] loop4: p15 start 105709568 is beyond EOD, truncated
[   34.610428][  T654] loop4: p16 size 590084 extends beyond EOD, truncated
[   34.619101][  T654] loop4: p17 start 105709568 is beyond EOD, truncated
[   34.625959][  T654] loop4: p18 size 590084 extends beyond EOD, truncated
[   34.633637][  T654] loop4: p19 start 105709568 is beyond EOD, truncated
[   34.640536][  T654] loop4: p20 size 590084 extends beyond EOD, truncated
[   34.648233][  T654] loop4: p21 start 105709568 is beyond EOD, truncated
[   34.655079][  T654] loop4: p22 size 590084 extends beyond EOD, truncated
[   34.679772][  T654] loop4: p23 start 105709568 is beyond EOD, truncated
[   34.694091][  T654] loop4: p24 size 590084 extends beyond EOD, truncated
[   34.714573][  T654] loop4: p25 start 105709568 is beyond EOD, truncated
[   34.724908][  T654] loop4: p26 size 590084 extends beyond EOD, truncated
[   34.739657][  T654] loop4: p27 start 105709568 is beyond EOD, truncated
[   34.753896][  T654] loop4: p28 size 590084 extends beyond EOD, truncated
[   34.771637][  T654] loop4: p29 start 105709568 is beyond EOD, truncated
[   34.785863][  T654] loop4: p30 size 590084 extends beyond EOD, truncated
[   34.796601][  T654] loop4: p31 start 105709568 is beyond EOD, truncated
[   34.809374][  T654] loop4: p32 size 590084 extends beyond EOD, truncated
[   34.823438][  T654] loop4: p33 start 105709568 is beyond EOD, truncated
[   34.835731][  T654] loop4: p34 size 590084 extends beyond EOD, truncated
[   34.849122][  T654] loop4: p35 start 105709568 is beyond EOD, truncated
[   34.860696][  T654] loop4: p36 size 590084 extends beyond EOD, truncated
[   34.875378][  T654] loop4: p37 start 105709568 is beyond EOD, truncated
[   34.887521][  T654] loop4: p38 size 590084 extends beyond EOD, truncated
[   34.899963][  T654] loop4: p39 start 105709568 is beyond EOD, truncated
[   34.913036][  T654] loop4: p40 size 590084 extends beyond EOD, truncated
[   34.924019][  T710] netlink: 20 bytes leftover after parsing attributes in process `syz.1.93'.
[   34.928364][  T654] loop4: p41 start 105709568 is beyond EOD, truncated
[   34.948199][  T654] loop4: p42 size 590084 extends beyond EOD, truncated
[   34.967897][  T654] loop4: p43 start 105709568 is beyond EOD, truncated
[   34.982048][  T654] loop4: p44 size 590084 extends beyond EOD, truncated
[   35.008153][  T654] loop4: p45 start 105709568 is beyond EOD, truncated
[   35.020036][  T654] loop4: p46 size 590084 extends beyond EOD, truncated
[   35.038687][  T654] loop4: p47 start 105709568 is beyond EOD, truncated
[   35.069508][  T706] EXT4-fs (loop3): filesystem too large to mount safely on this system
[   35.078119][  T654] loop4: p48 size 590084 extends beyond EOD, truncated
[   35.088470][  T654] loop4: p49 start 105709568 is beyond EOD, truncated
[   35.095457][  T654] loop4: p50 size 590084 extends beyond EOD, truncated
[   35.103811][  T654] loop4: p51 start 105709568 is beyond EOD, truncated
[   35.110914][  T654] loop4: p52 size 590084 extends beyond EOD, truncated
[   35.118925][  T654] loop4: p53 start 105709568 is beyond EOD, truncated
[   35.125807][  T654] loop4: p54 size 590084 extends beyond EOD, truncated
[   35.135126][  T654] loop4: p55 start 105709568 is beyond EOD, truncated
[   35.142234][  T654] loop4: p56 size 590084 extends beyond EOD, truncated
[   35.150038][  T654] loop4: p57 start 105709568 is beyond EOD, truncated
[   35.158513][  T654] loop4: p58 size 590084 extends beyond EOD, truncated
[   35.166840][  T654] loop4: p59 start 105709568 is beyond EOD, truncated
[   35.173713][  T654] loop4: p60 size 590084 extends beyond EOD, truncated
[   35.182688][  T654] loop4: p61 start 105709568 is beyond EOD, truncated
[   35.189757][  T654] loop4: p62 size 590084 extends beyond EOD, truncated
[   35.197504][  T654] loop4: p63 start 105709568 is beyond EOD, truncated
[   35.204395][  T654] loop4: p64 size 590084 extends beyond EOD, truncated
[   35.222372][  T654] loop4: p65 start 105709568 is beyond EOD, truncated
[   35.239230][  T654] loop4: p66 size 590084 extends beyond EOD, truncated
[   35.257167][  T654] loop4: p67 start 105709568 is beyond EOD, truncated
[   35.276355][  T654] loop4: p68 size 590084 extends beyond EOD, truncated
[   35.292093][  T654] loop4: p69 start 105709568 is beyond EOD, truncated
[   35.308750][  T654] loop4: p70 size 590084 extends beyond EOD, truncated
[   35.338145][  T654] loop4: p71 start 105709568 is beyond EOD, truncated
[   35.354748][  T654] loop4: p72 size 590084 extends beyond EOD, truncated
[   35.369445][  T654] loop4: p73 start 105709568 is beyond EOD, truncated
[   35.383998][  T654] loop4: p74 size 590084 extends beyond EOD, truncated
[   35.398636][  T654] loop4: p75 start 105709568 is beyond EOD, truncated
[   35.410943][  T654] loop4: p76 size 590084 extends beyond EOD, truncated
[   35.424591][  T654] loop4: p77 start 105709568 is beyond EOD, truncated
[   35.437979][  T654] loop4: p78 size 590084 extends beyond EOD, truncated
[   35.452628][  T654] loop4: p79 start 105709568 is beyond EOD, truncated
[   35.467110][  T654] loop4: p80 size 590084 extends beyond EOD, truncated
[   35.485257][  T654] loop4: p81 start 105709568 is beyond EOD, truncated
[   35.499555][  T654] loop4: p82 size 590084 extends beyond EOD, truncated
[   35.519998][  T654] loop4: p83 start 105709568 is beyond EOD, truncated
[   35.533361][  T654] loop4: p84 size 590084 extends beyond EOD, truncated
[   35.548710][  T654] loop4: p85 start 105709568 is beyond EOD, truncated
[   35.563292][  T654] loop4: p86 size 590084 extends beyond EOD, truncated
[   35.580242][  T654] loop4: p87 start 105709568 is beyond EOD, truncated
[   35.592185][  T654] loop4: p88 size 590084 extends beyond EOD, truncated
[   35.599967][  T654] loop4: p89 start 105709568 is beyond EOD, truncated
[   35.606996][  T654] loop4: p90 size 590084 extends beyond EOD, truncated
[   35.614680][  T654] loop4: p91 start 105709568 is beyond EOD, truncated
[   35.622598][  T654] loop4: p92 size 590084 extends beyond EOD, truncated
[   35.630335][  T654] loop4: p93 start 105709568 is beyond EOD, truncated
[   35.637640][  T654] loop4: p94 size 590084 extends beyond EOD, truncated
[   35.645141][  T654] loop4: p95 start 105709568 is beyond EOD, truncated
[   35.652261][  T654] loop4: p96 size 590084 extends beyond EOD, truncated
[   35.664536][  T654] loop4: p97 start 105709568 is beyond EOD, truncated
[   35.675718][  T654] loop4: p98 size 590084 extends beyond EOD, truncated
[   35.688282][  T654] loop4: p99 start 105709568 is beyond EOD, truncated
[   35.706112][  T654] loop4: p100 size 590084 extends beyond EOD, truncated
[   35.714479][  T735] fuse: Bad value for 'fd'
[   35.719992][  T654] loop4: p101 start 105709568 is beyond EOD, truncated
[   35.737506][  T654] loop4: p102 size 590084 extends beyond EOD, truncated
[   35.755680][  T654] loop4: p103 start 105709568 is beyond EOD, truncated
[   35.773737][  T654] loop4: p104 size 590084 extends beyond EOD, truncated
[   35.790764][  T654] loop4: p105 start 105709568 is beyond EOD, truncated
[   35.807276][  T654] loop4: p106 size 590084 extends beyond EOD, truncated
[   35.825088][  T654] loop4: p107 start 105709568 is beyond EOD, truncated
[   35.846272][  T654] loop4: p108 size 590084 extends beyond EOD, truncated
[   35.854215][  T654] loop4: p109 start 105709568 is beyond EOD, truncated
[   35.874066][  T654] loop4: p110 size 590084 extends beyond EOD, truncated
[   35.882332][  T654] loop4: p111 start 105709568 is beyond EOD, truncated
[   35.896073][  T654] loop4: p112 size 590084 extends beyond EOD, truncated
[   35.906127][  T654] loop4: p113 start 105709568 is beyond EOD, truncated
[   35.913045][  T654] loop4: p114 size 590084 extends beyond EOD, truncated
[   35.936832][  T654] loop4: p115 start 105709568 is beyond EOD, truncated
[   35.943745][  T654] loop4: p116 size 590084 extends beyond EOD, truncated
[   35.956917][  T654] loop4: p117 start 105709568 is beyond EOD, truncated
[   35.973925][  T654] loop4: p118 size 590084 extends beyond EOD, truncated
[   35.986735][  T654] loop4: p119 start 105709568 is beyond EOD, truncated
[   36.003740][  T654] loop4: p120 size 590084 extends beyond EOD, truncated
[   36.016582][  T654] loop4: p121 start 105709568 is beyond EOD, truncated
[   36.025808][  T654] loop4: p122 size 590084 extends beyond EOD, truncated
[   36.041640][  T654] loop4: p123 start 105709568 is beyond EOD, truncated
[   36.055093][  T654] loop4: p124 size 590084 extends beyond EOD, truncated
[   36.071008][  T654] loop4: p125 start 105709568 is beyond EOD, truncated
[   36.085507][  T654] loop4: p126 size 590084 extends beyond EOD, truncated
[   36.096562][  T654] loop4: p127 start 105709568 is beyond EOD, truncated
[   36.103697][  T654] loop4: p128 size 590084 extends beyond EOD, truncated
[   36.126806][  T654] loop4: p129 start 105709568 is beyond EOD, truncated
[   36.133723][  T654] loop4: p130 size 590084 extends beyond EOD, truncated
[   36.151900][  T654] loop4: p131 start 105709568 is beyond EOD, truncated
[   36.166072][  T654] loop4: p132 size 590084 extends beyond EOD, truncated
[   36.183885][  T654] loop4: p133 start 105709568 is beyond EOD, truncated
[   36.194772][  T654] loop4: p134 size 590084 extends beyond EOD, truncated
[   36.202496][  T654] loop4: p135 start 105709568 is beyond EOD, truncated
[   36.209509][  T654] loop4: p136 size 590084 extends beyond EOD, truncated
[   36.217203][  T654] loop4: p137 start 105709568 is beyond EOD, truncated
[   36.224088][  T654] loop4: p138 size 590084 extends beyond EOD, truncated
[   36.231890][  T654] loop4: p139 start 105709568 is beyond EOD, truncated
[   36.238833][  T654] loop4: p140 size 590084 extends beyond EOD, truncated
[   36.246568][  T654] loop4: p141 start 105709568 is beyond EOD, truncated
[   36.253452][  T654] loop4: p142 size 590084 extends beyond EOD, truncated
[   36.271317][  T654] loop4: p143 start 105709568 is beyond EOD, truncated
[   36.286082][  T654] loop4: p144 size 590084 extends beyond EOD, truncated
[   36.293749][  T654] loop4: p145 start 105709568 is beyond EOD, truncated
[   36.306076][  T654] loop4: p146 size 590084 extends beyond EOD, truncated
[   36.316398][  T654] loop4: p147 start 105709568 is beyond EOD, truncated
[   36.323291][  T654] loop4: p148 size 590084 extends beyond EOD, truncated
[   36.341226][  T654] loop4: p149 start 105709568 is beyond EOD, truncated
[   36.356079][  T654] loop4: p150 size 590084 extends beyond EOD, truncated
[   36.366393][  T654] loop4: p151 start 105709568 is beyond EOD, truncated
[   36.384285][  T654] loop4: p152 size 590084 extends beyond EOD, truncated
[   36.396592][  T654] loop4: p153 start 105709568 is beyond EOD, truncated
[   36.405766][  T654] loop4: p154 size 590084 extends beyond EOD, truncated
[   36.421626][  T654] loop4: p155 start 105709568 is beyond EOD, truncated
[   36.428801][  T654] loop4: p156 size 590084 extends beyond EOD, truncated
[   36.443164][  T654] loop4: p157 start 105709568 is beyond EOD, truncated
[   36.457786][  T654] loop4: p158 size 590084 extends beyond EOD, truncated
[   36.473606][  T654] loop4: p159 start 105709568 is beyond EOD, truncated
[   36.488175][  T654] loop4: p160 size 590084 extends beyond EOD, truncated
[   36.505057][  T654] loop4: p161 start 105709568 is beyond EOD, truncated
[   36.516720][  T654] loop4: p162 size 590084 extends beyond EOD, truncated
[   36.534723][  T654] loop4: p163 start 105709568 is beyond EOD, truncated
[   36.541711][  T654] loop4: p164 size 590084 extends beyond EOD, truncated
[   36.556712][  T654] loop4: p165 start 105709568 is beyond EOD, truncated
[   36.575652][  T654] loop4: p166 size 590084 extends beyond EOD, truncated
[   36.592281][  T654] loop4: p167 start 105709568 is beyond EOD, truncated
[   36.599305][  T654] loop4: p168 size 590084 extends beyond EOD, truncated
[   36.616070][  T654] loop4: p169 start 105709568 is beyond EOD, truncated
[   36.635976][  T654] loop4: p170 size 590084 extends beyond EOD, truncated
[   36.648518][  T654] loop4: p171 start 105709568 is beyond EOD, truncated
[   36.657287][  T654] loop4: p172 size 590084 extends beyond EOD, truncated
[   36.668673][  T654] loop4: p173 start 105709568 is beyond EOD, truncated
[   36.685718][  T765] netlink: 28 bytes leftover after parsing attributes in process `syz.3.111'.
[   36.692187][  T654] loop4: p174 size 590084 extends beyond EOD, truncated
[   36.712778][  T654] loop4: p175 start 105709568 is beyond EOD, truncated
[   36.721074][  T654] loop4: p176 size 590084 extends beyond EOD, truncated
[   36.729145][  T770] fuse: Bad value for 'fd'
[   36.734421][  T654] loop4: p177 start 105709568 is beyond EOD, truncated
[   36.743596][  T654] loop4: p178 size 590084 extends beyond EOD, truncated
[   36.757153][  T654] loop4: p179 start 105709568 is beyond EOD, truncated
[   36.769371][  T654] loop4: p180 size 590084 extends beyond EOD, truncated
[   36.786771][  T654] loop4: p181 start 105709568 is beyond EOD, truncated
[   36.793708][  T654] loop4: p182 size 590084 extends beyond EOD, truncated
[   36.803216][  T654] loop4: p183 start 105709568 is beyond EOD, truncated
[   36.813922][  T654] loop4: p184 size 590084 extends beyond EOD, truncated
[   36.825795][  T654] loop4: p185 start 105709568 is beyond EOD, truncated
[   36.836119][  T654] loop4: p186 size 590084 extends beyond EOD, truncated
[   36.848175][  T776] udc-core: couldn't find an available UDC or it's busy
[   36.857495][  T654] loop4: p187 start 105709568 is beyond EOD, truncated
[   36.867650][  T776] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   36.876264][  T654] loop4: p188 size 590084 extends beyond EOD, truncated
[   36.890885][  T654] loop4: p189 start 105709568 is beyond EOD, truncated
[   36.901822][  T654] loop4: p190 size 590084 extends beyond EOD, truncated
[   36.919135][  T654] loop4: p191 start 105709568 is beyond EOD, truncated
[   36.926127][  T654] loop4: p192 size 590084 extends beyond EOD, truncated
[   36.938385][  T654] loop4: p193 start 105709568 is beyond EOD, truncated
[   36.950716][  T654] loop4: p194 size 590084 extends beyond EOD, truncated
[   36.964617][  T654] loop4: p195 start 105709568 is beyond EOD, truncated
[   36.975914][  T654] loop4: p196 size 590084 extends beyond EOD, truncated
[   36.989591][  T654] loop4: p197 start 105709568 is beyond EOD, truncated
[   37.003069][  T654] loop4: p198 size 590084 extends beyond EOD, truncated
[   37.018079][  T654] loop4: p199 start 105709568 is beyond EOD, truncated
[   37.032578][  T654] loop4: p200 size 590084 extends beyond EOD, truncated
[   37.047788][  T654] loop4: p201 start 105709568 is beyond EOD, truncated
[   37.061222][  T654] loop4: p202 size 590084 extends beyond EOD, truncated
[   37.077447][  T654] loop4: p203 start 105709568 is beyond EOD, truncated
[   37.092156][  T654] loop4: p204 size 590084 extends beyond EOD, truncated
[   37.106878][  T654] loop4: p205 start 105709568 is beyond EOD, truncated
[   37.116204][  T446] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   37.120626][  T654] loop4: p206 size 590084 extends beyond EOD, truncated
[   37.143143][  T654] loop4: p207 start 105709568 is beyond EOD, truncated
[   37.158080][  T654] loop4: p208 size 590084 extends beyond EOD, truncated
[   37.173829][  T654] loop4: p209 start 105709568 is beyond EOD, truncated
[   37.187296][  T654] loop4: p210 size 590084 extends beyond EOD, truncated
[   37.203272][  T654] loop4: p211 start 105709568 is beyond EOD, truncated
[   37.216696][  T654] loop4: p212 size 590084 extends beyond EOD, truncated
[   37.235595][  T654] loop4: p213 start 105709568 is beyond EOD, truncated
[   37.288572][  T654] loop4: p214 size 590084 extends beyond EOD, truncated
[   37.306096][  T654] loop4: p215 start 105709568 is beyond EOD, truncated
[   37.312995][  T654] loop4: p216 size 590084 extends beyond EOD, truncated
[   37.358651][  T654] loop4: p217 start 105709568 is beyond EOD, truncated
[   37.372065][  T654] loop4: p218 size 590084 extends beyond EOD, truncated
[   37.385273][  T777] overlayfs: missing 'lowerdir'
[   37.392901][  T654] loop4: p219 start 105709568 is beyond EOD, truncated
[   37.414552][  T654] loop4: p220 size 590084 extends beyond EOD, truncated
[   37.431880][  T654] loop4: p221 start 105709568 is beyond EOD, truncated
[   37.450693][  T654] loop4: p222 size 590084 extends beyond EOD, truncated
[   37.466337][  T446] usb 4-1: device descriptor read/64, error -71
[   37.518862][  T789] netlink: 4 bytes leftover after parsing attributes in process `syz.0.116'.
[   37.618421][  T654] loop4: p223 start 105709568 is beyond EOD, truncated
[   37.640233][  T654] loop4: p224 size 590084 extends beyond EOD, truncated
[   37.774702][  T654] loop4: p225 start 105709568 is beyond EOD, truncated
[   37.796840][  T654] loop4: p226 size 590084 extends beyond EOD, truncated
[   37.816420][  T654] loop4: p227 start 105709568 is beyond EOD, truncated
[   37.823325][  T654] loop4: p228 size 590084 extends beyond EOD, truncated
[   37.848201][  T654] loop4: p229 start 105709568 is beyond EOD, truncated
[   37.866082][  T654] loop4: p230 size 590084 extends beyond EOD, truncated
[   37.876143][  T446] usb 4-1: device descriptor read/64, error -71
[   37.899468][  T654] loop4: p231 start 105709568 is beyond EOD, truncated
[   37.916156][  T654] loop4: p232 size 590084 extends beyond EOD, truncated
[   37.924692][  T777] EXT4-fs error (device loop3) in ext4_do_update_inode:5362: error 27
[   37.933585][  T654] loop4: p233 start 105709568 is beyond EOD, truncated
[   37.940625][  T654] loop4: p234 size 590084 extends beyond EOD, truncated
[   37.946690][  T777] EXT4-fs error (device loop3) in ext4_orphan_del:3292: error 27
[   37.955599][  T654] loop4: p235 start 105709568 is beyond EOD, truncated
[   37.966130][  T654] loop4: p236 size 590084 extends beyond EOD, truncated
[   37.975499][  T654] loop4: p237 start 105709568 is beyond EOD, truncated
[   37.991621][  T654] loop4: p238 size 590084 extends beyond EOD, truncated
[   37.996293][  T777] EXT4-fs error (device loop3) in ext4_do_update_inode:5362: error 27
[   38.007074][  T654] loop4: p239 start 105709568 is beyond EOD, truncated
[   38.016196][  T654] loop4: p240 size 590084 extends beyond EOD, truncated
[   38.026274][  T654] loop4: p241 start 105709568 is beyond EOD, truncated
[   38.035141][  T654] loop4: p242 size 590084 extends beyond EOD, truncated
[   38.048256][  T777] EXT4-fs error (device loop3): ext4_evict_inode:333: inode #15: comm syz.3.114: mark_inode_dirty error
[   38.061470][  T654] loop4: p243 start 105709568 is beyond EOD, truncated
[   38.068589][  T654] loop4: p244 size 590084 extends beyond EOD, truncated
[   38.082829][  T654] loop4: p245 start 105709568 is beyond EOD, truncated
[   38.096319][  T777] EXT4-fs (loop3): 1 orphan inode deleted
[   38.099104][  T654] loop4: p246 size 590084 extends beyond EOD, 
[   38.102068][  T777] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
[   38.128502][  T654] truncated
[   38.174664][  T446] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   38.185557][  T654] loop4: p247 start 105709568 is beyond EOD, truncated
[   38.192757][  T654] loop4: p248 size 590084 extends beyond EOD, truncated
[   38.200868][  T654] loop4: p249 start 105709568 is beyond EOD, truncated
[   38.208072][  T654] loop4: p250 size 590084 extends beyond EOD, truncated
[   38.215616][  T654] loop4: p251 start 105709568 is beyond EOD, truncated
[   38.222554][  T654] loop4: p252 size 590084 extends beyond EOD, truncated
[   38.230196][  T654] loop4: p253 start 105709568 is beyond EOD, truncated
[   38.249377][  T654] loop4: p254 size 590084 extends beyond EOD, truncated
[   38.267236][  T654] loop4: p255 start 105709568 is beyond EOD, truncated
[   38.294424][   T24] kauditd_printk_skb: 470 callbacks suppressed
[   38.294435][   T24] audit: type=1400 audit(1790296707.230:858): avc:  denied  { mmap_zero } for  pid=797 comm="syz.0.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1
[   38.366912][   T24] audit: type=1400 audit(1790296707.290:859): avc:  denied  { getopt } for  pid=804 comm="syz.4.120" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   38.411721][   T24] audit: type=1400 audit(1790296707.290:860): avc:  denied  { map } for  pid=804 comm="syz.4.120" path="socket:[17437]" dev="sockfs" ino=17437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   38.466551][  T446] usb 4-1: device descriptor read/64, error -71
[   38.467339][   T24] audit: type=1400 audit(1790296707.300:861): avc:  denied  { read } for  pid=804 comm="syz.4.120" path="socket:[17437]" dev="sockfs" ino=17437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   38.604875][  T817] fuse: Bad value for 'fd'
[   38.621549][  T818] binder: 816:818 ioctl 40046205 0 returned -22
[   38.631932][  T301] udevd[301]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[   38.638426][  T332] udevd[332]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[   38.653026][  T315] udevd[315]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory
[   38.668831][  T338] udevd[338]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[   38.698960][  T819] udevd[819]: inotify_add_watch(7, /dev/loop4p8, 10) failed: No such file or directory
[   38.719802][  T301] udevd[301]: inotify_add_watch(7, /dev/loop4p26, 10) failed: No such file or directory
[   38.719821][  T315] udevd[315]: inotify_add_watch(7, /dev/loop4p30, 10) failed: No such file or directory
[   38.740714][  T332] udevd[332]: inotify_add_watch(7, /dev/loop4p28, 10) failed: No such file or directory
[   38.752247][  T821] udevd[821]: inotify_add_watch(7, /dev/loop4p12, 10) failed: No such file or directory
[   38.753730][  T338] udevd[338]: inotify_add_watch(7, /dev/loop4p24, 10) failed: No such file or directory
[   38.856181][  T446] usb 4-1: device descriptor read/64, error -71
[   38.901095][   T24] audit: type=1400 audit(1790296707.840:862): avc:  denied  { read } for  pid=847 comm="syz.0.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   38.953565][   T24] audit: type=1400 audit(1790296707.890:863): avc:  denied  { lock } for  pid=847 comm="syz.0.127" path="socket:[16978]" dev="sockfs" ino=16978 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   38.977188][  T446] usb usb4-port1: attempt power cycle
[   39.019320][   T24] audit: type=1326 audit(1790296707.960:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=857 comm="syz.2.130" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f38373ad159 code=0x0
[   39.216114][  T310] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   39.406121][  T446] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   39.456097][  T310] usb 5-1: Using ep0 maxpacket: 32
[   39.576165][  T446] usb 4-1: device descriptor read/8, error -71
[   39.656165][  T310] usb 5-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 32
[   39.666176][  T310] usb 5-1: config 1 interface 0 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[   39.679254][  T310] usb 5-1: config 1 interface 0 has no altsetting 0
[   39.707339][   T24] audit: type=1400 audit(1790296708.650:865): avc:  denied  { mount } for  pid=863 comm="syz.0.132" name="/" dev="ramfs" ino=17531 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   39.725985][  T864] overlayfs: unrecognized mount option "verity=off\" or missing value
[   39.732265][   T24] audit: type=1400 audit(1790296708.660:866): avc:  denied  { mounton } for  pid=863 comm="syz.0.132" path="/tracefs" dev="ramfs" ino=17533 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1
[   39.820473][  T870] fuse: Bad value for 'fd'
[   39.836764][  T310] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   39.886129][  T446] usb 4-1: device descriptor read/8, error -71
[   40.006166][  T310] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   40.014202][  T310] usb 5-1: Product: 싓䩵䶹沌ᣡẕ첢测遆畯皆꽄꥛튪樷묔缅륅杅鏱⛍ف䪿潀
[   40.026592][  T310] usb 5-1: Manufacturer: 츆婚壋蝩䄶巔ꋙ꘭⠁澗궒鑰讛׭ꐧ鲴獰ꖯ䬃뻮圡ꓹ꣯Ⓜ箙ꈌ镭茭轪㚼헮矨쎉霝ඩ㈕⢷驪浚熍뾜ᨂ矯
[   40.050582][  T310] usb 5-1: SerialNumber: ъ
[   40.070936][   T24] audit: type=1400 audit(1790296709.010:867): avc:  denied  { mounton } for  pid=885 comm="syz.2.138" path="/file0" dev="ramfs" ino=17152 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=sock_file permissive=1
[   40.076396][  T852] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[   40.100391][  T886] overlayfs: './file0' not a directory
[   40.187353][  T892] overlayfs: failed to clone upperpath
[   40.396537][  T310] cdc_ether: probe of 5-1:1.0 failed with error -22
[   40.416690][  T310] usb 5-1: USB disconnect, device number 3
[   40.586703][  T896] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=896 comm=syz.2.143
[   40.606221][  T875] Leaked POSIX lock on dev=0x0:0x26 ino=0xfc  fl_owner=ffff8881191fd6c0 fl_flags=0x81 fl_type=0x1 fl_pid=865
[   40.637079][  T896] overlayfs: failed to clone upperpath
[   40.647113][  T285] Leaked locks on dev=0x0:0x26 ino=0xfc:
[   40.663862][  T907] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[   40.666372][  T285] POSIX: fl_owner=ffff8881191fd6c0 fl_flags=0x81 fl_type=0x1 fl_pid=865
[   40.674208][  T907] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1)
[   40.690758][  T907] FAT-fs (loop3): Filesystem has been set read-only
[   40.721483][  T911] ==================================================================
[   40.729618][  T911] BUG: KASAN: use-after-free in rcu_segcblist_enqueue+0x85/0xa0
[   40.737282][  T911] Write of size 8 at addr ffff88811e14bd90 by task syz.2.151/911
[   40.745023][  T911] 
[   40.747377][  T911] CPU: 1 PID: 911 Comm: syz.2.151 Not tainted syzkaller #0
[   40.754595][  T911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   40.764672][  T911] Call Trace:
[   40.767991][  T911]  __dump_stack+0x21/0x24
[   40.772346][  T911]  dump_stack_lvl+0x1a7/0x208
[   40.777071][  T911]  ? show_regs_print_info+0x18/0x18
[   40.782303][  T911]  ? thaw_kernel_threads+0x220/0x220
[   40.787615][  T911]  print_address_description+0x7f/0x2c0
[   40.793187][  T911]  ? rcu_segcblist_enqueue+0x85/0xa0
[   40.798497][  T911]  kasan_report+0x100/0x140
[   40.803019][  T911]  ? rcu_segcblist_enqueue+0x85/0xa0
[   40.808350][  T911]  __asan_report_store8_noabort+0x17/0x20
[   40.814092][  T911]  rcu_segcblist_enqueue+0x85/0xa0
[   40.819230][  T911]  call_rcu+0x4df/0x1090
[   40.823503][  T911]  ? rcu_gp_kthread_wake+0x90/0x90
[   40.828646][  T911]  ? __kasan_check_write+0x14/0x20
[   40.833784][  T911]  ? __wake_up_bit+0x120/0x120
[   40.838583][  T911]  security_inode_free+0xb4/0xd0
[   40.843538][  T911]  __destroy_inode+0x175/0x4f0
[   40.848324][  T911]  evict+0x7e8/0x940
[   40.852241][  T911]  ? mode_strip_sgid+0x150/0x150
[   40.857214][  T911]  ? _raw_spin_lock+0x94/0xf0
[   40.861931][  T911]  ? _raw_spin_trylock_bh+0x150/0x150
[   40.867322][  T911]  ? __kasan_check_read+0x11/0x20
[   40.872368][  T911]  ? __kasan_check_write+0x14/0x20
[   40.877505][  T911]  iput+0x654/0x7e0
[   40.881341][  T911]  dentry_unlink_inode+0x2d5/0x390
[   40.886487][  T911]  __dentry_kill+0x45b/0x660
[   40.891098][  T911]  dentry_kill+0xc0/0x2a0
[   40.895457][  T911]  dput+0x42/0x80
[   40.899127][  T911]  __fput+0x4bd/0x730
[   40.903147][  T911]  ____fput+0x15/0x20
[   40.907193][  T911]  task_work_run+0x127/0x190
[   40.911815][  T911]  exit_to_user_mode_loop+0xcb/0xe0
[   40.917144][  T911]  exit_to_user_mode_prepare+0x76/0xa0
[   40.922642][  T911]  syscall_exit_to_user_mode+0x1d/0x40
[   40.928123][  T911]  do_syscall_64+0x3d/0x40
[   40.932561][  T911]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   40.938470][  T911] RIP: 0033:0x7f38373ad159
[   40.942924][  T911] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   40.962557][  T911] RSP: 002b:00007ffe202bfd58 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[   40.970996][  T911] RAX: 0000000000000000 RBX: 00007ffe202bfe40 RCX: 00007f38373ad159
[   40.978985][  T911] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[   40.987003][  T911] RBP: 0000000000009ef5 R08: 0000000000000001 R09: 0000000000000000
[   40.994993][  T911] R10: 0000001b2d420000 R11: 0000000000000246 R12: 00007ffe202bfe80
[   41.002988][  T911] R13: 00007f3837634fac R14: 000000000000a055 R15: 00007f3837634fa0
[   41.011006][  T911] 
[   41.013352][  T911] Allocated by task 912:
[   41.017632][  T911]  __kasan_kmalloc+0xd4/0x100
[   41.022323][  T911]  __kmalloc+0x19f/0x330
[   41.026588][  T911]  l2tp_session_create+0x39/0xb60
[   41.031634][  T911]  pppol2tp_connect+0xbf5/0x1640
[   41.036589][  T911]  __sys_connect+0x3ce/0x450
[   41.041249][  T911]  __x64_sys_connect+0x7a/0x90
[   41.046042][  T911]  do_syscall_64+0x31/0x40
[   41.050479][  T911]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   41.056379][  T911] 
[   41.058728][  T911] Freed by task 112:
[   41.062645][  T911]  kasan_set_track+0x4a/0x70
[   41.067256][  T911]  kasan_set_free_info+0x23/0x40
[   41.072210][  T911]  ____kasan_slab_free+0x125/0x160
[   41.077339][  T911]  __kasan_slab_free+0x11/0x20
[   41.082123][  T911]  slab_free_freelist_hook+0xc5/0x190
[   41.087509][  T911]  kfree+0xc0/0x270
[   41.091333][  T911]  l2tp_session_put+0xb2/0x1a0
[   41.096122][  T911]  l2tp_session_delete+0x3a9/0x4a0
[   41.101250][  T911]  l2tp_tunnel_del_work+0x180/0x3d0
[   41.106469][  T911]  process_one_work+0x6fd/0xbc0
[   41.111334][  T911]  worker_thread+0xa8e/0x13c0
[   41.116029][  T911]  kthread+0x324/0x3b0
[   41.120113][  T911]  ret_from_fork+0x1f/0x30
[   41.124539][  T911] 
[   41.126879][  T911] Last potentially related work creation:
[   41.132623][  T911]  kasan_save_stack+0x3a/0x60
[   41.137317][  T911]  __kasan_record_aux_stack+0xd2/0x100
[   41.142791][  T911]  kasan_record_aux_stack_noalloc+0xb/0x10
[   41.148616][  T911]  call_rcu+0x11a/0x1090
[   41.152882][  T911]  pppol2tp_release+0x1e3/0x2b0
[   41.157759][  T911]  sock_close+0xb8/0x200
[   41.162024][  T911]  __fput+0x2dc/0x730
[   41.166024][  T911]  ____fput+0x15/0x20
[   41.170023][  T911]  task_work_run+0x127/0x190
[   41.174628][  T911]  exit_to_user_mode_loop+0xcb/0xe0
[   41.179843][  T911]  exit_to_user_mode_prepare+0x76/0xa0
[   41.185321][  T911]  syscall_exit_to_user_mode+0x1d/0x40
[   41.190793][  T911]  do_syscall_64+0x3d/0x40
[   41.195228][  T911]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   41.201130][  T911] 
[   41.203479][  T911] The buggy address belongs to the object at ffff88811e14bc00
[   41.203479][  T911]  which belongs to the cache kmalloc-512 of size 512
[   41.217576][  T911] The buggy address is located 400 bytes inside of
[   41.217576][  T911]  512-byte region [ffff88811e14bc00, ffff88811e14be00)
[   41.230890][  T911] The buggy address belongs to the page:
[   41.236558][  T911] page:ffffea0004785200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11e148
[   41.246812][  T911] head:ffffea0004785200 order:2 compound_mapcount:0 compound_pincount:0
[   41.255166][  T911] flags: 0x4000000000010200(slab|head)
[   41.260652][  T911] raw: 4000000000010200 ffffea0004781d00 0000000500000005 ffff888100043080
[   41.269256][  T911] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000
[   41.277848][  T911] page dumped because: kasan: bad access detected
[   41.284284][  T911] page_owner tracks the page as allocated
[   41.290028][  T911] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 269, ts 21986998603, free_ts 0
[   41.308183][  T911]  prep_new_page+0x176/0x190
[   41.312787][  T911]  get_page_from_freelist+0x225f/0x23f0
[   41.318377][  T911]  __alloc_pages_nodemask+0x29a/0x640
[   41.323764][  T911]  new_slab+0x84/0x3f0
[   41.327855][  T911]  ___slab_alloc+0x2f8/0x4c0
[   41.332468][  T911]  __slab_alloc+0x63/0xa0
[   41.336844][  T911]  __kmalloc_track_caller+0x1e4/0x310
[   41.342389][  T911]  __alloc_skb+0xdc/0x520
[   41.346744][  T911]  alloc_skb_with_frags+0xa3/0x560
[   41.352012][  T911]  sock_alloc_send_pskb+0x87f/0x9a0
[   41.357238][  T911]  unix_stream_sendmsg+0x4c9/0xbe0
[   41.362372][  T911]  sock_write_iter+0x2a6/0x3a0
[   41.367174][  T911]  vfs_write+0x770/0xd70
[   41.371438][  T911]  ksys_write+0x14a/0x260
[   41.375802][  T911]  __x64_sys_write+0x7b/0x90
[   41.380418][  T911]  do_syscall_64+0x31/0x40
[   41.384845][  T911] page_owner free stack trace missing
[   41.390230][  T911] 
[   41.392599][  T911] Memory state around the buggy address:
[   41.398249][  T911]  ffff88811e14bc80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   41.406326][  T911]  ffff88811e14bd00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   41.414398][  T911] >ffff88811e14bd80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   41.422469][  T911]                          ^
[   41.427080][  T911]  ffff88811e14be00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   41.435181][  T911]  ffff88811e14be80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   41.443251][  T911] ==================================================================
[   41.451321][  T911] Disabling lock debugging due to kernel taint
[   41.856180][  T446] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[   42.096122][  T446] usb 4-1: Using ep0 maxpacket: 32
[   42.296155][  T446] usb 4-1: config 4 has an invalid interface number: 114 but max is 0
[   42.304379][  T446] usb 4-1: config 4 has no interface number 0
[   42.310545][  T446] usb 4-1: config 4 interface 114 has no altsetting 0
[   42.476325][  T446] usb 4-1: New USB device found, idVendor=17ef, idProduct=720c, bcdDevice=d2.e5
[   42.485374][  T446] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   42.493408][  T446] usb 4-1: Product: syz
[   42.497624][  T446] usb 4-1: Manufacturer: syz
[   42.502236][  T446] usb 4-1: SerialNumber: syz
[   42.746477][  T916] netlink: 84 bytes leftover after parsing attributes in process `syz.3.150'.
[   42.867231][  T446] usb 4-1: USB disconnect, device number 8