last executing test programs:

2m35.418043717s ago: executing program 2 (id=434):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
sendmsg$can_raw(r3, 0x0, 0x4)
setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, 0x0, 0x0)
socket(0x10, 0x3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r4)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000019080)={0x30, r5, 0x7, 0x2, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x4}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x10028054}, 0x400d4)

2m34.197002976s ago: executing program 2 (id=440):
mount$tmpfs(0x0, 0x0, &(0x7f0000000100), 0x80, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
getsockopt$inet_tcp_buf(r0, 0x6, 0x23, &(0x7f0000000040)=""/32, &(0x7f0000000080)=0x20)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000580)=ANY=[], 0x8)
connect$inet6(r2, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
sendmmsg$inet6(r2, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="82", 0x1}, {&(0x7f00000001c0)=' ', 0x1}, {&(0x7f0000000000)="18", 0x1}], 0x3}}], 0x1, 0x4400c800)
sendto$inet6(r2, &(0x7f0000000300), 0x19, 0x3b00, 0x0, 0xfffffffffffffdfd)
sendmsg(r1, &(0x7f0000001d00)={&(0x7f0000000080)=@nfc_llcp={0x27, 0x0, 0x0, 0x2, 0xd, 0x7f, "92492120889973283d404b8c0e1ab110f829e384ad1ea321d7abab01d2ddc5e50a851b9315ea4fc08422888aead654f888e10ccb231ac8bfdb861307943219", 0x38}, 0x80, &(0x7f0000000800), 0x0, &(0x7f0000003200)=[{0xb8, 0x29, 0x8, "a40949d8b3335e95556efe212e3011a9a65a3c3edc477a616c4907059f4ca61adc36adb07d82f00e0e0c5b4b8c510b84b6f3f8fc84a551dcb425db31e809f311c37de4540f596ce04a136eae9d078d6d485ba884b1782edf328d239a1a4184b7c6fc89689ef481f9c3a5ea744afb24512d5befe542a7168a72f26b0361d619ca4f3937ab7f7b67f42c0b97f4e5766f5981e9f43ac023b89afa33b81d267ecd9d7a9db0"}, {0x10, 0x1d, 0x6975}, {0x38, 0x10b, 0xf, "e2acdc0507a08a3ee87f3bfd63e23e77a179bf671d3a6642ad08d8a40e9bb4ae30c5bcacc397"}, {0x20, 0x10d, 0x1, "9aeb7f023030c55cf7fb57caaea1"}, {0xc0, 0x118, 0x2, "226ee420f10ba5cef8b3fc5dca9460c2ee31a2549bf204d3915c0d4253d088358ca6989a2934197e3c0678b8b05b9e7ce107834042660c2a0c9d4db5ab1b47ed392bb1a72e83c29672931ef147b94bc4b61bc276054b6abefd68e548ab67d7327fc82900dd018e6c978b1aac0f71be2114181d9c6128541db6a0c8d619b736d7727ab042bf5e104afb2c1eac58b8d940d2f0eec52e4134d337f3bd898fbd81186e74e829dc1da7477154afd95ef3"}, {0x1010, 0x11, 0x2, "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"}, {0xc0, 0x118, 0x9, "ac24bb11e109b394016257ac2cc1d15723ba2aaa12bc61f5974cb060e65698650a7ef5a68bbe26684274c0f1d4f9fe2108989532af3f80cb76ad67f4789d6899b4f7f8f1e3148bc5a9d6f6835ca9e2dca8a67b2f25e56a98e0636194f53b33fc247985349cd8cc1d412ac93b9e3248528cc73612be04140cb6f6ec80aa7bb7e6eef951a863248d362d924bb08d7a0d1d16f200e7756280d0ce15ccc015e5bba84f92267e7b849338d1e7d73c86cb849a"}, {0xf8, 0xff, 0x5, "597f29959a08344adbeb7923c057195e90b896159521a842114fa3a2b54397fe98668b6e843c552fab7c87c340394569c357b24375d3ed9d340766a7ed0a2e9fd1ab517aaf2a073cf632cf83aecb11eb2fbff8cdf5b410cd3af7f5d03ce8fe28da63814c6435b88f57da767288a04b2a2deea4efc9edf99a51c917568654b6bd7803ed7f7b5ecb5e6ae8505532429454e328005279f0fbe53dab5af1a8093d56518115206636f840def96f1ac0ab46ce0350d99349dacbe5e49ba6ea757af87a3670c298dae20fd22c58c0862b2d3082c1eb4cf49ecdb022e9ab6ac893feed67c72fa3a719b843"}, {0xf8, 0x186, 0xcc, "c6a4a66b342ae236c30ca5052ff0b6c0702bf1f5ddefe947e8437ba552ef05c181a326db7e844336efd532661012d05f43dfc6d3338f140e465494bb15ea3b69e5b335b252187d0745286e208114cc63e9a6e9845f773968dac45b5baeb1276955f4bb3346936d96abb72d556e7d71317b11b540824145db8c2cf555bd09e491b4aa4bba8cea6f0bb78abafd1456bd71ebd2ad5723074cee017ef1780428f773ec7efda1f9689fe871e8c60925fe666799487bd7747dc76215ab3c19b0d48ba361627e679e0c83948fb218f33d7b0d435f742c782ced6b2c75d3ac66fb757385ed6ea5"}], 0x14a0}, 0x4048001)
r3 = socket(0x1, 0x803, 0x0)
mkdir(&(0x7f0000000000)='proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r4, &(0x7f0000000140)={0xa, 0x6, 0x1, @mcast2, 0x6}, 0x1c)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udp6\x00')
readv(r5, &(0x7f0000001700)=[{&(0x7f0000000000)=""/106, 0x6a}, {&(0x7f00000000c0)=""/151, 0x97}, {&(0x7f0000000600)=""/4096, 0x1000}], 0x3)
sendmsg(r4, &(0x7f00000000c0)={0x0, 0x9587, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0x5c8}], 0x1, 0x0, 0x0, 0x2c}, 0x4)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc/kallsyms\x00', 0x0, 0x0)
read(r6, &(0x7f0000000000), 0x10000)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=<r7=>0x0)
sched_setscheduler(r7, 0x2, &(0x7f0000000240)=0x1)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x30, 0x10, 0x403, 0x303, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_CARRIER={0x5, 0x21, 0x2}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x30}}, 0x8000)

2m33.634505629s ago: executing program 2 (id=441):
timer_create(0x9, 0x0, &(0x7f00000001c0))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
syz_io_uring_setup(0x37d3, 0x0, &(0x7f0000000440), &(0x7f0000000140), &(0x7f0000000180))
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0xd54895b78f6044ae)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, <r4=>0x0, <r5=>0x0, <r6=>0x0}, 0x2020)
write$FUSE_INIT(r3, &(0x7f0000000080)={0x50, 0x0, r4, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0xc00, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50)
r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18)
syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, 0x0)
syz_fuse_handle_req(r3, 0x0, 0x0, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x1d0, 0x0, 0x3, [{{0x4, 0x2, 0x28000, 0x8000000000000003, 0x9, 0x10001, {0x6, 0x9, 0x9, 0x101, 0x2, 0x0, 0x2, 0x4000001, 0x6, 0x6000, 0xde, r5, 0x0, 0xc, 0x80000000}}, {0x400000000000001, 0x8000, 0x1, 0x32540194, '\x01'}}, {{0x4, 0x3, 0x7ff, 0x7fffffffffffffff, 0xfff, 0x7ff, {0x3, 0x9, 0x3, 0x6, 0x7, 0x2, 0x2, 0x6, 0x7, 0x8000, 0x0, r5, r6, 0x1, 0x3}}, {0x4000000000, 0x7, 0x87, 0x300, '\x00\xbct\xaf?+\xa0\xbcM#\xeaI\xb3\xf4%\xd94Q\xfd~.\xbb\x01\vt\x0e\x86\xa7\xdf\xb8\xc3(*\xa6\xc5\xf6 \x82Kvd\x80ZP\xc6\x01\xd2L\xe6HQ1@\xd6\xfd\xb9\\\x83<A|\x7fb\xdaC\x86t\xde\xef\xc1\xd7t:}\xcf)~lQO}(\xb9\x9d2\xfeYy\xd42:\x83\xd0\x92R\xb2u\xb7\xba\x1f\xea@\xd7\x8fj\x0e\x88\r\x0f.\xea\f&(\xb1\x1eU,u\xb5mr\x86\x05\x0fj@\x1f\xf9Q\xea\xa7\xde\xe8v'}}]}, 0x0, 0x0, 0x0})
getdents64(r7, &(0x7f0000000100)=""/134, 0x86)

2m31.409891682s ago: executing program 2 (id=445):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
syz_emit_ethernet(0x4a, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x14, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0x7, 0x0, 0x3}}}}}}}, 0x0)
syz_emit_ethernet(0x50, &(0x7f0000000400)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x1a, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0xfffb, 0x0, 0x4ffd}, {"aaf52cc60cf6"}}}}}}}, 0x0)
syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8820, &(0x7f0000000240)=ANY=[], 0x1, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000500)='./file7\x00', 0x3000001, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, 0x0, 0x0, 0x2000008, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)

2m29.516695257s ago: executing program 2 (id=457):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002e40)=@newtaction={0x80, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x6c, 0x1, [@m_tunnel_key={0x38, 0x17, 0x0, 0x0, {{0xf}, {0x4}, {0x6, 0x6, 'vP'}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_vlan={0x30, 0xf, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x80}}, 0x0)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r1, 0x200, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x5}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040004}, 0x200080c5)

2m28.750014645s ago: executing program 2 (id=460):
r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81)
writev(r0, &(0x7f0000000380)=[{&(0x7f0000000100)="cfed", 0x2}, {0x0, 0x4000}], 0x2)

2m28.736166946s ago: executing program 32 (id=460):
r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81)
writev(r0, &(0x7f0000000380)=[{&(0x7f0000000100)="cfed", 0x2}, {0x0, 0x4000}], 0x2)

10.9362098s ago: executing program 1 (id=1292):
timer_create(0x9, 0x0, &(0x7f00000001c0))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
syz_io_uring_setup(0x37d3, 0x0, &(0x7f0000000440), &(0x7f0000000140), &(0x7f0000000180))
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0xd54895b78f6044ae)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
unshare(0x2040400)
timerfd_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, <r5=>0x0, <r6=>0x0, <r7=>0x0}, 0x2020)
write$FUSE_INIT(r4, &(0x7f0000000080)={0x50, 0x0, r5, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50)
r8 = eventfd2(0x0, 0x80001)
io_setup(0x2081, &(0x7f0000000400)=<r9=>0x0)
io_submit(r9, 0x2, &(0x7f0000000440)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0xffff, r8, 0x0, 0x0, 0x0, 0x0, 0x0, r8}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1fd, r8, 0x0, 0x0, 0x80, 0x0, 0x1, r8}])
read(r8, &(0x7f0000000040)=""/16, 0x10)
r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18)
syz_fuse_handle_req(r4, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, 0x0)
syz_fuse_handle_req(r4, 0x0, 0x0, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x1d0, 0x0, 0x3, [{{0x4, 0x2, 0x28000, 0x8000000000000003, 0x9, 0x10001, {0x6, 0x9, 0x9, 0x101, 0x2, 0x0, 0x2, 0x4000001, 0x6, 0x6000, 0xde, r6, 0x0, 0xc, 0x80000000}}, {0x400000000000001, 0x8000, 0x1, 0x32540194, '\x01'}}, {{0x4, 0x3, 0x7ff, 0x7fffffffffffffff, 0xfff, 0x7ff, {0x3, 0x9, 0x3, 0x6, 0x7, 0x2, 0x2, 0x6, 0x7, 0x8000, 0x0, r6, r7, 0x1, 0x3}}, {0x4000000000, 0x7, 0x87, 0x300, '\x00\xbct\xaf?+\xa0\xbcM#\xeaI\xb3\xf4%\xd94Q\xfd~.\xbb\x01\vt\x0e\x86\xa7\xdf\xb8\xc3(*\xa6\xc5\xf6 \x82Kvd\x80ZP\xc6\x01\xd2L\xe6HQ1@\xd6\xfd\xb9\\\x83<A|\x7fb\xdaC\x86t\xde\xef\xc1\xd7t:}\xcf)~lQO}(\xb9\x9d2\xfeYy\xd42:\x83\xd0\x92R\xb2u\xb7\xba\x1f\xea@\xd7\x8fj\x0e\x88\r\x0f.\xea\f&(\xb1\x1eU,u\xb5mr\x86\x05\x0fj@\x1f\xf9Q\xea\xa7\xde\xe8v'}}]}, 0x0, 0x0, 0x0})
getdents64(r10, &(0x7f0000000100)=""/134, 0x86)

9.715933189s ago: executing program 1 (id=1299):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x4000)
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0)
lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000001700)={{}, {}, [], {0x2, 0x4}, [], {0x2}, {0x2, 0x4}}, 0x24, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x0)
ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f0000000100)={0x2, 0xffffffff, 0x0, 0x2, 0x0, 0x80000000})

6.231923142s ago: executing program 1 (id=1311):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, 0x0, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r2=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x80}, 0x80)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r3=>0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup(r4)
syz_ublk_setup_queues(r5, r3, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c85, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x4003ffff, 0x338, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)

5.320330013s ago: executing program 1 (id=1314):
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fb57b43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xddd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x488}}, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
write$binfmt_elf64(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c4604040b00010000000000000003003e00ebfffffff00100000000000040000000000000000000000000000000000000002d8f38003b"], 0xcb)
close(r4)
inotify_add_watch(0xffffffffffffffff, &(0x7f00000006c0)='.\x00', 0xaa)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000)

3.722946231s ago: executing program 1 (id=1321):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x4000)
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0)
lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000001700)={{}, {}, [], {0x2, 0x4}, [], {0x2}, {0x2, 0x4}}, 0x24, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x0)
ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f0000000100)={0x2, 0xffffffff, 0x0, 0x2, 0x0, 0x80000000})

2.975846369s ago: executing program 4 (id=1325):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r2=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x80}, 0x80)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r3=>0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup(r4)
syz_ublk_setup_queues(r5, r3, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c85, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x4003ffff, 0x338, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)

2.805455803s ago: executing program 3 (id=1326):
epoll_create1(0x80000)
socket$can_bcm(0x1d, 0x2, 0x2)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
write$tun(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="443c86dd0001110004600000a60c6eec00be00442cfffe8000000000000000000000000000aaff020000000000000000000000000001", @ANYRES32=r0], 0xfdef)

2.727636385s ago: executing program 3 (id=1327):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001000000406a0516070000000000010902240001000090090904007e01030001000921c100400122280009058103200039c8008f3ea59eaf8f14a8bc76f9"], 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r2 = dup(r1)
ioctl$BLKRAGET(r2, 0xc4c03d12, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000080)={0x20, 0x22, 0x28, {0x28, 0xa, "c2631385269c2c3cbdeacc918d0fb74237cc6e442a52973661d6090055fa954bb1a35a1fd098"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

2.694452676s ago: executing program 5 (id=1329):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000004200)='/proc/tty/ldiscs\x00', 0x0, 0x0)
pread64(r0, &(0x7f0000002100)=""/171, 0xab, 0x9a)
syz_mount_image$f2fs(&(0x7f0000010240), &(0x7f00000006c0)='./mnt\x00', 0x320004a, &(0x7f0000000800)=ANY=[@ANYBLOB="746573745f64756d6d795f656e6372797074696f6e2c00f5267ef859bf3f5e7aeac83a266dbe5265b18513cf0d6f92c762754d21468964ae812a33c13f4e497ba5c077d4bb56bda51c99fafaa81facb632898549518e9e9d0185f8484b79eca8e1a1f51eaccc719e20a98792740b9423660c95e9bc05b38cd1302b1b17511f5cce9cbea836af9d8e71fe050000e3ef4864b661bb15cec3a7f56c569bb080316c6f61a11201573195d1e52c313eda8f49268e40b1f45ae26a11bccff6473e0710d9271094ad9908a9249cb69545394570a030bd86014aa75514fa2155783e0946f59ffbb89a26b246675f38b189009bd8431a2f19"], 0x1, 0x10221, &(0x7f0000030780)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x101142, 0xeaff)
write$uinput_user_dev(r1, &(0x7f0000000f80)={'syz0\x00', {0x2, 0x1ad8, 0x257, 0x42b}, 0x7, [0x9, 0x9, 0x9, 0x40, 0x6, 0x80, 0x5, 0x3, 0x5, 0x2, 0x6, 0x6, 0x8, 0x3, 0x80000001, 0xe748, 0x7ff, 0x83, 0x7, 0xf, 0xf7, 0xc, 0x3, 0x1, 0x349, 0x81, 0x1, 0x80000001, 0x5, 0xbb3, 0x40, 0x10, 0x40, 0x7, 0x0, 0x7, 0x5d35b0bb, 0x10000, 0x5, 0xf, 0x2, 0x0, 0x6c, 0x7, 0x400002, 0xc386, 0x7, 0x5, 0x8c68, 0x1, 0x9, 0x4, 0x8000000, 0x1, 0xf7, 0x5, 0xa31, 0x9, 0x9713479, 0x6, 0x5, 0x14, 0x9, 0x66], [0x4, 0x5, 0x7fffffff, 0xfffffffb, 0x80000001, 0x7, 0x2, 0xcb6, 0x2, 0x831, 0xc6, 0x5c15, 0x0, 0x8000, 0x2, 0x10000, 0x81, 0x1, 0x7, 0x4, 0x8, 0x7, 0x5625, 0x9, 0x5, 0x10, 0x3, 0x9, 0x40, 0x9, 0x400, 0x6, 0x200, 0x3, 0x0, 0x3, 0x489, 0xfffffffd, 0x1, 0x3, 0xbd, 0x4, 0xa, 0x3, 0x8, 0x5, 0x9, 0x81, 0x2, 0xf, 0x44, 0xf, 0x4, 0x5, 0x100, 0x1, 0x8947, 0x6, 0xcc60, 0x9, 0xfff, 0xc, 0x8, 0x800000], [0x6, 0xcf33, 0x2, 0x9, 0x0, 0x2, 0x347, 0x3, 0x200, 0x5, 0x7, 0x82, 0x9, 0x8, 0x1, 0x1, 0x2, 0x8, 0x7, 0x0, 0x12a4dbb0, 0x800, 0x2, 0xfffffc00, 0x0, 0x57c, 0x870, 0x309, 0x100, 0x0, 0x2, 0x26, 0xfc2, 0x5, 0x3, 0x4, 0x101, 0x7fffffff, 0x0, 0x1, 0x5, 0x6, 0x7fff, 0x10, 0x4, 0x4000, 0x101, 0x9, 0xd6d, 0x0, 0x8cea, 0x800, 0x2, 0x10000, 0x9, 0x2, 0x6, 0x4, 0x7, 0x6, 0xfffffffc, 0x0, 0xb, 0x800], [0xfffff001, 0x3, 0x9, 0x5, 0x3ff80000, 0x3, 0x8, 0x6, 0x5f8, 0x10, 0x0, 0x5, 0x33, 0x5c, 0x1, 0xe0ac, 0x7, 0x4, 0x0, 0x0, 0x5, 0x7, 0x3, 0x4, 0x5, 0x7fff, 0x5, 0x9, 0x3, 0x6, 0x1, 0x1000, 0x9, 0x6, 0x8001, 0x5, 0xff, 0xfffff79f, 0x5, 0x2a9a, 0x8001, 0x1, 0x6, 0x0, 0x31c, 0xb, 0x401, 0x7ff, 0xc8, 0x0, 0x6, 0x7, 0x5, 0x10, 0x9, 0x6, 0x42, 0x4b87, 0xb57b, 0x1, 0x1, 0x0, 0xf7, 0x10]}, 0x45c)
write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[], 0x74d)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0xc0185879, &(0x7f0000000000)={@desc={0x1, 0x0, @desc3}})
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', 0x0, 0x0, 0x0, 0x7)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_pidfd_open(0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x0, 0x1b8, 0xc8, 0xffffffff, 0xffffffff, 0xe8, 0x288, 0xc8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8)
ioctl$RTC_ALM_READ(r4, 0x40187014, &(0x7f0000000040))
setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, 0x0, 0x0)

2.266432046s ago: executing program 0 (id=1332):
bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[], 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8d}, 0x0)
ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(0xffffffffffffffff, 0x40786e88, &(0x7f00000013c0)={{&(0x7f00000015c0), 0x0, 0x40, 0x6}, {&(0x7f0000000140)=[{0x88, 0x3}, {0x5, 0x81}], 0x2, 0x10, 0x8}, {&(0x7f00000001c0)=[0x101, 0x4, 0x2, 0x6d68, 0x0, 0x1], 0x6, 0x8, 0x4, 0xccd}, {&(0x7f0000000280), 0x0, 0x28, 0xfff9, 0xf3b}, {&(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x1b, 0x0, 0x4], 0x5, 0x8, 0x7, 0xfcd}})
sched_setattr(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fb57b43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xddd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x488}}, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
write$binfmt_elf64(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c4604040b00010000000000000003003e00ebfffffff00100000000000040000000000000000000000000000000000000002d8f38003b"], 0xcb)
close(r4)
r5 = inotify_init1(0x80000)
inotify_add_watch(r5, &(0x7f00000006c0)='.\x00', 0xaa)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000)

1.868730555s ago: executing program 4 (id=1333):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)}, 0x80)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r0=>0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, 0x0, 0x0, &(0x7f0000000140))
r2 = dup(r1)
syz_ublk_setup_queues(r2, r0, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c85, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x4003ffff, 0x338}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) (fail_nth: 1)

1.403124877s ago: executing program 5 (id=1334):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x10}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000000840)=""/182}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES64=r5, @ANYRESHEX=r2, @ANYRES32=r3, @ANYRES64=r3, @ANYRESHEX=r2, @ANYRES16], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000180)=r6, 0x4)
sendmsg$inet(r8, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000)
fcntl$setstatus(r2, 0x4, 0x2c00)
write$FUSE_NOTIFY_POLL(r2, 0x0, 0x0)
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x90}, 0x80)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000400)={'ip6_vti0\x00'})
getsockopt$IP_VS_SO_GET_INFO(r10, 0x0, 0x481, &(0x7f0000000340), &(0x7f0000000380)=0xc)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x6, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300))
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140))
dup(r11)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r12 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r12, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r12, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)

1.301244079s ago: executing program 4 (id=1335):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r1=>0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0, &(0x7f0000000140)=<r6=>0x0)
syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r7=>0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = dup(r8)
syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x2000, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0xc0, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x800, 0x1, 0x0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x1, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x81000fff, 0x0, {}, 0x1f, 0x0, '\x00', {0x2, 0x4, 0x0, 0x0}}, 0x0)
r10 = dup(r2)
syz_ublk_setup_queues(r10, r1, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c85, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x4003ffff, 0x338}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)

1.291581759s ago: executing program 0 (id=1336):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x60}, 0x80)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0))
syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c85, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x4003ffff, 0x338}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)

1.212023291s ago: executing program 0 (id=1337):
r0 = inotify_init()
r1 = userfaultfd(0x1)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x270}) (async)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1}) (async)
r2 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x44}) (async)
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1})
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000390000/0x1000)=nil) (async)
close_range(r0, 0xffffffffffffffff, 0x0)

1.087636344s ago: executing program 0 (id=1338):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x78)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000005080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1b, 0x0, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)

1.087302174s ago: executing program 0 (id=1339):
timer_create(0x9, 0x0, &(0x7f00000001c0))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
syz_io_uring_setup(0x37d3, 0x0, &(0x7f0000000440), &(0x7f0000000140), &(0x7f0000000180))
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0xd54895b78f6044ae)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
unshare(0x2040400)
timerfd_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, <r3=>0x0, <r4=>0x0, <r5=>0x0}, 0x2020)
write$FUSE_INIT(r2, &(0x7f0000000080)={0x50, 0x0, r3, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50)
r6 = eventfd2(0x0, 0x80001)
io_setup(0x2081, &(0x7f0000000400)=<r7=>0x0)
io_submit(r7, 0x2, &(0x7f0000000440)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0xffff, r6, 0x0, 0x0, 0x0, 0x0, 0x0, r6}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1fd, r6, 0x0, 0x0, 0x80, 0x0, 0x1, r6}])
read(r6, &(0x7f0000000040)=""/16, 0x10)
r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18)
syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, 0x0)
syz_fuse_handle_req(r2, 0x0, 0x0, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x1d0, 0x0, 0x3, [{{0x4, 0x2, 0x28000, 0x8000000000000003, 0x9, 0x10001, {0x6, 0x9, 0x9, 0x101, 0x2, 0x0, 0x2, 0x4000001, 0x6, 0x6000, 0xde, r4, 0x0, 0xc, 0x80000000}}, {0x400000000000001, 0x8000, 0x1, 0x32540194, '\x01'}}, {{0x4, 0x3, 0x7ff, 0x7fffffffffffffff, 0xfff, 0x7ff, {0x3, 0x9, 0x3, 0x6, 0x7, 0x2, 0x2, 0x6, 0x7, 0x8000, 0x0, r4, r5, 0x1, 0x3}}, {0x4000000000, 0x7, 0x87, 0x300, '\x00\xbct\xaf?+\xa0\xbcM#\xeaI\xb3\xf4%\xd94Q\xfd~.\xbb\x01\vt\x0e\x86\xa7\xdf\xb8\xc3(*\xa6\xc5\xf6 \x82Kvd\x80ZP\xc6\x01\xd2L\xe6HQ1@\xd6\xfd\xb9\\\x83<A|\x7fb\xdaC\x86t\xde\xef\xc1\xd7t:}\xcf)~lQO}(\xb9\x9d2\xfeYy\xd42:\x83\xd0\x92R\xb2u\xb7\xba\x1f\xea@\xd7\x8fj\x0e\x88\r\x0f.\xea\f&(\xb1\x1eU,u\xb5mr\x86\x05\x0fj@\x1f\xf9Q\xea\xa7\xde\xe8v'}}]}, 0x0, 0x0, 0x0})
getdents64(r8, &(0x7f0000000100)=""/134, 0x86)

1.037198526s ago: executing program 5 (id=1340):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x70}, 0x80)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000300)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0))
syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c85, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x4003ffff, 0x338}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)

1.021939626s ago: executing program 5 (id=1341):
r0 = socket$inet6(0xa, 0x2, 0x3a)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e24, 0x1, @local, 0x9}, 0x1c)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x34}})
sendto$inet6(r0, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0)

962.078347ms ago: executing program 5 (id=1342):
r0 = socket$inet6(0xa, 0x2, 0x3a)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e24, 0x1, @local, 0x9}, 0x1c)
sendto$inet6(r0, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) (fail_nth: 7)

854.17318ms ago: executing program 3 (id=1343):
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000001080)=ANY=[@ANYBLOB="180000000000008004000000feffffff180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050000008500000006000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000009400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

840.28576ms ago: executing program 3 (id=1344):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r2=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x90}, 0x80)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r3=>0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = syz_ublk_setup_io_uring(0x1d, 0x0, &(0x7f0000000100)=<r6=>0x0, &(0x7f0000000280)=<r7=>0x0, &(0x7f0000000140)=<r8=>0x0)
syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r9=>0x0)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
r11 = dup(r10)
syz_ublk_setup_queues(r11, r9, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x2000, 0x10000004, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0xc0, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x800, 0x1, 0x0, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x1, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x81000fff, 0x0, {}, 0x1f, 0x0, '\x00', {0x2, 0x4, 0x0, 0x0}}, 0x0)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x81, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0xe, 0x6, @random="645bcc77540e"}, 0x14)
r12 = dup(r4)
syz_ublk_setup_queues(r12, r3, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c85, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x4003ffff, 0x338, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)

722.386143ms ago: executing program 3 (id=1345):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000140)=ANY=[@ANYBLOB="180800001bc81a000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000101180000000000000000000000000000009500000000000000360a000000000000180000002020782500000000002020207b1af8ff00000000bfa1fe000000000007010000f8ffffffb702000008000000b50a00002100000085000000060000009500000000000000679d5f7e38daabeca47abad3"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94)

665.846884ms ago: executing program 3 (id=1346):
bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[], 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8d}, 0x0)
ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(0xffffffffffffffff, 0x40786e88, &(0x7f00000013c0)={{&(0x7f00000015c0), 0x0, 0x40, 0x6}, {&(0x7f0000000140)=[{0x88, 0x3}, {0x5, 0x81}], 0x2, 0x10, 0x8}, {&(0x7f00000001c0)=[0x101, 0x4, 0x2, 0x6d68, 0x0, 0x1], 0x6, 0x8, 0x4, 0xccd}, {&(0x7f0000000280), 0x0, 0x28, 0xfff9, 0xf3b}, {&(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x1b, 0x0, 0x4], 0x5, 0x8, 0x7, 0xfcd}})
sched_setattr(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fb57b43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xddd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x488}}, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
write$binfmt_elf64(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c4604040b00010000000000000003003e00ebfffffff00100000000000040000000000000000000000000000000000000002d8f38003b"], 0xcb)
close(r4)
r5 = inotify_init1(0x80000)
inotify_add_watch(r5, &(0x7f00000006c0)='.\x00', 0xaa)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000)

625.999555ms ago: executing program 1 (id=1347):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100000000000001000000"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r2=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x90}, 0x80)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r3=>0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r6=>0x0, &(0x7f0000000280)=<r7=>0x0, &(0x7f0000000140)=<r8=>0x0)
syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r9=>0x0)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
r11 = dup(r10)
syz_ublk_setup_queues(r11, r9, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x2000, 0x10000004, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0xc0, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x800, 0x1, 0x0, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x1, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x81000fff, 0x0, {}, 0x1f, 0x0, '\x00', {0x2, 0x4, 0x0, 0x0}}, 0x0)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x81, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0xe, 0x6, @random="645bcc77540e"}, 0x14)
r12 = dup(r4)
syz_ublk_setup_queues(r12, r3, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c85, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x4003ffff, 0x338, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)

607.076836ms ago: executing program 4 (id=1348):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r2=>0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x78}, 0x80)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r3=>0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup(r4)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0))
syz_ublk_setup_queues(r5, r3, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c85, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x4003ffff, 0x338, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)

606.781366ms ago: executing program 5 (id=1349):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)={0x2, 0x0, [{0x0, 0x5d, &(0x7f00000025c0)=""/93}, {0xdddd1000, 0xea, &(0x7f0000000400)=""/234}]})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/182, &(0x7f0000000140)=""/92})
prlimit64(0x0, 0xb, &(0x7f0000001540)={0x6, 0x100000001}, &(0x7f0000001580))
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000001500)={@my=0x1})
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001"], 0x64}}, 0x40110)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @auto="83800377591dd55c"}})
connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x40000, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r3, @ANYBLOB="0100000000000000000001000000060006000000000014000200776730000000000000000000000000008800088084000080060005000000000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff5400098028dfff7f060001000a00000014000200ff020000000000000000000000000001050003000000000028000080060001000a00000014000200ff0200000000000000000000000000010500030001000000080007"], 0xc0}}, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x0, 0x4)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)

261.357434ms ago: executing program 4 (id=1350):
r0 = socket$inet6(0xa, 0x2, 0x3a)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e24, 0x1, @local, 0x9}, 0x1c)
sendto$inet6(r0, &(0x7f0000000080)="80f537bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0)

33.993149ms ago: executing program 4 (id=1351):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x70}, 0x80)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000300)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0))
syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c85, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x4003ffff, 0x338}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)

0s ago: executing program 0 (id=1352):
r0 = syz_ublk_setup_io_uring(0x187, &(0x7f00000002c0)={0x0, 0x1a1c, 0x400, 0x1, 0x3c7}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100))
fcntl$dupfd(r0, 0x406, r0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
membarrier(0x10, 0x0)
syz_usb_connect(0x1, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="1201ff0133c7a408b4043168ab2c01020301090224000101cec0150904"], &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
r1 = add_key$fscrypt_v1(&(0x7f0000000640), 0x0, 0x0, 0x0, 0xffffffffffffffff)
keyctl$set_timeout(0xf, r1, 0x80000000)
r2 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
setuid(0xee00)
rt_sigqueueinfo(r2, 0x21, &(0x7f0000000ac0)={0x0, 0x9, 0xfffffffe})
openat$zero(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000300)={0x2, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000800))
r4 = eventfd2(0x1, 0x80001)
ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f00000001c0)={0x0, r4})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000400)=""/196, 0x0, 0xeeee0000})
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000000)={0x0, r4})
ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000140)={@my=0x1})
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001800)='./file0\x00', 0x3, &(0x7f0000000000)={[{@nombcache}, {@nobarrier}, {@norecovery}, {@acl}, {@grpid}]}, 0x8, 0x638, &(0x7f0000000140)="$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")
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100280000000000000004000000200001800d000100"], 0x34}}, 0x4040)
socket$vsock_stream(0x28, 0x1, 0x0)
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x1000000, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x101042, 0x15)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5})

kernel console output (not intermixed with test programs):

data_blocks=1196
[  165.657270][  T289] EXT4-fs (loop0): unmounting filesystem.
[  166.637454][   T28] audit: type=1400 audit(1784975080.933:2744): avc:  denied  { write } for  pid=3725 comm="syz.4.806" name="wireless" dev="proc" ino=4026532644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  166.640685][ T3727] tipc: Can't bind to reserved service type 0
[  166.697634][   T28] audit: type=1400 audit(1784975080.943:2745): avc:  denied  { bind } for  pid=3725 comm="syz.4.806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  166.733207][ T3727] netlink: 20 bytes leftover after parsing attributes in process `syz.4.806'.
[  167.048738][ T3757] loop3: detected capacity change from 0 to 256
[  167.080310][ T3757] exfat: Deprecated parameter 'namecase'
[  167.089952][ T3757] exfat: Deprecated parameter 'namecase'
[  167.095688][ T3757] exfat: Deprecated parameter 'namecase'
[  167.101665][ T3757] exfat: Bad value for 'uid'
[  169.892639][ T3776] loop5: detected capacity change from 0 to 512
[  169.899271][ T3776] EXT4-fs: Invalid want_extra_isize 7
[  169.932739][  T901] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  170.021302][ T3813] netlink: 8 bytes leftover after parsing attributes in process `syz.3.823'.
[  170.040901][ T3813] incfs: Unexpected inode type
[  170.100476][ T3825] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3825 comm=syz.0.829
[  170.114907][ T3825] device ip6gretap1 entered promiscuous mode
[  170.159228][ T3825] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3825 comm=syz.0.829
[  170.442905][ T3839] loop0: detected capacity change from 0 to 128
[  170.443948][ T3832] loop3: detected capacity change from 0 to 512
[  170.455741][ T3832] EXT4-fs: Invalid want_extra_isize 7
[  170.482871][ T3839] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  170.498721][ T3839] ext4 filesystem being mounted at /179/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  170.588096][  T289] EXT4-fs (loop0): unmounting filesystem.
[  170.604470][ T3842] loop1: detected capacity change from 0 to 256
[  170.620705][ T3842] exfat: Deprecated parameter 'namecase'
[  170.627082][ T3842] exfat: Deprecated parameter 'namecase'
[  170.654836][ T3842] exfat: Deprecated parameter 'namecase'
[  170.665727][ T3842] exfat: Bad value for 'uid'
[  172.230656][ T3853] netlink: 4 bytes leftover after parsing attributes in process `syz.5.834'.
[  173.446434][  T360] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  173.575153][  T301] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  173.610018][ T3884] fuse: Bad value for 'user_id'
[  173.621897][ T3884] loop3: detected capacity change from 0 to 2048
[  173.646506][ T3884] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  173.655496][ T3884] ext4 filesystem being mounted at /167/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  173.678467][   T28] audit: type=1400 audit(1784975087.973:2746): avc:  denied  { rename } for  pid=3882 comm="syz.3.843" name="file0" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  173.700576][   T28] audit: type=1400 audit(1784975087.973:2747): avc:  denied  { reparent } for  pid=3882 comm="syz.3.843" name="file0" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  173.723491][  T360] usb 2-1: config 220 has an invalid interface number: 76 but max is 2
[  173.740033][   T28] audit: type=1400 audit(1784975087.973:2748): avc:  denied  { reparent } for  pid=3882 comm="syz.3.843" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  173.760891][  T301] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  173.763027][  T360] usb 2-1: config 220 has an invalid descriptor of length 64, skipping remainder of the config
[  173.772517][  T301] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  173.782938][  T360] usb 2-1: config 220 has no interface number 2
[  173.791822][  T301] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  173.798194][  T360] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  173.807039][  T301] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.821114][  T360] usb 2-1: config 220 interface 0 has no altsetting 0
[  173.831740][  T301] usb 1-1: config 0 descriptor??
[  173.839820][  T360] usb 2-1: config 220 interface 76 has no altsetting 0
[  173.846726][  T360] usb 2-1: config 220 interface 1 has no altsetting 0
[  173.854910][  T360] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  173.864009][  T360] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  173.872019][  T360] usb 2-1: Product: syz
[  173.876209][  T360] usb 2-1: Manufacturer: syz
[  173.880839][  T360] usb 2-1: SerialNumber: syz
[  174.092292][  T360] usb 2-1: Found UVC 7.01 device syz (8086:0b07)
[  174.098661][  T360] usb 2-1: No valid video chain found.
[  174.104604][  T360] usb 2-1: selecting invalid altsetting 0
[  174.115982][  T360] usb 2-1: USB disconnect, device number 15
[  174.242895][  T301] usb 1-1: string descriptor 0 read error: -71
[  174.251631][  T301] usb 1-1: USB disconnect, device number 15
[  174.322275][  T288] EXT4-fs (loop3): unmounting filesystem.
[  174.761183][ T3932] netlink: 4 bytes leftover after parsing attributes in process `syz.4.856'.
[  175.077590][ T3927] loop3: detected capacity change from 0 to 40427
[  175.095679][ T3927] F2FS-fs (loop3): invalid crc value
[  175.106061][ T3942] loop0: detected capacity change from 0 to 256
[  175.116673][ T3927] F2FS-fs (loop3): Found nat_bits in checkpoint
[  175.145449][ T3942] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d)
[  175.162574][ T3927] F2FS-fs (loop3): Start checkpoint disabled!
[  175.174474][ T3927] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0
[  175.189871][ T3927] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  175.653363][   T28] audit: type=1400 audit(1784975089.943:2749): avc:  denied  { ioctl } for  pid=3926 comm="syz.3.855" path="/174/file0/file1" dev="loop3" ino=14 ioctlcmd=0xf50d scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  175.668941][ T3927] F2FS-fs (loop3): ino:14, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled
[  175.769224][ T1605] bio_check_eod: 2027 callbacks suppressed
[  175.769239][ T1605] kworker/u4:224: attempt to access beyond end of device
[  175.769239][ T1605] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  175.879293][ T3964] fuse: Unknown parameter '0xffffffffffffffff0x00000000000000050xffffffffffffffff0000000000000000000000000000000000000004'
[  175.899893][   T28] audit: type=1400 audit(1784975090.193:2750): avc:  denied  { create } for  pid=3963 comm="syz.3.865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  175.920886][   T28] audit: type=1400 audit(1784975090.193:2751): avc:  denied  { setopt } for  pid=3963 comm="syz.3.865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  175.945833][   T28] audit: type=1400 audit(1784975090.193:2752): avc:  denied  { write } for  pid=3963 comm="syz.3.865" path="socket:[34093]" dev="sockfs" ino=34093 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  176.002580][ T3977] fuse: Bad value for 'fd'
[  176.019062][ T3979] loop3: detected capacity change from 0 to 16
[  176.129706][ T3979] erofs: (device loop3): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 25144)
[  176.293500][ T3982] loop1: detected capacity change from 0 to 512
[  176.493075][ T3982] EXT4-fs: Ignoring removed i_version option
[  176.622528][ T3982] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  176.786666][ T3982] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  176.924183][ T3983] loop3: detected capacity change from 0 to 4096
[  176.949790][ T3982] EXT4-fs (loop1): orphan cleanup on readonly fs
[  176.985706][ T3982] Quota error (device loop1): v2_read_file_info: Free block number 1 out of range (1, 6).
[  176.998160][ T3982] EXT4-fs warning (device loop1): ext4_enable_quotas:7080: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  177.005721][ T3983] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  177.033851][ T3982] EXT4-fs (loop1): Cannot turn on quotas: error -117
[  177.041195][ T3982] EXT4-fs error (device loop1): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  177.062234][ T3983] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a800e018, mo2=0002]
[  177.070557][ T3982] EXT4-fs (loop1): 1 truncate cleaned up
[  177.072532][ T3983] System zones: 0-5
[  177.076245][ T3982] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  177.081259][ T3983] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  177.108363][  T287] EXT4-fs (loop1): unmounting filesystem.
[  177.115936][   T28] audit: type=1400 audit(1784975091.413:2753): avc:  denied  { setattr } for  pid=3978 comm="syz.3.870" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  177.224473][   T28] audit: type=1400 audit(1784975091.523:2754): avc:  denied  { getattr } for  pid=3994 comm="iou-wrk-4001" name="[io_uring]" dev="anon_inodefs" ino=34197 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  177.304347][  T480] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  177.609439][  T288] EXT4-fs (loop3): unmounting filesystem.
[  177.669741][  T480] usb 1-1: Using ep0 maxpacket: 8
[  177.675955][  T480] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[  177.676800][ T4015] loop3: detected capacity change from 0 to 512
[  177.701071][  T480] usb 1-1: config 179 has no interface number 0
[  177.727591][  T480] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  177.736338][ T4015] EXT4-fs: Ignoring removed i_version option
[  177.768580][ T4015] I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[  177.769677][  T480] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  177.788608][ T4015] EXT4-fs (loop3): unable to read superblock
[  177.826006][ T4018] fuse: Bad value for 'fd'
[  177.839034][  T480] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  177.869101][  T480] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  177.907887][ T4024] loop5: detected capacity change from 0 to 256
[  177.914491][ T4024] exfat: Deprecated parameter 'namecase'
[  177.920388][ T4024] exfat: Deprecated parameter 'namecase'
[  177.926033][ T4024] exfat: Deprecated parameter 'namecase'
[  177.931710][ T4024] exfat: Bad value for 'uid'
[  177.950916][  T480] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  177.979639][  T480] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  178.062953][  T480] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  178.072368][ T3991] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  178.123452][ T4035] loop4: detected capacity change from 0 to 1024
[  178.318017][ T4035] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  178.514833][ T4035] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945)
[  178.685031][   T28] kauditd_printk_skb: 3 callbacks suppressed
[  178.685053][   T28] audit: type=1400 audit(1784975092.983:2758): avc:  denied  { map } for  pid=3990 comm="syz.0.874" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  178.757615][ T4035] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  178.911544][ T4035] EXT4-fs (loop4): orphan cleanup on readonly fs
[  178.975760][ T4040] netlink: 4 bytes leftover after parsing attributes in process `syz.0.874'.
[  178.990862][   T28] audit: type=1400 audit(1784975093.293:2759): avc:  denied  { getopt } for  pid=4041 comm="syz.5.887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  179.007239][ T4035] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #3: comm syz.4.886: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 2(4), depth 0(0)
[  179.034761][ T4035] EXT4-fs error (device loop4): ext4_quota_enable:7039: comm syz.4.886: Bad quota inode: 3, type: 0
[  179.046017][ T4035] EXT4-fs warning (device loop4): ext4_enable_quotas:7080: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  179.060847][ T4035] EXT4-fs (loop4): Cannot turn on quotas: error -117
[  179.067953][ T4035] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  179.142922][ T4035] EXT4-fs error (device loop4): ext4_lookup:1858: inode #16: comm syz.4.886: iget: bad i_size value: 281474976719656
[  179.299750][  T320] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  179.439883][  T301] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  179.449418][ T4050] loop1: detected capacity change from 0 to 4096
[  179.457758][ T4050] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  179.467673][ T4050] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a800e018, mo2=0002]
[  179.475903][ T4050] System zones: 0-5
[  179.479788][  T320] usb 4-1: Using ep0 maxpacket: 16
[  179.486168][ T4050] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  179.495283][  T320] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  179.507478][  T320] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  179.517413][  T320] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  179.530388][  T320] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  179.539414][  T320] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  179.549448][  T320] usb 4-1: config 0 descriptor??
[  179.640848][  T301] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  179.653356][  T301] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  179.662766][  T301] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  179.670823][  T301] usb 5-1: Product: syz
[  179.871666][  T301] usb 5-1: Manufacturer: syz
[  179.876314][  T301] usb 5-1: SerialNumber: syz
[  180.125348][  T321] usb 1-1: USB disconnect, device number 16
[  180.131314][    C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  180.131349][    C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  180.184451][  T320] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.001A/input/input20
[  180.224020][ T4062] fuse: Bad value for 'fd'
[  180.260625][  T320] microsoft 0003:045E:07DA.001A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0
[  180.330352][  T287] EXT4-fs (loop1): unmounting filesystem.
[  180.361956][ T4066] loop0: detected capacity change from 0 to 256
[  180.368590][ T4066] exfat: Deprecated parameter 'namecase'
[  180.374274][ T4066] exfat: Deprecated parameter 'namecase'
[  180.379926][ T4066] exfat: Deprecated parameter 'namecase'
[  180.385563][ T4066] exfat: Bad value for 'uid'
[  180.452090][  T320] usb 4-1: USB disconnect, device number 16
[  180.493669][ T4067] fido_id[4067]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  182.610253][ T4100] loop3: detected capacity change from 0 to 16
[  182.662003][ T4100] erofs: (device loop3): mounted with root inode @ nid 36.
[  183.411950][ T4132] netlink: 4 bytes leftover after parsing attributes in process `syz.3.910'.
[  183.503306][  T301] cdc_ncm 5-1:1.0: bind() failure
[  183.586480][  T291] EXT4-fs (loop4): unmounting filesystem.
[  183.678255][  T301] cdc_ncm: probe of 5-1:1.1 failed with error -71
[  183.724913][  T301] cdc_mbim: probe of 5-1:1.1 failed with error -71
[  183.742617][  T301] usb 5-1: USB disconnect, device number 13
[  185.443095][ T4154] loop4: detected capacity change from 0 to 256
[  185.451219][ T4154] exfat: Deprecated parameter 'namecase'
[  185.456999][ T4154] exfat: Deprecated parameter 'namecase'
[  185.462690][ T4154] exfat: Deprecated parameter 'namecase'
[  185.468378][ T4154] exfat: Bad value for 'uid'
[  185.579022][  T901] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  185.670851][   T28] audit: type=1400 audit(1784975099.973:2760): avc:  denied  { setopt } for  pid=4172 comm="syz.1.922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  185.781743][ T4177] loop0: detected capacity change from 0 to 256
[  185.862746][  T901] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  186.410047][  T301] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  187.399941][ T4199] netlink: 4 bytes leftover after parsing attributes in process `syz.4.929'.
[  187.814478][ T4224] loop5: detected capacity change from 0 to 256
[  187.821166][ T4224] exfat: Deprecated parameter 'namecase'
[  187.826849][ T4224] exfat: Deprecated parameter 'namecase'
[  187.832539][ T4224] exfat: Deprecated parameter 'namecase'
[  187.838174][ T4224] exfat: Bad value for 'uid'
[  187.891733][  T301] usb 2-1: Using ep0 maxpacket: 16
[  187.896031][  T901] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  187.905099][  T301] usb 2-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  187.921175][  T301] usb 2-1: config 0 interface 0 has no altsetting 0
[  187.929870][  T301] usb 2-1: New USB device found, idVendor=6666, idProduct=8802, bcdDevice= 0.00
[  187.939982][  T301] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  187.950638][  T301] usb 2-1: config 0 descriptor??
[  188.129709][  T508] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  188.324551][  T508] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[  188.335286][  T508] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[  188.349231][  T508] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  188.359863][  T508] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  188.374578][  T508] usb 5-1: config 0 descriptor??
[  188.385156][  T508] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  188.515471][ T4257] loop0: detected capacity change from 0 to 256
[  188.549477][ T4259] loop5: detected capacity change from 0 to 4096
[  188.557784][ T4259] EXT4-fs (loop5): Test dummy encryption mode enabled
[  188.565932][  T301] usbhid 2-1:0.0: can't add hid device: -71
[  188.572249][  T301] usbhid: probe of 2-1:0.0 failed with error -71
[  188.572605][  T322] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  188.587092][  T301] usb 2-1: USB disconnect, device number 16
[  188.598903][ T4259] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  188.612570][   T28] audit: type=1400 audit(1784975102.913:2761): avc:  denied  { map } for  pid=4258 comm="syz.5.942" path="/106/file0/file2" dev="loop5" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  188.636828][   T28] audit: type=1400 audit(1784975102.923:2762): avc:  denied  { append } for  pid=4258 comm="syz.5.942" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  188.660333][ T2443] EXT4-fs (loop5): unmounting filesystem.
[  189.852823][ T4276] netlink: 4 bytes leftover after parsing attributes in process `syz.3.945'.
[  189.968088][ T4278] netlink: 4 bytes leftover after parsing attributes in process `syz.1.947'.
[  190.379694][ T4270] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  190.561619][ T4270] usb 6-1: Using ep0 maxpacket: 16
[  190.571909][ T4270] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  190.582806][ T4270] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  190.592767][ T4270] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  190.605562][ T4270] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  190.614664][ T4270] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  190.632712][ T4270] usb 6-1: config 0 descriptor??
[  190.638926][ T4301] loop3: detected capacity change from 0 to 256
[  190.645541][ T4301] exfat: Deprecated parameter 'namecase'
[  190.651219][ T4301] exfat: Deprecated parameter 'namecase'
[  190.656860][ T4301] exfat: Deprecated parameter 'namecase'
[  190.662537][ T4301] exfat: Bad value for 'uid'
[  190.773626][  T301] usb 5-1: USB disconnect, device number 14
[  191.351923][ T4326] loop1: detected capacity change from 0 to 256
[  191.413034][  T322] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  194.194654][ T4354] netlink: 4 bytes leftover after parsing attributes in process `syz.0.961'.
[  194.584601][ T4270] usbhid 6-1:0.0: can't add hid device: -71
[  194.603255][ T4365] loop4: detected capacity change from 0 to 4096
[  194.610324][ T4270] usbhid: probe of 6-1:0.0 failed with error -71
[  194.619269][ T4270] usb 6-1: USB disconnect, device number 7
[  194.634515][ T4365] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  194.709962][ T4375] loop5: detected capacity change from 0 to 256
[  194.716508][ T4375] exfat: Deprecated parameter 'namecase'
[  194.722889][ T4375] exfat: Deprecated parameter 'namecase'
[  194.728964][ T4375] exfat: Deprecated parameter 'namecase'
[  194.729825][  T530] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  194.735080][ T4375] exfat: Bad value for 'uid'
[  195.240901][  T530] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  195.251117][  T530] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[  195.264188][  T530] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  195.273267][  T530] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  195.281782][  T530] usb 2-1: config 0 descriptor??
[  195.287514][  T530] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  195.412903][  T291] EXT4-fs (loop4): unmounting filesystem.
[  195.519460][ T4387] loop4: detected capacity change from 0 to 256
[  196.339227][ T4393] netlink: 4 bytes leftover after parsing attributes in process `syz.0.973'.
[  196.519774][  T901] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  196.550856][ T4398] loop3: detected capacity change from 0 to 1024
[  196.578729][ T4398] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  196.589540][ T4398] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945)
[  196.611337][ T4398] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  196.628356][ T4398] EXT4-fs (loop3): orphan cleanup on readonly fs
[  196.649901][ T4398] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #3: comm syz.3.974: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 2(4), depth 0(0)
[  196.689665][ T4398] EXT4-fs error (device loop3): ext4_quota_enable:7039: comm syz.3.974: Bad quota inode: 3, type: 0
[  196.701528][ T4415] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  196.709782][ T4398] EXT4-fs warning (device loop3): ext4_enable_quotas:7080: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  196.724477][ T4398] EXT4-fs (loop3): Cannot turn on quotas: error -117
[  196.731541][ T4398] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  196.751361][ T4398] EXT4-fs error (device loop3): ext4_lookup:1858: inode #16: comm syz.3.974: iget: bad i_size value: 281474976719656
[  197.844002][ T4425] loop4: detected capacity change from 0 to 256
[  197.850659][ T4425] exfat: Deprecated parameter 'namecase'
[  197.856310][ T4425] exfat: Deprecated parameter 'namecase'
[  197.861970][ T4425] exfat: Deprecated parameter 'namecase'
[  197.867600][ T4425] exfat: Bad value for 'uid'
[  198.726925][ T4270] usb 2-1: USB disconnect, device number 17
[  198.734407][  T901] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  198.879635][    T6] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  199.787897][  T288] EXT4-fs (loop3): unmounting filesystem.
[  200.499166][ T4484] loop5: detected capacity change from 0 to 256
[  200.505582][ T4465] loop1: detected capacity change from 0 to 40427
[  200.511753][ T4465] F2FS-fs (loop1): Invalid segment/section count (24 != 24 * 5)
[  200.512474][ T4484] exfat: Deprecated parameter 'namecase'
[  200.525437][ T4484] exfat: Deprecated parameter 'namecase'
[  200.531103][ T4484] exfat: Deprecated parameter 'namecase'
[  200.532828][ T4465] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  200.536758][ T4484] exfat: Bad value for 'uid'
[  200.545234][ T4465] F2FS-fs (loop1): Image doesn't support compression
[  200.558246][ T4465] F2FS-fs (loop1): Image doesn't support compression
[  200.565553][ T4465] F2FS-fs (loop1): invalid crc value
[  200.576068][ T4465] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  200.600882][ T4465] F2FS-fs (loop1): Start checkpoint disabled!
[  200.607374][ T4465] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0
[  200.615733][    T6] usb 4-1: device not accepting address 17, error -71
[  200.627900][ T4465] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  200.635012][ T4465] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  200.694642][ T4492] loop1: detected capacity change from 0 to 1024
[  200.701681][ T4492] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  200.710673][ T4492] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945)
[  200.720710][ T4492] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  200.729053][ T4492] EXT4-fs (loop1): orphan cleanup on readonly fs
[  200.735625][ T4492] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #3: comm syz.1.1000: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 2(4), depth 0(0)
[  200.753759][ T4492] EXT4-fs error (device loop1): ext4_quota_enable:7039: comm syz.1.1000: Bad quota inode: 3, type: 0
[  200.765018][ T4492] EXT4-fs warning (device loop1): ext4_enable_quotas:7080: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  200.779712][ T4492] EXT4-fs (loop1): Cannot turn on quotas: error -117
[  200.786424][ T4492] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  200.827469][ T4492] EXT4-fs error (device loop1): ext4_lookup:1858: inode #16: comm syz.1.1000: iget: bad i_size value: 281474976719656
[  201.109629][   T60] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  201.301206][   T60] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  201.313395][   T60] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  201.322528][   T60] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  201.330556][   T60] usb 2-1: Product: syz
[  201.334783][   T60] usb 2-1: Manufacturer: syz
[  201.339471][   T60] usb 2-1: SerialNumber: syz
[  201.369687][   T24] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  201.549715][   T24] usb 1-1: Using ep0 maxpacket: 8
[  201.567656][   T24] usb 1-1: config 32 has an invalid interface number: 128 but max is 0
[  201.648829][   T24] usb 1-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config
[  201.703947][   T24] usb 1-1: config 32 has no interface number 0
[  201.711361][   T24] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[  201.721561][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  201.884696][   T24] hub 1-1:32.128: bad descriptor, ignoring hub
[  201.970581][   T24] hub: probe of 1-1:32.128 failed with error -5
[  202.209588][   T28] audit: type=1400 audit(1784975116.503:2763): avc:  denied  { getopt } for  pid=4518 comm="syz.0.1005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  202.280879][   T24] usb 1-1: USB disconnect, device number 17
[  202.295389][ T4534] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1009'.
[  202.622464][ T4539] loop5: detected capacity change from 0 to 512
[  202.629064][ T4539] EXT4-fs: Invalid want_extra_isize 7
[  202.680659][  T322] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  203.469147][ T4548] loop4: detected capacity change from 0 to 512
[  203.475838][ T4548] EXT4-fs: Invalid want_extra_isize 7
[  204.006395][ T4566] loop4: detected capacity change from 0 to 256
[  204.013424][ T4566] exfat: Deprecated parameter 'namecase'
[  204.019102][ T4566] exfat: Deprecated parameter 'namecase'
[  204.024769][ T4566] exfat: Deprecated parameter 'namecase'
[  204.030424][ T4566] exfat: Bad value for 'uid'
[  204.070025][  T322] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  204.457014][ T4569] loop0: detected capacity change from 0 to 512
[  204.463688][ T4569] EXT4-fs: Invalid want_extra_isize 7
[  204.510737][  T322] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  205.738054][   T28] audit: type=1400 audit(1784975120.033:2764): avc:  denied  { append } for  pid=4586 comm="syz.4.1024" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  205.806883][   T28] audit: type=1326 audit(1784975120.083:2765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4581 comm="syz.5.1023" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fac9ab9de99 code=0x0
[  205.866095][   T28] audit: type=1326 audit(1784975120.093:2766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4581 comm="syz.5.1023" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fac9ab9de99 code=0x0
[  205.890629][   T28] audit: type=1326 audit(1784975120.093:2767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4581 comm="syz.5.1023" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fac9ab9de99 code=0x0
[  205.915017][   T28] audit: type=1326 audit(1784975120.093:2768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4581 comm="syz.5.1023" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7fac9ab97c17 code=0x0
[  205.939462][   T28] audit: type=1326 audit(1784975120.133:2769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4581 comm="syz.5.1023" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fac9ab9de99 code=0x0
[  206.242620][ T4593] loop0: detected capacity change from 0 to 512
[  206.249252][ T4593] EXT4-fs: Invalid want_extra_isize 7
[  206.367517][   T60] cdc_ncm 2-1:1.0: bind() failure
[  206.384639][   T60] cdc_ncm: probe of 2-1:1.1 failed with error -71
[  206.396608][   T60] cdc_mbim: probe of 2-1:1.1 failed with error -71
[  206.416476][   T60] usb 2-1: USB disconnect, device number 18
[  206.433822][ T4602] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1026'.
[  208.309237][  T287] EXT4-fs (loop1): unmounting filesystem.
[  208.391754][ T4613] FAULT_INJECTION: forcing a failure.
[  208.391754][ T4613] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  208.420043][ T4613] CPU: 0 PID: 4613 Comm: syz.0.1028 Not tainted syzkaller #0
[  208.427620][ T4613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  208.437680][ T4613] Call Trace:
[  208.440954][ T4613]  <TASK>
[  208.443883][ T4613]  __dump_stack+0x21/0x24
[  208.448216][ T4613]  dump_stack_lvl+0x110/0x170
[  208.452894][ T4613]  ? __cfi_dump_stack_lvl+0x8/0x8
[  208.457921][ T4613]  dump_stack+0x15/0x24
[  208.462073][ T4613]  should_fail_ex+0x3bf/0x510
[  208.466738][ T4613]  should_fail+0xb/0x10
[  208.470871][ T4613]  should_fail_usercopy+0x1a/0x20
[  208.475876][ T4613]  _copy_to_user+0x1e/0x90
[  208.480275][ T4613]  simple_read_from_buffer+0xe9/0x160
[  208.485638][ T4613]  proc_fail_nth_read+0x1a6/0x220
[  208.490642][ T4613]  ? __cfi_proc_fail_nth_read+0x10/0x10
[  208.496168][ T4613]  ? security_file_permission+0x94/0xb0
[  208.501696][ T4613]  ? __cfi_proc_fail_nth_read+0x10/0x10
[  208.507228][ T4613]  vfs_read+0x286/0x930
[  208.511365][ T4613]  ? __cfi_vfs_read+0x10/0x10
[  208.516022][ T4613]  ? __kasan_check_write+0x14/0x20
[  208.521114][ T4613]  ? mutex_lock+0x93/0x1b0
[  208.525513][ T4613]  ? __cfi_mutex_lock+0x10/0x10
[  208.530348][ T4613]  ? __fdget_pos+0x2cd/0x380
[  208.534916][ T4613]  ? ksys_read+0x70/0x260
[  208.539223][ T4613]  ksys_read+0x14a/0x260
[  208.543446][ T4613]  ? __cfi_ksys_read+0x10/0x10
[  208.548187][ T4613]  ? debug_smp_processor_id+0x17/0x20
[  208.553538][ T4613]  __x64_sys_read+0x7b/0x90
[  208.558024][ T4613]  x64_sys_call+0x2f/0x9a0
[  208.562422][ T4613]  do_syscall_64+0x4c/0xa0
[  208.566820][ T4613]  ? clear_bhb_loop+0x30/0x80
[  208.571473][ T4613]  ? clear_bhb_loop+0x30/0x80
[  208.576127][ T4613]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  208.582001][ T4613] RIP: 0033:0x7f5ffed5e6ce
[  208.586395][ T4613] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  208.605981][ T4613] RSP: 002b:00007f5fffd0afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  208.614377][ T4613] RAX: ffffffffffffffda RBX: 00007f5fffd0b6c0 RCX: 00007f5ffed5e6ce
[  208.622329][ T4613] RDX: 000000000000000f RSI: 00007f5fffd0b0a0 RDI: 0000000000000003
[  208.630278][ T4613] RBP: 00007f5fffd0b090 R08: 0000000000000000 R09: 0000000000000000
[  208.638230][ T4613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  208.646182][ T4613] R13: 00007f5fff026038 R14: 00007f5fff025fa0 R15: 00007ffd89d22f08
[  208.654134][ T4613]  </TASK>
[  208.657223][  T715] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[  208.667029][  T715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  208.678780][  T715] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[  208.687547][  T715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  208.721610][  T715] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  208.744726][  T715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  208.768906][  T715] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  208.797679][  T715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  208.912460][   T28] audit: type=1400 audit(1784975123.213:2770): avc:  denied  { load_policy } for  pid=4622 comm="syz.0.1033" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  208.927199][ T4623] SELinux: ebitmap: truncated map
[  208.943236][ T4623] SELinux: failed to load policy
[  208.977931][ T4634] binder: 4627:4634 ioctl c0306201 200000000000 returned -14
[  209.031465][ T4639] loop0: detected capacity change from 0 to 256
[  209.038101][ T4639] exfat: Deprecated parameter 'namecase'
[  209.043996][ T4639] exfat: Deprecated parameter 'namecase'
[  209.049885][ T4639] exfat: Deprecated parameter 'namecase'
[  209.055805][ T4639] exfat: Bad value for 'uid'
[  209.406416][ T4640] loop1: detected capacity change from 0 to 512
[  209.413023][ T4640] EXT4-fs: Invalid want_extra_isize 7
[  209.479028][ T4651] loop3: detected capacity change from 0 to 1024
[  209.488709][ T4651] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  209.498239][ T4651] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945)
[  209.508250][ T4651] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  209.516730][ T4651] EXT4-fs (loop3): orphan cleanup on readonly fs
[  209.523451][ T4651] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #3: comm syz.3.1039: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 2(4), depth 0(0)
[  209.541552][ T4651] EXT4-fs error (device loop3): ext4_quota_enable:7039: comm syz.3.1039: Bad quota inode: 3, type: 0
[  209.552581][ T4651] EXT4-fs warning (device loop3): ext4_enable_quotas:7080: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  209.567216][ T4651] EXT4-fs (loop3): Cannot turn on quotas: error -117
[  209.573934][ T4651] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  209.589238][ T4651] EXT4-fs error (device loop3): ext4_lookup:1858: inode #16: comm syz.3.1039: iget: bad i_size value: 281474976719656
[  210.019988][ T4655] loop4: detected capacity change from 0 to 512
[  210.026605][ T4655] EXT4-fs: Invalid want_extra_isize 7
[  210.048559][ T4662] FAULT_INJECTION: forcing a failure.
[  210.048559][ T4662] name failslab, interval 1, probability 0, space 0, times 0
[  210.061268][ T4662] CPU: 0 PID: 4662 Comm: syz.5.1043 Not tainted syzkaller #0
[  210.068643][ T4662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  210.078693][ T4662] Call Trace:
[  210.081965][ T4662]  <TASK>
[  210.084889][ T4662]  __dump_stack+0x21/0x24
[  210.089227][ T4662]  dump_stack_lvl+0x110/0x170
[  210.093905][ T4662]  ? __cfi_dump_stack_lvl+0x8/0x8
[  210.098941][ T4662]  dump_stack+0x15/0x24
[  210.103098][ T4662]  should_fail_ex+0x3bf/0x510
[  210.107775][ T4662]  __should_failslab+0xac/0xf0
[  210.112629][ T4662]  should_failslab+0x9/0x20
[  210.114656][ T4664] loop1: detected capacity change from 0 to 128
[  210.117131][ T4662]  __kmem_cache_alloc_node+0x3d/0x2d0
[  210.128698][ T4662]  ? io_alloc_hash_table+0x34/0xc0
[  210.133816][ T4662]  ? kasan_save_alloc_info+0x1f/0x30
[  210.139094][ T4662]  ? io_alloc_hash_table+0x34/0xc0
[  210.144199][ T4662]  __kmalloc+0xa4/0x1e0
[  210.148351][ T4662]  io_alloc_hash_table+0x34/0xc0
[  210.153283][ T4662]  io_ring_ctx_alloc+0xf8/0xb00
[  210.158121][ T4662]  io_uring_create+0x29a/0xde1
[  210.162876][ T4662]  __x64_sys_io_uring_setup+0x21b/0x230
[  210.168415][ T4662]  ? __cfi___x64_sys_io_uring_setup+0x10/0x10
[  210.174476][ T4662]  ? fpregs_assert_state_consistent+0xb1/0xe0
[  210.180534][ T4662]  x64_sys_call+0x4ab/0x9a0
[  210.185028][ T4662]  do_syscall_64+0x4c/0xa0
[  210.189429][ T4662]  ? clear_bhb_loop+0x30/0x80
[  210.194089][ T4662]  ? clear_bhb_loop+0x30/0x80
[  210.198746][ T4662]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  210.204627][ T4662] RIP: 0033:0x7fac9ab9de99
[  210.209027][ T4662] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  210.228612][ T4662] RSP: 002b:00007fac9bab8ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9
[  210.237007][ T4662] RAX: ffffffffffffffda RBX: 0000200000000a88 RCX: 00007fac9ab9de99
[  210.244959][ T4662] RDX: 0000200000000b08 RSI: 0000200000000a88 RDI: 00000000000003c9
[  210.252914][ T4662] RBP: 0000200000000a80 R08: 0000000000000000 R09: 0000000000000000
[  210.260865][ T4662] R10: 0000200000000b10 R11: 0000000000000206 R12: 0000200000000b08
[  210.268820][ T4662] R13: 0000200000000b10 R14: 00007fac9bab8fd8 R15: 0000000000000000
[  210.276777][ T4662]  </TASK>
[  210.279872][  T321] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  210.300736][ T1367] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  211.101049][ T4674] loop5: detected capacity change from 0 to 1024
[  211.407064][ T4674] loop5: detected capacity change from 0 to 512
[  211.415041][   T28] audit: type=1400 audit(1784975125.713:2771): avc:  denied  { remount } for  pid=4668 comm="syz.5.1046" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  211.437305][  T321] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  211.607921][  T321] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  211.677627][  T321] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  211.701264][  T321] usb 4-1: Product: syz
[  211.705450][  T321] usb 4-1: Manufacturer: syz
[  211.985700][  T321] usb 4-1: SerialNumber: syz
[  212.386575][ T4699] loop0: detected capacity change from 0 to 256
[  212.394456][ T4699] exfat: Deprecated parameter 'namecase'
[  212.400299][ T4699] exfat: Deprecated parameter 'namecase'
[  212.406013][ T4699] exfat: Deprecated parameter 'namecase'
[  212.411734][ T4699] exfat: Bad value for 'uid'
[  212.489977][   T39] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  212.511911][ T4703] loop1: detected capacity change from 0 to 128
[  212.512076][  T901] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  212.547535][   T28] audit: type=1400 audit(1784975126.843:2772): avc:  denied  { mounton } for  pid=4702 comm="syz.1.1053" path="/proc/748/task" dev="proc" ino=36595 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  212.570340][   T28] audit: type=1400 audit(1784975126.843:2773): avc:  denied  { associate } for  pid=4702 comm="syz.1.1053" name="file0" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  212.709536][   T39] usb 6-1: Using ep0 maxpacket: 16
[  212.716747][   T39] usb 6-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  212.739534][   T39] usb 6-1: config 0 interface 0 has no altsetting 0
[  212.746187][   T39] usb 6-1: New USB device found, idVendor=6666, idProduct=8802, bcdDevice= 0.00
[  212.769530][   T39] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  212.802571][   T39] usb 6-1: config 0 descriptor??
[  212.809555][    T6] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  213.000564][    T6] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  213.016336][ T4709] loop4: detected capacity change from 0 to 131072
[  213.021129][    T6] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  213.049575][ T4709] F2FS-fs (loop4): invalid crc value
[  213.051133][    T6] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  213.082026][    T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  213.090969][    T6] usb 2-1: SerialNumber: syz
[  213.110407][ T4709] F2FS-fs (loop4): Found nat_bits in checkpoint
[  213.165985][ T4709] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  213.180281][ T4709] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  213.218757][   T39] smartjoyplus 0003:6666:8802.001B: hidraw0: USB HID v10.01 Device [HID 6666:8802] on usb-dummy_hcd.5-1/input0
[  213.450996][ T4724] loop0: detected capacity change from 0 to 512
[  213.459863][ T4724] EXT4-fs: Invalid want_extra_isize 7
[  213.477768][   T39] smartjoyplus 0003:6666:8802.001B: no output reports found
[  213.492797][    T6] usb 2-1: 0:2 : does not exist
[  213.508289][  T322] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  213.508901][   T39] usb 6-1: USB disconnect, device number 8
[  213.525670][    T6] usb 2-1: USB disconnect, device number 19
[  213.571520][ T4726] fido_id[4726]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  213.749990][  T361] udevd[361]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  213.790278][ T4709] loop4: detected capacity change from 0 to 1024
[  213.797860][ T4709] EXT4-fs warning (device loop4): read_mmp_block:115: Error -117 while reading MMP block 0
[  213.869137][ T4709] loop4: detected capacity change from 0 to 128
[  213.888842][ T4709] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  213.897558][ T4709] ext4 filesystem being mounted at /197/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  214.964520][  T321] cdc_ncm 4-1:1.0: bind() failure
[  214.983699][  T321] cdc_ncm: probe of 4-1:1.1 failed with error -71
[  215.067522][  T321] cdc_mbim: probe of 4-1:1.1 failed with error -71
[  215.106586][  T288] EXT4-fs (loop3): unmounting filesystem.
[  215.114658][  T321] usb 4-1: USB disconnect, device number 19
[  215.230968][   T28] audit: type=1400 audit(1784975129.533:2774): avc:  denied  { getopt } for  pid=4708 comm="syz.4.1055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  215.323012][ T4750] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1063'.
[  215.345132][  T291] EXT4-fs (loop4): unmounting filesystem.
[  215.606633][ T4742] loop5: detected capacity change from 0 to 40427
[  215.619861][ T4742] F2FS-fs (loop5): invalid crc value
[  215.742502][ T4742] F2FS-fs (loop5): Found nat_bits in checkpoint
[  215.861764][ T4742] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  216.603037][ T4766] loop3: detected capacity change from 0 to 256
[  216.610276][ T4766] exfat: Deprecated parameter 'namecase'
[  216.616010][ T4766] exfat: Deprecated parameter 'namecase'
[  216.621717][ T4766] exfat: Deprecated parameter 'namecase'
[  216.627402][ T4766] exfat: Bad value for 'uid'
[  216.865760][  T901] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  216.909553][  T301] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  217.362370][ T4779] loop0: detected capacity change from 0 to 512
[  217.369073][ T4779] EXT4-fs: Invalid want_extra_isize 7
[  217.383123][ T2443] syz-executor: attempt to access beyond end of device
[  217.383123][ T2443] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  217.420962][  T901] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  217.459532][  T301] usb 5-1: Using ep0 maxpacket: 8
[  217.465699][  T301] usb 5-1: config 32 has an invalid interface number: 128 but max is 0
[  217.481799][  T301] usb 5-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config
[  217.511904][  T301] usb 5-1: config 32 has no interface number 0
[  217.518170][  T301] usb 5-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[  217.527331][  T301] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  217.537613][  T301] hub 5-1:32.128: bad descriptor, ignoring hub
[  217.543814][  T301] hub: probe of 5-1:32.128 failed with error -5
[  217.845316][ T4793] loop3: detected capacity change from 0 to 1024
[  217.852402][ T4793] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  217.863506][ T4793] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945)
[  217.887016][ T4793] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  217.906323][ T4793] EXT4-fs (loop3): orphan cleanup on readonly fs
[  217.916553][ T4793] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #3: comm syz.3.1074: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 2(4), depth 0(0)
[  217.934665][ T4793] EXT4-fs error (device loop3): ext4_quota_enable:7039: comm syz.3.1074: Bad quota inode: 3, type: 0
[  217.945783][ T4793] EXT4-fs warning (device loop3): ext4_enable_quotas:7080: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  217.961198][ T4793] EXT4-fs (loop3): Cannot turn on quotas: error -117
[  217.968002][ T4793] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  217.993032][ T4793] EXT4-fs error (device loop3): ext4_lookup:1858: inode #16: comm syz.3.1074: iget: bad i_size value: 281474976719656
[  218.019756][ T1169] usb 5-1: USB disconnect, device number 15
[  218.041502][ T4806] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1077'.
[  218.469561][ T4270] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  218.681294][ T4270] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  218.745888][ T4270] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  219.117748][ T4270] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  219.288731][ T4270] usb 4-1: Product: syz
[  219.336863][ T4270] usb 4-1: Manufacturer: syz
[  219.411844][ T4270] usb 4-1: SerialNumber: syz
[  219.565103][ T4844] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1087'.
[  219.578088][ T4844] loop0: detected capacity change from 0 to 1024
[  219.602190][ T4844] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  219.610867][ T4844] ext4 filesystem being mounted at /244/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  220.654844][  T289] EXT4-fs (loop0): unmounting filesystem.
[  220.702729][ T4863] loop0: detected capacity change from 0 to 512
[  220.775764][ T4863] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.1090: iget: bad i_size value: 38620345925642
[  220.789747][ T4863] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.1090: couldn't read orphan inode 15 (err -117)
[  220.808226][ T4863] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  220.870492][ T4869] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1092'.
[  221.116323][ T4863] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.1090: bg 0: block 5: invalid block bitmap
[  221.149759][ T4863] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 273 with error 28
[  221.172214][ T4863] EXT4-fs (loop0): This should not happen!! Data will be lost
[  221.172214][ T4863] 
[  221.189350][ T4861] loop4: detected capacity change from 0 to 32768
[  221.192408][ T4863] EXT4-fs (loop0): Total free blocks count 0
[  221.214850][ T4863] EXT4-fs (loop0): Free/Dirty block details
[  221.229947][ T4863] EXT4-fs (loop0): free_blocks=0
[  221.239654][ T4863] EXT4-fs (loop0): dirty_blocks=276
[  221.250155][ T4863] EXT4-fs (loop0): Block reservation details
[  221.256368][ T4861]  loop4: p1 < > p3 p4 < >
[  221.260895][ T4861] loop4: partition table partially beyond EOD, truncated
[  221.264094][ T4863] EXT4-fs (loop0): i_reserved_data_blocks=276
[  221.274691][ T4861] loop4: p3 size 50361344 extends beyond EOD, truncated
[  221.294068][ T4861] loop4: p4 start 262144 is beyond EOD, truncated
[  221.301901][  T289] EXT4-fs (loop0): unmounting filesystem.
[  221.308789][  T103]  loop4: p1 < > p3 p4 < >
[  221.313319][  T103] loop4: partition table partially beyond EOD, truncated
[  221.328090][  T103] loop4: p3 size 50361344 extends beyond EOD, truncated
[  221.342385][  T103] loop4: p4 start 262144 is beyond EOD, truncated
[  221.354170][ T4876] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1094'.
[  221.510697][  T901] udevd[901]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  221.510703][  T322] udevd[322]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  221.555916][  T901] udevd[901]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  222.575097][  T901] udevd[901]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  222.590650][ T4888] loop5: detected capacity change from 0 to 512
[  222.597303][ T4888] EXT4-fs: Invalid want_extra_isize 7
[  222.805851][   T28] audit: type=1400 audit(1784975137.103:2775): avc:  denied  { remove_name } for  pid=4877 comm="syz.4.1095" name="bus" dev="incremental-fs" ino=1119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  222.879476][   T28] audit: type=1400 audit(1784975137.133:2776): avc:  denied  { rmdir } for  pid=4877 comm="syz.4.1095" name="bus" dev="incremental-fs" ino=1119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  222.912765][ T4905] overlayfs: './file1' not a directory
[  222.936677][   T28] audit: type=1400 audit(1784975137.213:2777): avc:  denied  { setattr } for  pid=4904 comm="syz.5.1100" name="#10" dev="tmpfs" ino=790 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  223.199506][ T1169] usb 6-1: new low-speed USB device number 9 using dummy_hcd
[  223.390910][ T1169] usb 6-1: unable to get BOS descriptor or descriptor too short
[  223.404137][   T28] audit: type=1400 audit(1784975393.761:2778): avc:  denied  { sqpoll } for  pid=4918 comm="syz.1.1104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  223.407232][ T1169] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  223.487031][ T1169] usb 6-1: New USB device found, idVendor=1477, idProduct=1007, bcdDevice= 0.40
[  223.525825][ T1169] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  223.544040][ T1169] usb 6-1: SerialNumber: ѵ哻䋭�腷᯴᧴ᑔ襳㙀箊劷㛞㨎ⴤ꧉竚ￜ鑬뭢橴⟮鷘仨랶碠孖礷俧쮥痔鴅漿��擲�⣤쮽熸㗾涻侲እ鳮�飤쬓頒ﵓ戊ʪ�䭩‰메뻣첻寺䟸⸭㊼Ҡ㖺�먧䑠猦᫧l⋕ᅺ�ʯ︉׽�尒䰾콂�꬀뷄뉾�
[  223.739853][ T4270] cdc_ncm 4-1:1.0: bind() failure
[  223.760800][ T4270] cdc_ncm: probe of 4-1:1.1 failed with error -71
[  223.863991][ T4270] cdc_mbim: probe of 4-1:1.1 failed with error -71
[  223.881168][ T1169] usbhid 6-1:1.0: couldn't find an input interrupt endpoint
[  224.566408][ T4932] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1107'.
[  224.755954][ T1169] usb 6-1: USB disconnect, device number 9
[  224.775206][ T4270] usb 4-1: USB disconnect, device number 20
[  224.783978][  T288] EXT4-fs (loop3): unmounting filesystem.
[  224.878961][ T4945] FAULT_INJECTION: forcing a failure.
[  224.878961][ T4945] name failslab, interval 1, probability 0, space 0, times 0
[  224.892727][ T4945] CPU: 1 PID: 4945 Comm: syz.3.1111 Not tainted syzkaller #0
[  224.900114][ T4945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  224.910168][ T4945] Call Trace:
[  224.913448][ T4945]  <TASK>
[  224.916369][ T4945]  __dump_stack+0x21/0x24
[  224.920697][ T4945]  dump_stack_lvl+0x110/0x170
[  224.925375][ T4945]  ? __cfi_dump_stack_lvl+0x8/0x8
[  224.930396][ T4945]  dump_stack+0x15/0x24
[  224.934544][ T4945]  should_fail_ex+0x3bf/0x510
[  224.939212][ T4945]  __should_failslab+0xac/0xf0
[  224.943976][ T4945]  should_failslab+0x9/0x20
[  224.948472][ T4945]  __kmem_cache_alloc_node+0x3d/0x2d0
[  224.953842][ T4945]  ? io_ring_ctx_alloc+0x217/0xb00
[  224.958955][ T4945]  ? io_alloc_hash_table+0x34/0xc0
[  224.964071][ T4945]  ? init_hash_table+0x1aa/0x260
[  224.969003][ T4945]  ? io_ring_ctx_alloc+0x217/0xb00
[  224.974107][ T4945]  kmalloc_trace+0x29/0xb0
[  224.978520][ T4945]  io_ring_ctx_alloc+0x217/0xb00
[  224.983454][ T4945]  io_uring_create+0x29a/0xde1
[  224.988215][ T4945]  __x64_sys_io_uring_setup+0x21b/0x230
[  224.993765][ T4945]  ? __cfi___x64_sys_io_uring_setup+0x10/0x10
[  224.999830][ T4945]  ? fpregs_assert_state_consistent+0xb1/0xe0
[  225.005936][ T4945]  x64_sys_call+0x4ab/0x9a0
[  225.010433][ T4945]  do_syscall_64+0x4c/0xa0
[  225.014846][ T4945]  ? clear_bhb_loop+0x30/0x80
[  225.019515][ T4945]  ? clear_bhb_loop+0x30/0x80
[  225.024189][ T4945]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  225.030082][ T4945] RIP: 0033:0x7f3aedd9de99
[  225.034492][ T4945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  225.054096][ T4945] RSP: 002b:00007f3aeecb3ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9
[  225.062508][ T4945] RAX: ffffffffffffffda RBX: 0000200000000a88 RCX: 00007f3aedd9de99
[  225.070472][ T4945] RDX: 0000200000000b08 RSI: 0000200000000a88 RDI: 00000000000003c9
[  225.078435][ T4945] RBP: 0000200000000a80 R08: 0000000000000000 R09: 0000000000000000
[  225.086402][ T4945] R10: 0000200000000b10 R11: 0000000000000206 R12: 0000200000000b08
[  225.094367][ T4945] R13: 0000200000000b10 R14: 00007f3aeecb3fd8 R15: 0000000000000000
[  225.102351][ T4945]  </TASK>
[  225.725918][   T28] audit: type=1400 audit(1784975396.071:2779): avc:  denied  { create } for  pid=4950 comm="syz.3.1113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[  225.755923][   T28] audit: type=1400 audit(1784975396.071:2780): avc:  denied  { sys_admin } for  pid=4950 comm="syz.3.1113" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[  226.430133][ T4980] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1119'.
[  226.896035][ T4990] loop0: detected capacity change from 0 to 512
[  226.947309][ T4990] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1123: invalid indirect mapped block 10 (level 1)
[  226.974882][ T4990] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1123: invalid indirect mapped block 8 (level 1)
[  227.004631][ T4985] loop4: detected capacity change from 0 to 40427
[  227.008678][ T4990] EXT4-fs (loop0): 1 truncate cleaned up
[  227.023543][ T4985] F2FS-fs (loop4): invalid crc value
[  227.028772][ T4990] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  227.043333][ T4985] F2FS-fs (loop4): Found nat_bits in checkpoint
[  227.117043][  T289] EXT4-fs (loop0): unmounting filesystem.
[  227.126189][ T4985] F2FS-fs (loop4): Start checkpoint disabled!
[  227.145859][ T4985] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0
[  227.250519][ T4985] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  227.461802][ T5009] loop1: detected capacity change from 0 to 256
[  227.556217][ T5009] exfat: Deprecated parameter 'namecase'
[  227.630842][ T5009] exfat: Deprecated parameter 'namecase'
[  227.693251][ T5009] exfat: Deprecated parameter 'namecase'
[  227.768673][ T5009] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf4f74c50, utbl_chksum : 0xe619d30d)
[  228.005992][   T28] audit: type=1400 audit(1784975398.351:2781): avc:  denied  { mounton } for  pid=5005 comm="syz.1.1128" path="/206/file0/file0" dev="loop1" ino=1048617 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  228.175848][ T5016] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1129'.
[  228.414739][    T6] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  228.446951][ T5025] loop5: detected capacity change from 0 to 40427
[  228.569568][ T5030] loop1: detected capacity change from 0 to 256
[  228.577084][ T5030] exfat: Deprecated parameter 'namecase'
[  228.582871][ T5030] exfat: Deprecated parameter 'namecase'
[  228.588580][ T5030] exfat: Deprecated parameter 'namecase'
[  228.594315][ T5030] exfat: Bad value for 'uid'
[  228.621692][ T5025] F2FS-fs (loop5): invalid crc value
[  228.651179][  T322] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  228.659799][ T5025] F2FS-fs (loop5): Found nat_bits in checkpoint
[  228.688400][ T5025] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  228.713144][ T2443] syz-executor: attempt to access beyond end of device
[  228.713144][ T2443] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  228.749666][    T6] usb 5-1: Using ep0 maxpacket: 32
[  228.756061][    T6] usb 5-1: config 0 has an invalid interface number: 184 but max is 0
[  228.764600][    T6] usb 5-1: config 0 has no interface number 0
[  228.770817][    T6] usb 5-1: config 0 interface 184 has no altsetting 0
[  228.781844][    T6] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  228.791006][    T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  228.799088][    T6] usb 5-1: Product: syz
[  228.803395][    T6] usb 5-1: Manufacturer: syz
[  228.808008][    T6] usb 5-1: SerialNumber: syz
[  228.813168][    T6] usb 5-1: config 0 descriptor??
[  228.818727][    T6] smsc75xx v1.0.0
[  228.909323][ T5038] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1134'.
[  229.268186][ T5053] loop1: detected capacity change from 0 to 512
[  229.296188][ T5053] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.1140: iget: bad i_size value: 38620345925642
[  229.309995][ T5053] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.1140: couldn't read orphan inode 15 (err -117)
[  229.311966][ T5052] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1141'.
[  229.322931][ T5053] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  229.348240][ T5052] loop0: detected capacity change from 0 to 1024
[  229.483814][ T5052] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  229.527244][ T5053] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.1140: bg 0: block 5: invalid block bitmap
[  229.545178][ T5053] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1656 with error 28
[  229.559511][ T5053] EXT4-fs (loop1): This should not happen!! Data will be lost
[  229.559511][ T5053] 
[  229.570554][ T5053] EXT4-fs (loop1): Total free blocks count 0
[  229.576676][ T5053] EXT4-fs (loop1): Free/Dirty block details
[  229.588315][ T5053] EXT4-fs (loop1): free_blocks=0
[  229.594182][ T5053] EXT4-fs (loop1): dirty_blocks=1660
[  229.834135][ T5062] tmpfs: Unknown parameter '9eÍ
[  229.834135][ T5062] ÜÌw…s<*Jgü'
[  229.880131][ T5053] EXT4-fs (loop1): Block reservation details
[  229.942651][ T5064] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1142'.
[  229.967066][ T5053] EXT4-fs (loop1): i_reserved_data_blocks=1660
[  229.974622][ T5064] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1142'.
[  230.267263][    T6] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  230.301731][  T287] EXT4-fs (loop1): unmounting filesystem.
[  230.311951][    T6] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  230.329490][    T6] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61
[  230.340695][    T6] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61
[  230.350284][    T6] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61
[  230.359726][    T6] smsc75xx: probe of 5-1:0.184 failed with error -61
[  230.596543][ T5082] loop3: detected capacity change from 0 to 256
[  230.604916][ T5082] exfat: Deprecated parameter 'namecase'
[  230.610710][ T5082] exfat: Deprecated parameter 'namecase'
[  230.616436][ T5082] exfat: Deprecated parameter 'namecase'
[  230.622187][ T5082] exfat: Bad value for 'uid'
[  230.700808][  T901] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  230.772104][  T289] EXT4-fs (loop0): unmounting filesystem.
[  230.817141][ T5084] SELinux: failed to load policy
[  230.835329][ T5084] loop5: detected capacity change from 0 to 512
[  230.841140][ T5075] loop1: detected capacity change from 0 to 40427
[  230.863731][ T5084] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  230.886102][ T5075] F2FS-fs (loop1): invalid crc value
[  230.900641][ T5093] loop0: detected capacity change from 0 to 256
[  230.919099][ T5075] F2FS-fs (loop1): Found nat_bits in checkpoint
[  230.966272][ T5075] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  230.989016][  T287] syz-executor: attempt to access beyond end of device
[  230.989016][  T287] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  231.083557][ T5103] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1152'.
[  231.479788][ T2443] EXT4-fs (loop5): unmounting filesystem.
[  231.629491][ T4738] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  231.666198][ T5115] loop5: detected capacity change from 0 to 40427
[  231.675637][ T5115] F2FS-fs (loop5): Corrupted extension count (64 + 1 > 64)
[  231.683010][ T5115] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  231.691365][ T5115] F2FS-fs (loop5): Image doesn't support compression
[  231.698146][ T5115] F2FS-fs (loop5): Image doesn't support compression
[  231.705331][ T5115] F2FS-fs (loop5): invalid crc value
[  231.711553][ T5115] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  231.742469][ T5115] F2FS-fs (loop5): Start checkpoint disabled!
[  231.748914][ T5115] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0
[  231.757438][ T5115] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  231.770603][  T480] usb 5-1: USB disconnect, device number 16
[  231.775696][ T5109] loop3: detected capacity change from 0 to 131072
[  231.777707][ T5115] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  231.793971][ T5109] F2FS-fs (loop3): Invalid segment/section count (458783, 24 x 150994945)
[  231.821635][ T4738] usb 2-1: Using ep0 maxpacket: 16
[  231.832383][ T4738] usb 2-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  231.851186][ T5109] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  231.867336][ T4738] usb 2-1: config 0 interface 0 has no altsetting 0
[  231.875929][ T5109] F2FS-fs (loop3): invalid crc value
[  231.879294][  T529] kworker/u4:14: attempt to access beyond end of device
[  231.879294][  T529] loop4: rw=1, sector=77824, nr_sectors = 2064 limit=40427
[  231.881908][ T4738] usb 2-1: New USB device found, idVendor=6666, idProduct=8802, bcdDevice= 0.00
[  231.904620][ T4738] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  231.914313][ T4738] usb 2-1: config 0 descriptor??
[  231.923822][  T529] kworker/u4:14: attempt to access beyond end of device
[  231.923822][  T529] loop4: rw=1, sector=79888, nr_sectors = 2032 limit=40427
[  231.927844][ T5115] F2FS-fs (loop5): Inconsistent segment (8) type [1, 0] in SSA and SIT
[  231.943411][  T529] kworker/u4:14: attempt to access beyond end of device
[  231.943411][  T529] loop4: rw=1, sector=49152, nr_sectors = 2048 limit=40427
[  231.965044][ T5109] F2FS-fs (loop3): Found nat_bits in checkpoint
[  231.980618][  T529] kworker/u4:14: attempt to access beyond end of device
[  231.980618][  T529] loop4: rw=1, sector=51200, nr_sectors = 2048 limit=40427
[  231.986141][ T5121] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  232.003563][ T5121] ext4 filesystem being mounted at /266/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  232.022613][  T529] kworker/u4:14: attempt to access beyond end of device
[  232.022613][  T529] loop4: rw=1, sector=73728, nr_sectors = 3728 limit=40427
[  232.039248][  T529] kworker/u4:14: attempt to access beyond end of device
[  232.039248][  T529] loop4: rw=1, sector=77456, nr_sectors = 368 limit=40427
[  232.054103][ T5109] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  232.061662][ T5109] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  232.062120][  T529] kworker/u4:14: attempt to access beyond end of device
[  232.062120][  T529] loop4: rw=1, sector=81920, nr_sectors = 4096 limit=40427
[  232.084442][  T529] kworker/u4:14: attempt to access beyond end of device
[  232.084442][  T529] loop4: rw=1, sector=86016, nr_sectors = 8 limit=40427
[  232.098754][  T289] EXT4-fs (loop0): unmounting filesystem.
[  232.114692][ T5128] F2FS-fs (loop3): sanity_check_inode: corrupted inode footer i_ino=8, ino,nid: [10986248, 8] run fsck to fix.
[  232.190064][ T5134] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.1163: Invalid inode bitmap blk 4 in block_group 0
[  232.213011][ T5134] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  232.329837][ T4738] smartjoyplus 0003:6666:8802.001C: hidraw0: USB HID v10.01 Device [HID 6666:8802] on usb-dummy_hcd.1-1/input0
[  232.369502][ T4738] smartjoyplus 0003:6666:8802.001C: no output reports found
[  232.451721][ T5136] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 13: invalid block bitmap
[  232.644630][ T5142] EXT4-fs: Invalid want_extra_isize 7
[  232.727757][  T322] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  232.782183][    T6] usb 2-1: USB disconnect, device number 20
[  232.802026][ T5149] fido_id[5149]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  233.516478][ T5152] set_capacity_and_notify: 3 callbacks suppressed
[  233.516494][ T5152] loop3: detected capacity change from 0 to 256
[  233.529601][ T5152] exfat: Deprecated parameter 'namecase'
[  233.535286][ T5152] exfat: Deprecated parameter 'namecase'
[  233.540961][ T5152] exfat: Deprecated parameter 'namecase'
[  233.546605][ T5152] exfat: Bad value for 'uid'
[  233.555616][ T5153] loop4: detected capacity change from 0 to 512
[  233.562312][ T5153] EXT4-fs: Invalid want_extra_isize 7
[  233.579853][  T322] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  233.589686][  T361] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  233.626905][ T5159] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1168'.
[  234.193838][ T5163] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1169'.
[  234.268592][  T289] EXT4-fs (loop0): unmounting filesystem.
[  234.783435][ T5200] loop1: detected capacity change from 0 to 512
[  234.790082][ T5200] EXT4-fs: Invalid want_extra_isize 7
[  234.839479][    T6] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  234.840524][ T5205] loop5: detected capacity change from 0 to 4096
[  234.853622][ T4270] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  234.876098][ T5199] loop3: detected capacity change from 0 to 40427
[  234.883635][ T5199] F2FS-fs (loop3): invalid crc value
[  234.890368][ T5199] F2FS-fs (loop3): Found nat_bits in checkpoint
[  234.900786][  T901] I/O error, dev loop5, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  234.927679][ T5199] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  234.965650][  T288] bio_check_eod: 2027 callbacks suppressed
[  234.965796][  T288] syz-executor: attempt to access beyond end of device
[  234.965796][  T288] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  235.003509][   T28] audit: type=1400 audit(1784975405.351:2782): avc:  denied  { execute } for  pid=5212 comm="syz.5.1183" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=39157 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  235.029181][    T6] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 97, changing to 7
[  235.047353][    T6] usb 5-1: New USB device found, idVendor=1235, idProduct=8203, bcdDevice= 0.40
[  235.049532][ T4270] usb 1-1: Using ep0 maxpacket: 32
[  235.060024][    T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  235.070794][    T6] usb 5-1: Product: syz
[  235.075026][    T6] usb 5-1: Manufacturer: syz
[  235.079971][    T6] usb 5-1: SerialNumber: syz
[  235.085255][ T4270] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  235.095511][ T4270] usb 1-1: New USB device found, idVendor=056a, idProduct=00bb, bcdDevice= 0.00
[  235.105125][ T4270] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  235.118664][ T4270] usb 1-1: config 0 descriptor??
[  235.189284][ T5219] capability: warning: `syz.5.1184' uses 32-bit capabilities (legacy support in use)
[  235.422259][ T5168] loop4: detected capacity change from 0 to 1024
[  235.449079][ T5168] EXT4-fs (loop4): The Hurd can't support 64-bit file systems
[  235.471700][    T6] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  235.489542][    T6] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  235.498676][    T6] usb 5-1: USB disconnect, device number 17
[  235.548574][ T4270] wacom 0003:056A:00BB.001D: Unknown device_type for 'HID 056a:00bb'. Assuming pen.
[  235.558731][ T4270] wacom 0003:056A:00BB.001D: hidraw0: USB HID vef.fd Device [HID 056a:00bb] on usb-dummy_hcd.0-1/input0
[  235.565079][ T5217] loop3: detected capacity change from 0 to 40427
[  235.573693][ T4270] input: Wacom Intuos4 12x19 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:00BB.001D/input/input21
[  235.589925][ T5217] F2FS-fs (loop3): invalid crc value
[  235.603975][ T5217] F2FS-fs (loop3): Found nat_bits in checkpoint
[  235.667255][ T5217] F2FS-fs (loop3): Start checkpoint disabled!
[  235.674126][ T5217] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0
[  235.683361][ T5217] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  235.720246][  T901] udevd[901]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  235.892347][ T5240] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1189'.
[  236.109734][   T28] audit: type=1400 audit(1784975406.431:2783): avc:  denied  { bind } for  pid=5241 comm="syz.5.1190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  236.180764][   T28] audit: type=1400 audit(1784975406.431:2784): avc:  denied  { setopt } for  pid=5241 comm="syz.5.1190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  236.192703][ T5174] loop0: detected capacity change from 0 to 4096
[  236.217238][ T4270] usb 1-1: USB disconnect, device number 18
[  236.260597][   T28] audit: type=1400 audit(1784975406.611:2785): avc:  denied  { getopt } for  pid=5241 comm="syz.5.1190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  236.327483][ T5217] F2FS-fs (loop3): ino:14, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled
[  236.409870][  T763] kworker/u4:196: attempt to access beyond end of device
[  236.409870][  T763] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  236.449996][ T5250] loop4: detected capacity change from 0 to 40427
[  236.462657][ T5250] F2FS-fs (loop4): invalid crc value
[  236.479133][ T5265] loop5: detected capacity change from 0 to 40427
[  236.486778][ T5265] F2FS-fs (loop5): invalid crc value
[  236.495258][ T5265] F2FS-fs (loop5): Found nat_bits in checkpoint
[  236.497001][ T5250] F2FS-fs (loop4): Found nat_bits in checkpoint
[  236.563766][ T5265] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  236.565567][ T5250] F2FS-fs (loop4): Start checkpoint disabled!
[  236.578209][ T5250] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0
[  236.585846][ T5250] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  236.620149][ T5275] netlink: 'syz.1.1194': attribute type 2 has an invalid length.
[  236.789037][ T2443] syz-executor: attempt to access beyond end of device
[  236.789037][ T2443] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  237.435369][  T593] kworker/u4:31: attempt to access beyond end of device
[  237.435369][  T593] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  237.615051][  T322] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  237.800725][ T5285] fuse: Unknown parameter 'grou00000000000000000000'
[  238.903161][ T5295] set_capacity_and_notify: 1 callbacks suppressed
[  238.903188][ T5295] loop4: detected capacity change from 0 to 512
[  238.917373][ T5295] EXT4-fs: Invalid want_extra_isize 7
[  238.991042][   T28] audit: type=1400 audit(1784975409.341:2786): avc:  denied  { create } for  pid=5296 comm="syz.1.1200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  239.013890][  T901] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  239.091472][ T5307] netlink: 'syz.1.1203': attribute type 16 has an invalid length.
[  239.099406][ T5307] netlink: 'syz.1.1203': attribute type 17 has an invalid length.
[  239.110134][ T5307] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  239.117630][ T5307] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  239.332544][ T5307] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  239.381435][ T5307] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  239.512406][ T5322] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1204'.
[  239.635359][ T5320] loop4: detected capacity change from 0 to 40427
[  239.639366][ T5314] loop5: detected capacity change from 0 to 40427
[  239.643689][ T5320] F2FS-fs (loop4): invalid crc value
[  239.659132][ T5314] F2FS-fs (loop5): invalid crc value
[  239.680656][ T5314] F2FS-fs (loop5): Found nat_bits in checkpoint
[  239.695024][ T5320] F2FS-fs (loop4): Found nat_bits in checkpoint
[  239.746151][ T5314] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  239.753016][ T5320] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  239.805572][ T2443] syz-executor: attempt to access beyond end of device
[  239.805572][ T2443] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  239.851212][  T291] syz-executor: attempt to access beyond end of device
[  239.851212][  T291] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  240.049097][ T5331] loop1: detected capacity change from 0 to 40427
[  240.186937][ T5331] F2FS-fs (loop1): invalid crc value
[  240.280326][ T5331] F2FS-fs (loop1): Found nat_bits in checkpoint
[  240.614432][ T5353] overlayfs: unrecognized mount option "uuid=off:/" or missing value
[  240.647265][ T5331] F2FS-fs (loop1): Start checkpoint disabled!
[  240.728728][ T5331] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0
[  240.932317][ T5331] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  240.983777][ T5357] loop5: detected capacity change from 0 to 128
[  241.067082][ T5365] fuse: Unknown parameter 'grou00000000000000000000'
[  241.087934][ T5357] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  241.146627][ T5357] ext4 filesystem being mounted at /174/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  241.214116][ T2443] EXT4-fs (loop5): unmounting filesystem.
[  241.229058][ T5370] loop4: detected capacity change from 0 to 40427
[  241.246070][ T5370] F2FS-fs (loop4): invalid crc value
[  241.261808][ T5370] F2FS-fs (loop4): Found nat_bits in checkpoint
[  241.342585][ T5382] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1221'.
[  241.390467][ T5370] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  241.410988][ T5380] FAULT_INJECTION: forcing a failure.
[  241.410988][ T5380] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  241.530521][ T5380] CPU: 0 PID: 5380 Comm: syz.5.1222 Not tainted syzkaller #0
[  241.537928][ T5380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  241.547988][ T5380] Call Trace:
[  241.551267][ T5380]  <TASK>
[  241.554194][ T5380]  __dump_stack+0x21/0x24
[  241.558538][ T5380]  dump_stack_lvl+0x110/0x170
[  241.563219][ T5380]  ? __cfi_dump_stack_lvl+0x8/0x8
[  241.568248][ T5380]  dump_stack+0x15/0x24
[  241.572410][ T5380]  should_fail_ex+0x3bf/0x510
[  241.577089][ T5380]  should_fail+0xb/0x10
[  241.581248][ T5380]  should_fail_usercopy+0x1a/0x20
[  241.586275][ T5380]  _copy_to_user+0x1e/0x90
[  241.590703][ T5380]  bpf_obj_get_info_by_fd+0x2815/0x2ed0
[  241.596264][ T5380]  ? bpf_map_get_fd_by_id+0x340/0x340
[  241.601645][ T5380]  ? __kasan_check_read+0x11/0x20
[  241.606673][ T5380]  ? preempt_schedule_irq+0xca/0x120
[  241.611974][ T5380]  ? __cfi_preempt_schedule_irq+0x10/0x10
[  241.617706][ T5380]  ? selinux_capable+0x2b6/0x3b0
[  241.622660][ T5380]  ? selinux_bpf+0xce/0xf0
[  241.627079][ T5380]  ? security_bpf+0x93/0xb0
[  241.631577][ T5380]  __sys_bpf+0x4c8/0x850
[  241.635806][ T5380]  ? bpf_link_show_fdinfo+0x330/0x330
[  241.641156][ T5380]  ? preempt_schedule_irq+0xca/0x120
[  241.646428][ T5380]  ? irqentry_exit+0x37/0x40
[  241.650996][ T5380]  ? sysvec_reschedule_ipi+0x78/0x80
[  241.656269][ T5380]  ? asm_sysvec_reschedule_ipi+0x1b/0x20
[  241.661887][ T5380]  __x64_sys_bpf+0x7c/0x90
[  241.666284][ T5380]  x64_sys_call+0x488/0x9a0
[  241.670770][ T5380]  do_syscall_64+0x4c/0xa0
[  241.675172][ T5380]  ? clear_bhb_loop+0x30/0x80
[  241.679829][ T5380]  ? clear_bhb_loop+0x30/0x80
[  241.684486][ T5380]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  241.690365][ T5380] RIP: 0033:0x7fac9ab9de99
[  241.694760][ T5380] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  241.714344][ T5380] RSP: 002b:00007fac9bab9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  241.722739][ T5380] RAX: ffffffffffffffda RBX: 00007fac9ae25fa0 RCX: 00007fac9ab9de99
[  241.730694][ T5380] RDX: 0000000000000010 RSI: 0000200000000580 RDI: 000000000000000f
[  241.738908][ T5380] RBP: 00007fac9bab9090 R08: 0000000000000000 R09: 0000000000000000
[  241.746859][ T5380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  241.754809][ T5380] R13: 00007fac9ae26038 R14: 00007fac9ae25fa0 R15: 00007ffc8428a888
[  241.762767][ T5380]  </TASK>
[  241.781930][ T5386] FAULT_INJECTION: forcing a failure.
[  241.781930][ T5386] name failslab, interval 1, probability 0, space 0, times 0
[  241.814091][ T5386] CPU: 0 PID: 5386 Comm: syz.3.1224 Not tainted syzkaller #0
[  241.821487][ T5386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  241.831547][ T5386] Call Trace:
[  241.834823][ T5386]  <TASK>
[  241.837750][ T5386]  __dump_stack+0x21/0x24
[  241.842087][ T5386]  dump_stack_lvl+0x110/0x170
[  241.846766][ T5386]  ? __cfi_dump_stack_lvl+0x8/0x8
[  241.851788][ T5386]  ? csum_and_copy_from_iter+0x573/0x12b0
[  241.857509][ T5386]  dump_stack+0x15/0x24
[  241.861669][ T5386]  should_fail_ex+0x3bf/0x510
[  241.866355][ T5386]  __should_failslab+0xac/0xf0
[  241.871124][ T5386]  should_failslab+0x9/0x20
[  241.875738][ T5386]  kmem_cache_alloc_node+0x42/0x330
[  241.880946][ T5386]  ? __alloc_skb+0xe8/0x4a0
[  241.885450][ T5386]  __alloc_skb+0xe8/0x4a0
[  241.889775][ T5386]  __ip6_append_data+0x2939/0x3c30
[  241.894893][ T5386]  ? __cfi_ping_getfrag+0x10/0x10
[  241.899920][ T5386]  ? __cfi__raw_spin_lock_bh+0x10/0x10
[  241.901810][ T5390] loop4: detected capacity change from 0 to 4096
[  241.905377][ T5386]  ? ip6_setup_cork+0x10c0/0x10c0
[  241.916702][ T5386]  ? ip6_setup_cork+0xb42/0x10c0
[  241.921651][ T5386]  ip6_append_data+0x1c7/0x3e0
[  241.926417][ T5386]  ? __cfi_ping_getfrag+0x10/0x10
[  241.931440][ T5386]  ping_v6_sendmsg+0xb67/0xf00
[  241.936210][ T5386]  ? _parse_integer+0x2a/0x40
[  241.940894][ T5386]  ? __cfi_ping_v6_sendmsg+0x10/0x10
[  241.946195][ T5386]  ? selinux_socket_sendmsg+0x22f/0x340
[  241.951749][ T5386]  ? __cfi_selinux_socket_sendmsg+0x10/0x10
[  241.957655][ T5386]  ? __fget_files+0x2d1/0x330
[  241.962340][ T5386]  ? inet_send_prepare+0x60/0x4d0
[  241.967461][ T5386]  inet_sendmsg+0xb6/0xd0
[  241.971805][ T5386]  __sys_sendto+0x4ac/0x660
[  241.976310][ T5386]  ? __cfi___sys_sendto+0x10/0x10
[  241.981339][ T5386]  ? ksys_write+0x1fa/0x260
[  241.985851][ T5386]  ? __cfi_ksys_write+0x10/0x10
[  241.990699][ T5386]  __x64_sys_sendto+0xe5/0x100
[  241.995457][ T5386]  x64_sys_call+0x83/0x9a0
[  241.999858][ T5386]  do_syscall_64+0x4c/0xa0
[  242.004260][ T5386]  ? clear_bhb_loop+0x30/0x80
[  242.008914][ T5386]  ? clear_bhb_loop+0x30/0x80
[  242.013573][ T5386]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  242.019464][ T5386] RIP: 0033:0x7f3aedd9de99
[  242.023858][ T5386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  242.043445][ T5386] RSP: 002b:00007f3aeecb4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  242.051837][ T5386] RAX: ffffffffffffffda RBX: 00007f3aee025fa0 RCX: 00007f3aedd9de99
[  242.059789][ T5386] RDX: 000000000000ffd8 RSI: 0000200000000080 RDI: 0000000000000003
[  242.067746][ T5386] RBP: 00007f3aeecb4090 R08: 0000000000000000 R09: 0000000000000000
[  242.075713][ T5386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  242.083747][ T5386] R13: 00007f3aee026038 R14: 00007f3aee025fa0 R15: 00007ffcd7f98fa8
[  242.091726][ T5386]  </TASK>
[  242.127313][ T5396] loop0: detected capacity change from 0 to 512
[  242.170158][ T5390] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  242.185990][ T5401] fuse: Unknown parameter 'group_i00000000000000000000'
[  242.201165][ T5396] EXT4-fs warning (device loop0): ext4_xattr_inode_get:492: inode #11: comm syz.0.1228: ea_inode file size=100 entry size=4
[  242.202324][   T28] audit: type=1400 audit(1784975412.551:2787): avc:  denied  { getopt } for  pid=5389 comm="syz.4.1223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  242.222363][ T5396] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: comm syz.0.1228: inode #3644: comm syz.0.1228: iget: illegal inode #
[  242.248631][ T5396] EXT4-fs (loop0): Remounting filesystem read-only
[  242.250331][ T5331] F2FS-fs (loop1): ino:14, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled
[  242.268207][ T5396] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.1228: error while reading EA inode 3644 err=-117
[  242.268778][  T291] EXT4-fs (loop4): unmounting filesystem.
[  242.280982][   T28] audit: type=1400 audit(1784975412.591:2788): avc:  denied  { ioctl } for  pid=5389 comm="syz.4.1223" path="socket:[40009]" dev="sockfs" ino=40009 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  242.309257][ T5406] Mass Storage Function, version: 2009/09/11
[  242.312426][ T5396] EXT4-fs (loop0): Remounting filesystem read-only
[  242.312533][ T5396] EXT4-fs error (device loop0): ext4_do_update_inode:5281: inode #15: comm syz.0.1228: corrupted inode contents
[  242.337721][   T28] audit: type=1400 audit(1784975412.631:2789): avc:  denied  { mount } for  pid=5405 comm="syz.5.1232" name="/" dev="configfs" ino=14630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  242.357982][ T5406] LUN: removable file: (no medium)
[  242.360560][   T28] audit: type=1400 audit(1784975412.631:2790): avc:  denied  { search } for  pid=5405 comm="syz.5.1232" name="/" dev="configfs" ino=14630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  242.366049][ T5396] EXT4-fs (loop0): Remounting filesystem read-only
[  242.394169][   T28] audit: type=1400 audit(1784975412.631:2791): avc:  denied  { write } for  pid=5405 comm="syz.5.1232" name="usb_gadget" dev="configfs" ino=14631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  242.410982][ T5396] EXT4-fs error (device loop0): ext4_dirty_inode:6158: inode #15: comm syz.0.1228: mark_inode_dirty error
[  242.425071][   T28] audit: type=1400 audit(1784975412.631:2792): avc:  denied  { add_name } for  pid=5405 comm="syz.5.1232" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  242.431422][ T5406] mass_storage.usb0/lun.0: file too small: file0
[  242.450871][   T28] audit: type=1400 audit(1784975412.631:2793): avc:  denied  { create } for  pid=5405 comm="syz.5.1232" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1
[  242.466917][  T763] kworker/u4:196: attempt to access beyond end of device
[  242.466917][  T763] loop1: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[  242.475403][ T5396] EXT4-fs (loop0): Remounting filesystem read-only
[  242.496488][   T28] audit: type=1400 audit(1784975412.771:2794): avc:  denied  { write } for  pid=5405 comm="syz.5.1232" name="file" dev="configfs" ino=40015 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1
[  242.519633][ T5396] EXT4-fs error (device loop0): ext4_do_update_inode:5281: inode #15: comm syz.0.1228: corrupted inode contents
[  242.522977][  T301] usb 4-1: new full-speed USB device number 21 using dummy_hcd
[  242.549479][   T28] audit: type=1400 audit(1784975412.771:2795): avc:  denied  { open } for  pid=5405 comm="syz.5.1232" path="/179/my_configfs/usb_gadget/g1/functions/mass_storage.usb0/lun.0/file" dev="configfs" ino=40015 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1
[  242.579670][ T5396] EXT4-fs (loop0): Remounting filesystem read-only
[  242.586214][ T5396] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2945: inode #15: comm syz.0.1228: mark_inode_dirty error
[  242.628577][   T28] audit: type=1400 audit(1784975412.851:2796): avc:  denied  { unmount } for  pid=2443 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  242.648987][ T5396] EXT4-fs (loop0): Remounting filesystem read-only
[  242.655942][ T5396] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2948: inode #15: comm syz.0.1228: mark inode dirty (error -117)
[  242.686812][ T5396] EXT4-fs (loop0): Remounting filesystem read-only
[  242.696769][ T5396] EXT4-fs warning (device loop0): ext4_evict_inode:301: xattr delete (err -117)
[  242.700193][ T5420] loop5: detected capacity change from 0 to 256
[  242.718588][ T5420] FAT-fs (loop5): Directory bread(block 64) failed
[  242.725174][ T5420] FAT-fs (loop5): Directory bread(block 65) failed
[  242.725367][ T5396] EXT4-fs (loop0): 1 orphan inode deleted
[  242.732248][ T5420] FAT-fs (loop5): Directory bread(block 66) failed
[  242.737963][ T5396] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  242.743976][ T5420] FAT-fs (loop5): Directory bread(block 67) failed
[  242.758894][ T5420] FAT-fs (loop5): Directory bread(block 68) failed
[  242.765425][ T5420] FAT-fs (loop5): Directory bread(block 69) failed
[  242.771978][ T5420] FAT-fs (loop5): Directory bread(block 70) failed
[  242.778479][ T5420] FAT-fs (loop5): Directory bread(block 71) failed
[  242.785029][ T5420] FAT-fs (loop5): Directory bread(block 72) failed
[  242.791558][ T5420] FAT-fs (loop5): Directory bread(block 73) failed
[  242.801631][  T301] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1048, setting to 64
[  242.819704][  T301] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7
[  242.834820][  T301] usb 4-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00
[  242.843994][  T301] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  242.855528][  T301] usb 4-1: config 0 descriptor??
[  242.863430][ T5404] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  242.945900][ T5422] loop1: detected capacity change from 0 to 40427
[  242.959967][ T5422] F2FS-fs (loop1): invalid crc value
[  242.973300][ T5422] F2FS-fs (loop1): Found nat_bits in checkpoint
[  243.027769][ T5422] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  243.127047][ T5442] netlink: 8952 bytes leftover after parsing attributes in process `syz.1.1239'.
[  243.136525][ T5442] netlink: 13 bytes leftover after parsing attributes in process `syz.1.1239'.
[  243.150116][ T5443] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1238'.
[  243.327940][  T301] elecom 0003:056E:00FE.001E: unknown main item tag 0x1
[  243.335337][  T301] elecom 0003:056E:00FE.001E: unknown main item tag 0x0
[  243.342329][  T301] elecom 0003:056E:00FE.001E: unknown main item tag 0x0
[  243.349298][  T301] elecom 0003:056E:00FE.001E: unknown main item tag 0x0
[  243.356310][  T301] elecom 0003:056E:00FE.001E: unknown main item tag 0x0
[  243.363287][  T301] elecom 0003:056E:00FE.001E: unknown main item tag 0x0
[  243.370264][  T301] elecom 0003:056E:00FE.001E: unknown main item tag 0x0
[  243.377270][  T301] elecom 0003:056E:00FE.001E: unknown main item tag 0x0
[  243.385036][  T301] elecom 0003:056E:00FE.001E: hidraw0: USB HID v0.0d Device [HID 056e:00fe] on usb-dummy_hcd.3-1/input0
[  243.457540][ T5449] fuse: Unknown parameter 'group_i00000000000000000000'
[  243.496901][  T301] usb 4-1: USB disconnect, device number 21
[  244.017972][ T5476] loop4: detected capacity change from 0 to 1024
[  244.026392][ T5476] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  244.053597][ T5476] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945)
[  244.064704][ T5476] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  244.074675][ T5476] EXT4-fs (loop4): orphan cleanup on readonly fs
[  244.081304][ T5476] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #3: comm syz.4.1247: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 2(4), depth 0(0)
[  244.100943][ T5476] EXT4-fs error (device loop4): ext4_quota_enable:7039: comm syz.4.1247: Bad quota inode: 3, type: 0
[  244.112179][ T5476] EXT4-fs warning (device loop4): ext4_enable_quotas:7080: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  244.126896][ T5476] EXT4-fs (loop4): Cannot turn on quotas: error -117
[  244.133657][ T5476] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  244.215007][ T5476] EXT4-fs error (device loop4): ext4_lookup:1858: inode #16: comm syz.4.1247: iget: bad i_size value: 281474976719656
[  244.559528][ T5477] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  244.849469][   T45] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  244.863415][  T289] EXT4-fs (loop0): unmounting filesystem.
[  244.983923][ T5492] fuse: Unknown parameter 'group_i00000000000000000000'
[  245.027062][ T5498] FAULT_INJECTION: forcing a failure.
[  245.027062][ T5498] name failslab, interval 1, probability 0, space 0, times 0
[  245.039943][ T5498] CPU: 1 PID: 5498 Comm: syz.1.1252 Not tainted syzkaller #0
[  245.047315][ T5498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  245.057362][ T5498] Call Trace:
[  245.060626][ T5498]  <TASK>
[  245.063541][ T5498]  __dump_stack+0x21/0x24
[  245.067867][ T5498]  dump_stack_lvl+0x110/0x170
[  245.072525][ T5498]  ? __cfi_dump_stack_lvl+0x8/0x8
[  245.077536][ T5498]  ? 0xffffffffa0003f40
[  245.081669][ T5498]  ? is_bpf_text_address+0x177/0x190
[  245.086941][ T5498]  dump_stack+0x15/0x24
[  245.091081][ T5498]  should_fail_ex+0x3bf/0x510
[  245.095739][ T5498]  __should_failslab+0xac/0xf0
[  245.100491][ T5498]  should_failslab+0x9/0x20
[  245.104979][ T5498]  kmem_cache_alloc_node+0x42/0x330
[  245.110160][ T5498]  ? dup_task_struct+0x5a/0x7e0
[  245.115001][ T5498]  dup_task_struct+0x5a/0x7e0
[  245.119657][ T5498]  ? __kasan_check_write+0x14/0x20
[  245.124750][ T5498]  copy_process+0x5e7/0x3500
[  245.129328][ T5498]  ? kasan_save_alloc_info+0x1f/0x30
[  245.134599][ T5498]  ? kmalloc_node_trace+0x3d/0xb0
[  245.139606][ T5498]  ? create_io_worker+0xc4/0x680
[  245.144545][ T5498]  ? io_queue_iowq+0x314/0x4d0
[  245.149295][ T5498]  ? io_queue_sqe_fallback+0xce/0x1b0
[  245.154653][ T5498]  ? io_submit_sqes+0x18eb/0x1ba0
[  245.159659][ T5498]  ? x64_sys_call+0x4b2/0x9a0
[  245.164409][ T5498]  ? do_syscall_64+0x4c/0xa0
[  245.168986][ T5498]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  245.175059][ T5498]  ? idle_dummy+0x10/0x10
[  245.179374][ T5498]  ? __cfi_io_wqe_worker+0x10/0x10
[  245.184472][ T5498]  ? __cfi_io_wqe_worker+0x10/0x10
[  245.189567][ T5498]  create_io_thread+0xea/0x140
[  245.194336][ T5498]  ? __cfi_create_io_thread+0x10/0x10
[  245.199693][ T5498]  ? __cfi_io_wqe_worker+0x10/0x10
[  245.204788][ T5498]  ? __kasan_kmalloc+0x95/0xb0
[  245.209534][ T5498]  ? create_io_worker+0xc4/0x680
[  245.214456][ T5498]  create_io_worker+0x1f6/0x680
[  245.219289][ T5498]  io_wqe_enqueue+0x6ff/0x9a0
[  245.223967][ T5498]  ? io_prep_async_work+0x432/0x6a0
[  245.229156][ T5498]  io_wq_enqueue+0x40/0x50
[  245.233578][ T5498]  io_queue_iowq+0x314/0x4d0
[  245.238154][ T5498]  io_queue_sqe_fallback+0xce/0x1b0
[  245.243335][ T5498]  io_submit_sqes+0x18eb/0x1ba0
[  245.248175][ T5498]  __se_sys_io_uring_enter+0x32c/0x1f50
[  245.253761][ T5498]  ? vfs_write+0xa51/0xd00
[  245.258158][ T5498]  ? __x64_sys_io_uring_enter+0x100/0x100
[  245.263860][ T5498]  ? __kasan_check_write+0x14/0x20
[  245.268967][ T5498]  ? mutex_unlock+0x8f/0x230
[  245.273547][ T5498]  ? __cfi_mutex_unlock+0x10/0x10
[  245.278560][ T5498]  ? __kasan_check_write+0x14/0x20
[  245.283657][ T5498]  ? fput+0x154/0x1a0
[  245.287622][ T5498]  ? ksys_write+0x1fa/0x260
[  245.292106][ T5498]  ? __cfi_ksys_write+0x10/0x10
[  245.296959][ T5498]  __x64_sys_io_uring_enter+0xe5/0x100
[  245.302406][ T5498]  x64_sys_call+0x4b2/0x9a0
[  245.306894][ T5498]  do_syscall_64+0x4c/0xa0
[  245.311291][ T5498]  ? clear_bhb_loop+0x30/0x80
[  245.315946][ T5498]  ? clear_bhb_loop+0x30/0x80
[  245.320604][ T5498]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  245.326481][ T5498] RIP: 0033:0x7fc5ba79de99
[  245.330878][ T5498] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  245.350466][ T5498] RSP: 002b:00007fc5bb71cfb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[  245.358879][ T5498] RAX: ffffffffffffffda RBX: 0000200000000180 RCX: 00007fc5ba79de99
[  245.366856][ T5498] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 0000000000000004
[  245.374817][ T5498] RBP: 0000200000000240 R08: 0000000000000000 R09: 0000000000000008
[  245.382770][ T5498] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001
[  245.390719][ T5498] R13: 00007fc5baa26038 R14: 00007fc5baa25fa0 R15: 00007ffc8b474cc8
[  245.398674][ T5498]  </TASK>
[  245.456196][ T5500] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1250'.
[  245.720500][ T5477] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  245.740803][ T5477] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  245.759445][ T5477] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  245.767449][ T5477] usb 5-1: Product: syz
[  245.779451][ T5477] usb 5-1: Manufacturer: syz
[  245.784053][ T5477] usb 5-1: SerialNumber: syz
[  245.994021][ T5511] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1257'.
[  246.489094][ T5507] loop5: detected capacity change from 0 to 4096
[  246.498235][ T5505] loop1: detected capacity change from 0 to 131072
[  246.508275][ T5505] F2FS-fs (loop1): Unrecognized mount option "" or missing value
[  246.696781][ T5507] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  246.980547][ T5505] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1255'.
[  247.472542][ T5526] loop3: detected capacity change from 0 to 512
[  247.501119][ T5526] EXT4-fs: dax option not supported
[  247.538949][   T28] kauditd_printk_skb: 5 callbacks suppressed
[  247.538964][   T28] audit: type=1400 audit(1784975417.881:2802): avc:  denied  { ioctl } for  pid=5506 comm="syz.5.1256" path="/189/file1/file3" dev="loop5" ino=16 ioctlcmd=0x6685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  247.539015][ T5507] fs-verity: sha256 using implementation "sha256-avx2"
[  247.580977][  T322] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  247.583881][ T5526] loop3: detected capacity change from 0 to 256
[  247.599517][  T322] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  247.618772][  T322] Buffer I/O error on dev loop3, logical block 0, async page read
[  247.634935][ T5526] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  247.679127][ T5526] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  247.700605][ T2443] EXT4-fs (loop5): unmounting filesystem.
[  247.760049][ T5535] loop5: detected capacity change from 0 to 1024
[  247.783053][ T5535] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  247.793363][ T5535] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945)
[  247.808570][ T5535] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  247.817107][ T5535] EXT4-fs (loop5): orphan cleanup on readonly fs
[  247.822439][ T5524] loop0: detected capacity change from 0 to 40427
[  247.823749][ T5535] EXT4-fs error (device loop5): ext4_ext_check_inode:520: inode #3: comm syz.5.1263: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 2(4), depth 0(0)
[  247.847883][ T5524] F2FS-fs (loop0): invalid crc value
[  247.850079][ T5535] EXT4-fs error (device loop5): ext4_quota_enable:7039: comm syz.5.1263: Bad quota inode: 3, type: 0
[  247.868308][ T5524] F2FS-fs (loop0): Found nat_bits in checkpoint
[  247.870826][ T5535] EXT4-fs warning (device loop5): ext4_enable_quotas:7080: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  247.889706][ T5535] EXT4-fs (loop5): Cannot turn on quotas: error -117
[  247.896406][ T5535] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  247.928540][ T5535] EXT4-fs error (device loop5): ext4_lookup:1858: inode #16: comm syz.5.1263: iget: bad i_size value: 281474976719656
[  247.942136][ T5524] F2FS-fs (loop0): Start checkpoint disabled!
[  247.966133][ T5524] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0
[  247.973732][ T5524] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  248.229562][ T1169] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  248.454908][ T1169] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  248.464723][  T750] kworker/u4:183: attempt to access beyond end of device
[  248.464723][  T750] loop0: rw=2049, sector=40960, nr_sectors = 32 limit=40427
[  248.467305][ T1169] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  248.489292][ T1169] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  248.497638][ T1169] usb 6-1: Product: syz
[  248.501992][ T1169] usb 6-1: Manufacturer: syz
[  248.511906][ T1169] usb 6-1: SerialNumber: syz
[  248.569863][ T5477] cdc_ncm 5-1:1.0: bind() failure
[  248.575379][  T291] EXT4-fs (loop4): unmounting filesystem.
[  248.575931][ T5477] cdc_ncm: probe of 5-1:1.1 failed with error -71
[  248.590178][ T5477] cdc_mbim: probe of 5-1:1.1 failed with error -71
[  248.601744][ T5477] usb 5-1: USB disconnect, device number 18
[  249.019463][ T5477] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  249.869296][ T5565] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1270'.
[  250.071167][ T5477] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  250.100692][ T5477] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  250.123289][ T5477] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  250.136789][ T5477] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  250.152129][ T5477] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  250.169752][ T5477] usb 5-1: config 0 descriptor??
[  250.180257][ T5576] fuse: Unknown parameter 'group_id00000000000000000000'
[  250.200369][ T5578] device veth0 entered promiscuous mode
[  250.206919][ T5578] device veth0 left promiscuous mode
[  250.552103][ T5581] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1275'.
[  250.574566][ T5584] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1278'.
[  250.726470][ T5477] plantronics 0003:047F:FFFF.001F: unknown main item tag 0xd
[  250.736140][ T5477] plantronics 0003:047F:FFFF.001F: No inputs registered, leaving
[  250.745161][ T5477] plantronics 0003:047F:FFFF.001F: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  250.902069][ T1169] cdc_ncm 6-1:1.0: bind() failure
[  250.911426][ T1169] cdc_ncm: probe of 6-1:1.1 failed with error -71
[  250.921942][ T1169] cdc_mbim: probe of 6-1:1.1 failed with error -71
[  250.929019][ T2443] EXT4-fs (loop5): unmounting filesystem.
[  250.933213][ T1169] usb 6-1: USB disconnect, device number 10
[  250.948917][   T28] audit: type=1326 audit(1784975421.291:2803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5589 comm="syz.5.1279" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac9ab9de99 code=0x7ffc0000
[  250.974712][   T28] audit: type=1326 audit(1784975421.291:2804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5589 comm="syz.5.1279" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac9ab9de99 code=0x7ffc0000
[  251.002847][ T4738] usb 5-1: USB disconnect, device number 19
[  251.010672][   T28] audit: type=1326 audit(1784975421.291:2805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5589 comm="syz.5.1279" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac9ab9de99 code=0x7ffc0000
[  251.048522][   T28] audit: type=1326 audit(1784975421.291:2806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5589 comm="syz.5.1279" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac9ab9de99 code=0x7ffc0000
[  251.141573][   T28] audit: type=1326 audit(1784975421.291:2807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5589 comm="syz.5.1279" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7fac9ab9de99 code=0x7ffc0000
[  251.522739][ T5596] loop0: detected capacity change from 0 to 256
[  251.530413][ T5596] exfat: Deprecated parameter 'namecase'
[  251.536153][ T5596] exfat: Deprecated parameter 'namecase'
[  251.541878][ T5596] exfat: Deprecated parameter 'namecase'
[  251.547709][ T5596] exfat: Bad value for 'uid'
[  251.584179][ T5598] loop1: detected capacity change from 0 to 128
[  251.589394][   T28] audit: type=1326 audit(1784975421.302:2808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5589 comm="syz.5.1279" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac9ab9de99 code=0x7ffc0000
[  251.616257][   T28] audit: type=1326 audit(1784975421.302:2809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5589 comm="syz.5.1279" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac9ab9de99 code=0x7ffc0000
[  251.618205][  T901] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  251.644262][   T28] audit: type=1326 audit(1784975421.302:2810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5589 comm="syz.5.1279" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac9ab9de99 code=0x7ffc0000
[  251.661663][ T5598] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  251.677872][ T5601] tap0: tun_chr_ioctl cmd 1074025673
[  251.690743][ T5598] ext4 filesystem being mounted at /235/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  251.708071][   T28] audit: type=1326 audit(1784975421.302:2811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5589 comm="syz.5.1279" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac9ab9de99 code=0x7ffc0000
[  251.738150][ T5601] tap0: tun_chr_ioctl cmd 1074025673
[  251.758244][  T287] EXT4-fs (loop1): unmounting filesystem.
[  252.313849][ T5614] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1286'.
[  252.592272][ T5612] loop1: detected capacity change from 0 to 512
[  252.600692][ T5612] EXT4-fs: Invalid want_extra_isize 7
[  252.686252][ T5618] fuse: Bad value for 'user_id'
[  252.702151][ T1169] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  252.850667][ T5624] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1288'.
[  252.991084][ T1169] usb 6-1: Using ep0 maxpacket: 16
[  253.031492][ T1169] usb 6-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  253.151375][ T1169] usb 6-1: config 0 interface 0 has no altsetting 0
[  253.161027][ T1169] usb 6-1: New USB device found, idVendor=6666, idProduct=8802, bcdDevice= 0.00
[  253.170304][ T1169] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  253.182768][ T1169] usb 6-1: config 0 descriptor??
[  253.599462][ T5477] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  253.620977][ T1169] smartjoyplus 0003:6666:8802.0020: hidraw0: USB HID v10.01 Device [HID 6666:8802] on usb-dummy_hcd.5-1/input0
[  253.633063][ T1169] smartjoyplus 0003:6666:8802.0020: no output reports found
[  254.074729][    T6] usb 6-1: USB disconnect, device number 11
[  254.081889][ T5650] loop4: detected capacity change from 0 to 256
[  254.088537][ T5650] exfat: Deprecated parameter 'namecase'
[  254.094308][ T5650] exfat: Deprecated parameter 'namecase'
[  254.099951][ T5650] exfat: Deprecated parameter 'namecase'
[  254.105612][ T5650] exfat: Bad value for 'uid'
[  254.176495][ T5477] usb 1-1: Using ep0 maxpacket: 16
[  254.182831][ T5477] usb 1-1: config 0 has an invalid interface number: 105 but max is -1
[  254.191246][ T5477] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  254.203901][ T5477] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0
[  254.212848][ T5477] usb 1-1: config 0 has no interface number 0
[  254.219108][ T5477] usb 1-1: config 0 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  254.232388][ T5477] usb 1-1: config 0 interface 105 has no altsetting 0
[  254.244132][ T5654] loop3: detected capacity change from 0 to 40427
[  254.253733][ T5477] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  254.263685][ T5654] F2FS-fs (loop3): invalid crc value
[  254.269025][ T5477] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  254.269873][ T5654] F2FS-fs (loop3): Found nat_bits in checkpoint
[  254.277208][ T5477] usb 1-1: Product: syz
[  254.287627][ T5477] usb 1-1: Manufacturer: syz
[  254.292317][ T5477] usb 1-1: SerialNumber: syz
[  254.300861][ T5477] usb 1-1: config 0 descriptor??
[  254.308753][ T5654] F2FS-fs (loop3): Start checkpoint disabled!
[  254.316838][ T5654] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0
[  254.324257][ T5654] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  254.452808][  T684] kworker/u4:122: attempt to access beyond end of device
[  254.452808][  T684] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  254.539854][ T5585] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  254.573099][    T6] usb 1-1: USB disconnect, device number 19
[  255.450047][ T5669] loop4: detected capacity change from 0 to 512
[  255.457633][ T5669] EXT4-fs: Invalid want_extra_isize 7
[  255.625189][  T901] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  255.694626][ T5678] dummy_hcd dummy_hcd.0: remove, state 1
[  255.700929][ T5678] usb usb1: USB disconnect, device number 1
[  255.727334][ T5585] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  255.727749][ T5678] dummy_hcd dummy_hcd.0: stopped
[  255.742616][ T5585] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  255.743227][ T5678] dummy_hcd dummy_hcd.0: USB bus 1 deregistered
[  255.791941][ T5674] loop5: detected capacity change from 0 to 40427
[  255.810490][ T5674] F2FS-fs (loop5): invalid crc value
[  255.821357][ T5674] F2FS-fs (loop5): Found nat_bits in checkpoint
[  255.825908][ T5585] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  255.840520][ T5585] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  255.849780][ T5585] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  255.858561][ T5585] usb 2-1: config 0 descriptor??
[  255.865109][ T5674] F2FS-fs (loop5): Start checkpoint disabled!
[  255.872098][ T5674] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0
[  255.880823][ T5674] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  256.281727][ T1169] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  256.497439][ T1169] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  256.561293][ T1169] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  256.640896][ T1169] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  256.677285][ T5688] syz.5.1303: attempt to access beyond end of device
[  256.677285][ T5688] loop5: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  256.851733][ T5585] plantronics 0003:047F:FFFF.0021: unknown main item tag 0xd
[  256.858640][ T1169] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  256.868178][ T1169] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  256.870658][ T5585] plantronics 0003:047F:FFFF.0021: No inputs registered, leaving
[  256.884382][ T1169] usb 4-1: config 0 descriptor??
[  256.885225][ T5585] plantronics 0003:047F:FFFF.0021: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  256.920545][ T1587] kworker/u4:206: attempt to access beyond end of device
[  256.920545][ T1587] loop5: rw=1, sector=77824, nr_sectors = 2048 limit=40427
[  256.941292][ T1587] kworker/u4:206: attempt to access beyond end of device
[  256.941292][ T1587] loop5: rw=1, sector=79872, nr_sectors = 2048 limit=40427
[  256.960622][ T1587] kworker/u4:206: attempt to access beyond end of device
[  256.960622][ T1587] loop5: rw=1, sector=49152, nr_sectors = 2048 limit=40427
[  256.979935][ T1587] kworker/u4:206: attempt to access beyond end of device
[  256.979935][ T1587] loop5: rw=1, sector=51200, nr_sectors = 2048 limit=40427
[  257.003764][ T1587] kworker/u4:206: attempt to access beyond end of device
[  257.003764][ T1587] loop5: rw=1, sector=57344, nr_sectors = 4064 limit=40427
[  257.009404][ T5687] loop0: detected capacity change from 0 to 40427
[  257.018008][    T6] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  257.032331][  T684] kworker/u4:122: attempt to access beyond end of device
[  257.032331][  T684] loop5: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[  257.032927][ T5687] F2FS-fs (loop0): invalid crc value
[  257.062433][ T5687] F2FS-fs (loop0): Found nat_bits in checkpoint
[  257.076181][ T5585] usb 2-1: USB disconnect, device number 21
[  257.120203][ T5687] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  257.180927][  T289] syz-executor: attempt to access beyond end of device
[  257.180927][  T289] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  257.255099][    T6] usb 5-1: Using ep0 maxpacket: 16
[  257.262627][    T6] usb 5-1: unable to get BOS descriptor or descriptor too short
[  257.276966][    T6] usb 5-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40
[  257.286152][    T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  257.294137][    T6] usb 5-1: Product: syz
[  257.298570][    T6] usb 5-1: Manufacturer: syz
[  257.303201][    T6] usb 5-1: SerialNumber: syz
[  257.578523][ T5706] binder: 5680:5706 ioctl c0306201 200000000000 returned -14
[  257.667341][ T1169] plantronics 0003:047F:FFFF.0022: No inputs registered, leaving
[  257.676401][ T1169] plantronics 0003:047F:FFFF.0022: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  258.207810][ T5714] loop0: detected capacity change from 0 to 256
[  259.978783][ T5585] usb 4-1: USB disconnect, device number 22
[  260.015571][ T5733] loop4: detected capacity change from 0 to 512
[  260.024084][ T5733] EXT4-fs: Invalid want_extra_isize 7
[  260.154175][    T6] usb 5-1: 1:1 : unsupported sample bitwidth 1 in 8 bytes
[  260.185438][    T6] usb 5-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22)
[  260.267584][    T6] usb 5-1: failed to enable PITCH for EP 0x1
[  260.286583][    T6] usb 5-1: unit 3 not found!
[  260.301639][    T6] usb 5-1: USB disconnect, device number 20
[  261.155541][  T322] udevd[322]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  261.218632][  T530] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  261.324097][ T5771] loop0: detected capacity change from 0 to 40427
[  261.336498][ T5771] F2FS-fs (loop0): invalid crc value
[  261.342623][ T5771] F2FS-fs (loop0): Found nat_bits in checkpoint
[  261.376147][ T5771] F2FS-fs (loop0): Start checkpoint disabled!
[  261.382940][ T5771] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0
[  261.390632][ T5771] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  261.422437][ T5771] F2FS-fs (loop0): ino:14, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled
[  261.435502][  T530] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  261.451086][  T530] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  261.461249][  T530] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  261.475121][ T1169] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  261.480287][  T530] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  261.494585][  T530] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  261.503811][  T763] kworker/u4:196: attempt to access beyond end of device
[  261.503811][  T763] loop0: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[  261.504024][  T530] usb 2-1: config 0 descriptor??
[  261.665020][ T5769] loop5: detected capacity change from 0 to 131072
[  261.676469][ T5769] F2FS-fs (loop5): Test dummy encryption mode enabled
[  261.684020][ T5769] F2FS-fs (loop5): invalid crc value
[  261.699627][ T5769] F2FS-fs (loop5): Found nat_bits in checkpoint
[  261.711460][ T1169] usb 4-1: config 0 interface 0 altsetting 126 endpoint 0x81 has an invalid bInterval 57, changing to 9
[  261.731568][ T1169] usb 4-1: config 0 interface 0 has no altsetting 0
[  261.738357][ T1169] usb 4-1: New USB device found, idVendor=056a, idProduct=0716, bcdDevice= 0.00
[  261.746253][ T5769] F2FS-fs (loop5): Mounted with checkpoint version = 753bd00b
[  261.748180][ T1169] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  261.798550][ T1169] usb 4-1: config 0 descriptor??
[  262.160751][ T5785] FAULT_INJECTION: forcing a failure.
[  262.160751][ T5785] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  262.248221][ T1169] wacom 0003:056A:0716.0023: unknown main item tag 0x1
[  262.266595][ T1169] wacom 0003:056A:0716.0023: unknown main item tag 0x5
[  262.275846][ T5785] CPU: 1 PID: 5785 Comm: syz.4.1333 Not tainted syzkaller #0
[  262.283230][ T5785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  262.293283][ T5785] Call Trace:
[  262.296567][ T5785]  <TASK>
[  262.299489][ T5785]  __dump_stack+0x21/0x24
[  262.303835][ T5785]  dump_stack_lvl+0x110/0x170
[  262.308522][ T5785]  ? __cfi_dump_stack_lvl+0x8/0x8
[  262.313554][ T5785]  ? __cfi___switch_to+0x10/0x10
[  262.318494][ T5785]  dump_stack+0x15/0x24
[  262.322650][ T5785]  should_fail_ex+0x3bf/0x510
[  262.327324][ T5785]  should_fail+0xb/0x10
[  262.331483][ T5785]  should_fail_usercopy+0x1a/0x20
[  262.336504][ T5785]  _copy_from_user+0x1e/0xc0
[  262.341096][ T5785]  __x64_sys_io_uring_setup+0x10a/0x230
[  262.346645][ T5785]  ? __cfi___x64_sys_io_uring_setup+0x10/0x10
[  262.352716][ T5785]  ? __kasan_check_write+0x14/0x20
[  262.357828][ T5785]  x64_sys_call+0x4ab/0x9a0
[  262.362333][ T5785]  do_syscall_64+0x4c/0xa0
[  262.366757][ T5785]  ? clear_bhb_loop+0x30/0x80
[  262.371430][ T5785]  ? clear_bhb_loop+0x30/0x80
[  262.376100][ T5785]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  262.381999][ T5785] RIP: 0033:0x7fe1f099de99
[  262.386413][ T5785] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  262.406020][ T5785] RSP: 002b:00007fe1f1780ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9
[  262.414438][ T5785] RAX: ffffffffffffffda RBX: 0000200000000a88 RCX: 00007fe1f099de99
[  262.422408][ T5785] RDX: 0000200000000b08 RSI: 0000200000000a88 RDI: 00000000000003c9
[  262.430379][ T5785] RBP: 0000200000000a80 R08: 0000000000000000 R09: 0000000000000000
[  262.438401][ T5785] R10: 0000200000000b10 R11: 0000000000000206 R12: 0000200000000b08
[  262.446374][ T5785] R13: 0000200000000b10 R14: 00007fe1f1780fd8 R15: 0000000000000000
[  262.454360][ T5785]  </TASK>
[  262.484914][  T530] plantronics 0003:047F:FFFF.0024: unknown main item tag 0xd
[  262.493406][  T530] plantronics 0003:047F:FFFF.0024: No inputs registered, leaving
[  262.494391][ T1169] wacom 0003:056A:0716.0023: unknown main item tag 0x6
[  262.510163][  T530] plantronics 0003:047F:FFFF.0024: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  262.510778][ T1169] wacom 0003:056A:0716.0023: Unknown device_type for 'HID 056a:0716'. Ignoring.
[  262.528044][  T530] usb 2-1: USB disconnect, device number 22
[  262.591651][ T5789] fido_id[5789]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  262.608929][ T1169] usb 4-1: USB disconnect, device number 23
[  262.902617][ T5811] FAULT_INJECTION: forcing a failure.
[  262.902617][ T5811] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  262.916154][ T5811] CPU: 0 PID: 5811 Comm: syz.5.1342 Not tainted syzkaller #0
[  262.923544][ T5811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  262.933605][ T5811] Call Trace:
[  262.936887][ T5811]  <TASK>
[  262.939825][ T5811]  __dump_stack+0x21/0x24
[  262.944165][ T5811]  dump_stack_lvl+0x110/0x170
[  262.948844][ T5811]  ? __cfi_dump_stack_lvl+0x8/0x8
[  262.953865][ T5811]  ? kasan_set_track+0x60/0x70
[  262.958613][ T5811]  ? __kmalloc_node_track_caller+0xb1/0x1e0
[  262.964487][ T5811]  ? __ip6_append_data+0x2939/0x3c30
[  262.969752][ T5811]  ? ip6_append_data+0x1c7/0x3e0
[  262.974669][ T5811]  ? ping_v6_sendmsg+0xb67/0xf00
[  262.979589][ T5811]  ? __sys_sendto+0x4ac/0x660
[  262.984243][ T5811]  dump_stack+0x15/0x24
[  262.988376][ T5811]  should_fail_ex+0x3bf/0x510
[  262.993029][ T5811]  should_fail+0xb/0x10
[  262.997156][ T5811]  should_fail_usercopy+0x1a/0x20
[  263.002172][ T5811]  _copy_from_user+0x1e/0xc0
[  263.006742][ T5811]  csum_and_copy_from_iter+0x492/0x12b0
[  263.012262][ T5811]  ? __cfi_csum_and_copy_from_iter+0x10/0x10
[  263.018217][ T5811]  ? __kasan_check_write+0x14/0x20
[  263.023307][ T5811]  ? __build_skb_around+0x24c/0x470
[  263.028499][ T5811]  ping_getfrag+0x6b/0x280
[  263.032894][ T5811]  ? __alloc_skb+0x2d0/0x4a0
[  263.037467][ T5811]  __ip6_append_data+0x2cf1/0x3c30
[  263.042572][ T5811]  ? __cfi_ping_getfrag+0x10/0x10
[  263.047606][ T5811]  ? __cfi__raw_spin_lock_bh+0x10/0x10
[  263.053072][ T5811]  ? ip6_setup_cork+0x10c0/0x10c0
[  263.058106][ T5811]  ? ip6_setup_cork+0xb42/0x10c0
[  263.063049][ T5811]  ip6_append_data+0x1c7/0x3e0
[  263.067822][ T5811]  ? __cfi_ping_getfrag+0x10/0x10
[  263.072853][ T5811]  ping_v6_sendmsg+0xb67/0xf00
[  263.077625][ T5811]  ? _parse_integer+0x2a/0x40
[  263.082305][ T5811]  ? __cfi_ping_v6_sendmsg+0x10/0x10
[  263.087600][ T5811]  ? selinux_socket_sendmsg+0x22f/0x340
[  263.093145][ T5811]  ? __cfi_selinux_socket_sendmsg+0x10/0x10
[  263.099042][ T5811]  ? __fget_files+0x2d1/0x330
[  263.103723][ T5811]  ? inet_send_prepare+0x60/0x4d0
[  263.108754][ T5811]  inet_sendmsg+0xb6/0xd0
[  263.113096][ T5811]  __sys_sendto+0x4ac/0x660
[  263.117599][ T5811]  ? __cfi___sys_sendto+0x10/0x10
[  263.122631][ T5811]  ? ksys_write+0x1fa/0x260
[  263.127140][ T5811]  ? __cfi_ksys_write+0x10/0x10
[  263.131990][ T5811]  __x64_sys_sendto+0xe5/0x100
[  263.136930][ T5811]  x64_sys_call+0x83/0x9a0
[  263.141371][ T5811]  do_syscall_64+0x4c/0xa0
[  263.145813][ T5811]  ? clear_bhb_loop+0x30/0x80
[  263.150509][ T5811]  ? clear_bhb_loop+0x30/0x80
[  263.155206][ T5811]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  263.161128][ T5811] RIP: 0033:0x7fac9ab9de99
[  263.165552][ T5811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  263.185257][ T5811] RSP: 002b:00007fac9bab9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  263.193680][ T5811] RAX: ffffffffffffffda RBX: 00007fac9ae25fa0 RCX: 00007fac9ab9de99
[  263.201690][ T5811] RDX: 000000000000ffd8 RSI: 0000200000000080 RDI: 0000000000000003
[  263.209674][ T5811] RBP: 00007fac9bab9090 R08: 0000000000000000 R09: 0000000000000000
[  263.217634][ T5811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  263.225591][ T5811] R13: 00007fac9ae26038 R14: 00007fac9ae25fa0 R15: 00007ffc8428a888
[  263.233589][ T5811]  </TASK>
[  264.019094][ T5843] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN
[  264.030941][ T5843] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[  264.039358][ T5843] CPU: 1 PID: 5843 Comm: syz.0.1352 Not tainted syzkaller #0
[  264.046746][ T5843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  264.056826][ T5843] RIP: 0010:dummy_udc_start+0xbb/0x1d0
[  264.062316][ T5843] Code: 00 00 ff 24 c5 00 6c e3 85 e8 21 02 25 fe eb 13 e8 1a 02 25 fe eb 0c e8 13 02 25 fe eb 05 e8 0c 02 25 fe 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 f7 e8 a6 8c 6a fe 4d 8b 36 4c 89 f7 e8
[  264.082107][ T5843] RSP: 0018:ffffc9000e57f7e8 EFLAGS: 00010246
[  264.088189][ T5843] RAX: 0000000000000000 RBX: ffff88811ba38010 RCX: 0000000000080000
[  264.096519][ T5843] RDX: ffffc900015ca000 RSI: 0000000000001309 RDI: 000000000000130a
[  264.104795][ T5843] RBP: ffffc9000e57f810 R08: ffff88813f685100 R09: 0000000000000004
[  264.112954][ T5843] R10: 0000000000000005 R11: 0000000000000002 R12: dffffc0000000000
[  264.120937][ T5843] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000001
[  264.128922][ T5843] FS:  00007f5fffd0b6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[  264.137904][ T5843] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  264.144496][ T5843] CR2: 00007f5ffed87000 CR3: 0000000138cbd000 CR4: 00000000003506a0
[  264.152476][ T5843] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  264.160451][ T5843] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  264.168436][ T5843] Call Trace:
[  264.171720][ T5843]  <TASK>
[  264.174772][ T5843]  ? __cfi_dummy_udc_start+0x10/0x10
[  264.180072][ T5843]  gadget_bind_driver+0x3c5/0x990
[  264.185126][ T5843]  ? __cfi_gadget_bind_driver+0x10/0x10
[  264.190700][ T5843]  really_probe+0x2d7/0x9a0
[  264.195232][ T5843]  ? __kasan_check_write+0x14/0x20
[  264.200398][ T5843]  __driver_probe_device+0x193/0x270
[  264.205689][ T5843]  driver_probe_device+0x54/0x3e0
[  264.210721][ T5843]  __driver_attach+0x41a/0x5d0
[  264.215540][ T5843]  bus_for_each_dev+0x18c/0x200
[  264.221105][ T5843]  ? __cfi___driver_attach+0x10/0x10
[  264.226666][ T5843]  ? __cfi_bus_for_each_dev+0x10/0x10
[  264.232296][ T5843]  ? _raw_spin_unlock+0x4c/0x70
[  264.237138][ T5843]  ? klist_add_tail+0x1e5/0x220
[  264.242000][ T5843]  driver_attach+0x42/0x50
[  264.246408][ T5843]  bus_add_driver+0x322/0x560
[  264.251169][ T5843]  driver_register+0x335/0x440
[  264.255929][ T5843]  usb_gadget_register_driver_owner+0xf8/0x270
[  264.262081][ T5843]  raw_ioctl+0x112c/0x3180
[  264.266491][ T5843]  ? ioctl_has_perm+0x3a6/0x4f0
[  264.271343][ T5843]  ? __cfi_raw_ioctl+0x10/0x10
[  264.276094][ T5843]  ? has_cap_mac_admin+0x370/0x370
[  264.281204][ T5843]  ? __schedule+0xbea/0x14b0
[  264.285792][ T5843]  ? selinux_file_ioctl+0x3ad/0x4c0
[  264.290988][ T5843]  ? __cfi_selinux_file_ioctl+0x10/0x10
[  264.296536][ T5843]  ? __fget_files+0x2d1/0x330
[  264.301229][ T5843]  ? security_file_ioctl+0x95/0xc0
[  264.306333][ T5843]  ? __cfi_raw_ioctl+0x10/0x10
[  264.311091][ T5843]  __se_sys_ioctl+0x12f/0x1b0
[  264.315763][ T5843]  __x64_sys_ioctl+0x7b/0x90
[  264.320341][ T5843]  x64_sys_call+0x58b/0x9a0
[  264.324829][ T5843]  do_syscall_64+0x4c/0xa0
[  264.329234][ T5843]  ? clear_bhb_loop+0x30/0x80
[  264.333897][ T5843]  ? clear_bhb_loop+0x30/0x80
[  264.338557][ T5843]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  264.344443][ T5843] RIP: 0033:0x7f5ffed9db2b
[  264.348893][ T5843] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[  264.368529][ T5843] RSP: 002b:00007f5fffd08f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  264.376940][ T5843] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f5ffed9db2b
[  264.384920][ T5843] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000005
[  264.392885][ T5843] RBP: 00007f5fffd09fd0 R08: 0000000000000001 R09: 00000000ffffffff
[  264.400846][ T5843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  264.408800][ T5843] R13: 0000200000000440 R14: 0000000000000001 R15: 0000000000000000
[  264.416760][ T5843]  </TASK>
[  264.419772][ T5843] Modules linked in:
[  264.447200][   T28] kauditd_printk_skb: 5 callbacks suppressed
[  264.447214][   T28] audit: type=1400 audit(1784975433.935:2817): avc:  denied  { read } for  pid=85 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[  264.454383][ T5843] ---[ end trace 0000000000000000 ]---
[  264.493046][ T5843] RIP: 0010:dummy_udc_start+0xbb/0x1d0
[  264.498618][ T5843] Code: 00 00 ff 24 c5 00 6c e3 85 e8 21 02 25 fe eb 13 e8 1a 02 25 fe eb 0c e8 13 02 25 fe eb 05 e8 0c 02 25 fe 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 f7 e8 a6 8c 6a fe 4d 8b 36 4c 89 f7 e8
[  264.517622][   T28] audit: type=1400 audit(1784975433.935:2818): avc:  denied  { search } for  pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  264.523841][ T5843] RSP: 0018:ffffc9000e57f7e8 EFLAGS: 00010246
[  264.546266][ T5843] RAX: 0000000000000000 RBX: ffff88811ba38010 RCX: 0000000000080000
[  264.554503][ T5843] RDX: ffffc900015ca000 RSI: 0000000000001309 RDI: 000000000000130a
[  264.562529][ T5843] RBP: ffffc9000e57f810 R08: ffff88813f685100 R09: 0000000000000004
[  264.570755][ T5843] R10: 0000000000000005 R11: 0000000000000002 R12: dffffc0000000000
[  264.581685][   T28] audit: type=1400 audit(1784975433.935:2819): avc:  denied  { write } for  pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  264.600611][ T5843] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000001
[  264.603294][   T28] audit: type=1400 audit(1784975433.935:2820): avc:  denied  { add_name } for  pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  264.611029][ T5843] FS:  00007f5fffd0b6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[  264.632574][   T28] audit: type=1400 audit(1784975433.935:2821): avc:  denied  { create } for  pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  264.640922][ T5843] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  264.661560][   T28] audit: type=1400 audit(1784975433.935:2822): avc:  denied  { append open } for  pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  264.668784][ T5843] CR2: 00007f3aedfed2f8 CR3: 0000000138cbd000 CR4: 00000000003506a0
[  264.690829][   T28] audit: type=1400 audit(1784975433.935:2823): avc:  denied  { getattr } for  pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  264.698752][ T5843] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  264.729526][ T5843] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  264.737549][ T5843] Kernel panic - not syncing: Fatal exception
[  264.743870][ T5843] Kernel Offset: disabled
[  264.748206][ T5843] Rebooting in 86400 seconds..