last executing test programs:

1m15.127888927s ago: executing program 0 (id=132):
r0 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./file1\x00', 0x42, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, 0x0, &(0x7f0000001400)=0x28)
io_setup(0x3, &(0x7f0000001240)=<r2=>0x0)
r3 = socket(0x10, 0x3, 0x4)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
io_setup(0x3ff, &(0x7f0000000040)=<r5=>0x0)
io_submit(r5, 0x2, &(0x7f0000001600)=[&(0x7f0000001640)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x3, 0x0, r4, &(0x7f00000016c0), 0x0, 0xfffffffffffff8c1}])
io_getevents(r5, 0x0, 0x5, &(0x7f0000001700)=[{}, {}, {}, {}, {}], &(0x7f00000017c0)={0x77359400})
sendmsg$nl_route_sched(r3, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001380)=@newqdisc={0x68, 0x14, 0xf0b, 0x80000, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4}, {0xb, 0xfffe}, {0x4}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0xfc, 0x200, 0xa, 0x0, 0x0, 0x7e}}, {0x4}}, {{0x1c, 0x1, {0x9, 0x1, 0x8, 0x2802, 0x0, 0xc, 0x1ff}}, {0xffffff96}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x24048814}, 0x20000040)
io_submit(r2, 0x1, &(0x7f0000001280)=[&(0x7f00000012c0)={0x0, 0x0, 0x10, 0x7, 0x0, r0, 0x0, 0x0, 0x100000000, 0x0, 0x2, r0}])
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2d)
socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000016c0)='./file0\x00', 0x1c2)
mkdir(&(0x7f00000018c0)='./bus\x00', 0xe8)
mount$overlay(0x0, &(0x7f0000001900)='./file0\x00', &(0x7f0000001940), 0x0, &(0x7f0000001980)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
r6 = inotify_init()
inotify_add_watch(r6, &(0x7f00000019c0)='./file0\x00', 0x18b)
umount2(&(0x7f0000001a00)='./file0\x00', 0x8)
syz_mount_image$f2fs(&(0x7f0000001140), &(0x7f0000001180)='./file0\x00', 0x9, &(0x7f00000011c0), 0x1, 0x10577, &(0x7f0000002f80)="$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")
creat(&(0x7f0000013500)='./bus\x00', 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r7, &(0x7f0000001c80)={0x0, 0x4076cbba9945d516, &(0x7f0000001cc0)={0x0, 0x14}}, 0x0)
getsockname$packet(r7, &(0x7f0000001d00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001d40)=0x28a)
r8 = io_uring_setup(0x19c4, &(0x7f0000001500)={0x0, 0x5509, 0x2, 0x0, 0x2ca, 0x0, r0})
r9 = io_uring_setup(0x246f, &(0x7f0000001580)={0x0, 0xb2d1, 0x1, 0x1000003, 0x383, 0x0, r8})
io_uring_register$IORING_REGISTER_BUFFERS(r9, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/4095, 0x440000}], 0x100000000000011a)
r10 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001440), 0x101040)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r10, 0xc0505405, &(0x7f0000001480)={{0x1, 0x3, 0x2, 0x3, 0x7c8a}, 0x9, 0x3847, 0x6})
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r9, 0x10, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000001f00)=""/4096, 0x1000}, {&(0x7f0000002f00)=""/19, 0x13}, {0x0}], &(0x7f0000002f40)=[0xba], 0x11a}, 0x20)

1m12.868127691s ago: executing program 0 (id=144):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
socket$netlink(0x10, 0x3, 0x4)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2)
sched_rr_get_interval(r0, &(0x7f0000000800))
sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000600)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000680), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000006c0), 0x10106, 0x2, 0x0)
keyctl$setperm(0x5, 0x0, 0x200a0204)
r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000006c0)={'bond_slave_1\x00'})
r4 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r4, &(0x7f0000000700)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000740)={0x43, 0x0, 0x3, 0x3}, 0x10)
ioctl$OCFS2_IOC_MOVE_EXT(r3, 0x40406f06, &(0x7f0000000340)={0x2, 0x7091991e, 0x7, 0xfffffffffffffff9, 0x2})
openat(0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00', 0x88040, 0x52)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="5d5b0000000000001c001a8018000a801400070000000000000000000008000000000000140035007767310000"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
mknod(&(0x7f0000000000)='./file1\x00', 0x8000, 0x6)

1m11.698662052s ago: executing program 0 (id=151):
r0 = epoll_create1(0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r1, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e)
listen(r1, 0x0)
r2 = dup(r1)
mount$9p_fd(0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}})

1m11.596548382s ago: executing program 0 (id=152):
syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f0000000080)=ANY=[], 0x1, 0x156c, &(0x7f00000001c0)="$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")
bpf$PROG_LOAD(0x5, 0x0, 0x0)
fsopen(0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$SO_COOKIE(r0, 0x1, 0x39, 0x0, &(0x7f0000000080))
r1 = open(&(0x7f0000001740)='.\x00', 0x20000, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x8, &(0x7f0000000140), 0x5, 0x50c, &(0x7f0000001880)="$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")
syz_mount_image$vfat(&(0x7f0000001dc0), &(0x7f0000001e00)='./bus\x00', 0x81040a, 0x0, 0xff, 0x0, &(0x7f0000001e40))
mount$incfs(&(0x7f0000001e80)='\x00', &(0x7f0000001ec0)='./bus\x00', &(0x7f0000001f00), 0xc002, 0x0)
chdir(&(0x7f0000001f40)='./bus\x00')
lchown(&(0x7f0000001f80)='./file1\x00', 0xee00, 0x0)
mount$bind(0x0, &(0x7f0000001fc0)='.\x00', 0x0, 0x21, 0x0)
getdents64(r1, &(0x7f0000001780)=""/224, 0xe0)

1m10.444615662s ago: executing program 0 (id=155):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8932, &(0x7f00000016c0)={'bond_slave_0\x00', @random="01310130e707"})

1m10.180178659s ago: executing program 0 (id=157):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0)
userfaultfd(0x80001)
syz_open_procfs(0x0, 0x0)
syslog(0x4, &(0x7f0000000040)=""/19, 0xb12288e90d7c8384)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0xffff1000, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x7c, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x184)
sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x8, 0x10, &(0x7f0000000300)=ANY=[@ANYBLOB="bf16000000000000b7070000000000007b7af0ff000000007b7af8ff00000000bf61000000000000bfa200000000000007020000f0ffffffb70300000c000000b704000000000000b70500000000000085000000540000001500020000000000bf010000000000008500000056000000b70000000000000095"], &(0x7f0000000400)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0xe, 0x0, &(0x7f0000000000)="001122334455667788a918dbf57e", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m10.153207592s ago: executing program 32 (id=157):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0)
userfaultfd(0x80001)
syz_open_procfs(0x0, 0x0)
syslog(0x4, &(0x7f0000000040)=""/19, 0xb12288e90d7c8384)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0xffff1000, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x7c, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x184)
sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x8, 0x10, &(0x7f0000000300)=ANY=[@ANYBLOB="bf16000000000000b7070000000000007b7af0ff000000007b7af8ff00000000bf61000000000000bfa200000000000007020000f0ffffffb70300000c000000b704000000000000b70500000000000085000000540000001500020000000000bf010000000000008500000056000000b70000000000000095"], &(0x7f0000000400)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0xe, 0x0, &(0x7f0000000000)="001122334455667788a918dbf57e", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

57.391002322s ago: executing program 2 (id=259):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x10)
r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1/file0\x00', &(0x7f0000000080)={0x60202, 0x33, 0x4}, 0x18)
mkdirat(r0, 0x0, 0x49)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000003000000cad986be1182ff0f06ffc16af5064215c815361315454d5c1cc5030c7e71951d53c223f75591130fd9cb7e486feb31741771b5399f9e131262c5f1a1a037f09ab28b2e7e1a9166fcc810e7da705a06bb3b538e54dce1aecfa95d0de3a75c72b0dbe1af763d5df2dcf49bd1f679b2cdf3800dd31550022746011c137a297326a13da588100d3854101c4e1fb1ba75631ce05c4a3fbf69f12895ee5c6dc2ba4191093df3bcdb9afef0ebf2b2d190bdde20c6e3b614a957a3a80e8773cdb28b98f3a491807dcdd2a6f5a33afae71edcb8fff4bf6748008ef5bf673f20428adc20eb7e9f3ea28b9eae3d4944cb33f84de54e0c967b"], 0x0, 0x53}, 0x28)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./bus\x00', 0x1d7)
setresuid(0x0, 0xee00, 0x0)
capset(&(0x7f0000000380)={0x20080522}, &(0x7f00000003c0)={0x200002, 0x200003, 0x803, 0x0, 0x7, 0x1})
syz_emit_ethernet(0x7e, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000440), 0x8, 0x0)
io_destroy(0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000004c0)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x4000, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r2, &(0x7f0000000580)='27', 0x2)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000005c0)={'vcan0\x00'})
sendmsg$can_bcm(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYRES64=r3, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000002301"], 0x48}}, 0x4008004)
sendmsg$can_bcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="0100000000000000feffffff00000000", @ANYRES64, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="60f5e1ff03"], 0x48}}, 0x0)
unshare(0x40000000)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f0000000b00))

56.05873781s ago: executing program 2 (id=265):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xe, 0x4, 0x8, 0xb}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000700)={r1}, 0xc)

55.998726876s ago: executing program 2 (id=266):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="180200000000000000000000000000008500000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002a00000095"], &(0x7f00000009c0)='GPL\x00'}, 0x94)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0xc00, 0x0)
r2 = syz_pidfd_open(0xffffffffffffffff, 0x0)
ppoll(&(0x7f0000000040)=[{r0, 0x1080}, {r1, 0x8400}, {r0, 0x5200}, {r2}], 0x4, &(0x7f0000000080)={0x0, 0x3938700}, &(0x7f00000000c0)={[0x21a]}, 0x8)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={r0, 0x0, 0xe, 0x0, &(0x7f0000000a80)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

55.86774622s ago: executing program 2 (id=269):
syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f0000000080)=ANY=[], 0x1, 0x156c, &(0x7f00000001c0)="$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")
bpf$PROG_LOAD(0x5, 0x0, 0x0)
fsopen(0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$SO_COOKIE(r0, 0x1, 0x39, 0x0, &(0x7f0000000080))
open(&(0x7f0000001740)='.\x00', 0x20000, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x8, &(0x7f0000000140), 0x5, 0x50c, &(0x7f0000001880)="$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")
syz_mount_image$vfat(&(0x7f0000001dc0), &(0x7f0000001e00)='./bus\x00', 0x81040a, 0x0, 0xff, 0x0, &(0x7f0000001e40))
mount$incfs(&(0x7f0000001e80)='\x00', &(0x7f0000001ec0)='./bus\x00', &(0x7f0000001f00), 0xc002, 0x0)
chdir(&(0x7f0000001f40)='./bus\x00')
lchown(&(0x7f0000001f80)='./file1\x00', 0xee00, 0x0)
mount$bind(0x0, &(0x7f0000001fc0)='.\x00', 0x0, 0x21, 0x0)

54.534019558s ago: executing program 2 (id=272):
socket$inet6(0xa, 0x200000000003, 0x87)
syz_emit_ethernet(0x5d, &(0x7f0000000240)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x27, 0x2b, 0x0, @private2, @local, {[@hopopts={0x87}], {0x3, 0x500, 0x1f, 0x0, @opaque="6a9921852c5f3f73c363d5cd096430f012179cf1cc641e"}}}}}}, 0x0)

54.240469398s ago: executing program 2 (id=276):
openat$tun(0xffffffffffffff9c, 0x0, 0x8080, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7)
getpid()
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000001140)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000001180)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f00000011c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000001240)=@abs, 0x6e)
mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f0000000280)='pstore\x00', 0x10004, &(0x7f0000000340)='\x00\x00\x00\x00\x00\x00\x00 ')
sendmmsg$unix(r2, &(0x7f00000012c0), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000001300), 0x4000087, 0x2, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000001340), 0xffffffffffffffff)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0xe, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="053140220000000000000071114200000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000001480)='GPL\x00', 0x5, 0x29e, &(0x7f00000014c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000015c0)={r3, 0xe0, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001700), 0x0, 0x248b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x200000, &(0x7f00000000c0)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f00000003c0)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5mm6cwcE38/eHPe97wn8zxPTmfOe2BOA/jHms5+pBGHIuJsEjFZ359GxFC1NxKxWTvu/t3L81lLolJ5+7ckkoi4d/fyfOO1kvp2vD4YiYibryXx749a466ubyzPlcullfr46Nr5S0dX1zdeWTo/d650rnThxOyrJ2ZPzs52sdbbl9774pkf3nj+6vWPZ978/MB3SZyOifpccx3dMh3TW3+TZoWImOt2sJwM1OtprjMp5JgQAAAdpU1ruP/GZAzEw8XbZHz7Y67JAQAAAF1RGYioAAAAAPtc4v4fAAAA9rnG9wDu3b0832j5fiOhv+6ciYipWv2N55trM4XYrG5HYjAixn5Povmx1qT2a09tOov09felrEWPnkPuZPNKRPx/u/OfVOufqj7F3Vp/GhEzXYg//ch4L9V/ugvxn6z+4S5EBICIG2dqF7LW61+6tf6Jba5/hW2uXbuR9/W/sf6737L+e1j/QJv131s7jHH4wUs32801r//e/eTnhSx+tn2qop7AnSsRhwvb1Z9s1Z+0qf/sDmOMz9++1m4uqz+rt9H6XX/lesSR6mqutf6GpNP/T3R0calcmqn93Ob11092jt98/rOWxW/cC/RDdv7HYnfn/9IOY0z979dD7eYeX3/6y1DyTrU3VN/z4dza2sqxiKHk9db9xzvn0jim8RpZ/S8+1/n9v1392WfCZv3vkP3ruVLfZuOrj8QcP3L8q93X31tZ/Qu7PP+f7jDGl99ce7/dXN71AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALA3pBExEUla3OqnabEYMR4R/4mxtHxxde3lxYsfXFjI5iKmYjBdXCqXZiJisjZOsvGxav/h+Pgj49mIOBgRn02OVsfF+YvlhbyLBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYMt4RExEkhYjIo2IPybTtFjMOysAAACg66byTgAAAADoOff/AAAAsP+13P8X/jIa6WcuAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7EsHn71xK4mIzVOj1ZYZqs8N5poZ0Gvpzg4b63UeQP8N5J0AkJtCU79SqVRyTAXoM/f4QPKY+ZG2M8NdzwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAv68XDt24lUTE5qnRassM1ecGc80M6LU07wSA3Ax0mkweuwPYwwp5JwDkxj0+UFvZP6jUtM6PtP3N4aeOCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDeMVFtSVqMiLTaT9NiMeJfETEVg8niUrk0ExEHIuKnycHhbHws76QBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoutX1jeW5crm0oqOj08XOaPQt1mj9zdzmmOH2Ux06OX8wAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQi9X1jeW5crm0spp3JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDeVtc3lufK5dJKDzt51wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH7+DAAA///6CAm5")
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000f80)='.\x00', 0x100, 0x4)
lseek(r4, 0xfffffffffffffffc, 0x2)
getdents(r4, 0x0, 0x54)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz0\x00', 0x200002, 0x0)
epoll_create1(0x80000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140))
connect$unix(0xffffffffffffffff, &(0x7f00000012c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e)

53.916918412s ago: executing program 33 (id=276):
openat$tun(0xffffffffffffff9c, 0x0, 0x8080, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7)
getpid()
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000001140)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000001180)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f00000011c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000001240)=@abs, 0x6e)
mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f0000000280)='pstore\x00', 0x10004, &(0x7f0000000340)='\x00\x00\x00\x00\x00\x00\x00 ')
sendmmsg$unix(r2, &(0x7f00000012c0), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000001300), 0x4000087, 0x2, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000001340), 0xffffffffffffffff)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0xe, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="053140220000000000000071114200000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000001480)='GPL\x00', 0x5, 0x29e, &(0x7f00000014c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000015c0)={r3, 0xe0, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001700), 0x0, 0x248b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x200000, &(0x7f00000000c0)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f00000003c0)="$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")
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000f80)='.\x00', 0x100, 0x4)
lseek(r4, 0xfffffffffffffffc, 0x2)
getdents(r4, 0x0, 0x54)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz0\x00', 0x200002, 0x0)
epoll_create1(0x80000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140))
connect$unix(0xffffffffffffffff, &(0x7f00000012c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e)

48.391460503s ago: executing program 6 (id=316):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x2804800, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0, @ANYRES32], 0x3, 0x1213, &(0x7f0000001340)="$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")
r0 = open(&(0x7f0000000040)='./file1\x00', 0x108842, 0x80)
prlimit64(0x0, 0xe, &(0x7f0000000340)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2)
r2 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x4c, &(0x7f0000000480)=ANY=[@ANYRES8=r2, @ANYRES16=r2, @ANYRESOCT], 0x1, 0x3a2, &(0x7f0000000a00)="$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")
sched_setscheduler(r1, 0x1, &(0x7f0000000dc0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000e00)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000e40)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000ec0), 0x651, 0x0)
recvmmsg(r3, &(0x7f0000000f00), 0x4000087, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
write$binfmt_register(0xffffffffffffffff, &(0x7f0000000140)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x9, 0x3a, '\xe2\xbf\xd9\xafk\xd3~a3\xd0\x94', 0x3a, '^', 0x3a, './file0', 0x3a, [0x50, 0x50]}, 0x35)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
unshare(0x2020600)
poll(&(0x7f0000000180)=[{r5, 0x521}, {0xffffffffffffffff, 0x4000}, {r3, 0x2030}, {r5}, {0xffffffffffffffff, 0xc329}, {0xffffffffffffffff, 0x104}, {r0, 0x1000}, {0xffffffffffffffff, 0x5789}], 0x8, 0x80000001)

47.178599069s ago: executing program 6 (id=323):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xe, 0x4, 0x8, 0xb}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000700)={r1}, 0xc)

47.036132223s ago: executing program 6 (id=326):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000180)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1, 0x0, 0x2}})
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00')
recvfrom(0xffffffffffffffff, &(0x7f00000001c0)=""/164, 0xa4, 0x40000000, &(0x7f0000000280)=@phonet={0x23, 0xfc, 0x9, 0xab}, 0x80)
fchdir(r2)
mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0)
openat$dir(0xffffffffffffff9c, 0x0, 0x238342, 0x84)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='ns\x00')
fchdir(r3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x15)
socket$unix(0x1, 0x1, 0x0)
ioctl$sock_bt_hci(r0, 0x400448df, 0x0)

47.032527344s ago: executing program 6 (id=327):
syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f0000000080)=ANY=[], 0x1, 0x156c, &(0x7f00000001c0)="$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")
bpf$PROG_LOAD(0x5, 0x0, 0x0)
fsopen(0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$SO_COOKIE(r0, 0x1, 0x39, 0x0, &(0x7f0000000080))
open(&(0x7f0000001740)='.\x00', 0x20000, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x8, &(0x7f0000000140), 0x5, 0x50c, &(0x7f0000001880)="$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")
syz_mount_image$vfat(&(0x7f0000001dc0), &(0x7f0000001e00)='./bus\x00', 0x81040a, 0x0, 0xff, 0x0, &(0x7f0000001e40))
mount$incfs(&(0x7f0000001e80)='\x00', &(0x7f0000001ec0)='./bus\x00', &(0x7f0000001f00), 0xc002, 0x0)
mount$bind(0x0, &(0x7f0000001fc0)='.\x00', 0x0, 0x21, 0x0)

46.87108187s ago: executing program 6 (id=328):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = fsmount(r0, 0x0, 0x0)
accept4$unix(r1, &(0x7f0000001380)=@abs, &(0x7f0000001400)=0x6e, 0x800)

46.708155847s ago: executing program 6 (id=330):
syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f0000000080)=ANY=[], 0x1, 0x156c, &(0x7f00000001c0)="$eJzs3AucjdX6OPDnWWu9Y0jaTXIZ1lrPy04uiyTJJUkuSZKEJLeEJMmRhMSQW9IkCcllSC5DSC4Tk8b9fr8kNEmaJAnJLVn/z4S/OtXvnNM5J5/Pmef7+eyP9ez1Putd+332zF7vu73zTdehNRrXrNqAiODfghf+SQCAWAAYBADXAEAAAGXjysZl9meXmPDv7YT9ZzVMvtIzYFcS1z9r4/pnbVz/rI3rn7Vx/bM2rn/WxvXP2rj+jGVlm6fnv5YfWffB1/+zMv78/x+SUXLsF2tLXt8NIOafTeH6Z21c//9ZwT+zEdc/a+P6Z1WxV3oC7D9p9p9L45//rCDbH/Zw/bM2rj9jWdnP14GzwxW/Dn2lHhDJ2t+BXOn3H2OMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4yxrOG0v0wBwKX2lZ4XY4wxxhhjjDHG/nN8tis9A8YYY4wxxhhjjP33IQiQoCCAGMgGsZAdcoAAgKshF1wDEbgW4uA6yA3XQx7IC/kgP8RDASgIGgxYIAihEBSGKNwAReBGKArFoDiUAAcloRTcBKXhZigDt0BZuBXKwW1QHipARagEt0NluAOqwJ1QFe6CalAdakBNuBtqwT1QG+6FOnAf1IX7oR48APXhQWgADaERPASN4WFoAo9AU2gGzaEFtPxT+c9DT3gBekFvSIA+0BdehH7QHwbAQBgEL8FgeBmGwCuQCLEwFF6DYfA6DIc3YASMhFHwJoyGt2AMjIVxMB6SYAJMhLdhErwDk2EKTIVpkAzTYQa8CzNhFsyG92AOvA9zYR7MhwWQAh/AQlgEqfAhLIaPIA2WwFJYBsthBayEVbAa1sBaWPdjP9gAG2ETbIYtsBW2wXbYATvhY9gFn8Bu2PP6PABIh8/+KB/W/27+qUv5sBc+hXTohoCAAgUqVBiDMRiLsZgDc2BOzIm5MBdGMIJxGIe5MTfmwTyYD/NhPMZjQSyIBg0SEhbCQhjFKBbBIlgUi2JxLI4OHZbCUlgab8YyWAbLYlksh+WwPFbAClgJK2FlrIxVsApWxapYDathDayBd+Pd2AdrY22sg3WwLta9dHkKG2ADbISNsDE2xibYBJtiU2yOzbEltsRW2ApbY2tsi22xHbbD9tgeO2AH7IgdsRN2ws7YGbtgF+yKXbEbdsfuGc9nA3wBX8DeWE30wb7YF/thYrYBOBAH4ks4GF/Gl/EVTMRXcSi+hq/h6zgcT+IIHImjcBRWFm/hGByLJMZjEibhRJyIk3ASTsYpOAWnYTJOxxk4A2fiLJyF7+EcfB/fx3k4DxdgCqbgQlyEqZiKi/EUpuESXIrLcDmuwOW4ClfjKlyL63AtbsANuAk34RbcgttwG+7AHfgxKgD8BPfgHkzEdEzHfbgP9+N+PIAHMAMz8CAexEN4CA/jYTyCR/AoHsPjeAxP4Ak8iafwNJ7Gs3gWz+Gz8V81+rjYmkQQmZRQIkbEiFgRK3KIHCKnyClyiVwiIiIiTsSJ3CK3yCPyiHwin4gX8aKgKCiMMIJEGAMAIiqioogoIoqKoqK4KC6ccKKUKCVKi9KijCgjyopbRTlxmygvKog2rpKoJCqLtq6KuFNUFVVFNVFd1BA1RU1RS9QStUVtUUfUEXVFXVFPPCDqiz44ABuKzMo0Fq9iEzEUm4pmQl78DdZKDMfWoo1oKx4XI3EEthetXAfxlOgoxmAn8TcxFp8RXcR47CqeE91Ed9FDPC96itaul+gtJmMf0VdMw36ivxggBoqZWF28h3Oy1xCviETxqhgqXhML8HUxXLwhRoiRYpR4U4wWb4kxYqwYJ8aLJDFBTBRvi0niHTFZTBFTxTSRLKaLGeJdMVPMErPFe2KOeF/MFfPEfLFApIgPxEKxSKSKD8Vi8ZFIE0vEUrFMLBcrxEqxSqwWa8RasU6sFxvERrFJbBZbxFaxTWwXO8RO8bHYJT4Ru8UesVd8KtLFZ2Kf+FzsF1+IA+JLkSG+EgfF1+KQ+EYcFt+KI+I7cVQcE8fF9+KE+EGcFKfEaXFGnBU/inPiJ3FeeAESpZBSKhnIGJlNxsrsMoe8SuaUwcWje62Mk9fJ3PJ6mUfmlflkfhkvC8iCUksjrSQZykKysIzKG2QReaMsKovJ4rKEdLKkLCVvkqXlzbKMvEWWlbfKcvI2WV5WkBVlJXm7rCzvkBC5sI9qsrqsIWvKu2UC3CNry3tlHXmfrCvvl/XkA7K+fFA2kA1lI/mQbCwflk3kI7KpbCabyxaypXxUtpKPydayjWwrH5ft5BOyvXxSdpBPyY7SX3yLPCO7yGdlV/mc7Ca7yx7yJ3leetlL9pbQB2Rf+aLsJ/vLAXKgHCRfkoPly3KIfEUmylflUPmaHCZfl8PlG3KEHClHyTflaPmWHCPHynFyvEySE+RE+bacJN+Rk+UUOVVOk8lyuhxwcaTZUv7D/Ld/J3/Iz3vfJDfLLXKr3Ca3yx1yp/xY7pK75G65W+6Ve2W6TJf75D65X+6XB+QBmSEz5EF5MPsheUgeloflEXlEHpXH5Bn5vTwhf5An5Sl5Sp6RZ+VZee7iMQCFSiiplApUjMqmYlV2lUNdpXKqq1UudY2KqGtVnLpO5VbXqzwqr8qn8qt4VUAVVFoZZRWpUBVShVVU3YAX3zCquCqhnCqpSqmb/pV8VUTdqIqqYr/KvzS/hD+YX0vVUrVSrVRr1Vq1VW1VO9VOtVftVQfVQXVUHVUn1Ul1Vp1VF9VFdVVdVTfVTfVQPVRP1VP1Ur1UgkpQfdWLqp/qrwaogWqQekkNVoPVEDVEJapENVQNVcPUMDVcDVcj1Ag1So1So9VoNUaNUePUOJWkktRENVFNUpPUZDVZTVVTVbJKVjPUDDVTzVSz1Ww1R81Rc9VcNV/NVykqRS1UC1WqSlWL1WKVppaoJWqZWqZWqBVqlVql1qg1ap1apzaoDSpNbVab1Va1VW1X29VOtVPtUrvUbrVb7VV7VbpKV/vUPrVf7VcH1AGVoTLUQXVQHVKH1GF1WB1RR9RRdVQdV8fVCXVCnby05FNn1Tl1Tp1X5zOXfYEIRKACFcQEMUFsEBvkCHIEOYOcQa4gVxAJIkFcEBfkDq4P8gR5g3xB/iA+KBAUDHRgAhuIi0NGgxuCIsGNQdGgWFA8KBG4oGRQKuZiZ3BLUDa4NSgX3BaUDyoEFYNKwe1B5eCOoEpwZ1A1uCuoFlQPagQ1g7uDWsE9Qe3g3qBOcF9QN7g/qBc8ENQPHgwaBA2DRsFDQePg4aBJ8EjQNGgWNA9aBC2Dm4My/7HxvT+Z9zHXS/fWCbqP7qtf1P10fz1AD9SD9Et6sH5ZD9Gv6ET9qh6qX9PD9Ot6uH5Dj9Aj9Sj9ph6t39Jj9Fg9To/XSXqCnqjf1pP0O3qynqKn6mk6WU/XM/S7eqaepWfr9/Qc/b6eq+fp+XqBTtEf6IV6kU7VH+rF+iOdppfopXqZXq5X6JV6lV6t1+i1ep1erzfojXqT3qy36K16m96ud+id+mO9S3+id+s9eq/+VKfrz/Q+/bner7/QB/SXOkN/pQ/qr/Uh/Y0+rL/VR/R3+qg+po/r7/UJ/YM+qU/p0/qMPqt/1Of0T/q89pmL+8yPd6OMMjEmxsSaWJPD5DA5TU6Ty+QyERMxcSbO5Da5TR6Tx+Qz+Uy8iTcFTUGTiQyZQqaQiZqoKWKKmKKmqCluihtnnCllSpnSprQpY8qYsqasKWfKmfKmvKloKprbze3mDnOHudPcae4yd5nqprqpaWqaWqaWqW1qmzqmjqlr6pp6pp6pb+qbBqaBaWQamcamsWlimpimpqlpbpqblqalaWVamdamtWlr2pp2pp1pb9qbDqaD6Wg6mk6mk+lsOpsupovparqabqab6WF6mJ6mp+llepkEk2D6mr6mn+lnBpgBZpAZZAabwWaIGWISTaIZaoaaYWaYGW6GmxFmpBmVuVA1b5kxZqwZZ8abJJNkJpqJZpKZZCabyWaqmWqSTbKZYWaYmWammW1mmzlmjplr5pr5Zr5JMSlmoVloUk2qWWwWmzSTZpaapWa5WW5WmpVmtVlt1pq1Zj2sNxvNRrPZbDZbzVaz3Ww3O81Os8vsMrvNbrPX7DXpJt3sM/vMfrPfHDAHTIbJMAfNQXPIHDKHzWFzxBwxR81Rc9wcNyfMCXPSnDSnzWlz1uS9+HnpTazNbnPYq2xOe7XNZa+xfx/ns/ltvC1gC1pt89i8v4qNtbaoLWaL2xLW2ZK2lL3pN3F5W8FWtJXs7bayvcNW+U1cy95ja9t7bR17n61p7/5VXNfeb+vZh219RADbzDayLWxj+7BtYh+xTW0z29y2sO3sE7a9fdJ2sE/Zjvbp38QL7SK72q6xa+06u9vusaftGXvIfmPP2h9tL9vbDrIv2cH2ZTvEvmIT7au/iUfZN+1o+5YdY8facXb8b+KpdppNttPtDPuunWln/SZOsR/YOTbVzrXz7Hy74Oc4c06p9kO72H5k02wAS+0yu9yusCvtqv8/12V2g91oN9ld9hO71W6z2+0Ou/PSQtjusXvtpzbdfmYP2q/tfvuFPWAP2wz71c9x5us7bL+1R+x39qg9Zo/b7+0J+4O6lJ352r+3P9nz1lsgJCBJigKKoWwUS9kpB11FOelqykXXUISupTi6jnLT9ZSH8lI+yk/xVIAKkiZDlohCKkSFKUo30KXpFacS5KgklaKbqDTdTGXoFipLt1I5uo3KUwWqSJXodqpMd1AVupOq0l1UjapTDapJd1Mtuodq071Uh+6junQ/1aMHqD49SA2oITWih6gxPUxN6BFqSs2oObWglvQotaLHqDW1obb0OLWjJ6g9PUkd6CnqSE9TJ/obdaZnqAs9S13pOepG3akHPU896QXqRb0pgfpQX3qR+lF/GkADaRC9RIPpZRpCr1AivUpD6TUaRq/TcHqDRtBIGkVv0mh6i8bQWBpH4ymJJtBEepsm0Ts0mabQVJpGyTSdZtC7NJNm0Wx6j+bQ+zSX5tF8WkAp9AEtpEWUSh/SYvqI0mgJLaVltJxW0EpaRatpDa2ldbSeNtBG2kSbaQttpW20nXbQTvqYdtEntJv20F76lNLpM9pHn9N++oIO0JeUQV/RQfqaDtE3dJi+9b3pOzpKx+g4fU8n6Ac6SafoNJ2hs/QjnaOf6Dx5ghBDEcpQhUEYE2YLY8PsYY7wqjBneHWYK7wmjITXhnHhdWHu8PowT5g3zBfmD+PDAmHBUIcmtCGFYVgoLBxGwxvCIuGNYdGwWFg8LBG6sGRYKrwpLB3eHJYJbwnLhreG5cLbwvJhhfDh+yqFt4eVwzvCKuGdYdXwrrBaWD2sEdYM7w5rhfeEtcN7wzrhfWGZ8P6wXvhAWD98MGwQNgwbhQ+FjcOHwybhI2HTsFnYPGwRtgwfDVuFj4WtwzZh2/DxsF34RNg+fDLsED4Vdgyf/rn//kV/3J8Q9gn7hi+GL4be3yvnRxdEU6IfRBdGF0VTox9GF0c/iqZFl0SXRpdFl0dXRFdGV0VXR9dE10bXRddLiG6Mbop6XzMbOHTCSadc4GJcNhfrsrsc7iqX013tcrlrXMRd6+LcdS63u97lcXldPpffxbsCrqDTzjjryIWukCvsou4GV8Td6Iq6Yq64K+GcK+lKuRaupWvpWrnHXGvXxrV1j7vH3RPuCfeke9I95Tq6p10n9zfX2T3jurhn3bPuOdfNdXc93POup5uQ68LPZILr6/q6fq6fG+AGuEFukBvsBrshbohLdIluqBvqhrlhbrgb7ka4EW6UG+VGu9FujBvjxrlxLskluYluopvkJrnJbrKb6qa6ZJfsZrgZbqab6SrPurCXuW6um+/muxSX4ha6zDVjqlvsFrs0l+aWuqVuuVvuVrqVbrVb7da6tW69W+82uo1us9vstrqtbrvb7na6nW6X2+V2+2suDOrS3T63z+13+90B96XLcF+5g+5rd8h94w67b90R95076o654+57d8L94E66U+60O+POuh/dOfeTO++8S4pMiEyMvB2ZFHknMjkyJTI1Mi2SHJkemRF5NzIzMisyO/JeZE7k/cjcyLzI/MiCSErkg8jCyKJIauTDyOLIR5G0yJLI0siyyPLIioj3BbaGvpAv7KP+Bl/E3+iL+mK+uC/hnS/pS/mbfGl/sy/jb/Fl/a2+nL/Nl/cVfEX/iG/qm/nmvoVv6R/1rfxjvrVv49v6x307/4Rv75/0HfxTvqN/2nfyf/Od/TO+i3/Wd/XP+W6+u+/hn/c9/Qu+l+/tE3wf39e/6Pv5/n6AH+gH+Zf8YP+yH+Jf8Yn+VT/Uv+aH+df9cP+GH+FH+lExb/rRl06RYbxP8hP8RP+2n+Tf8ZP9FD/VT/PJfrqf4d/1M/0sP9u/5+f49/1cP8/P9wt8iv/AL/SLfKr/0C/2H/k0v+TSGYZf6Vf51X6NX+vX+fV+g9/oN/nNfovf6rf57X6H3+k/9rv8J3633+P3+k99uv/M7/Of+/3+C3/Af+kz/Ff+oP/aH/Lf+MP+W3/Ef+eP+mP+uP/en/A/+JP+lD/tz/iz/kd/zv/kz/8z96ypf3w1nDHGGGPsf92Ey03x654Ll/P7/E6OuLSxAOgLAFdvy5/xy/7MFeX6PBfa/UV8uwgAPNW7a8MLjwvPl7+4bZqEoPA8gEvfBGX6+bLxxXgJtIUnoAO0gdK/O//+ovtZ+tX4XRtWq5aQkPCL8aO3AuT4RU4sXI4vj/85ACb8zviPPj5qYbnwdNz/Mf48gKKFL+dkh8vxEmj786qzDZT5g/nnbfUP5p/9iySA1r/IyQmX48vzLwWPwdPQ4VdbMsYYY4wxxhhjF/QXFTtfOv+89D8+//78NvP8PP4X351kg8vxkiHwf56fM8YYY4wxxhhj7Mp7pnuPJx+9dOfeox06tOn88zP/TKPKv7Lxv95oAv+tkf9sA+AKTyP7xTr9d3bh/eWRFQD8mwMCZDbkX3l8tvxXd9G034Wjn3ixCn+/zfIzPoAeRS7e9PiLrtiLCX9y77H/fi3+TOMv/TXEGGOMMcYY+wtcXvT/+nm+VZIxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGPvr/BV/TuxKv0bGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGPsSvt/AQAA///yauhB")
bpf$PROG_LOAD(0x5, 0x0, 0x0)
fsopen(0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$SO_COOKIE(r0, 0x1, 0x39, 0x0, &(0x7f0000000080))
open(&(0x7f0000001740)='.\x00', 0x20000, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x8, &(0x7f0000000140), 0x5, 0x50c, &(0x7f0000001880)="$eJzs3U9sG1kZAPDPdpJN2izdXRDaXSS20iKVP2qcP0KbABLiBBwqISpxAamExA0lTh3FTmmiSqRw64EDAoGEOHDnwpULPVFVQpxBXDmhVlCCVFCRBnnsSZ3ETlya2Gzm95Ncz/i5/t5z8r08v3njCSC3Ljb/KURMRsQfIuJCa3f/Ey627naf3Flq3gqRJFf/Vkif19zPnpr9v/MRsRMR4xHx1S9GfKtwOG59a3t1sVqtbLT3y4219XJ9a/vyjbXFlcpK5ebM/HsLC/PTc7MLJ9bWez/8zr0rv/ny2K+e/uDRgx/97rfNak22yzrbcZJaTR+N1zseG4mIz51GsCEotdszMeyK8D9p/vw+GBHvpvl/IUrpT7M/z061ZsBpS5Ik+U/ySq/inQQ4s4rpGLhQnIqI1naxODXVGsN/KM4Vq7V641PXa5s3l1tj5dditHj9RrUy3f6s8FqMFpr7M+n28/3ZA/tzEekY+MeliXR/aqlWXR5sVwcccP5A/v+z1Mp/ICf6/8gPnDXyH/JL/kN+yX/IL/kP+SX/Ib/kP+SX/If8kv+QX535n53I9eqQ6gIM1lF//8cGWA9goL5y5UrzlmTnvy/f2tpcrd26vFypr06tbS5NLdU21qdWarWV9JydteNer1qrrc98OjZvlxuVeqNc39q+tlbbvNm4lp7Xf60yOpBWAf14/Z37fypExM5nJtJbdPzJl6twtiVJIYZ9DjIwHKVhd0DA0Dj0B/n1Ap/xe35JGPD+1uUreveMn+9Z9PlYP/aVdn/9EvUCTk/xqMJnDwdXEWDgLr3l+B/klfl/yC/z/5Bfx4zxDQ8gB46a/4/2tfy6OjT/38PTF6sPcPqOnP8HzrTJLtf/SpLke692XLtrOiI+EBF/LI2+kl3rCzgLin8ttMf/ly58bPJg6VjhX+kcwFhEfPfnV396e7HR2JhpPv73vccbP2s/PjuM+gO97Z/hy/I0y2MAIL92n9xZym6DjPv4C61FCIfjj7TnJsfTEcy53cK+tQqFE1q7sHM3It7sFr/Qvt5568jHud3SofhvtO8LrZdI6zuSXjd9MPHf6oj/0Y74b7/0uwL5cL/Z/0x3y79imtOxl3/7+5/JE1ofnfV/2ZrrzvhZ/1fq0f+902eMb//i+90O76aLvR/fjXi7a/+bxRtPYx2M36zbpT7jP/rG1z7cqyz5Zet1usXPNLfKjbX1cn1r+/KNrBbz7y0szE/PzS6U0znqcjZTfdhn3/z9g17xm+1v69H+Px9q/0S7Tp/os/3//sjDr188Iv7H3+3++/dGen/g/U+SvTp8ss/4/5j9yzd7lTXjL/d4/4vd4kdWGjHXZ/z6T77k3GEA+D9S39peXaxWKxtdNkZ7F9mwYWPQGyMxwKDH9Rw7g+mggFPzPOmHXRMAAAAAAAAAAACgX71W/94/weXEw24jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBZ8N8AAAD//6rz1eo=")
syz_mount_image$vfat(&(0x7f0000001dc0), &(0x7f0000001e00)='./bus\x00', 0x81040a, 0x0, 0xff, 0x0, &(0x7f0000001e40))
chdir(&(0x7f0000001f40)='./bus\x00')
mount$bind(0x0, &(0x7f0000001fc0)='.\x00', 0x0, 0x21, 0x0)

46.669029451s ago: executing program 34 (id=330):
syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f0000000080)=ANY=[], 0x1, 0x156c, &(0x7f00000001c0)="$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")
bpf$PROG_LOAD(0x5, 0x0, 0x0)
fsopen(0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$SO_COOKIE(r0, 0x1, 0x39, 0x0, &(0x7f0000000080))
open(&(0x7f0000001740)='.\x00', 0x20000, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x8, &(0x7f0000000140), 0x5, 0x50c, &(0x7f0000001880)="$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")
syz_mount_image$vfat(&(0x7f0000001dc0), &(0x7f0000001e00)='./bus\x00', 0x81040a, 0x0, 0xff, 0x0, &(0x7f0000001e40))
chdir(&(0x7f0000001f40)='./bus\x00')
mount$bind(0x0, &(0x7f0000001fc0)='.\x00', 0x0, 0x21, 0x0)

12.830136282s ago: executing program 4 (id=552):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x10)
r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1/file0\x00', &(0x7f0000000080)={0x60202, 0x33, 0x4}, 0x18)
mkdirat(r0, 0x0, 0x49)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x53}, 0x28)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./bus\x00', 0x1d7)
setresuid(0x0, 0xee00, 0x0)
capset(&(0x7f0000000380)={0x20080522}, &(0x7f00000003c0)={0x200002, 0x200003, 0x803, 0x0, 0x7, 0x1})
syz_emit_ethernet(0x7e, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000440), 0x8, 0x0)
io_destroy(0x0)
mount(0x0, &(0x7f00000004c0)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x4000, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r1, &(0x7f0000000580)='27', 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'vcan0\x00', <r2=>0x0})
connect$can_bcm(0xffffffffffffffff, &(0x7f0000000600)={0x1d, r2}, 0x10)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYRES64, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000002301"], 0x48}}, 0x4008004)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="0100000000000000feffffff00000000", @ANYRES64, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="60f5e1ff03"], 0x48}}, 0x0)
unshare(0x40000000)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000a00), 0x8001, 0x0)

12.683808317s ago: executing program 4 (id=555):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00')
prlimit64(0x0, 0xe, &(0x7f0000000180)={0xe, 0x400000000008d}, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f00000002c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
finit_module(r0, &(0x7f0000000140)='\x00', 0x1)
connect$unix(r2, &(0x7f0000000480)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000500), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000000540), 0x4000087, 0x2, 0x0)
quotactl_fd$Q_SYNC(r3, 0xffffffff80000100, 0x0, 0x0)
connect$can_bcm(0xffffffffffffffff, &(0x7f0000000100), 0x10)
write(0xffffffffffffffff, &(0x7f0000000200), 0x0)
syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000540)='./file0\x00', 0x163c81, &(0x7f0000000580), 0x1, 0x265, &(0x7f00000005c0)="$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")
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, 0x0, &(0x7f0000000880)='debugfs\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x800, 0x2)
ppoll(&(0x7f00000008c0)=[{r4, 0x6000}], 0x1, 0x0, 0x0, 0x0)
shutdown(r4, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000900)='./debug/failslab/times\x00', 0x2, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000ac0)='./debug/failslab/probability\x00', 0x2, 0x0)
write(r5, &(0x7f0000000b00)='5', 0x1)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c)
r6 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000b40)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0)
write(r6, &(0x7f0000000b80)='1', 0x1)

5.918850467s ago: executing program 7 (id=573):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
setpriority(0x0, 0x0, 0x2a14b58)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001200)={&(0x7f0000001140)={0x5c, 0x2, 0x7, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x6}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x7}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x81}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x91)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x1800)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
setrlimit(0x1, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000140)={0x101, 0x7000, 0x4, 0xffffffffffffffff, 0x11})
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TCSETAW(r1, 0x5407, &(0x7f00000001c0)={0x4, 0x3, 0x2004, 0x8, 0x11, "03f37fe99f4da28a"})
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000280)={[{@grpid}, {@orlov}, {@nodioread_nolock}, {@nodiscard}, {@quota}, {@stripe}, {@minixdf}, {@orlov}]}, 0x4, 0xbaf, &(0x7f0000000540)="$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")
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001100)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
unshare(0x22020600)
fdatasync(r2)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000080)=0x10, 0x4)
mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r3, 0x80000000)
r4 = syz_create_resource$futex(0x0)
futex(r4, 0x8, 0x2, 0x0, 0x0, 0x1)
syz_open_procfs$namespace(0x0, 0x0)

5.69884428s ago: executing program 1 (id=575):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
socket$netlink(0x10, 0x3, 0x4)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2)
sched_rr_get_interval(r0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000600)=@abs, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
keyctl$setperm(0x5, 0x0, 0x200a0204)
r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000006c0)={'bond_slave_1\x00'})
r4 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r4, &(0x7f0000000700)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000740)={0x43, 0x0, 0x3, 0x3}, 0x10)
ioctl$OCFS2_IOC_MOVE_EXT(r3, 0x40406f06, &(0x7f0000000340)={0x2, 0x7091991e, 0x7, 0xfffffffffffffff9, 0x2})
openat(0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00', 0x88040, 0x52)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="5d5b0000000000001c001a8018000a801400070000000000000000000008000000000000140035007767310000"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
mknod(&(0x7f0000000000)='./file1\x00', 0x8000, 0x6)

5.557441065s ago: executing program 1 (id=576):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x10)
r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1/file0\x00', &(0x7f0000000080)={0x60202, 0x33, 0x4}, 0x18)
mkdirat(r0, 0x0, 0x49)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x53}, 0x28)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./bus\x00', 0x1d7)
setresuid(0x0, 0xee00, 0x0)
capset(&(0x7f0000000380)={0x20080522}, &(0x7f00000003c0)={0x200002, 0x200003, 0x803, 0x0, 0x7, 0x1})
syz_emit_ethernet(0x7e, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000440), 0x8, 0x0)
io_destroy(0x0)
mount(0x0, &(0x7f00000004c0)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x4000, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r2, &(0x7f0000000580)='27', 0x2)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000005c0)={'vcan0\x00'})
sendmsg$can_bcm(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYRES64=r3, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000002301"], 0x48}}, 0x4008004)
sendmsg$can_bcm(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="01000000220900"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}}, 0x8001)
sendmsg$can_bcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="0100000000000000feffffff00000000", @ANYRES64, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="60f5e1ff03"], 0x48}}, 0x0)
unshare(0x40000000)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f0000000b00))

5.450895446s ago: executing program 1 (id=577):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x10)
r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1/file0\x00', &(0x7f0000000080)={0x60202, 0x33, 0x4}, 0x18)
mkdirat(r0, 0x0, 0x49)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x53}, 0x28)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./bus\x00', 0x1d7)
setresuid(0x0, 0xee00, 0x0)
capset(&(0x7f0000000380)={0x20080522}, &(0x7f00000003c0)={0x200002, 0x200003, 0x803, 0x0, 0x7, 0x1})
syz_emit_ethernet(0x7e, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000440), 0x8, 0x0)
io_destroy(0x0)
mount(0x0, &(0x7f00000004c0)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x4000, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r2, &(0x7f0000000580)='27', 0x2)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000005c0)={'vcan0\x00'})
sendmsg$can_bcm(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYRES64=r3, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000002301"], 0x48}}, 0x4008004)
sendmsg$can_bcm(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="01000000220900"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}}, 0x8001)
sendmsg$can_bcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="0100000000000000feffffff00000000", @ANYRES64, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="60f5e1ff03"], 0x48}}, 0x0)
unshare(0x40000000)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f0000000b00))

5.391731262s ago: executing program 4 (id=578):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000002c80)={{{@in6=@empty, @in=@loopback, 0x4e22, 0x6, 0x4e22, 0x7fff, 0xa, 0x20, 0x20, 0x58}, {0xfffffffffffffffb, 0x3, 0x10, 0x4, 0x7, 0x7, 0xffffffff80000001, 0x7}, {0xffffffffffffffff, 0x572, 0x1, 0x6}, 0x5, 0x6e6bc0, 0x0, 0x1, 0x1, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d6, 0x32}, 0xab11e6417b62bccf, @in=@multicast1, 0x34ff, 0x4, 0x2, 0xb, 0x5, 0x5, 0x4de0}}, 0xe8)
sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000200), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f0000000240), 0x80002c1, 0x2, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x8, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@uuid_off}]})
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0x16, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000e00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000e40), 0xffffffffffffffd2}, 0x48)
close(0xffffffffffffffff)
r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000f00), &(0x7f0000000f40), &(0x7f0000000f80))
socket$nl_xfrm(0x10, 0x3, 0x6)
inotify_init1(0x80000)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
syz_ublk_setup_queues(r6, 0x0, &(0x7f0000001340)={0x0, 0x0, 0x1000, 0x1, 0x257}, &(0x7f00000013c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd9d3, 0x100, 0x1000000, 0xb5c, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x80, 0x0, 0x146, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd289, 0x80, 0x5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd758, 0x1, 0x1, 0xfffffffd}}], 0x1, &(0x7f0000001640)={0x2e, 0xa, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x1, 0xbcc, 0x0, 0x0}}, 0x0)

5.257714606s ago: executing program 1 (id=580):
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0xe, 0x200, 0xc, 0x20, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x1, 0xd}, 0x50)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0)
r0 = eventfd(0x0)
io_setup(0xc, &(0x7f0000000000)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f0000000380)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xc, r0, 0x0, 0x0, 0x34}, &(0x7f0000000400)={0x0, 0x0, 0xfe, 0x5, 0xffff, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r0}])
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000280)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000380), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f00000003c0), 0x80002c1, 0x2, 0x0)
mremap(&(0x7f0000266000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000233000/0x3000)=nil)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4010d00, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0600000004000000080000000f"], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x14, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000640)={r6}, 0xc)

4.267776448s ago: executing program 4 (id=583):
openat$uinput(0xffffffffffffff9c, &(0x7f0000000800), 0x802, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000008c0)=0x7)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r0 = socket$inet6(0xa, 0x3, 0x88)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000400)={{{@in=@dev={0xac, 0x14, 0x14, 0x33}, @in=@local, 0xee24, 0x0, 0x10, 0x3, 0x2}, {0x81005, 0x200000004, 0x40000000007, 0x8000000000000001, 0x100000000, 0x0, 0x200000003, 0x9}, {0x0, 0x0, 0x0, 0x7}, 0x5, 0x0, 0x1, 0x0, 0x6, 0x3}, {{@in=@remote, 0x4d4, 0x6c}, 0x2, @in=@empty, 0x34fe, 0x4, 0x8, 0x0, 0x9077, 0xef, 0x10000}}, 0xe8)
connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x8}}, 0x7}, 0x1c)
r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000040))
syslog(0x1, &(0x7f0000000300)=""/255, 0xff)
r2 = syz_open_dev$MSR(&(0x7f0000000980), 0x0, 0x0)
read$msr(r2, &(0x7f00000009c0)=""/102392, 0x18ff8)
mkdir(0x0, 0x0)
getpid()
add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f00000199c0)={0x2, 0x4e20, @multicast2}, 0x10)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
connect$inet(r3, &(0x7f0000019a40)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg$inet(r3, &(0x7f0000019a80)={0x0, 0x14, &(0x7f0000019ac0)=[{&(0x7f0000019b00)=' ', 0x100120}], 0x1}, 0x0)
recvmsg(r3, &(0x7f0000019b40)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000019bc0)=""/4096, 0x1000}], 0x1}, 0x700)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0)
write$cgroup_pid(r5, &(0x7f0000000140), 0xffffff98)
vmsplice(r5, &(0x7f0000000180)=[{&(0x7f00000001c0)="35f0", 0x2}], 0x1, 0x0)
getsockopt$inet_buf(r5, 0x0, 0x23, &(0x7f0000000200)=""/177, &(0x7f00000002c0)=0xb1)

3.27974946s ago: executing program 7 (id=586):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x10)
r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1/file0\x00', &(0x7f0000000080)={0x60202, 0x33, 0x4}, 0x18)
mkdirat(r0, 0x0, 0x49)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x53}, 0x28)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./bus\x00', 0x1d7)
setresuid(0x0, 0xee00, 0x0)
capset(&(0x7f0000000380)={0x20080522}, &(0x7f00000003c0)={0x200002, 0x200003, 0x803, 0x0, 0x7, 0x1})
syz_emit_ethernet(0x7e, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000440), 0x8, 0x0)
io_destroy(0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000004c0)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x4000, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r2, &(0x7f0000000580)='27', 0x2)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000005c0)={'vcan0\x00', <r4=>0x0})
connect$can_bcm(r3, &(0x7f0000000600)={0x1d, r4}, 0x10)
sendmsg$can_bcm(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYRES64=r3, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000002301"], 0x48}}, 0x4008004)
sendmsg$can_bcm(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="01000000220900"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}}, 0x8001)
sendmsg$can_bcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="0100000000000000feffffff00000000", @ANYRES64, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="60f5e1ff03"], 0x48}}, 0x0)
unshare(0x40000000)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a00), 0x8001, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
pipe2(&(0x7f0000000a40)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x0)
vmsplice(r7, &(0x7f0000000a80)=[{&(0x7f0000000ac0)="f7", 0x7ffff000}], 0x1, 0x0)
ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f0000000b00))
ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000b40)={0x2, 0x1c000, 0x1})
ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000b80)={0x4000, 0x6000})
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r6, 0x4010ae68, &(0x7f0000000bc0)={0x80a0000, 0xf346bc67fd52fbdd, 0x1})

3.245089514s ago: executing program 1 (id=587):
r0 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c011703010902240001010000000904690202ff5aa30009050402100000fa000905820240"], 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth0\x00'})
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x13)
ioctl$KVM_CAP_VM_TYPES(r2, 0x4068aea3, &(0x7f0000000140)={0xeb, 0x0, 0x1})
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
dup(r3)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = getpid()
sched_setscheduler(r4, 0x1, &(0x7f0000000300)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000400), 0x318, 0x0)
recvmmsg(r5, &(0x7f0000000440), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0x4, &(0x7f0000000580)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f00000005c0)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000600)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000700), 0x1f2, 0x29, &(0x7f0000000740), 0xfffffe51}, 0x48)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000000c0)=[@timestamp, @window={0x3, 0x7}, @timestamp, @mss={0x2, 0x1}, @mss={0x2, 0x94b}, @sack_perm, @timestamp, @mss={0x2, 0x80000001}], 0x2000000000000042)
ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000240)={0x0, 0x1})

2.740389606s ago: executing program 7 (id=588):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x10)
r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1/file0\x00', &(0x7f0000000080)={0x60202, 0x33, 0x4}, 0x18)
mkdirat(r0, 0x0, 0x49)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x53}, 0x28)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./bus\x00', 0x1d7)
setresuid(0x0, 0xee00, 0x0)
syz_emit_ethernet(0x7e, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000440), 0x8, 0x0)
io_destroy(0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000004c0)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x4000, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r2, &(0x7f0000000580)='27', 0x2)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000005c0)={'vcan0\x00', <r4=>0x0})
connect$can_bcm(r3, &(0x7f0000000600)={0x1d, r4}, 0x10)
sendmsg$can_bcm(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYRES64=r3, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000002301"], 0x48}}, 0x4008004)
sendmsg$can_bcm(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="01000000220900"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}}, 0x8001)
sendmsg$can_bcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="0100000000000000feffffff00000000", @ANYRES64, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="60f5e1ff03"], 0x48}}, 0x0)
unshare(0x40000000)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a00), 0x8001, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
pipe2(&(0x7f0000000a40)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x0)
vmsplice(r7, &(0x7f0000000a80)=[{&(0x7f0000000ac0)="f7", 0x7ffff000}], 0x1, 0x0)
ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f0000000b00))
ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000b40)={0x2, 0x1c000, 0x1})
ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000b80)={0x4000, 0x6000})
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r6, 0x4010ae68, &(0x7f0000000bc0)={0x80a0000, 0xf346bc67fd52fbdd, 0x1})

2.562542854s ago: executing program 7 (id=589):
r0 = syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYRES32=<r1=>0xffffffffffffffff, @ANYRESHEX], 0xff, 0x5534, &(0x7f0000003fc0)="$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")
r2 = open(&(0x7f00000000c0)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f)
getpid()
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCGSOFTCAR(r3, 0x4b46, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES16=r3, @ANYRESOCT=0x0, @ANYRES64=r0, @ANYRESHEX=r1, @ANYRESDEC=r2, @ANYRES64, @ANYRESOCT=r0, @ANYRES16], 0x48)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg$unix(r5, &(0x7f0000000380), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000003c0), 0x4000087, 0x2, 0x0)

2.502799301s ago: executing program 3 (id=590):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000200000000000000000000006931d3a832fa7d0118110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = inotify_init()
inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x81000040)
mkdir(&(0x7f0000000040)='./bus\x00', 0x0)
chown(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
pipe2(&(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
close_range(r2, r2, 0x6)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000011c0), 0x8, 0x10, &(0x7f0000001200), 0x10}, 0x94)
socket$inet6(0xa, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001180)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}}, 0x0)
r4 = socket$inet_icmp(0x2, 0x2, 0x1)
bind$inet(r4, &(0x7f0000001a40)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x4000000)
r5 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0)
process_vm_writev(r5, &(0x7f0000003080)=[{&(0x7f00000030c0)=""/149, 0x95}], 0x1, &(0x7f0000003180)=[{&(0x7f00000031c0)=""/116, 0x74}], 0x1, 0x0)

1.871287056s ago: executing program 3 (id=592):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events.local\x00', 0x275a, 0x0)
fadvise64(r0, 0xfffffffffffffffe, 0xffffffffffff7800, 0x2)
r1 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040), 0x6)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000ffff25bd7000fddbcf2504000000", @ANYRES32=0x0, @ANYBLOB="762c030000020100240012800b000100627269646765000014000280060009000000000006000600ea370000"], 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x40000)

1.784193095s ago: executing program 3 (id=593):
r0 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = fsmount(r0, 0x0, 0x0)
accept4$unix(r1, &(0x7f0000001380)=@abs, &(0x7f0000001400)=0x6e, 0x800)

1.783980515s ago: executing program 3 (id=594):
r0 = syz_usb_connect$uac2(0x2, 0xa8, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac2(r0, 0x0, &(0x7f00000001c0)={0x44, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000500)={0x0, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1.63759471s ago: executing program 7 (id=595):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x200000, &(0x7f0000000240)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000000300)="$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")
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000ec0)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000f00), 0x208e24b)
lseek(r2, 0x4, 0x4)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040))
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x4, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x0, 0x1}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12"], 0x50)
ioctl$PPPIOCSMRU1(r1, 0x40047452, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0)

1.34620458s ago: executing program 5 (id=596):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x10)
r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1/file0\x00', &(0x7f0000000080)={0x60202, 0x33, 0x4}, 0x18)
mkdirat(r0, 0x0, 0x49)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x53}, 0x28)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./bus\x00', 0x1d7)
setresuid(0x0, 0xee00, 0x0)
capset(&(0x7f0000000380)={0x20080522}, &(0x7f00000003c0)={0x200002, 0x200003, 0x803, 0x0, 0x7, 0x1})
syz_emit_ethernet(0x7e, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000440), 0x8, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000004c0)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x4000, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r1, &(0x7f0000000580)='27', 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'vcan0\x00', <r2=>0x0})
connect$can_bcm(0xffffffffffffffff, &(0x7f0000000600)={0x1d, r2}, 0x10)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYRES64, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000002301"], 0x48}}, 0x4008004)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="0100000000000000feffffff00000000", @ANYRES64, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="60f5e1ff03"], 0x48}}, 0x0)
unshare(0x40000000)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000a00), 0x8001, 0x0)

1.24988998s ago: executing program 3 (id=597):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4000000001010101000000000000000002001c002000018006000340000000001400018008c301007f000001080002007f0000010c00198008000100", @ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r1 = io_uring_setup(0xc01, &(0x7f0000000000)={0x0, 0x1e77, 0x8000, 0x0, 0x207})
close(r1)
select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xea60})
r2 = socket$netlink(0x10, 0x3, 0x10)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000a00), 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r2)
syz_genetlink_get_family_id$nl80211(&(0x7f0000006000), r2)

1.236922022s ago: executing program 7 (id=598):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x10)
r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1/file0\x00', &(0x7f0000000080)={0x60202, 0x33, 0x4}, 0x18)
mkdirat(r0, 0x0, 0x49)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x53}, 0x28)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./bus\x00', 0x1d7)
setresuid(0x0, 0xee00, 0x0)
capset(&(0x7f0000000380)={0x20080522}, &(0x7f00000003c0)={0x200002, 0x200003, 0x803, 0x0, 0x7, 0x1})
syz_emit_ethernet(0x7e, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000440), 0x8, 0x0)
io_destroy(0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000004c0)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x4000, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r2, &(0x7f0000000580)='27', 0x2)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000005c0)={'vcan0\x00', <r4=>0x0})
connect$can_bcm(r3, &(0x7f0000000600)={0x1d, r4}, 0x10)
sendmsg$can_bcm(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYRES64=r3, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000002301"], 0x48}}, 0x4008004)
sendmsg$can_bcm(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="01000000220900"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}}, 0x8001)
sendmsg$can_bcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="0100000000000000feffffff00000000", @ANYRES64, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="60f5e1ff03"], 0x48}}, 0x0)
unshare(0x40000000)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a00), 0x8001, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
pipe2(&(0x7f0000000a40)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x0)
vmsplice(r7, &(0x7f0000000a80)=[{&(0x7f0000000ac0)="f7", 0x7ffff000}], 0x1, 0x0)
ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f0000000b00))
ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000b40)={0x2, 0x1c000, 0x1})
ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000b80)={0x4000, 0x6000})
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r6, 0x4010ae68, &(0x7f0000000bc0)={0x80a0000, 0xf346bc67fd52fbdd, 0x1})

1.226206773s ago: executing program 5 (id=599):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
socket$netlink(0x10, 0x3, 0x4)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2)
sched_rr_get_interval(r0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000600)=@abs, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000006c0), 0x10106, 0x2, 0x0)
keyctl$setperm(0x5, 0x0, 0x200a0204)
r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
r4 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r4, &(0x7f0000000700)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000740)={0x43, 0x0, 0x3, 0x3}, 0x10)
ioctl$OCFS2_IOC_MOVE_EXT(r3, 0x40406f06, &(0x7f0000000340)={0x2, 0x7091991e, 0x7, 0xfffffffffffffff9, 0x2})
openat(0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00', 0x88040, 0x52)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="5d5b0000000000001c001a8018000a801400070000000000000000000008000000000000140035007767310000"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
mknod(&(0x7f0000000000)='./file1\x00', 0x8000, 0x6)

1.123208313s ago: executing program 4 (id=600):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
mprotect(&(0x7f00007ff000/0x800000)=nil, 0x800000, 0xd)
r1 = userfaultfd(0x801)
prlimit64(0x0, 0xe, &(0x7f0000000300)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2)
sched_setscheduler(r2, 0x1, &(0x7f00000003c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000440)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000580), 0x651, 0x0)
recvmmsg(r3, &(0x7f0000000ac0), 0x4000087, 0x2, 0x0)
r5 = syz_io_uring_setup(0xe98, &(0x7f0000000b00)={0x0, 0x694c, 0x2, 0x40000, 0x3a8}, &(0x7f0000000b80), 0x0, &(0x7f0000000c00))
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE2(r5, 0x2, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0}, 0x20)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000240))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000280)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f00000002c0)={&(0x7f000081a000/0x2000)=nil, &(0x7f0000ba0000/0x6000)=nil, 0x2000})
lsetxattr$security_selinux(&(0x7f0000000180)='.\x00', &(0x7f00000001c0), &(0x7f0000000200)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)

126.464737ms ago: executing program 5 (id=601):
setresuid(0xee00, 0xee00, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x8, 0x7, &(0x7f0000000800)=ANY=[@ANYBLOB="7911a800000000005501020000000000b70000000000000095000000000000008500000089000000b70000000000000095"], &(0x7f00000008c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

121.664307ms ago: executing program 1 (id=602):
syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000000240)='./bus\x00', 0x1014004, &(0x7f0000000000)={[{@nouser_xattr}, {@block_mode}, {@block_mode}, {@memory_low}, {@alloc_mode_reuse}, {@flush_merge}, {@two_active_logs}, {@memory_normal}, {@checkpoint_diasble}, {@noacl}, {@atgc}, {@jqfmt_vfsv1}, {@nolazytime}, {@noextent_cache}, {@io_bits={'io_bits', 0x3d, 0xab}}]}, 0x8, 0x5543, &(0x7f0000000580)="$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")

121.062207ms ago: executing program 3 (id=603):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000200000000000000000000006931d3a832fa7d0118110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = inotify_init()
inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x81000040)
mkdir(&(0x7f0000000040)='./bus\x00', 0x0)
chown(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
pipe2(&(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
close_range(r2, r2, 0x6)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000011c0), 0x8, 0x10, &(0x7f0000001200), 0x10}, 0x94)
socket$inet6(0xa, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001180)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}}, 0x0)
socket$inet_icmp(0x2, 0x2, 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x4000000)
r4 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0)
process_vm_writev(r4, &(0x7f0000003080)=[{&(0x7f00000030c0)=""/149, 0x95}], 0x1, &(0x7f0000003180)=[{&(0x7f00000031c0)=""/116, 0x74}], 0x1, 0x0)

93.21262ms ago: executing program 5 (id=604):
openat$uinput(0xffffffffffffff9c, &(0x7f0000000800), 0x802, 0x0)
prlimit64(0xffffffffffffffff, 0xe, &(0x7f0000000880)={0x3, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000008c0)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f0000000900)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
r0 = syz_open_dev$MSR(&(0x7f0000000980), 0x0, 0x0)
read$msr(r0, &(0x7f00000009c0)=""/102392, 0x18ff8)
mkdir(0x0, 0x0)
getpid()
times(&(0x7f0000000000))
add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = syz_open_dev$mouse(&(0x7f0000000040), 0x5, 0x0)
bind$inet(r2, &(0x7f00000199c0)={0x2, 0x4e20, @private=0xa0100fe}, 0x10)
setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000019a00)=0xce, 0x4)
ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0x1)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x2172, 0xffffffffffffffff, 0x0)
waitid(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0)
connect$inet(r1, &(0x7f0000019a40)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg$inet(r1, &(0x7f0000019a80)={0x0, 0x14, &(0x7f0000019ac0)=[{&(0x7f0000019b00)=' ', 0x100120}], 0x1}, 0x0)
recvmsg(r1, &(0x7f0000019b40)={0x0, 0x2, &(0x7f0000019b80)=[{&(0x7f0000019bc0)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700)

62.498783ms ago: executing program 5 (id=605):
r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = fsmount(r0, 0x0, 0x0)
accept4$unix(r1, 0x0, &(0x7f0000001400), 0x800)

398.1µs ago: executing program 5 (id=606):
r0 = syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYRES32=<r1=>0xffffffffffffffff, @ANYRESHEX], 0xff, 0x5534, &(0x7f0000003fc0)="$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")
r2 = open(&(0x7f00000000c0)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f)
getpid()
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES16=r3, @ANYRESOCT=0x0, @ANYRES64=r0, @ANYRESHEX=r1, @ANYRESDEC=r2, @ANYRES64, @ANYRESOCT=r0, @ANYRES16], 0x48)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg$unix(r5, &(0x7f0000000380), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000003c0), 0x4000087, 0x2, 0x0)

0s ago: executing program 4 (id=607):
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r0 = socket$netlink(0x10, 0x3, 0x4)
writev(r0, &(0x7f0000000680)=[{&(0x7f0000000780)}], 0x1)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000600)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000680), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000006c0), 0x10106, 0x2, 0x0)
keyctl$setperm(0x5, 0x0, 0x200a0204)
r3 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r3, &(0x7f0000000700)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
chdir(0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
keyctl$assume_authority(0x10, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="5d5b0000000000001c001a8018000a801400070000000000000000000008000000000000140035007767310000"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
mknod(&(0x7f0000000000)='./file1\x00', 0x8000, 0x6)

kernel console output (not intermixed with test programs):

e_userregs+0x128/0x260
[   71.415407][  T918]  ? switch_fpu_return+0xe/0x10
[   71.420296][  T918]  x64_sys_call+0x171/0x9a0
[   71.424814][  T918]  do_syscall_64+0x4c/0xa0
[   71.429334][  T918]  ? clear_bhb_loop+0x30/0x80
[   71.434026][  T918]  ? clear_bhb_loop+0x30/0x80
[   71.438721][  T918]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   71.444629][  T918] RIP: 0033:0x7f437cd9f559
[   71.449054][  T918] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   71.468668][  T918] RSP: 002b:00007f437db9a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   71.477097][  T918] RAX: ffffffffffffffda RBX: 00007f437d025fa0 RCX: 00007f437cd9f559
[   71.485168][  T918] RDX: 0000000000008001 RSI: 0000200000000880 RDI: 0000000000000004
[   71.493164][  T918] RBP: 00007f437ce36b20 R08: 0000000000000000 R09: 0000000000000000
[   71.501146][  T918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   71.509125][  T918] R13: 00007f437d026038 R14: 00007f437d025fa0 R15: 00007ffc050ecd08
[   71.517112][  T918]  </TASK>
[   71.522740][  T916] FAT-fs (loop2): Directory bread(block 66) failed
[   71.530261][  T916] FAT-fs (loop2): Directory bread(block 67) failed
[   71.537134][  T916] FAT-fs (loop2): Directory bread(block 68) failed
[   71.544268][  T916] FAT-fs (loop2): Directory bread(block 69) failed
[   71.551399][  T916] FAT-fs (loop2): Directory bread(block 70) failed
[   71.558663][  T916] FAT-fs (loop2): Directory bread(block 71) failed
[   71.565615][  T916] FAT-fs (loop2): Directory bread(block 72) failed
[   71.572569][  T916] FAT-fs (loop2): Directory bread(block 73) failed
[   71.621090][   T28] audit: type=1400 audit(1793212845.347:277): avc:  denied  { create } for  pid=913 comm="syz.2.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1
[   71.660267][   T28] audit: type=1400 audit(1793212845.397:278): avc:  denied  { mounton } for  pid=923 comm="syz.1.173" path="/35/file0" dev="tmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1
[   71.685985][  T915] syz.4.170: attempt to access beyond end of device
[   71.685985][  T915] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128
[   71.701110][  T927] netlink: 8 bytes leftover after parsing attributes in process `syz.1.174'.
[   71.713648][  T915] Buffer I/O error on dev loop4, logical block 128, lost async page write
[   72.123389][  T458] usb 2-1: new full-speed USB device number 5 using dummy_hcd
[   72.365329][  T458] usb 2-1: unable to get BOS descriptor or descriptor too short
[   72.420914][  T458] usb 2-1: not running at top speed; connect to a high speed hub
[   72.549413][  T458] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4
[   72.975860][  T940] loop4: detected capacity change from 0 to 256
[   72.995679][  T458] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[   73.026314][  T940] exfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ18446744073709551615'
[   73.046180][  T458] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   73.063231][  T458] usb 2-1: Product: syz
[   73.069593][  T946] overlayfs: missing 'lowerdir'
[   73.074048][  T458] usb 2-1: Manufacturer: syz
[   73.079144][  T458] usb 2-1: SerialNumber: syz
[   73.138322][   T28] audit: type=1400 audit(1793212846.887:279): avc:  denied  { execute } for  pid=948 comm="syz.2.183" path="/34/memory.events" dev="tmpfs" ino=217 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   73.218495][  T950] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=950 comm=syz.2.183
[   73.248527][  T956] user requested TSC rate below hardware speed
[   73.259780][  T953] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer.
[   73.360504][  T458] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[   73.758218][  T458] usb 2-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[   73.769405][  T458] usb 2-1: found format II with max.bitrate = 4, frame size=7372
[   73.903873][  T317] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   74.061485][  T970] loop5: detected capacity change from 0 to 512
[   74.093434][  T317] usb 5-1: Using ep0 maxpacket: 32
[   74.108926][  T317] usb 5-1: config 1 has an invalid descriptor of length 68, skipping remainder of the config
[   74.119814][  T970] EXT4-fs (loop5): Test dummy encryption mode enabled
[   74.127154][  T317] usb 5-1: config 1 interface 0 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 23
[   74.142165][  T970] EXT4-fs error (device loop5): ext4_orphan_get:1405: inode #15: comm syz.5.188: inode has both inline data and extents flags
[   74.155558][  T970] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.188: couldn't read orphan inode 15 (err -117)
[   74.168766][  T317] usb 5-1: config 1 interface 0 has no altsetting 0
[   74.176247][  T970] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[   74.185525][  T317] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   74.198307][  T317] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   74.218009][  T317] usb 5-1: SerialNumber: syz
[   74.237150][  T317] hub 5-1:1.0: bad descriptor, ignoring hub
[   74.243114][  T317] hub: probe of 5-1:1.0 failed with error -5
[   74.262236][   T28] audit: type=1400 audit(1793212848.007:280): avc:  denied  { remove_name } for  pid=969 comm="syz.5.188" name="file2" dev="loop5" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   74.296086][  T976] netlink: 4 bytes leftover after parsing attributes in process `syz.5.188'.
[   74.313477][  T317] cdc_acm 5-1:1.0: Control and data interfaces are not separated!
[   74.333327][  T317] cdc_acm 5-1:1.0: This needs exactly 3 endpoints
[   74.339807][  T317] cdc_acm: probe of 5-1:1.0 failed with error -22
[   74.453766][  T951] loop4: detected capacity change from 0 to 16
[   74.471926][  T875] EXT4-fs (loop5): unmounting filesystem.
[   74.504473][  T458] usb 2-1: invalid uac2 rates
[   74.509387][  T458] usb 2-1: invalid uac2 rates
[   74.514099][  T951] erofs: (device loop4): mounted with root inode @ nid 36.
[   74.523718][  T458] usb 2-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[   74.532196][  T458] usb 2-1: found format II with max.bitrate = 4, frame size=7372
[   74.553318][  T458] usb 2-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0)
[   74.569970][   T46] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000]
[   74.570010][  T458] usb 2-1: USB disconnect, device number 5
[   74.594067][  T951] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[4096]
[   74.634581][  T951] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[   74.684172][  T984] loop5: detected capacity change from 0 to 256
[   74.699168][  T984] exfat: Deprecated parameter 'utf8'
[   74.705118][  T984] exfat: Deprecated parameter 'utf8'
[   74.712919][  T984] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[   75.177258][    T6] usb 5-1: USB disconnect, device number 4
[   75.391557][  T997] overlayfs: missing 'lowerdir'
[   75.450976][ T1005] netlink: 8 bytes leftover after parsing attributes in process `syz.3.198'.
[   75.461804][ T1009] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   75.476147][ T1011] device sit0 entered promiscuous mode
[   75.485294][ T1011] netlink: 'syz.4.200': attribute type 1 has an invalid length.
[   75.498076][ T1011] netlink: 1 bytes leftover after parsing attributes in process `syz.4.200'.
[   75.507479][ T1011] netlink: 'syz.4.200': attribute type 1 has an invalid length.
[   75.516091][ T1011] netlink: 1 bytes leftover after parsing attributes in process `syz.4.200'.
[   75.533191][ T1011] netlink: 'syz.4.200': attribute type 1 has an invalid length.
[   75.541430][ T1011] netlink: 1 bytes leftover after parsing attributes in process `syz.4.200'.
[   75.550533][ T1011] netlink: 'syz.4.200': attribute type 1 has an invalid length.
[   75.558455][ T1011] netlink: 1 bytes leftover after parsing attributes in process `syz.4.200'.
[   75.575610][ T1011] netlink: 'syz.4.200': attribute type 1 has an invalid length.
[   75.596198][ T1011] netlink: 1 bytes leftover after parsing attributes in process `syz.4.200'.
[   75.622920][ T1011] netlink: 'syz.4.200': attribute type 1 has an invalid length.
[   75.631931][ T1011] netlink: 1 bytes leftover after parsing attributes in process `syz.4.200'.
[   75.646573][ T1011] netlink: 'syz.4.200': attribute type 1 has an invalid length.
[   75.654981][ T1011] netlink: 1 bytes leftover after parsing attributes in process `syz.4.200'.
[   75.679129][ T1011] netlink: 'syz.4.200': attribute type 1 has an invalid length.
[   75.696667][ T1011] netlink: 'syz.4.200': attribute type 1 has an invalid length.
[   75.712257][ T1011] netlink: 'syz.4.200': attribute type 1 has an invalid length.
[   75.742991][ T1011] netlink: 'syz.4.200': attribute type 1 has an invalid length.
[   75.758812][ T1011] netlink: 'syz.4.200': attribute type 1 has an invalid length.
[   75.774727][ T1011] netlink: 'syz.4.200': attribute type 1 has an invalid length.
[   75.798183][ T1011] netlink: 'syz.4.200': attribute type 1 has an invalid length.
[   76.074474][   T28] audit: type=1400 audit(1793212849.827:281): avc:  denied  { search } for  pid=1025 comm="syz.2.206" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[   76.098086][   T28] audit: type=1400 audit(1793212849.847:282): avc:  denied  { getopt } for  pid=1029 comm="syz.1.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   76.119237][   T28] audit: type=1400 audit(1793212849.847:283): avc:  denied  { ioctl } for  pid=1029 comm="syz.1.207" path="socket:[19934]" dev="sockfs" ino=19934 ioctlcmd=0x9425 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   76.164059][ T1032] overlayfs: missing 'lowerdir'
[   76.170476][ T1032] FAULT_INJECTION: forcing a failure.
[   76.170476][ T1032] name failslab, interval 1, probability 5, space 0, times 91
[   76.183638][ T1032] CPU: 0 PID: 1032 Comm: syz.1.208 Not tainted syzkaller #0
[   76.190978][ T1032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[   76.201073][ T1032] Call Trace:
[   76.204386][ T1032]  <TASK>
[   76.207352][ T1032]  __dump_stack+0x21/0x24
[   76.211747][ T1032]  dump_stack_lvl+0x110/0x170
[   76.216501][ T1032]  ? __cfi_dump_stack_lvl+0x8/0x8
[   76.221568][ T1032]  ? ida_alloc_range+0x808/0x840
[   76.226546][ T1032]  dump_stack+0x15/0x24
[   76.230726][ T1032]  should_fail_ex+0x3bf/0x510
[   76.235429][ T1032]  ? proc_net_ns_init+0x52/0x3b0
[   76.240408][ T1032]  __should_failslab+0xac/0xf0
[   76.245212][ T1032]  should_failslab+0x9/0x20
[   76.249744][ T1032]  kmem_cache_alloc+0x3b/0x320
[   76.254640][ T1032]  proc_net_ns_init+0x52/0x3b0
[   76.259450][ T1032]  ops_init+0x2ce/0x470
[   76.263641][ T1032]  ? memset+0x35/0x40
[   76.267654][ T1032]  setup_net+0x4b4/0xcd0
[   76.271943][ T1032]  ? copy_net_ns+0x5c0/0x5c0
[   76.276573][ T1032]  ? __kasan_kmalloc+0x95/0xb0
[   76.281379][ T1032]  ? copy_net_ns+0x185/0x5c0
[   76.286013][ T1032]  copy_net_ns+0x355/0x5c0
[   76.290460][ T1032]  create_new_namespaces+0x3a8/0x660
[   76.295807][ T1032]  unshare_nsproxy_namespaces+0x120/0x170
[   76.301585][ T1032]  ksys_unshare+0x4d5/0x850
[   76.306135][ T1032]  ? __cfi_ksys_unshare+0x10/0x10
[   76.311312][ T1032]  ? fpregs_restore_userregs+0x128/0x260
[   76.317002][ T1032]  __x64_sys_unshare+0x38/0x40
[   76.321808][ T1032]  x64_sys_call+0x767/0x9a0
[   76.326350][ T1032]  do_syscall_64+0x4c/0xa0
[   76.330827][ T1032]  ? clear_bhb_loop+0x30/0x80
[   76.335539][ T1032]  ? clear_bhb_loop+0x30/0x80
[   76.340251][ T1032]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   76.346190][ T1032] RIP: 0033:0x7f43c4f9f559
[   76.350637][ T1032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   76.370285][ T1032] RSP: 002b:00007f43c5e99028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[   76.378736][ T1032] RAX: ffffffffffffffda RBX: 00007f43c5225fa0 RCX: 00007f43c4f9f559
[   76.386762][ T1032] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
[   76.394758][ T1032] RBP: 00007f43c5036b20 R08: 0000000000000000 R09: 0000000000000000
[   76.402747][ T1032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   76.410729][ T1032] R13: 00007f43c5226038 R14: 00007f43c5225fa0 R15: 00007ffe3fbf8a58
[   76.418741][ T1032]  </TASK>
[   76.497896][   T28] audit: type=1326 audit(1793212850.247:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1040 comm="syz.4.213" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83de79f559 code=0x7ffc0000
[   76.528118][   T28] audit: type=1326 audit(1793212850.247:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1040 comm="syz.4.213" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83de79f559 code=0x7ffc0000
[   76.554077][   T28] audit: type=1326 audit(1793212850.247:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1040 comm="syz.4.213" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83de79f559 code=0x7ffc0000
[   76.579786][   T28] audit: type=1326 audit(1793212850.247:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1040 comm="syz.4.213" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f83de79f559 code=0x7ffc0000
[   76.743523][   T28] audit: type=1326 audit(1793212850.247:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1040 comm="syz.4.213" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83de79f559 code=0x7ffc0000
[   76.743735][   T28] audit: type=1326 audit(1793212850.247:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1040 comm="syz.4.213" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83de79f559 code=0x7ffc0000
[   76.743863][   T28] audit: type=1326 audit(1793212850.247:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1040 comm="syz.4.213" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83de79f559 code=0x7ffc0000
[   76.743961][   T28] audit: type=1326 audit(1793212850.267:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1040 comm="syz.4.213" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83de79f559 code=0x7ffc0000
[   77.175261][ T1043] device wg1 entered promiscuous mode
[   77.372472][ T1066] loop4: detected capacity change from 0 to 512
[   77.434559][  T314] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   78.611905][ T1085] overlayfs: failed to clone upperpath
[   79.672043][ T1095] loop4: detected capacity change from 0 to 128
[   79.684092][ T1107] __nla_validate_parse: 58 callbacks suppressed
[   79.684114][ T1107] netlink: 16 bytes leftover after parsing attributes in process `syz.5.234'.
[   79.699512][ T1107] netlink: 16 bytes leftover after parsing attributes in process `syz.5.234'.
[   80.039876][ T1125] device wg1 entered promiscuous mode
[   80.262914][ T1135] overlayfs: missing 'lowerdir'
[   80.279719][ T1137] overlayfs: missing 'lowerdir'
[   80.358399][ T1145] fuse: Bad value for 'fd'
[   80.422167][ T1148] futex_wake_op: syz.5.248 tries to shift op by 144; fix this program
[   80.517530][ T1149] loop4: detected capacity change from 0 to 1024
[   80.541232][ T1151] loop1: detected capacity change from 0 to 2048
[   80.557452][ T1149] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   80.606669][ T1151] Alternate GPT is invalid, using primary GPT.
[   80.614218][ T1151]  loop1: p2 p3 p7
[   80.664487][ T1157] overlayfs: missing 'lowerdir'
[   80.721787][  T314] udevd[314]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[   80.739053][  T467] udevd[467]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[   80.749102][  T313] udevd[313]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory
[   80.807355][ T1164] loop2: detected capacity change from 0 to 1024
[   80.871917][ T1168] FAULT_INJECTION: forcing a failure.
[   80.871917][ T1168] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   80.900569][ T1168] CPU: 0 PID: 1168 Comm: syz.2.256 Not tainted syzkaller #0
[   80.907928][ T1168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[   80.918018][ T1168] Call Trace:
[   80.921349][ T1168]  <TASK>
[   80.924301][ T1168]  __dump_stack+0x21/0x24
[   80.928670][ T1168]  dump_stack_lvl+0x110/0x170
[   80.933404][ T1168]  ? __cfi_dump_stack_lvl+0x8/0x8
[   80.938455][ T1168]  dump_stack+0x15/0x24
[   80.942623][ T1168]  should_fail_ex+0x3bf/0x510
[   80.947313][ T1168]  should_fail+0xb/0x10
[   80.951481][ T1168]  should_fail_usercopy+0x1a/0x20
[   80.956522][ T1168]  _copy_to_user+0x1e/0x90
[   80.960953][ T1168]  simple_read_from_buffer+0xe9/0x160
[   80.966355][ T1168]  proc_fail_nth_read+0x1a6/0x220
[   80.971412][ T1168]  ? __cfi_proc_fail_nth_read+0x10/0x10
[   80.977027][ T1168]  ? security_file_permission+0x94/0xb0
[   80.982664][ T1168]  ? __cfi_proc_fail_nth_read+0x10/0x10
[   80.988236][ T1168]  vfs_read+0x286/0x930
[   80.992423][ T1168]  ? __cfi_vfs_read+0x10/0x10
[   80.997141][ T1168]  ? __kasan_check_write+0x14/0x20
[   81.002315][ T1168]  ? mutex_lock+0x93/0x1b0
[   81.006774][ T1168]  ? __cfi_mutex_lock+0x10/0x10
[   81.011669][ T1168]  ? __fdget_pos+0x2cd/0x380
[   81.016278][ T1168]  ? ksys_read+0x70/0x260
[   81.020624][ T1168]  ksys_read+0x14a/0x260
[   81.024888][ T1168]  ? __cfi_ksys_read+0x10/0x10
[   81.029668][ T1168]  ? debug_smp_processor_id+0x17/0x20
[   81.035059][ T1168]  __x64_sys_read+0x7b/0x90
[   81.039580][ T1168]  x64_sys_call+0x2f/0x9a0
[   81.044020][ T1168]  do_syscall_64+0x4c/0xa0
[   81.048472][ T1168]  ? clear_bhb_loop+0x30/0x80
[   81.053168][ T1168]  ? clear_bhb_loop+0x30/0x80
[   81.057881][ T1168]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   81.063818][ T1168] RIP: 0033:0x7f2f8355fd8e
[   81.068247][ T1168] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   81.087956][ T1168] RSP: 002b:00007f2f84508fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   81.096390][ T1168] RAX: ffffffffffffffda RBX: 00007f2f845096c0 RCX: 00007f2f8355fd8e
[   81.104379][ T1168] RDX: 000000000000000f RSI: 00007f2f845090a0 RDI: 0000000000000004
[   81.112365][ T1168] RBP: 00007f2f84509090 R08: 0000000000000000 R09: 0000000000000000
[   81.120351][ T1168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   81.128335][ T1168] R13: 00007f2f83826038 R14: 00007f2f83825fa0 R15: 00007fffe5f24338
[   81.136329][ T1168]  </TASK>
[   81.235266][ T1159] loop1: detected capacity change from 0 to 40427
[   81.254723][ T1159] F2FS-fs (loop1): invalid crc value
[   81.289795][ T1175] overlayfs: missing 'lowerdir'
[   81.305034][ T1159] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[   81.317762][ T1175] FAULT_INJECTION: forcing a failure.
[   81.317762][ T1175] name failslab, interval 1, probability 5, space 0, times 90
[   81.338465][ T1182] validate_nla: 51 callbacks suppressed
[   81.338482][ T1182] netlink: 'syz.5.260': attribute type 4 has an invalid length.
[   81.363430][ T1175] CPU: 1 PID: 1175 Comm: syz.2.259 Not tainted syzkaller #0
[   81.370781][ T1175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[   81.380878][ T1175] Call Trace:
[   81.384190][ T1175]  <TASK>
[   81.387163][ T1175]  __dump_stack+0x21/0x24
[   81.391529][ T1175]  dump_stack_lvl+0x110/0x170
[   81.396328][ T1175]  ? __cfi_dump_stack_lvl+0x8/0x8
[   81.401387][ T1175]  ? _raw_write_lock+0x94/0xf0
[   81.406185][ T1175]  ? __cfi__raw_write_lock+0x10/0x10
[   81.411506][ T1175]  dump_stack+0x15/0x24
[   81.415686][ T1175]  should_fail_ex+0x3bf/0x510
[   81.420408][ T1175]  __should_failslab+0xac/0xf0
[   81.425248][ T1175]  should_failslab+0x9/0x20
[   81.429789][ T1175]  __kmem_cache_alloc_node+0x3d/0x2d0
[   81.435199][ T1175]  ? nf_log_net_init+0x86/0x680
[   81.440096][ T1175]  ? nf_log_net_init+0x86/0x680
[   81.444987][ T1175]  __kmalloc_node_track_caller+0xa1/0x1e0
[   81.450742][ T1175]  kmemdup+0x2b/0x60
[   81.454713][ T1175]  nf_log_net_init+0x86/0x680
[   81.459432][ T1175]  ? __cfi_nf_log_net_init+0x10/0x10
[   81.464762][ T1175]  ops_init+0x2ce/0x470
[   81.468962][ T1175]  ? memset+0x35/0x40
[   81.472993][ T1175]  setup_net+0x4b4/0xcd0
[   81.477269][ T1175]  ? copy_net_ns+0x5c0/0x5c0
[   81.478685][ T1159] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   81.481884][ T1175]  ? __kasan_kmalloc+0x95/0xb0
[   81.494137][ T1175]  ? copy_net_ns+0x185/0x5c0
[   81.498759][ T1175]  copy_net_ns+0x355/0x5c0
[   81.503213][ T1175]  create_new_namespaces+0x3a8/0x660
[   81.508538][ T1175]  unshare_nsproxy_namespaces+0x120/0x170
[   81.514323][ T1175]  ksys_unshare+0x4d5/0x850
[   81.518961][ T1175]  ? __cfi_ksys_unshare+0x10/0x10
[   81.524029][ T1175]  ? fpregs_restore_userregs+0x128/0x260
[   81.529693][ T1175]  __x64_sys_unshare+0x38/0x40
[   81.534502][ T1175]  x64_sys_call+0x767/0x9a0
[   81.539039][ T1175]  do_syscall_64+0x4c/0xa0
[   81.543475][ T1175]  ? clear_bhb_loop+0x30/0x80
[   81.548188][ T1175]  ? clear_bhb_loop+0x30/0x80
[   81.552896][ T1175]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   81.558823][ T1175] RIP: 0033:0x7f2f8359f559
[   81.563259][ T1175] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   81.582890][ T1175] RSP: 002b:00007f2f84509028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[   81.591340][ T1175] RAX: ffffffffffffffda RBX: 00007f2f83825fa0 RCX: 00007f2f8359f559
[   81.599345][ T1175] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
[   81.607339][ T1175] RBP: 00007f2f83636b20 R08: 0000000000000000 R09: 0000000000000000
[   81.615339][ T1175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   81.623350][ T1175] R13: 00007f2f83826038 R14: 00007f2f83825fa0 R15: 00007fffe5f24338
[   81.631374][ T1175]  </TASK>
[   82.524530][  T287] syz-executor: attempt to access beyond end of device
[   82.524530][  T287] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   82.688984][   T28] kauditd_printk_skb: 507 callbacks suppressed
[   82.689001][   T28] audit: type=1400 audit(1793212856.437:799): avc:  denied  { setattr } for  pid=1140 comm="syz.4.247" name="#21" dev="loop4" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   82.753053][   T28] audit: type=1400 audit(1793212856.477:800): avc:  denied  { link } for  pid=1140 comm="syz.4.247" name="#21" dev="loop4" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   82.850839][ T1214] loop2: detected capacity change from 0 to 256
[   83.503672][   T28] audit: type=1400 audit(1793212857.237:801): avc:  denied  { search } for  pid=1210 comm="syz.1.264" name="/" dev="configfs" ino=13087 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   83.541672][ T1214] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xa7bc3a1f, utbl_chksum : 0xe619d30d)
[   83.743153][ T1214] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 2199023255554)
[   83.763072][   T28] audit: type=1400 audit(1793212857.507:802): avc:  denied  { rmdir } for  pid=291 comm="syz-executor" name="lost+found" dev="loop4" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   83.842173][  T291] EXT4-fs (loop4): unmounting filesystem.
[   83.850876][ T1222] FAULT_INJECTION: forcing a failure.
[   83.850876][ T1222] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   83.888459][ T1214] incfs: ino conflict with backing FS 1
[   83.904504][ T1222] CPU: 1 PID: 1222 Comm: syz.1.271 Not tainted syzkaller #0
[   83.911859][ T1222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[   83.921940][ T1222] Call Trace:
[   83.925239][ T1222]  <TASK>
[   83.928193][ T1222]  __dump_stack+0x21/0x24
[   83.932549][ T1222]  dump_stack_lvl+0x110/0x170
[   83.937248][ T1222]  ? __cfi_dump_stack_lvl+0x8/0x8
[   83.942297][ T1222]  ? memcpy+0x56/0x70
[   83.946304][ T1222]  dump_stack+0x15/0x24
[   83.950481][ T1222]  should_fail_ex+0x3bf/0x510
[   83.955220][ T1222]  should_fail+0xb/0x10
[   83.959424][ T1222]  should_fail_usercopy+0x1a/0x20
[   83.964498][ T1222]  strncpy_from_user+0x24/0x2c0
[   83.969380][ T1222]  bpf_prog_load+0x1f1/0x1670
[   83.974089][ T1222]  ? map_freeze+0x3a0/0x3a0
[   83.978624][ T1222]  ? selinux_bpf+0xc7/0xf0
[   83.983081][ T1222]  ? security_bpf+0x93/0xb0
[   83.987625][ T1222]  __sys_bpf+0x57b/0x850
[   83.991898][ T1222]  ? bpf_link_show_fdinfo+0x330/0x330
[   83.997315][ T1222]  ? __cfi_ksys_write+0x10/0x10
[   84.002198][ T1222]  ? debug_smp_processor_id+0x17/0x20
[   84.007603][ T1222]  __x64_sys_bpf+0x7c/0x90
[   84.012048][ T1222]  x64_sys_call+0x488/0x9a0
[   84.016578][ T1222]  do_syscall_64+0x4c/0xa0
[   84.021017][ T1222]  ? clear_bhb_loop+0x30/0x80
[   84.025726][ T1222]  ? clear_bhb_loop+0x30/0x80
[   84.030533][ T1222]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   84.036467][ T1222] RIP: 0033:0x7f43c4f9f559
[   84.040928][ T1222] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   84.060668][ T1222] RSP: 002b:00007f43c5e99028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   84.069131][ T1222] RAX: ffffffffffffffda RBX: 00007f43c5225fa0 RCX: 00007f43c4f9f559
[   84.077156][ T1222] RDX: 0000000000000094 RSI: 00002000000003c0 RDI: 0000000000000005
[   84.085937][ T1222] RBP: 00007f43c5e99090 R08: 0000000000000000 R09: 0000000000000000
[   84.093941][ T1222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   84.102033][ T1222] R13: 00007f43c5226038 R14: 00007f43c5225fa0 R15: 00007ffe3fbf8a58
[   84.110343][ T1222]  </TASK>
[   84.127310][   T28] audit: type=1400 audit(1793212857.507:803): avc:  denied  { unlink } for  pid=291 comm="syz-executor" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   84.195582][   T28] audit: type=1400 audit(1793212857.507:804): avc:  denied  { unlink } for  pid=291 comm="syz-executor" name="file1" dev="loop4" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1
[   84.243884][   T28] audit: type=1400 audit(1793212857.587:805): avc:  denied  { rmdir } for  pid=291 comm="syz-executor" name="work" dev="loop4" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   84.285833][   T28] audit: type=1400 audit(1793212857.587:806): avc:  denied  { unlink } for  pid=291 comm="syz-executor" name="file1" dev="loop4" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   84.340410][ T1224] tipc: Started in network mode
[   84.345399][ T1224] tipc: Node identity 4, cluster identity 4711
[   84.351583][ T1224] tipc: Node number set to 4
[   84.371840][ T1226] loop4: detected capacity change from 0 to 4096
[   84.388552][ T1228] overlayfs: missing 'lowerdir'
[   84.395031][ T1228] FAULT_INJECTION: forcing a failure.
[   84.395031][ T1228] name failslab, interval 1, probability 5, space 0, times 89
[   84.409031][ T1226] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   84.440777][ T1228] CPU: 0 PID: 1228 Comm: syz.1.274 Not tainted syzkaller #0
[   84.448135][ T1228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[   84.458225][ T1228] Call Trace:
[   84.461532][ T1228]  <TASK>
[   84.464486][ T1228]  __dump_stack+0x21/0x24
[   84.468972][ T1228]  dump_stack_lvl+0x110/0x170
[   84.473677][ T1228]  ? __cfi_dump_stack_lvl+0x8/0x8
[   84.478731][ T1228]  dump_stack+0x15/0x24
[   84.482915][ T1228]  should_fail_ex+0x3bf/0x510
[   84.487653][ T1228]  ? security_inode_alloc+0x33/0x120
[   84.492975][ T1228]  __should_failslab+0xac/0xf0
[   84.497783][ T1228]  should_failslab+0x9/0x20
[   84.502315][ T1228]  kmem_cache_alloc+0x3b/0x320
[   84.507133][ T1228]  security_inode_alloc+0x33/0x120
[   84.512409][ T1228]  inode_init_always+0x6ee/0x950
[   84.517394][ T1228]  new_inode_pseudo+0xa2/0x1f0
[   84.522200][ T1228]  sock_create_lite+0x8b/0x4f0
[   84.527032][ T1228]  __netlink_kernel_create+0x11c/0x930
[   84.532635][ T1228]  ? __netlink_kernel_create+0x819/0x930
[   84.538307][ T1228]  ? __cfi___netlink_kernel_create+0x10/0x10
[   84.544337][ T1228]  ? memcpy+0x56/0x70
[   84.548352][ T1228]  genl_pernet_init+0xb6/0x170
[   84.553177][ T1228]  ? __cfi_genl_pernet_init+0x10/0x10
[   84.558582][ T1228]  ? rtnetlink_net_init+0xbd/0x140
[   84.563723][ T1228]  ? __cfi_genl_rcv+0x10/0x10
[   84.568437][ T1228]  ? __cfi_genl_bind+0x10/0x10
[   84.573239][ T1228]  ? __cfi_rtnetlink_bind+0x10/0x10
[   84.578466][ T1228]  ? memset+0x35/0x40
[   84.582476][ T1228]  ? __mutex_init+0xcd/0x1a0
[   84.587108][ T1228]  ops_init+0x2ce/0x470
[   84.591296][ T1228]  setup_net+0x4b4/0xcd0
[   84.595568][ T1228]  ? copy_net_ns+0x5c0/0x5c0
[   84.600223][ T1228]  ? __kasan_kmalloc+0x95/0xb0
[   84.605035][ T1228]  ? copy_net_ns+0x185/0x5c0
[   84.609658][ T1228]  copy_net_ns+0x355/0x5c0
[   84.614102][ T1228]  create_new_namespaces+0x3a8/0x660
[   84.619437][ T1228]  unshare_nsproxy_namespaces+0x120/0x170
[   84.625205][ T1228]  ksys_unshare+0x4d5/0x850
[   84.629753][ T1228]  ? __cfi_ksys_unshare+0x10/0x10
[   84.634822][ T1228]  ? fpregs_restore_userregs+0x128/0x260
[   84.640498][ T1228]  __x64_sys_unshare+0x38/0x40
[   84.645303][ T1228]  x64_sys_call+0x767/0x9a0
[   84.649843][ T1228]  do_syscall_64+0x4c/0xa0
[   84.654286][ T1228]  ? clear_bhb_loop+0x30/0x80
[   84.658999][ T1228]  ? clear_bhb_loop+0x30/0x80
[   84.663717][ T1228]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   84.669831][ T1228] RIP: 0033:0x7f43c4f9f559
[   84.674268][ T1228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   84.693894][ T1228] RSP: 002b:00007f43c5e99028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[   84.702415][ T1228] RAX: ffffffffffffffda RBX: 00007f43c5225fa0 RCX: 00007f43c4f9f559
[   84.710511][ T1228] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
[   84.718492][ T1228] RBP: 00007f43c5036b20 R08: 0000000000000000 R09: 0000000000000000
[   84.726475][ T1228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   84.734474][ T1228] R13: 00007f43c5226038 R14: 00007f43c5225fa0 R15: 00007ffe3fbf8a58
[   84.742473][ T1228]  </TASK>
[   84.754906][ T1226] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   85.003544][   T28] audit: type=1400 audit(1793212858.707:807): avc:  denied  { connect } for  pid=1225 comm="syz.4.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   85.326587][   T28] audit: type=1400 audit(1793212859.047:808): avc:  denied  { read write } for  pid=1242 comm="syz.1.279" name="usbmon6" dev="devtmpfs" ino=177 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   85.694420][  T291] EXT4-fs (loop4): unmounting filesystem.
[   85.785399][ T1254] loop1: detected capacity change from 0 to 8192
[   85.805135][ T1254] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   85.815948][ T1256] loop4: detected capacity change from 0 to 2048
[   85.823854][ T1247] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.831392][ T1247] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.842794][ T1247] device bridge_slave_0 entered promiscuous mode
[   85.856164][ T1247] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.866242][ T1256] Alternate GPT is invalid, using primary GPT.
[   85.872537][ T1247] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.880989][ T1256]  loop4: p2 p3 p7
[   85.924429][ T1247] device bridge_slave_1 entered promiscuous mode
[   85.977185][ T1263] overlayfs: missing 'lowerdir'
[   85.982585][  T313] udevd[313]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory
[   85.992952][  T314] udevd[314]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[   86.007335][ T1263] FAULT_INJECTION: forcing a failure.
[   86.007335][ T1263] name failslab, interval 1, probability 5, space 0, times 88
[   86.023319][ T1263] CPU: 1 PID: 1263 Comm: syz.4.284 Not tainted syzkaller #0
[   86.030661][ T1263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[   86.040744][ T1263] Call Trace:
[   86.044055][ T1263]  <TASK>
[   86.047027][ T1263]  __dump_stack+0x21/0x24
[   86.051386][ T1263]  dump_stack_lvl+0x110/0x170
[   86.056093][ T1263]  ? __cfi_dump_stack_lvl+0x8/0x8
[   86.061161][ T1263]  ? __cfi___switch_to+0x10/0x10
[   86.066133][ T1263]  dump_stack+0x15/0x24
[   86.070321][ T1263]  should_fail_ex+0x3bf/0x510
[   86.075031][ T1263]  ? __proc_create+0x376/0x8f0
[   86.079836][ T1263]  __should_failslab+0xac/0xf0
[   86.084642][ T1263]  should_failslab+0x9/0x20
[   86.089203][ T1263]  kmem_cache_alloc+0x3b/0x320
[   86.094004][ T1263]  __proc_create+0x376/0x8f0
[   86.098621][ T1263]  ? release_firmware_map_entry+0x190/0x190
[   86.104553][ T1263]  ? proc_symlink+0x1f0/0x1f0
[   86.109262][ T1263]  ? __kasan_check_read+0x11/0x20
[   86.114312][ T1263]  proc_create_reg+0x96/0x110
[   86.119021][ T1263]  proc_create_net_data+0x95/0x1a0
[   86.124162][ T1263]  ? __cfi_proc_create_net_data+0x10/0x10
[   86.129915][ T1263]  nf_log_net_init+0x62/0x680
[   86.134613][ T1263]  ? __cfi_nf_log_net_init+0x10/0x10
[   86.139927][ T1263]  ops_init+0x2ce/0x470
[   86.144111][ T1263]  ? memset+0x35/0x40
[   86.148117][ T1263]  setup_net+0x4b4/0xcd0
[   86.152415][ T1263]  ? copy_net_ns+0x5c0/0x5c0
[   86.157050][ T1263]  ? __kasan_kmalloc+0x95/0xb0
[   86.161846][ T1263]  ? copy_net_ns+0x185/0x5c0
[   86.166465][ T1263]  copy_net_ns+0x355/0x5c0
[   86.170902][ T1263]  create_new_namespaces+0x3a8/0x660
[   86.176218][ T1263]  unshare_nsproxy_namespaces+0x120/0x170
[   86.181974][ T1263]  ksys_unshare+0x4d5/0x850
[   86.186514][ T1263]  ? __cfi_ksys_unshare+0x10/0x10
[   86.191570][ T1263]  __x64_sys_unshare+0x38/0x40
[   86.196364][ T1263]  x64_sys_call+0x767/0x9a0
[   86.200916][ T1263]  do_syscall_64+0x4c/0xa0
[   86.205355][ T1263]  ? clear_bhb_loop+0x30/0x80
[   86.210058][ T1263]  ? clear_bhb_loop+0x30/0x80
[   86.214766][ T1263]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   86.220682][ T1263] RIP: 0033:0x7f83de79f559
[   86.225128][ T1263] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   86.244839][ T1263] RSP: 002b:00007f83df67b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[   86.253307][ T1263] RAX: ffffffffffffffda RBX: 00007f83dea25fa0 RCX: 00007f83de79f559
[   86.261314][ T1263] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
[   86.269337][ T1263] RBP: 00007f83de836b20 R08: 0000000000000000 R09: 0000000000000000
[   86.277327][ T1263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   86.285320][ T1263] R13: 00007f83dea26038 R14: 00007f83dea25fa0 R15: 00007ffc1f253668
[   86.293318][ T1263]  </TASK>
[   86.381525][  T467] udevd[467]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[   86.861256][ T1274] overlayfs: missing 'lowerdir'
[   86.967516][ T1281] loop1: detected capacity change from 0 to 512
[   86.975156][ T1281] EXT4-fs (loop1): Test dummy encryption mode enabled
[   86.986549][ T1281] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.290: inode has both inline data and extents flags
[   87.004362][ T1281] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.290: couldn't read orphan inode 15 (err -117)
[   87.022216][ T1281] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   87.102239][  T684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   87.111839][  T684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   87.141619][  T684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   87.150371][  T684] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   87.165759][  T684] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.173001][  T684] bridge0: port 1(bridge_slave_0) entered forwarding state
[   87.181149][  T684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   87.196504][  T684] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   87.206180][  T287] EXT4-fs (loop1): unmounting filesystem.
[   87.212577][  T684] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.219773][  T684] bridge0: port 2(bridge_slave_1) entered forwarding state
[   87.260219][  T684] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   87.284137][ T1291] tipc: Started in network mode
[   87.296775][ T1291] tipc: Node identity 1001001, cluster identity 4711
[   87.304146][ T1291] tipc: Node number set to 16781313
[   87.611251][ T1287] loop4: detected capacity change from 0 to 1024
[   87.698354][ T1287] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   88.085862][   T28] kauditd_printk_skb: 32 callbacks suppressed
[   88.085878][   T28] audit: type=1400 audit(1793212861.837:841): avc:  denied  { create } for  pid=1297 comm="syz.1.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[   88.162581][  T291] EXT4-fs (loop4): unmounting filesystem.
[   88.171716][   T28] audit: type=1400 audit(1793212861.867:842): avc:  denied  { sys_admin } for  pid=1297 comm="syz.1.294" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[   88.202623][ T1301] loop1: detected capacity change from 0 to 1024
[   88.218085][ T1301] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   88.228033][ T1301] JBD2: no valid journal superblock found
[   88.234056][ T1301] EXT4-fs (loop1): error loading journal
[   88.342544][  T358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   88.351607][  T358] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   88.359778][  T358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   88.368533][  T358] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   88.376856][  T358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   88.385381][  T358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   88.443154][ T1312] overlayfs: missing 'lowerdir'
[   88.450042][ T1312] FAULT_INJECTION: forcing a failure.
[   88.450042][ T1312] name failslab, interval 1, probability 5, space 0, times 87
[   88.464450][ T1312] CPU: 0 PID: 1312 Comm: syz.1.300 Not tainted syzkaller #0
[   88.471880][ T1312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[   88.481965][ T1312] Call Trace:
[   88.485312][ T1312]  <TASK>
[   88.488282][ T1312]  __dump_stack+0x21/0x24
[   88.488305][ T1247] device veth0_vlan entered promiscuous mode
[   88.498642][ T1312]  dump_stack_lvl+0x110/0x170
[   88.503479][ T1312]  ? __cfi_dump_stack_lvl+0x8/0x8
[   88.508549][ T1312]  ? _raw_write_lock+0x94/0xf0
[   88.510703][ T1247] device veth1_macvtap entered promiscuous mode
[   88.513355][ T1312]  ? __cfi__raw_write_lock+0x10/0x10
[   88.513385][ T1312]  dump_stack+0x15/0x24
[   88.529134][ T1312]  should_fail_ex+0x3bf/0x510
[   88.533880][ T1312]  __should_failslab+0xac/0xf0
[   88.538692][ T1312]  should_failslab+0x9/0x20
[   88.543229][ T1312]  __kmem_cache_alloc_node+0x3d/0x2d0
[   88.548909][ T1312]  ? nf_log_net_init+0x86/0x680
[   88.553816][ T1312]  ? nf_log_net_init+0x86/0x680
[   88.558699][ T1312]  __kmalloc_node_track_caller+0xa1/0x1e0
[   88.564468][ T1312]  kmemdup+0x2b/0x60
[   88.568426][ T1312]  nf_log_net_init+0x86/0x680
[   88.573136][ T1312]  ? __cfi_nf_log_net_init+0x10/0x10
[   88.578453][ T1312]  ops_init+0x2ce/0x470
[   88.582647][ T1312]  ? memset+0x35/0x40
[   88.586663][ T1312]  setup_net+0x4b4/0xcd0
[   88.590933][ T1312]  ? copy_net_ns+0x5c0/0x5c0
[   88.595554][ T1312]  ? __kasan_kmalloc+0x95/0xb0
[   88.600358][ T1312]  ? copy_net_ns+0x185/0x5c0
[   88.604982][ T1312]  copy_net_ns+0x355/0x5c0
[   88.609430][ T1312]  create_new_namespaces+0x3a8/0x660
[   88.614758][ T1312]  unshare_nsproxy_namespaces+0x120/0x170
[   88.620519][ T1312]  ksys_unshare+0x4d5/0x850
[   88.625068][ T1312]  ? __cfi_ksys_unshare+0x10/0x10
[   88.630134][ T1312]  ? fpregs_restore_userregs+0x128/0x260
[   88.635805][ T1312]  __x64_sys_unshare+0x38/0x40
[   88.640614][ T1312]  x64_sys_call+0x767/0x9a0
[   88.645162][ T1312]  do_syscall_64+0x4c/0xa0
[   88.649706][ T1312]  ? clear_bhb_loop+0x30/0x80
[   88.654432][ T1312]  ? clear_bhb_loop+0x30/0x80
[   88.659157][ T1312]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   88.665103][ T1312] RIP: 0033:0x7f43c4f9f559
[   88.669576][ T1312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   88.689318][ T1312] RSP: 002b:00007f43c5e99028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[   88.697781][ T1312] RAX: ffffffffffffffda RBX: 00007f43c5225fa0 RCX: 00007f43c4f9f559
[   88.705836][ T1312] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
[   88.713834][ T1312] RBP: 00007f43c5036b20 R08: 0000000000000000 R09: 0000000000000000
[   88.721831][ T1312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   88.730010][ T1312] R13: 00007f43c5226038 R14: 00007f43c5225fa0 R15: 00007ffe3fbf8a58
[   88.738013][ T1312]  </TASK>
[   88.762460][  T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   88.775362][  T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   88.799500][  T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   88.856711][  T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   88.892397][  T323] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   88.914766][  T323] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   88.930010][ T1322] loop4: detected capacity change from 0 to 4096
[   88.940927][  T323] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   88.954791][ T1322] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[   88.967293][  T323] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   88.981377][  T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   88.997307][ T1320] device wg1 entered promiscuous mode
[   89.006621][  T323] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   89.021636][  T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   89.049167][   T28] audit: type=1400 audit(1793212862.797:843): avc:  denied  { mount } for  pid=1247 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   89.144200][ T1275] device bridge_slave_1 left promiscuous mode
[   89.151500][ T1275] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.169024][ T1331] overlayfs: missing 'lowerdir'
[   89.177668][ T1275] device bridge_slave_0 left promiscuous mode
[   89.189072][ T1275] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.206638][ T1275] device veth1_macvtap left promiscuous mode
[   89.215720][ T1275] device veth0_vlan left promiscuous mode
[   89.238289][ T1333] futex_wake_op: syz.6.307 tries to shift op by 144; fix this program
[   89.248991][ T1333] loop6: detected capacity change from 0 to 256
[   89.272042][  T308] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   89.282647][ T1333] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[   89.296894][   T28] audit: type=1400 audit(1793212863.047:844): avc:  denied  { read } for  pid=1332 comm="syz.6.307" name="file1" dev="loop6" ino=1048712 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   89.428872][   T28] audit: type=1400 audit(1793212863.177:845): avc:  denied  { checkpoint_restore } for  pid=1338 comm="syz.6.309" capability=40  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   89.464799][ T1341] loop6: detected capacity change from 0 to 512
[   89.481845][ T1341] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[   89.494406][  T308] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   89.502075][ T1341] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[   89.523353][ T1341] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[   89.523351][  T308] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[   89.523390][  T308] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   89.557766][ T1341] EXT4-fs (loop6): revision level too high, forcing read-only mode
[   89.596025][ T1341] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e041e01c, mo2=0100]
[   89.614014][ T1325] loop1: detected capacity change from 0 to 40427
[   89.622599][ T1341] EXT4-fs (loop6): failed to initialize system zone (-117)
[   89.638311][ T1341] EXT4-fs (loop6): mount failed
[   89.643831][ T1325] F2FS-fs (loop1): invalid crc value
[   89.650556][  T308] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   89.659888][  T308] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   89.668763][  T308] usb 5-1: Product: syz
[   89.673026][  T308] usb 5-1: Manufacturer: syz
[   89.678270][  T308] usb 5-1: SerialNumber: syz
[   89.688439][ T1325] F2FS-fs (loop1): Found nat_bits in checkpoint
[   89.697246][  T308] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found
[   89.704905][  T308] cdc_ncm 5-1:1.0: bind() failure
[   89.750400][ T1325] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   89.805526][ T1325] fuse: Unknown parameter 'ro000000000000000040000'
[   89.872117][  T287] syz-executor: attempt to access beyond end of device
[   89.872117][  T287] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[   89.909453][ T1322] 
€Â0: renamed from pim6reg1
[   89.967551][ T1355] netlink: 20 bytes leftover after parsing attributes in process `syz.1.312'.
[   89.977803][    T6] usb 5-1: USB disconnect, device number 5
[   90.351513][ T1365] loop6: detected capacity change from 0 to 8192
[   90.386799][ T1365] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   90.592708][   T28] audit: type=1400 audit(1793212864.337:846): avc:  denied  { remount } for  pid=1372 comm="syz.5.319" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   90.785229][   T28] audit: type=1326 audit(1793212864.537:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1377 comm="syz.1.321" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43c4f9f559 code=0x7ffc0000
[   90.823303][   T19] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[   90.857582][ T1378] HTB: quantum of class FFF10001 is small. Consider r2q change.
[   90.904219][   T28] audit: type=1326 audit(1793212864.567:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1377 comm="syz.1.321" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43c4f9f559 code=0x7ffc0000
[   90.995765][   T28] audit: type=1326 audit(1793212864.567:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1377 comm="syz.1.321" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f43c4f9f559 code=0x7ffc0000
[   91.064695][   T19] usb 5-1: unable to get BOS descriptor or descriptor too short
[   91.094464][   T19] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   91.178404][   T28] audit: type=1326 audit(1793212864.567:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1377 comm="syz.1.321" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43c4f9f559 code=0x7ffc0000
[   91.215737][   T19] usb 5-1: string descriptor 0 read error: -22
[   91.226407][   T19] usb 5-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40
[   91.252787][   T19] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.672674][ T1394] loop6: detected capacity change from 0 to 256
[   91.712967][ T1394] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xa7bc3a1f, utbl_chksum : 0xe619d30d)
[   91.743544][ T1394] exFAT-fs (loop6): bogus allocation bitmap size(need : 2, cur : 2199023255554)
[   91.787768][ T1394] incfs: ino conflict with backing FS 1
[   91.873545][ T1079] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   91.885211][   T19] usb 5-1: 1:1: cannot get freq at ep 0x1
[   92.073306][ T1079] usb 2-1: Using ep0 maxpacket: 32
[   92.079651][ T1079] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[   92.091402][ T1079] usb 2-1: config 0 has no interface number 0
[   92.097995][ T1079] usb 2-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   92.109469][ T1079] usb 2-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid maxpacket 33573, setting to 1024
[   92.121008][ T1079] usb 2-1: config 0 interface 2 has no altsetting 0
[   92.129357][ T1079] usb 2-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f
[   92.138763][ T1079] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   92.147043][ T1079] usb 2-1: Product: syz
[   92.151409][ T1079] usb 2-1: Manufacturer: syz
[   92.156326][ T1079] usb 2-1: SerialNumber: syz
[   92.162100][ T1079] usb 2-1: config 0 descriptor??
[   92.271126][ T1410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   92.300509][ T1410] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   92.341180][ T1405] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.348622][ T1405] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.356620][ T1405] device bridge_slave_0 entered promiscuous mode
[   92.364415][ T1405] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.379837][ T1079] usb 2-1: USB disconnect, device number 6
[   92.386238][ T1405] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.397143][ T1405] device bridge_slave_1 entered promiscuous mode
[   92.490491][ T1405] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.497633][ T1405] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.504993][ T1405] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.512049][ T1405] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.546582][ T1275] device bridge_slave_1 left promiscuous mode
[   92.553958][ T1275] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.569617][ T1275] device bridge_slave_0 left promiscuous mode
[   92.580272][ T1275] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.598006][ T1275] device veth1_macvtap left promiscuous mode
[   92.611400][ T1275] device veth0_vlan left promiscuous mode
[   92.828227][  T323] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.835827][  T323] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.864205][ T1438] process 'syz.5.338' launched './file1' with NULL argv: empty string added
[   92.926833][  T467] udevd[467]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.2/sound/card1/controlC1/../uevent} for writing: No such file or directory
[   92.949223][  T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   92.959117][  T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   92.982275][  T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   93.043553][  T323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   93.051846][  T323] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.058949][  T323] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.069410][  T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   93.078144][  T323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   93.104281][  T323] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.111569][  T323] bridge0: port 2(bridge_slave_1) entered forwarding state
[   93.169531][  T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   93.180802][  T323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   93.194018][  T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   93.214710][  T323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   93.305886][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   93.316438][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   93.330592][ T1405] device veth0_vlan entered promiscuous mode
[   93.337435][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   93.352412][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   93.443076][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   93.512885][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   93.638023][ T1405] device veth1_macvtap entered promiscuous mode
[   93.697174][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   93.746402][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   93.824392][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   94.139770][ T1490] 9pnet_fd: Insufficient options for proto=fd
[   94.268034][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   94.284452][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   94.300022][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   94.316060][  T381] usb 5-1: USB disconnect, device number 6
[   94.333001][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   94.346664][ T1474] netlink: 8 bytes leftover after parsing attributes in process `syz.5.344'.
[   94.357173][   T28] kauditd_printk_skb: 44 callbacks suppressed
[   94.357189][   T28] audit: type=1400 audit(1793212868.111:895): avc:  denied  { getopt } for  pid=1505 comm="syz.4.347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   94.371391][ T1491] netlink: 25 bytes leftover after parsing attributes in process `syz.5.344'.
[   94.389972][ T1506] loop4: detected capacity change from 0 to 512
[   94.398424][ T1506] EXT4-fs: Ignoring removed nomblk_io_submit option
[   94.405195][ T1506] EXT4-fs: Ignoring removed nomblk_io_submit option
[   94.417452][ T1506] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[   94.422606][ T1503] netlink: 12 bytes leftover after parsing attributes in process `syz.3.346'.
[   94.452823][ T1506] EXT4-fs (loop4): 1 truncate cleaned up
[   94.473110][ T1506] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   94.520632][  T291] EXT4-fs (loop4): unmounting filesystem.
[   94.664103][ T1517] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=20125 sclass=netlink_route_socket pid=1517 comm=syz.7.331
[   95.224992][   T28] audit: type=1400 audit(1793212868.981:896): avc:  denied  { bind } for  pid=1543 comm="syz.3.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   95.247681][   T28] audit: type=1400 audit(1793212869.001:897): avc:  denied  { name_bind } for  pid=1543 comm="syz.3.354" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1
[   95.263908][ T1546] overlayfs: missing 'lowerdir'
[   95.290510][ T1546] FAULT_INJECTION: forcing a failure.
[   95.290510][ T1546] name failslab, interval 1, probability 5, space 0, times 85
[   95.298415][   T28] audit: type=1400 audit(1793212869.001:898): avc:  denied  { node_bind } for  pid=1543 comm="syz.3.354" saddr=172.20.20.255 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1
[   95.325921][ T1546] CPU: 1 PID: 1546 Comm: syz.1.355 Not tainted syzkaller #0
[   95.333257][ T1546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[   95.343350][ T1546] Call Trace:
[   95.346667][ T1546]  <TASK>
[   95.349636][ T1546]  __dump_stack+0x21/0x24
[   95.354008][ T1546]  dump_stack_lvl+0x110/0x170
[   95.358728][ T1546]  ? __cfi_dump_stack_lvl+0x8/0x8
[   95.363801][ T1546]  ? x64_sys_call+0x171/0x9a0
[   95.368524][ T1546]  dump_stack+0x15/0x24
[   95.372715][ T1546]  should_fail_ex+0x3bf/0x510
[   95.377442][ T1546]  ? skb_clone+0x1e8/0x380
[   95.381904][ T1546]  __should_failslab+0xac/0xf0
[   95.386716][ T1546]  should_failslab+0x9/0x20
[   95.391265][ T1546]  kmem_cache_alloc+0x3b/0x320
[   95.396071][ T1546]  skb_clone+0x1e8/0x380
[   95.400357][ T1546]  can_send+0x5cc/0xbf0
[   95.404555][ T1546]  ? __cfi_can_send+0x10/0x10
[   95.409278][ T1546]  bcm_can_tx+0x56e/0x9c0
[   95.413665][ T1546]  ? bcm_free_op_work+0x170/0x170
[   95.418754][ T1546]  ? hrtimer_try_to_cancel+0x1f6/0x500
[   95.424267][ T1546]  bcm_tx_setup+0xde9/0x1b30
[   95.428922][ T1546]  bcm_sendmsg+0x240/0x640
[   95.433396][ T1546]  ? __cfi_bcm_sendmsg+0x10/0x10
[   95.438471][ T1546]  ? check_preempt_wakeup+0x619/0xbe0
[   95.443891][ T1546]  ? security_socket_sendmsg+0x93/0xb0
[   95.449400][ T1546]  ? __cfi_bcm_sendmsg+0x10/0x10
[   95.454396][ T1546]  ____sys_sendmsg+0x5fb/0x9c0
[   95.459212][ T1546]  ? __sys_sendmsg_sock+0x40/0x40
[   95.464282][ T1546]  ? import_iovec+0x7c/0xb0
[   95.468845][ T1546]  ___sys_sendmsg+0x2a2/0x360
[   95.473605][ T1546]  ? __sys_sendmsg+0x290/0x290
[   95.478417][ T1546]  ? __cfi__raw_spin_lock_bh+0x10/0x10
[   95.483911][ T1546]  ? proc_create_net_single+0x11c/0x170
[   95.489519][ T1546]  ? __fdget+0x19c/0x220
[   95.493803][ T1546]  __x64_sys_sendmsg+0x20d/0x2e0
[   95.498779][ T1546]  ? __cfi___x64_sys_sendmsg+0x10/0x10
[   95.504274][ T1546]  ? __kasan_check_write+0x14/0x20
[   95.509423][ T1546]  ? fpregs_restore_userregs+0x128/0x260
[   95.515143][ T1546]  ? switch_fpu_return+0xe/0x10
[   95.520043][ T1546]  x64_sys_call+0x171/0x9a0
[   95.524594][ T1546]  do_syscall_64+0x4c/0xa0
[   95.529069][ T1546]  ? clear_bhb_loop+0x30/0x80
[   95.533790][ T1546]  ? clear_bhb_loop+0x30/0x80
[   95.538504][ T1546]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   95.544431][ T1546] RIP: 0033:0x7f43c4f9f559
[   95.548878][ T1546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   95.568524][ T1546] RSP: 002b:00007f43c5e99028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   95.568838][ T1549] loop7: detected capacity change from 0 to 8192
[   95.576972][ T1546] RAX: ffffffffffffffda RBX: 00007f43c5225fa0 RCX: 00007f43c4f9f559
[   95.576991][ T1546] RDX: 0000000000008001 RSI: 0000200000000880 RDI: 0000000000000004
[   95.577006][ T1546] RBP: 00007f43c5036b20 R08: 0000000000000000 R09: 0000000000000000
[   95.577019][ T1546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   95.577032][ T1546] R13: 00007f43c5226038 R14: 00007f43c5225fa0 R15: 00007ffe3fbf8a58
[   95.577053][ T1546]  </TASK>
[   95.657431][ T1549] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   95.669504][ T1552] overlayfs: missing 'lowerdir'
[   96.779057][ T1575] loop4: detected capacity change from 0 to 512
[   96.813951][ T1580] loop7: detected capacity change from 0 to 2048
[   96.828449][ T1575] EXT4-fs: Ignoring removed nomblk_io_submit option
[   96.864981][ T1575] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[   96.877802][ T1580] Alternate GPT is invalid, using primary GPT.
[   96.893378][ T1580]  loop7: p2 p3 p7
[   96.908521][ T1575] EXT4-fs (loop4): 1 truncate cleaned up
[   96.948851][ T1575] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   96.968697][ T1591] ./dev/sda1: Can't open blockdev
[   96.985690][  T467] udevd[467]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory
[   96.985760][  T314] udevd[314]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory
[   97.000503][  T313] udevd[313]: inotify_add_watch(7, /dev/loop7p7, 10) failed: No such file or directory
[   97.189920][ T1600] overlayfs: missing 'lowerdir'
[   97.195905][  T291] EXT4-fs (loop4): unmounting filesystem.
[   97.213724][ T1600] FAULT_INJECTION: forcing a failure.
[   97.213724][ T1600] name failslab, interval 1, probability 5, space 0, times 84
[   97.253340][ T1600] CPU: 0 PID: 1600 Comm: syz.1.367 Not tainted syzkaller #0
[   97.260699][ T1600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[   97.270807][ T1600] Call Trace:
[   97.274103][ T1600]  <TASK>
[   97.277050][ T1600]  __dump_stack+0x21/0x24
[   97.281404][ T1600]  dump_stack_lvl+0x110/0x170
[   97.286103][ T1600]  ? __cfi_dump_stack_lvl+0x8/0x8
[   97.291143][ T1600]  dump_stack+0x15/0x24
[   97.295321][ T1600]  should_fail_ex+0x3bf/0x510
[   97.300024][ T1600]  __should_failslab+0xac/0xf0
[   97.304807][ T1600]  should_failslab+0x9/0x20
[   97.309348][ T1600]  __kmem_cache_alloc_node+0x3d/0x2d0
[   97.314752][ T1600]  ? copy_net_ns+0x185/0x5c0
[   97.319362][ T1600]  ? copy_net_ns+0x185/0x5c0
[   97.323973][ T1600]  kmalloc_trace+0x29/0xb0
[   97.328427][ T1600]  copy_net_ns+0x185/0x5c0
[   97.332878][ T1600]  ? __kasan_check_write+0x14/0x20
[   97.338015][ T1600]  ? copy_cgroup_ns+0x91/0x4c0
[   97.342827][ T1600]  create_new_namespaces+0x3a8/0x660
[   97.348175][ T1600]  unshare_nsproxy_namespaces+0x120/0x170
[   97.353928][ T1600]  ksys_unshare+0x4d5/0x850
[   97.358486][ T1600]  ? __cfi_ksys_unshare+0x10/0x10
[   97.363542][ T1600]  ? fpregs_restore_userregs+0x128/0x260
[   97.369208][ T1600]  __x64_sys_unshare+0x38/0x40
[   97.374014][ T1600]  x64_sys_call+0x767/0x9a0
[   97.378560][ T1600]  do_syscall_64+0x4c/0xa0
[   97.383002][ T1600]  ? clear_bhb_loop+0x30/0x80
[   97.387705][ T1600]  ? clear_bhb_loop+0x30/0x80
[   97.392411][ T1600]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   97.398332][ T1600] RIP: 0033:0x7f43c4f9f559
[   97.402861][ T1600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   97.422491][ T1600] RSP: 002b:00007f43c5e99028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[   97.430950][ T1600] RAX: ffffffffffffffda RBX: 00007f43c5225fa0 RCX: 00007f43c4f9f559
[   97.438941][ T1600] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
[   97.446929][ T1600] RBP: 00007f43c5036b20 R08: 0000000000000000 R09: 0000000000000000
[   97.454918][ T1600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   97.462902][ T1600] R13: 00007f43c5226038 R14: 00007f43c5225fa0 R15: 00007ffe3fbf8a58
[   97.470908][ T1600]  </TASK>
[   97.606839][   T28] audit: type=1400 audit(1793212871.361:899): avc:  denied  { accept } for  pid=1606 comm="syz.1.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   97.626685][ T1079] usb 5-1: new full-speed USB device number 7 using dummy_hcd
[   97.660861][ T1611] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   97.673611][ T1612] netlink: 12 bytes leftover after parsing attributes in process `syz.3.372'.
[   97.683455][ T1611] capability: warning: `syz.1.371' uses 32-bit capabilities (legacy support in use)
[   97.790438][   T28] audit: type=1400 audit(1793212871.541:900): avc:  denied  { write } for  pid=1615 comm="syz.1.374" name="unix" dev="proc" ino=4026532329 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[   97.844515][ T1079] usb 5-1: config 1 has an invalid interface number: 105 but max is 0
[   97.852762][ T1079] usb 5-1: config 1 has no interface number 0
[   97.869392][ T1079] usb 5-1: config 1 interface 105 has no altsetting 0
[   97.891079][ T1079] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[   97.914195][ T1079] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[   97.922469][ T1079] usb 5-1: Product: syz
[   97.930207][ T1622] overlayfs: failed to resolve './file0': -2
[   97.948179][   T28] audit: type=1400 audit(1793212871.701:901): avc:  denied  { connect } for  pid=1625 comm="syz.5.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   97.949926][ T1620] loop1: detected capacity change from 0 to 1024
[   97.967819][ T1079] usb 5-1: Manufacturer: syz
[   97.980187][ T1079] usb 5-1: SerialNumber: syz
[   97.998291][ T1620] EXT4-fs: Ignoring removed mblk_io_submit option
[   98.004922][ T1620] EXT4-fs: Ignoring removed orlov option
[   98.046277][ T1628] loop7: detected capacity change from 0 to 8192
[   98.077166][ T1628] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   98.115476][ T1620] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   99.699535][  T287] EXT4-fs (loop1): unmounting filesystem.
[   99.746340][ T1647] overlayfs: missing 'lowerdir'
[   99.811443][ T1651] netlink: 16 bytes leftover after parsing attributes in process `syz.1.382'.
[   99.820482][ T1651] netlink: 16 bytes leftover after parsing attributes in process `syz.1.382'.
[   99.932493][ T1661] device wg1 entered promiscuous mode
[  100.371773][ T1666] netlink: 12 bytes leftover after parsing attributes in process `syz.5.387'.
[  100.661317][ T1671] loop1: detected capacity change from 0 to 256
[  100.689818][   T28] audit: type=1400 audit(1793212874.441:902): avc:  denied  { watch } for  pid=1670 comm="syz.1.389" path="/82/file1/file1" dev="loop1" ino=1048737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1
[  100.774599][ T1079] aqc111: probe of 5-1:1.105 failed with error -71
[  100.797311][ T1079] usb 5-1: USB disconnect, device number 7
[  100.811632][   T28] audit: type=1400 audit(1793212874.561:903): avc:  denied  { ioctl } for  pid=1675 comm="syz.3.391" path="socket:[21240]" dev="sockfs" ino=21240 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  100.855143][   T28] audit: type=1400 audit(1793212874.601:904): avc:  denied  { append } for  pid=1681 comm="syz.4.393" name="event2" dev="devtmpfs" ino=275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  100.919539][ T1687] ip_tables: iptables: counters copy to user failed while replacing table
[  100.992819][ T1696] netlink: 12 bytes leftover after parsing attributes in process `syz.3.398'.
[  101.080730][ T1698] netlink: 16 bytes leftover after parsing attributes in process `syz.1.399'.
[  101.089871][ T1698] netlink: 16 bytes leftover after parsing attributes in process `syz.1.399'.
[  101.666422][ T1707] overlayfs: missing 'lowerdir'
[  101.693823][ T1707] FAULT_INJECTION: forcing a failure.
[  101.693823][ T1707] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  101.764550][ T1707] CPU: 0 PID: 1707 Comm: syz.4.401 Not tainted syzkaller #0
[  101.771919][ T1707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  101.782057][ T1707] Call Trace:
[  101.785376][ T1707]  <TASK>
[  101.788347][ T1707]  __dump_stack+0x21/0x24
[  101.792806][ T1707]  dump_stack_lvl+0x110/0x170
[  101.797523][ T1707]  ? __cfi_dump_stack_lvl+0x8/0x8
[  101.802590][ T1707]  ? __cfi_avc_has_perm_noaudit+0x10/0x10
[  101.808352][ T1707]  dump_stack+0x15/0x24
[  101.812544][ T1707]  should_fail_ex+0x3bf/0x510
[  101.817275][ T1707]  should_fail+0xb/0x10
[  101.821514][ T1707]  should_fail_usercopy+0x1a/0x20
[  101.826584][ T1707]  copyin+0x20/0xa0
[  101.830498][ T1707]  _copy_from_iter+0x3cd/0xfe0
[  101.835306][ T1707]  ? __cfi__copy_from_iter+0x10/0x10
[  101.840643][ T1707]  ? selinux_socket_sendmsg+0x22f/0x340
[  101.846258][ T1707]  bcm_sendmsg+0x174/0x640
[  101.850714][ T1707]  ? __cfi_bcm_sendmsg+0x10/0x10
[  101.855704][ T1707]  ? security_socket_sendmsg+0x93/0xb0
[  101.861203][ T1707]  ? __cfi_bcm_sendmsg+0x10/0x10
[  101.866177][ T1707]  ____sys_sendmsg+0x5fb/0x9c0
[  101.870971][ T1707]  ? __sys_sendmsg_sock+0x40/0x40
[  101.876023][ T1707]  ? import_iovec+0x7c/0xb0
[  101.880556][ T1707]  ___sys_sendmsg+0x2a2/0x360
[  101.885258][ T1707]  ? __sys_sendmsg+0x290/0x290
[  101.890051][ T1707]  ? __fdget+0x19c/0x220
[  101.894316][ T1707]  __x64_sys_sendmsg+0x20d/0x2e0
[  101.899271][ T1707]  ? __cfi___x64_sys_sendmsg+0x10/0x10
[  101.904763][ T1707]  ? __kasan_check_write+0x14/0x20
[  101.909897][ T1707]  ? fpregs_restore_userregs+0x128/0x260
[  101.915553][ T1707]  ? switch_fpu_return+0xe/0x10
[  101.920432][ T1707]  x64_sys_call+0x171/0x9a0
[  101.924963][ T1707]  do_syscall_64+0x4c/0xa0
[  101.929420][ T1707]  ? clear_bhb_loop+0x30/0x80
[  101.934119][ T1707]  ? clear_bhb_loop+0x30/0x80
[  101.938820][ T1707]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  101.944743][ T1707] RIP: 0033:0x7f83de79f559
[  101.949177][ T1707] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  101.968802][ T1707] RSP: 002b:00007f83df67b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  101.977239][ T1707] RAX: ffffffffffffffda RBX: 00007f83dea25fa0 RCX: 00007f83de79f559
[  101.985224][ T1707] RDX: 0000000000008001 RSI: 0000200000000880 RDI: 0000000000000004
[  101.993231][ T1707] RBP: 00007f83de836b20 R08: 0000000000000000 R09: 0000000000000000
[  102.001239][ T1707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  102.009244][ T1707] R13: 00007f83dea26038 R14: 00007f83dea25fa0 R15: 00007ffc1f253668
[  102.017238][ T1707]  </TASK>
[  102.218949][ T1705] netlink: 4 bytes leftover after parsing attributes in process `syz.5.411'.
[  102.342539][   T28] audit: type=1326 audit(1793212876.091:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1721 comm="syz.3.405" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c52f9f559 code=0x7ffc0000
[  102.378747][   T28] audit: type=1326 audit(1793212876.121:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1721 comm="syz.3.405" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c52f9f559 code=0x7ffc0000
[  102.388063][ T1724] netlink: 24 bytes leftover after parsing attributes in process `syz.5.406'.
[  102.404613][   T28] audit: type=1326 audit(1793212876.121:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1721 comm="syz.3.405" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c52f9f559 code=0x7ffc0000
[  102.426935][ T1724] netlink: 24 bytes leftover after parsing attributes in process `syz.5.406'.
[  102.439262][   T28] audit: type=1326 audit(1793212876.121:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1721 comm="syz.3.405" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c52f9f559 code=0x7ffc0000
[  102.451345][  T357] usb 2-1: new full-speed USB device number 7 using dummy_hcd
[  102.473353][   T28] audit: type=1326 audit(1793212876.121:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1721 comm="syz.3.405" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f6c52f9f559 code=0x7ffc0000
[  102.503600][   T28] audit: type=1326 audit(1793212876.121:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1721 comm="syz.3.405" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c52f9f559 code=0x7ffc0000
[  102.528899][   T28] audit: type=1326 audit(1793212876.121:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1721 comm="syz.3.405" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c52f9f559 code=0x7ffc0000
[  102.605973][ T1728] loop7: detected capacity change from 0 to 2048
[  102.652991][ T1734] loop4: detected capacity change from 0 to 512
[  102.664419][ T1728] Alternate GPT is invalid, using primary GPT.
[  102.670904][ T1728]  loop7: p2 p3 p7
[  102.704388][  T357] usb 2-1: config 1 has an invalid interface number: 105 but max is 0
[  102.712988][  T357] usb 2-1: config 1 has no interface number 0
[  102.722241][  T357] usb 2-1: config 1 interface 105 has no altsetting 0
[  102.737407][  T357] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  102.752394][  T357] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  102.760925][  T357] usb 2-1: Product: syz
[  102.765160][  T357] usb 2-1: Manufacturer: syz
[  102.769778][  T357] usb 2-1: SerialNumber: syz
[  102.780165][ T1739] loop7: detected capacity change from 0 to 4096
[  102.798525][ T1739] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  102.856055][ T1405] EXT4-fs (loop7): unmounting filesystem.
[  103.872729][ T1754] loop7: detected capacity change from 0 to 512
[  103.881374][ T1754] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[  105.418975][  T357] aqc111: probe of 2-1:1.105 failed with error -71
[  105.444439][  T357] usb 2-1: USB disconnect, device number 7
[  105.549115][ T1775] loop7: detected capacity change from 0 to 2048
[  105.599391][ T1785] loop1: detected capacity change from 0 to 256
[  105.608925][ T1775] Alternate GPT is invalid, using primary GPT.
[  105.616665][ T1775]  loop7: p2 p3 p7
[  105.720254][   T28] kauditd_printk_skb: 401 callbacks suppressed
[  105.720271][   T28] audit: type=1400 audit(1793212879.471:1313): avc:  denied  { setcheckreqprot } for  pid=1790 comm="syz.1.427" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  105.766883][  T314] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  105.783625][ T1794] netlink: 4 bytes leftover after parsing attributes in process `syz.5.424'.
[  105.801624][  T313] udevd[313]: inotify_add_watch(7, /dev/loop7p7, 10) failed: No such file or directory
[  105.813472][  T314] udevd[314]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory
[  105.814029][  T467] udevd[467]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory
[  105.903587][ T1799] loop7: detected capacity change from 0 to 128
[  106.140692][ T1799] EXT4-fs (loop7): Test dummy encryption mode enabled
[  106.215481][ T1799] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  106.227270][ T1799] ext4 filesystem being mounted at /15/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  106.280023][   T28] audit: type=1400 audit(1793212880.031:1314): avc:  denied  { read write open } for  pid=1798 comm="syz.7.430" path="/15/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  106.351925][ T1405] EXT4-fs (loop7): unmounting filesystem.
[  106.365411][   T28] audit: type=1400 audit(1793212880.091:1315): avc:  denied  { ioctl } for  pid=1798 comm="syz.7.430" path="/15/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop7" ino=12 ioctlcmd=0xaa07 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  106.511985][   T28] audit: type=1400 audit(1793212880.261:1316): avc:  denied  { read } for  pid=1815 comm="syz.5.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  106.642556][ T1809] loop7: detected capacity change from 0 to 40427
[  106.663669][ T1809] F2FS-fs (loop7): Invalid SB checksum offset: 0
[  106.672780][ T1818] loop4: detected capacity change from 0 to 2048
[  106.682148][ T1809] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock
[  106.710031][ T1809] F2FS-fs (loop7): invalid crc value
[  106.739517][ T1809] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  106.759042][ T1818] Alternate GPT is invalid, using primary GPT.
[  106.768700][ T1818]  loop4: p2 p3 p7
[  106.891115][ T1809] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0
[  106.902419][ T1809] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  107.434405][ T1405] syz-executor: attempt to access beyond end of device
[  107.434405][ T1405] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  107.593101][   T28] audit: type=1400 audit(1793212881.341:1317): avc:  denied  { read write } for  pid=1851 comm="syz.1.447" name="control" dev="devtmpfs" ino=266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  107.633855][ T1854] netlink: 20 bytes leftover after parsing attributes in process `syz.5.448'.
[  107.687131][   T28] audit: type=1400 audit(1793212881.401:1318): avc:  denied  { open } for  pid=1851 comm="syz.1.447" path="/dev/mapper/control" dev="devtmpfs" ino=266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  107.712794][ T1860] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1045 sclass=netlink_route_socket pid=1860 comm=syz.3.449
[  107.738449][ T1858] loop7: detected capacity change from 0 to 8192
[  107.766800][ T1858] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  107.785192][ T1863] fuse: Bad value for 'fd'
[  109.180068][   T28] audit: type=1400 audit(1793212882.931:1319): avc:  denied  { bind } for  pid=1892 comm="syz.4.460" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  109.250280][   T28] audit: type=1400 audit(1793212882.931:1320): avc:  denied  { name_bind } for  pid=1892 comm="syz.4.460" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[  109.306170][   T28] audit: type=1400 audit(1793212882.931:1321): avc:  denied  { node_bind } for  pid=1892 comm="syz.4.460" saddr=172.30.0.5 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[  109.386749][   T28] audit: type=1400 audit(1793212883.141:1322): avc:  denied  { read write } for  pid=1900 comm="syz.7.463" name="uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  109.765610][ T1911] loop1: detected capacity change from 0 to 8192
[  109.773440][ T1911] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  109.944652][ T1917] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  109.951788][ T1917] overlayfs: failed to set xattr on upper
[  110.084620][ T1919] loop4: detected capacity change from 0 to 8192
[  110.134257][ T1919]  loop4: p1 < > p2 < > p3 p4 < >
[  110.139463][ T1919] loop4: partition table partially beyond EOD, truncated
[  110.147056][ T1919] loop4: p1 start 67108864 is beyond EOD, truncated
[  110.154515][ T1919] loop4: p3 start 100859904 is beyond EOD, truncated
[  110.274475][  T314] udevd[314]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  111.286048][ T1932] overlayfs: failed to resolve './bus': -2
[  111.486008][   T28] kauditd_printk_skb: 5 callbacks suppressed
[  111.486024][   T28] audit: type=1400 audit(1793212885.241:1328): avc:  denied  { getopt } for  pid=1937 comm="syz.1.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  111.656031][ T1942] xt_TCPMSS: Only works on TCP SYN packets
[  111.665834][ T1943] loop1: detected capacity change from 0 to 256
[  111.682569][ T1943] exfat: Bad value for 'uid'
[  111.749427][   T28] audit: type=1400 audit(1793212885.501:1329): avc:  denied  { map } for  pid=1934 comm="syz.5.475" path="socket:[23684]" dev="sockfs" ino=23684 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1
[  112.161833][ T1955] loop7: detected capacity change from 0 to 40427
[  112.171718][ T1955] F2FS-fs (loop7): Invalid SB checksum offset: 0
[  112.178218][ T1955] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock
[  112.187266][ T1955] F2FS-fs (loop7): invalid crc value
[  112.192662][   T28] audit: type=1400 audit(1793212885.941:1330): avc:  denied  { read } for  pid=1958 comm="syz.1.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  112.214643][ T1955] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  112.246463][ T1955] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0
[  112.253651][ T1955] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  112.323354][   T28] audit: type=1326 audit(1793212886.071:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1969 comm="syz.5.482" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f437cd9f559 code=0x7ffc0000
[  112.350301][   T28] audit: type=1326 audit(1793212886.081:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1969 comm="syz.5.482" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f437cd9f559 code=0x7ffc0000
[  112.375478][   T28] audit: type=1326 audit(1793212886.081:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1969 comm="syz.5.482" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f437cd9f559 code=0x7ffc0000
[  112.400686][   T28] audit: type=1326 audit(1793212886.081:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1969 comm="syz.5.482" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f437cd9f559 code=0x7ffc0000
[  112.425395][   T28] audit: type=1326 audit(1793212886.081:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1969 comm="syz.5.482" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f437cd9f559 code=0x7ffc0000
[  112.450584][   T28] audit: type=1326 audit(1793212886.081:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1969 comm="syz.5.482" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f437cd9f559 code=0x7ffc0000
[  112.475781][   T28] audit: type=1326 audit(1793212886.081:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1969 comm="syz.5.482" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f437cd9f559 code=0x7ffc0000
[  112.504706][ T1405] syz-executor: attempt to access beyond end of device
[  112.504706][ T1405] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  112.576701][ T1972] overlayfs: missing 'lowerdir'
[  112.583036][ T1972] FAULT_INJECTION: forcing a failure.
[  112.583036][ T1972] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  112.596309][ T1972] CPU: 1 PID: 1972 Comm: syz.7.483 Not tainted syzkaller #0
[  112.603649][ T1972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  112.613723][ T1972] Call Trace:
[  112.617001][ T1972]  <TASK>
[  112.619928][ T1972]  __dump_stack+0x21/0x24
[  112.624260][ T1972]  dump_stack_lvl+0x110/0x170
[  112.628961][ T1972]  ? __cfi_dump_stack_lvl+0x8/0x8
[  112.633984][ T1972]  ? __cfi_avc_has_perm_noaudit+0x10/0x10
[  112.639706][ T1972]  dump_stack+0x15/0x24
[  112.643863][ T1972]  should_fail_ex+0x3bf/0x510
[  112.648547][ T1972]  should_fail+0xb/0x10
[  112.652699][ T1972]  should_fail_usercopy+0x1a/0x20
[  112.657721][ T1972]  copyin+0x20/0xa0
[  112.661539][ T1972]  _copy_from_iter+0x3cd/0xfe0
[  112.666310][ T1972]  ? __cfi__copy_from_iter+0x10/0x10
[  112.671606][ T1972]  ? selinux_socket_sendmsg+0x22f/0x340
[  112.677176][ T1972]  bcm_sendmsg+0x174/0x640
[  112.681599][ T1972]  ? __cfi_bcm_sendmsg+0x10/0x10
[  112.686560][ T1972]  ? security_socket_sendmsg+0x93/0xb0
[  112.692047][ T1972]  ? __cfi_bcm_sendmsg+0x10/0x10
[  112.697010][ T1972]  ____sys_sendmsg+0x5fb/0x9c0
[  112.701804][ T1972]  ? __sys_sendmsg_sock+0x40/0x40
[  112.706856][ T1972]  ? import_iovec+0x7c/0xb0
[  112.711364][ T1972]  ___sys_sendmsg+0x2a2/0x360
[  112.716060][ T1972]  ? __sys_sendmsg+0x290/0x290
[  112.720826][ T1972]  ? __cfi__raw_spin_lock_bh+0x10/0x10
[  112.726288][ T1972]  ? proc_create_net_single+0x11c/0x170
[  112.731846][ T1972]  ? __fdget+0x19c/0x220
[  112.736090][ T1972]  __x64_sys_sendmsg+0x20d/0x2e0
[  112.741027][ T1972]  ? __cfi___x64_sys_sendmsg+0x10/0x10
[  112.746488][ T1972]  ? __kasan_check_write+0x14/0x20
[  112.751602][ T1972]  ? fpregs_restore_userregs+0x128/0x260
[  112.757239][ T1972]  ? switch_fpu_return+0xe/0x10
[  112.762098][ T1972]  x64_sys_call+0x171/0x9a0
[  112.766607][ T1972]  do_syscall_64+0x4c/0xa0
[  112.771021][ T1972]  ? clear_bhb_loop+0x30/0x80
[  112.775699][ T1972]  ? clear_bhb_loop+0x30/0x80
[  112.780399][ T1972]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  112.786293][ T1972] RIP: 0033:0x7fb7bc39f559
[  112.790725][ T1972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  112.810337][ T1972] RSP: 002b:00007fb7bd354028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  112.818842][ T1972] RAX: ffffffffffffffda RBX: 00007fb7bc625fa0 RCX: 00007fb7bc39f559
[  112.826832][ T1972] RDX: 0000000000008001 RSI: 0000200000000880 RDI: 0000000000000004
[  112.834808][ T1972] RBP: 00007fb7bc436b20 R08: 0000000000000000 R09: 0000000000000000
[  112.842780][ T1972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  112.850749][ T1972] R13: 00007fb7bc626038 R14: 00007fb7bc625fa0 R15: 00007ffce31ab238
[  112.858734][ T1972]  </TASK>
[  112.986348][ T1980] loop1: detected capacity change from 0 to 512
[  113.069929][ T1987] overlayfs: missing 'lowerdir'
[  113.393576][   T40] usb 2-1: new full-speed USB device number 8 using dummy_hcd
[  113.595856][ T1996] overlayfs: missing 'lowerdir'
[  113.605428][   T40] usb 2-1: unable to get BOS descriptor or descriptor too short
[  113.620622][   T40] usb 2-1: not running at top speed; connect to a high speed hub
[  113.690806][   T40] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4
[  113.936272][ T2001] netlink: 12 bytes leftover after parsing attributes in process `syz.3.493'.
[  113.946837][   T40] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[  113.975606][   T40] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.061177][   T40] usb 2-1: Product: syz
[  114.075655][   T40] usb 2-1: Manufacturer: syz
[  114.080338][   T40] usb 2-1: SerialNumber: syz
[  114.200557][ T2011] netlink: 4 bytes leftover after parsing attributes in process `syz.3.498'.
[  114.305358][ T2018] overlayfs: missing 'lowerdir'
[  114.314814][ T2018] FAULT_INJECTION: forcing a failure.
[  114.314814][ T2018] name failslab, interval 1, probability 5, space 0, times 83
[  114.329882][   T40] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  114.341028][ T2018] CPU: 1 PID: 2018 Comm: syz.4.501 Not tainted syzkaller #0
[  114.348382][ T2018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  114.358480][ T2018] Call Trace:
[  114.361795][ T2018]  <TASK>
[  114.364763][ T2018]  __dump_stack+0x21/0x24
[  114.369137][ T2018]  dump_stack_lvl+0x110/0x170
[  114.373943][ T2018]  ? __cfi_dump_stack_lvl+0x8/0x8
[  114.379005][ T2018]  ? x64_sys_call+0x171/0x9a0
[  114.383730][ T2018]  dump_stack+0x15/0x24
[  114.387914][ T2018]  should_fail_ex+0x3bf/0x510
[  114.392627][ T2018]  ? skb_clone+0x1e8/0x380
[  114.397092][ T2018]  __should_failslab+0xac/0xf0
[  114.401905][ T2018]  should_failslab+0x9/0x20
[  114.406442][ T2018]  kmem_cache_alloc+0x3b/0x320
[  114.411253][ T2018]  skb_clone+0x1e8/0x380
[  114.415542][ T2018]  can_send+0x5cc/0xbf0
[  114.419779][ T2018]  ? __cfi_can_send+0x10/0x10
[  114.424503][ T2018]  bcm_can_tx+0x56e/0x9c0
[  114.428889][ T2018]  ? bcm_free_op_work+0x170/0x170
[  114.433955][ T2018]  ? hrtimer_try_to_cancel+0x1f6/0x500
[  114.439468][ T2018]  bcm_tx_setup+0xde9/0x1b30
[  114.444111][ T2018]  bcm_sendmsg+0x240/0x640
[  114.448589][ T2018]  ? __cfi_bcm_sendmsg+0x10/0x10
[  114.453579][ T2018]  ? check_preempt_wakeup+0x619/0xbe0
[  114.458987][ T2018]  ? security_socket_sendmsg+0x93/0xb0
[  114.464491][ T2018]  ? __cfi_bcm_sendmsg+0x10/0x10
[  114.469525][ T2018]  ____sys_sendmsg+0x5fb/0x9c0
[  114.474333][ T2018]  ? __sys_sendmsg_sock+0x40/0x40
[  114.479392][ T2018]  ? import_iovec+0x7c/0xb0
[  114.483940][ T2018]  ___sys_sendmsg+0x2a2/0x360
[  114.488653][ T2018]  ? __sys_sendmsg+0x290/0x290
[  114.493463][ T2018]  ? __cfi__raw_spin_lock_bh+0x10/0x10
[  114.498960][ T2018]  ? proc_create_net_single+0x11c/0x170
[  114.504564][ T2018]  ? __fdget+0x19c/0x220
[  114.508856][ T2018]  __x64_sys_sendmsg+0x20d/0x2e0
[  114.513831][ T2018]  ? __cfi___x64_sys_sendmsg+0x10/0x10
[  114.519330][ T2018]  ? __kasan_check_write+0x14/0x20
[  114.524522][ T2018]  ? fpregs_restore_userregs+0x128/0x260
[  114.530207][ T2018]  ? switch_fpu_return+0xe/0x10
[  114.535099][ T2018]  x64_sys_call+0x171/0x9a0
[  114.539644][ T2018]  do_syscall_64+0x4c/0xa0
[  114.544094][ T2018]  ? clear_bhb_loop+0x30/0x80
[  114.548812][ T2018]  ? clear_bhb_loop+0x30/0x80
[  114.553532][ T2018]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  114.559473][ T2018] RIP: 0033:0x7f83de79f559
[  114.563920][ T2018] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  114.583574][ T2018] RSP: 002b:00007f83df67b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  114.592035][ T2018] RAX: ffffffffffffffda RBX: 00007f83dea25fa0 RCX: 00007f83de79f559
[  114.600042][ T2018] RDX: 0000000000008001 RSI: 0000200000000880 RDI: 0000000000000004
[  114.608048][ T2018] RBP: 00007f83de836b20 R08: 0000000000000000 R09: 0000000000000000
[  114.616058][ T2018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  114.624069][ T2018] R13: 00007f83dea26038 R14: 00007f83dea25fa0 R15: 00007ffc1f253668
[  114.632084][ T2018]  </TASK>
[  114.638155][   T40] usb 2-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[  114.652273][   T40] usb 2-1: found format II with max.bitrate = 4, frame size=7372
[  114.762192][ T2025] loop7: detected capacity change from 0 to 8192
[  114.779006][ T2025] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  115.102126][   T40] usb 2-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0)
[  115.125910][   T40] usb 2-1: USB disconnect, device number 8
[  115.144533][ T2038] loop7: detected capacity change from 0 to 256
[  115.774853][ T2038] FAT-fs (loop7): Directory bread(block 64) failed
[  115.783407][ T2038] FAT-fs (loop7): Directory bread(block 65) failed
[  115.802187][ T2038] FAT-fs (loop7): Directory bread(block 66) failed
[  115.827471][ T2038] FAT-fs (loop7): Directory bread(block 67) failed
[  115.835194][ T2038] FAT-fs (loop7): Directory bread(block 68) failed
[  115.846176][ T2038] FAT-fs (loop7): Directory bread(block 69) failed
[  115.866776][ T2038] FAT-fs (loop7): Directory bread(block 70) failed
[  115.889472][ T2038] FAT-fs (loop7): Directory bread(block 71) failed
[  115.949176][  T314] udevd[314]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  115.966349][ T2038] FAT-fs (loop7): Directory bread(block 72) failed
[  116.201221][ T2038] FAT-fs (loop7): Directory bread(block 73) failed
[  117.819604][ T2063] overlayfs: failed to clone upperpath
[  119.033384][   T28] kauditd_printk_skb: 19 callbacks suppressed
[  119.033413][   T28] audit: type=1326 audit(1793212892.781:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2068 comm="syz.4.516" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83de79f559 code=0x7ffc0000
[  119.148883][   T28] audit: type=1326 audit(1793212892.781:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2068 comm="syz.4.516" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83de79f559 code=0x7ffc0000
[  119.152436][ T2076] overlayfs: missing 'lowerdir'
[  119.182282][   T28] audit: type=1326 audit(1793212892.781:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2068 comm="syz.4.516" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83de79f559 code=0x7ffc0000
[  119.256840][ T2076] FAULT_INJECTION: forcing a failure.
[  119.256840][ T2076] name failslab, interval 1, probability 5, space 0, times 82
[  119.345263][ T2076] CPU: 1 PID: 2076 Comm: syz.4.519 Not tainted syzkaller #0
[  119.352622][ T2076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  119.362753][ T2076] Call Trace:
[  119.366066][ T2076]  <TASK>
[  119.369030][ T2076]  __dump_stack+0x21/0x24
[  119.373403][ T2076]  dump_stack_lvl+0x110/0x170
[  119.378116][ T2076]  ? __cfi_dump_stack_lvl+0x8/0x8
[  119.383197][ T2076]  ? x64_sys_call+0x171/0x9a0
[  119.387925][ T2076]  dump_stack+0x15/0x24
[  119.391801][   T28] audit: type=1326 audit(1793212892.781:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2068 comm="syz.4.516" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f83de79f559 code=0x7ffc0000
[  119.392110][ T2076]  should_fail_ex+0x3bf/0x510
[  119.421668][ T2076]  ? skb_clone+0x1e8/0x380
[  119.426187][ T2076]  __should_failslab+0xac/0xf0
[  119.430996][ T2076]  should_failslab+0x9/0x20
[  119.435574][ T2076]  kmem_cache_alloc+0x3b/0x320
[  119.440391][ T2076]  skb_clone+0x1e8/0x380
[  119.444685][ T2076]  can_send+0x5cc/0xbf0
[  119.448882][ T2076]  ? __cfi_can_send+0x10/0x10
[  119.453606][ T2076]  bcm_can_tx+0x56e/0x9c0
[  119.457982][ T2076]  ? bcm_free_op_work+0x170/0x170
[  119.463051][ T2076]  ? hrtimer_try_to_cancel+0x1f6/0x500
[  119.468564][ T2076]  bcm_tx_setup+0xde9/0x1b30
[  119.473216][ T2076]  bcm_sendmsg+0x240/0x640
[  119.477717][ T2076]  ? __cfi_bcm_sendmsg+0x10/0x10
[  119.482703][ T2076]  ? check_preempt_wakeup+0x619/0xbe0
[  119.488115][ T2076]  ? security_socket_sendmsg+0x93/0xb0
[  119.493619][ T2076]  ? __cfi_bcm_sendmsg+0x10/0x10
[  119.498618][ T2076]  ____sys_sendmsg+0x5fb/0x9c0
[  119.503419][ T2076]  ? __sys_sendmsg_sock+0x40/0x40
[  119.508485][ T2076]  ? import_iovec+0x7c/0xb0
[  119.509452][   T28] audit: type=1326 audit(1793212892.781:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2068 comm="syz.4.516" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83de79f559 code=0x7ffc0000
[  119.513031][ T2076]  ___sys_sendmsg+0x2a2/0x360
[  119.542403][ T2076]  ? __sys_sendmsg+0x290/0x290
[  119.547214][ T2076]  ? __cfi__raw_spin_lock_bh+0x10/0x10
[  119.552701][ T2076]  ? proc_create_net_single+0x11c/0x170
[  119.558285][ T2076]  ? __fdget+0x19c/0x220
[  119.562551][ T2076]  __x64_sys_sendmsg+0x20d/0x2e0
[  119.567514][ T2076]  ? __cfi___x64_sys_sendmsg+0x10/0x10
[  119.573081][ T2076]  ? __kasan_check_write+0x14/0x20
[  119.578211][ T2076]  ? fpregs_restore_userregs+0x128/0x260
[  119.583882][ T2076]  ? switch_fpu_return+0xe/0x10
[  119.588758][ T2076]  x64_sys_call+0x171/0x9a0
[  119.593284][ T2076]  do_syscall_64+0x4c/0xa0
[  119.597720][ T2076]  ? clear_bhb_loop+0x30/0x80
[  119.602417][ T2076]  ? clear_bhb_loop+0x30/0x80
[  119.607568][ T2076]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  119.613489][ T2076] RIP: 0033:0x7f83de79f559
[  119.617956][ T2076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  119.637687][ T2076] RSP: 002b:00007f83df67b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  119.646136][ T2076] RAX: ffffffffffffffda RBX: 00007f83dea25fa0 RCX: 00007f83de79f559
[  119.654124][ T2076] RDX: 0000000000008001 RSI: 0000200000000880 RDI: 0000000000000004
[  119.662112][ T2076] RBP: 00007f83de836b20 R08: 0000000000000000 R09: 0000000000000000
[  119.670101][ T2076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  119.678083][ T2076] R13: 00007f83dea26038 R14: 00007f83dea25fa0 R15: 00007ffc1f253668
[  119.686077][ T2076]  </TASK>
[  119.743281][   T28] audit: type=1326 audit(1793212892.781:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2068 comm="syz.4.516" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83de79f559 code=0x7ffc0000
[  119.802350][   T28] audit: type=1326 audit(1793212892.781:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2068 comm="syz.4.516" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f83de79f559 code=0x7ffc0000
[  119.844780][ T2061] loop1: detected capacity change from 0 to 40427
[  119.862095][   T28] audit: type=1326 audit(1793212892.781:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2068 comm="syz.4.516" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f83de79f559 code=0x7ffc0000
[  119.886916][ T2061] F2FS-fs (loop1): Invalid SB checksum offset: 0
[  119.893600][ T2061] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[  119.912203][   T28] audit: type=1400 audit(1793212893.031:1365): avc:  denied  { getopt } for  pid=2070 comm="syz.7.517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  119.933359][ T2061] F2FS-fs (loop1): invalid crc value
[  119.959109][   T28] audit: type=1400 audit(1793212893.091:1366): avc:  denied  { mount } for  pid=2078 comm="syz.5.520" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  120.011219][ T2092] netlink: 4 bytes leftover after parsing attributes in process `syz.7.521'.
[  120.031252][ T2061] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  120.066144][ T2096] netlink: 8 bytes leftover after parsing attributes in process `syz.7.522'.
[  120.116151][ T2098] netlink: 52 bytes leftover after parsing attributes in process `syz.7.523'.
[  120.137344][ T2098] capability: warning: `syz.7.523' uses deprecated v2 capabilities in a way that may be insecure
[  120.166710][ T1997] logitech-hidpp-device 0005:046D:B012.0001: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1
[  120.173585][ T2061] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[  120.193495][ T2061] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  120.256036][ T2101] fido_id[2101]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  120.315555][ T2105] overlayfs: missing 'lowerdir'
[  120.449189][  T287] syz-executor: attempt to access beyond end of device
[  120.449189][  T287] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  121.991539][ T2130] overlayfs: failed to clone upperpath
[  122.778180][ T2132] netlink: 8 bytes leftover after parsing attributes in process `syz.7.533'.
[  122.808622][ T2127] loop4: detected capacity change from 0 to 512
[  122.878676][ T2127] EXT4-fs: Ignoring removed i_version option
[  123.103654][ T2127] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.532: bg 0: block 127: padding at end of block bitmap is not set
[  123.136248][ T2127] EXT4-fs (loop4): Remounting filesystem read-only
[  123.179403][ T2127] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  123.226294][ T2127] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #11: comm syz.4.532: iget: bad extra_isize 58 (inode size 256)
[  123.275804][ T2127] EXT4-fs (loop4): Remounting filesystem read-only
[  123.319290][ T2127] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.532: error while reading EA inode 11 err=-117
[  123.343658][ T2127] EXT4-fs (loop4): Remounting filesystem read-only
[  123.355476][ T2127] EXT4-fs (loop4): 1 orphan inode deleted
[  123.365422][ T2127] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  123.426035][ T2145] overlayfs: missing 'lowerdir'
[  123.435407][ T2145] FAULT_INJECTION: forcing a failure.
[  123.435407][ T2145] name failslab, interval 1, probability 5, space 0, times 81
[  123.463333][ T2145] CPU: 1 PID: 2145 Comm: syz.7.536 Not tainted syzkaller #0
[  123.470695][ T2145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  123.480786][ T2145] Call Trace:
[  123.484098][ T2145]  <TASK>
[  123.487057][ T2145]  __dump_stack+0x21/0x24
[  123.491427][ T2145]  dump_stack_lvl+0x110/0x170
[  123.496140][ T2145]  ? __cfi_dump_stack_lvl+0x8/0x8
[  123.501193][ T2145]  ? x64_sys_call+0x171/0x9a0
[  123.505904][ T2145]  dump_stack+0x15/0x24
[  123.510091][ T2145]  should_fail_ex+0x3bf/0x510
[  123.514801][ T2145]  ? skb_clone+0x1e8/0x380
[  123.519253][ T2145]  __should_failslab+0xac/0xf0
[  123.524095][ T2145]  should_failslab+0x9/0x20
[  123.528720][ T2145]  kmem_cache_alloc+0x3b/0x320
[  123.533529][ T2145]  skb_clone+0x1e8/0x380
[  123.537811][ T2145]  can_send+0x5cc/0xbf0
[  123.542004][ T2145]  ? __cfi_can_send+0x10/0x10
[  123.546728][ T2145]  bcm_can_tx+0x56e/0x9c0
[  123.551098][ T2145]  ? bcm_free_op_work+0x170/0x170
[  123.556160][ T2145]  ? hrtimer_try_to_cancel+0x1f6/0x500
[  123.561658][ T2145]  bcm_tx_setup+0xde9/0x1b30
[  123.566296][ T2145]  bcm_sendmsg+0x240/0x640
[  123.570749][ T2145]  ? __cfi_bcm_sendmsg+0x10/0x10
[  123.575721][ T2145]  ? check_preempt_wakeup+0x619/0xbe0
[  123.581130][ T2145]  ? security_socket_sendmsg+0x93/0xb0
[  123.586632][ T2145]  ? __cfi_bcm_sendmsg+0x10/0x10
[  123.591700][ T2145]  ____sys_sendmsg+0x5fb/0x9c0
[  123.596527][ T2145]  ? __sys_sendmsg_sock+0x40/0x40
[  123.601586][ T2145]  ? import_iovec+0x7c/0xb0
[  123.606120][ T2145]  ___sys_sendmsg+0x2a2/0x360
[  123.610828][ T2145]  ? __sys_sendmsg+0x290/0x290
[  123.615628][ T2145]  ? __cfi__raw_spin_lock_bh+0x10/0x10
[  123.621123][ T2145]  ? proc_create_net_single+0x11c/0x170
[  123.626716][ T2145]  ? __fdget+0x19c/0x220
[  123.630994][ T2145]  __x64_sys_sendmsg+0x20d/0x2e0
[  123.635971][ T2145]  ? __cfi___x64_sys_sendmsg+0x10/0x10
[  123.641459][ T2145]  ? __kasan_check_write+0x14/0x20
[  123.646650][ T2145]  ? fpregs_restore_userregs+0x128/0x260
[  123.652425][ T2145]  ? switch_fpu_return+0xe/0x10
[  123.657343][ T2145]  x64_sys_call+0x171/0x9a0
[  123.661883][ T2145]  do_syscall_64+0x4c/0xa0
[  123.666326][ T2145]  ? clear_bhb_loop+0x30/0x80
[  123.671039][ T2145]  ? clear_bhb_loop+0x30/0x80
[  123.675759][ T2145]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  123.681692][ T2145] RIP: 0033:0x7fb7bc39f559
[  123.686228][ T2145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  123.705890][ T2145] RSP: 002b:00007fb7bd354028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  123.714351][ T2145] RAX: ffffffffffffffda RBX: 00007fb7bc625fa0 RCX: 00007fb7bc39f559
[  123.722364][ T2145] RDX: 0000000000008001 RSI: 0000200000000880 RDI: 0000000000000004
[  123.730368][ T2145] RBP: 00007fb7bc436b20 R08: 0000000000000000 R09: 0000000000000000
[  123.738372][ T2145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  123.746413][ T2145] R13: 00007fb7bc626038 R14: 00007fb7bc625fa0 R15: 00007ffce31ab238
[  123.754423][ T2145]  </TASK>
[  123.759533][  T291] EXT4-fs (loop4): unmounting filesystem.
[  124.279125][ T2164] overlayfs: missing 'lowerdir'
[  124.377703][ T2166] loop7: detected capacity change from 0 to 8192
[  124.396862][ T2166] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  124.463947][ T2170] loop1: detected capacity change from 0 to 512
[  124.476756][ T2170] EXT4-fs (loop1): Test dummy encryption mode enabled
[  124.501520][ T2170] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.543: inode has both inline data and extents flags
[  124.515667][ T2170] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.543: couldn't read orphan inode 15 (err -117)
[  124.530007][ T2170] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  124.612772][   T28] kauditd_printk_skb: 82 callbacks suppressed
[  124.612789][   T28] audit: type=1400 audit(1793212898.361:1449): avc:  denied  { rename } for  pid=2169 comm="syz.1.543" name="file2" dev="loop1" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  124.641742][   T28] audit: type=1400 audit(1793212898.391:1450): avc:  denied  { unlink } for  pid=2169 comm="syz.1.543" name="file1" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  124.665997][ T2170] netlink: 4 bytes leftover after parsing attributes in process `syz.1.543'.
[  124.751753][  T287] EXT4-fs (loop1): unmounting filesystem.
[  124.763299][   T19] usb 8-1: new full-speed USB device number 2 using dummy_hcd
[  124.790499][   T28] audit: type=1400 audit(1793212898.541:1451): avc:  denied  { bind } for  pid=2180 comm="syz.1.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  124.810316][ T2181] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=134 sclass=netlink_route_socket pid=2181 comm=syz.1.547
[  124.841520][   T28] audit: type=1400 audit(1793212898.571:1452): avc:  denied  { setopt } for  pid=2180 comm="syz.1.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  124.864107][ T2181] loop1: detected capacity change from 0 to 256
[  124.944254][ T2190] overlayfs: missing 'lowerdir'
[  124.950388][ T2190] FAULT_INJECTION: forcing a failure.
[  124.950388][ T2190] name failslab, interval 1, probability 5, space 0, times 80
[  124.965903][   T19] usb 8-1: config 1 has an invalid interface number: 105 but max is 0
[  124.968484][ T2190] CPU: 1 PID: 2190 Comm: syz.1.550 Not tainted syzkaller #0
[  124.981695][ T2190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  124.990949][   T19] usb 8-1: config 1 has no interface number 0
[  124.991821][ T2190] Call Trace:
[  124.991829][ T2190]  <TASK>
[  125.004174][ T2190]  __dump_stack+0x21/0x24
[  125.008542][ T2190]  dump_stack_lvl+0x110/0x170
[  125.013297][ T2190]  ? __cfi_dump_stack_lvl+0x8/0x8
[  125.018359][ T2190]  ? x64_sys_call+0x171/0x9a0
[  125.018863][   T19] usb 8-1: config 1 interface 105 has no altsetting 0
[  125.023082][ T2190]  dump_stack+0x15/0x24
[  125.023105][ T2190]  should_fail_ex+0x3bf/0x510
[  125.038733][ T2190]  ? skb_clone+0x1e8/0x380
[  125.043208][ T2190]  __should_failslab+0xac/0xf0
[  125.048013][ T2190]  should_failslab+0x9/0x20
[  125.052655][ T2190]  kmem_cache_alloc+0x3b/0x320
[  125.052920][   T19] usb 8-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  125.057549][ T2190]  skb_clone+0x1e8/0x380
[  125.057586][ T2190]  can_send+0x5cc/0xbf0
[  125.075035][ T2190]  ? __cfi_can_send+0x10/0x10
[  125.079789][ T2190]  bcm_can_tx+0x56e/0x9c0
[  125.080302][ T2192] netlink: 4 bytes leftover after parsing attributes in process `syz.5.546'.
[  125.084166][ T2190]  ? bcm_free_op_work+0x170/0x170
[  125.084202][ T2190]  ? hrtimer_try_to_cancel+0x1f6/0x500
[  125.103483][ T2190]  bcm_tx_setup+0xde9/0x1b30
[  125.106823][   T19] usb 8-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  125.108127][ T2190]  bcm_sendmsg+0x240/0x640
[  125.120625][ T2190]  ? __cfi_bcm_sendmsg+0x10/0x10
[  125.125616][ T2190]  ? check_preempt_wakeup+0x619/0xbe0
[  125.131029][ T2190]  ? security_socket_sendmsg+0x93/0xb0
[  125.136541][ T2190]  ? __cfi_bcm_sendmsg+0x10/0x10
[  125.137726][   T19] usb 8-1: Product: syz
[  125.141522][ T2190]  ____sys_sendmsg+0x5fb/0x9c0
[  125.150477][ T2190]  ? __sys_sendmsg_sock+0x40/0x40
[  125.155552][ T2190]  ? import_iovec+0x7c/0xb0
[  125.160095][ T2190]  ___sys_sendmsg+0x2a2/0x360
[  125.160578][   T19] usb 8-1: Manufacturer: syz
[  125.164807][ T2190]  ? __sys_sendmsg+0x290/0x290
[  125.164836][ T2190]  ? __cfi__raw_spin_lock_bh+0x10/0x10
[  125.179798][ T2190]  ? proc_create_net_single+0x11c/0x170
[  125.185437][ T2190]  ? __fdget+0x19c/0x220
[  125.189736][ T2190]  __x64_sys_sendmsg+0x20d/0x2e0
[  125.189934][   T19] usb 8-1: SerialNumber: syz
[  125.194715][ T2190]  ? __cfi___x64_sys_sendmsg+0x10/0x10
[  125.194745][ T2190]  ? __kasan_check_write+0x14/0x20
[  125.194776][ T2190]  ? fpregs_restore_userregs+0x128/0x260
[  125.215634][ T2190]  ? switch_fpu_return+0xe/0x10
[  125.220529][ T2190]  x64_sys_call+0x171/0x9a0
[  125.225065][ T2190]  do_syscall_64+0x4c/0xa0
[  125.229527][ T2190]  ? clear_bhb_loop+0x30/0x80
[  125.234280][ T2190]  ? clear_bhb_loop+0x30/0x80
[  125.239067][ T2190]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  125.245013][ T2190] RIP: 0033:0x7f43c4f9f559
[  125.249461][ T2190] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  125.269106][ T2190] RSP: 002b:00007f43c5e99028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  125.277573][ T2190] RAX: ffffffffffffffda RBX: 00007f43c5225fa0 RCX: 00007f43c4f9f559
[  125.285578][ T2190] RDX: 0000000000008001 RSI: 0000200000000880 RDI: 0000000000000004
[  125.293582][ T2190] RBP: 00007f43c5036b20 R08: 0000000000000000 R09: 0000000000000000
[  125.301592][ T2190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  125.309588][ T2190] R13: 00007f43c5226038 R14: 00007f43c5225fa0 R15: 00007ffe3fbf8a58
[  125.317648][ T2190]  </TASK>
[  125.846068][ T2202] overlayfs: missing 'lowerdir'
[  126.332233][ T2221] loop4: detected capacity change from 0 to 128
[  126.421475][  T467] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  128.051704][ T2239] overlayfs: failed to clone upperpath
[  129.252264][   T19] aqc111: probe of 8-1:1.105 failed with error -71
[  129.265936][   T19] usb 8-1: USB disconnect, device number 2
[  129.285189][ T2245] overlayfs: missing 'lowerdir'
[  129.294673][ T2247] overlayfs: missing 'lowerdir'
[  129.305452][ T2247] FAULT_INJECTION: forcing a failure.
[  129.305452][ T2247] name failslab, interval 1, probability 5, space 0, times 79
[  129.374907][ T2249] overlayfs: failed to clone upperpath
[  129.631587][ T2247] CPU: 1 PID: 2247 Comm: syz.1.566 Not tainted syzkaller #0
[  129.638956][ T2247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  129.649042][ T2247] Call Trace:
[  129.652339][ T2247]  <TASK>
[  129.655291][ T2247]  __dump_stack+0x21/0x24
[  129.659652][ T2247]  dump_stack_lvl+0x110/0x170
[  129.664390][ T2247]  ? __cfi_dump_stack_lvl+0x8/0x8
[  129.669537][ T2247]  ? x64_sys_call+0x171/0x9a0
[  129.674265][ T2247]  dump_stack+0x15/0x24
[  129.678452][ T2247]  should_fail_ex+0x3bf/0x510
[  129.683171][ T2247]  ? skb_clone+0x1e8/0x380
[  129.687624][ T2247]  __should_failslab+0xac/0xf0
[  129.692532][ T2247]  should_failslab+0x9/0x20
[  129.697062][ T2247]  kmem_cache_alloc+0x3b/0x320
[  129.701872][ T2247]  skb_clone+0x1e8/0x380
[  129.706152][ T2247]  can_send+0x5cc/0xbf0
[  129.710333][ T2247]  ? __cfi_can_send+0x10/0x10
[  129.715034][ T2247]  bcm_can_tx+0x56e/0x9c0
[  129.719399][ T2247]  ? bcm_free_op_work+0x170/0x170
[  129.724453][ T2247]  ? hrtimer_try_to_cancel+0x1f6/0x500
[  129.729943][ T2247]  bcm_tx_setup+0xde9/0x1b30
[  129.734570][ T2247]  bcm_sendmsg+0x240/0x640
[  129.739020][ T2247]  ? __cfi_bcm_sendmsg+0x10/0x10
[  129.744024][ T2247]  ? check_preempt_wakeup+0x619/0xbe0
[  129.749440][ T2247]  ? security_socket_sendmsg+0x93/0xb0
[  129.754933][ T2247]  ? __cfi_bcm_sendmsg+0x10/0x10
[  129.759908][ T2247]  ____sys_sendmsg+0x5fb/0x9c0
[  129.764697][ T2247]  ? __sys_sendmsg_sock+0x40/0x40
[  129.769743][ T2247]  ? import_iovec+0x7c/0xb0
[  129.774276][ T2247]  ___sys_sendmsg+0x2a2/0x360
[  129.778981][ T2247]  ? __sys_sendmsg+0x290/0x290
[  129.783770][ T2247]  ? __cfi__raw_spin_lock_bh+0x10/0x10
[  129.789256][ T2247]  ? proc_create_net_single+0x11c/0x170
[  129.794879][ T2247]  ? __fdget+0x19c/0x220
[  129.799156][ T2247]  __x64_sys_sendmsg+0x20d/0x2e0
[  129.804123][ T2247]  ? __cfi___x64_sys_sendmsg+0x10/0x10
[  129.809608][ T2247]  ? __kasan_check_write+0x14/0x20
[  129.814744][ T2247]  ? fpregs_restore_userregs+0x128/0x260
[  129.820406][ T2247]  ? switch_fpu_return+0xe/0x10
[  129.825282][ T2247]  x64_sys_call+0x171/0x9a0
[  129.829825][ T2247]  do_syscall_64+0x4c/0xa0
[  129.834280][ T2247]  ? clear_bhb_loop+0x30/0x80
[  129.838986][ T2247]  ? clear_bhb_loop+0x30/0x80
[  129.843693][ T2247]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  129.849614][ T2247] RIP: 0033:0x7f43c4f9f559
[  129.854055][ T2247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  129.873800][ T2247] RSP: 002b:00007f43c5e99028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  129.882255][ T2247] RAX: ffffffffffffffda RBX: 00007f43c5225fa0 RCX: 00007f43c4f9f559
[  129.890253][ T2247] RDX: 0000000000008001 RSI: 0000200000000880 RDI: 0000000000000004
[  129.898250][ T2247] RBP: 00007f43c5036b20 R08: 0000000000000000 R09: 0000000000000000
[  129.906252][ T2247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  129.914253][ T2247] R13: 00007f43c5226038 R14: 00007f43c5225fa0 R15: 00007ffe3fbf8a58
[  129.922283][ T2247]  </TASK>
[  131.440027][   T28] audit: type=1400 audit(1793212905.091:1453): avc:  denied  { mounton } for  pid=2256 comm="syz.3.568" path="/120/file0" dev="tmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  131.962112][ T2263] loop7: detected capacity change from 0 to 8192
[  131.984590][ T2263] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  133.130328][ T2284] overlayfs: missing 'lowerdir'
[  133.243804][ T2287] netlink: 4 bytes leftover after parsing attributes in process `syz.3.574'.
[  133.264425][ T2289] overlayfs: missing 'lowerdir'
[  133.490141][ T2298] overlayfs: failed to resolve './bus': -2
[  134.423536][ T2304] netlink: 4 bytes leftover after parsing attributes in process `syz.5.579'.
[  134.703957][   T28] audit: type=1400 audit(1793212908.461:1454): avc:  denied  { read } for  pid=2310 comm="syz.4.583" name="msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  134.740480][ T2275] loop7: detected capacity change from 0 to 4096
[  134.763739][   T28] audit: type=1400 audit(1793212908.481:1455): avc:  denied  { open } for  pid=2310 comm="syz.4.583" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  134.817260][ T2275] EXT4-fs: Ignoring removed orlov option
[  134.867288][ T2275] EXT4-fs: Ignoring removed orlov option
[  135.119724][ T2275] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  135.272568][   T28] audit: type=1400 audit(1793212909.021:1456): avc:  denied  { map } for  pid=2274 comm="syz.7.573" path="socket:[24755]" dev="sockfs" ino=24755 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  135.317046][ T1405] EXT4-fs (loop7): unmounting filesystem.
[  135.322921][   T28] audit: type=1400 audit(1793212909.051:1457): avc:  denied  { read } for  pid=2274 comm="syz.7.573" path="socket:[24755]" dev="sockfs" ino=24755 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  135.382473][   T28] audit: type=1400 audit(1793212909.051:1458): avc:  denied  { append } for  pid=2274 comm="syz.7.573" path=2F35312F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F626C6B696F2E6266712E696F5F736572766963655F6279746573 dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  135.456893][ T2331] overlayfs: missing 'lowerdir'
[  135.466831][ T2331] FAULT_INJECTION: forcing a failure.
[  135.466831][ T2331] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  135.480180][ T2331] CPU: 1 PID: 2331 Comm: syz.7.586 Not tainted syzkaller #0
[  135.487520][ T2331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  135.497612][ T2331] Call Trace:
[  135.500941][ T2331]  <TASK>
[  135.503905][ T2331]  __dump_stack+0x21/0x24
[  135.508265][ T2331]  dump_stack_lvl+0x110/0x170
[  135.512967][ T2331]  ? __cfi_dump_stack_lvl+0x8/0x8
[  135.518047][ T2331]  ? __cfi_avc_has_perm_noaudit+0x10/0x10
[  135.523802][ T2331]  dump_stack+0x15/0x24
[  135.527982][ T2331]  should_fail_ex+0x3bf/0x510
[  135.532687][ T2331]  should_fail+0xb/0x10
[  135.536903][ T2331]  should_fail_usercopy+0x1a/0x20
[  135.541964][ T2331]  copyin+0x20/0xa0
[  135.545820][ T2331]  _copy_from_iter+0x3cd/0xfe0
[  135.550624][ T2331]  ? __cfi__copy_from_iter+0x10/0x10
[  135.555962][ T2331]  ? selinux_socket_sendmsg+0x22f/0x340
[  135.561635][ T2331]  bcm_sendmsg+0x174/0x640
[  135.566094][ T2331]  ? __cfi_bcm_sendmsg+0x10/0x10
[  135.571074][ T2331]  ? security_socket_sendmsg+0x93/0xb0
[  135.576582][ T2331]  ? __cfi_bcm_sendmsg+0x10/0x10
[  135.581567][ T2331]  ____sys_sendmsg+0x5fb/0x9c0
[  135.586360][ T2331]  ? __sys_sendmsg_sock+0x40/0x40
[  135.591448][ T2331]  ? import_iovec+0x7c/0xb0
[  135.595988][ T2331]  ___sys_sendmsg+0x2a2/0x360
[  135.600725][ T2331]  ? __sys_sendmsg+0x290/0x290
[  135.605520][ T2331]  ? __cfi__raw_spin_lock_bh+0x10/0x10
[  135.611004][ T2331]  ? proc_create_net_single+0x11c/0x170
[  135.616602][ T2331]  ? __fdget+0x19c/0x220
[  135.620877][ T2331]  __x64_sys_sendmsg+0x20d/0x2e0
[  135.625847][ T2331]  ? __cfi___x64_sys_sendmsg+0x10/0x10
[  135.631340][ T2331]  ? __kasan_check_write+0x14/0x20
[  135.636481][ T2331]  ? fpregs_restore_userregs+0x128/0x260
[  135.642149][ T2331]  ? switch_fpu_return+0xe/0x10
[  135.647032][ T2331]  x64_sys_call+0x171/0x9a0
[  135.651567][ T2331]  do_syscall_64+0x4c/0xa0
[  135.656031][ T2331]  ? clear_bhb_loop+0x30/0x80
[  135.660742][ T2331]  ? clear_bhb_loop+0x30/0x80
[  135.665450][ T2331]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  135.671408][ T2331] RIP: 0033:0x7fb7bc39f559
[  135.675851][ T2331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  135.695489][ T2331] RSP: 002b:00007fb7bd354028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  135.703932][ T2331] RAX: ffffffffffffffda RBX: 00007fb7bc625fa0 RCX: 00007fb7bc39f559
[  135.711920][ T2331] RDX: 0000000000008001 RSI: 0000200000000880 RDI: 0000000000000004
[  135.719910][ T2331] RBP: 00007fb7bc436b20 R08: 0000000000000000 R09: 0000000000000000
[  135.727900][ T2331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  135.735889][ T2331] R13: 00007fb7bc626038 R14: 00007fb7bc625fa0 R15: 00007ffce31ab238
[  135.743886][ T2331]  </TASK>
[  135.823308][   T19] usb 2-1: new full-speed USB device number 9 using dummy_hcd
[  136.014355][   T19] usb 2-1: config 1 has an invalid interface number: 105 but max is 0
[  136.023756][   T19] usb 2-1: config 1 has no interface number 0
[  136.029883][   T19] usb 2-1: config 1 interface 105 has no altsetting 0
[  136.048485][   T19] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  136.063278][   T19] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  136.081634][   T19] usb 2-1: Product: syz
[  136.087215][   T19] usb 2-1: Manufacturer: syz
[  136.092017][   T19] usb 2-1: SerialNumber: syz
[  136.301130][ T2340] loop7: detected capacity change from 0 to 40427
[  136.318333][ T2340] F2FS-fs (loop7): Invalid SB checksum offset: 0
[  136.337001][ T2340] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock
[  136.346038][ T2340] F2FS-fs (loop7): invalid crc value
[  136.615379][ T2340] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  136.800499][ T2340] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0
[  136.819252][ T2340] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  137.048142][ T1405] syz-executor: attempt to access beyond end of device
[  137.048142][ T1405] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  137.242493][ T2363] loop7: detected capacity change from 0 to 4096
[  137.288303][ T2363] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  137.348661][ T2367] overlayfs: missing 'lowerdir'
[  137.400286][   T28] audit: type=1400 audit(1793212911.151:1459): avc:  denied  { ioctl } for  pid=2362 comm="syz.7.595" path="/dev/ppp" dev="devtmpfs" ino=158 ioctlcmd=0x7452 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  137.459745][ T1405] EXT4-fs (loop7): unmounting filesystem.
[  137.565049][ T2376] overlayfs: missing 'lowerdir'
[  137.574914][ T2376] FAULT_INJECTION: forcing a failure.
[  137.574914][ T2376] name failslab, interval 1, probability 5, space 0, times 78
[  137.592361][ T2376] CPU: 0 PID: 2376 Comm: syz.7.598 Not tainted syzkaller #0
[  137.599716][ T2376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  137.609810][ T2376] Call Trace:
[  137.613124][ T2376]  <TASK>
[  137.616080][ T2376]  __dump_stack+0x21/0x24
[  137.620451][ T2376]  dump_stack_lvl+0x110/0x170
[  137.625156][ T2376]  ? __cfi_dump_stack_lvl+0x8/0x8
[  137.630214][ T2376]  ? x64_sys_call+0x171/0x9a0
[  137.634935][ T2376]  dump_stack+0x15/0x24
[  137.639119][ T2376]  should_fail_ex+0x3bf/0x510
[  137.643826][ T2376]  ? skb_clone+0x1e8/0x380
[  137.648285][ T2376]  __should_failslab+0xac/0xf0
[  137.653091][ T2376]  should_failslab+0x9/0x20
[  137.657626][ T2376]  kmem_cache_alloc+0x3b/0x320
[  137.662435][ T2376]  skb_clone+0x1e8/0x380
[  137.666719][ T2376]  can_send+0x5cc/0xbf0
[  137.670949][ T2376]  ? __cfi_can_send+0x10/0x10
[  137.675672][ T2376]  bcm_can_tx+0x56e/0x9c0
[  137.680055][ T2376]  ? bcm_free_op_work+0x170/0x170
[  137.685134][ T2376]  ? hrtimer_try_to_cancel+0x1f6/0x500
[  137.690642][ T2376]  bcm_tx_setup+0xde9/0x1b30
[  137.695301][ T2376]  bcm_sendmsg+0x240/0x640
[  137.699760][ T2376]  ? __cfi_bcm_sendmsg+0x10/0x10
[  137.704761][ T2376]  ? check_preempt_wakeup+0x619/0xbe0
[  137.710172][ T2376]  ? security_socket_sendmsg+0x93/0xb0
[  137.715682][ T2376]  ? __cfi_bcm_sendmsg+0x10/0x10
[  137.720680][ T2376]  ____sys_sendmsg+0x5fb/0x9c0
[  137.725487][ T2376]  ? __sys_sendmsg_sock+0x40/0x40
[  137.730576][ T2376]  ? import_iovec+0x7c/0xb0
[  137.735118][ T2376]  ___sys_sendmsg+0x2a2/0x360
[  137.739834][ T2376]  ? __sys_sendmsg+0x290/0x290
[  137.744644][ T2376]  ? __cfi__raw_spin_lock_bh+0x10/0x10
[  137.750145][ T2376]  ? proc_create_net_single+0x11c/0x170
[  137.755738][ T2376]  ? __fdget+0x19c/0x220
[  137.760029][ T2376]  __x64_sys_sendmsg+0x20d/0x2e0
[  137.765005][ T2376]  ? __cfi___x64_sys_sendmsg+0x10/0x10
[  137.770504][ T2376]  ? __kasan_check_write+0x14/0x20
[  137.775655][ T2376]  ? fpregs_restore_userregs+0x128/0x260
[  137.781353][ T2376]  ? switch_fpu_return+0xe/0x10
[  137.786238][ T2376]  x64_sys_call+0x171/0x9a0
[  137.790786][ T2376]  do_syscall_64+0x4c/0xa0
[  137.795258][ T2376]  ? clear_bhb_loop+0x30/0x80
[  137.799982][ T2376]  ? clear_bhb_loop+0x30/0x80
[  137.804702][ T2376]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  137.810634][ T2376] RIP: 0033:0x7fb7bc39f559
[  137.815107][ T2376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  137.834755][ T2376] RSP: 002b:00007fb7bd354028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  137.843224][ T2376] RAX: ffffffffffffffda RBX: 00007fb7bc625fa0 RCX: 00007fb7bc39f559
[  137.851235][ T2376] RDX: 0000000000008001 RSI: 0000200000000880 RDI: 0000000000000004
[  137.859261][ T2376] RBP: 00007fb7bc436b20 R08: 0000000000000000 R09: 0000000000000000
[  137.867265][ T2376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  137.875269][ T2376] R13: 00007fb7bc626038 R14: 00007fb7bc625fa0 R15: 00007ffce31ab238
[  137.883279][ T2376]  </TASK>
[  138.680061][   T19] aqc111: probe of 2-1:1.105 failed with error -71
[  138.694664][   T19] usb 2-1: USB disconnect, device number 9
[  138.784713][ T2390] loop1: detected capacity change from 0 to 40427
[  138.803270][ T2390] F2FS-fs (loop1): Invalid log_blocksize (64), supports only 12
[  138.811015][ T2390] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  138.833438][ T2390] ================================================================================
[  138.842808][ T2390] UBSAN: shift-out-of-bounds in fs/f2fs/super.c:955:5
[  138.849722][ T2390] shift exponent 121 is too large for 64-bit type 'unsigned long'
[  138.861248][ T2390] CPU: 0 PID: 2390 Comm: syz.1.602 Not tainted syzkaller #0
[  138.868622][ T2390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  138.878722][ T2390] Call Trace:
[  138.882033][ T2390]  <TASK>
[  138.884989][ T2390]  __dump_stack+0x21/0x24
[  138.889365][ T2390]  dump_stack_lvl+0x110/0x170
[  138.894083][ T2390]  ? __cfi_dump_stack_lvl+0x8/0x8
[  138.899162][ T2390]  ? __kasan_slab_free+0x11/0x20
[  138.904178][ T2390]  dump_stack+0x15/0x24
[  138.908373][ T2390]  ubsan_epilogue+0xe/0x40
[  138.912843][ T2390]  __ubsan_handle_shift_out_of_bounds+0x364/0x3f0
[  138.919335][ T2390]  ? match_int+0x142/0x1a0
[  138.923809][ T2390]  parse_options+0x4d05/0x4d30
[  138.928621][ T2390]  ? mount_bdev+0x29b/0x3d0
[  138.933160][ T2390]  ? f2fs_mount+0x34/0x40
[  138.937527][ T2390]  ? legacy_get_tree+0xfe/0x1a0
[  138.942452][ T2390]  ? default_options+0xce0/0xce0
[  138.947436][ T2390]  ? kstrdup+0x56/0x80
[  138.951570][ T2390]  ? memcpy+0x56/0x70
[  138.955636][ T2390]  f2fs_fill_super+0x266c/0x7460
[  138.960652][ T2390]  ? __cfi_f2fs_fill_super+0x10/0x10
[  138.965987][ T2390]  ? mutex_unlock+0x8f/0x230
[  138.970626][ T2390]  ? set_blocksize+0x1cc/0x470
[  138.975431][ T2390]  ? sb_set_blocksize+0xaa/0xf0
[  138.980322][ T2390]  ? __cfi_f2fs_fill_super+0x10/0x10
[  138.985653][ T2390]  mount_bdev+0x29b/0x3d0
[  138.990024][ T2390]  ? __cfi_f2fs_fill_super+0x10/0x10
[  138.995351][ T2390]  f2fs_mount+0x34/0x40
[  138.999557][ T2390]  legacy_get_tree+0xfe/0x1a0
[  139.004295][ T2390]  ? __cfi_f2fs_mount+0x10/0x10
[  139.009193][ T2390]  vfs_get_tree+0x9a/0x270
[  139.013654][ T2390]  do_new_mount+0x251/0xb40
[  139.018192][ T2390]  ? security_capable+0x99/0xc0
[  139.023085][ T2390]  path_mount+0x640/0xfd0
[  139.027472][ T2390]  __se_sys_mount+0x320/0x390
[  139.032218][ T2390]  ? __x64_sys_mount+0xd0/0xd0
[  139.037029][ T2390]  ? do_user_addr_fault+0x9a5/0x1030
[  139.042371][ T2390]  __x64_sys_mount+0xbf/0xd0
[  139.046996][ T2390]  x64_sys_call+0x65d/0x9a0
[  139.051527][ T2390]  do_syscall_64+0x4c/0xa0
[  139.055962][ T2390]  ? clear_bhb_loop+0x30/0x80
[  139.060664][ T2390]  ? clear_bhb_loop+0x30/0x80
[  139.065372][ T2390]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  139.071285][ T2390] RIP: 0033:0x7f43c4fa07ca
[  139.075738][ T2390] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  139.095375][ T2390] RSP: 002b:00007f43c5e98e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  139.103809][ T2390] RAX: ffffffffffffffda RBX: 00007f43c5e98ee0 RCX: 00007f43c4fa07ca
[  139.111798][ T2390] RDX: 0000200000000100 RSI: 0000200000000240 RDI: 00007f43c5e98ea0
[  139.119784][ T2390] RBP: 0000200000000100 R08: 00007f43c5e98ee0 R09: 0000000001014004
[  139.127773][ T2390] R10: 0000000001014004 R11: 0000000000000246 R12: 0000200000000240
[  139.135761][ T2390] R13: 00007f43c5e98ea0 R14: 0000000000005543 R15: 0000200000000000
[  139.143761][ T2390]  </TASK>
[  139.292342][ T2390] ================================================================================
[  139.301865][ T2390] F2FS-fs (loop1): Not support 144115188075855872, larger than 256