last executing test programs:

36.041156728s ago: executing program 4 (id=5):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4)
setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8)
sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x8000)
bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x7ff, @empty, 0x9}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8)
setsockopt$inet6_int(r2, 0x29, 0x33, &(0x7f0000000040)=0x9, 0x4)
recvmmsg(r2, &(0x7f0000004780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001500)=""/42, 0x2d}, 0x8000}], 0x400000000000305, 0x2, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20004184, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x4, 0x1000000000, 0x5, 0x10043, 0x2000001, 0x7, 0x2004cb, 0x0, 0x6, 0xd2, 0x2, 0x9, 0x0, 0x3fe, 0x7], 0xeeee8000, 0x202})
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x60000, 0xeeee0000, 0xa, 0x88, 0x0, 0xe4, 0x40, 0x0, 0x0, 0x2e, 0x80}, {0x5000, 0x4000, 0x3, 0x0, 0x42, 0x5, 0x5, 0x6, 0x5, 0x5, 0x42, 0x89}, {0xfec00000, 0x1, 0xe, 0x5, 0x3, 0x7, 0x0, 0x7, 0x3, 0x5, 0x5, 0x5}, {0x1, 0xf000, 0xd, 0x6, 0x4, 0x42, 0xb, 0xff, 0x2, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0xfd, 0x3, 0xf7, 0x83}, {0x1000, 0xc000, 0x9, 0xa0, 0xb1, 0x8, 0x2, 0xa0, 0x82, 0xf, 0x5, 0x7}, {0xeeef0000, 0xeeef0000, 0x4, 0x5, 0x7, 0xd1, 0x7, 0x3, 0x9, 0x81, 0x40, 0x70}, {0x200000, 0x4000, 0x14, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0x9, 0xb0, 0x9}, {0xffff2000, 0x30}, {0x8000000, 0x7}, 0x80010000, 0x0, 0x0, 0x2024, 0x0, 0xf401, 0x3000, [0x9, 0x100000000000204, 0x5b, 0x8]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

35.820167252s ago: executing program 4 (id=10):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getnexthop={0x18, 0x6a, 0x501, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2}}, 0x18}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000002a80)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="40000000130001002bbd7000f8dbdf2504004f8008003300", @ANYRES32=0x0, @ANYBLOB="2000258008002e800400920014001c"], 0x40}], 0x1, 0x0, 0x0, 0x8010}, 0x8880)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x40, &(0x7f0000000080)={[{@bh}, {@mblk_io_submit}, {@grpquota}, {@bh}, {@dioread_nolock}]}, 0x1, 0x4f7, &(0x7f0000000540)="$eJzs3c9vI1cdAPDvTOJNmqZNCpUKCOhSCgtarZ1426jqqVxAqKqEqDhxSEPijaLYcRQ7pQkrNfkfkKjEAcGJMwckDpV64ojgBre9LAekBVagDRIHo/GPbHZjJ2HXsVX785FGM2/eeL7vrTXveb9J/AIYW1cj4iAirkTEexEx1z6ftLd4q7Vl1z24f3v16P7t1SQajXf/kTTrs3Nx4jWZZ9v3nI6I738n4kfJ6bi1vf3NlXK5tNMuF+qV7UJtb//GRmVlvbRe2ioWlxaXFt64+Xqxb319ufKbe9/eePsHH//uS3f/dPDNn2TNmm3XnexHP7W6njuOk5mMiLcvI9gQTLT7c2XYDeGJpBHxmYh4pfn8z8VE8928mC6PNQDwKdBozEVj7mQZABh1aTMHlqT5di5gNtI0n2/l8F6MmbRcrdWv36rubq21cmXzkUtvbZRLC+1c4Xzkkqy8+GF2/LBcjEfLNyPihYj46dQzzXJ+9eJ5BgCgv559bP7/91Rr/gcARtz0eRcsD6YdAMDgnDv/AwAjx/wPAOPH/A8A48f8DwDjx/wPAOPmTmf+nxh2SwCAgfjeO+9kW+Oo/f3Xa+/v7W5W37+xVqpt5iu7q/nV6s52fr1aXS+X8qvVynn3K1er24uvxe4HhXqpVi/U9vaXK9Xdrfpy83u9l0u5gfQKADjLCy9/8pckIg7efKa5xYm1HMzVMNrSYTcAGBo5fxhfvoUbxpf/4wPnreXZ81eEP3qCYI0Pn+BFQL9d+7z8P4wr+X8YX/L/ML7k/2F8NRpJrzX/0+NLAICRIscPDPTn/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAiZpvb/IlymubzEc9FxHzkklsb5dJCRDwfEX+eyk1l5cWhthgAeHrp35L2+l/X5l6dfbz2SvKfqeY+In7883d/9sFKvb6zmJ3/5/H5+kft88VhtB8AOE9nnu7M4x0P7t9e7WyDbM+9b7UWF83iHrW3Vs1kTGa7P05HLiJm/pW0ym3Z55WJPsQ/OIyIz3Xrf9LMjcy3Vz59PH4W+7mBxk8fiZ8261r77N/is6fuPNUz5nlrvcK4+CQbf97q9vylcbW5n+66+PF0c4R6ep3x7+jU+Nd53qebY0238e/qRWO89vvv9qw7jPjCZLf4yXH8pEf8Vy8Y/84Xv/xKr7rGLyOuRff4J2MV6pXtQm1v/8ZGZWW9tF7aKhaXFpcW3rj5erHQzFEXOpnq0/7+5vXne/b/1xEzPeJPn9P/r53Z68bxAPyr/773w6/0in8Y8Y2vdn//XzwjfjYnfv3M+A+tzPy25/LdWfy1Vv8P/9/3//oF49/96/7aBS8FAAagtre/uVIul3b6epCLPt/wxEFySW12MOIH2efxp73PS+2UWddr/vCLj1/KKofe074cDHlgAi7dw4d+2C0BAAAAAAAAAAAAAAB6ufQ/J0qH3UMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABG2f8CAAD//zwQyy8=")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0)
ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x41000)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f00000000c0)={0xffff, 0x22, 0x205, 0x831a, 0x1, "03000000cb0b0e000800feffffbcd6ff0100", 0x8808, 0x3})
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace$setsig(0x4203, r4, 0x5, &(0x7f0000000040)={0x15, 0xffffff1c, 0x1e0000})
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x1)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)

32.697077004s ago: executing program 4 (id=16):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4)
setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8)
sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x8000)
bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x7ff, @empty, 0x9}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8)
setsockopt$inet6_int(r2, 0x29, 0x33, &(0x7f0000000040)=0x9, 0x4)
recvmmsg(r2, &(0x7f0000004780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001500)=""/42, 0x2d}, 0x8000}], 0x400000000000305, 0x2, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20004184, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x89, 0x0, 0x2, 0x180, 0x5, 0x4, 0xf1, 0x1, 0x2, 0x2, 0x0, 0x29, 0x0, 0x6, 0x40, 0x8000000bdb], 0xa000, 0x43102})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x4, 0x1000000000, 0x5, 0x10043, 0x2000001, 0x7, 0x2004cb, 0x0, 0x6, 0xd2, 0x2, 0x9, 0x0, 0x3fe, 0x7], 0xeeee8000, 0x202})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

32.186484086s ago: executing program 4 (id=18):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x14001, &(0x7f0000000840)={[{@noblock_validity}, {@nodiscard}]}, 0x0, 0x49b, &(0x7f0000001800)="$eJzs3MtrXFUcAODf3GTSpM/4qNqHGl9YUJsmfdiFG0XRhYKgi9qFENO01Ka2NBFsKaaK1KUU3ItLwb/AlW5EXQludS+FItk0PsAr9869Jk0ymZl0konO98G059x7Zs7rnjvnnnsnAXStoeyfSsTWiPg5Cyd59F9pkShLNzd7efz32cvjlUjT136r5Ptuzl4eL9OW79taRPYlEclHldizTL5TFy+dGZucnLhQxIenz54fnrp46anTZ8dOTZyaeGf06NFDB0eePjJ6uGEdKk3Uc1tW1t3vn9u766U3rr0yfuzaW99/2VuWdVE92mUohuqW7bF2Z9Zh2xaEK70dLAgt6YmIrLuq+fjfET0x33k74oUPO1o4YE2laZpur7/7Sgr8j1Wi0yUAOqP8or85OxD9a3QdvJHdeLZ2AZTVe6541fb0RlKkqS66vm2n/mL94tiVPz6LvP03dVX7AwDr7+ts/vNkbf5Tvmp7BuOeBem25+vB2daIOyLizoi4KyLujoidEXnaeyPivhbzH1oUXzr/TK6vqmJNyuZ/z0TEXG9E3DL/K2Z/f6eDPUVsWwzEYFQrJ09PThwo2mRfVDedrE5OjKyQxzfP//RJvX1DxdyvfGX5l3PBohzXezfd+p4TY9Njt1freTc+yNcAZ+aWzH/n71xloV0RsbvlTz/+4unz2f9f7K2XonH9V9CG+0zp5xGP1+5tXokV6r/4/uRAse/I6OHh/picODBcHhVL/fDj1Vfr5X9b9W+DrP83F/d26/T/YGXh/dqp1vO4+svHda9pWjj+j5dbsuO/r/J6Hu4rtr03Nj19YSSir/Ly0u2j859Wxsv0N7bujHhkufon+TkuO8ay+u+JiOwgvj8iHoiIB4uyPxQRD0f+EcuZmYuI75579O3V1D9p1LBtkPX/iVv6Pxr0f+uBnjPffrWa+tdk/X8oD+0rtix//usvA/lZodkCtqMNAQAAYKNL8mfgK8n+IjwQSbJ/f8SWfG13czJ5bmr6iZPn3v3zRO1Z+cGoJuVKV209uLYeOlKsDZfx0UXxg8W68ac9A3l888IrdqAjtiwc//mCY238Z37tWf49zfzeBviP8Hst6F7GP3Qv4x+6V3Pjv3gKcWZtywKsr2a//9M1Lgew/pYb/3W/5t9cj8eSgfXi+h+6l/EP3cv4h+5l/ENXup3f9Qs0CMy03Lz9sVKavvYXNU1X+/ZI8kA608F2/qv4MyzNJV678pTPxDdOXC3G3UY5ROsHOndOAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaKd/AgAA//9XstwK")
syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]})

32.077049858s ago: executing program 32 (id=18):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x14001, &(0x7f0000000840)={[{@noblock_validity}, {@nodiscard}]}, 0x0, 0x49b, &(0x7f0000001800)="$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")
syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]})

23.971022773s ago: executing program 3 (id=86):
socket$packet(0x11, 0x3, 0x300)
r0 = socket$igmp6(0xa, 0x3, 0x2)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000e50000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001e334185850000007300000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94)
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x32, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000004700)={'team0\x00', <r5=>0x0})
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000a00)=ANY=[@ANYBLOB="0c05000001003b1bee74f81d38cb43cb910011cf6eed3c3d79c5a74d37717ca6d944f5675ffe163080458682efdbd3a04811c8c2213840478847f1f8ec188941f8efa38aa705167edeb77f00"/86, @ANYRES16=r4, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r5, @ANYBLOB="f000028040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62696e000034000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000040004003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e00000008000400ffffffff08000600", @ANYRES32=r5, @ANYBLOB], 0x10c}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0xe, 0x0, &(0x7f0000000200)="e0b9547ed384dbe9abc89b6f5bec", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002580)=@delchain={0x650, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x624, 0x2, [@TCA_BPF_ACT={0x620, 0x1, [@m_bpf={0x130, 0x11, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_NAME={0x5, 0x6, '\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xffffffff, 0x3, 0xffffffffffffffff, 0x10001, 0x6}}]}, {0xd1, 0x6, "a41f25d22b1bae1b6bfb4a42ad5ba9db462fca41280c331f630e2c9f0be1093117392575082305ebc27660464ef802792ce06133244235023f0f4882fc0a47f4d5e499a8857cd81b0e6fda422cbc53ad098872214190756df6bbd0e760248aa97e200702fd569bd27d4a70df1d4a123ffc42d2592c81751e15e260622f14aeaaca5dc8acab93651fdd1d5614d98f28fc76d402e1028d91028270a2722b141a9140c47e37d068e7193d463a6444e424bc792ab1295f79842a501700a5cc2f71eefaf131a98821e712b03d552c87"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_xt={0x1bc, 0x5, 0x0, 0x0, {{0x7}, {0xa8, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xa1, 0x6, {0x7, 'raw\x00', 0x7, 0x100, "5922b40f3b9231ba6e0c37dcda932a70335da3c7ed969269be350eede0a5fda559f5cb1d2965da3399446c574f0d7ed3b4810fc3efe0304c7bb1d3ed00a60a15519cae499f11ac626316a075637035e57ffcbd48e9b64edfcef2bcef40dc7e09e080d742bd84c2df1d8326e58c401490153b89d988036c"}}]}, {0xed, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24eccd260f28bb850873b1e2154b158987d6e585e10ffeaba32641bae47de041e1169d8e4a65b8ce3633a4469c93c5228320c572237d92a9ae6bbc2d2bd3a2d1e27de283017ecf9fca6b2cd8a119dee59702830717b694625f60f5c81f688775c5e292f76a0ffa39e1d2cabd639d1c111c01e0d2f9faa220154db33399242bca9f4fac65c74cb6264c28ac7a50037564c7b417fb61d617d212ab3243c30e0e82d9a12651b74553d539b991a302489af94626e5aac41c53b2"}, {0xc, 0x7, {0x1, 0xeb0757422c733451}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_bpf={0xbc, 0x8, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}]}, {0x81, 0x6, "5d3aee85a6264cff4a2163adaec321e008985cfa435b8922eeb16f1932265618158a3fe72c442a68b182e8f673f9251a03dc831c5947be17ca906c3dcb99adb55bc5f0ad8886f235f45d7e29bb727715f2e7a3200ac63eb79f7a023835874514b60b0177c40370157c0c21b37875e7e4a2e75b3cc54be7d719fa695469"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_tunnel_key={0xfc, 0x8, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast1}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private0}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}]}, {0x85, 0x6, "51719d53a2b05eda58a80a40d29b01394b8749d7d9ef9f47cce75187b6f333f4bfe797fa4227bf38cf0b71e1b4888d8d1ed410a788c182ba498076ca9ab3d63a8f29175d44a2e8364296c34ac0cdb8972288ecf6515bec4861a53e1e18e54679f5666b0536d0a008aa9b3be1f5e00c4c72460249c372de16eb2cfc15714543d6f3"}, {0xc}, {0xc, 0x8, {0x3, 0xddc47d017e85c037}}}}, @m_nat={0x178, 0x6, 0x0, 0x0, {{0x8}, {0x11c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xab7, 0x4c1adacc, 0x5, 0x99, 0x6}, @multicast1, @local, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x401, 0x7, 0x6, 0x5}, @rand_addr=0x64010102, @rand_addr=0x64010102, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x5, 0x5, 0x0, 0xd}, @private=0xa010100, @empty, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4ef0, 0x1, 0x4, 0x10000, 0xc0e}, @multicast1, @rand_addr=0x64010102, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x11d, 0x5, 0x7a, 0x1}, @multicast1, @empty, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0xffffff7f, 0x5, 0x79, 0x74e69dde}, @broadcast, @empty, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffff000, 0x2cf, 0xffffffffffffffff, 0x7, 0xfffffffb}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0xff000000, 0x1}}]}, {0x36, 0x6, "72c2816ab98a21c440078477977f213e81d0d0ff724f9d0109cdd14889252206b3196663ec1f74e5725f9c0ecf9c39784a71"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x650}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080)
r6 = socket(0x10, 0x803, 0x0)
sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000013880)=[{{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000000080)="4dd6f82ee4016d6c64646d33d64299fd40b7292baa4f762cef9626b1e5e02bcd", 0x20}], 0x1}}], 0x1, 0x8008)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r7)
recvmmsg(r7, &(0x7f0000008bc0)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x3fffffffffffde9, 0x10002, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x490, 0x168, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3c0, 0xffffffff, 0xffffffff, 0x3c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x148, 0x168, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x810001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x228, 0x258, 0x0, {}, [@common=@ipv6header={{0x28}, {0x20}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4f0)
sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000125bd7000fedbdf2509000000080001000100000005000800000000000500070000000800010002"], 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0xfe0, &(0x7f0000001a00)=ANY=[@ANYBLOB="e10931d8640aaaaaaaaaaaaa86dd600141000faa84"], 0x0)

23.259873969s ago: executing program 3 (id=94):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x3)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00')
preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000b40)=""/119, 0x77}], 0x1, 0x4000ffe, 0x0)

23.249385579s ago: executing program 3 (id=95):
openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x3010050, &(0x7f0000000600)=ANY=[], 0x41, 0x14fe, &(0x7f0000000700)="$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")
socket$inet6(0xa, 0x2, 0x0)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES8=r1, @ANYBLOB="05"], 0x0)

20.15018639s ago: executing program 3 (id=122):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000480), 0xfc, 0x586, &(0x7f0000000800)="$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")
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x3e, 0x0)
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x20020c0, 0x0, 0x1, 0x0, &(0x7f0000001a00))
chdir(&(0x7f0000000140)='./bus\x00')
r1 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50)
getdents(r1, 0x0, 0x0)

20.100152001s ago: executing program 3 (id=123):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4)
setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8)
sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x8000)
bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x7ff, @empty, 0x9}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8)
setsockopt$inet6_int(r2, 0x29, 0x33, &(0x7f0000000040)=0x9, 0x4)
recvmmsg(r2, &(0x7f0000004780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001500)=""/42, 0x2d}, 0x8000}], 0x400000000000305, 0x2, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20004184, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x89, 0x0, 0x2, 0x180, 0x5, 0x4, 0xf1, 0x1, 0x2, 0x2, 0x0, 0x29, 0x0, 0x6, 0x40, 0x8000000bdb], 0xa000, 0x43102})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x4, 0x1000000000, 0x5, 0x10043, 0x2000001, 0x7, 0x2004cb, 0x0, 0x6, 0xd2, 0x2, 0x9, 0x0, 0x3fe, 0x7], 0xeeee8000, 0x202})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

19.577779043s ago: executing program 3 (id=128):
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}})
read$FUSE(r0, &(0x7f00000062c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x80002, 0x0, 0x0, 0x0, 0x8001}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000042c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000970700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eeffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x0, 0x400000000000, {0x0, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0xd)
readv(r2, &(0x7f0000000380), 0x0)
syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='@'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

19.523484864s ago: executing program 33 (id=128):
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}})
read$FUSE(r0, &(0x7f00000062c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x80002, 0x0, 0x0, 0x0, 0x8001}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000042c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000970700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eeffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x0, 0x400000000000, {0x0, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0xd)
readv(r2, &(0x7f0000000380), 0x0)
syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='@'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

4.023121638s ago: executing program 0 (id=255):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x40, 0xfffff010}, {0x6}]}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newchain={0x48, 0x64, 0x100, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x1}, {0xfff2, 0xffe0}, {0xc, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0xc175}, @filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0x9, 0x8}}]}}]}, 0x48}}, 0x4090)

4.001138988s ago: executing program 0 (id=256):
prctl$PR_GET_NO_NEW_PRIVS(0x27)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x1)
io_setup(0xde2, &(0x7f0000002500)=<r1=>0x0)
r2 = timerfd_create(0x0, 0x0)
r3 = timerfd_create(0x0, 0x0)
ppoll(&(0x7f0000000700)=[{r2, 0x3041}], 0x1, 0x0, 0x0, 0x0)
r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r5 = openat$selinux_policy(0xffffff9c, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x0)
r6 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100})
write$selinux_load(r4, &(0x7f0000000000)=ANY=[], 0xffaf)
timerfd_settime(r3, 0x3, &(0x7f0000000380)={{0x0, 0x989680}}, 0x0)
timerfd_settime(r2, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0)
clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0xf6d, 0x0, 0xd, 0x7fffffff, 0x0, 0x4, 0x200000000000000, 0x0, 0x100, 0x0, 0x0, 0x9, 0x3, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x1000, 0x2000000000008, 0x9, 0x3, 0x8000000000005a, 0x3}) (fail_nth: 1)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1802000003000000000000000000000085000000410000009500000000000000ef8a6e5b8c4117ea79999675278f81725e84ebf2aff52d778412ff7c58349ea963509d4d2f35d36adfbaf0e6c43892b87f0e30153e7cee85f08bcda178536e0e04ed9109e2876ae036c6452ff6f61ee861b3f475db8e7d0ce70c4a4ba309e2116ab473880c032643362cec42d49c69e613f6db4da19022a40dcaca8faf0b9111a7658f52f2871a44e57aecf8b24ae7cd6a68ce2085b1c24980977803"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
io_submit(r1, 0x2, &(0x7f0000000040)=[&(0x7f0000002640)={0x0, 0x0, 0x0, 0x8, 0x1000, r2, 0x0}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x6, r0, &(0x7f0000000100)="03", 0x1, 0x7fffffffffffffff, 0x0, 0x1}])
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x3d)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000001740)={&(0x7f0000907000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/47, 0x2f, 0x1, &(0x7f0000000740)=""/4096, 0x1000}, &(0x7f0000001780)=0x40)
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
futex(&(0x7f000000cffc)=0x1, 0x6, 0x2, 0x0, 0x0, 0xfffffffe)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)

3.06449337s ago: executing program 0 (id=263):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x89, 0x0, 0x2, 0x180, 0x5, 0x4, 0xf1, 0x1, 0x2, 0x2, 0x0, 0x29, 0x0, 0x6, 0x40, 0x8000000bdb], 0xa000, 0x43102})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x4, 0x1000000000, 0x5, 0x10043, 0x2000001, 0x7, 0x2004cb, 0x0, 0x6, 0xd2, 0x2, 0x9, 0x0, 0x3fe, 0x7], 0xeeee8000, 0x202})
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x60000, 0xeeee0000, 0xa, 0x88, 0x0, 0xe4, 0x40, 0x0, 0x0, 0x2e, 0x80}, {0x5000, 0x4000, 0x3, 0x0, 0x42, 0x5, 0x5, 0x6, 0x5, 0x5, 0x42, 0x89}, {0xfec00000, 0x1, 0xe, 0x5, 0x3, 0x7, 0x0, 0x7, 0x3, 0x5, 0x5, 0x5}, {0x1, 0xf000, 0xd, 0x6, 0x4, 0x42, 0xb, 0xff, 0x2, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0xfd, 0x3, 0xf7, 0x83}, {0x1000, 0xc000, 0x9, 0xa0, 0xb1, 0x8, 0x2, 0xa0, 0x82, 0xf, 0x5, 0x7}, {0xeeef0000, 0xeeef0000, 0x4, 0x5, 0x7, 0xd1, 0x7, 0x3, 0x9, 0x81, 0x40, 0x70}, {0x200000, 0x4000, 0x14, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0x9, 0xb0, 0x9}, {0xffff2000, 0x30}, {0x8000000, 0x7}, 0x80010000, 0x0, 0x0, 0x2024, 0x0, 0xf401, 0x3000, [0x9, 0x100000000000204, 0x5b, 0x8]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3.02330661s ago: executing program 0 (id=264):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x1, 0xc}, 0xb, 0x1, 0x32, 0x5, 0x9, 0x7, 0x9, 0x10, 0x1, 0x1, {0xffff1c72, 0x23, 0x100007, 0x8, 0xfffffffe, 0x7583}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x44040}, 0x8000)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r6=>0x0})
sendto$packet(r0, &(0x7f00000002c0)="05031400d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) (fail_nth: 1)

2.662971589s ago: executing program 0 (id=265):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x14001, &(0x7f0000000840)={[{@noblock_validity}, {@nodiscard}]}, 0x0, 0x49b, &(0x7f0000001800)="$eJzs3MtrXFUcAODf3GTSpM/4qNqHGl9YUJsmfdiFG0XRhYKgi9qFENO01Ka2NBFsKaaK1KUU3ItLwb/AlW5EXQludS+FItk0PsAr9869Jk0ymZl0konO98G059x7Zs7rnjvnnnsnAXStoeyfSsTWiPg5Cyd59F9pkShLNzd7efz32cvjlUjT136r5Ptuzl4eL9OW79taRPYlEclHldizTL5TFy+dGZucnLhQxIenz54fnrp46anTZ8dOTZyaeGf06NFDB0eePjJ6uGEdKk3Uc1tW1t3vn9u766U3rr0yfuzaW99/2VuWdVE92mUohuqW7bF2Z9Zh2xaEK70dLAgt6YmIrLuq+fjfET0x33k74oUPO1o4YE2laZpur7/7Sgr8j1Wi0yUAOqP8or85OxD9a3QdvJHdeLZ2AZTVe6541fb0RlKkqS66vm2n/mL94tiVPz6LvP03dVX7AwDr7+ts/vNkbf5Tvmp7BuOeBem25+vB2daIOyLizoi4KyLujoidEXnaeyPivhbzH1oUXzr/TK6vqmJNyuZ/z0TEXG9E3DL/K2Z/f6eDPUVsWwzEYFQrJ09PThwo2mRfVDedrE5OjKyQxzfP//RJvX1DxdyvfGX5l3PBohzXezfd+p4TY9Njt1freTc+yNcAZ+aWzH/n71xloV0RsbvlTz/+4unz2f9f7K2XonH9V9CG+0zp5xGP1+5tXokV6r/4/uRAse/I6OHh/picODBcHhVL/fDj1Vfr5X9b9W+DrP83F/d26/T/YGXh/dqp1vO4+svHda9pWjj+j5dbsuO/r/J6Hu4rtr03Nj19YSSir/Ly0u2j859Wxsv0N7bujHhkufon+TkuO8ay+u+JiOwgvj8iHoiIB4uyPxQRD0f+EcuZmYuI75579O3V1D9p1LBtkPX/iVv6Pxr0f+uBnjPffrWa+tdk/X8oD+0rtix//usvA/lZodkCtqMNAQAAYKNL8mfgK8n+IjwQSbJ/f8SWfG13czJ5bmr6iZPn3v3zRO1Z+cGoJuVKV209uLYeOlKsDZfx0UXxg8W68ac9A3l888IrdqAjtiwc//mCY238Z37tWf49zfzeBviP8Hst6F7GP3Qv4x+6V3Pjv3gKcWZtywKsr2a//9M1Lgew/pYb/3W/5t9cj8eSgfXi+h+6l/EP3cv4h+5l/ENXup3f9Qs0CMy03Lz9sVKavvYXNU1X+/ZI8kA608F2/qv4MyzNJV678pTPxDdOXC3G3UY5ROsHOndOAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaKd/AgAA//9XstwK")
mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x208c828, 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]})

2.6376935s ago: executing program 0 (id=266):
r0 = getpid()
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
r1 = gettid()
timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=<r2=>0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
signalfd4(r4, &(0x7f0000000040)={[0x3]}, 0x8, 0x80000)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r6, 0x2)
select(0x40, &(0x7f0000000000)={0x8}, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x2})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x16c)
renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, 0x0, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
splice(r5, 0x0, r7, 0x0, 0xf3a, 0x0)
write$binfmt_misc(r7, &(0x7f0000000980), 0xfdef)
timer_settime(r2, 0x0, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x1004009, &(0x7f0000000600)=ANY=[], 0x0, 0x1517, &(0x7f0000003940)="$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")
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)

2.61613578s ago: executing program 1 (id=268):
openat$kvm(0xffffffffffffff9c, 0x0, 0x20000, 0x0)
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590)
r1 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r1, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c)
sendmmsg$unix(r1, &(0x7f0000007b80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2404c054}}], 0x1, 0x2000c080)
sendmsg(r1, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x588}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

2.465299993s ago: executing program 1 (id=269):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r0 = gettid()
process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)

2.066482962s ago: executing program 1 (id=271):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/13], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000850000001300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

2.066300772s ago: executing program 1 (id=272):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = userfaultfd(0x1)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000280))
munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000100)={&(0x7f0000ffc000/0x2000)=nil, 0x2000})
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
getpid()
syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./bus\x00', 0x800000, &(0x7f0000000300)={[{@utf8}, {@shortname_winnt}, {@shortname_win95}, {@numtail}, {@shortname_win95}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'cp775'}}, {@rodir}, {@fat=@codepage={'codepage', 0x3d, '1251'}}, {@fat=@time_offset={'time_offset', 0x3d, 0x471}}, {@shortname_win95}]}, 0x1, 0x362, &(0x7f0000000900)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)

1.946432055s ago: executing program 1 (id=273):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c02000019000100000000000000000000000000000000000000000000000001ac1414aa00000000000000000000000000000003000000000200002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000080000fdffffffffffffff00000000000000000000000000000000ffffffffffffffff00000000000000001d00000000000000000000000000000000000000000000000000000000000000dd020000000000000007000000000000010000000000000084010500e0000001000000000000000000000000000000002b00"], 0x23c}}, 0x0) (fail_nth: 2)

1.630942882s ago: executing program 1 (id=275):
openat$rtc(0xffffffffffffff9c, 0x0, 0x84402, 0x0) (async)
r0 = syz_usb_connect$uac3(0x2, 0x80, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x194f, 0x10c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x7, 0x10, 0x1, {0x8, 0xb, 0x0, 0x2, 0x1, 0x21, 0x30, 0xd6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x0, 0xa, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x7, 0xbf, 0x41, {0xa, 0x25, 0x25, 0x6, 0x76, 0xba}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x9, 0x7, 0xcd, {0xa, 0x25, 0x25, 0x7, 0x1, 0x5}}}}}}}}]}}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0})
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000040)) (async)
syz_usb_control_io$uac3(r0, &(0x7f00000002c0)={0x14, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x16, @string={0x16, 0x3, "232ea22b6ffd7cd0365e2bbfefb1edc81fa08194"}}}, 0x0)
syz_usb_control_io$uac3(r0, &(0x7f0000000740)={0x14, 0x0, &(0x7f0000000680)={0x0, 0x3, 0x20, @string={0x20, 0x3, "7ae7748ff9890351a5612873dc8de2c1ea232492613b352edd221b0c5f8e"}}}, 0x0)

1.185873782s ago: executing program 5 (id=279):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4)
setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8)
sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x8000)
bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x7ff, @empty, 0x9}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8)
setsockopt$inet6_int(r2, 0x29, 0x33, &(0x7f0000000040)=0x9, 0x4)
recvmmsg(r2, &(0x7f0000004780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001500)=""/42, 0x2d}, 0x8000}], 0x400000000000305, 0x2, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20004184, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x1008002, &(0x7f0000000d00)={[{@grpjquota}]}, 0x3, 0x5ee, &(0x7f0000000280)="$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")
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x4, 0x1000000000, 0x5, 0x10043, 0x2000001, 0x7, 0x2004cb, 0x0, 0x6, 0xd2, 0x2, 0x9, 0x0, 0x3fe, 0x7], 0xeeee8000, 0x202})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

963.310227ms ago: executing program 6 (id=282):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c02000019000100000000000000000000000000000000000000000000000001ac1414aa00000000000000000000000000000003000000000200002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000080000fdffffffffffffff00000000000000000000000000000000ffffffffffffffff00000000000000001d00000000000000000000000000000000000000000000000000000000000000dd020000000000000007000000000000010000000000000084010500e0000001000000000000000000000000000000002b0000000000000064010100000000000000000000000000000000000001ff0000000000fcffffff00000000fc02000000000000000000000000000100000000320000000000000000000000000000000000800000000000023500000000000004000000000000000000000000000000000000000000000000000001000000003c"], 0x23c}}, 0x0) (fail_nth: 2)

752.638752ms ago: executing program 5 (id=283):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c02000019000100000000000000000000000000000000000000000000000001ac1414aa00000000000000000000000000000003000000000200002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x0)

505.865898ms ago: executing program 6 (id=284):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xf)
ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x1000000000)
ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f0000000040)='\x00'/11)

468.518879ms ago: executing program 6 (id=285):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$inet6_icmp(0xa, 0x2, 0x3a)
setsockopt$inet6_int(r1, 0x29, 0x24, &(0x7f0000000240)=0x1, 0x4)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x2000005)
prctl$PR_GET_NAME(0x10, 0x0)
bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e24, 0x5, @remote, 0xc}, 0x1c)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000008c00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)="50558c", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000a80)="fb24ba96", 0xc3fd}, {0x0, 0x11}], 0x2}}], 0x2, 0x20004810)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c02000019000100000000000000000000000000000000000000000000000001ac1414aa00000000000000000000000000000003000000000200002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000080000fdffffffffffffff00000000000000000000000000000000ffffffffffffffff00000000000000001d00000000000000000000000000000000000000000000000000000000000000dd020000000000000007000000000000010000000000000084010500e0000001000000000000000000000000000000002b0000000000000064010100000000000000000000000000000000000001ff0000000000fcffffff00000000fc02000000000000000000000000000100000000320000000000000000000000000000000000800000000000023500000000000004000000000000000000000000000000000000000000000000000001000000003c00000002000000ac1414bb0000000000000000000000000000000001030000000000000700000000000000ff020000000000000000000000000001000004d53c"], 0x23c}}, 0x0)

468.191489ms ago: executing program 5 (id=286):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x89, 0x0, 0x2, 0x180, 0x5, 0x4, 0xf1, 0x1, 0x2, 0x2, 0x0, 0x29, 0x0, 0x6, 0x40, 0x8000000bdb], 0xa000, 0x43102})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x60000, 0xeeee0000, 0xa, 0x88, 0x0, 0xe4, 0x40, 0x0, 0x0, 0x2e, 0x80}, {0x5000, 0x4000, 0x3, 0x0, 0x42, 0x5, 0x5, 0x6, 0x5, 0x5, 0x42, 0x89}, {0xfec00000, 0x1, 0xe, 0x5, 0x3, 0x7, 0x0, 0x7, 0x3, 0x5, 0x5, 0x5}, {0x1, 0xf000, 0xd, 0x6, 0x4, 0x42, 0xb, 0xff, 0x2, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0xfd, 0x3, 0xf7, 0x83}, {0x1000, 0xc000, 0x9, 0xa0, 0xb1, 0x8, 0x2, 0xa0, 0x82, 0xf, 0x5, 0x7}, {0xeeef0000, 0xeeef0000, 0x4, 0x5, 0x7, 0xd1, 0x7, 0x3, 0x9, 0x81, 0x40, 0x70}, {0x200000, 0x4000, 0x14, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0x9, 0xb0, 0x9}, {0xffff2000, 0x30}, {0x8000000, 0x7}, 0x80010000, 0x0, 0x0, 0x2024, 0x0, 0xf401, 0x3000, [0x9, 0x100000000000204, 0x5b, 0x8]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

366.936661ms ago: executing program 6 (id=287):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x14001, &(0x7f0000000840)={[{@noblock_validity}, {@nodiscard}]}, 0x0, 0x49b, &(0x7f0000001800)="$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")
mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x208c828, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000140)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, 0x0, &(0x7f0000000440), 0x8, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]})

310.515832ms ago: executing program 6 (id=288):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
r1 = syz_clone(0xa4848480, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = syz_pidfd_open(r1, 0x0)
process_madvise(r2, 0x0, 0x0, 0x15, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
statx(0xffffffffffffff9c, &(0x7f0000002500)='./file0\x00', 0x6000, 0x800, &(0x7f0000002540)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
newfstatat(0xffffffffffffff9c, &(0x7f0000002640)='./file0\x00', &(0x7f0000002680)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}, 0x400)
sendmmsg$unix(r5, &(0x7f0000002740)=[{{0x0, 0x0, &(0x7f00000024c0)=[{&(0x7f0000000300)="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", 0xff}, {&(0x7f00000000c0)="b7446de532fd2f91cbb89b1de557fdd6ce59b66a38b591d5285757bacb2337ddc3b46e209a317d073c38dc061414ae97814615c432ae8004947da67a63b081bf8c4b69cad827abff98b1a2dd980f26d1f1", 0x51}], 0x2, &(0x7f0000002700)=[@cred={{0x1c, 0x1, 0x2, {r3, r6, r7}}}], 0x20, 0x8000}}], 0x1, 0x0)
recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
read$FUSE(r8, &(0x7f0000000480)={0x2020, 0x0, 0x0, <r9=>0x0, <r10=>0x0}, 0x2020)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
fchown(0xffffffffffffffff, r9, r10)

290.670573ms ago: executing program 5 (id=289):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/13], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000850000001300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

234.988364ms ago: executing program 5 (id=290):
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$RTC_UIE_ON(r0, 0x7003)
ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000140)={0x24, 0x36, 0xc, 0x13, 0xa, 0xff, 0x2, 0x3d})
syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000400)={[{@nobh}, {@nombcache}, {@resuid}, {@usrjquota}, {@data_err_ignore}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}, {@lazytime}]}, 0x1, 0x48f, &(0x7f0000000a00)="$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")

234.864274ms ago: executing program 2 (id=291):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0xc07, 0x1, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4040084}, 0xc050)
syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r0)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), r0)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r1, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000005}, 0x4)

231.971854ms ago: executing program 2 (id=292):
bpf$MAP_CREATE(0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="130000000800000008"], 0x50)

187.269215ms ago: executing program 2 (id=293):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_vlan\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15010000000000001c00128009000100766c616e000000000c00028006000100fe0f00", @ANYRES32=r1, @ANYBLOB="080004"], 0x4c}, 0x1, 0x0, 0x0, 0x280c1}, 0x8000002)

130.670576ms ago: executing program 5 (id=294):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = epoll_create1(0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001})
epoll_pwait(r4, &(0x7f0000000040)=[{}], 0x1, 0xff, 0x0, 0x2000)

128.227226ms ago: executing program 2 (id=295):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xf)
ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x1000000000)
ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f0000000040)='\x00'/11)

104.275697ms ago: executing program 2 (id=296):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000040)={[{@test_dummy_encryption}, {@data_journal}, {@norecovery}]}, 0x3, 0x481, &(0x7f00000004c0)="$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")
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0xd01ce0, 0x0, 0x82, 0x0, &(0x7f0000000080))
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000c00)='/proc/vmallocinfo\x00', 0x0, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x2a801, 0x0)
sendfile(r1, r0, 0x0, 0x80000000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000080)={0x5, 0x962f, 0x8})

54.981048ms ago: executing program 6 (id=297):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x25cd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0x10e4, 0x6, 0xfc000084, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x1c0, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xfffffffd, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0xaf, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x4, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x80004, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0x49, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x2, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xf, 0x5, 0x9, 0x7, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x10010, 0x101, 0xdd81, 0x2, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0xd, 0xfffffff7, 0x8, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26e, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x5d9, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xd4ad1185e214d3bd}}, [@NFT_MSG_NEWTABLE={0xf0, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xb9, 0x6, "4b889efcb74da27b533dfbd0ea1efd45f628135156a5960afafc3c7e73a01cf5a4b64ebfcaff9ba10db0b8625e2d04e928d0d43a070206f1b93876d97c83f7c806dfe63f13edd28b4002a1d67483e7231bf28a1990e7fe1d3258a363255060368ec5a32aef678716d0726d1bf1afc281ded28772b6451a524de9d4492a581988c3ceebeb38b1e3461a7b0bc19bfe568814131d256a4f317cc6079c0914224ce5cc48e232441425860c42e37109cbb87bc0338c10e8"}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x28, 0x14, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x207}], {0x14}}, 0x194}}, 0x0)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x1, &(0x7f0000000200)={0x11, 0x1c, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14)
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x14, 0x2, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x4}}, 0x14}}, 0x4)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)={0x14, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x48080}, 0x8000)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
unshare(0x400)
r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0)
ioctl$TIOCGSID(r4, 0x5429, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x3, 0x0, 0xd000, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r6 = dup(r5)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
r8 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x9)
syz_kvm_setup_cpu$x86(r8, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000340)="c7442400e2770000c74424020000c0fec7442406000000000f011c24361e0f01c3660fd2eff30f10f1b961020000b80e000000093a000000000030b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x51}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="f2e0239a16000000000066baf80cb8ad30d685ef66bafc0cb001ee0f12c2f3a7c4e1e1dae00f01c80f78b3c800000066b83b008ec826f30f52d7", 0x3a}], 0x1, 0x2b, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

0s ago: executing program 2 (id=298):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x14001, &(0x7f0000000840)={[{@noblock_validity}, {@nodiscard}]}, 0x0, 0x49b, &(0x7f0000001800)="$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")
mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x208c828, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000140)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, 0x0, &(0x7f0000000440), 0x8, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]})

kernel console output (not intermixed with test programs):

96][  T348] =======================================================
[   26.467996][  T348] WARNING: The mand mount option has been deprecated and
[   26.467996][  T348]          and is ignored by this kernel. Remove the mand
[   26.467996][  T348]          option from the mount to silence this warning.
[   26.467996][  T348] =======================================================
[   26.541443][  T288] EXT4-fs (loop3): unmounting filesystem.
[   26.548576][  T348] EXT4-fs: Ignoring removed bh option
[   26.779612][  T353] loop2: detected capacity change from 0 to 16
[   27.430177][   T45] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   27.436841][   T28] kauditd_printk_skb: 45 callbacks suppressed
[   27.436951][   T28] audit: type=1400 audit(1783750006.473:119): avc:  denied  { write } for  pid=343 comm="syz.1.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   27.467359][  T353] erofs: (device loop2): mounted with root inode @ nid 36.
[   27.480203][  T348] EXT4-fs: Ignoring removed mblk_io_submit option
[   27.486681][  T348] EXT4-fs: Ignoring removed bh option
[   27.492545][  T348] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   27.517321][  T359] loop1: detected capacity change from 0 to 256
[   27.530144][  T358] loop3: detected capacity change from 0 to 512
[   27.540125][  T348] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   27.553171][  T348] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   27.569433][   T28] audit: type=1400 audit(1783750007.243:120): avc:  denied  { mount } for  pid=356 comm="syz.1.12" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   27.598316][   T28] audit: type=1400 audit(1783750007.283:121): avc:  denied  { write } for  pid=345 comm="syz.4.10" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   27.598343][   T28] audit: type=1400 audit(1783750007.283:122): avc:  denied  { add_name } for  pid=345 comm="syz.4.10" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   27.598361][   T28] audit: type=1400 audit(1783750007.283:123): avc:  denied  { create } for  pid=345 comm="syz.4.10" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   27.598379][   T28] audit: type=1400 audit(1783750007.283:124): avc:  denied  { read } for  pid=345 comm="syz.4.10" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1
[   27.598405][   T28] audit: type=1400 audit(1783750007.293:125): avc:  denied  { write open } for  pid=345 comm="syz.4.10" path=2F312F6275732F0AF301 dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   27.598424][   T28] audit: type=1400 audit(1783750007.293:126): avc:  denied  { ioctl } for  pid=345 comm="syz.4.10" path=2F312F6275732F0AF301 dev="loop4" ino=18 ioctlcmd=0xf501 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   27.712256][  T358] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   29.047977][  T310] Bluetooth: hci0: Opcode 0x0c20 failed: -4
[   29.106581][  T358] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   29.472199][   T28] audit: type=1400 audit(1783750009.143:127): avc:  denied  { create } for  pid=345 comm="syz.4.10" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   29.496250][   T28] audit: type=1400 audit(1783750009.153:128): avc:  denied  { ioctl } for  pid=374 comm="syz.0.14" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=16338 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   29.522540][  T293] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0)
[   29.546951][  T293] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0)
[   29.583155][  T377] xt_hashlimit: size too large, truncated to 1048576
[   29.592237][  T380] loop0: detected capacity change from 0 to 256
[   29.604034][  T380] FAT-fs (loop0): Directory bread(block 64) failed
[   29.610982][  T380] FAT-fs (loop0): Directory bread(block 65) failed
[   29.617549][  T380] FAT-fs (loop0): Directory bread(block 66) failed
[   29.624057][  T380] FAT-fs (loop0): Directory bread(block 67) failed
[   29.630727][  T380] FAT-fs (loop0): Directory bread(block 68) failed
[   29.637284][  T380] FAT-fs (loop0): Directory bread(block 69) failed
[   29.643826][  T380] FAT-fs (loop0): Directory bread(block 70) failed
[   29.650353][  T380] FAT-fs (loop0): Directory bread(block 71) failed
[   29.657012][  T380] FAT-fs (loop0): Directory bread(block 72) failed
[   29.663517][  T380] FAT-fs (loop0): Directory bread(block 73) failed
[   29.755667][  T373] EXT4-fs (loop4): unmounting filesystem.
[   29.846080][  T381] syz.3.11 (381) used greatest stack depth: 21320 bytes left
[   29.871455][  T389] loop2: detected capacity change from 0 to 1024
[   29.889077][  T389] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   29.909121][  T389] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   30.153915][  T288] EXT4-fs (loop3): unmounting filesystem.
[   30.171496][  T294] EXT4-fs (loop2): unmounting filesystem.
[   30.265983][  T399] loop3: detected capacity change from 0 to 512
[   30.280298][  T399] EXT4-fs (loop3): orphan cleanup on readonly fs
[   30.292428][  T399] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.22: invalid indirect mapped block 28777 (level 2)
[   30.307653][  T397] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.312875][  T399] EXT4-fs (loop3): 1 truncate cleaned up
[   30.315039][  T397] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.333841][  T397] device bridge_slave_0 entered promiscuous mode
[   30.341202][  T397] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.348321][  T397] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.355899][  T397] device bridge_slave_1 entered promiscuous mode
[   30.359643][  T408] loop1: detected capacity change from 0 to 512
[   30.369154][  T399] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   30.392591][  T399] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended
[   30.398119][  T411] loop2: detected capacity change from 0 to 256
[   30.410421][  T399] EXT4-fs (loop3): re-mounted. Quota mode: none.
[   30.415137][  T408] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   30.417921][  T399] overlayfs: workdir and upperdir must reside under the same mount
[   30.433880][  T408] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   30.445552][  T411] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   30.466248][  T411] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[   30.484591][  T288] EXT4-fs (loop3): unmounting filesystem.
[   30.489114][  T411] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xcb6d32b7, utbl_chksum : 0xe619d30d)
[   30.492884][  T397] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.509356][  T397] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.513076][  T415] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   30.516646][  T397] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.534170][  T397] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.541828][  T415] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[   30.582840][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   30.591739][  T313] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.599464][  T313] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.606126][  T411] exFAT-fs (loop2): error, invalid access to FAT (entry 0x00000005) bogus content (0xffffff00)
[   30.618367][  T415] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000ff98, chksum : 0xcb6d32b7, utbl_chksum : 0xe619d30d)
[   30.630644][  T411] exFAT-fs (loop2): failed to initialize root inode
[   30.637909][  T415] exFAT-fs (loop0): error, invalid access to FAT (entry 0x00000005) bogus content (0xffffff00)
[   30.649213][  T415] exFAT-fs (loop0): failed to initialize root inode
[   30.660060][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   30.668563][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   30.676696][  T313] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.683699][  T313] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.692117][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   30.702403][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   30.760593][  T313] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.767671][  T313] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.125196][  T319] device bridge_slave_1 left promiscuous mode
[   31.138241][  T319] bridge0: port 2(bridge_slave_1) entered disabled state
[   31.182418][  T319] device bridge_slave_0 left promiscuous mode
[   31.579695][  T426] set_capacity_and_notify: 1 callbacks suppressed
[   31.579712][  T426] loop0: detected capacity change from 0 to 512
[   31.602028][  T428] loop3: detected capacity change from 0 to 256
[   31.635070][  T319] bridge0: port 1(bridge_slave_0) entered disabled state
[   31.645072][  T426] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   31.676627][  T319] device veth1_macvtap left promiscuous mode
[   31.682676][  T319] device veth0_vlan left promiscuous mode
[   31.691885][  T291] EXT4-fs (loop1): unmounting filesystem.
[   31.696359][  T426] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   31.893008][  T439] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   31.901003][  T439] device bridge_slave_0 left promiscuous mode
[   31.907311][  T439] bridge0: port 1(bridge_slave_0) entered disabled state
[   32.986069][  T342] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 217: padding at end of block bitmap is not set
[   33.034029][  T439] device bridge_slave_1 left promiscuous mode
[   33.039683][  T455] loop3: detected capacity change from 0 to 512
[   33.040322][  T439] bridge0: port 2(bridge_slave_1) entered disabled state
[   33.058810][  T441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.33'.
[   33.508380][  T441] device vlan2 entered promiscuous mode
[   33.535216][  T449] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[   33.544649][  T449] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[   33.592300][  T455] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   33.610598][  T397] device veth0_vlan entered promiscuous mode
[   33.625886][  T455] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   33.656665][  T397] device veth1_macvtap entered promiscuous mode
[   33.676206][  T439] xt_hashlimit: max too large, truncated to 1048576
[   33.785205][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   33.794960][  T287] EXT4-fs (loop0): unmounting filesystem.
[   33.847646][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   33.898301][   T28] kauditd_printk_skb: 18 callbacks suppressed
[   33.898336][   T28] audit: type=1400 audit(1783750013.593:147): avc:  denied  { create } for  pid=464 comm="syz.0.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   33.925306][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   33.981464][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   34.098571][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   34.107099][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   34.115483][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   34.123586][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   34.131917][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   34.140716][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   34.149111][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   34.169262][  T465] xt_hashlimit: max too large, truncated to 1048576
[   34.177420][  T471] loop0: detected capacity change from 0 to 512
[   34.184208][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   34.211391][  T471] EXT4-fs: Ignoring removed nobh option
[   34.227327][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   34.248264][  T471] fscrypt (loop0, inode 2): Error -61 getting encryption context
[   34.265967][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   34.275831][  T471] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -61
[   34.304625][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   34.314534][  T471] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #13: comm syz.0.37: inode has both inline data and extents flags
[   34.337258][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   34.364999][  T471] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.37: couldn't read orphan inode 13 (err -117)
[   34.378970][  T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   34.406478][  T471] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   34.417405][  T460] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   34.458647][  T471] fscrypt (loop0, inode 2): Error -61 getting encryption context
[   34.486454][  T471] fscrypt (loop0, inode 2): Error -61 getting encryption context
[   34.496679][  T460] device bridge_slave_0 left promiscuous mode
[   34.502822][  T460] bridge0: port 1(bridge_slave_0) entered disabled state
[   34.516513][  T471] fscrypt (loop0, inode 2): Error -61 getting encryption context
[   34.556858][  T287] EXT4-fs (loop0): unmounting filesystem.
[   34.586251][  T460] device bridge_slave_1 left promiscuous mode
[   34.592422][  T460] bridge0: port 2(bridge_slave_1) entered disabled state
[   34.601868][  T474] loop0: detected capacity change from 0 to 512
[   34.625983][  T474] EXT4-fs: Ignoring removed nobh option
[   34.636509][  T466] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[   34.645917][  T466] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[   34.667246][  T474] fscrypt (loop0, inode 2): Error -61 getting encryption context
[   34.695277][  T474] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -61
[   34.713033][   T28] audit: type=1400 audit(1783750014.403:148): avc:  denied  { mounton } for  pid=478 comm="syz.5.39" path="/1/file0" dev="tmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   34.744095][  T288] EXT4-fs (loop3): unmounting filesystem.
[   34.782151][  T474] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #13: comm syz.0.38: inode has both inline data and extents flags
[   34.813431][  T474] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.38: couldn't read orphan inode 13 (err -117)
[   34.838315][  T474] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   34.863222][  T483] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=483 comm=syz.3.40
[   34.877660][   T28] audit: type=1400 audit(1783750014.573:149): avc:  denied  { create } for  pid=480 comm="syz.3.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   34.884453][  T474] fscrypt (loop0, inode 2): Error -61 getting encryption context
[   34.915724][   T28] audit: type=1400 audit(1783750014.593:150): avc:  denied  { read } for  pid=480 comm="syz.3.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   34.956096][  T474] fscrypt (loop0, inode 2): Error -61 getting encryption context
[   34.971042][  T474] fscrypt (loop0, inode 2): Error -61 getting encryption context
[   35.002794][  T287] EXT4-fs (loop0): unmounting filesystem.
[   35.147548][  T491] loop2: detected capacity change from 0 to 512
[   35.173001][  T491] EXT4-fs: Ignoring removed nobh option
[   35.201861][  T491] fscrypt (loop2, inode 2): Error -61 getting encryption context
[   35.213319][  T491] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -61
[   35.227638][  T491] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #13: comm syz.2.43: inode has both inline data and extents flags
[   35.248419][  T491] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.43: couldn't read orphan inode 13 (err -117)
[   35.270446][  T491] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   35.303526][  T491] fscrypt (loop2, inode 2): Error -61 getting encryption context
[   35.321829][  T294] EXT4-fs (loop2): unmounting filesystem.
[   35.349039][  T496] syz.0.45 (496) used greatest stack depth: 21096 bytes left
[   35.372228][  T500] xt_hashlimit: size too large, truncated to 1048576
[   35.481152][  T504] loop0: detected capacity change from 0 to 1024
[   35.509385][  T504] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   35.519375][   T28] audit: type=1400 audit(1783750015.213:151): avc:  denied  { ioctl } for  pid=519 comm="syz.1.54" path="socket:[16995]" dev="sockfs" ino=16995 ioctlcmd=0x48de scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   35.556050][  T524] loop1: detected capacity change from 0 to 512
[   35.563789][  T504] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   35.601370][  T524] EXT4-fs: Ignoring removed nobh option
[   35.643455][  T524] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -61
[   35.663238][  T287] EXT4-fs (loop0): unmounting filesystem.
[   35.669119][  T524] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #13: comm syz.1.56: inode has both inline data and extents flags
[   35.694006][  T524] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.56: couldn't read orphan inode 13 (err -117)
[   35.710502][  T535] loop0: detected capacity change from 0 to 512
[   35.716124][  T524] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   35.749722][  T291] EXT4-fs (loop1): unmounting filesystem.
[   35.749944][  T535] EXT4-fs (loop0): orphan cleanup on readonly fs
[   35.762628][  T535] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.59: invalid indirect mapped block 28777 (level 2)
[   35.777016][  T535] EXT4-fs (loop0): 1 truncate cleaned up
[   35.785793][  T535] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   35.793693][  T539] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   35.832930][  T542] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   35.840512][  T535] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended
[   35.854189][  T535] EXT4-fs (loop0): re-mounted. Quota mode: none.
[   35.862274][  T535] overlayfs: workdir and upperdir must reside under the same mount
[   35.884657][  T287] EXT4-fs (loop0): unmounting filesystem.
[   35.946363][  T543] xt_hashlimit: max too large, truncated to 1048576
[   35.966571][  T551] xt_hashlimit: max too large, truncated to 1048576
[   35.979754][   T28] audit: type=1400 audit(1783750015.673:152): avc:  denied  { write } for  pid=552 comm="syz.0.64" name="001" dev="devtmpfs" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   35.990804][  T553] FAULT_INJECTION: forcing a failure.
[   35.990804][  T553] name failslab, interval 1, probability 0, space 0, times 1
[   36.022894][  T553] CPU: 0 PID: 553 Comm: syz.0.64 Not tainted syzkaller #0
[   36.030037][  T553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   36.040103][  T553] Call Trace:
[   36.040381][   T28] audit: type=1400 audit(1783750015.673:153): avc:  denied  { map } for  pid=552 comm="syz.0.64" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   36.043378][  T553]  <TASK>
[   36.043384][  T553]  __dump_stack+0x21/0x24
[   36.074287][  T553]  dump_stack_lvl+0x110/0x170
[   36.078967][  T553]  ? __cfi_dump_stack_lvl+0x8/0x8
[   36.083990][  T553]  ? stack_trace_save+0xa6/0xf0
[   36.088837][  T553]  dump_stack+0x15/0x24
[   36.092991][  T553]  should_fail_ex+0x3bf/0x510
[   36.097664][  T553]  __should_failslab+0xac/0xf0
[   36.102428][  T553]  should_failslab+0x9/0x20
[   36.106931][  T553]  __kmem_cache_alloc_node+0x3d/0x2d0
[   36.112302][  T553]  ? __get_vm_area_node+0x12c/0x360
[   36.117497][  T553]  ? __x64_sys_clone+0x193/0x200
[   36.122435][  T553]  ? x64_sys_call+0x990/0x9a0
[   36.127114][  T553]  ? do_syscall_64+0x4c/0xa0
[   36.131707][  T553]  ? __get_vm_area_node+0x12c/0x360
[   36.136903][  T553]  kmalloc_node_trace+0x26/0xb0
[   36.141764][  T553]  __get_vm_area_node+0x12c/0x360
[   36.146788][  T553]  __vmalloc_node_range+0x326/0x1440
[   36.152073][  T553]  ? copy_process+0x5e7/0x3500
[   36.156839][  T553]  ? dup_task_struct+0x5a/0x7e0
[   36.161683][  T553]  ? kasan_save_alloc_info+0x1f/0x30
[   36.166962][  T553]  ? __kasan_slab_alloc+0x72/0x80
[   36.171985][  T553]  ? __cfi___vmalloc_node_range+0x10/0x10
[   36.177699][  T553]  ? __slab_alloc+0x6b/0xa0
[   36.182201][  T553]  ? arch_dup_task_struct+0x42/0xc0
[   36.187403][  T553]  ? memcpy+0x56/0x70
[   36.191382][  T553]  dup_task_struct+0x3ae/0x7e0
[   36.196145][  T553]  ? copy_process+0x5e7/0x3500
[   36.200911][  T553]  ? __kasan_check_write+0x14/0x20
[   36.206027][  T553]  copy_process+0x5e7/0x3500
[   36.210621][  T553]  ? __cfi_kstrtouint_from_user+0x10/0x10
[   36.216339][  T553]  ? __kasan_check_write+0x14/0x20
[   36.221447][  T553]  ? idle_dummy+0x10/0x10
[   36.225778][  T553]  kernel_clone+0x22f/0x7f0
[   36.230279][  T553]  ? __cfi_kernel_clone+0x10/0x10
[   36.235302][  T553]  ? __kasan_check_write+0x14/0x20
[   36.240411][  T553]  ? mutex_unlock+0x8f/0x230
[   36.245005][  T553]  __x64_sys_clone+0x193/0x200
[   36.249773][  T553]  ? __cfi___x64_sys_clone+0x10/0x10
[   36.255066][  T553]  ? fpregs_assert_state_consistent+0xb1/0xe0
[   36.261135][  T553]  x64_sys_call+0x990/0x9a0
[   36.265635][  T553]  do_syscall_64+0x4c/0xa0
[   36.270043][  T553]  ? clear_bhb_loop+0x30/0x80
[   36.274711][  T553]  ? clear_bhb_loop+0x30/0x80
[   36.279395][  T553]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   36.285288][  T553] RIP: 0033:0x7fb689d9de59
[   36.289707][  T553] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   36.309308][  T553] RSP: 002b:00007fb68ad3ffd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[   36.317735][  T553] RAX: ffffffffffffffda RBX: 00007fb68a025fa0 RCX: 00007fb689d9de59
[   36.325711][  T553] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011
[   36.333684][  T553] RBP: 00007fb68ad40090 R08: 0000000000000000 R09: 0000000000000000
[   36.341657][  T553] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001
[   36.349631][  T553] R13: 00007fb68a026038 R14: 00007fb68a025fa0 R15: 00007ffd86edc568
[   36.357604][  T553]  </TASK>
[   36.368954][  T553] syz.0.64: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0
[   36.383965][  T553] CPU: 0 PID: 553 Comm: syz.0.64 Not tainted syzkaller #0
[   36.391082][  T553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   36.401133][  T553] Call Trace:
[   36.404407][  T553]  <TASK>
[   36.407335][  T553]  __dump_stack+0x21/0x24
[   36.411669][  T553]  dump_stack_lvl+0x110/0x170
[   36.416347][  T553]  ? __cfi_dump_stack_lvl+0x8/0x8
[   36.421372][  T553]  ? pr_cont_kernfs_name+0x133/0x160
[   36.426660][  T553]  dump_stack+0x15/0x24
[   36.430817][  T553]  warn_alloc+0x1dc/0x200
[   36.435149][  T553]  ? should_failslab+0x9/0x20
[   36.439823][  T553]  ? __cfi_warn_alloc+0x10/0x10
[   36.444675][  T553]  ? kmalloc_node_trace+0x3d/0xb0
[   36.449698][  T553]  ? __get_vm_area_node+0x353/0x360
[   36.454897][  T553]  __vmalloc_node_range+0x34b/0x1440
[   36.460180][  T553]  ? dup_task_struct+0x5a/0x7e0
[   36.465030][  T553]  ? kasan_save_alloc_info+0x1f/0x30
[   36.470312][  T553]  ? __kasan_slab_alloc+0x72/0x80
[   36.475341][  T553]  ? __cfi___vmalloc_node_range+0x10/0x10
[   36.481058][  T553]  ? __slab_alloc+0x6b/0xa0
[   36.485564][  T553]  ? arch_dup_task_struct+0x42/0xc0
[   36.490765][  T553]  ? memcpy+0x56/0x70
[   36.494741][  T553]  dup_task_struct+0x3ae/0x7e0
[   36.499496][  T553]  ? copy_process+0x5e7/0x3500
[   36.504261][  T553]  ? __kasan_check_write+0x14/0x20
[   36.509367][  T553]  copy_process+0x5e7/0x3500
[   36.513960][  T553]  ? __cfi_kstrtouint_from_user+0x10/0x10
[   36.519679][  T553]  ? __kasan_check_write+0x14/0x20
[   36.524788][  T553]  ? idle_dummy+0x10/0x10
[   36.529125][  T553]  kernel_clone+0x22f/0x7f0
[   36.533629][  T553]  ? __cfi_kernel_clone+0x10/0x10
[   36.538654][  T553]  ? __kasan_check_write+0x14/0x20
[   36.543766][  T553]  ? mutex_unlock+0x8f/0x230
[   36.548355][  T553]  __x64_sys_clone+0x193/0x200
[   36.553120][  T553]  ? __cfi___x64_sys_clone+0x10/0x10
[   36.558442][  T553]  ? fpregs_assert_state_consistent+0xb1/0xe0
[   36.564516][  T553]  x64_sys_call+0x990/0x9a0
[   36.569017][  T553]  do_syscall_64+0x4c/0xa0
[   36.573505][  T553]  ? clear_bhb_loop+0x30/0x80
[   36.578176][  T553]  ? clear_bhb_loop+0x30/0x80
[   36.582846][  T553]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   36.588741][  T553] RIP: 0033:0x7fb689d9de59
[   36.593150][  T553] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   36.612754][  T553] RSP: 002b:00007fb68ad3ffd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[   36.621169][  T553] RAX: ffffffffffffffda RBX: 00007fb68a025fa0 RCX: 00007fb689d9de59
[   36.629140][  T553] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011
[   36.637108][  T553] RBP: 00007fb68ad40090 R08: 0000000000000000 R09: 0000000000000000
[   36.645075][  T553] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001
[   36.653040][  T553] R13: 00007fb68a026038 R14: 00007fb68a025fa0 R15: 00007ffd86edc568
[   36.661010][  T553]  </TASK>
[   36.679071][  T553] Mem-Info:
[   36.683246][  T553] active_anon:10390 inactive_anon:0 isolated_anon:0
[   36.683246][  T553]  active_file:6100 inactive_file:2297 isolated_file:0
[   36.683246][  T553]  unevictable:0 dirty:1567 writeback:10
[   36.683246][  T553]  slab_reclaimable:7773 slab_unreclaimable:72479
[   36.683246][  T553]  mapped:29200 shmem:177 pagetables:655
[   36.683246][  T553]  sec_pagetables:0 bounce:0
[   36.683246][  T553]  kernel_misc_reclaimable:0
[   36.683246][  T553]  free:1527987 free_pcp:10071 free_cma:0
[   36.729840][  T553] Node 0 active_anon:41860kB inactive_anon:0kB active_file:24400kB inactive_file:9188kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116800kB dirty:6268kB writeback:40kB shmem:708kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:4496kB pagetables:2620kB sec_pagetables:0kB all_unreclaimable? no
[   36.769232][  T553] DMA32 free:2966484kB boost:0kB min:31276kB low:39092kB high:46908kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2971892kB mlocked:0kB bounce:0kB free_pcp:5408kB local_pcp:56kB free_cma:0kB
[   36.802022][   T28] audit: type=1400 audit(1783750016.493:154): avc:  denied  { read } for  pid=565 comm="syz.3.70" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   36.806107][  T553] lowmem_reserve[]: 0 3932 3932 3932
[   36.837006][  T553] Normal free:3144204kB boost:0kB min:42448kB low:53060kB high:63672kB reserved_highatomic:0KB active_anon:43060kB inactive_anon:0kB active_file:24400kB inactive_file:9188kB unevictable:0kB writepending:6308kB present:5242880kB managed:4026400kB mlocked:0kB bounce:0kB free_pcp:34360kB local_pcp:21908kB free_cma:0kB
[   36.876047][   T28] audit: type=1400 audit(1783750016.493:155): avc:  denied  { open } for  pid=565 comm="syz.3.70" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   36.899376][  T553] lowmem_reserve[]: 0 0 0 0
[   36.912318][  T553] DMA32: 3*4kB (M) 1*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 2*1024kB (UM) 2*2048kB (M) 722*4096kB (M) = 2966484kB
[   36.946202][  T553] Normal: 3*4kB (UME) 2*8kB (UM) 2*16kB (UE) 1*32kB (M) 3*64kB (M) 22*128kB (ME) 8*256kB (ME) 9*512kB (UME) 4*1024kB (UM) 0*2048kB 764*4096kB (M) = 3143196kB
[   36.957625][   T28] audit: type=1400 audit(1783750016.493:156): avc:  denied  { read write } for  pid=565 comm="syz.3.70" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   36.979557][  T553] 8564 total pagecache pages
[   37.017561][  T553] 0 pages in swap cache
[   37.035025][  T553] Free swap  = 124428kB
[   37.050438][  T553] Total swap = 124996kB
[   37.063806][  T553] 2097051 pages RAM
[   37.076847][  T553] 0 pages HighMem/MovableOnly
[   37.085670][    T6] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[   37.100316][  T553] 347478 pages reserved
[   37.114603][  T553] 0 pages cma reserved
[   37.276711][    T6] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   37.295658][    T6] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[   37.315652][    T6] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   37.335004][  T572] loop0: detected capacity change from 0 to 1024
[   37.347065][    T6] usb 4-1: New USB device found, idVendor=0582, idProduct=0145, bcdDevice= 0.40
[   37.357074][  T572] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   37.372629][    T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   37.396021][  T572] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   37.407696][  T577] loop5: detected capacity change from 0 to 512
[   37.425110][    T6] usb 4-1: Product: syz
[   37.431313][    T6] usb 4-1: Manufacturer: syz
[   37.445624][    T6] usb 4-1: SerialNumber: syz
[   37.467551][  T577] EXT4-fs (loop5): orphan cleanup on readonly fs
[   37.474148][  T577] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.73: invalid indirect mapped block 28777 (level 2)
[   37.480171][  T567] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   37.490009][  T581] loop2: detected capacity change from 0 to 256
[   37.545537][  T577] EXT4-fs (loop5): 1 truncate cleaned up
[   37.558775][  T577] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[   37.570246][  T577] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended
[   37.581497][  T577] EXT4-fs (loop5): re-mounted. Quota mode: none.
[   37.588833][  T577] overlayfs: workdir and upperdir must reside under the same mount
[   37.604167][  T397] EXT4-fs (loop5): unmounting filesystem.
[   37.610656][  T287] EXT4-fs (loop0): unmounting filesystem.
[   37.973307][    T6] usb 4-1: MIDIStreaming interface descriptor not found
[   37.977320][  T611] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=611 comm=syz.0.85
[   37.992072][    T6] usb 4-1: USB disconnect, device number 2
[   38.075709][  T451] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   38.255812][  T451] usb 6-1: Using ep0 maxpacket: 16
[   38.264888][  T451] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   38.275281][  T451] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[   38.279630][  T614] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   38.285823][  T451] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   38.293069][  T614] device bridge_slave_0 left promiscuous mode
[   38.300869][  T451] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   38.307275][  T614] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.314927][  T451] usb 6-1: Product: syz
[   38.326011][  T451] usb 6-1: Manufacturer: syz
[   38.326538][  T614] device bridge_slave_1 left promiscuous mode
[   38.330637][  T451] usb 6-1: SerialNumber: syz
[   38.337508][  T614] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.411844][  T615] xt_hashlimit: max too large, truncated to 1048576
[   38.548852][  T623] loop1: detected capacity change from 0 to 256
[   38.556554][  T451] usb 6-1: 0:2 : does not exist
[   38.569862][  T451] usb 6-1: 5:0: failed to get current value for ch 0 (-22)
[   38.583177][  T623] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   38.595734][  T623] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[   38.619462][  T451] usb 6-1: USB disconnect, device number 2
[   38.629465][  T625] loop2: detected capacity change from 0 to 256
[   38.636052][  T623] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xcb6d32b7, utbl_chksum : 0xe619d30d)
[   38.649878][  T625] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   38.661429][  T625] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[   38.669968][  T623] exFAT-fs (loop1): error, invalid access to FAT (entry 0x00000005) bogus content (0xffffff00)
[   38.680442][  T623] exFAT-fs (loop1): failed to initialize root inode
[   38.688346][  T625] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xcb6d32b7, utbl_chksum : 0xe619d30d)
[   38.710631][  T625] exFAT-fs (loop2): error, invalid access to FAT (entry 0x00000005) bogus content (0xffffff00)
[   38.721063][  T625] exFAT-fs (loop2): failed to initialize root inode
[   38.816803][  T631] overlayfs: failed to resolve './file0': -2
[   38.856558][  T607] udevd[607]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   38.996566][  T641] netlink: 8 bytes leftover after parsing attributes in process `syz.0.96'.
[   39.019809][  T642] loop3: detected capacity change from 0 to 256
[   39.026820][  T642] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   39.038236][  T642] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[   39.048124][  T642] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[   39.295665][   T60] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[   39.325678][  T451] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   39.475855][  T451] usb 4-1: device descriptor read/64, error -71
[   39.483880][   T60] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   39.500961][   T60] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[   39.512131][   T60] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   39.547206][   T60] usb 1-1: New USB device found, idVendor=0582, idProduct=0145, bcdDevice= 0.40
[   39.602682][   T60] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   39.611672][   T60] usb 1-1: Product: syz
[   39.617230][   T60] usb 1-1: Manufacturer: syz
[   39.625431][   T60] usb 1-1: SerialNumber: syz
[   39.631363][  T645] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   39.655175][  T657] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=657 comm=syz.5.100
[   39.765652][  T451] usb 4-1: device descriptor read/64, error -71
[   39.844157][   T60] usb 1-1: MIDIStreaming interface descriptor not found
[   39.853154][   T60] usb 1-1: USB disconnect, device number 2
[   39.862068][  T340] udevd[340]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   40.035654][  T451] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   40.135956][   T28] kauditd_printk_skb: 8 callbacks suppressed
[   40.135969][   T28] audit: type=1400 audit(1783750019.833:165): avc:  denied  { read write } for  pid=660 comm="syz.1.102" name="vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   40.165881][   T28] audit: type=1400 audit(1783750019.833:166): avc:  denied  { open } for  pid=660 comm="syz.1.102" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   40.189699][  T451] usb 4-1: device descriptor read/64, error -71
[   40.196311][   T28] audit: type=1400 audit(1783750019.833:167): avc:  denied  { ioctl } for  pid=660 comm="syz.1.102" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   40.214206][  T664] loop1: detected capacity change from 0 to 512
[   40.246377][  T664] EXT4-fs (loop1): orphan cleanup on readonly fs
[   40.248216][  T667] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   40.253057][  T664] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.103: invalid indirect mapped block 28777 (level 2)
[   40.274616][  T664] EXT4-fs (loop1): 1 truncate cleaned up
[   40.280338][  T664] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   40.288986][   T28] audit: type=1400 audit(1783750019.983:168): avc:  denied  { mount } for  pid=663 comm="syz.1.103" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   40.320547][  T664] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended
[   40.330307][   T28] audit: type=1400 audit(1783750020.013:169): avc:  denied  { remount } for  pid=663 comm="syz.1.103" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   40.338020][  T668] xt_hashlimit: max too large, truncated to 1048576
[   40.370920][  T664] EXT4-fs (loop1): re-mounted. Quota mode: none.
[   40.381133][  T670] overlayfs: upper fs is r/o, try multi-lower layers mount
[   40.420374][   T28] audit: type=1400 audit(1783750020.113:170): avc:  denied  { unmount } for  pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   40.440559][  T291] EXT4-fs (loop1): unmounting filesystem.
[   40.485679][  T451] usb 4-1: device descriptor read/64, error -71
[   40.563490][  T687] loop5: detected capacity change from 0 to 1024
[   40.570800][  T682] loop1: detected capacity change from 0 to 1024
[   40.577558][  T687] EXT4-fs: Ignoring removed bh option
[   40.583747][  T682] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   40.592794][  T687] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   40.607764][  T682] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   40.616787][  T451] usb usb4-port1: attempt power cycle
[   40.636226][  T687] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[   40.656277][  T687] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   40.669285][   T28] audit: type=1400 audit(1783750020.353:171): avc:  denied  { read write } for  pid=686 comm="syz.5.110" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   40.702465][   T28] audit: type=1400 audit(1783750020.353:172): avc:  denied  { open } for  pid=686 comm="syz.5.110" path="/10/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   40.732337][  T291] EXT4-fs (loop1): unmounting filesystem.
[   40.738822][  T397] EXT4-fs (loop5): unmounting filesystem.
[   40.758818][   T28] audit: type=1400 audit(1783750020.383:173): avc:  denied  { setattr } for  pid=686 comm="syz.5.110" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   40.782326][  T694] loop1: detected capacity change from 0 to 256
[   41.035746][  T451] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   41.066923][  T451] usb 4-1: device descriptor read/8, error -71
[   41.216805][  T451] usb 4-1: device descriptor read/8, error -71
[   41.297007][    T8] Bluetooth: hci0: Frame reassembly failed (-84)
[   41.305679][   T19] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[   41.486665][   T19] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   41.495644][  T451] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   41.496924][   T19] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[   41.515109][   T19] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   41.529359][   T19] usb 3-1: New USB device found, idVendor=0582, idProduct=0145, bcdDevice= 0.40
[   41.536665][  T451] usb 4-1: device descriptor read/8, error -71
[   41.538611][   T19] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   41.552700][   T19] usb 3-1: Product: syz
[   41.556874][   T19] usb 3-1: Manufacturer: syz
[   41.561460][   T19] usb 3-1: SerialNumber: syz
[   41.567222][  T703] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   41.686657][  T451] usb 4-1: device descriptor read/8, error -71
[   41.777446][  T703] binder: BINDER_SET_CONTEXT_MGR already set
[   41.783461][  T703] binder: 702:703 ioctl 4018620d 200000000180 returned -16
[   41.799551][  T713] EXT4-fs (loop1): orphan cleanup on readonly fs
[   41.805872][  T451] usb usb4-port1: unable to enumerate USB device
[   41.812648][   T19] usb 3-1: MIDIStreaming interface descriptor not found
[   41.814106][  T713] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.118: invalid indirect mapped block 28777 (level 2)
[   41.829135][   T19] usb 3-1: USB disconnect, device number 2
[   41.835857][  T713] EXT4-fs (loop1): 1 truncate cleaned up
[   41.844505][  T713] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   41.860121][  T713] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended
[   41.869704][  T713] EXT4-fs (loop1): re-mounted. Quota mode: none.
[   41.876688][  T713] overlayfs: workdir and upperdir must reside under the same mount
[   41.889144][  T291] EXT4-fs (loop1): unmounting filesystem.
[   41.954065][  T724] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=724 comm=syz.1.119
[   42.036730][   T28] audit: type=1400 audit(1783750021.733:174): avc:  denied  { unmount } for  pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   42.062404][  T723] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   42.075779][  T723] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   42.079193][  T727] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   42.088156][  T723] EXT4-fs (loop5): 1 truncate cleaned up
[   42.099995][  T723] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[   42.120302][  T723] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.121: bg 0: block 4: invalid block bitmap
[   42.136474][  T288] EXT4-fs error (device loop3): ext4_read_inline_dir:1611: inode #12: block 7: comm syz-executor: path /16/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[   42.159218][  T397] EXT4-fs (loop5): unmounting filesystem.
[   42.159255][  T288] EXT4-fs error (device loop3): ext4_read_inline_dir:1611: inode #12: block 7: comm syz-executor: path /16/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[   42.187464][  T288] EXT4-fs error (device loop3): empty_inline_dir:1895: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[   42.209629][  T288] EXT4-fs warning (device loop3): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   42.224053][  T288] EXT4-fs error (device loop3): ext4_read_inline_dir:1611: inode #12: block 7: comm syz-executor: path /16/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[   42.253950][  T288] EXT4-fs error (device loop3): ext4_read_inline_dir:1611: inode #12: block 7: comm syz-executor: path /16/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[   42.276343][  T288] EXT4-fs error (device loop3): empty_inline_dir:1895: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[   42.296563][  T288] EXT4-fs warning (device loop3): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   42.311085][  T288] EXT4-fs error (device loop3): ext4_read_inline_dir:1611: inode #12: block 7: comm syz-executor: path /16/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[   42.335671][  T738] set_capacity_and_notify: 3 callbacks suppressed
[   42.335686][  T738] loop2: detected capacity change from 0 to 256
[   42.345845][  T288] EXT4-fs error (device loop3): ext4_read_inline_dir:1611: inode #12: block 7: comm syz-executor: path /16/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[   42.370926][  T288] EXT4-fs error (device loop3): empty_inline_dir:1895: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[   42.390957][  T288] EXT4-fs warning (device loop3): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   42.414922][  T288] EXT4-fs error (device loop3): ext4_read_inline_dir:1611: inode #12: block 7: comm syz-executor: path /16/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[   42.430000][  T740] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   42.439508][  T288] EXT4-fs warning (device loop3): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   42.461090][  T288] EXT4-fs warning (device loop3): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   42.479099][  T288] EXT4-fs warning (device loop3): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   42.494391][  T288] EXT4-fs warning (device loop3): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   42.509546][  T288] EXT4-fs warning (device loop3): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   42.524091][  T743] xt_hashlimit: max too large, truncated to 1048576
[   42.531422][  T288] EXT4-fs warning (device loop3): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   42.547240][  T288] EXT4-fs warning (device loop3): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   42.638576][  T732] EXT4-fs (loop3): unmounting filesystem.
[   42.749233][  T748] overlayfs: failed to resolve './file0': -2
[   42.842201][  T752] loop1: detected capacity change from 0 to 256
[   42.855265][  T752] FAT-fs (loop1): Directory bread(block 64) failed
[   42.862149][  T752] FAT-fs (loop1): Directory bread(block 65) failed
[   42.868735][  T752] FAT-fs (loop1): Directory bread(block 66) failed
[   42.875278][  T752] FAT-fs (loop1): Directory bread(block 67) failed
[   42.881847][  T752] FAT-fs (loop1): Directory bread(block 68) failed
[   42.888370][  T752] FAT-fs (loop1): Directory bread(block 69) failed
[   42.894902][  T752] FAT-fs (loop1): Directory bread(block 70) failed
[   42.901448][  T752] FAT-fs (loop1): Directory bread(block 71) failed
[   42.907989][  T752] FAT-fs (loop1): Directory bread(block 72) failed
[   42.914499][  T752] FAT-fs (loop1): Directory bread(block 73) failed
[   42.951877][  T751] bridge0: port 1(bridge_slave_0) entered blocking state
[   42.959073][  T751] bridge0: port 1(bridge_slave_0) entered disabled state
[   42.966896][  T751] device bridge_slave_0 entered promiscuous mode
[   42.975942][  T751] bridge0: port 2(bridge_slave_1) entered blocking state
[   42.983026][  T751] bridge0: port 2(bridge_slave_1) entered disabled state
[   42.991005][  T751] device bridge_slave_1 entered promiscuous mode
[   43.052001][  T751] bridge0: port 2(bridge_slave_1) entered blocking state
[   43.059073][  T751] bridge0: port 2(bridge_slave_1) entered forwarding state
[   43.066358][  T751] bridge0: port 1(bridge_slave_0) entered blocking state
[   43.073380][  T751] bridge0: port 1(bridge_slave_0) entered forwarding state
[   43.100507][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   43.108191][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   43.115572][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   43.130715][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   43.139045][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   43.146105][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   43.153689][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   43.162303][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   43.169369][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   43.182083][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   43.195081][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   43.210264][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   43.220286][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   43.228628][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   43.236333][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   43.246064][  T751] device veth0_vlan entered promiscuous mode
[   43.256038][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   43.264918][  T751] device veth1_macvtap entered promiscuous mode
[   43.274042][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   43.283897][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   43.320127][  T319] device veth1_macvtap left promiscuous mode
[   43.329075][  T762] loop2: detected capacity change from 0 to 512
[   43.332547][  T319] device veth0_vlan left promiscuous mode
[   43.341358][   T45] Bluetooth: hci0: command 0x1003 tx timeout
[   43.345794][  T312] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   43.354188][  T708] Bluetooth: hci0: Opcode 0x0c20 failed: -22
[   43.381171][  T762] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   43.390181][  T770] loop0: detected capacity change from 0 to 256
[   43.408927][  T762] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   43.744627][  T294] EXT4-fs (loop2): unmounting filesystem.
[   43.767487][  T785] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=785 comm=syz.2.140
[   43.819021][  T790] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   43.830678][  T790] device bridge_slave_0 left promiscuous mode
[   43.837301][  T790] bridge0: port 1(bridge_slave_0) entered disabled state
[   43.845098][  T790] device bridge_slave_1 left promiscuous mode
[   43.853237][  T790] bridge0: port 2(bridge_slave_1) entered disabled state
[   43.875756][   T19] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[   43.919184][  T794] xt_hashlimit: max too large, truncated to 1048576
[   44.065638][  T451] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   44.066695][   T19] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   44.083401][   T19] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[   44.094347][   T19] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   44.108917][   T19] usb 6-1: New USB device found, idVendor=0582, idProduct=0145, bcdDevice= 0.40
[   44.118119][   T19] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   44.126177][   T19] usb 6-1: Product: syz
[   44.130454][   T19] usb 6-1: Manufacturer: syz
[   44.135075][   T19] usb 6-1: SerialNumber: syz
[   44.144706][  T767] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[   44.245625][  T451] usb 2-1: Using ep0 maxpacket: 16
[   44.252524][  T451] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   44.268497][  T800] loop6: detected capacity change from 0 to 1024
[   44.275962][  T451] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   44.291858][  T800] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   44.302353][  T800] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[   44.305761][  T451] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   44.329721][  T451] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   44.337902][  T451] usb 2-1: Product: syz
[   44.342074][  T451] usb 2-1: Manufacturer: syz
[   44.347332][  T451] usb 2-1: SerialNumber: syz
[   44.354099][  T767] binder: BINDER_SET_CONTEXT_MGR already set
[   44.373748][  T767] binder: 766:767 ioctl 4018620d 200000000180 returned -16
[   44.432477][  T751] EXT4-fs (loop6): unmounting filesystem.
[   44.447148][  T807] netlink: 44 bytes leftover after parsing attributes in process `syz.6.147'.
[   44.473470][  T319] Bluetooth: hci0: Frame reassembly failed (-84)
[   44.575714][  T451] usb 2-1: 0:2 : does not exist
[   44.583118][  T451] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[   44.594640][   T19] usb 6-1: MIDIStreaming interface descriptor not found
[   44.603631][  T451] usb 2-1: USB disconnect, device number 2
[   44.612513][   T19] usb 6-1: USB disconnect, device number 3
[   44.737360][  T805] loop0: detected capacity change from 0 to 131072
[   44.747313][  T805] F2FS-fs (loop0): invalid crc value
[   44.754193][  T805] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387)
[   44.780982][  T805] F2FS-fs (loop0): Mounted with checkpoint version = 753bd00b
[   44.809926][  T805] Zero length message leads to an empty skb
[   44.911965][  T819] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=819 comm=syz.5.151
[   45.048663][  T830] FAULT_INJECTION: forcing a failure.
[   45.048663][  T830] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   45.061830][  T830] CPU: 1 PID: 830 Comm: syz.5.155 Not tainted syzkaller #0
[   45.069024][  T830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   45.079057][  T830] Call Trace:
[   45.082334][  T830]  <TASK>
[   45.085253][  T830]  __dump_stack+0x21/0x24
[   45.089566][  T830]  dump_stack_lvl+0x110/0x170
[   45.094226][  T830]  ? __cfi_dump_stack_lvl+0x8/0x8
[   45.099237][  T830]  dump_stack+0x15/0x24
[   45.103373][  T830]  should_fail_ex+0x3bf/0x510
[   45.108033][  T830]  should_fail+0xb/0x10
[   45.112166][  T830]  should_fail_usercopy+0x1a/0x20
[   45.117167][  T830]  _copy_to_user+0x1e/0x90
[   45.121568][  T830]  simple_read_from_buffer+0xe9/0x160
[   45.126917][  T830]  proc_fail_nth_read+0x1a6/0x220
[   45.131918][  T830]  ? __cfi_proc_fail_nth_read+0x10/0x10
[   45.137450][  T830]  ? security_file_permission+0x94/0xb0
[   45.142985][  T830]  ? __cfi_proc_fail_nth_read+0x10/0x10
[   45.148553][  T830]  vfs_read+0x286/0x930
[   45.152705][  T830]  ? __cfi_vfs_read+0x10/0x10
[   45.157375][  T830]  ? __kasan_check_write+0x14/0x20
[   45.162467][  T830]  ? mutex_lock+0x93/0x1b0
[   45.166864][  T830]  ? __cfi_mutex_lock+0x10/0x10
[   45.171716][  T830]  ? __fdget_pos+0x2cd/0x380
[   45.176308][  T830]  ? ksys_read+0x70/0x260
[   45.180616][  T830]  ksys_read+0x14a/0x260
[   45.184837][  T830]  ? __cfi_ksys_read+0x10/0x10
[   45.189583][  T830]  ? debug_smp_processor_id+0x17/0x20
[   45.194937][  T830]  __x64_sys_read+0x7b/0x90
[   45.199421][  T830]  x64_sys_call+0x2f/0x9a0
[   45.203816][  T830]  do_syscall_64+0x4c/0xa0
[   45.208234][  T830]  ? clear_bhb_loop+0x30/0x80
[   45.212887][  T830]  ? clear_bhb_loop+0x30/0x80
[   45.217543][  T830]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   45.223423][  T830] RIP: 0033:0x7f84f315e68e
[   45.227828][  T830] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   45.247413][  T830] RSP: 002b:00007f84f3f9ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   45.255809][  T830] RAX: ffffffffffffffda RBX: 00007f84f3fa06c0 RCX: 00007f84f315e68e
[   45.263769][  T830] RDX: 000000000000000f RSI: 00007f84f3fa00a0 RDI: 0000000000000004
[   45.271743][  T830] RBP: 00007f84f3fa0090 R08: 0000000000000000 R09: 0000000000000000
[   45.279704][  T830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   45.287664][  T830] R13: 00007f84f3426038 R14: 00007f84f3425fa0 R15: 00007ffde64b1b48
[   45.295629][  T830]  </TASK>
[   45.320901][  T838] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   45.395365][  T839] xt_hashlimit: max too large, truncated to 1048576
[   45.532826][  T841] netlink: 44 bytes leftover after parsing attributes in process `syz.2.158'.
[   45.575670][  T451] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[   45.752443][  T847] loop1: detected capacity change from 0 to 256
[   45.758799][  T451] usb 6-1: Using ep0 maxpacket: 16
[   45.765029][  T451] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   45.775642][  T451] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[   45.816948][  T451] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   45.826338][  T451] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   45.834395][  T451] usb 6-1: Product: syz
[   45.839011][  T451] usb 6-1: Manufacturer: syz
[   45.843615][  T451] usb 6-1: SerialNumber: syz
[   46.129269][  T451] usb 6-1: 0:2 : does not exist
[   46.164081][  T451] usb 6-1: unit 9 not found!
[   46.238955][  T451] usb 6-1: 4:0: cannot get min/max values for control 1 (id 4)
[   46.306313][  T854] loop0: detected capacity change from 0 to 1024
[   46.332779][  T451] usb 6-1: 4:0: cannot get min/max values for control 2 (id 4)
[   46.365388][  T854] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   46.491279][  T451] usb 6-1: 4:0: cannot get min/max values for control 3 (id 4)
[   46.513251][  T857] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=857 comm=syz.2.162
[   46.561138][   T45] Bluetooth: hci0: command 0x1003 tx timeout
[   46.561162][  T312] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   46.574687][  T809] Bluetooth: hci0: Opcode 0x0c20 failed: -22
[   46.686447][  T854] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   46.698924][  T451] usb 6-1: 4:0: cannot get min/max values for control 4 (id 4)
[   46.751558][  T451] usb 6-1: 4:0: cannot get min/max values for control 5 (id 4)
[   46.798190][  T451] usb 6-1: 4:0: cannot get min/max values for control 6 (id 4)
[   46.806746][  T877] netlink: 44 bytes leftover after parsing attributes in process `syz.6.169'.
[   46.825191][  T451] usb 6-1: 4:0: cannot get min/max values for control 7 (id 4)
[   46.835267][  T451] usb 6-1: 4:0: cannot get min/max values for control 8 (id 4)
[   46.845002][  T451] usb 6-1: USB disconnect, device number 4
[   46.873583][  T883] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   46.881806][  T883] device bridge_slave_0 left promiscuous mode
[   46.888161][  T883] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.896346][  T287] EXT4-fs (loop0): unmounting filesystem.
[   46.902771][  T883] device bridge_slave_1 left promiscuous mode
[   46.911107][  T883] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.985965][  T885] xt_hashlimit: max too large, truncated to 1048576
[   46.987853][  T887] loop0: detected capacity change from 0 to 1024
[   47.019745][  T887] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   47.034817][  T887] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   47.232433][  T895] loop1: detected capacity change from 0 to 1024
[   47.952637][  T903] loop2: detected capacity change from 0 to 256
[   47.991552][  T903] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   48.006959][  T906] loop6: detected capacity change from 0 to 256
[   48.042485][  T903] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[   48.130476][  T903] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[   48.435696][   T60] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   48.511654][  T287] EXT4-fs (loop0): unmounting filesystem.
[   48.647353][   T60] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   48.659804][   T28] kauditd_printk_skb: 8 callbacks suppressed
[   48.659824][   T28] audit: type=1326 audit(1783750028.353:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=913 comm="syz.1.181" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcb1f9de59 code=0x7ffc0000
[   48.724443][   T60] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[   48.807943][   T60] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   48.898988][   T60] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   48.917210][   T28] audit: type=1326 audit(1783750028.413:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=913 comm="syz.1.181" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7efcb1f9de59 code=0x7ffc0000
[   48.951913][   T60] usb 3-1: SerialNumber: syz
[   49.009833][   T28] audit: type=1326 audit(1783750028.703:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=913 comm="syz.1.181" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcb1f9de59 code=0x7ffc0000
[   49.083624][  T918] netlink: 44 bytes leftover after parsing attributes in process `syz.0.180'.
[   49.124178][  T921] xt_hashlimit: size too large, truncated to 1048576
[   49.204671][  T923] loop1: detected capacity change from 0 to 1024
[   49.252820][  T923] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   49.266500][   T60] usb 3-1: skipping empty audio interface (v1)
[   49.294141][  T923] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   49.294752][   T60] snd-usb-audio: probe of 3-1:1.0 failed with error -22
[   49.344153][   T60] usb 3-1: USB disconnect, device number 3
[   49.355531][  T607] udevd[607]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   49.453940][  T932] netlink: 'syz.6.185': attribute type 4 has an invalid length.
[   49.492877][  T932] netlink: 'syz.6.185': attribute type 4 has an invalid length.
[   49.695490][  T932] loop6: detected capacity change from 0 to 4096
[   49.896349][  T932] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[   49.944035][   T28] audit: type=1400 audit(1783750029.633:186): avc:  denied  { map } for  pid=929 comm="syz.6.185" path="/11/file0/file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   49.966709][   T28] audit: type=1400 audit(1783750029.633:187): avc:  denied  { execute } for  pid=929 comm="syz.6.185" path="/11/file0/file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   50.730289][  T751] EXT4-fs (loop6): unmounting filesystem.
[   50.808322][  T291] EXT4-fs (loop1): unmounting filesystem.
[   50.827478][   T28] audit: type=1326 audit(1783750030.523:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=938 comm="syz.1.188" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcb1f9de59 code=0x7ffc0000
[   50.859723][  T944] loop0: detected capacity change from 0 to 512
[   50.860013][   T28] audit: type=1326 audit(1783750030.553:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=938 comm="syz.1.188" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcb1f9de59 code=0x7ffc0000
[   50.893803][  T939] loop1: detected capacity change from 0 to 256
[   50.902728][  T944] EXT4-fs (loop0): orphan cleanup on readonly fs
[   50.904544][   T28] audit: type=1326 audit(1783750030.563:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=938 comm="syz.1.188" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7efcb1f9de59 code=0x7ffc0000
[   50.913729][  T939] exfat: Deprecated parameter 'utf8'
[   50.943642][  T944] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.190: invalid indirect mapped block 28777 (level 2)
[   50.945716][  T939] exfat: Deprecated parameter 'utf8'
[   50.957197][   T28] audit: type=1326 audit(1783750030.563:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=938 comm="syz.1.188" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcb1f9de59 code=0x7ffc0000
[   50.987146][  T944] EXT4-fs (loop0): 1 truncate cleaned up
[   50.987172][   T28] audit: type=1326 audit(1783750030.563:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=938 comm="syz.1.188" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcb1f9de59 code=0x7ffc0000
[   51.001820][  T947] loop5: detected capacity change from 0 to 512
[   51.019554][  T944] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   51.044584][  T939] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[   51.044808][  T944] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended
[   51.072184][  T944] EXT4-fs (loop0): re-mounted. Quota mode: none.
[   51.084660][  T947] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[   51.093811][  T947] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   51.106020][  T939] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[   51.124891][  T939] SELinux: failed to load policy
[   51.125220][  T944] overlayfs: workdir and upperdir must reside under the same mount
[   51.184036][  T287] EXT4-fs (loop0): unmounting filesystem.
[   51.208851][  T956] loop0: detected capacity change from 0 to 256
[   51.300079][  T949] loop2: detected capacity change from 0 to 16
[   51.315307][  T949] erofs: (device loop2): mounted with root inode @ nid 36.
[   51.325232][  T960] netlink: 16 bytes leftover after parsing attributes in process `syz.1.194'.
[   51.348218][  T960] netlink: 4 bytes leftover after parsing attributes in process `syz.1.194'.
[   52.164368][  T969] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   52.202165][  T971] xt_hashlimit: size too large, truncated to 1048576
[   52.237967][  T780] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[   52.264864][  T780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   52.291154][  T780] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[   52.299556][  T780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   52.308077][  T780] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   52.316458][  T780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   52.324759][  T780] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   52.333428][  T780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   52.428207][  T976] loop0: detected capacity change from 0 to 1024
[   52.438501][  T983] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   52.457034][  T983] device bridge_slave_0 left promiscuous mode
[   52.463218][  T983] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.473133][  T976] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   52.489462][  T983] device bridge_slave_1 left promiscuous mode
[   52.499081][  T976] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   52.513118][  T983] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.590246][  T983] xt_hashlimit: max too large, truncated to 1048576
[   52.636186][  T287] EXT4-fs (loop0): unmounting filesystem.
[   52.698781][  T987] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   52.755855][  T987] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[   52.776873][  T987] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[   52.866844][  T990] EXT4-fs (loop1): orphan cleanup on readonly fs
[   52.879880][  T990] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.203: invalid indirect mapped block 28777 (level 2)
[   52.895985][  T990] EXT4-fs (loop1): 1 truncate cleaned up
[   52.901646][  T990] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   52.954326][  T990] overlayfs: upper fs is r/o, try multi-lower layers mount
[   52.980827][  T291] EXT4-fs (loop1): unmounting filesystem.
[   53.075682][   T40] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   53.197608][ T1005] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   53.232087][  T319] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[   53.242579][  T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   53.260783][  T319] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[   53.269805][   T40] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   53.285768][   T40] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[   53.295021][  T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   53.311644][  T319] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   53.315639][   T40] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   53.329978][  T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   53.338059][   T40] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   53.346036][  T319] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   53.346287][  T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   53.355640][   T60] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[   53.376418][   T40] usb 1-1: SerialNumber: syz
[   53.480926][ T1007] set_capacity_and_notify: 2 callbacks suppressed
[   53.480943][ T1007] loop2: detected capacity change from 0 to 256
[   53.503436][  T397] EXT4-fs (loop5): unmounting filesystem.
[   53.570894][ T1011] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   53.584561][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[   53.601904][ T1011] FAULT_INJECTION: forcing a failure.
[   53.601904][ T1011] name failslab, interval 1, probability 0, space 0, times 0
[   53.607806][   T60] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   53.626543][   T40] usb 1-1: skipping empty audio interface (v1)
[   53.633611][   T60] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[   53.644604][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   53.645516][   T40] snd-usb-audio: probe of 1-1:1.0 failed with error -22
[   53.659483][   T60] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   53.672920][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[   53.675749][ T1011] CPU: 1 PID: 1011 Comm: syz.5.212 Not tainted syzkaller #0
[   53.681593][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   53.687987][ T1011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   53.687997][ T1011] Call Trace:
[   53.688002][ T1011]  <TASK>
[   53.688007][ T1011]  __dump_stack+0x21/0x24
[   53.696288][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   53.705911][ T1011]  dump_stack_lvl+0x110/0x170
[   53.705935][ T1011]  ? __cfi_dump_stack_lvl+0x8/0x8
[   53.709561][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   53.712115][ T1011]  dump_stack+0x15/0x24
[   53.716705][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   53.724188][ T1011]  should_fail_ex+0x3bf/0x510
[   53.724208][ T1011]  __should_failslab+0xac/0xf0
[   53.732798][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   53.733867][ T1011]  should_failslab+0x9/0x20
[   53.775378][ T1011]  kmem_cache_alloc_node+0x42/0x330
[   53.780590][ T1011]  ? __alloc_skb+0xe8/0x4a0
[   53.785099][ T1011]  __alloc_skb+0xe8/0x4a0
[   53.789435][ T1011]  alloc_skb_with_frags+0xa8/0x620
[   53.794528][ T1011]  ? 0xffffffffa0004440
[   53.798660][ T1011]  sock_alloc_send_pskb+0x87f/0x9a0
[   53.803845][ T1011]  ? __cfi_sock_alloc_send_pskb+0x10/0x10
[   53.809546][ T1011]  ? stack_trace_save+0xa6/0xf0
[   53.814376][ T1011]  ? iov_iter_advance+0x98/0x1b0
[   53.819292][ T1011]  tun_get_user+0x9c0/0x32f0
[   53.823861][ T1011]  ? _parse_integer+0x2a/0x40
[   53.828515][ T1011]  ? tun_do_read+0x1d70/0x1d70
[   53.833260][ T1011]  ? __kasan_check_write+0x14/0x20
[   53.838353][ T1011]  ? ref_tracker_alloc+0x319/0x4a0
[   53.843444][ T1011]  ? __cfi_ref_tracker_alloc+0x10/0x10
[   53.848882][ T1011]  ? avc_policy_seqno+0x1b/0x70
[   53.853707][ T1011]  ? selinux_file_permission+0x2a5/0x510
[   53.859316][ T1011]  tun_chr_write_iter+0x1f9/0x300
[   53.864320][ T1011]  vfs_write+0x5ef/0xd00
[   53.868541][ T1011]  ? __cfi_vfs_write+0x10/0x10
[   53.873279][ T1011]  ? __fget_files+0x2d1/0x330
[   53.877934][ T1011]  ? __fdget_pos+0x1f2/0x380
[   53.882507][ T1011]  ? ksys_write+0x70/0x260
[   53.886904][ T1011]  ksys_write+0x14a/0x260
[   53.891213][ T1011]  ? __cfi_ksys_write+0x10/0x10
[   53.896039][ T1011]  ? debug_smp_processor_id+0x17/0x20
[   53.901393][ T1011]  __x64_sys_write+0x7b/0x90
[   53.905963][ T1011]  x64_sys_call+0x27b/0x9a0
[   53.910448][ T1011]  do_syscall_64+0x4c/0xa0
[   53.914844][ T1011]  ? clear_bhb_loop+0x30/0x80
[   53.919498][ T1011]  ? clear_bhb_loop+0x30/0x80
[   53.924156][ T1011]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   53.930033][ T1011] RIP: 0033:0x7f84f319de59
[   53.934429][ T1011] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   53.954015][ T1011] RSP: 002b:00007f84f3fa0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   53.962414][ T1011] RAX: ffffffffffffffda RBX: 00007f84f3425fa0 RCX: 00007f84f319de59
[   53.970367][ T1011] RDX: 0000000000000fca RSI: 0000200000001ac0 RDI: 0000000000000003
[   53.978321][ T1011] RBP: 00007f84f3fa0090 R08: 0000000000000000 R09: 0000000000000000
[   53.986270][ T1011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   53.994225][ T1011] R13: 00007f84f3426038 R14: 00007f84f3425fa0 R15: 00007ffde64b1b48
[   54.002182][ T1011]  </TASK>
[   54.007783][ T1014] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1014 comm=syz.6.213
[   54.021801][   T40] usb 1-1: USB disconnect, device number 3
[   54.030728][   T60] usb 2-1: New USB device found, idVendor=0582, idProduct=0145, bcdDevice= 0.40
[   54.040895][   T60] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   54.048961][   T60] usb 2-1: Product: syz
[   54.053184][   T60] usb 2-1: Manufacturer: syz
[   54.057823][   T60] usb 2-1: SerialNumber: syz
[   54.063104][ T1001] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[   54.174053][ T1023] loop5: detected capacity change from 0 to 1024
[   54.183590][ T1023] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   54.193955][ T1023] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[   54.245986][  T607] udevd[607]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   54.277161][   T60] usb 2-1: MIDIStreaming interface descriptor not found
[   54.288998][   T60] usb 2-1: USB disconnect, device number 3
[   54.337694][ T1026] loop2: detected capacity change from 0 to 512
[   54.348039][ T1026] EXT4-fs (loop2): orphan cleanup on readonly fs
[   54.354555][ T1026] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.215: invalid indirect mapped block 28777 (level 2)
[   54.368341][ T1026] EXT4-fs (loop2): 1 truncate cleaned up
[   54.374103][ T1026] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   54.397692][ T1026] overlayfs: upper fs is r/o, try multi-lower layers mount
[   54.409342][  T294] EXT4-fs (loop2): unmounting filesystem.
[   54.431079][ T1031] loop2: detected capacity change from 0 to 128
[   54.437793][ T1031] FAT-fs (loop2): Unrecognized mount option "nodgts" or missing value
[   54.560416][   T28] kauditd_printk_skb: 44 callbacks suppressed
[   54.560430][   T28] audit: type=1400 audit(1783750034.253:237): avc:  denied  { unlink } for  pid=1040 comm="syz.0.221" name="#3" dev="tmpfs" ino=293 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   54.589309][   T28] audit: type=1400 audit(1783750034.263:238): avc:  denied  { create } for  pid=1040 comm="syz.0.221" name="#5" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   54.630467][ T1049] loop2: detected capacity change from 0 to 256
[   54.632549][   T28] audit: type=1400 audit(1783750034.263:239): avc:  denied  { link } for  pid=1040 comm="syz.0.221" name="#5" dev="tmpfs" ino=294 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   54.640427][ T1051] loop6: detected capacity change from 0 to 512
[   54.659160][   T28] audit: type=1400 audit(1783750034.263:240): avc:  denied  { rename } for  pid=1040 comm="syz.0.221" name="#6" dev="tmpfs" ino=294 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   54.687503][   T28] audit: type=1400 audit(1783750034.283:241): avc:  denied  { create } for  pid=1044 comm="syz.6.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   54.722574][   T28] audit: type=1400 audit(1783750034.283:242): avc:  denied  { ioctl } for  pid=1044 comm="syz.6.223" path="socket:[20923]" dev="sockfs" ino=20923 ioctlcmd=0x6722 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   54.747766][   T28] audit: type=1400 audit(1783750034.283:243): avc:  denied  { ioctl } for  pid=1044 comm="syz.6.223" path="socket:[20924]" dev="sockfs" ino=20924 ioctlcmd=0x661b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   54.780071][   T28] audit: type=1400 audit(1783750034.303:244): avc:  denied  { unmount } for  pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   54.788302][ T1051] EXT4-fs (loop6): orphan cleanup on readonly fs
[   54.806724][ T1051] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.226: invalid indirect mapped block 28777 (level 2)
[   54.811868][ T1056] loop0: detected capacity change from 0 to 1024
[   54.828313][ T1056] EXT4-fs: Ignoring removed orlov option
[   54.830933][ T1051] EXT4-fs (loop6): 1 truncate cleaned up
[   54.845280][ T1051] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[   55.063049][ T1059] loop1: detected capacity change from 0 to 512
[   55.139140][ T1056] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   55.154951][ T1059] EXT4-fs: Ignoring removed nomblk_io_submit option
[   55.264744][ T1051] overlayfs: upper fs is r/o, try multi-lower layers mount
[   55.301424][ T1059] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   55.452083][   T28] audit: type=1400 audit(1783750035.143:245): avc:  denied  { create } for  pid=1055 comm="syz.0.228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   55.561419][ T1059] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   55.571936][  T751] EXT4-fs (loop6): unmounting filesystem.
[   55.580814][ T1059] ext4 filesystem being mounted at /52/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[   55.606292][ T1059] EXT4-fs (loop1): shut down requested (0)
[   55.615697][   T28] audit: type=1400 audit(1783750035.303:246): avc:  denied  { append } for  pid=1055 comm="syz.0.228" path="/52/file1/cgroup.controllers" dev="loop0" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   55.660165][  T291] EXT4-fs (loop1): unmounting filesystem.
[   55.710564][ T1069] loop2: detected capacity change from 0 to 512
[   55.717330][ T1069] EXT4-fs: Ignoring removed i_version option
[   55.723716][ T1069] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   55.746286][  T397] EXT4-fs (loop5): unmounting filesystem.
[   55.749010][ T1069] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   55.771069][ T1074] loop6: detected capacity change from 0 to 256
[   55.773118][ T1069] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   55.778284][ T1074] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   55.797232][ T1074] exFAT-fs (loop6): Medium has reported failures. Some data may be lost.
[   55.802133][ T1069] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   55.817019][ T1080] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1080 comm=syz.5.234
[   55.818907][ T1074] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[   55.856101][ T1082] xt_hashlimit: size too large, truncated to 1048576
[   55.874847][  T287] EXT4-fs (loop0): unmounting filesystem.
[   55.941110][ T1088] netlink: 12 bytes leftover after parsing attributes in process `syz.0.237'.
[   56.063274][  T294] EXT4-fs (loop2): unmounting filesystem.
[   56.063317][ T1097] EXT4-fs (loop5): orphan cleanup on readonly fs
[   56.077379][ T1097] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.241: invalid indirect mapped block 28777 (level 2)
[   56.091385][ T1097] EXT4-fs (loop5): 1 truncate cleaned up
[   56.097074][ T1097] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[   56.114713][ T1097] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended
[   56.124429][ T1097] EXT4-fs (loop5): re-mounted. Quota mode: none.
[   56.135706][    T6] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[   56.573298][ T1110] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   57.022024][ T1115] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1115 comm=syz.0.245
[   57.067384][ T1117] FAULT_INJECTION: forcing a failure.
[   57.067384][ T1117] name failslab, interval 1, probability 0, space 0, times 0
[   57.079150][  T435] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   57.081318][ T1117] CPU: 1 PID: 1117 Comm: syz.0.246 Not tainted syzkaller #0
[   57.094677][ T1117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   57.104727][ T1117] Call Trace:
[   57.107989][ T1117]  <TASK>
[   57.110897][ T1117]  __dump_stack+0x21/0x24
[   57.115213][ T1117]  dump_stack_lvl+0x110/0x170
[   57.116750][    T6] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   57.119872][ T1117]  ? __cfi_dump_stack_lvl+0x8/0x8
[   57.129964][    T6] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[   57.134924][ T1117]  ? stack_trace_save+0xa6/0xf0
[   57.144898][    T6] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   57.148571][ T1117]  dump_stack+0x15/0x24
[   57.148595][ T1117]  should_fail_ex+0x3bf/0x510
[   57.148610][ T1117]  __should_failslab+0xac/0xf0
[   57.157877][    T6] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   57.161748][ T1117]  should_failslab+0x9/0x20
[   57.166694][    T6] usb 7-1: SerialNumber: syz
[   57.171138][ T1117]  __kmem_cache_alloc_node+0x3d/0x2d0
[   57.193490][ T1117]  ? __get_vm_area_node+0x12c/0x360
[   57.198681][ T1117]  ? __x64_sys_clone+0x193/0x200
[   57.203620][ T1117]  ? x64_sys_call+0x990/0x9a0
[   57.208278][ T1117]  ? do_syscall_64+0x4c/0xa0
[   57.212867][ T1117]  ? __get_vm_area_node+0x12c/0x360
[   57.218061][ T1117]  kmalloc_node_trace+0x26/0xb0
[   57.222896][ T1117]  __get_vm_area_node+0x12c/0x360
[   57.227915][ T1117]  __vmalloc_node_range+0x326/0x1440
[   57.233196][ T1117]  ? copy_process+0x5e7/0x3500
[   57.237962][ T1117]  ? dup_task_struct+0x5a/0x7e0
[   57.242803][ T1117]  ? kasan_save_alloc_info+0x1f/0x30
[   57.248080][ T1117]  ? __kasan_slab_alloc+0x72/0x80
[   57.253101][ T1117]  ? __cfi___vmalloc_node_range+0x10/0x10
[   57.258814][ T1117]  ? __slab_alloc+0x6b/0xa0
[   57.263304][ T1117]  ? arch_dup_task_struct+0x42/0xc0
[   57.265638][  T435] usb 2-1: Using ep0 maxpacket: 32
[   57.268509][ T1117]  ? memcpy+0x56/0x70
[   57.268532][ T1117]  dup_task_struct+0x3ae/0x7e0
[   57.274706][  T435] usb 2-1: config 0 has an invalid interface number: 184 but max is 0
[   57.277582][ T1117]  ? copy_process+0x5e7/0x3500
[   57.277605][ T1117]  ? __kasan_check_write+0x14/0x20
[   57.277624][ T1117]  copy_process+0x5e7/0x3500
[   57.283584][  T435] usb 2-1: config 0 has no interface number 0
[   57.290497][ T1117]  ? __cfi_kstrtouint_from_user+0x10/0x10
[   57.290522][ T1117]  ? __kasan_check_write+0x14/0x20
[   57.290538][ T1117]  ? idle_dummy+0x10/0x10
[   57.295630][  T435] usb 2-1: config 0 interface 184 has no altsetting 0
[   57.300372][ T1117]  kernel_clone+0x22f/0x7f0
[   57.306548][  T435] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[   57.311001][ T1117]  ? __cfi_kernel_clone+0x10/0x10
[   57.316747][  T435] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   57.321791][ T1117]  ? __kasan_check_write+0x14/0x20
[   57.321814][ T1117]  ? mutex_unlock+0x8f/0x230
[   57.326468][  T435] usb 2-1: Product: syz
[   57.332851][ T1117]  __x64_sys_clone+0x193/0x200
[   57.337547][  T435] usb 2-1: Manufacturer: syz
[   57.346336][ T1117]  ? __cfi___x64_sys_clone+0x10/0x10
[   57.346363][ T1117]  ? fpregs_assert_state_consistent+0xb1/0xe0
[   57.351564][  T435] usb 2-1: SerialNumber: syz
[   57.359318][ T1117]  x64_sys_call+0x990/0x9a0
[   57.359339][ T1117]  do_syscall_64+0x4c/0xa0
[   57.359357][ T1117]  ? clear_bhb_loop+0x30/0x80
[   57.368054][  T435] usb 2-1: config 0 descriptor??
[   57.369008][ T1117]  ? clear_bhb_loop+0x30/0x80
[   57.369032][ T1117]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   57.374176][  T435] smsc75xx v1.0.0
[   57.377902][ T1117] RIP: 0033:0x7fb689d9de59
[   57.377920][ T1117] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   57.377934][ T1117] RSP: 002b:00007fb68ad3ffd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[   57.377951][ T1117] RAX: ffffffffffffffda RBX: 00007fb68a025fa0 RCX: 00007fb689d9de59
[   57.388768][    T6] usb 7-1: skipping empty audio interface (v1)
[   57.393813][ T1117] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011
[   57.393829][ T1117] RBP: 00007fb68ad40090 R08: 0000000000000000 R09: 0000000000000000
[   57.393840][ T1117] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001
[   57.400833][    T6] snd-usb-audio: probe of 7-1:1.0 failed with error -22
[   57.402901][ T1117] R13: 00007fb68a026038 R14: 00007fb68a025fa0 R15: 00007ffd86edc568
[   57.402921][ T1117]  </TASK>
[   57.413465][  T607] udevd[607]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   57.447568][ T1117] syz.0.246: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null)
[   57.470255][    T6] usb 7-1: USB disconnect, device number 2
[   57.478476][ T1117] ,cpuset=
[   57.532299][ T1121] netlink: 12 bytes leftover after parsing attributes in process `syz.2.248'.
[   57.538540][ T1117] syz0,mems_allowed=0
[   57.572733][ T1117] CPU: 0 PID: 1117 Comm: syz.0.246 Not tainted syzkaller #0
[   57.580017][ T1117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   57.590078][ T1117] Call Trace:
[   57.593358][ T1117]  <TASK>
[   57.596290][ T1117]  __dump_stack+0x21/0x24
[   57.600636][ T1117]  dump_stack_lvl+0x110/0x170
[   57.605348][ T1117]  ? __cfi_dump_stack_lvl+0x8/0x8
[   57.610356][ T1117]  dump_stack+0x15/0x24
[   57.614497][ T1117]  warn_alloc+0x1dc/0x200
[   57.618815][ T1117]  ? should_failslab+0x9/0x20
[   57.623476][ T1117]  ? __cfi_warn_alloc+0x10/0x10
[   57.628312][ T1117]  ? kmalloc_node_trace+0x3d/0xb0
[   57.633340][ T1117]  ? __get_vm_area_node+0x353/0x360
[   57.638516][ T1117]  __vmalloc_node_range+0x34b/0x1440
[   57.643810][ T1117]  ? dup_task_struct+0x5a/0x7e0
[   57.648643][ T1117]  ? kasan_save_alloc_info+0x1f/0x30
[   57.653919][ T1117]  ? __kasan_slab_alloc+0x72/0x80
[   57.658928][ T1117]  ? __cfi___vmalloc_node_range+0x10/0x10
[   57.664625][ T1117]  ? __slab_alloc+0x6b/0xa0
[   57.669110][ T1117]  ? arch_dup_task_struct+0x42/0xc0
[   57.674289][ T1117]  ? memcpy+0x56/0x70
[   57.678250][ T1117]  dup_task_struct+0x3ae/0x7e0
[   57.683021][ T1117]  ? copy_process+0x5e7/0x3500
[   57.687775][ T1117]  ? __kasan_check_write+0x14/0x20
[   57.692871][ T1117]  copy_process+0x5e7/0x3500
[   57.697469][ T1117]  ? __cfi_kstrtouint_from_user+0x10/0x10
[   57.703173][ T1117]  ? __kasan_check_write+0x14/0x20
[   57.708268][ T1117]  ? idle_dummy+0x10/0x10
[   57.712586][ T1117]  kernel_clone+0x22f/0x7f0
[   57.717072][ T1117]  ? __cfi_kernel_clone+0x10/0x10
[   57.722160][ T1117]  ? __kasan_check_write+0x14/0x20
[   57.727251][ T1117]  ? mutex_unlock+0x8f/0x230
[   57.731840][ T1117]  __x64_sys_clone+0x193/0x200
[   57.736674][ T1117]  ? __cfi___x64_sys_clone+0x10/0x10
[   57.741940][ T1117]  ? fpregs_assert_state_consistent+0xb1/0xe0
[   57.747991][ T1117]  x64_sys_call+0x990/0x9a0
[   57.752471][ T1117]  do_syscall_64+0x4c/0xa0
[   57.756867][ T1117]  ? clear_bhb_loop+0x30/0x80
[   57.761537][ T1117]  ? clear_bhb_loop+0x30/0x80
[   57.766197][ T1117]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   57.772094][ T1117] RIP: 0033:0x7fb689d9de59
[   57.776490][ T1117] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   57.796078][ T1117] RSP: 002b:00007fb68ad3ffd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[   57.804476][ T1117] RAX: ffffffffffffffda RBX: 00007fb68a025fa0 RCX: 00007fb689d9de59
[   57.812430][ T1117] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011
[   57.820387][ T1117] RBP: 00007fb68ad40090 R08: 0000000000000000 R09: 0000000000000000
[   57.828348][ T1117] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001
[   57.836297][ T1117] R13: 00007fb68a026038 R14: 00007fb68a025fa0 R15: 00007ffd86edc568
[   57.844252][ T1117]  </TASK>
[   57.852203][  T435] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71
[   57.853214][ T1117] Mem-Info:
[   57.862406][  T435] smsc75xx: probe of 2-1:0.184 failed with error -71
[   57.877866][ T1117] active_anon:8019 inactive_anon:0 isolated_anon:0
[   57.877866][ T1117]  active_file:6624 inactive_file:2341 isolated_file:0
[   57.877866][ T1117]  unevictable:0 dirty:76 writeback:0
[   57.877866][ T1117]  slab_reclaimable:8137 slab_unreclaimable:75623
[   57.877866][ T1117]  mapped:29782 shmem:325 pagetables:753
[   57.877866][ T1117]  sec_pagetables:0 bounce:0
[   57.877866][ T1117]  kernel_misc_reclaimable:0
[   57.877866][ T1117]  free:1528091 free_pcp:2282 free_cma:0
[   57.925692][  T435] usb 2-1: USB disconnect, device number 4
[   57.927504][ T1117] Node 0 active_anon:32176kB inactive_anon:0kB active_file:26496kB inactive_file:9364kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:119128kB dirty:304kB writeback:0kB shmem:1300kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:4756kB pagetables:3012kB sec_pagetables:0kB all_unreclaimable? no
[   57.964741][ T1117] DMA32 free:2966484kB boost:0kB min:31276kB low:39092kB high:46908kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2971892kB mlocked:0kB bounce:0kB free_pcp:5408kB local_pcp:56kB free_cma:0kB
[   57.992996][ T1117] lowmem_reserve[]: 0 3932 3932 3932
[   57.998535][ T1117] Normal free:3145656kB boost:0kB min:42448kB low:53060kB high:63672kB reserved_highatomic:0KB active_anon:32176kB inactive_anon:0kB active_file:26496kB inactive_file:9364kB unevictable:0kB writepending:304kB present:5242880kB managed:4026400kB mlocked:0kB bounce:0kB free_pcp:4040kB local_pcp:1920kB free_cma:0kB
[   58.028116][ T1117] lowmem_reserve[]: 0 0 0 0
[   58.032728][ T1117] DMA32: 3*4kB (M) 1*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 2*1024kB (UM) 2*2048kB (M) 722*4096kB (M) = 2966484kB
[   58.043310][ T1136] xt_hashlimit: size too large, truncated to 1048576
[   58.057498][ T1117] Normal: 1078*4kB (UME) 502*8kB (ME) 317*16kB (UME) 200*32kB (ME) 126*64kB (UME) 80*128kB (UME) 28*256kB (UME) 15*512kB (M) 10*1024kB (ME) 5*2048kB (UME) 750*4096kB (M) = 3145432kB
[   58.083158][ T1117] 9163 total pagecache pages
[   58.090495][ T1117] 0 pages in swap cache
[   58.096624][ T1117] Free swap  = 124408kB
[   58.100845][ T1117] Total swap = 124996kB
[   58.104991][ T1117] 2097051 pages RAM
[   58.109220][ T1117] 0 pages HighMem/MovableOnly
[   58.113943][ T1117] 347478 pages reserved
[   58.118140][ T1117] 0 pages cma reserved
[   58.144715][ T1141] EXT4-fs (loop0): orphan cleanup on readonly fs
[   58.151677][ T1141] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.254: invalid indirect mapped block 28777 (level 2)
[   58.166863][ T1141] EXT4-fs (loop0): 1 truncate cleaned up
[   58.189145][ T1141] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended
[   58.198762][ T1141] EXT4-fs (loop0): re-mounted. Quota mode: none.
[   58.254682][ T1148] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1148 comm=syz.5.257
[   58.278573][  T780] Bluetooth: hci0: Frame reassembly failed (-84)
[   58.293293][ T1151] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[   58.302994][ T1151] SELinux: failed to load policy
[   58.308398][ T1151] FAULT_INJECTION: forcing a failure.
[   58.308398][ T1151] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   58.321543][ T1151] CPU: 1 PID: 1151 Comm: syz.0.256 Not tainted syzkaller #0
[   58.328831][ T1151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   58.338877][ T1151] Call Trace:
[   58.342141][ T1151]  <TASK>
[   58.345053][ T1151]  __dump_stack+0x21/0x24
[   58.349368][ T1151]  dump_stack_lvl+0x110/0x170
[   58.354033][ T1151]  ? __cfi_dump_stack_lvl+0x8/0x8
[   58.355653][    T6] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[   58.359045][ T1151]  ? proc_fail_nth_write+0x180/0x200
[   58.359072][ T1151]  ? security_file_permission+0x8a/0xb0
[   58.377283][ T1151]  dump_stack+0x15/0x24
[   58.381423][ T1151]  should_fail_ex+0x3bf/0x510
[   58.386082][ T1151]  should_fail+0xb/0x10
[   58.390247][ T1151]  should_fail_usercopy+0x1a/0x20
[   58.395276][ T1151]  _copy_from_user+0x1e/0xc0
[   58.399879][ T1151]  __x64_sys_clock_adjtime+0x11e/0x330
[   58.405344][ T1151]  ? __kasan_check_write+0x14/0x20
[   58.410459][ T1151]  ? __cfi___x64_sys_clock_adjtime+0x10/0x10
[   58.416458][ T1151]  ? __cfi_ksys_write+0x10/0x10
[   58.421319][ T1151]  ? fpregs_assert_state_consistent+0xb1/0xe0
[   58.427400][ T1151]  x64_sys_call+0x648/0x9a0
[   58.431918][ T1151]  do_syscall_64+0x4c/0xa0
[   58.436330][ T1151]  ? clear_bhb_loop+0x30/0x80
[   58.440990][ T1151]  ? clear_bhb_loop+0x30/0x80
[   58.445645][ T1151]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   58.451541][ T1151] RIP: 0033:0x7fb689d9de59
[   58.455949][ T1151] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   58.475536][ T1151] RSP: 002b:00007fb68ace7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000131
[   58.483934][ T1151] RAX: ffffffffffffffda RBX: 00007fb68a026090 RCX: 00007fb689d9de59
[   58.491891][ T1151] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000000
[   58.499851][ T1151] RBP: 00007fb68ace7090 R08: 0000000000000000 R09: 0000000000000000
[   58.507815][ T1151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   58.515776][ T1151] R13: 00007fb68a026128 R14: 00007fb68a026090 R15: 00007ffd86edc568
[   58.523749][ T1151]  </TASK>
[   58.528317][ T1153] set_capacity_and_notify: 4 callbacks suppressed
[   58.528333][ T1153] loop1: detected capacity change from 0 to 256
[   58.550040][ T1153] FAT-fs (loop1): Directory bread(block 64) failed
[   58.557210][ T1153] FAT-fs (loop1): Directory bread(block 65) failed
[   58.563761][ T1153] FAT-fs (loop1): Directory bread(block 66) failed
[   58.570345][ T1153] FAT-fs (loop1): Directory bread(block 67) failed
[   58.576898][ T1153] FAT-fs (loop1): Directory bread(block 68) failed
[   58.583419][ T1153] FAT-fs (loop1): Directory bread(block 69) failed
[   58.589980][ T1153] FAT-fs (loop1): Directory bread(block 70) failed
[   58.596508][ T1153] FAT-fs (loop1): Directory bread(block 71) failed
[   58.603062][ T1153] FAT-fs (loop1): Directory bread(block 72) failed
[   58.609628][ T1153] FAT-fs (loop1): Directory bread(block 73) failed
[   58.626720][    T6] usb 3-1: config 0 has an invalid interface number: 251 but max is 0
[   58.635045][    T6] usb 3-1: config 0 has no interface number 0
[   58.642812][    T6] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[   58.652454][    T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   58.660603][    T6] usb 3-1: Product: syz
[   58.664809][    T6] usb 3-1: Manufacturer: syz
[   58.669583][    T6] usb 3-1: SerialNumber: syz
[   58.674842][    T6] usb 3-1: config 0 descriptor??
[   58.747000][ T1166] loop1: detected capacity change from 0 to 1024
[   58.756031][ T1166] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   58.865656][  T369] usb 7-1: new full-speed USB device number 3 using dummy_hcd
[   59.047041][  T369] usb 7-1: config 0 has an invalid interface number: 251 but max is 0
[   59.055289][  T369] usb 7-1: config 0 has no interface number 0
[   59.062822][  T369] usb 7-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[   59.071959][  T369] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   59.080057][  T369] usb 7-1: Product: syz
[   59.084292][  T369] usb 7-1: Manufacturer: syz
[   59.088911][  T369] usb 7-1: SerialNumber: syz
[   59.094596][  T369] usb 7-1: config 0 descriptor??
[   59.217922][ T1173] device syzkaller0 entered promiscuous mode
[   59.226931][ T1173] FAULT_INJECTION: forcing a failure.
[   59.226931][ T1173] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   59.240052][ T1173] CPU: 1 PID: 1173 Comm: syz.0.264 Not tainted syzkaller #0
[   59.247339][ T1173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   59.257392][ T1173] Call Trace:
[   59.260654][ T1173]  <TASK>
[   59.263563][ T1173]  __dump_stack+0x21/0x24
[   59.267882][ T1173]  dump_stack_lvl+0x110/0x170
[   59.272553][ T1173]  ? __cfi_dump_stack_lvl+0x8/0x8
[   59.277563][ T1173]  dump_stack+0x15/0x24
[   59.281717][ T1173]  should_fail_ex+0x3bf/0x510
[   59.286394][ T1173]  should_fail+0xb/0x10
[   59.290550][ T1173]  should_fail_usercopy+0x1a/0x20
[   59.295576][ T1173]  _copy_from_user+0x1e/0xc0
[   59.300179][ T1173]  __sys_sendto+0x30b/0x660
[   59.304686][ T1173]  ? __cfi___sys_sendto+0x10/0x10
[   59.308645][    T6] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[   59.309712][ T1173]  ? __cfi_sched_clock_cpu+0x10/0x10
[   59.320958][    T6] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71
[   59.325026][ T1173]  ? tick_program_event+0xa3/0x120
[   59.325054][ T1173]  ? debug_smp_processor_id+0x17/0x20
[   59.337127][    T6] asix: probe of 3-1:0.251 failed with error -71
[   59.341993][ T1173]  ? irqtime_account_irq+0x17c/0x240
[   59.342021][ T1173]  ? handle_softirqs+0x543/0x600
[   59.351611][    T6] usb 3-1: USB disconnect, device number 4
[   59.353866][ T1173]  __x64_sys_sendto+0xe5/0x100
[   59.353895][ T1173]  x64_sys_call+0x83/0x9a0
[   59.378958][ T1173]  do_syscall_64+0x4c/0xa0
[   59.383359][ T1173]  ? clear_bhb_loop+0x30/0x80
[   59.388017][ T1173]  ? clear_bhb_loop+0x30/0x80
[   59.392682][ T1173]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   59.398560][ T1173] RIP: 0033:0x7fb689d9de59
[   59.402950][ T1173] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   59.422531][ T1173] RSP: 002b:00007fb68ad40028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[   59.430926][ T1173] RAX: ffffffffffffffda RBX: 00007fb68a025fa0 RCX: 00007fb689d9de59
[   59.438885][ T1173] RDX: 000000000000fce0 RSI: 00002000000002c0 RDI: 0000000000000003
[   59.446837][ T1173] RBP: 00007fb68ad40090 R08: 0000200000000140 R09: 0000000000000014
[   59.454790][ T1173] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001
[   59.462762][ T1173] R13: 00007fb68a026038 R14: 00007fb68a025fa0 R15: 00007ffd86edc568
[   59.470720][ T1173]  </TASK>
[   59.535820][ T1175] loop0: detected capacity change from 0 to 512
[   59.545821][ T1175] EXT4-fs (loop0): orphan cleanup on readonly fs
[   59.552476][ T1175] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.265: invalid indirect mapped block 28777 (level 2)
[   59.566292][ T1175] EXT4-fs (loop0): 1 truncate cleaned up
[   59.573683][ T1175] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended
[   59.583509][ T1175] EXT4-fs (loop0): re-mounted. Quota mode: none.
[   59.630218][ T1182] xt_hashlimit: size too large, truncated to 1048576
[   59.724962][ T1186] loop0: detected capacity change from 0 to 256
[   59.741456][ T1186] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   59.752240][ T1186] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[   59.770315][ T1186] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000ff98, chksum : 0xcb6d32b7, utbl_chksum : 0xe619d30d)
[   59.783840][ T1186] exFAT-fs (loop0): error, invalid access to FAT (entry 0x00000005) bogus content (0xffffff00)
[   59.794595][ T1186] exFAT-fs (loop0): failed to initialize root inode
[   59.835758][ T1191] loop2: detected capacity change from 0 to 256
[   59.842511][ T1191] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   59.869455][ T1156] FAULT_INJECTION: forcing a failure.
[   59.869455][ T1156] name failslab, interval 1, probability 0, space 0, times 0
[   59.879860][ T1191] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[   59.882466][ T1156] CPU: 0 PID: 1156 Comm: syz.6.260 Not tainted syzkaller #0
[   59.897754][ T1156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   59.907809][ T1156] Call Trace:
[   59.908488][ T1191] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe4cfae11, utbl_chksum : 0xe619d30d)
[   59.911084][ T1156]  <TASK>
[   59.911093][ T1156]  __dump_stack+0x21/0x24
[   59.911119][ T1156]  dump_stack_lvl+0x110/0x170
[   59.934946][ T1156]  ? __cfi_dump_stack_lvl+0x8/0x8
[   59.939985][ T1156]  dump_stack+0x15/0x24
[   59.944150][ T1156]  should_fail_ex+0x3bf/0x510
[   59.948834][ T1156]  ? vm_area_dup+0x65/0x280
[   59.953327][ T1156]  __should_failslab+0xac/0xf0
[   59.958092][ T1156]  should_failslab+0x9/0x20
[   59.962586][ T1156]  kmem_cache_alloc+0x3b/0x320
[   59.967351][ T1156]  vm_area_dup+0x65/0x280
[   59.971683][ T1156]  __split_vma+0x1c6/0x980
[   59.976106][ T1156]  ? unwind_get_return_address+0x4d/0x90
[   59.981737][ T1156]  do_mas_align_munmap+0x314/0x1330
[   59.986943][ T1156]  ? mas_state_walk+0x7ab/0xa80
[   59.991796][ T1156]  ? do_mas_munmap+0x2b0/0x2b0
[   59.996563][ T1156]  ? mas_walk+0x207/0x250
[   59.996616][ T1196] loop1: detected capacity change from 0 to 256
[   60.000891][ T1156]  do_mas_munmap+0x23d/0x2b0
[   60.000920][ T1156]  do_munmap+0xeb/0x140
[   60.015837][ T1156]  ? __cfi_do_munmap+0x10/0x10
[   60.020616][ T1156]  mremap_to+0x321/0x600
[   60.024898][ T1156]  __se_sys_mremap+0x475/0xc90
[   60.029660][ T1156]  ? __kasan_check_write+0x14/0x20
[   60.034764][ T1156]  ? mutex_unlock+0x8f/0x230
[   60.039352][ T1156]  ? __cfi_mutex_unlock+0x10/0x10
[   60.044372][ T1156]  ? __x64_sys_mremap+0xd0/0xd0
[   60.049210][ T1156]  ? __kasan_check_write+0x14/0x20
[   60.054304][ T1156]  ? ksys_write+0x1fa/0x260
[   60.058792][ T1156]  ? __cfi_ksys_write+0x10/0x10
[   60.063631][ T1156]  __x64_sys_mremap+0xbf/0xd0
[   60.068293][ T1156]  x64_sys_call+0x989/0x9a0
[   60.072781][ T1156]  do_syscall_64+0x4c/0xa0
[   60.077185][ T1156]  ? clear_bhb_loop+0x30/0x80
[   60.081840][ T1156]  ? clear_bhb_loop+0x30/0x80
[   60.086496][ T1156]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   60.092373][ T1156] RIP: 0033:0x7faff539de59
[   60.096770][ T1156] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   60.116359][ T1156] RSP: 002b:00007faff6196028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019
[   60.124755][ T1156] RAX: ffffffffffffffda RBX: 00007faff5625fa0 RCX: 00007faff539de59
[   60.132712][ T1156] RDX: 0000000000400000 RSI: 0000000000002000 RDI: 000020000020e000
[   60.140669][ T1156] RBP: 00007faff6196090 R08: 000020000082a000 R09: 0000000000000000
[   60.148623][ T1156] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001
[   60.156578][ T1156] R13: 00007faff5626038 R14: 00007faff5625fa0 R15: 00007ffe38c15718
[   60.164538][ T1156]  </TASK>
[   60.171667][  T369] asix 7-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[   60.173252][ T1196] FAT-fs (loop1): Directory bread(block 64) failed
[   60.183077][  T369] asix 7-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71
[   60.189755][ T1196] FAT-fs (loop1): Directory bread(block 65) failed
[   60.200861][  T369] asix: probe of 7-1:0.251 failed with error -71
[   60.211025][ T1196] FAT-fs (loop1): Directory bread(block 66) failed
[   60.219922][  T369] usb 7-1: USB disconnect, device number 3
[   60.221637][ T1196] FAT-fs (loop1): Directory bread(block 67) failed
[   60.232367][ T1196] FAT-fs (loop1): Directory bread(block 68) failed
[   60.239086][ T1196] FAT-fs (loop1): Directory bread(block 69) failed
[   60.245649][ T1196] FAT-fs (loop1): Directory bread(block 70) failed
[   60.252154][ T1196] FAT-fs (loop1): Directory bread(block 71) failed
[   60.259102][ T1196] FAT-fs (loop1): Directory bread(block 72) failed
[   60.265623][ T1196] FAT-fs (loop1): Directory bread(block 73) failed
[   60.294757][ T1198] FAULT_INJECTION: forcing a failure.
[   60.294757][ T1198] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   60.307849][  T311] Bluetooth: hci0: command 0x1003 tx timeout
[   60.307923][  T858] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   60.313935][ T1198] CPU: 0 PID: 1198 Comm: syz.1.273 Not tainted syzkaller #0
[   60.320075][  T451] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   60.327162][ T1198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   60.327175][ T1198] Call Trace:
[   60.327180][ T1198]  <TASK>
[   60.327186][ T1198]  __dump_stack+0x21/0x24
[   60.327209][ T1198]  dump_stack_lvl+0x110/0x170
[   60.327225][ T1198]  ? __cfi_dump_stack_lvl+0x8/0x8
[   60.337631][ T1150] Bluetooth: hci0: Opcode 0x0c20 failed: -22
[   60.344706][ T1198]  dump_stack+0x15/0x24
[   60.344733][ T1198]  should_fail_ex+0x3bf/0x510
[   60.344747][ T1198]  should_fail+0xb/0x10
[   60.344760][ T1198]  should_fail_usercopy+0x1a/0x20
[   60.388760][ T1198]  _copy_from_user+0x1e/0xc0
[   60.393347][ T1198]  iovec_from_user+0x1aa/0x2e0
[   60.398090][ T1198]  __import_iovec+0x6d/0x460
[   60.402664][ T1198]  ? kstrtoull+0x137/0x1d0
[   60.407067][ T1198]  import_iovec+0x7c/0xb0
[   60.411386][ T1198]  ___sys_sendmsg+0x252/0x360
[   60.416053][ T1198]  ? __sys_sendmsg+0x290/0x290
[   60.420802][ T1198]  ? __kasan_check_write+0x14/0x20
[   60.425900][ T1198]  ? proc_fail_nth_write+0x180/0x200
[   60.431173][ T1198]  ? vfs_write+0xa51/0xd00
[   60.435572][ T1198]  ? __fdget+0x19c/0x220
[   60.439799][ T1198]  __x64_sys_sendmsg+0x20d/0x2e0
[   60.444724][ T1198]  ? __cfi___x64_sys_sendmsg+0x10/0x10
[   60.450173][ T1198]  ? fpregs_assert_state_consistent+0xb1/0xe0
[   60.456225][ T1198]  x64_sys_call+0x171/0x9a0
[   60.460709][ T1198]  do_syscall_64+0x4c/0xa0
[   60.465107][ T1198]  ? clear_bhb_loop+0x30/0x80
[   60.469764][ T1198]  ? clear_bhb_loop+0x30/0x80
[   60.474450][ T1198]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   60.480329][ T1198] RIP: 0033:0x7efcb1f9de59
[   60.484725][ T1198] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   60.504313][ T1198] RSP: 002b:00007efcb2e90028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   60.512710][ T1198] RAX: ffffffffffffffda RBX: 00007efcb2225fa0 RCX: 00007efcb1f9de59
[   60.520664][ T1198] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[   60.528619][ T1198] RBP: 00007efcb2e90090 R08: 0000000000000000 R09: 0000000000000000
[   60.536569][ T1198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   60.544519][ T1198] R13: 00007efcb2226038 R14: 00007efcb2225fa0 R15: 00007ffc444775b8
[   60.552484][ T1198]  </TASK>
[   60.626203][ T1207] loop5: detected capacity change from 0 to 512
[   60.634434][ T1207] EXT4-fs (loop5): orphan cleanup on readonly fs
[   60.641049][ T1207] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.276: invalid indirect mapped block 28777 (level 2)
[   60.654777][ T1207] EXT4-fs (loop5): 1 truncate cleaned up
[   60.655693][  T451] usb 3-1: Using ep0 maxpacket: 16
[   60.668454][  T451] usb 3-1: config 1 has an invalid descriptor of length 230, skipping remainder of the config
[   60.669005][ T1207] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended
[   60.679333][  T451] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[   60.697548][ T1207] EXT4-fs (loop5): re-mounted. Quota mode: none.
[   60.697822][  T451] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89
[   60.712989][  T451] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   60.721073][  T451] usb 3-1: SerialNumber: syz
[   60.732950][  T451] usb 3-1: 0:2 : does not exist
[   60.738823][ T1211] FAULT_INJECTION: forcing a failure.
[   60.738823][ T1211] name failslab, interval 1, probability 0, space 0, times 0
[   60.751585][ T1211] CPU: 1 PID: 1211 Comm: syz.5.277 Not tainted syzkaller #0
[   60.758869][ T1211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   60.768927][ T1211] Call Trace:
[   60.772197][ T1211]  <TASK>
[   60.775113][ T1211]  __dump_stack+0x21/0x24
[   60.779425][ T1211]  dump_stack_lvl+0x110/0x170
[   60.784085][ T1211]  ? __cfi_dump_stack_lvl+0x8/0x8
[   60.789094][ T1211]  dump_stack+0x15/0x24
[   60.793288][ T1211]  should_fail_ex+0x3bf/0x510
[   60.797949][ T1211]  __should_failslab+0xac/0xf0
[   60.802694][ T1211]  should_failslab+0x9/0x20
[   60.807175][ T1211]  __kmem_cache_alloc_node+0x3d/0x2d0
[   60.812531][ T1211]  ? alloc_pipe_info+0x1f7/0x4a0
[   60.817523][ T1211]  ? alloc_pipe_info+0x1f7/0x4a0
[   60.822446][ T1211]  __kmalloc+0xa4/0x1e0
[   60.826579][ T1211]  alloc_pipe_info+0x1f7/0x4a0
[   60.831326][ T1211]  splice_direct_to_actor+0x975/0xb30
[   60.836682][ T1211]  ? selinux_file_permission+0x3ef/0x510
[   60.842300][ T1211]  ? fsnotify_perm+0x67/0x5b0
[   60.846960][ T1211]  ? security_file_permission+0x8a/0xb0
[   60.852504][ T1211]  ? __cfi_direct_splice_actor+0x10/0x10
[   60.858134][ T1211]  ? __cfi_splice_direct_to_actor+0x10/0x10
[   60.864015][ T1211]  ? security_file_permission+0x94/0xb0
[   60.869573][ T1211]  ? rw_verify_area+0xa7/0x1c0
[   60.874335][ T1211]  do_splice_direct+0x1c2/0x2d0
[   60.879193][ T1211]  ? __cfi_do_splice_direct+0x10/0x10
[   60.884568][ T1211]  ? security_file_permission+0x94/0xb0
[   60.890117][ T1211]  do_sendfile+0x515/0xe20
[   60.894524][ T1211]  ? __cfi_mutex_unlock+0x10/0x10
[   60.899563][ T1211]  ? do_preadv+0x390/0x390
[   60.903973][ T1211]  ? __kasan_check_write+0x14/0x20
[   60.909070][ T1211]  ? fput+0x154/0x1a0
[   60.913038][ T1211]  __x64_sys_sendfile64+0x199/0x1f0
[   60.918223][ T1211]  ? __cfi_ksys_write+0x10/0x10
[   60.923055][ T1211]  ? __cfi___x64_sys_sendfile64+0x10/0x10
[   60.928759][ T1211]  ? fpregs_assert_state_consistent+0xb1/0xe0
[   60.934810][ T1211]  x64_sys_call+0x62c/0x9a0
[   60.939298][ T1211]  do_syscall_64+0x4c/0xa0
[   60.943702][ T1211]  ? clear_bhb_loop+0x30/0x80
[   60.948361][ T1211]  ? clear_bhb_loop+0x30/0x80
[   60.953019][ T1211]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   60.958942][ T1211] RIP: 0033:0x7f84f319de59
[   60.963340][ T1211] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   60.982929][ T1211] RSP: 002b:00007f84f3fa0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[   60.991323][ T1211] RAX: ffffffffffffffda RBX: 00007f84f3425fa0 RCX: 00007f84f319de59
[   60.999277][ T1211] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000007
[   61.007232][ T1211] RBP: 00007f84f3fa0090 R08: 0000000000000000 R09: 0000000000000000
[   61.015184][ T1211] R10: 00000000578410eb R11: 0000000000000246 R12: 0000000000000001
[   61.023137][ T1211] R13: 00007f84f3426038 R14: 00007f84f3425fa0 R15: 00007ffde64b1b48
[   61.031094][ T1211]  </TASK>
[   61.034307][    T6] usb 2-1: new full-speed USB device number 5 using dummy_hcd
[   61.102970][ T1213] loop6: detected capacity change from 0 to 1024
[   61.116260][ T1213] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   61.116342][ T1220] loop5: detected capacity change from 0 to 1024
[   61.135685][ T1220] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   61.208470][   T28] kauditd_printk_skb: 14 callbacks suppressed
[   61.208483][   T28] audit: type=1400 audit(1783750040.903:261): avc:  denied  { read } for  pid=1225 comm="syz.6.281" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   61.238648][   T28] audit: type=1400 audit(1783750040.903:262): avc:  denied  { open } for  pid=1225 comm="syz.6.281" path="/25/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   61.265056][   T28] audit: type=1400 audit(1783750040.953:263): avc:  denied  { write } for  pid=1190 comm="syz.2.270" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   61.276512][ T1191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   61.286880][   T28] audit: type=1400 audit(1783750040.953:264): avc:  denied  { remove_name } for  pid=1190 comm="syz.2.270" name="file0" dev="loop2" ino=1048626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   61.317948][ T1191] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   61.318932][ T1228] FAULT_INJECTION: forcing a failure.
[   61.318932][ T1228] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   61.325752][    T6] usb 2-1: unable to get BOS descriptor or descriptor too short
[   61.346545][ T1228] CPU: 1 PID: 1228 Comm: syz.6.282 Not tainted syzkaller #0
[   61.346718][   T28] audit: type=1400 audit(1783750040.953:265): avc:  denied  { rename } for  pid=1190 comm="syz.2.270" name="file0" dev="loop2" ino=1048626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   61.353832][ T1228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   61.353842][ T1228] Call Trace:
[   61.353848][ T1228]  <TASK>
[   61.353854][ T1228]  __dump_stack+0x21/0x24
[   61.376368][   T28] audit: type=1400 audit(1783750040.953:266): avc:  denied  { add_name } for  pid=1190 comm="syz.2.270" name="file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   61.386259][ T1228]  dump_stack_lvl+0x110/0x170
[   61.386284][ T1228]  ? __cfi_dump_stack_lvl+0x8/0x8
[   61.389621][   T28] audit: type=1400 audit(1783750040.973:267): avc:  denied  { associate } for  pid=1190 comm="syz.2.270" name="blkio.throttle.io_service_bytes" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   61.392457][ T1228]  dump_stack+0x15/0x24
[   61.396807][   T28] audit: type=1400 audit(1783750040.973:268): avc:  denied  { append } for  pid=1190 comm="syz.2.270" path="/58/file0/blkio.throttle.io_service_bytes" dev="loop2" ino=1048627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   61.438573][ T1228]  should_fail_ex+0x3bf/0x510
[   61.438597][ T1228]  should_fail+0xb/0x10
[   61.438609][ T1228]  should_fail_usercopy+0x1a/0x20
[   61.438624][ T1228]  _copy_from_user+0x1e/0xc0
[   61.454561][    T6] usb 2-1: not running at top speed; connect to a high speed hub
[   61.471955][ T1228]  iovec_from_user+0x1aa/0x2e0
[   61.471990][ T1228]  __import_iovec+0x6d/0x460
[   61.472004][ T1228]  ? kstrtoull+0x137/0x1d0
[   61.482985][    T6] usb 2-1: New USB device found, idVendor=194f, idProduct=010c, bcdDevice= 0.40
[   61.503469][ T1228]  import_iovec+0x7c/0xb0
[   61.503497][ T1228]  ___sys_sendmsg+0x252/0x360
[   61.503514][ T1228]  ? __sys_sendmsg+0x290/0x290
[   61.503532][ T1228]  ? __kasan_check_write+0x14/0x20
[   61.503548][ T1228]  ? proc_fail_nth_write+0x180/0x200
[   61.508602][    T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   61.512331][ T1228]  ? vfs_write+0xa51/0xd00
[   61.517613][    T6] usb 2-1: Product: syz
[   61.521898][ T1228]  ? __fdget+0x19c/0x220
[   61.521917][ T1228]  __x64_sys_sendmsg+0x20d/0x2e0
[   61.521935][ T1228]  ? __cfi___x64_sys_sendmsg+0x10/0x10
[   61.521955][ T1228]  ? fpregs_assert_state_consistent+0xb1/0xe0
[   61.521975][ T1228]  x64_sys_call+0x171/0x9a0
[   61.530008][    T6] usb 2-1: Manufacturer: syz
[   61.534396][ T1228]  do_syscall_64+0x4c/0xa0
[   61.539112][    T6] usb 2-1: SerialNumber: syz
[   61.543351][ T1228]  ? clear_bhb_loop+0x30/0x80
[   61.543369][ T1228]  ? clear_bhb_loop+0x30/0x80
[   61.640683][ T1228]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   61.646566][ T1228] RIP: 0033:0x7faff539de59
[   61.650961][ T1228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   61.670555][ T1228] RSP: 002b:00007faff6196028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   61.678974][ T1228] RAX: ffffffffffffffda RBX: 00007faff5625fa0 RCX: 00007faff539de59
[   61.686937][ T1228] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[   61.694896][ T1228] RBP: 00007faff6196090 R08: 0000000000000000 R09: 0000000000000000
[   61.702949][ T1228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   61.710905][ T1228] R13: 00007faff5626038 R14: 00007faff5625fa0 R15: 00007ffe38c15718
[   61.718884][ T1228]  </TASK>
[   61.735252][  T451] usb 3-1: 5:0: failed to get current value for ch 1 (-22)
[   61.742703][   T28] audit: type=1400 audit(1783750041.443:269): avc:  denied  { nlmsg_write } for  pid=1229 comm="syz.5.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   61.760848][  T451] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[   61.783779][   T28] audit: type=1400 audit(1783750041.473:270): avc:  denied  { create } for  pid=1234 comm="syz.6.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   61.808968][  T451] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5)
[   61.819605][  T451] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5)
[   61.834049][ T1240] loop6: detected capacity change from 0 to 512
[   61.834502][  T451] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5)
[   61.851044][ T1240] EXT4-fs (loop6): orphan cleanup on readonly fs
[   61.858875][ T1240] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.287: invalid indirect mapped block 28777 (level 2)
[   61.872873][ T1240] EXT4-fs (loop6): 1 truncate cleaned up
[   61.885346][  T451] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5)
[   61.890851][ T1240] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended
[   61.895463][  T451] usb 3-1: 5:0: cannot get min/max values for control 4 (id 5)
[   61.910063][ T1240] EXT4-fs (loop6): re-mounted. Quota mode: none.
[   61.912416][  T451] usb 3-1: 5:0: cannot get min/max values for control 4 (id 5)
[   61.930684][  T451] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5)
[   61.959172][  T451] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5)
[   61.981664][  T451] usb 3-1: 5:0: failed to get current value for ch 1 (-22)
[   61.982309][ T1248] EXT4-fs: Ignoring removed nobh option
[   61.998826][  T451] usb 3-1: 5:0: failed to get current value for ch 3 (-22)
[   62.015271][ T1248] EXT4-fs error (device loop5): ext4_iget_extra_inode:4765: inode #15: comm syz.5.290: corrupted in-inode xattr
[   62.016967][  T451] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[   62.039205][ T1248] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.290: couldn't read orphan inode 15 (err -117)
[   62.060548][  T451] usb 3-1: 5:0: cannot get min/max values for control 8 (id 5)
[   62.068917][ T1256] netlink: 16 bytes leftover after parsing attributes in process `syz.2.293'.
[   62.077970][  T451] usb 3-1: 5:0: cannot get min/max values for control 8 (id 5)
[   62.098645][  T451] usb 3-1: USB disconnect, device number 5
[   62.161870][ T1264] EXT4-fs (loop2): Test dummy encryption mode enabled
[   62.168773][ T1264] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   62.179995][ T1264] EXT4-fs error (device loop2): ext4_orphan_get:1431: comm syz.2.296: bad orphan inode 131072
[   62.193667][ T1264] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[   62.281371][ T1274] EXT4-fs (loop2): orphan cleanup on readonly fs
[   62.296883][    T6] usb 2-1: incorrect wMaxPacketSize 0x3ff for BADD profile
[   62.338503][    T6] snd-usb-audio: probe of 2-1:1.0 failed with error -22
[   62.375608][    C1] ==================================================================
[   62.380571][  T340] udevd[340]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory
[   62.383691][    C1] BUG: KASAN: use-after-free in __run_timers+0x341/0x9b0
[   62.401566][    T6] usb 2-1: USB disconnect, device number 5
[   62.406289][    C1] Write of size 8 at addr ffff88811de48a00 by task syz.5.294/1271
[   62.406307][    C1] 
[   62.406312][    C1] CPU: 1 PID: 1271 Comm: syz.5.294 Not tainted syzkaller #0
[   62.406329][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   62.412317][ T1274] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.298: invalid indirect mapped block 28777 (level 2)
[   62.419886][    C1] Call Trace:
[   62.419895][    C1]  <IRQ>
[   62.419903][    C1]  __dump_stack+0x21/0x24
[   62.419928][    C1]  dump_stack_lvl+0x110/0x170
[   62.467888][    C1]  ? __cfi_dump_stack_lvl+0x8/0x8
[   62.472908][    C1]  ? __cfi_trigger_load_balance+0x10/0x10
[   62.478614][    C1]  ? __run_timers+0x341/0x9b0
[   62.483278][    C1]  print_address_description+0x71/0x200
[   62.488809][    C1]  print_report+0x4a/0x60
[   62.493122][    C1]  kasan_report+0x122/0x150
[   62.497613][    C1]  ? __run_timers+0x341/0x9b0
[   62.502280][    C1]  __asan_report_store8_noabort+0x17/0x20
[   62.507980][    C1]  __run_timers+0x341/0x9b0
[   62.512472][    C1]  ? sched_clock_cpu+0x6e/0x260
[   62.517306][    C1]  ? calc_index+0x200/0x200
[   62.521797][    C1]  ? kvm_sched_clock_read+0x18/0x40
[   62.526983][    C1]  run_timer_softirq+0x6a/0xf0
[   62.531742][    C1]  handle_softirqs+0x1d7/0x600
[   62.536492][    C1]  __irq_exit_rcu+0x52/0xf0
[   62.540977][    C1]  irq_exit_rcu+0x9/0x10
[   62.545197][    C1]  sysvec_apic_timer_interrupt+0xa9/0xc0
[   62.550823][    C1]  </IRQ>
[   62.553735][    C1]  <TASK>
[   62.556653][    C1]  asm_sysvec_apic_timer_interrupt+0x1b/0x20
[   62.562636][    C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x55/0x80
[   62.569038][    C1] Code: 80 db 0d 87 e8 7c ef b5 fc 4c 89 f7 48 83 3d 11 dc 0c 02 00 74 30 e8 9e 0d 00 00 90 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> d6 94 4b fc 65 8b 05 37 6e 01 7b 85 c0 74 05 5b 41 5e 5d c3 e8
[   62.588625][    C1] RSP: 0018:ffffc90004c1f5c0 EFLAGS: 00000206
[   62.594673][    C1] RAX: 0000000000000001 RBX: 0000000000000a02 RCX: dffffc0000000000
[   62.602626][    C1] RDX: ffffc90004a97678 RSI: 0000000000000a02 RDI: 0000000000000001
[   62.610578][    C1] RBP: ffffc90004c1f5d0 R08: ffff888110065107 R09: 1ffff1102200ca20
[   62.618623][    C1] R10: dffffc0000000000 R11: ffffed102200ca21 R12: ffff888109861300
[   62.626574][    C1] R13: 0000000000000010 R14: 0000000000000001 R15: 0000000000000000
[   62.634533][    C1]  __wake_up_sync_key+0x17b/0x2b0
[   62.639549][    C1]  ? __cfi___wake_up_sync_key+0x10/0x10
[   62.645102][    C1]  ? __skb_try_recv_datagram+0x3dc/0x4d0
[   62.650721][    C1]  ? __cfi_sk_busy_loop_end+0x10/0x10
[   62.656084][    C1]  __unix_dgram_recvmsg+0x4b5/0xd90
[   62.661268][    C1]  ? __cfi___unix_dgram_recvmsg+0x10/0x10
[   62.666976][    C1]  ? exc_page_fault+0x5e/0xb0
[   62.671640][    C1]  unix_dgram_recvmsg+0xc7/0xe0
[   62.676482][    C1]  ? __cfi_unix_dgram_recvmsg+0x10/0x10
[   62.682014][    C1]  ____sys_recvmsg+0x2d6/0x5c0
[   62.686768][    C1]  ? __sys_recvmsg_sock+0x50/0x50
[   62.691782][    C1]  ? import_iovec+0x7c/0xb0
[   62.696264][    C1]  ___sys_recvmsg+0x210/0x590
[   62.700924][    C1]  ? __sys_recvmsg+0x290/0x290
[   62.705760][    C1]  ? cgroup_rstat_updated+0xf0/0x360
[   62.711029][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1b/0x20
[   62.717176][    C1]  do_recvmmsg+0x370/0x7e0
[   62.721583][    C1]  ? __sys_recvmmsg+0x290/0x290
[   62.726429][    C1]  ? _raw_spin_lock_irq+0x95/0xf0
[   62.731439][    C1]  ? __cfi__raw_spin_lock_irqsave+0x10/0x10
[   62.737314][    C1]  ? __set_current_blocked+0x208/0x230
[   62.742761][    C1]  ? __fget_files+0x2d1/0x330
[   62.747422][    C1]  __x64_sys_recvmmsg+0x195/0x250
[   62.752433][    C1]  ? __kasan_check_write+0x14/0x20
[   62.757527][    C1]  ? __cfi___x64_sys_recvmmsg+0x10/0x10
[   62.763060][    C1]  ? fpregs_assert_state_consistent+0xb1/0xe0
[   62.769111][    C1]  x64_sys_call+0x3e7/0x9a0
[   62.773597][    C1]  do_syscall_64+0x4c/0xa0
[   62.777993][    C1]  ? clear_bhb_loop+0x30/0x80
[   62.782650][    C1]  ? clear_bhb_loop+0x30/0x80
[   62.787304][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   62.793186][    C1] RIP: 0033:0x7f84f319de59
[   62.797585][    C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   62.817181][    C1] RSP: 002b:00007f84f3f7f028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[   62.825572][    C1] RAX: ffffffffffffffda RBX: 00007f84f3426090 RCX: 00007f84f319de59
[   62.833529][    C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004
[   62.841481][    C1] RBP: 00007f84f3233e6f R08: 0000000000000000 R09: 0000000000000000
[   62.849437][    C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000
[   62.857386][    C1] R13: 00007f84f3426128 R14: 00007f84f3426090 R15: 00007ffde64b1b48
[   62.865343][    C1]  </TASK>
[   62.868343][    C1] 
[   62.870646][    C1] Allocated by task 1150:
[   62.874961][    C1]  kasan_set_track+0x4b/0x70
[   62.879536][    C1]  kasan_save_alloc_info+0x1f/0x30
[   62.884625][    C1]  __kasan_kmalloc+0x95/0xb0
[   62.889195][    C1]  __kmalloc+0xb4/0x1e0
[   62.893330][    C1]  hci_alloc_dev_priv+0x27/0x1bd0
[   62.898337][    C1]  hci_uart_tty_ioctl+0x3c4/0xa40
[   62.903370][    C1]  tty_ioctl+0x8ef/0xc60
[   62.907601][    C1]  __se_sys_ioctl+0x12f/0x1b0
[   62.912257][    C1]  __x64_sys_ioctl+0x7b/0x90
[   62.916827][    C1]  x64_sys_call+0x58b/0x9a0
[   62.921315][    C1]  do_syscall_64+0x4c/0xa0
[   62.925713][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   62.931591][    C1] 
[   62.933892][    C1] Freed by task 1150:
[   62.937847][    C1]  kasan_set_track+0x4b/0x70
[   62.942430][    C1]  kasan_save_free_info+0x2b/0x40
[   62.947454][    C1]  ____kasan_slab_free+0x132/0x180
[   62.952563][    C1]  __kasan_slab_free+0x11/0x20
[   62.957318][    C1]  slab_free_freelist_hook+0xc2/0x190
[   62.962684][    C1]  __kmem_cache_free+0xb7/0x1b0
[   62.967525][    C1]  kfree+0x6f/0xf0
[   62.971225][    C1]  hci_release_dev+0x12a3/0x13b0
[   62.976146][    C1]  bt_host_release+0x82/0x90
[   62.980726][    C1]  device_release+0xa4/0x1d0
[   62.985304][    C1]  kobject_put+0x19d/0x280
[   62.989704][    C1]  put_device+0x1f/0x30
[   62.993833][    C1]  hci_dev_cmd+0x279/0x740
[   62.998229][    C1]  hci_sock_ioctl+0x41e/0x7f0
[   63.002899][    C1]  sock_do_ioctl+0x114/0x330
[   63.007648][    C1]  sock_ioctl+0x475/0x700
[   63.011966][    C1]  __se_sys_ioctl+0x12f/0x1b0
[   63.016636][    C1]  __x64_sys_ioctl+0x7b/0x90
[   63.021214][    C1]  x64_sys_call+0x58b/0x9a0
[   63.025716][    C1]  do_syscall_64+0x4c/0xa0
[   63.030113][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   63.035996][    C1] 
[   63.038299][    C1] Last potentially related work creation:
[   63.043995][    C1]  kasan_save_stack+0x3a/0x60
[   63.048659][    C1]  __kasan_record_aux_stack+0xb6/0xc0
[   63.054011][    C1]  kasan_record_aux_stack_noalloc+0xb/0x10
[   63.059796][    C1]  insert_work+0x51/0x300
[   63.064124][    C1]  __queue_work+0x9d0/0xd50
[   63.068612][    C1]  queue_work_on+0xde/0x150
[   63.073102][    C1]  __hci_cmd_sync_sk+0xaa8/0xd80
[   63.078024][    C1]  hci_cmd_sync_status+0x53/0x120
[   63.083035][    C1]  hci_dev_cmd+0x642/0x740
[   63.087442][    C1]  hci_sock_ioctl+0x41e/0x7f0
[   63.092102][    C1]  sock_do_ioctl+0x114/0x330
[   63.096678][    C1]  sock_ioctl+0x475/0x700
[   63.100990][    C1]  __se_sys_ioctl+0x12f/0x1b0
[   63.105655][    C1]  __x64_sys_ioctl+0x7b/0x90
[   63.110233][    C1]  x64_sys_call+0x58b/0x9a0
[   63.114724][    C1]  do_syscall_64+0x4c/0xa0
[   63.119119][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   63.124999][    C1] 
[   63.127302][    C1] Second to last potentially related work creation:
[   63.133860][    C1]  kasan_save_stack+0x3a/0x60
[   63.138523][    C1]  __kasan_record_aux_stack+0xb6/0xc0
[   63.143874][    C1]  kasan_record_aux_stack_noalloc+0xb/0x10
[   63.149658][    C1]  insert_work+0x51/0x300
[   63.153971][    C1]  __queue_work+0x9d0/0xd50
[   63.158454][    C1]  queue_work_on+0xde/0x150
[   63.162938][    C1]  hci_cmd_timeout+0x191/0x200
[   63.167711][    C1]  process_one_work+0x717/0xc30
[   63.172540][    C1]  worker_thread+0xa4d/0x11d0
[   63.177195][    C1]  kthread+0x281/0x320
[   63.181244][    C1]  ret_from_fork+0x1f/0x30
[   63.185650][    C1] 
[   63.187975][    C1] The buggy address belongs to the object at ffff88811de48000
[   63.187975][    C1]  which belongs to the cache kmalloc-8k of size 8192
[   63.202031][    C1] The buggy address is located 2560 bytes inside of
[   63.202031][    C1]  8192-byte region [ffff88811de48000, ffff88811de4a000)
[   63.215472][    C1] 
[   63.217782][    C1] The buggy address belongs to the physical page:
[   63.224186][    C1] page:ffffea0004779200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11de48
[   63.234403][    C1] head:ffffea0004779200 order:3 compound_mapcount:0 compound_pincount:0
[   63.242705][    C1] flags: 0x4000000000010200(slab|head|zone=1)
[   63.248772][    C1] raw: 4000000000010200 0000000000000000 dead000000000001 ffff888100043500
[   63.257341][    C1] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000
[   63.265910][    C1] page dumped because: kasan: bad access detected
[   63.272295][    C1] page_owner tracks the page as allocated
[   63.277985][    C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 135, tgid 135 (ip), ts 5235988121, free_ts 0
[   63.295242][    C1]  post_alloc_hook+0x1f5/0x210
[   63.299999][    C1]  prep_new_page+0x1c/0x110
[   63.304484][    C1]  get_page_from_freelist+0x2ca9/0x2d20
[   63.310013][    C1]  __alloc_pages+0x1fa/0x610
[   63.314589][    C1]  alloc_slab_page+0x6e/0xf0
[   63.319175][    C1]  new_slab+0x98/0x3e0
[   63.323238][    C1]  ___slab_alloc+0x70f/0xb70
[   63.327820][    C1]  __slab_alloc+0x5e/0xa0
[   63.332146][    C1]  __kmem_cache_alloc_node+0x204/0x2d0
[   63.337600][    C1]  kmalloc_trace+0x29/0xb0
[   63.341997][    C1]  audit_log_d_path+0xc6/0x240
[   63.346747][    C1]  common_lsm_audit+0x330/0x1730
[   63.351680][    C1]  slow_avc_audit+0x1c4/0x240
[   63.356340][    C1]  avc_has_perm+0x1fb/0x250
[   63.360823][    C1]  file_has_perm+0x52d/0x700
[   63.365401][    C1]  match_file+0xc8/0x130
[   63.369632][    C1] page_owner free stack trace missing
[   63.374975][    C1] 
[   63.377277][    C1] Memory state around the buggy address:
[   63.382885][    C1]  ffff88811de48900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   63.390926][    C1]  ffff88811de48980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   63.398963][    C1] >ffff88811de48a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   63.406996][    C1]                    ^
[   63.411035][    C1]  ffff88811de48a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   63.419074][    C1]  ffff88811de48b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   63.427110][    C1] ==================================================================
[   63.435143][    C1] Disabling lock debugging due to kernel taint
[   63.441328][    C1] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN
[   63.453024][    C1] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[   63.461413][    C1] CPU: 1 PID: 1271 Comm: syz.5.294 Tainted: G    B              syzkaller #0
[   63.470155][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[   63.480187][    C1] RIP: 0010:__queue_work+0x582/0xd50
[   63.485462][    C1] Code: b4 00 00 00 e8 7f 4d 29 00 48 bb 00 00 00 00 00 fc ff df 4c 89 ef e8 ed e7 b8 03 4c 8b 65 d0 4c 8b 6d c0 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 00 d8 6e 00 49 8b 3e e8 88 e3 b8 03
[   63.505044][    C1] RSP: 0018:ffffc900001b0c78 EFLAGS: 00010046
[   63.511094][    C1] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff88811473d100
[   63.519046][    C1] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff
[   63.526997][    C1] RBP: ffffc900001b0d08 R08: 0000000000000007 R09: 00000000fffffffb
[   63.534945][    C1] R10: dffffc0000000000 R11: ffffed1023bc9139 R12: ffff88811de489c8
[   63.542896][    C1] R13: ffff88812d84d000 R14: 0000000000000000 R15: 000000007fffffff
[   63.550848][    C1] FS:  00007f84f3f7f6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[   63.560026][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   63.566602][    C1] CR2: 00002000001dd030 CR3: 000000013a7ff000 CR4: 00000000003526a0
[   63.574564][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   63.582524][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   63.590484][    C1] Call Trace:
[   63.593757][    C1]  <IRQ>
[   63.596595][    C1]  delayed_work_timer_fn+0x61/0x80
[   63.601698][    C1]  ? __cfi_delayed_work_timer_fn+0x10/0x10
[   63.607490][    C1]  call_timer_fn+0x46/0x2a0
[   63.611981][    C1]  ? __cfi_delayed_work_timer_fn+0x10/0x10
[   63.617775][    C1]  __run_timers+0x672/0x9b0
[   63.622271][    C1]  ? calc_index+0x200/0x200
[   63.626762][    C1]  ? kvm_sched_clock_read+0x18/0x40
[   63.631951][    C1]  run_timer_softirq+0x6a/0xf0
[   63.636698][    C1]  handle_softirqs+0x1d7/0x600
[   63.641446][    C1]  __irq_exit_rcu+0x52/0xf0
[   63.645930][    C1]  irq_exit_rcu+0x9/0x10
[   63.650152][    C1]  sysvec_apic_timer_interrupt+0xa9/0xc0
[   63.655788][    C1]  </IRQ>
[   63.658700][    C1]  <TASK>
[   63.661613][    C1]  asm_sysvec_apic_timer_interrupt+0x1b/0x20
[   63.667577][    C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x55/0x80
[   63.673978][    C1] Code: 80 db 0d 87 e8 7c ef b5 fc 4c 89 f7 48 83 3d 11 dc 0c 02 00 74 30 e8 9e 0d 00 00 90 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> d6 94 4b fc 65 8b 05 37 6e 01 7b 85 c0 74 05 5b 41 5e 5d c3 e8
[   63.693617][    C1] RSP: 0018:ffffc90004c1f5c0 EFLAGS: 00000206
[   63.699683][    C1] RAX: 0000000000000001 RBX: 0000000000000a02 RCX: dffffc0000000000
[   63.707635][    C1] RDX: ffffc90004a97678 RSI: 0000000000000a02 RDI: 0000000000000001
[   63.715592][    C1] RBP: ffffc90004c1f5d0 R08: ffff888110065107 R09: 1ffff1102200ca20
[   63.723548][    C1] R10: dffffc0000000000 R11: ffffed102200ca21 R12: ffff888109861300
[   63.731501][    C1] R13: 0000000000000010 R14: 0000000000000001 R15: 0000000000000000
[   63.739454][    C1]  __wake_up_sync_key+0x17b/0x2b0
[   63.744468][    C1]  ? __cfi___wake_up_sync_key+0x10/0x10
[   63.750000][    C1]  ? __skb_try_recv_datagram+0x3dc/0x4d0
[   63.755614][    C1]  ? __cfi_sk_busy_loop_end+0x10/0x10
[   63.760977][    C1]  __unix_dgram_recvmsg+0x4b5/0xd90
[   63.766168][    C1]  ? __cfi___unix_dgram_recvmsg+0x10/0x10
[   63.771871][    C1]  ? exc_page_fault+0x5e/0xb0
[   63.776528][    C1]  unix_dgram_recvmsg+0xc7/0xe0
[   63.781377][    C1]  ? __cfi_unix_dgram_recvmsg+0x10/0x10
[   63.786907][    C1]  ____sys_recvmsg+0x2d6/0x5c0
[   63.791657][    C1]  ? __sys_recvmsg_sock+0x50/0x50
[   63.796668][    C1]  ? import_iovec+0x7c/0xb0
[   63.801186][    C1]  ___sys_recvmsg+0x210/0x590
[   63.805846][    C1]  ? __sys_recvmsg+0x290/0x290
[   63.810593][    C1]  ? cgroup_rstat_updated+0xf0/0x360
[   63.815860][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1b/0x20
[   63.822005][    C1]  do_recvmmsg+0x370/0x7e0
[   63.826407][    C1]  ? __sys_recvmmsg+0x290/0x290
[   63.831244][    C1]  ? _raw_spin_lock_irq+0x95/0xf0
[   63.836251][    C1]  ? __cfi__raw_spin_lock_irqsave+0x10/0x10
[   63.842125][    C1]  ? __set_current_blocked+0x208/0x230
[   63.847579][    C1]  ? __fget_files+0x2d1/0x330
[   63.852237][    C1]  __x64_sys_recvmmsg+0x195/0x250
[   63.857247][    C1]  ? __kasan_check_write+0x14/0x20
[   63.862340][    C1]  ? __cfi___x64_sys_recvmmsg+0x10/0x10
[   63.867871][    C1]  ? fpregs_assert_state_consistent+0xb1/0xe0
[   63.873922][    C1]  x64_sys_call+0x3e7/0x9a0
[   63.878408][    C1]  do_syscall_64+0x4c/0xa0
[   63.882806][    C1]  ? clear_bhb_loop+0x30/0x80
[   63.887461][    C1]  ? clear_bhb_loop+0x30/0x80
[   63.892116][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   63.898000][    C1] RIP: 0033:0x7f84f319de59
[   63.902397][    C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   63.921980][    C1] RSP: 002b:00007f84f3f7f028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[   63.930374][    C1] RAX: ffffffffffffffda RBX: 00007f84f3426090 RCX: 00007f84f319de59
[   63.938328][    C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004
[   63.946282][    C1] RBP: 00007f84f3233e6f R08: 0000000000000000 R09: 0000000000000000
[   63.954232][    C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000
[   63.962187][    C1] R13: 00007f84f3426128 R14: 00007f84f3426090 R15: 00007ffde64b1b48
[   63.970145][    C1]  </TASK>
[   63.973146][    C1] Modules linked in:
[   63.977033][    C1] ---[ end trace 0000000000000000 ]---
[   63.982464][    C1] RIP: 0010:__queue_work+0x582/0xd50
[   63.987738][    C1] Code: b4 00 00 00 e8 7f 4d 29 00 48 bb 00 00 00 00 00 fc ff df 4c 89 ef e8 ed e7 b8 03 4c 8b 65 d0 4c 8b 6d c0 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 00 d8 6e 00 49 8b 3e e8 88 e3 b8 03
[   64.007325][    C1] RSP: 0018:ffffc900001b0c78 EFLAGS: 00010046
[   64.013376][    C1] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff88811473d100
[   64.021328][    C1] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff
[   64.029282][    C1] RBP: ffffc900001b0d08 R08: 0000000000000007 R09: 00000000fffffffb
[   64.037231][    C1] R10: dffffc0000000000 R11: ffffed1023bc9139 R12: ffff88811de489c8
[   64.045184][    C1] R13: ffff88812d84d000 R14: 0000000000000000 R15: 000000007fffffff
[   64.053138][    C1] FS:  00007f84f3f7f6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[   64.062047][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   64.068608][    C1] CR2: 00002000001dd030 CR3: 000000013a7ff000 CR4: 00000000003526a0
[   64.076599][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   64.084554][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   64.092515][    C1] Kernel panic - not syncing: Fatal exception in interrupt
[   64.099943][    C1] Kernel Offset: disabled
[   64.104250][    C1] Rebooting in 86400 seconds..