last executing test programs:

12.554532065s ago: executing program 2 (id=529):
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
epoll_create1(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x68)
pivot_root(&(0x7f0000000000)='./file0\x00', 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x9, @none, 0x0, 0x1}, 0xe)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40940, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000400)={[{@quota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}, {@errors_remount}, {@sysvgroups}]}, 0x3, 0x79b, &(0x7f0000001200)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000140)={0xd, 0x4, 0x6, 0x7})

11.649594686s ago: executing program 2 (id=543):
r0 = socket(0x840000000002, 0x3, 0xff)
sendmsg$inet(r0, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000001940)=[{0x0}, {&(0x7f0000000940)="fa125461d8bf", 0x6}], 0x2, &(0x7f0000000600)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x44}, @loopback}}}], 0x20}, 0x0)

11.636651657s ago: executing program 2 (id=545):
syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@const={0x0, 0x0, 0x0, 0x9}, @restrict={0x0, 0x0, 0x0, 0xb, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}]}}, 0x0, 0x4a}, 0x28)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0x7005, 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0)
syz_open_procfs(0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00')
write$UHID_INPUT2(r3, &(0x7f0000000300)={0xc, {0x52, "6d07c346e2f8e87d7e6d186a86d6686be7b08e329f91a222b1562eb7e520dd5984e6c80770d65f84d1d1a3d0eeebd512d307daed6fdfb8cd40845d23044015a5e888689581a1b3e4829644ba0056cd942e58"}}, 0x58)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x23}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCFLSH(r4, 0x5608, 0x0)

10.249265971s ago: executing program 2 (id=550):
ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f00000002c0)={0x0, 0xffff, 0x0, 0x0, <r0=>0xffffffffffffffff})
keyctl$join(0x1, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000008340)={0x2020, 0x0, 0x0, <r1=>0x0}, 0x2020)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={<r3=>0x0, <r4=>0x0, <r5=>0x0}, &(0x7f0000000180)=0xc)
syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r4, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX=r5, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14f9, &(0x7f0000006e40)="$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")
r6 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc))
r7 = getuid()
getresgid(&(0x7f0000002440), &(0x7f0000002480), &(0x7f00000024c0)=<r8=>0x0)
r9 = syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x20010080, &(0x7f0000000480)=ANY=[@ANYBLOB='allow_utime=00000000000000000000007,dmask=00000000000000001,iocharset=macroman,allow_utime=00000000000000000000002,uid=', @ANYRES64=<r10=>0xffffffffffffffff, @ANYRESOCT, @ANYBLOB="2a3a6dc4d70cd8504afe4f20df34ad3cf37d706dd73fd000", @ANYRESDEC, @ANYRESHEX], 0x1, 0x14f3, &(0x7f0000005940)="$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")
syz_mount_image$fuse(&(0x7f0000000340), &(0x7f0000002cc0)='./file0\x00', 0x10080, &(0x7f0000000a80)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c64656661756c745f70657265697373696f6e732c626c6b736981653d3078303030303030303030303030303030302c02c680f4616973636f6e746578743d756e636f6e66696e65645f752c69742c657569643c00"/103, @ANYRES16=r8, @ANYRES64=r4, @ANYRESOCT=0x0, @ANYRESOCT=r7, @ANYRES64=r8, @ANYRESDEC, @ANYRES32, @ANYRESOCT=r10, @ANYRES32=r1, @ANYRESHEX=r3], 0x1, 0x0, &(0x7f0000002e80)="78affdb7b63541b4efeba555d9dd965e2f6a1ccdf05f05f335a9bbe4227f49a9e2a484ed8700ad33311b95b3120bed208934649cefb2ff9e4f54e37a0692eabe89c0fc335db2c5b00dd1ffcfa2fa5d5783069de6f4c94e79c8435438b69d16be60a1d1a067884fc9e7caa51b")
r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002680)={0x6, 0x2, &(0x7f0000002500)=ANY=[@ANYBLOB="186220000c0000000000000006000000"], &(0x7f0000002540)='syzkaller\x00', 0xceb4, 0x3e, &(0x7f0000002580)=""/62, 0x40f00, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000025c0)={0xffffffff, 0x5, 0x6, 0xffffff9c}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000002600)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000002640)=[{0x1, 0x4, 0xf, 0x7}, {0x3, 0x5, 0x7, 0x7}], 0x10, 0x4}, 0x94)
r12 = syz_open_dev$vcsu(&(0x7f0000002740), 0xffff, 0x10400)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000002780)=<r13=>0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r12, 0x29, 0x22, &(0x7f0000000780)={{{@in, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r14=>0x0}}, {{@in=@broadcast}, 0x0, @in6=@local}}, &(0x7f0000002d00)=0xe8)
fstat(r9, &(0x7f0000002f00)={0x0, 0x0, 0x0, 0x0, 0x0, <r15=>0x0})
r16 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r16, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="540000001200010004000000000000000a030000fffc4e220200000308000000000000380000000100"/56, @ANYRES32=0x0, @ANYBLOB="01000000ffffff7f000000000000000008000300", @ANYRESHEX], 0x54}}, 0x200040c4)
r17 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000002980)='devices.deny\x00', 0x2, 0x0)
r18 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r19 = syz_open_procfs(r18, &(0x7f0000000480)='task\x00')
fchdir(r19)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000029c0)=<r20=>0x0)
statx(0xffffffffffffff9c, &(0x7f0000002a00)='./file0\x00', 0x2000, 0x800, &(0x7f0000002a40)={0x0, 0x0, 0x0, 0x0, <r21=>0x0})
fstat(0xffffffffffffffff, &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x0, <r22=>0x0})
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002c80)=[{{&(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000180)="bb1864d64efa3f196235921f169140d015f6141c6de304e97a9167218c0639c0d8639cbaecb70320c0528178e14b99e6e983a09b3bfb73d1ddb840f52a41611629ba278849131c79bce3d2a47297e418d591b7ae1ec53847311050a17652b04d9f5d9be083a15e2efa24157aa9c5bf72859a509489f0505ba64c8913d4fa97d993d9c45255c6709a9bae6f1d8b049e25424d9b6effe014003ff24f65fe7def829d96d368f041bd771308", 0xaa}, {&(0x7f0000000240)="0a9707d236a5db0df42822f39aefd9821b14e3828a8fa44fa98c111b4653793c622768c1e4ce43db859fa85c8432e2b820f0c4cc0d6c932e0bad", 0x3a}], 0x2, &(0x7f0000002f80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r5, @ANYRESOCT=r22, @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r13, @ANYRES32=r14, @ANYRES32=r15, @ANYBLOB="000000001c0000000000000001000000010000009d5247bd28caf3240f50d6d433e73d4bb968ab14e4134e4a3dee36bad42221bc5a97f5d6be34d81744f0ef4636992d0095bfab21e6a975c7bab312b11e3d520a6c18b919a6bf781a5d475dd24f4a71fb46d21e2e48ee47c92eb57a84cb943edd275431b80178ae1c743cc17bd52a3f11c08d3ca1a9b84c5f9675b4d03aa8a477a381821b5a98d764c350fad822aec3efbd2d22d8b29c527ba72aa3cadcb38e", @ANYRES32=r16, @ANYRES32=r17, @ANYRES32=r19, @ANYBLOB="000000001c0000f6ffffff000100000002000000", @ANYRES32=r20, @ANYRES32=r21, @ANYRES32=r22, @ANYBLOB='\x00\x00\x00\x00'], 0xb8, 0x40}}], 0x1, 0x20044004)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRESHEX=0x0, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d8005cb5a59d06e6a3e8c000500719d062dcb02812ccbb5883518a34ae5cda29f16facfabaa39a7f83f4b484282f436e8426689efa9bff74999bb15078ca548e5f85600d8594e235523aab68e03659289df84cc2f20ae630f81d8d168e190cbd4"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4)
r23 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r23, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000021000008000200000000002c00018014000300ff01000000000000000000000000000114000400090200000000000000000000000000010c0002800500010000000000470002800500010001"], 0xe4}, 0x1, 0x0, 0x0, 0x404c880}, 0x4008840)

10.019254306s ago: executing program 2 (id=554):
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000280)=<r1=>0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000080), 0x1, 0x4cf, &(0x7f0000000500)="$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")
gettid()
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)={0x8042, 0x2, 0x1}, 0x18)
fcntl$addseals(0xffffffffffffffff, 0x409, 0x12)
mmap(&(0x7f00002a1000/0x2000)=nil, 0x2000, 0x2000002, 0x11, 0xffffffffffffffff, 0x6b3b4000)
setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x0, &(0x7f0000000080)}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)
fcntl$lock(r0, 0x7, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x5, r1})
setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000001600), 0x4)
r4 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r4, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000001d2eabfaeee5a35862ba7bff7f1b16ddfb8d7fd783a973309c2569aa86399ba0da237c82fae081de62ec32c0fcbe17a3eb28272e699848c10c01cc3f3fba33c3809d599c5c9b6b22417a1a2437a89ff65e63d12a", @ANYRES16=r6, @ANYBLOB="0500000000000000000006000000", @ANYRES32, @ANYBLOB="0a0018000303030303030000"], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x4000)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000020080030000240012800b000100087269646765000014006e8515002a003201000000c4517c32a65005002b000f0000006535df0a06d388810f1205c732faf01c39d662048147be2f3156604dc8d46170b3da6de7786085cee78f6079c33d3031f19b6d9c89"], 0x44}}, 0x0)

9.901549079s ago: executing program 2 (id=556):
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004c80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)'], 0x28}}], 0x1, 0x4c840)
r0 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000)

9.84848459s ago: executing program 32 (id=556):
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004c80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)'], 0x28}}], 0x1, 0x4c840)
r0 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000)

6.005435384s ago: executing program 4 (id=597):
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x401e, &(0x7f0000000040)=ANY=[@ANYBLOB="666c7573685f6d657267652c6e6f666c7573685f6d657267652c6d6f64653d667261676d656e743a7365676d656e742c636f6d70726573735f63616368652c696e6c696e655f78617474722c636f6d70726573735f63616368652c6e6f696e6c696e655f78617474722c6e6f646973636172642c6261636b67726f756e645f67633d6f6e2c6261636b67726f756e645f67633d6f66662c636865636b706f696e743d64697361626c652c617467632c67635f6d657267652c6e6f626172726965722c004b1c091f21dfc606226168fd668d440f"], 0xfd, 0x5532, &(0x7f0000000540)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
wait4(0x0, 0x0, 0x2, 0x0)
get_robust_list(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) (fail_nth: 1)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1}, 0x28)

5.131996145s ago: executing program 4 (id=600):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000480)={{0xfffc, 0x3, 0x0, 0x3}, 'syz0\x00', 0x2})
ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xee)
ioctl$UI_DEV_CREATE(r0, 0x5501)

4.699644666s ago: executing program 4 (id=603):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000480)={{0xfffc, 0x3, 0x0, 0x3}, 'syz0\x00', 0x2})
ioctl$UI_DEV_CREATE(r0, 0x5501)

4.629595298s ago: executing program 4 (id=604):
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x8, 0x4, &(0x7f0000005840)=ANY=[@ANYBLOB="b400000000000000730074000000000000000000000000000000000000000000cb00cf33f80f98a099e25fc0b930be411bd09014f1dbc38da2dc9a60ff34fd9269022224a61b29b38c79d0d2b014b2cbdf21d939f3af25243eaef84184e67a30028255c5f8ff3bdd2d6a06d5fdd3b87e04bc595ebfafa6291311da256664e265571a2536c56de8876907db45f39eaa692e6ee7c57e32a2567212eed674665a57a38b595f5e802d1e9a873f283030812168c0d5c4655596a5290512efb421f9d6d5eca19c56f9414a8568199da54f38808d311eb28a66500a6e32a01483bebb6b957d9a73d31a102e"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000006a40)=@base={0xb, 0xa00000, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50)
ioctl$sock_SIOCSIFBR(r0, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e9d, @loopback}, 0xa)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000040)='./bus\x00', 0x40082, &(0x7f0000001480)=ANY=[], 0xfd, 0x5550, &(0x7f00000002c0)="$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")
timer_create(0xfffffffffffffffd, 0x0, &(0x7f0000000040))
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
ioctl$VHOST_VDPA_GET_IOVA_RANGE(r2, 0x8010af78, &(0x7f0000000080))
timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

4.357312104s ago: executing program 1 (id=606):
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0xec, 0x0, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0x10}, [@CTA_EXPECT_NAT={0xa4, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x48, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x48, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x46}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x10}}]}]}, @CTA_EXPECT_NAT={0x34, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x20}}}}]}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40810}, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000004, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x5, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

4.263980687s ago: executing program 4 (id=607):
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0xc0, 0x0, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0x10}, [@CTA_EXPECT_NAT={0xac, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x48, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x46}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x10}}]}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x40810}, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000004, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x5, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r4 = dup(r3)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

4.080941121s ago: executing program 1 (id=610):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x8812, &(0x7f0000000040)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=default,gid=', @ANYRESHEX=0x0, @ANYRES32=0x0], 0x1, 0x1535, &(0x7f00000034c0)="$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")
renameat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000a00)='./file1\x00', 0x0)

3.109930195s ago: executing program 1 (id=612):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000440), 0x4, 0x50d, &(0x7f0000000f40)="$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")
r1 = open(&(0x7f0000000140)='./bus\x00', 0x149cc2, 0x1c0)
fsetxattr(r1, &(0x7f0000001040)=@known='security.selinux\x00', 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r2 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f0000000140)={{0xa, 0x4e24, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x58f6ed2e}, {0xa, 0x4e22, 0x101, @private1, 0x8}, 0x1, {[0x1, 0xfa0, 0x290, 0xffff, 0xa, 0x8, 0x5, 0x4]}}, 0x5c)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x400)
ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r3, 0x8002f515, &(0x7f0000000100))
bind$inet(r3, 0x0, 0x0)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
r4 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0xc, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x5f0}]}}]}, 0x38}}, 0x44080)
write$selinux_attr(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@newqdisc={0x4c, 0x24, 0xd0f, 0x70bd25, 0x25dfdbfe, {0x60, 0x0, 0x0, r6, {}, {0x1, 0xa}, {0x7, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x8, 0x2, 0x9, 0x4, 0xfffffe01, 0x200}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x55}, 0xc010)
sendmsg$inet(r3, 0x0, 0x4000)
close(r0)

3.024374577s ago: executing program 1 (id=613):
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8080, &(0x7f0000002100)=ANY=[], 0x2, 0x232, &(0x7f0000000640)="$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")
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0xe05c61, 0x0, 0x0, 0x0, &(0x7f0000000080))
chdir(&(0x7f00000003c0)='./bus\x00')
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x820008, 0x0, 0xda, 0x0, &(0x7f0000000280))

2.946188749s ago: executing program 3 (id=614):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x4, 0xee})
write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b)
preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2.870185011s ago: executing program 4 (id=615):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000180)={0x20, 0xc, 0x4, "ca258375"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2.869011041s ago: executing program 1 (id=616):
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0xc4, 0x0, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0x10}, [@CTA_EXPECT_NAT={0xac, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x48, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x46}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x10}}]}]}, @CTA_EXPECT_NAT={0x4}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40810}, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000004, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x5, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r4 = dup(r3)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

2.693060295s ago: executing program 3 (id=619):
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x20, &(0x7f00000005c0)={&(0x7f0000000440)=""/135, 0x87, <r0=>0x0, &(0x7f0000000b80)=""/150, 0x96}}, 0x10)
fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
r1 = socket$unix(0x1, 0x2, 0x0)
fsync(0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6gretap0\x00', <r2=>0x0})
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x5, 0x1}, {0xd}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x4044081}, 0x40004)
r4 = syz_open_dev$loop(&(0x7f0000000100), 0x6, 0x101002)
setreuid(0xee01, 0xee01)
ioctl$IOC_PR_CLEAR(r4, 0x401070cd, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x4, &(0x7f0000000180)=ANY=[@ANYRESOCT=r5], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', r2, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0)
r7 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x218c5c, &(0x7f0000000240)=ANY=[@ANYBLOB="666c7573682c756e695f786c6174653d312c6e6f6e756d7461696c3d302c726f6469722c757466383d312c6e6f6e756d7461696c3d302c756e695f786c6174653d312c6e6f6e756d7461696c3d302c756e695f786c6174653d302c757466383d312c756e695f786c6174653d302c757466383d312c756e695f786c6174653d312c6e6f6e756d7461696c3d302c646f733178666c6f7070792c726f6469722c756e695f786c6174653d312c71756965742c00aaed2e6322e12ca43d55f4e47d9fb6f319fab9c81cd7b9b508d5df5619dad30ed85701f46d5bb2b85a6aecd28cb992054878a859b15b1598ee0b05192ff4df579d2dd32fb9a6a092bb22740cfe0636a3d8ff4e975e21fc6d6e2d6ece2beac2098361fe652ea69917e6d47463ceb0b35bc7a2f8799debe5e7b6e82c84ab25d06157c08f006d90e62a8026a845835dbf4ac25eec51c3ec73c82014eee15eaaa123084415546ca2e37c23d441b343cec1f74e52bc1f21eb18053a9b98d3a304fba3751bd0121940bc9d276f1e5352b9f4e674bb80ffeaaff6843ef1c8a7a7e0d592893a77ae91e025a35840e7ff4fdb3571d1986ed6f5a23d9ee6bf1cec94fb17af0627c04bf47586ce288a466c039a1ead7fd99feacc51d9f7a2e67f46a0b86b45e5d7cb4affc1c539a764f5"], 0xf5, 0x30c, &(0x7f0000000780)="$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")
r8 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
dup2(r7, r8)
mkdir(0x0, 0x190)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[], 0xd4}, 0x1, 0x0, 0x0, 0x40001}, 0x1)

2.649648436s ago: executing program 3 (id=620):
syz_usb_connect(0x0, 0x62, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a2401040005020102072407"], 0x0)

2.648864656s ago: executing program 1 (id=621):
r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, <r2=>0x0, <r3=>0x0, <r4=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50)
syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r3, r4, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101)
write$P9_RUNLINKAT(r5, &(0x7f0000000200)={0x7, 0x4d, 0x2}, 0x7)
write$tcp_congestion(r5, &(0x7f00000000c0)='lp\x00', 0xfffffdef)

1.790106807s ago: executing program 0 (id=626):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x1e9100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1.747916658s ago: executing program 5 (id=627):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in=@empty, 0x1, 0x394, 0x4e20, 0x5, 0x0, 0x80, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@local, {0x0, 0x9, 0x7, 0xffff, 0x10, 0x2, 0xfffffffffffffff8, 0xea9}, {0x6, 0x0, 0x1f, 0x1ff}, {0x1, 0xfffffffc}, 0x70bd2a, 0x4, 0xa, 0x2, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) (fail_nth: 1)

1.465539275s ago: executing program 5 (id=628):
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004c80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)'], 0x28}}], 0x1, 0x4c840)
r0 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c)
sendmmsg$inet6(r0, 0x0, 0x0, 0x4000000)

1.465377445s ago: executing program 5 (id=629):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x4, 0xee})
write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b)
preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.429415666s ago: executing program 0 (id=630):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in=@empty, 0x1, 0x394, 0x4e20, 0x5, 0x0, 0x80, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@local, {0x0, 0x9, 0x7, 0xffff, 0x10, 0x2, 0xfffffffffffffff8, 0xea9}, {0x6, 0x0, 0x1f, 0x1ff}, {0x1, 0xfffffffc}, 0x70bd2a, 0x4, 0xa, 0x2, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10)

1.380821787s ago: executing program 0 (id=631):
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0xc4, 0x0, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0x10}, [@CTA_EXPECT_NAT={0xac, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x48, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x46}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x10}}]}]}, @CTA_EXPECT_NAT={0x4}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40810}, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000004, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x5, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r4 = dup(r3)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

1.338176268s ago: executing program 5 (id=632):
syz_mount_image$ext4(&(0x7f0000000580)='ext2\x00', &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x244801, &(0x7f00000012c0)={[], [{@euid_lt}, {@dont_hash}, {@subj_type={'subj_type', 0x3d, '.@'}}, {@audit}, {@euid_eq}, {@obj_type={'obj_type', 0x3d, '&'}}, {@appraise}]}, 0x1, 0x592, &(0x7f00000014c0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
r3 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @auto=[0x61, 0x37, 0x64, 0x66, 0x35, 0x66, 0x61, 0x65, 0x35, 0x65, 0x66, 0x63, 0x30, 0x0, 0x37, 0x30]}, &(0x7f00000000c0)={0x0, "73999747ba6abe6984ac3929b06855e671a917a4c6ead13f7b7cac0923505f1953da3783bbdb11f8b8e08f89a8917f7653e5e24fffda720748d5012b19f9b626", 0x26}, 0x48, 0xffffffffffffffff)
r4 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_MOVE(0x1e, r3, r4, 0xfffffffffffffffe, 0x1)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10888)

1.208202181s ago: executing program 3 (id=633):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r3, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x8)
r4 = socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, 0xffffffffffffffff, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x90012, r5, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x3000008, 0x13, 0xffffffffffffffff, 0x1000)
sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newrule={0x24, 0x20, 0xf4db158ec847dc81, 0x70bd2a, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x44004)

960.128157ms ago: executing program 0 (id=634):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x808070, 0x0, 0x1, 0x0, &(0x7f00000003c0))
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x101341, 0xaf)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9f7aeb010018000000000000000c0000000c000000020000000100000000"], 0x0, 0x26}, 0x28)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x7, 0x5, 0x7, 0xc1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r2}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001880), 0x0, 0x1, r2}, 0x38)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x40}}, 0x0)

173.265337ms ago: executing program 3 (id=635):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000480)={{0xfffc, 0x3, 0x0, 0x3}, 'syz0\x00', 0x2})
ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xee)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_DEV_DESTROY(r0, 0x5502)

159.027607ms ago: executing program 5 (id=636):
r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ad89b5249d2ebef3edbf4bdf2e47edfe4c4922fe5d6ab3b71d71e7c95f5dd8a81c5d6eed9c0865abda263f50b3281f4c0148108e211dc1706c81d0907680bab6ede0d1bbeac695d3953639787ab5949dfe279e788a2780075c791bd2a5c4bfa20f4bea06fb467981bb000cb01c99e3c12b6fa59c944131a07e6716feb7170b7014c7fac3f42eff8e41475b7d723fd6d136adaec388", 0x95, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, r0}, &(0x7f0000000180)=""/93, 0x5d, &(0x7f0000000280)={&(0x7f0000000200)={'sha384-avx2\x00'}, &(0x7f0000000240)="953d98f3227a2cc608d4bc3f0115c7f990f03e890d0ad2763e693b7d463a17ff27bd83eab157d889ae93b8f55f2ed9deed2e317a5c21", 0x36})
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x2, 0x10, 0x10, 0x7, 0x18, 0x0, 0x70bd25, 0x25dfdbfc, [@sadb_x_nat_t_type={0x1, 0x14, 0x9}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e22, 0x101, @local, 0x80000001}, @in6={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}}}, @sadb_spirange={0x2, 0x10, 0x4d3, 0x4d3}, @sadb_lifetime={0x4, 0x4, 0x3, 0x47, 0x0, 0x6}, @sadb_ident={0x2, 0xb, 0xd9, 0x0, 0xa4}, @sadb_x_filter={0x5, 0x1a, @in6=@dev={0xfe, 0x80, '\x00', 0xa}, @in=@multicast2, 0x23, 0x4}]}, 0xc0}}, 0x14)
ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000400))
r2 = add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8)
keyctl$search(0xa, r0, &(0x7f0000000440)='user\x00', &(0x7f0000000480)={'syz', 0x3}, r2)
pipe2$9p(&(0x7f0000000540)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x800)
write$P9_RCREATE(r4, &(0x7f0000000580)={0x18, 0x73, 0x2, {{0x80, 0x4, 0x2}, 0xb}}, 0x18)
keyctl$KEYCTL_PKEY_QUERY(0x18, r2, 0x0, &(0x7f00000005c0)='\x00', &(0x7f0000000600))
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000640)={<r5=>0x0}, &(0x7f0000000680)=0xc)
sched_setscheduler(r5, 0x3, &(0x7f00000006c0)=0x3)
close(r3)
r6 = add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x3}, 0x0, 0x0, r2)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x408200, 0x0)
fcntl$getownex(r1, 0x10, &(0x7f00000007c0))
r8 = socket$igmp(0x2, 0x3, 0x2)
connect$inet(r8, &(0x7f0000000800)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10)
keyctl$read(0xb, r6, &(0x7f0000000840)=""/195, 0xc3)
ioctl$sock_proto_private(0xffffffffffffffff, 0x89e0, &(0x7f0000000940)="59336f3539ffaddb9282f446e3482c9b88878d10a89ff189eb4abe54bb5b29dc8c38cfd969d272894fba266c6e30898c4684e5bcc0f715207fa7c1fa3ecfe0ae58156925733db66a9b3e40867c50b43b4769ae0dd5c2c0bbd1f7788c20b7e054d26d25313d991a72f9ce985b9345e9ba581f4581f7e23bce3351933aec64bd213e8ab3378bc9d27b27254c8b11df562c02948e5a")
r9 = socket$inet6(0xa, 0x3, 0x5)
ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000a00)={'netpci0\x00', 0x400})
sched_setaffinity(r5, 0x8, &(0x7f0000000a40)=0xe)
ioctl$XFS_IOC_PATH_TO_HANDLE(r7, 0xc0385869, &(0x7f0000000b80)={<r10=>r1, &(0x7f0000000a80)='\xff\xff', 0x101000, &(0x7f0000000ac0)={@align=0x2, {0x9, 0x3, 0x401, 0x1000}}, 0x0, &(0x7f0000000b00), &(0x7f0000000b40)=0x2})
epoll_pwait(r10, &(0x7f0000000bc0)=[{}], 0x1, 0x3, &(0x7f0000000c00)={[0x3]}, 0x8)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$gtp(&(0x7f0000000c40), r11)
socket$nl_route(0x10, 0x3, 0x0)
recvmmsg(r8, &(0x7f0000002480)=[{{&(0x7f0000000c80)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000d00)=""/74, 0x4a}, {&(0x7f0000000d80)=""/169, 0xa9}, {&(0x7f0000000e40)=""/132, 0x84}], 0x3, &(0x7f0000000f40)=""/220, 0xdc}, 0x9}, {{&(0x7f0000001040)=@qipcrtr, 0x80, &(0x7f0000001100)=[{&(0x7f00000010c0)=""/62, 0x3e}], 0x1, &(0x7f0000001140)=""/113, 0x71}, 0x50}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000011c0)=""/33, 0x21}, {&(0x7f0000001200)=""/113, 0x71}, {&(0x7f0000001280)=""/86, 0x56}], 0x3, &(0x7f0000001340)=""/33, 0x21}, 0x8}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000001380)=""/4096, 0x1000}], 0x1, &(0x7f00000023c0)=""/139, 0x8b}, 0xffffffff}], 0x4, 0x25, &(0x7f0000002580))
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000002640)={'hsr0\x00', &(0x7f00000025c0)=@ethtool_coalesce={0xf, 0x5, 0x8, 0xd52, 0xfffffff6, 0x7fff, 0x33eb1d51, 0x0, 0x7fffffff, 0x1000, 0x7, 0x8, 0x0, 0x20080000, 0x2, 0x8, 0xa, 0x2ec6, 0x2, 0x7fffffff, 0x0, 0x7, 0x31}})

120.193298ms ago: executing program 3 (id=637):
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0xc0, 0x0, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0x10}, [@CTA_EXPECT_NAT={0xac, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x48, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x46}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x10}}]}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x40810}, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000004, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x5, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = dup(r2)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

77.600679ms ago: executing program 5 (id=638):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="756e695f786c6174653d312c73686f72746e616d653d77696e39352c636865636b3d6e6f726d616c2c756e695f786c6174653d312c73686f72746e616d653d6d697865642c756e695f786c6174653d302c6e6f6e756d7461696c3d302c757466383d302c73686f77657805632c636f6465706167653d3836352c757466383d302c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c696f636861727365743d63703800000000000000027461696c3d302c726f6469722c0053f2343f27368192a8d5149007082625b84f7735b0ed051fa7febed94b5e33f6cca39f"], 0x1, 0x297, &(0x7f0000000380)="$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")
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='./bus\x00', 0x1200840, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x3, 0x3a5, &(0x7f0000000680)="$eJzs3U9oHNUfAPDvZnbz5/drTQ6CKAijN0FLWwXRiwklhWIuVZaqBzHYVssmCg0uNodu40U8Cj3qyZsHPXjozYuoSG8evFpBqtKD9lawdGR2ZnZnswkNlo2In89h+ea97/e9tzuT7GSz+/LaYnROt+LszZvXY3a2Ec3FY4txqxELkUTlUoyb3qENAPh3uJVl8UdWiPhyLyWNya8KAJik/vP/GwdrLe99M4y/HsvPimf/1n6sDQCYjPL3/7l6W7ItZ3asam7SywIAJih//o9mreHRsZTan/qb268Npia4NABgQl58+ZXnl1YiXkjT2Yj197vtbjueHfYvnY1zsRZn4nDMx+2I4o0C+U2jf3v8xMry4TRNe/HLQrTzim47Yr3XbRdXCktJv34mjsR8LJT15bsNsixLjn+xsnwk7YuIS71uKx9lvdFtt/qvMizNxbkf/xdn4mikcf9YfcSJleXBNUk7n7c/fytia/i6Rb7+QzEf378eb8danI68trqsWVm+eCRNj2UrBxrD+l63PdPPK4y/AgIAAAAAAAAAAAAAAAAAAAAAAPfiULH3zsE0TRcG++dkw/17DpUJZf//I6Ld3y+wXdSX+wNtFfsDZTNZZNnv7z7R/iCJkf2B+hv8jOyv07R5IAAAAAAAAAAAAAAAAAAAAJQ2LkzH6tramfMbFzY79aB3fuPCVETkLW9999lXczGaM1cOMFo1EjTLlFpXOqzKkio5S8qcasx+cpIHjWaR8+mVwYprU9TuxXCKqWHOzLaukeDgIz9/tNmpRng4qaruDHOS2PF+bSajyxgJ1u8rBqxaLu/++IwHR++Scy3Lst3KL746XhWNiOauS/2bQZYH315/88EnN6oDlhUee3z+1LXLn/zWWV3LZy4O5fT5jdtZZ7X8eueTbSyYqU6bpHb+NMqTrTE4E27kAz515+SBXUbeGm1ZTX648dJDH14tW6Zqh2mHZWSnrg5b3tkhJykm/Xx713QR5MscdD2XB/ljNDZO9V1y14fl6binA/fAx4urVy7+9OtmZzXZy7Go/ZCwUQcAAAAAAAAAAAAAAAAAAOyL2mfFS+WHfVuDlNZ41TMn92d1AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALA/hv//fxDE1Na2lr0Ff/aiajkVVddMPmBM12Zc+AfvLQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/1V/BQAA//+3h0Z5")
syz_io_uring_setup(0x606b, &(0x7f0000000240)={0x0, 0x656c, 0x200, 0x1, 0x116}, &(0x7f00000000c0), &(0x7f00000001c0), &(0x7f00000002c0))
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0)
ioctl$sock_netdev_private(r0, 0x89f7, &(0x7f0000000000)="172b910102ac62ea1e329fd978c53cbe43518c072fb7fd4172516fe9858d8233eefa3ab18330319681c8a562ab90168fefd1627c8e97c53b12de17171ecc17")
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8080, &(0x7f0000002100)=ANY=[], 0x2, 0x232, &(0x7f0000000640)="$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")
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0xe05c61, 0x0, 0x0, 0x0, &(0x7f0000000080))
chdir(&(0x7f00000003c0)='./bus\x00')
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x820008, 0x0, 0xda, 0x0, &(0x7f0000000280))

24.61894ms ago: executing program 0 (id=639):
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004c80), 0x0, 0x4c840)
r0 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000)

0s ago: executing program 0 (id=640):
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0xac, 0x0, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x64, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x46}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x10}}]}]}, @CTA_EXPECT_NAT={0x34, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x20}}}}]}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x40810}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

kernel console output (not intermixed with test programs):

.487836][  T727] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[   53.507966][   T28] audit: type=1400 audit(1784904465.283:165): avc:  denied  { mounton } for  pid=726 comm="syz.2.107" path="/19/bus/file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   53.508068][  T727] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[   53.552372][   T10] kworker/u4:1: attempt to access beyond end of device
[   53.552372][   T10] loop1: rw=1, sector=77824, nr_sectors = 4096 limit=40427
[   53.648190][   T10] kworker/u4:1: attempt to access beyond end of device
[   53.648190][   T10] loop1: rw=1, sector=49152, nr_sectors = 4096 limit=40427
[   53.663327][  T727] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[   53.692786][   T28] audit: type=1400 audit(1784904465.463:166): avc:  denied  { setattr } for  pid=726 comm="syz.2.107" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   53.773124][  T289] EXT4-fs (loop2): unmounting filesystem.
[   53.773855][   T10] kworker/u4:1: attempt to access beyond end of device
[   53.773855][   T10] loop1: rw=1, sector=57344, nr_sectors = 9328 limit=40427
[   53.823123][  T742] netlink: 28 bytes leftover after parsing attributes in process `syz.0.111'.
[   53.852430][   T10] kworker/u4:1: attempt to access beyond end of device
[   53.852430][   T10] loop1: rw=1, sector=66672, nr_sectors = 4552 limit=40427
[   53.958514][  T747] netlink: 28 bytes leftover after parsing attributes in process `syz.2.112'.
[   54.688330][  T767] loop3: detected capacity change from 0 to 256
[   54.841462][  T767] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66dc59, utbl_chksum : 0xe619d30d)
[   55.220634][  T772] netlink: 28 bytes leftover after parsing attributes in process `syz.1.117'.
[   55.330488][  T774] loop0: detected capacity change from 0 to 256
[   55.631733][  T774] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66dc59, utbl_chksum : 0xe619d30d)
[   55.890583][  T785] loop2: detected capacity change from 0 to 256
[   55.980304][  T785] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66dc59, utbl_chksum : 0xe619d30d)
[   56.306318][  T794] loop3: detected capacity change from 0 to 256
[   56.316199][  T794] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66dc59, utbl_chksum : 0xe619d30d)
[   56.353030][  T796] loop4: detected capacity change from 0 to 256
[   56.374631][  T796] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66dc59, utbl_chksum : 0xe619d30d)
[   57.553025][  T806] loop2: detected capacity change from 0 to 512
[   57.594584][  T806] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   57.604214][  T806] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   57.924119][  T811] loop3: detected capacity change from 0 to 256
[   57.935112][  T813] loop4: detected capacity change from 0 to 256
[   57.964756][  T811] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66dc59, utbl_chksum : 0xe619d30d)
[   57.984840][  T813] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66dc59, utbl_chksum : 0xe619d30d)
[   58.279615][  T817] sch_tbf: burst 1520 is lower than device lo mtu (65550) !
[   58.728913][  T289] EXT4-fs (loop2): unmounting filesystem.
[   58.795808][  T831] netlink: 28 bytes leftover after parsing attributes in process `syz.4.133'.
[   60.758181][  T829] loop2: detected capacity change from 0 to 40427
[   60.785786][  T829] F2FS-fs (loop2): Invalid SB checksum offset: 0
[   60.814296][  T829] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[   60.851369][  T829] F2FS-fs (loop2): Unrecognized mount option "��������" or missing value
[   61.203926][   T28] audit: type=1400 audit(1784904472.973:167): avc:  denied  { associate } for  pid=828 comm="syz.2.134" name="cgroup.stat" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   61.295549][  T846] loop4: detected capacity change from 0 to 40427
[   61.305329][  T846] F2FS-fs (loop4): Invalid SB checksum offset: 0
[   61.318548][  T846] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[   61.328708][  T846] F2FS-fs (loop4): Unrecognized mount option "��������" or missing value
[   61.347730][  T434] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   61.557715][  T434] usb 1-1: Using ep0 maxpacket: 8
[   61.710822][  T434] usb 1-1: config 0 has an invalid interface number: 31 but max is 0
[   61.840000][  T863] loop3: detected capacity change from 0 to 256
[   61.996796][  T863] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66dc59, utbl_chksum : 0xe619d30d)
[   62.109994][  T434] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   62.219481][  T434] usb 1-1: config 0 has no interface number 0
[   62.232689][  T434] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[   62.307892][  T434] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   62.322276][   T28] audit: type=1400 audit(1784904474.093:168): avc:  denied  { write } for  pid=867 comm="syz.4.145" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   62.342803][  T434] usb 1-1: Product: syz
[   62.347351][  T434] usb 1-1: Manufacturer: syz
[   62.362526][  T434] usb 1-1: SerialNumber: syz
[   62.378547][  T434] usb 1-1: config 0 descriptor??
[   62.388385][  T434] usb 1-1: Found UVC 0.04 device syz (046d:08c3)
[   62.395157][  T434] usb 1-1: No valid video chain found.
[   62.773586][  T880] loop4: detected capacity change from 0 to 40427
[   62.786001][  T880] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[   62.794567][  T880] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   62.806663][  T880] F2FS-fs (loop4): invalid crc value
[   62.807729][  T308] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   62.831774][  T880] F2FS-fs (loop4): Found nat_bits in checkpoint
[   62.867879][  T880] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[   62.875233][  T880] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   63.007761][  T308] usb 4-1: Using ep0 maxpacket: 8
[   63.014662][  T308] usb 4-1: config 0 has an invalid interface number: 31 but max is 0
[   63.030537][  T308] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   63.061141][  T308] usb 4-1: config 0 has no interface number 0
[   63.082447][  T308] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[   63.102239][  T308] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   63.120890][  T308] usb 4-1: Product: syz
[   63.125225][  T308] usb 4-1: Manufacturer: syz
[   63.135351][  T308] usb 4-1: SerialNumber: syz
[   63.150593][  T308] usb 4-1: config 0 descriptor??
[   63.163666][  T308] usb 4-1: Found UVC 0.04 device syz (046d:08c3)
[   63.172216][  T308] usb 4-1: No valid video chain found.
[   63.256288][  T288] syz-executor: attempt to access beyond end of device
[   63.256288][  T288] loop4: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[   63.532363][  T888] loop1: detected capacity change from 0 to 40427
[   63.549247][  T888] F2FS-fs (loop1): Invalid SB checksum offset: 0
[   63.555717][  T888] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[   63.574426][  T888] F2FS-fs (loop1): Unrecognized mount option "��������" or missing value
[   63.997334][   T28] audit: type=1400 audit(1784904475.763:169): avc:  denied  { create } for  pid=907 comm="syz.1.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   64.026569][  T908] loop1: detected capacity change from 0 to 512
[   64.064636][  T908] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   64.092525][  T308] usb 1-1: USB disconnect, device number 3
[   64.121627][  T908] EXT4-fs (loop1): 1 truncate cleaned up
[   64.129016][  T908] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   64.179862][  T287] EXT4-fs (loop1): unmounting filesystem.
[   64.260207][  T916] loop1: detected capacity change from 0 to 256
[   64.271720][  T916] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66dc59, utbl_chksum : 0xe619d30d)
[   64.657719][  T308] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   64.847731][  T308] usb 1-1: Using ep0 maxpacket: 8
[   64.854393][  T308] usb 1-1: config 0 has an invalid interface number: 31 but max is 0
[   64.863583][  T308] usb 1-1: config 0 has no interface number 0
[   64.884358][  T308] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[   64.894061][  T308] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   64.904205][  T308] usb 1-1: Product: syz
[   64.908753][  T308] usb 1-1: Manufacturer: syz
[   64.913586][  T308] usb 1-1: SerialNumber: syz
[   64.918864][  T308] usb 1-1: config 0 descriptor??
[   64.976000][  T408] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   65.157759][  T408] usb 5-1: Using ep0 maxpacket: 8
[   65.165134][  T408] usb 5-1: config 0 has an invalid interface number: 31 but max is 0
[   65.201280][  T408] usb 5-1: config 0 has no interface number 0
[   65.259635][  T408] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[   65.317647][  T408] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   65.387794][  T308] usb 1-1: Found UVC 0.04 device syz (046d:08c3)
[   65.394474][  T308] uvcvideo 1-1:0.31: Entity type for entity Output 6 was not initialized!
[   65.406363][  T408] usb 5-1: Product: syz
[   65.410749][  T408] usb 5-1: Manufacturer: syz
[   65.415471][  T408] usb 5-1: SerialNumber: syz
[   65.417758][  T308] usb 1-1: Failed to create links for entity 5
[   65.426772][  T308] usb 1-1: Failed to register entities (-22).
[   65.432716][  T408] usb 5-1: config 0 descriptor??
[   65.434432][  T308] usb 1-1: USB disconnect, device number 4
[   65.498885][  T926] loop1: detected capacity change from 0 to 40427
[   65.516076][  T926] F2FS-fs (loop1): Invalid SB checksum offset: 0
[   65.523008][  T926] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[   65.531689][  T926] F2FS-fs (loop1): Unrecognized mount option "��������" or missing value
[   65.558402][    T6] usb 4-1: USB disconnect, device number 2
[   65.684795][  T931] loop3: detected capacity change from 0 to 256
[   65.750947][  T931] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66dc59, utbl_chksum : 0xe619d30d)
[   65.876097][  T408] usb 5-1: Found UVC 0.04 device syz (046d:08c3)
[   65.915824][  T408] uvcvideo 5-1:0.31: Entity type for entity Output 6 was not initialized!
[   66.001308][  T926] 9pnet: Could not find request transport: fd0x0000000000000003
[   66.091746][  T408] usb 5-1: USB disconnect, device number 3
[   66.248101][  T934] loop1: detected capacity change from 0 to 40427
[   66.263008][  T934] F2FS-fs (loop1): Invalid SB checksum offset: 0
[   66.273231][  T934] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[   66.286343][  T934] F2FS-fs (loop1): Unrecognized mount option "��������" or missing value
[   66.683209][  T954] loop1: detected capacity change from 0 to 4096
[   66.709903][  T954] EXT4-fs: Ignoring removed oldalloc option
[   66.726322][  T954] EXT4-fs (loop1): Test dummy encryption mode enabled
[   66.873291][  T954] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=2802c0a9, mo2=0002]
[   66.997937][  T954] System zones: 0-5
[   67.007157][  T954] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   67.077237][  T954] fscrypt: AES-256-XTS using blk-crypto-fallback
[   67.087978][   T28] audit: type=1400 audit(1784904478.843:170): avc:  denied  { write } for  pid=953 comm="syz.1.171" name="bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   67.115128][   T28] audit: type=1400 audit(1784904478.843:171): avc:  denied  { add_name } for  pid=953 comm="syz.1.171" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   67.136194][   T28] audit: type=1400 audit(1784904478.843:172): avc:  denied  { setattr } for  pid=953 comm="syz.1.171" name="work" dev="loop1" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   67.220710][  T965] loop2: detected capacity change from 0 to 256
[   67.235859][  T965] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66dc59, utbl_chksum : 0xe619d30d)
[   67.380521][   T28] audit: type=1400 audit(1784904478.923:173): avc:  denied  { remove_name } for  pid=953 comm="syz.1.171" name="#1" dev="loop1" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   67.464491][  T287] EXT4-fs (loop1): unmounting filesystem.
[   67.551510][   T28] audit: type=1400 audit(1784904478.923:174): avc:  denied  { rename } for  pid=953 comm="syz.1.171" name="#1" dev="loop1" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   67.583463][   T28] audit: type=1400 audit(1784904478.923:175): avc:  denied  { unlink } for  pid=953 comm="syz.1.171" name="#1" dev="loop1" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1
[   67.650621][   T28] audit: type=1400 audit(1784904478.923:176): avc:  denied  { unlink } for  pid=953 comm="syz.1.171" name="#2" dev="loop1" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   67.700090][   T28] audit: type=1400 audit(1784904479.123:177): avc:  denied  { remove_name } for  pid=287 comm="syz-executor" name="lost+found" dev="loop1" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   67.727999][   T28] audit: type=1400 audit(1784904479.123:178): avc:  denied  { rmdir } for  pid=287 comm="syz-executor" name="lost+found" dev="loop1" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   67.751223][   T28] audit: type=1400 audit(1784904479.133:179): avc:  denied  { unlink } for  pid=287 comm="syz-executor" name="file0" dev="loop1" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   68.983434][ T1000] loop1: detected capacity change from 0 to 4096
[   69.001195][ T1000] EXT4-fs: Ignoring removed oldalloc option
[   69.017289][ T1000] EXT4-fs (loop1): Test dummy encryption mode enabled
[   69.032262][ T1000] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=2802c0a9, mo2=0002]
[   69.043943][ T1000] System zones: 0-5
[   69.054071][ T1000] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   69.098417][  T287] EXT4-fs (loop1): unmounting filesystem.
[   69.257084][ T1010] netlink: 28 bytes leftover after parsing attributes in process `syz.3.186'.
[   69.310957][ T1012] loop1: detected capacity change from 0 to 16
[   69.345923][ T1012] erofs: (device loop1): mounted with root inode @ nid 36.
[   69.507755][    T6] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   69.697748][    T6] usb 3-1: Using ep0 maxpacket: 32
[   69.709284][    T6] usb 3-1: config 0 has an invalid interface number: 184 but max is 0
[   69.731763][    T6] usb 3-1: config 0 has no interface number 0
[   69.748976][    T6] usb 3-1: config 0 interface 184 has no altsetting 0
[   69.756568][ T1025] loop1: detected capacity change from 0 to 40427
[   69.771879][ T1025] F2FS-fs (loop1): Invalid SB checksum offset: 0
[   69.776684][    T6] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[   69.787781][ T1025] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[   69.799860][ T1025] F2FS-fs (loop1): Unrecognized mount option "��������" or missing value
[   69.809117][    T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   69.828137][ T1025] 9pnet_fd: Insufficient options for proto=fd
[   69.845323][    T6] usb 3-1: Product: syz
[   69.857547][    T6] usb 3-1: Manufacturer: syz
[   69.877717][    T6] usb 3-1: SerialNumber: syz
[   69.895143][ T1030] loop1: detected capacity change from 0 to 4096
[   69.898216][    T6] usb 3-1: config 0 descriptor??
[   69.913296][ T1030] EXT4-fs: Ignoring removed oldalloc option
[   69.938481][ T1030] EXT4-fs (loop1): Test dummy encryption mode enabled
[   69.938898][    T6] smsc75xx v1.0.0
[   70.020765][ T1030] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=2802c0a9, mo2=0002]
[   70.029022][ T1030] System zones: 0-5
[   70.033675][ T1030] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   70.049094][ T1030] overlayfs: failed to resolve './bus': -2
[   70.070196][  T287] EXT4-fs (loop1): unmounting filesystem.
[   72.229720][    T6] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71
[   72.243051][    T6] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD
[   72.256317][    T6] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[   72.281408][    T6] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[   72.313626][    T6] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[   72.331642][ T1051] loop0: detected capacity change from 0 to 4096
[   72.332034][ T1051] EXT4-fs: Ignoring removed oldalloc option
[   72.332470][ T1051] EXT4-fs (loop0): Test dummy encryption mode enabled
[   72.339727][ T1051] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=2802c0a9, mo2=0002]
[   72.339786][ T1051] System zones: 0-5
[   72.346810][ T1051] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   72.368518][    T6] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[   72.368588][    T6] smsc75xx: probe of 3-1:0.184 failed with error -71
[   72.369867][   T28] kauditd_printk_skb: 9 callbacks suppressed
[   72.369881][   T28] audit: type=1400 audit(1784904484.143:189): avc:  denied  { unlink } for  pid=1050 comm="syz.0.200" name="#5" dev="loop0" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1
[   72.384457][    T6] usb 3-1: USB disconnect, device number 3
[   72.456049][  T290] EXT4-fs (loop0): unmounting filesystem.
[   72.668588][ T1064] loop4: detected capacity change from 0 to 40427
[   72.679372][ T1064] F2FS-fs (loop4): Invalid SB checksum offset: 0
[   72.685761][ T1064] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[   72.694895][ T1064] F2FS-fs (loop4): Unrecognized mount option "��������" or missing value
[   72.716456][ T1073] loop0: detected capacity change from 0 to 16
[   72.723943][ T1064] 9pnet_fd: Insufficient options for proto=fd
[   72.752548][ T1073] erofs: (device loop0): mounted with root inode @ nid 36.
[   73.633069][ T1114] netlink: 8 bytes leftover after parsing attributes in process `syz.2.216'.
[   73.806829][ T1121] loop2: detected capacity change from 0 to 4096
[   73.831730][ T1121] EXT4-fs: Ignoring removed oldalloc option
[   73.860112][ T1121] EXT4-fs (loop2): Test dummy encryption mode enabled
[   73.870934][ T1124] loop4: detected capacity change from 0 to 4096
[   73.883159][ T1124] EXT4-fs: Ignoring removed oldalloc option
[   73.890418][ T1121] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=2802c0a9, mo2=0002]
[   73.902501][ T1124] EXT4-fs (loop4): Test dummy encryption mode enabled
[   73.931539][ T1121] System zones: 0-5
[   73.941724][ T1124] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=2802c0a9, mo2=0002]
[   73.962152][ T1129] loop3: detected capacity change from 0 to 512
[   73.964791][ T1121] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   74.007570][ T1124] System zones: 0-5
[   74.007860][ T1129] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   74.032865][ T1124] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   74.047564][ T1124] overlayfs: failed to resolve './bus': -2
[   74.047801][ T1129] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   74.084745][  T288] EXT4-fs (loop4): unmounting filesystem.
[   74.142783][  T289] EXT4-fs (loop2): unmounting filesystem.
[   74.179827][ T1129] sch_tbf: burst 1520 is lower than device lo mtu (65550) !
[   74.255092][  T291] EXT4-fs (loop3): unmounting filesystem.
[   74.295869][ T1137] loop2: detected capacity change from 0 to 4096
[   74.313993][ T1137] EXT4-fs: Ignoring removed oldalloc option
[   74.403680][ T1137] EXT4-fs (loop2): Test dummy encryption mode enabled
[   74.446693][ T1137] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=2802c0a9, mo2=0002]
[   74.549378][ T1137] System zones: 0-5
[   74.570703][ T1137] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   74.799004][ T1137] overlayfs: failed to resolve './bus': -2
[   74.824935][  T289] EXT4-fs (loop2): unmounting filesystem.
[   74.896462][ T1161] loop2: detected capacity change from 0 to 512
[   74.918015][ T1161] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   74.948694][ T1161] EXT4-fs (loop2): 1 truncate cleaned up
[   74.956589][ T1161] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   74.979359][ T1165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.232'.
[   75.134495][ T1166] loop0: detected capacity change from 0 to 2048
[   75.413197][ T1166] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   75.452633][ T1166] EXT4-fs error (device loop0): ext4_find_extent:936: inode #2: comm syz.0.233: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[   75.470242][ T1166] EXT4-fs (loop0): Remounting filesystem read-only
[   76.142844][  T289] EXT4-fs (loop2): unmounting filesystem.
[   76.264322][  T290] EXT4-fs (loop0): unmounting filesystem.
[   80.150180][ T1234] 9pnet_fd: Insufficient options for proto=fd
[   80.782187][ T1230] loop4: detected capacity change from 0 to 40427
[   80.887034][ T1230] F2FS-fs (loop4): Invalid SB checksum offset: 0
[   81.062872][ T1230] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[   81.538150][ T1230] F2FS-fs (loop4): Unrecognized mount option "��������" or missing value
[   81.779499][ T1256] loop4: detected capacity change from 0 to 4096
[   81.834046][ T1256] EXT4-fs: Ignoring removed oldalloc option
[   81.857963][ T1256] EXT4-fs (loop4): Test dummy encryption mode enabled
[   81.879662][ T1256] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=2802c0a9, mo2=0002]
[   81.897800][ T1256] System zones: 0-5
[   81.913069][ T1256] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   82.026145][  T288] EXT4-fs (loop4): unmounting filesystem.
[   82.167127][ T1258] loop1: detected capacity change from 0 to 40427
[   82.178330][ T1258] F2FS-fs (loop1): Invalid SB checksum offset: 0
[   82.184917][ T1258] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[   82.193691][ T1258] F2FS-fs (loop1): Unrecognized mount option "��������" or missing value
[   82.206659][ T1258] 9pnet_fd: Insufficient options for proto=fd
[   82.252840][ T1278] loop1: detected capacity change from 0 to 512
[   82.270948][ T1278] EXT4-fs: Ignoring removed nobh option
[   82.296569][ T1278] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   82.312081][ T1281] loop2: detected capacity change from 0 to 512
[   82.335941][ T1278] EXT4-fs warning (device loop1): ext4_xattr_inode_get:492: inode #11: comm syz.1.266: ea_inode file size=0 entry size=6
[   82.354030][ T1278] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #11: comm syz.1.266: iget: bad extra_isize 90 (inode size 256)
[   82.368922][ T1278] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.266: error while reading EA inode 11 err=-117
[   82.369593][ T1281] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   82.381613][ T1278] EXT4-fs (loop1): 1 orphan inode deleted
[   82.390522][  T387] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   82.396394][ T1278] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   82.445150][ T1281] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   82.456145][  T287] EXT4-fs (loop1): unmounting filesystem.
[   82.540611][ T1287] sch_tbf: burst 1520 is lower than device lo mtu (65550) !
[   82.617729][  T387] usb 5-1: Using ep0 maxpacket: 8
[   82.624022][  T387] usb 5-1: config 0 has an invalid interface number: 31 but max is 0
[   82.632230][  T387] usb 5-1: config 0 has no interface number 0
[   82.647900][  T387] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[   82.668521][  T387] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   82.691277][  T387] usb 5-1: Product: syz
[   82.703703][  T387] usb 5-1: Manufacturer: syz
[   82.714145][  T387] usb 5-1: SerialNumber: syz
[   82.727569][  T387] usb 5-1: config 0 descriptor??
[   82.943507][  T387] usb 5-1: Found UVC 0.04 device syz (046d:08c3)
[   82.959519][  T387] uvcvideo 5-1:0.31: Entity type for entity Output 6 was not initialized!
[   82.984692][  T387] usb 5-1: Failed to create links for entity 5
[   83.048954][  T387] usb 5-1: Failed to register entities (-22).
[   83.058590][  T387] usb 5-1: USB disconnect, device number 4
[   83.137379][  T289] EXT4-fs (loop2): unmounting filesystem.
[   83.430874][ T1298] loop2: detected capacity change from 0 to 16
[   83.570686][ T1298] erofs: (device loop2): mounted with root inode @ nid 36.
[   84.186299][ T1292] loop1: detected capacity change from 0 to 40427
[   84.269643][ T1292] F2FS-fs (loop1): Invalid SB checksum offset: 0
[   84.291383][ T1292] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[   84.327763][ T1292] F2FS-fs (loop1): Unrecognized mount option "��������" or missing value
[   84.660932][ T1310] loop0: detected capacity change from 0 to 2048
[   84.677824][  T387] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   84.841056][ T1310] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   84.857542][ T1310] EXT4-fs error (device loop0): ext4_find_extent:936: inode #2: comm syz.0.274: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[   84.874865][ T1310] EXT4-fs (loop0): Remounting filesystem read-only
[   84.977740][  T387] usb 3-1: Using ep0 maxpacket: 8
[   84.984576][  T387] usb 3-1: config 0 has an invalid interface number: 31 but max is 0
[   85.134964][  T387] usb 3-1: config 0 has no interface number 0
[   85.251892][  T387] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[   85.391854][  T387] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   85.410214][  T387] usb 3-1: Product: syz
[   85.414488][  T387] usb 3-1: Manufacturer: syz
[   85.424576][  T387] usb 3-1: SerialNumber: syz
[   85.439457][  T387] usb 3-1: config 0 descriptor??
[   85.595552][  T290] EXT4-fs (loop0): unmounting filesystem.
[   85.694963][ T1324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.278'.
[   85.927773][  T387] usb 3-1: Found UVC 0.04 device syz (046d:08c3)
[   85.934189][  T387] uvcvideo 3-1:0.31: Entity type for entity Output 6 was not initialized!
[   85.952335][  T387] usb 3-1: Failed to create links for entity 5
[   85.959327][  T387] usb 3-1: Failed to register entities (-22).
[   85.968226][  T387] usb 3-1: USB disconnect, device number 4
[   91.334804][ T1351] tty tty25: ldisc open failed (-12), clearing slot 24
[   92.115533][ T1365] loop2: detected capacity change from 0 to 2048
[   93.107834][   T60] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   93.418212][ T1365] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   93.436269][ T1360] EXT4-fs error (device loop2): ext4_find_extent:936: inode #2: comm syz.2.288: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[   93.458259][ T1360] EXT4-fs (loop2): Remounting filesystem read-only
[   93.557700][   T60] usb 4-1: Using ep0 maxpacket: 8
[   93.564183][   T60] usb 4-1: config 0 has an invalid interface number: 31 but max is 0
[   93.623518][  T289] EXT4-fs (loop2): unmounting filesystem.
[   93.637882][   T60] usb 4-1: config 0 has no interface number 0
[   93.655667][   T60] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[   93.675136][   T60] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.687723][   T60] usb 4-1: Product: syz
[   93.692107][   T60] usb 4-1: Manufacturer: syz
[   93.706982][   T60] usb 4-1: SerialNumber: syz
[   93.716286][   T60] usb 4-1: config 0 descriptor??
[   93.742972][    T6] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   93.768199][ T1377] loop4: detected capacity change from 0 to 512
[   93.789419][ T1377] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   93.798925][ T1377] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   93.830732][ T1377] sch_tbf: burst 1520 is lower than device lo mtu (65550) !
[   93.847980][  T288] EXT4-fs (loop4): unmounting filesystem.
[   93.927748][    T6] usb 1-1: Using ep0 maxpacket: 8
[   94.135163][   T60] usb 4-1: Found UVC 0.04 device syz (046d:08c3)
[   94.151544][   T60] uvcvideo 4-1:0.31: Entity type for entity Output 6 was not initialized!
[   94.211949][    T6] usb 1-1: config 0 has an invalid interface number: 31 but max is 0
[   94.227759][    T6] usb 1-1: config 0 has no interface number 0
[   94.238815][    T6] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[   94.251467][   T60] usb 4-1: Failed to create links for entity 5
[   94.257737][    T6] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.258693][   T60] usb 4-1: Failed to register entities (-22).
[   94.266285][    T6] usb 1-1: Product: syz
[   94.274640][   T60] usb 4-1: USB disconnect, device number 3
[   94.283745][    T6] usb 1-1: Manufacturer: syz
[   94.290541][    T6] usb 1-1: SerialNumber: syz
[   94.335495][    T6] usb 1-1: config 0 descriptor??
[   94.383944][    T6] usb 1-1: Found UVC 0.04 device syz (046d:08c3)
[   94.400821][    T6] uvcvideo 1-1:0.31: Entity type for entity Output 6 was not initialized!
[   94.409510][    T6] usb 1-1: Failed to create links for entity 5
[   94.415727][    T6] usb 1-1: Failed to register entities (-22).
[   94.425078][    T6] usb 1-1: USB disconnect, device number 5
[   95.057741][  T370] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   95.107721][    T6] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   95.609120][  T370] usb 4-1: Using ep0 maxpacket: 32
[  100.467692][    T6] usb 1-1: Using ep0 maxpacket: 32
[  100.475747][    T6] usb 1-1: device descriptor read/all, error -71
[  100.500683][  T370] usb 4-1: unable to read config index 0 descriptor/start: -71
[  100.540493][  T370] usb 4-1: can't read configurations, error -71
[  100.664240][ T1435] loop2: detected capacity change from 0 to 512
[  100.738472][ T1435] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  100.752041][ T1435] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  100.853002][ T1440] sch_tbf: burst 1520 is lower than device lo mtu (65550) !
[  101.497227][  T289] EXT4-fs (loop2): unmounting filesystem.
[  102.348614][  T370] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  102.460709][   T28] audit: type=1400 audit(1784904514.223:190): avc:  denied  { accept } for  pid=1456 comm="syz.4.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  103.481739][ T1471] 9pnet_fd: Insufficient options for proto=fd
[  103.637699][  T370] usb 1-1: Using ep0 maxpacket: 32
[  103.645920][  T370] usb 1-1: config 0 has an invalid interface number: 184 but max is 0
[  103.661844][  T370] usb 1-1: config 0 has no interface number 0
[  103.669314][  T370] usb 1-1: config 0 interface 184 has no altsetting 0
[  103.679744][  T370] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  103.688976][  T370] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  103.697075][  T370] usb 1-1: Product: syz
[  103.701677][  T370] usb 1-1: Manufacturer: syz
[  103.706497][  T370] usb 1-1: SerialNumber: syz
[  103.713306][  T370] usb 1-1: config 0 descriptor??
[  103.719713][  T370] smsc75xx v1.0.0
[  104.008565][ T1495] loop4: detected capacity change from 0 to 512
[  104.057134][ T1495] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  104.069837][ T1495] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  104.168924][ T1499] sch_tbf: burst 1520 is lower than device lo mtu (65550) !
[  104.321863][  T370] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71
[  104.342632][  T370] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  104.363031][  T370] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  104.388562][  T370] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  104.407712][  T370] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  104.421937][  T370] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  104.447738][  T370] smsc75xx: probe of 1-1:0.184 failed with error -71
[  104.458431][  T370] usb 1-1: USB disconnect, device number 8
[  104.678841][ T1504] loop1: detected capacity change from 0 to 4096
[  104.696818][ T1504] EXT4-fs: Ignoring removed oldalloc option
[  104.717360][ T1504] EXT4-fs (loop1): Test dummy encryption mode enabled
[  104.726018][ T1504] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=2802c0a9, mo2=0002]
[  104.734532][ T1504] System zones: 0-5
[  104.740327][ T1504] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  104.788203][  T287] EXT4-fs (loop1): unmounting filesystem.
[  104.846716][ T1509] 9pnet_fd: Insufficient options for proto=fd
[  104.856807][  T288] EXT4-fs (loop4): unmounting filesystem.
[  105.093641][ T1519] loop1: detected capacity change from 0 to 40427
[  105.110617][ T1519] F2FS-fs (loop1): Invalid SB checksum offset: 0
[  105.117403][ T1519] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[  105.126149][   T60] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  105.134048][ T1519] F2FS-fs (loop1): Unrecognized mount option "��������" or missing value
[  105.356102][   T60] usb 4-1: Using ep0 maxpacket: 8
[  105.362592][   T60] usb 4-1: config 0 has an invalid interface number: 31 but max is 0
[  105.384055][   T60] usb 4-1: config 0 has no interface number 0
[  105.402654][   T60] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  105.427043][   T60] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.448448][   T60] usb 4-1: Product: syz
[  105.457075][   T60] usb 4-1: Manufacturer: syz
[  105.470379][   T60] usb 4-1: SerialNumber: syz
[  105.498908][   T60] usb 4-1: config 0 descriptor??
[  105.978742][   T60] usb 4-1: Found UVC 0.04 device syz (046d:08c3)
[  106.006022][   T60] uvcvideo 4-1:0.31: Entity type for entity Output 6 was not initialized!
[  106.109467][   T60] usb 4-1: Failed to create links for entity 5
[  106.484491][   T60] usb 4-1: Failed to register entities (-22).
[  106.508343][   T60] usb 4-1: USB disconnect, device number 6
[  109.795109][ T1536] tty tty25: ldisc open failed (-12), clearing slot 24
[  109.868206][ T1542] tty tty23: ldisc open failed (-12), clearing slot 22
[  109.990972][ T1552] 9pnet_fd: Insufficient options for proto=fd
[  111.114443][ T1557] loop1: detected capacity change from 0 to 256
[  111.315664][ T1557] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66dc59, utbl_chksum : 0xe619d30d)
[  111.545923][  T370] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  111.747722][  T370] usb 3-1: Using ep0 maxpacket: 32
[  111.756150][  T370] usb 3-1: config 0 has an invalid interface number: 184 but max is 0
[  111.770708][  T370] usb 3-1: config 0 has no interface number 0
[  111.785164][  T370] usb 3-1: config 0 interface 184 has no altsetting 0
[  111.800862][  T370] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  111.817763][  T370] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.057714][  T370] usb 3-1: Product: syz
[  113.061953][  T370] usb 3-1: Manufacturer: syz
[  113.066577][  T370] usb 3-1: SerialNumber: syz
[  113.076750][  T370] usb 3-1: config 0 descriptor??
[  113.097995][  T370] usb 3-1: can't set config #0, error -71
[  113.104578][  T370] usb 3-1: USB disconnect, device number 5
[  113.484536][    T6] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  114.867692][    T6] usb 1-1: Using ep0 maxpacket: 8
[  114.874104][    T6] usb 1-1: config 0 has an invalid interface number: 31 but max is 0
[  114.902140][    T6] usb 1-1: config 0 has no interface number 0
[  114.926158][    T6] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  114.941939][    T6] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.907550][    T6] usb 1-1: Product: syz
[  115.911908][    T6] usb 1-1: Manufacturer: syz
[  115.916530][    T6] usb 1-1: SerialNumber: syz
[  115.924596][    T6] usb 1-1: config 0 descriptor??
[  116.133971][    T6] usb 1-1: Found UVC 0.04 device syz (046d:08c3)
[  116.143577][    T6] uvcvideo 1-1:0.31: Entity type for entity Output 6 was not initialized!
[  116.207734][  T434] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  116.209752][    T6] usb 1-1: USB disconnect, device number 9
[  116.417738][  T434] usb 3-1: Using ep0 maxpacket: 8
[  116.436588][  T434] usb 3-1: config 0 has an invalid interface number: 31 but max is 0
[  116.518027][  T434] usb 3-1: config 0 has no interface number 0
[  116.604224][  T434] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  116.732319][  T434] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.864587][  T434] usb 3-1: Product: syz
[  117.315987][  T434] usb 3-1: Manufacturer: syz
[  117.320897][  T434] usb 3-1: SerialNumber: syz
[  117.331556][ T1624] loop0: detected capacity change from 0 to 512
[  117.340019][  T434] usb 3-1: config 0 descriptor??
[  117.370806][ T1624] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  117.384223][ T1624] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  117.442821][  T290] EXT4-fs (loop0): unmounting filesystem.
[  117.586561][ T1640] 9pnet_fd: Insufficient options for proto=fd
[  117.700817][ T1648] loop1: detected capacity change from 0 to 128
[  117.736491][ T1648] EXT4-fs: Ignoring removed orlov option
[  117.852911][  T434] usb 3-1: Found UVC 0.04 device syz (046d:08c3)
[  117.931066][  T434] uvcvideo 3-1:0.31: Entity type for entity Output 6 was not initialized!
[  117.995706][ T1648] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  118.024271][  T434] usb 3-1: Failed to create links for entity 5
[  118.036261][ T1648] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  118.071804][  T434] usb 3-1: Failed to register entities (-22).
[  118.175194][  T434] usb 3-1: USB disconnect, device number 6
[  118.758883][   T28] audit: type=1400 audit(1784904530.533:191): avc:  denied  { ioctl } for  pid=1647 comm="syz.1.371" path="/88/file1/file1" dev="loop1" ino=12 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  118.797225][  T287] EXT4-fs (loop1): unmounting filesystem.
[  118.946610][ T1666] loop4: detected capacity change from 0 to 512
[  119.006666][ T1666] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  119.026667][ T1666] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  119.070632][   T28] audit: type=1400 audit(1784904530.843:192): avc:  denied  { ioctl } for  pid=1673 comm="syz.3.377" path="socket:[27847]" dev="sockfs" ino=27847 ioctlcmd=0x48e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  119.145120][ T1680] 9pnet_fd: Insufficient options for proto=fd
[  119.248015][ T1684] loop9: detected capacity change from 0 to 7
[  119.254577][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  119.263762][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  119.267690][  T434] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  119.272245][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  119.288301][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  119.296132][ T1684]  loop9: unable to read partition table
[  119.301920][ T1684] loop_reread_partitions: partition scan of loop9 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  119.303880][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  119.324555][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  119.334652][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  119.343887][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  119.352035][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  119.361215][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  119.369306][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  119.378465][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  119.386549][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  119.395714][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  119.436485][  T370] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  119.487697][  T434] usb 3-1: Using ep0 maxpacket: 32
[  119.494047][  T434] usb 3-1: config 0 has an invalid interface number: 184 but max is 0
[  119.502433][  T434] usb 3-1: config 0 has no interface number 0
[  119.508836][  T434] usb 3-1: config 0 interface 184 has no altsetting 0
[  119.519112][  T434] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  119.528396][  T434] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.536619][  T434] usb 3-1: Product: syz
[  119.542195][  T434] usb 3-1: Manufacturer: syz
[  119.547020][  T434] usb 3-1: SerialNumber: syz
[  119.596626][  T434] usb 3-1: config 0 descriptor??
[  119.612520][  T434] smsc75xx v1.0.0
[  119.859155][  T288] EXT4-fs (loop4): unmounting filesystem.
[  120.015594][  T434] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61
[  120.054023][  T434] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61
[  120.103907][  T434] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[  120.155488][  T434] smsc75xx: probe of 3-1:0.184 failed with error -61
[  120.687794][  T370] usb 1-1: Using ep0 maxpacket: 32
[  120.694704][  T370] usb 1-1: config 0 has an invalid interface number: 184 but max is 0
[  120.714283][  T370] usb 1-1: config 0 has no interface number 0
[  120.720665][  T370] usb 1-1: config 0 interface 184 has no altsetting 0
[  122.440448][ T1706] loop0: detected capacity change from 0 to 128
[  122.469185][ T1706] EXT4-fs: Ignoring removed orlov option
[  122.536590][ T1706] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  122.555440][ T1706] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  122.645581][  T290] EXT4-fs (loop0): unmounting filesystem.
[  122.698172][  T370] usb 1-1: string descriptor 0 read error: -71
[  122.704420][  T370] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  122.714901][  T370] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.728260][  T370] usb 1-1: config 0 descriptor??
[  122.737733][  T370] usb 1-1: can't set config #0, error -71
[  122.744037][  T370] usb 1-1: USB disconnect, device number 10
[  123.007710][  T434] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  123.178089][  T434] usb 2-1: device descriptor read/64, error -71
[  123.337261][   T24] usb 3-1: USB disconnect, device number 7
[  123.467816][  T434] usb 2-1: device descriptor read/64, error -71
[  123.574310][   T28] audit: type=1400 audit(1784904535.343:193): avc:  denied  { write } for  pid=1729 comm="syz.2.392" path="socket:[28911]" dev="sockfs" ino=28911 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  124.098600][  T434] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  124.312796][  T434] usb 2-1: device descriptor read/64, error -71
[  124.667738][  T434] usb 2-1: device descriptor read/64, error -71
[  124.787927][  T434] usb usb2-port1: attempt power cycle
[  125.157693][  T370] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  125.247804][  T434] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  125.288886][  T434] usb 2-1: device descriptor read/8, error -71
[  125.438735][  T434] usb 2-1: device descriptor read/8, error -71
[  125.457685][  T370] usb 1-1: Using ep0 maxpacket: 8
[  125.463943][  T370] usb 1-1: config 0 has an invalid interface number: 31 but max is 0
[  125.477701][  T370] usb 1-1: config 0 has no interface number 0
[  125.494445][  T370] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  125.504381][  T370] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.521479][  T370] usb 1-1: Product: syz
[  125.525782][  T370] usb 1-1: Manufacturer: syz
[  125.530547][  T370] usb 1-1: SerialNumber: syz
[  125.541782][  T370] usb 1-1: config 0 descriptor??
[  125.700296][  T370] usb 1-1: Found UVC 0.04 device syz (046d:08c3)
[  125.706711][  T370] uvcvideo 1-1:0.31: Entity type for entity Output 6 was not initialized!
[  125.706994][   T28] audit: type=1400 audit(1784904537.473:194): avc:  denied  { mount } for  pid=1759 comm="syz.0.402" name="/" dev="ramfs" ino=29166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  125.730609][  T370] usb 1-1: Failed to create links for entity 5
[  125.737902][  T434] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  125.767699][   T24] usb 4-1: new full-speed USB device number 7 using dummy_hcd
[  125.775439][  T370] usb 1-1: Failed to register entities (-22).
[  125.812358][  T370] usb 1-1: USB disconnect, device number 11
[  125.825273][ T1766] loop4: detected capacity change from 0 to 256
[  125.826779][   T28] audit: type=1400 audit(1784904537.533:195): avc:  denied  { write } for  pid=1759 comm="syz.0.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  125.833241][ T1767] loop0: detected capacity change from 0 to 1024
[  125.852527][   T28] audit: type=1400 audit(1784904537.533:196): avc:  denied  { nlmsg_write } for  pid=1759 comm="syz.0.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  125.897894][ T1766] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66dc59, utbl_chksum : 0xe619d30d)
[  125.943374][ T1767] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  125.978966][   T24] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00
[  125.991960][ T1767] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  125.999237][ T1767] IPv6: NLM_F_CREATE should be set when creating new route
[  126.006468][ T1767] IPv6: NLM_F_CREATE should be set when creating new route
[  126.015235][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  126.067594][   T24] usb 4-1: config 0 descriptor??
[  126.128102][ T1767] netlink: 28 bytes leftover after parsing attributes in process `syz.0.406'.
[  126.137685][  T308] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  126.172188][ T1767] netlink: 4 bytes leftover after parsing attributes in process `syz.0.406'.
[  126.202087][   T28] audit: type=1400 audit(1784904537.973:197): avc:  denied  { ioctl } for  pid=1765 comm="syz.0.406" path="/70/file1/file1" dev="loop0" ino=15 ioctlcmd=0x1282 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  126.227673][  T434] usb 2-1: device not accepting address 7, error -71
[  126.232345][ T1767] syz.0.406 (1767) used greatest stack depth: 21856 bytes left
[  126.236538][  T434] usb usb2-port1: unable to enumerate USB device
[  126.249935][  T290] EXT4-fs (loop0): unmounting filesystem.
[  126.327703][  T308] usb 3-1: Using ep0 maxpacket: 32
[  126.337150][  T308] usb 3-1: config 0 has an invalid interface number: 184 but max is 0
[  126.345601][  T308] usb 3-1: config 0 has no interface number 0
[  126.351905][  T308] usb 3-1: config 0 interface 184 has no altsetting 0
[  126.368747][  T308] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  126.386203][  T308] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  126.394249][  T308] usb 3-1: Product: syz
[  126.398529][  T308] usb 3-1: Manufacturer: syz
[  126.403143][  T308] usb 3-1: SerialNumber: syz
[  126.421920][  T308] usb 3-1: config 0 descriptor??
[  126.429040][  T308] smsc75xx v1.0.0
[  126.476937][   T28] audit: type=1400 audit(1784904538.243:198): avc:  denied  { setopt } for  pid=1748 comm="syz.3.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  126.496445][   T28] audit: type=1400 audit(1784904538.243:199): avc:  denied  { write } for  pid=1748 comm="syz.3.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  126.524115][   T24] koneplus 0003:1E7D:2E22.0001: bogus close delimiter
[  126.531428][   T24] koneplus 0003:1E7D:2E22.0001: item 0 0 2 10 parsing failed
[  126.539071][   T24] koneplus 0003:1E7D:2E22.0001: parse failed
[  126.566075][   T24] koneplus: probe of 0003:1E7D:2E22.0001 failed with error -22
[  126.606613][ T1785] loop0: detected capacity change from 0 to 256
[  126.613758][ T1785] =======================================================
[  126.613758][ T1785] WARNING: The mand mount option has been deprecated and
[  126.613758][ T1785]          and is ignored by this kernel. Remove the mand
[  126.613758][ T1785]          option from the mount to silence this warning.
[  126.613758][ T1785] =======================================================
[  126.741351][  T370] usb 4-1: USB disconnect, device number 7
[  126.776801][ T1793] loop1: detected capacity change from 0 to 4096
[  126.784723][ T1793] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  126.793850][ T1793] EXT4-fs (loop1): Test dummy encryption mode enabled
[  126.809151][ T1791] loop0: detected capacity change from 0 to 2048
[  126.812603][ T1793] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=284ec118, mo2=0003]
[  126.824155][ T1793] System zones: 0-5
[  126.829773][ T1793] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  126.850758][  T308] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61
[  126.861948][    T6] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  126.869929][ T1791] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  126.872049][  T308] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61
[  126.889305][ T1791] EXT4-fs error (device loop0): ext4_find_extent:936: inode #2: comm syz.0.411: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  126.889802][  T308] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[  126.915830][ T1791] EXT4-fs (loop0): Remounting filesystem read-only
[  126.922889][  T308] smsc75xx: probe of 3-1:0.184 failed with error -61
[  126.932716][  T287] EXT4-fs (loop1): unmounting filesystem.
[  127.067688][    T6] usb 5-1: Using ep0 maxpacket: 32
[  127.074066][    T6] usb 5-1: config 0 has an invalid interface number: 184 but max is 0
[  127.082338][    T6] usb 5-1: config 0 has no interface number 0
[  127.088473][    T6] usb 5-1: config 0 interface 184 has no altsetting 0
[  127.096583][    T6] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  127.105635][    T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.113632][    T6] usb 5-1: Product: syz
[  127.117805][    T6] usb 5-1: Manufacturer: syz
[  127.122407][    T6] usb 5-1: SerialNumber: syz
[  127.127559][    T6] usb 5-1: config 0 descriptor??
[  127.133234][    T6] smsc75xx v1.0.0
[  127.217712][   T24] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  127.397691][   T24] usb 2-1: Using ep0 maxpacket: 8
[  127.403909][   T24] usb 2-1: config 0 has an invalid interface number: 31 but max is 0
[  127.412380][   T24] usb 2-1: config 0 has no interface number 0
[  127.420013][   T24] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  127.429112][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.437223][   T24] usb 2-1: Product: syz
[  127.441559][   T24] usb 2-1: Manufacturer: syz
[  127.446216][   T24] usb 2-1: SerialNumber: syz
[  127.451466][   T24] usb 2-1: config 0 descriptor??
[  127.531487][  T290] EXT4-fs (loop0): unmounting filesystem.
[  127.677723][  T370] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  127.872572][   T24] usb 2-1: Found UVC 0.04 device syz (046d:08c3)
[  127.884758][   T24] uvcvideo 2-1:0.31: Entity type for entity Output 6 was not initialized!
[  127.903589][   T24] usb 2-1: Failed to create links for entity 5
[  127.910851][   T24] usb 2-1: Failed to register entities (-22).
[  127.953767][   T24] usb 2-1: USB disconnect, device number 8
[  128.803330][ T1814] loop1: detected capacity change from 0 to 512
[  128.819706][    T6] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71
[  128.830707][    T6] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  128.841556][    T6] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  128.852504][    T6] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  128.862293][    T6] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  128.863708][   T24] usb 3-1: USB disconnect, device number 8
[  128.872705][ T1814] EXT4-fs (loop1): bad block size 8192
[  128.897699][  T370] usb 4-1: device descriptor read/64, error -71
[  128.917976][    T6] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  128.954892][    T6] smsc75xx: probe of 5-1:0.184 failed with error -71
[  128.978898][    T6] usb 5-1: USB disconnect, device number 6
[  129.167681][  T370] usb 4-1: device descriptor read/64, error -71
[  129.437700][  T370] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  129.460466][ T1836] loop0: detected capacity change from 0 to 512
[  129.509087][ T1836] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  129.518232][ T1836] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  129.569370][  T290] EXT4-fs (loop0): unmounting filesystem.
[  129.600207][  T370] usb 4-1: device descriptor read/64, error -71
[  129.747025][ T1841] loop0: detected capacity change from 0 to 2048
[  129.845712][ T1841] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  129.855751][ T1841] EXT4-fs error (device loop0): ext4_find_extent:936: inode #2: comm syz.0.425: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  129.867686][  T370] usb 4-1: device descriptor read/64, error -71
[  129.884017][ T1841] EXT4-fs (loop0): Remounting filesystem read-only
[  130.007786][  T370] usb usb4-port1: attempt power cycle
[  130.207678][    T6] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  130.345171][   T28] audit: type=1400 audit(1784904542.113:200): avc:  denied  { mount } for  pid=1856 comm="syz.3.431" name="/" dev="configfs" ino=13239 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  130.368056][   T28] audit: type=1400 audit(1784904542.123:201): avc:  denied  { search } for  pid=1856 comm="syz.3.431" name="/" dev="configfs" ino=13239 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  130.397685][    T6] usb 3-1: Using ep0 maxpacket: 8
[  130.398184][ T1860] FAULT_INJECTION: forcing a failure.
[  130.398184][ T1860] name failslab, interval 1, probability 0, space 0, times 1
[  130.406939][    T6] usb 3-1: config 0 has an invalid interface number: 31 but max is 0
[  130.415462][ T1860] CPU: 1 PID: 1860 Comm: syz.3.432 Not tainted syzkaller #0
[  130.430808][ T1860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  130.437861][    T6] usb 3-1: config 0 has no interface number 0
[  130.441246][ T1860] Call Trace:
[  130.441269][ T1860]  <TASK>
[  130.441280][ T1860]  __dump_stack+0x21/0x24
[  130.441309][ T1860]  dump_stack_lvl+0x110/0x170
[  130.441328][ T1860]  ? __cfi_dump_stack_lvl+0x8/0x8
[  130.457222][    T6] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  130.458139][ T1860]  ? __kasan_check_write+0x14/0x20
[  130.458170][ T1860]  dump_stack+0x15/0x24
[  130.458192][ T1860]  should_fail_ex+0x3bf/0x510
[  130.463232][    T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.467897][ T1860]  ? getname_flags+0xba/0x510
[  130.467921][ T1860]  __should_failslab+0xac/0xf0
[  130.467944][ T1860]  should_failslab+0x9/0x20
[  130.477351][    T6] usb 3-1: Product: syz
[  130.482148][ T1860]  kmem_cache_alloc+0x3b/0x320
[  130.482177][ T1860]  getname_flags+0xba/0x510
[  130.482195][ T1860]  __x64_sys_statx+0x15c/0x2b0
[  130.486678][    T6] usb 3-1: Manufacturer: syz
[  130.491026][ T1860]  ? __cfi___x64_sys_statx+0x10/0x10
[  130.491053][ T1860]  ? __kasan_check_write+0x14/0x20
[  130.491070][ T1860]  ? fput+0x154/0x1a0
[  130.499343][    T6] usb 3-1: SerialNumber: syz
[  130.503712][ T1860]  ? ksys_write+0x1fa/0x260
[  130.503735][ T1860]  ? __cfi_ksys_write+0x10/0x10
[  130.513591][    T6] usb 3-1: config 0 descriptor??
[  130.517133][ T1860]  ? fpregs_assert_state_consistent+0xb1/0xe0
[  130.517166][ T1860]  x64_sys_call+0x602/0x9a0
[  130.579441][ T1860]  do_syscall_64+0x4c/0xa0
[  130.583884][ T1860]  ? clear_bhb_loop+0x30/0x80
[  130.588551][ T1860]  ? clear_bhb_loop+0x30/0x80
[  130.593236][ T1860]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  130.599159][ T1860] RIP: 0033:0x7fc77c59de99
[  130.603589][ T1860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  130.623199][ T1860] RSP: 002b:00007fc77d52d028 EFLAGS: 00000246 ORIG_RAX: 000000000000014c
[  130.631629][ T1860] RAX: ffffffffffffffda RBX: 00007fc77c825fa0 RCX: 00007fc77c59de99
[  130.639607][ T1860] RDX: 0000000000000000 RSI: 00002000000049c0 RDI: 0000000000000004
[  130.647585][ T1860] RBP: 00007fc77d52d090 R08: 0000000000000000 R09: 0000000000000000
[  130.655560][ T1860] R10: 0000000000000400 R11: 0000000000000246 R12: 0000000000000001
[  130.663529][ T1860] R13: 00007fc77c826038 R14: 00007fc77c825fa0 R15: 00007ffd1be79338
[  130.671515][ T1860]  </TASK>
[  130.732056][   T28] audit: type=1400 audit(1784904542.503:202): avc:  denied  { read write } for  pid=1863 comm="syz.3.434" name="fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  130.758244][  T290] EXT4-fs (loop0): unmounting filesystem.
[  130.768593][   T28] audit: type=1400 audit(1784904542.503:203): avc:  denied  { open } for  pid=1863 comm="syz.3.434" path="/dev/fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  130.799101][ T1866] loop3: detected capacity change from 0 to 512
[  130.829397][ T1866] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  130.939787][ T1866] EXT4-fs warning (device loop3): verify_group_input:151: Cannot add at group 8 (only 1 groups)
[  130.955065][   T28] audit: type=1400 audit(1784904542.723:204): avc:  denied  { create } for  pid=1863 comm="syz.3.434" name=08 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1
[  130.963774][    T6] usb 3-1: Found UVC 0.04 device syz (046d:08c3)
[  130.984338][    T6] uvcvideo 3-1:0.31: Entity type for entity Output 6 was not initialized!
[  130.993387][    T6] usb 3-1: Failed to create links for entity 5
[  130.999705][    T6] usb 3-1: Failed to register entities (-22).
[  131.006638][ T1866] EXT4-fs error (device loop3): ext4_lookup:1858: inode #12: comm syz.3.434: iget: checksum invalid
[  131.014591][    T6] usb 3-1: USB disconnect, device number 9
[  131.428733][  T291] EXT4-fs (loop3): unmounting filesystem.
[  132.537727][  T387] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  132.747773][  T387] usb 5-1: device descriptor read/64, error -71
[  133.402435][ T1912] loop0: detected capacity change from 0 to 2048
[  133.480409][ T1912] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  133.490330][ T1912] EXT4-fs error (device loop0): ext4_find_extent:936: inode #2: comm syz.0.445: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  133.508022][ T1912] EXT4-fs (loop0): Remounting filesystem read-only
[  133.679843][ T1922] fuse: Bad value for 'fd'
[  133.686485][   T28] audit: type=1400 audit(1784904545.453:205): avc:  denied  { setopt } for  pid=1921 comm="syz.2.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  133.707810][  T290] EXT4-fs (loop0): unmounting filesystem.
[  133.721188][ T1922] input: syz0 as /devices/virtual/input/input4
[  133.755580][   T28] audit: type=1400 audit(1784904545.483:206): avc:  denied  { read } for  pid=1921 comm="syz.2.448" name="uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  133.780570][   T28] audit: type=1400 audit(1784904545.483:207): avc:  denied  { open } for  pid=1921 comm="syz.2.448" path="/dev/uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  133.804335][   T28] audit: type=1400 audit(1784904545.483:208): avc:  denied  { ioctl } for  pid=1921 comm="syz.2.448" path="/dev/uinput" dev="devtmpfs" ino=262 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  133.859845][   T28] audit: type=1400 audit(1784904545.633:209): avc:  denied  { read } for  pid=88 comm="acpid" name="event3" dev="devtmpfs" ino=1062 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  133.882323][   T28] audit: type=1400 audit(1784904545.633:210): avc:  denied  { open } for  pid=88 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1062 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  133.908321][   T28] audit: type=1400 audit(1784904545.633:211): avc:  denied  { ioctl } for  pid=88 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1062 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  134.031021][  T387] usb 5-1: device descriptor read/64, error -71
[  134.203086][ T1930] loop1: detected capacity change from 0 to 512
[  134.354196][ T1930] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  134.427772][  T387] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  134.967520][   T24] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  134.975248][  T387] usb 5-1: device descriptor read/64, error -71
[  134.998265][  T287] EXT4-fs (loop1): unmounting filesystem.
[  135.167794][   T24] usb 3-1: Using ep0 maxpacket: 8
[  135.180142][   T24] usb 3-1: config 0 has an invalid interface number: 31 but max is 0
[  135.188641][   T24] usb 3-1: config 0 has no interface number 0
[  135.199633][   T24] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  135.222698][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.236141][   T24] usb 3-1: Product: syz
[  135.240546][   T24] usb 3-1: Manufacturer: syz
[  135.245208][   T24] usb 3-1: SerialNumber: syz
[  135.258301][  T387] usb 5-1: device descriptor read/64, error -71
[  135.279700][   T24] usb 3-1: config 0 descriptor??
[  135.398495][  T387] usb usb5-port1: attempt power cycle
[  135.547719][  T368] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  135.637812][    T6] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  135.728734][ T1976] loop4: detected capacity change from 0 to 2048
[  135.769630][ T1980] loop1: detected capacity change from 0 to 4096
[  135.777379][ T1976] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  135.787329][ T1976] EXT4-fs error (device loop4): ext4_find_extent:936: inode #2: comm syz.4.464: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  135.813871][ T1976] EXT4-fs (loop4): Remounting filesystem read-only
[  135.826488][ T1980] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  135.837714][    T6] usb 4-1: Using ep0 maxpacket: 32
[  135.844030][    T6] usb 4-1: config 0 has an invalid interface number: 184 but max is 0
[  135.859558][ T1980] EXT4-fs (loop1): Test dummy encryption mode enabled
[  135.868155][    T6] usb 4-1: config 0 has no interface number 0
[  135.877147][    T6] usb 4-1: config 0 interface 184 has no altsetting 0
[  135.884454][ T1980] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c098, mo2=0002]
[  135.893494][ T1980] System zones: 0-5
[  135.898665][    T6] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  135.908781][ T1980] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  135.917700][    T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.942159][    T6] usb 4-1: Product: syz
[  135.953203][    T6] usb 4-1: Manufacturer: syz
[  135.965183][    T6] usb 4-1: SerialNumber: syz
[  135.972179][   T28] kauditd_printk_skb: 1 callbacks suppressed
[  135.972194][   T28] audit: type=1400 audit(1784904547.753:213): avc:  denied  { read write } for  pid=1979 comm="syz.1.466" name="snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  136.008495][   T28] audit: type=1400 audit(1784904547.783:214): avc:  denied  { open } for  pid=1979 comm="syz.1.466" path="/dev/snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  136.032428][    T6] usb 4-1: config 0 descriptor??
[  136.039390][    T6] smsc75xx v1.0.0
[  136.182992][   T24] usb 3-1: Found UVC 0.04 device syz (046d:08c3)
[  136.189839][   T24] uvcvideo 3-1:0.31: Entity type for entity Output 6 was not initialized!
[  136.235961][   T24] usb 3-1: Failed to create links for entity 5
[  136.242388][   T24] usb 3-1: Failed to register entities (-22).
[  136.242930][  T288] EXT4-fs (loop4): unmounting filesystem.
[  136.252175][   T24] usb 3-1: USB disconnect, device number 10
[  136.265423][  T368] usb 1-1: Using ep0 maxpacket: 32
[  136.280456][  T368] usb 1-1: config 0 has an invalid interface number: 184 but max is 0
[  136.290485][  T368] usb 1-1: config 0 has no interface number 0
[  136.296598][  T368] usb 1-1: config 0 interface 184 has no altsetting 0
[  136.298257][  T370] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  136.305479][  T368] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  136.320412][  T368] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  136.328467][  T368] usb 1-1: Product: syz
[  136.332738][  T368] usb 1-1: Manufacturer: syz
[  136.337345][  T368] usb 1-1: SerialNumber: syz
[  136.342728][  T368] usb 1-1: config 0 descriptor??
[  136.348639][  T368] smsc75xx v1.0.0
[  136.441208][    T6] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61
[  136.452183][    T6] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61
[  136.461917][    T6] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[  136.472281][    T6] smsc75xx: probe of 4-1:0.184 failed with error -61
[  136.509498][  T370] usb 2-1: unable to get BOS descriptor or descriptor too short
[  136.517893][  T370] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  136.528038][  T370] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  136.537003][  T370] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  136.555094][  T370] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  136.564353][  T370] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  136.572576][  T370] usb 2-1: Product: syz
[  136.576753][  T370] usb 2-1: Manufacturer: 띧껏䪇綡쟼镶쑗꟏釗倿酦◇購耫㱿闶瓌乊㸃똮톙◬ꂰ鸁틟덻鸡繱콅򖵎
[  136.589973][  T370] usb 2-1: SerialNumber: syz
[  136.697717][  T387] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  136.728797][  T387] usb 5-1: device descriptor read/8, error -71
[  136.752034][  T368] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61
[  136.762911][  T368] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61
[  136.772591][  T368] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[  136.782843][  T368] smsc75xx: probe of 1-1:0.184 failed with error -61
[  136.798822][  T370] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found
[  136.805670][  T370] cdc_ncm 2-1:1.0: bind() failure
[  136.813778][  T370] usb 2-1: USB disconnect, device number 9
[  136.878779][  T387] usb 5-1: device descriptor read/8, error -71
[  137.157704][  T387] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  137.167791][ T1915] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 200: padding at end of block bitmap is not set
[  137.189055][  T387] usb 5-1: device descriptor read/8, error -71
[  137.338936][  T387] usb 5-1: device descriptor read/8, error -71
[  137.380517][  T287] EXT4-fs (loop1): unmounting filesystem.
[  137.457749][  T387] usb usb5-port1: unable to enumerate USB device
[  137.717708][   T24] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  137.897728][   T24] usb 2-1: Using ep0 maxpacket: 8
[  137.904150][   T24] usb 2-1: config 0 has an invalid interface number: 31 but max is 0
[  137.912522][   T24] usb 2-1: config 0 has no interface number 0
[  137.920339][   T24] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  137.929663][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.937934][   T24] usb 2-1: Product: syz
[  137.942248][   T24] usb 2-1: Manufacturer: syz
[  137.946900][   T24] usb 2-1: SerialNumber: syz
[  137.956106][   T24] usb 2-1: config 0 descriptor??
[  138.233628][  T387] usb 1-1: USB disconnect, device number 12
[  138.358401][ T2029] loop0: detected capacity change from 0 to 2048
[  138.366068][   T24] usb 2-1: Found UVC 0.04 device syz (046d:08c3)
[  138.377747][   T24] uvcvideo 2-1:0.31: Entity type for entity Output 6 was not initialized!
[  138.386364][   T24] usb 2-1: Failed to create links for entity 5
[  138.396791][   T24] usb 2-1: Failed to register entities (-22).
[  138.412836][ T2029] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  138.422711][ T2029] EXT4-fs error (device loop0): ext4_find_extent:936: inode #2: comm syz.0.478: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  138.439693][ T2029] EXT4-fs (loop0): Remounting filesystem read-only
[  138.479258][  T290] EXT4-fs (loop0): unmounting filesystem.
[  138.492581][   T24] usb 2-1: USB disconnect, device number 10
[  138.500891][  T387] usb 4-1: USB disconnect, device number 11
[  138.544263][ T2041] FAULT_INJECTION: forcing a failure.
[  138.544263][ T2041] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  138.559479][ T2041] CPU: 1 PID: 2041 Comm: syz.0.481 Not tainted syzkaller #0
[  138.566807][ T2041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  138.576881][ T2041] Call Trace:
[  138.580183][ T2041]  <TASK>
[  138.583105][ T2041]  __dump_stack+0x21/0x24
[  138.587435][ T2041]  dump_stack_lvl+0x110/0x170
[  138.592102][ T2041]  ? __cfi_dump_stack_lvl+0x8/0x8
[  138.597116][ T2041]  ? hrtimer_start_range_ns+0xa79/0xb90
[  138.602657][ T2041]  dump_stack+0x15/0x24
[  138.606842][ T2041]  should_fail_ex+0x3bf/0x510
[  138.611509][ T2041]  should_fail+0xb/0x10
[  138.615659][ T2041]  should_fail_usercopy+0x1a/0x20
[  138.620686][ T2041]  copy_fpstate_to_sigframe+0x896/0xb30
[  138.626259][ T2041]  ? copy_fpstate_to_sigframe+0x184/0xb30
[  138.631984][ T2041]  ? __cfi_copy_fpstate_to_sigframe+0x10/0x10
[  138.638053][ T2041]  ? __cfi_get_signal+0x10/0x10
[  138.642907][ T2041]  ? security_file_permission+0x8a/0xb0
[  138.648448][ T2041]  ? fpu__alloc_mathframe+0xb3/0x130
[  138.653748][ T2041]  arch_do_signal_or_restart+0x652/0x11c0
[  138.659470][ T2041]  ? __cfi_vfs_write+0x10/0x10
[  138.664398][ T2041]  ? __kasan_check_write+0x14/0x20
[  138.669538][ T2041]  ? mutex_unlock+0x8f/0x230
[  138.674147][ T2041]  ? __cfi_mutex_unlock+0x10/0x10
[  138.679188][ T2041]  ? __cfi_arch_do_signal_or_restart+0x10/0x10
[  138.685348][ T2041]  ? __kasan_check_write+0x14/0x20
[  138.690459][ T2041]  ? __cfi_ksys_write+0x10/0x10
[  138.695310][ T2041]  exit_to_user_mode_loop+0x7a/0xb0
[  138.700511][ T2041]  exit_to_user_mode_prepare+0x87/0xd0
[  138.705971][ T2041]  syscall_exit_to_user_mode+0x1a/0x30
[  138.711434][ T2041]  do_syscall_64+0x58/0xa0
[  138.715856][ T2041]  ? clear_bhb_loop+0x30/0x80
[  138.720541][ T2041]  ? clear_bhb_loop+0x30/0x80
[  138.725226][ T2041]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  138.731217][ T2041] RIP: 0033:0x7fc62e35e6ce
[  138.735630][ T2041] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  138.755338][ T2041] RSP: 002b:00007fc62f26ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  138.763758][ T2041] RAX: 0000000000000001 RBX: 00007fc62f2706c0 RCX: 00007fc62e35e6ce
[  138.771732][ T2041] RDX: 0000000000000001 RSI: 00007fc62f270090 RDI: 0000000000000003
[  138.779704][ T2041] RBP: 00007fc62f270090 R08: 0000000000000000 R09: 0000000000000000
[  138.787675][ T2041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  138.795650][ T2041] R13: 00007fc62e626038 R14: 00007fc62e625fa0 R15: 00007fffca2e6478
[  138.803710][ T2041]  </TASK>
[  138.823961][   T28] audit: type=1400 audit(1784904550.593:215): avc:  denied  { setopt } for  pid=2046 comm="syz.0.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  138.938015][   T28] audit: type=1326 audit(1784904550.713:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2053 comm="syz.1.485" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f331839de99 code=0x7ffc0000
[  138.987446][   T28] audit: type=1326 audit(1784904550.733:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2053 comm="syz.1.485" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f331839de99 code=0x7ffc0000
[  139.019321][   T28] audit: type=1326 audit(1784904550.733:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2053 comm="syz.1.485" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f331839de99 code=0x7ffc0000
[  139.046416][   T28] audit: type=1326 audit(1784904550.733:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2053 comm="syz.1.485" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f331839de99 code=0x7ffc0000
[  139.072675][   T28] audit: type=1326 audit(1784904550.793:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2053 comm="syz.1.485" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7f331839de99 code=0x7ffc0000
[  139.098507][   T28] audit: type=1326 audit(1784904550.793:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2053 comm="syz.1.485" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f331839de99 code=0x7ffc0000
[  139.123893][   T28] audit: type=1326 audit(1784904550.793:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2053 comm="syz.1.485" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f331839de99 code=0x7ffc0000
[  139.593484][ T2072] loop4: detected capacity change from 0 to 512
[  139.689472][ T2072] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  139.824980][ T2072] EXT4-fs warning (device loop4): verify_group_input:151: Cannot add at group 8 (only 1 groups)
[  139.894998][ T2086] FAULT_INJECTION: forcing a failure.
[  139.894998][ T2086] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  139.908837][  T288] EXT4-fs (loop4): unmounting filesystem.
[  139.917821][ T2086] CPU: 0 PID: 2086 Comm: syz.3.494 Not tainted syzkaller #0
[  139.925146][ T2086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  139.935225][ T2086] Call Trace:
[  139.938527][ T2086]  <TASK>
[  139.941474][ T2086]  __dump_stack+0x21/0x24
[  139.946226][ T2086]  dump_stack_lvl+0x110/0x170
[  139.951002][ T2086]  ? __cfi_dump_stack_lvl+0x8/0x8
[  139.956073][ T2086]  dump_stack+0x15/0x24
[  139.960260][ T2086]  should_fail_ex+0x3bf/0x510
[  139.964973][ T2086]  should_fail+0xb/0x10
[  139.969155][ T2086]  should_fail_usercopy+0x1a/0x20
[  139.974222][ T2086]  _copy_from_user+0x1e/0xc0
[  139.978858][ T2086]  ___sys_sendmsg+0x1c3/0x360
[  139.983559][ T2086]  ? __sys_sendmsg+0x290/0x290
[  139.988345][ T2086]  ? kstrtouint+0x74/0xe0
[  139.992725][ T2086]  ? __fdget+0x19c/0x220
[  139.997018][ T2086]  __sys_sendmmsg+0x2cc/0x4e0
[  140.001739][ T2086]  ? __cfi___sys_sendmmsg+0x10/0x10
[  140.006975][ T2086]  ? __cfi_ksys_write+0x10/0x10
[  140.011872][ T2086]  __x64_sys_sendmmsg+0xa0/0xb0
[  140.016762][ T2086]  x64_sys_call+0x3f5/0x9a0
[  140.021319][ T2086]  do_syscall_64+0x4c/0xa0
[  140.025779][ T2086]  ? clear_bhb_loop+0x30/0x80
[  140.030482][ T2086]  ? clear_bhb_loop+0x30/0x80
[  140.035174][ T2086]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  140.041077][ T2086] RIP: 0033:0x7fc77c59de99
[  140.045522][ T2086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  140.065134][ T2086] RSP: 002b:00007fc77d52d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  140.073550][ T2086] RAX: ffffffffffffffda RBX: 00007fc77c825fa0 RCX: 00007fc77c59de99
[  140.081522][ T2086] RDX: 0000000000000002 RSI: 000020000000cbc0 RDI: 0000000000000003
[  140.089499][ T2086] RBP: 00007fc77d52d090 R08: 0000000000000000 R09: 0000000000000000
[  140.097467][ T2086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  140.105436][ T2086] R13: 00007fc77c826038 R14: 00007fc77c825fa0 R15: 00007ffd1be79338
[  140.113411][ T2086]  </TASK>
[  140.177736][  T434] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  140.368815][  T434] usb 3-1: config index 0 descriptor too short (expected 45, got 36)
[  140.377001][  T434] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  140.388117][  T434] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  140.401940][  T434] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  140.415161][  T434] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  140.417687][  T388] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  140.424551][  T434] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  140.441013][  T434] usb 3-1: config 0 descriptor??
[  140.607883][  T388] usb 5-1: Using ep0 maxpacket: 8
[  140.614146][  T388] usb 5-1: config 0 has an invalid interface number: 31 but max is 0
[  140.622365][  T388] usb 5-1: config 0 has no interface number 0
[  140.629942][  T388] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  140.639417][  T388] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.647486][  T388] usb 5-1: Product: syz
[  140.651735][  T388] usb 5-1: Manufacturer: syz
[  140.656391][  T388] usb 5-1: SerialNumber: syz
[  140.662259][  T388] usb 5-1: config 0 descriptor??
[  140.855007][  T434] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[  140.863637][  T434] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[  140.875391][  T434] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[  140.883129][  T434] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[  140.890660][  T434] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[  140.898239][  T434] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[  140.905936][  T434] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving
[  140.919044][  T434] plantronics 0003:047F:FFFF.0002: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  141.071041][  T388] usb 5-1: Found UVC 0.04 device syz (046d:08c3)
[  141.083008][  T388] uvcvideo 5-1:0.31: Entity type for entity Output 6 was not initialized!
[  141.095724][  T388] usb 5-1: Failed to create links for entity 5
[  141.102366][  T388] usb 5-1: Failed to register entities (-22).
[  141.118743][  T388] usb 5-1: USB disconnect, device number 11
[  141.175295][ T2123] FAULT_INJECTION: forcing a failure.
[  141.175295][ T2123] name failslab, interval 1, probability 0, space 0, times 0
[  141.188092][ T2123] CPU: 1 PID: 2123 Comm: syz.0.505 Not tainted syzkaller #0
[  141.195411][ T2123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  141.205456][ T2123] Call Trace:
[  141.208721][ T2123]  <TASK>
[  141.211650][ T2123]  __dump_stack+0x21/0x24
[  141.212550][    T6] usb 3-1: USB disconnect, device number 11
[  141.216006][ T2123]  dump_stack_lvl+0x110/0x170
[  141.226573][ T2123]  ? __cfi_dump_stack_lvl+0x8/0x8
[  141.231624][ T2123]  dump_stack+0x15/0x24
[  141.235800][ T2123]  should_fail_ex+0x3bf/0x510
[  141.240471][ T2123]  ? __khugepaged_enter+0x2f/0x2b0
[  141.245572][ T2123]  __should_failslab+0xac/0xf0
[  141.250324][ T2123]  should_failslab+0x9/0x20
[  141.254810][ T2123]  kmem_cache_alloc+0x3b/0x320
[  141.259562][ T2123]  __khugepaged_enter+0x2f/0x2b0
[  141.264483][ T2123]  hugepage_madvise+0x1a7/0x1d0
[  141.269320][ T2123]  do_madvise+0xcef/0x3290
[  141.273727][ T2123]  ? _parse_integer_limit+0x18e/0x1d0
[  141.279086][ T2123]  ? __cfi_do_madvise+0x10/0x10
[  141.283929][ T2123]  ? kstrtouint+0x74/0xe0
[  141.288244][ T2123]  ? kstrtouint_from_user+0x113/0x170
[  141.293602][ T2123]  ? __cfi_kstrtouint_from_user+0x10/0x10
[  141.299310][ T2123]  ? __kasan_check_write+0x14/0x20
[  141.304406][ T2123]  ? proc_fail_nth_write+0x180/0x200
[  141.309676][ T2123]  ? __cfi_proc_fail_nth_write+0x10/0x10
[  141.315303][ T2123]  ? security_file_permission+0x8a/0xb0
[  141.320877][ T2123]  ? vfs_write+0xa51/0xd00
[  141.325289][ T2123]  ? __cfi_vfs_write+0x10/0x10
[  141.330059][ T2123]  ? __kasan_check_write+0x14/0x20
[  141.335198][ T2123]  ? mutex_unlock+0x8f/0x230
[  141.339814][ T2123]  ? __cfi_mutex_unlock+0x10/0x10
[  141.344845][ T2123]  ? __kasan_check_write+0x14/0x20
[  141.349950][ T2123]  ? fput+0x154/0x1a0
[  141.353927][ T2123]  ? ksys_write+0x1fa/0x260
[  141.358418][ T2123]  ? __cfi_ksys_write+0x10/0x10
[  141.363257][ T2123]  __x64_sys_madvise+0xa9/0xc0
[  141.368008][ T2123]  x64_sys_call+0x99e/0x9a0
[  141.372537][ T2123]  do_syscall_64+0x4c/0xa0
[  141.376970][ T2123]  ? clear_bhb_loop+0x30/0x80
[  141.381634][ T2123]  ? clear_bhb_loop+0x30/0x80
[  141.386318][ T2123]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  141.392215][ T2123] RIP: 0033:0x7fc62e39de99
[  141.396631][ T2123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  141.416232][ T2123] RSP: 002b:00007fc62f270028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c
[  141.424650][ T2123] RAX: ffffffffffffffda RBX: 00007fc62e625fa0 RCX: 00007fc62e39de99
[  141.432643][ T2123] RDX: 000000000000000e RSI: 0000000000800000 RDI: 0000200000000000
[  141.440633][ T2123] RBP: 00007fc62f270090 R08: 0000000000000000 R09: 0000000000000000
[  141.448616][ T2123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  141.456582][ T2123] R13: 00007fc62e626038 R14: 00007fc62e625fa0 R15: 00007fffca2e6478
[  141.464911][ T2123]  </TASK>
[  142.067998][   T28] kauditd_printk_skb: 52 callbacks suppressed
[  142.068016][   T28] audit: type=1400 audit(1784904553.843:275): avc:  denied  { append } for  pid=2139 comm="syz.2.509" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  142.191483][ T2149] FAULT_INJECTION: forcing a failure.
[  142.191483][ T2149] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  142.210617][ T2149] CPU: 1 PID: 2149 Comm: syz.3.512 Not tainted syzkaller #0
[  142.217954][ T2149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  142.228040][ T2149] Call Trace:
[  142.231348][ T2149]  <TASK>
[  142.234305][ T2149]  __dump_stack+0x21/0x24
[  142.238661][ T2149]  dump_stack_lvl+0x110/0x170
[  142.243363][ T2149]  ? __cfi_dump_stack_lvl+0x8/0x8
[  142.248405][ T2149]  ? __cfi_avc_has_extended_perms+0x10/0x10
[  142.252063][ T2152] input: syz0 as /devices/virtual/input/input6
[  142.254314][ T2149]  dump_stack+0x15/0x24
[  142.264638][ T2149]  should_fail_ex+0x3bf/0x510
[  142.269342][ T2149]  should_fail+0xb/0x10
[  142.273505][ T2149]  should_fail_usercopy+0x1a/0x20
[  142.278539][ T2149]  copyin+0x20/0xa0
[  142.282361][ T2149]  _copy_from_iter+0x3cd/0xfe0
[  142.287145][ T2149]  ? __cfi__copy_from_iter+0x10/0x10
[  142.292436][ T2149]  ? selinux_capable+0x2b6/0x3b0
[  142.297375][ T2149]  ? __cfi_selinux_capable+0x10/0x10
[  142.302660][ T2149]  write_pool_user+0x105/0x2f0
[  142.307444][ T2149]  ? get_random_bytes_user+0x3b0/0x3b0
[  142.312905][ T2149]  ? cap_capable+0x1a6/0x230
[  142.317508][ T2149]  ? security_capable+0x99/0xc0
[  142.322356][ T2149]  ? import_single_range+0xce/0x280
[  142.327550][ T2149]  random_ioctl+0x491/0x5b0
[  142.332060][ T2149]  ? __cfi_random_ioctl+0x10/0x10
[  142.337084][ T2149]  ? mutex_unlock+0x8f/0x230
[  142.341678][ T2149]  ? __cfi_mutex_unlock+0x10/0x10
[  142.346704][ T2149]  ? __fget_files+0x2d1/0x330
[  142.351388][ T2149]  ? security_file_ioctl+0x95/0xc0
[  142.356500][ T2149]  ? __cfi_random_ioctl+0x10/0x10
[  142.361521][ T2149]  __se_sys_ioctl+0x12f/0x1b0
[  142.366197][ T2149]  __x64_sys_ioctl+0x7b/0x90
[  142.370786][ T2149]  x64_sys_call+0x58b/0x9a0
[  142.375286][ T2149]  do_syscall_64+0x4c/0xa0
[  142.379709][ T2149]  ? clear_bhb_loop+0x30/0x80
[  142.384471][ T2149]  ? clear_bhb_loop+0x30/0x80
[  142.389142][ T2149]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  142.395039][ T2149] RIP: 0033:0x7fc77c59de99
[  142.399457][ T2149] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  142.419145][ T2149] RSP: 002b:00007fc77d52d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  142.427565][ T2149] RAX: ffffffffffffffda RBX: 00007fc77c825fa0 RCX: 00007fc77c59de99
[  142.435536][ T2149] RDX: 00002000000000c0 RSI: 0000000040085203 RDI: 0000000000000003
[  142.443503][ T2149] RBP: 00007fc77d52d090 R08: 0000000000000000 R09: 0000000000000000
[  142.451477][ T2149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  142.459442][ T2149] R13: 00007fc77c826038 R14: 00007fc77c825fa0 R15: 00007ffd1be79338
[  142.467432][ T2149]  </TASK>
[  142.669106][ T2166] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1547 sclass=netlink_route_socket pid=2166 comm=syz.3.517
[  143.194574][ T2176] �?0�: renamed from bond_slave_1
[  143.217750][  T434] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  143.747690][  T434] usb 5-1: Using ep0 maxpacket: 8
[  143.753863][  T434] usb 5-1: config 0 has an invalid interface number: 31 but max is 0
[  143.787705][  T434] usb 5-1: config 0 has no interface number 0
[  143.809259][  T434] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  143.847676][  T434] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.886089][  T434] usb 5-1: Product: syz
[  143.906339][  T434] usb 5-1: Manufacturer: syz
[  143.933793][  T434] usb 5-1: SerialNumber: syz
[  143.941939][   T28] audit: type=1400 audit(1784904555.713:276): avc:  denied  { setopt } for  pid=2178 comm="syz.2.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  143.942015][ T2179] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=5238 sclass=netlink_xfrm_socket pid=2179 comm=syz.2.520
[  143.968266][ T2176] loop3: detected capacity change from 0 to 16
[  143.983729][  T434] usb 5-1: config 0 descriptor??
[  143.994441][ T2176] erofs: (device loop3): mounted with root inode @ nid 36.
[  144.043091][   T28] audit: type=1400 audit(1784904555.813:277): avc:  denied  { append } for  pid=2175 comm="syz.3.519" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  144.094952][   T28] audit: type=1400 audit(1784904555.813:278): avc:  denied  { map } for  pid=2175 comm="syz.3.519" path="/dev/loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  144.140387][   T28] audit: type=1400 audit(1784904555.863:279): avc:  denied  { getopt } for  pid=2178 comm="syz.2.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  144.190046][ T2176] erofs: (device loop3): erofs_readdir: invalid de[0].nameoff 14438 @ nid 36
[  144.397609][  T434] usb 5-1: Found UVC 0.04 device syz (046d:08c3)
[  144.415162][  T434] uvcvideo 5-1:0.31: Entity type for entity Output 6 was not initialized!
[  144.424971][  T434] usb 5-1: Failed to create links for entity 5
[  144.432335][ T2194] loop0: detected capacity change from 0 to 128
[  144.438845][  T434] usb 5-1: Failed to register entities (-22).
[  144.445684][ T2194] EXT4-fs: Ignoring removed orlov option
[  144.458777][  T434] usb 5-1: USB disconnect, device number 12
[  144.473108][ T2194] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  144.481894][ T2194] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  144.547914][ T2200] input: syz0 as /devices/virtual/input/input7
[  144.548644][  T290] EXT4-fs (loop0): unmounting filesystem.
[  144.669446][ T2213] loop2: detected capacity change from 0 to 2048
[  144.679986][ T2213] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  144.690375][ T2213] EXT4-fs error (device loop2): ext4_find_extent:936: inode #2: comm syz.2.529: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  144.709074][ T2213] EXT4-fs (loop2): Remounting filesystem read-only
[  144.719493][ T2217] input: syz0 as /devices/virtual/input/input8
[  144.773257][   T28] audit: type=1400 audit(1784904556.523:280): avc:  denied  { nlmsg_write } for  pid=2220 comm="syz.3.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[  144.927691][  T388] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  145.117677][  T388] usb 2-1: Using ep0 maxpacket: 8
[  145.124705][  T388] usb 2-1: config 1 interface 0 has no altsetting 0
[  145.168162][   T28] audit: type=1326 audit(1784904556.943:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2241 comm="syz.3.541" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc77c59de99 code=0x7ffc0000
[  145.198736][  T388] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice= 0.40
[  145.208328][ T2243] loop3: detected capacity change from 0 to 256
[  145.219929][  T388] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.238092][   T28] audit: type=1326 audit(1784904556.963:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2241 comm="syz.3.541" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc77c59de99 code=0x7ffc0000
[  145.263585][  T388] usb 2-1: Product: ﯸ㪎ᕦ᳧坫酘ꘄ좻Ὣꜻ㉨⛝ร꘭꥗咋쑵맯쀱Ⳙ⭵ꚢ᳣䡡ˣ殝6翉羌꘸뽬㬦쬋빖2뉲࣐㐧鞅吼鵳랞㏊萚Ċ媚䉦鿥㴉熉笓篶᏾ﳧ㰂쪜ｊ設짼⓵왌暁㼞峌叅鯔ᔿ霅릋蘤燰踕쬸獭ꏆ턿矆㊟㹩糧艛◣뭱騭ᘖ톁礦ಅ俢솓ꫨ鎧㉅컯໓জ䶻㰫蔓㹩옟얽
[  145.302547][   T28] audit: type=1326 audit(1784904556.963:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2241 comm="syz.3.541" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc77c59de99 code=0x7ffc0000
[  145.302610][ T2243] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xa69c2347, utbl_chksum : 0xe619d30d)
[  145.343818][  T388] usb 2-1: Manufacturer: ꒑
[  145.348995][  T388] usb 2-1: SerialNumber: ࠇ
[  145.365307][   T28] audit: type=1326 audit(1784904556.963:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2241 comm="syz.3.541" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc77c59dc02 code=0x7ffc0000
[  145.450816][  T289] EXT4-fs (loop2): unmounting filesystem.
[  145.890324][ T2212] syz.1.531 uses obsolete (PF_INET,SOCK_PACKET)
[  145.917775][  T408] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  146.107692][  T408] usb 5-1: Using ep0 maxpacket: 8
[  146.114714][  T408] usb 5-1: config 0 has an invalid interface number: 31 but max is 0
[  146.156061][  T408] usb 5-1: config 0 has no interface number 0
[  146.192299][  T408] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  146.241393][  T408] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.284855][  T408] usb 5-1: Product: syz
[  146.308373][  T408] usb 5-1: Manufacturer: syz
[  146.334481][  T408] usb 5-1: SerialNumber: syz
[  146.722699][  T408] usb 5-1: config 0 descriptor??
[  146.899400][  T388] usbhid 2-1:1.0: can't add hid device: -71
[  146.905388][  T388] usbhid: probe of 2-1:1.0 failed with error -71
[  146.926745][ T2271] loop2: detected capacity change from 0 to 256
[  146.930480][  T388] usb 2-1: USB disconnect, device number 11
[  146.959290][ T2271] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x8cb08246, utbl_chksum : 0xe619d30d)
[  147.034905][ T2271] fuse: Bad value for 'fd'
[  147.062750][ T2271] netlink: 44 bytes leftover after parsing attributes in process `syz.2.550'.
[  147.076448][ T2271] netlink: 59 bytes leftover after parsing attributes in process `syz.2.550'.
[  147.085387][ T2271] netlink: 59 bytes leftover after parsing attributes in process `syz.2.550'.
[  147.137521][  T408] usb 5-1: Found UVC 0.04 device syz (046d:08c3)
[  147.145895][  T408] uvcvideo 5-1:0.31: Entity type for entity Output 6 was not initialized!
[  147.164743][  T408] usb 5-1: Failed to create links for entity 5
[  147.179812][  T408] usb 5-1: Failed to register entities (-22).
[  147.212189][  T408] usb 5-1: USB disconnect, device number 13
[  147.414103][   T28] kauditd_printk_skb: 55 callbacks suppressed
[  147.414118][   T28] audit: type=1400 audit(1784904559.183:340): avc:  denied  { mounton } for  pid=2286 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  147.442828][ T2269] loop3: detected capacity change from 0 to 131072
[  147.458513][ T2269] F2FS-fs (loop3): invalid crc value
[  147.477768][ T2269] F2FS-fs (loop3): Found nat_bits in checkpoint
[  147.528114][ T2286] bridge0: port 1(bridge_slave_0) entered blocking state
[  147.535252][ T2269] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  147.545005][ T2286] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.559132][ T2286] device bridge_slave_0 entered promiscuous mode
[  147.566510][ T2286] bridge0: port 2(bridge_slave_1) entered blocking state
[  147.573638][ T2286] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.581353][ T2286] device bridge_slave_1 entered promiscuous mode
[  147.629248][   T28] audit: type=1400 audit(1784904559.403:341): avc:  denied  { sys_module } for  pid=2268 comm="syz.3.549" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  147.650744][ T2269] Invalid ELF header magic: != ELF
[  147.669016][ T2295] input: syz0 as /devices/virtual/input/input11
[  147.698017][   T28] audit: type=1400 audit(1784904559.433:342): avc:  denied  { module_load } for  pid=2268 comm="syz.3.549" path="/112/file1/bus" dev="loop3" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=system permissive=1
[  147.767061][ T2286] bridge0: port 2(bridge_slave_1) entered blocking state
[  147.774158][ T2286] bridge0: port 2(bridge_slave_1) entered forwarding state
[  147.781508][ T2286] bridge0: port 1(bridge_slave_0) entered blocking state
[  147.788570][ T2286] bridge0: port 1(bridge_slave_0) entered forwarding state
[  147.841725][  T435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  147.855327][  T435] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.878176][  T435] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.899994][  T435] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  147.916529][  T435] bridge0: port 1(bridge_slave_0) entered blocking state
[  147.923640][  T435] bridge0: port 1(bridge_slave_0) entered forwarding state
[  147.989213][  T435] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  148.011289][  T435] bridge0: port 2(bridge_slave_1) entered blocking state
[  148.018393][  T435] bridge0: port 2(bridge_slave_1) entered forwarding state
[  148.043231][  T435] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  148.058300][  T333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  148.072274][  T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  148.086790][ T2286] device veth0_vlan entered promiscuous mode
[  148.094540][  T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  148.112666][  T333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  148.121177][  T333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  148.136796][ T2286] device veth1_macvtap entered promiscuous mode
[  148.499226][  T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  148.564963][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  148.667053][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  148.829007][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  149.178577][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  149.304532][ T2321] loop4: detected capacity change from 0 to 4096
[  149.321720][ T2321] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  149.335658][ T2321] EXT4-fs (loop4): Test dummy encryption mode enabled
[  149.361393][ T2321] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=284ec118, mo2=0003]
[  149.382276][ T2321] System zones: 0-5
[  149.396156][ T2321] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  149.524064][   T28] audit: type=1400 audit(1784904561.293:343): avc:  denied  { mounton } for  pid=2286 comm="syz-executor" path="/root/syzkaller.DqG0rf/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  149.626584][ T2334] input: syz0 as /devices/virtual/input/input13
[  149.746901][ T2343] FAULT_INJECTION: forcing a failure.
[  149.746901][ T2343] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  149.787436][ T2343] CPU: 0 PID: 2343 Comm: syz.1.572 Not tainted syzkaller #0
[  149.794784][ T2343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  149.804872][ T2343] Call Trace:
[  149.808175][ T2343]  <TASK>
[  149.811116][ T2343]  __dump_stack+0x21/0x24
[  149.815466][ T2343]  dump_stack_lvl+0x110/0x170
[  149.820168][ T2343]  ? __cfi_dump_stack_lvl+0x8/0x8
[  149.825206][ T2343]  ? _parse_integer+0x2a/0x40
[  149.829894][ T2343]  dump_stack+0x15/0x24
[  149.834071][ T2343]  should_fail_ex+0x3bf/0x510
[  149.838763][ T2343]  should_fail+0xb/0x10
[  149.842931][ T2343]  should_fail_usercopy+0x1a/0x20
[  149.847967][ T2343]  _copy_from_user+0x1e/0xc0
[  149.852576][ T2343]  ___sys_sendmsg+0x1c3/0x360
[  149.857270][ T2343]  ? __sys_sendmsg+0x290/0x290
[  149.862048][ T2343]  ? __kasan_check_write+0x14/0x20
[  149.867174][ T2343]  ? proc_fail_nth_write+0x180/0x200
[  149.872477][ T2343]  ? vfs_write+0xa51/0xd00
[  149.876925][ T2343]  ? __fdget+0x19c/0x220
[  149.881194][ T2343]  __x64_sys_sendmsg+0x20d/0x2e0
[  149.886150][ T2343]  ? __cfi___x64_sys_sendmsg+0x10/0x10
[  149.891636][ T2343]  ? fpregs_assert_state_consistent+0xb1/0xe0
[  149.898171][ T2343]  x64_sys_call+0x171/0x9a0
[  149.902720][ T2343]  do_syscall_64+0x4c/0xa0
[  149.907169][ T2343]  ? clear_bhb_loop+0x30/0x80
[  149.911895][ T2343]  ? clear_bhb_loop+0x30/0x80
[  149.916592][ T2343]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  149.922520][ T2343] RIP: 0033:0x7f331839de99
[  149.926953][ T2343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  149.946673][ T2343] RSP: 002b:00007f3319203028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  149.953847][ T2347] netlink: 16 bytes leftover after parsing attributes in process `syz.0.575'.
[  149.955108][ T2343] RAX: ffffffffffffffda RBX: 00007f3318625fa0 RCX: 00007f331839de99
[  149.955126][ T2343] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000003
[  149.964536][ T2347] FAULT_INJECTION: forcing a failure.
[  149.964536][ T2347] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  149.971940][ T2343] RBP: 00007f3319203090 R08: 0000000000000000 R09: 0000000000000000
[  149.971956][ T2343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  149.971967][ T2343] R13: 00007f3318626038 R14: 00007f3318625fa0 R15: 00007fff5fcd2898
[  149.971985][ T2343]  </TASK>
[  150.019904][ T2347] CPU: 1 PID: 2347 Comm: syz.0.575 Not tainted syzkaller #0
[  150.027650][ T2347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  150.037841][ T2347] Call Trace:
[  150.041136][ T2347]  <TASK>
[  150.044077][ T2347]  __dump_stack+0x21/0x24
[  150.048427][ T2347]  dump_stack_lvl+0x110/0x170
[  150.053120][ T2347]  ? __cfi_dump_stack_lvl+0x8/0x8
[  150.058258][ T2347]  ? _parse_integer+0x2a/0x40
[  150.062952][ T2347]  dump_stack+0x15/0x24
[  150.067115][ T2347]  should_fail_ex+0x3bf/0x510
[  150.071795][ T2347]  should_fail+0xb/0x10
[  150.075962][ T2347]  should_fail_usercopy+0x1a/0x20
[  150.081007][ T2347]  _copy_from_user+0x1e/0xc0
[  150.085619][ T2347]  ___sys_sendmsg+0x1c3/0x360
[  150.090319][ T2347]  ? __sys_sendmsg+0x290/0x290
[  150.095085][ T2347]  ? __kasan_check_write+0x14/0x20
[  150.100194][ T2347]  ? proc_fail_nth_write+0x180/0x200
[  150.105479][ T2347]  ? vfs_write+0xa51/0xd00
[  150.109899][ T2347]  ? __fdget+0x19c/0x220
[  150.114159][ T2347]  __x64_sys_sendmsg+0x20d/0x2e0
[  150.119103][ T2347]  ? __cfi___x64_sys_sendmsg+0x10/0x10
[  150.124580][ T2347]  ? fpregs_assert_state_consistent+0xb1/0xe0
[  150.130670][ T2347]  x64_sys_call+0x171/0x9a0
[  150.135196][ T2347]  do_syscall_64+0x4c/0xa0
[  150.139616][ T2347]  ? clear_bhb_loop+0x30/0x80
[  150.144291][ T2347]  ? clear_bhb_loop+0x30/0x80
[  150.148965][ T2347]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  150.154862][ T2347] RIP: 0033:0x7fc62e39de99
[  150.159306][ T2347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  150.178916][ T2347] RSP: 002b:00007fc62f270028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  150.187747][ T2347] RAX: ffffffffffffffda RBX: 00007fc62e625fa0 RCX: 00007fc62e39de99
[  150.195730][ T2347] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008
[  150.203700][ T2347] RBP: 00007fc62f270090 R08: 0000000000000000 R09: 0000000000000000
[  150.211675][ T2347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  150.219646][ T2347] R13: 00007fc62e626038 R14: 00007fc62e625fa0 R15: 00007fffca2e6478
[  150.227621][ T2347]  </TASK>
[  150.235838][  T288] EXT4-fs (loop4): unmounting filesystem.
[  150.257704][ T2349] input: syz0 as /devices/virtual/input/input14
[  150.319760][ T2357] loop3: detected capacity change from 0 to 256
[  150.341560][   T28] audit: type=1400 audit(1784904562.113:344): avc:  denied  { mount } for  pid=2356 comm="syz.3.579" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[  150.394377][   T28] audit: type=1400 audit(1784904562.153:345): avc:  denied  { unmount } for  pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[  150.470088][ T2373] loop0: detected capacity change from 0 to 512
[  150.489800][ T2373] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  150.518206][  T290] EXT4-fs (loop0): unmounting filesystem.
[  150.636357][ T2384] loop0: detected capacity change from 0 to 4096
[  150.669824][ T2384] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  150.682119][ T2384] EXT4-fs (loop0): Test dummy encryption mode enabled
[  150.689957][ T2384] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=284ec118, mo2=0003]
[  150.705103][ T2384] System zones: 0-5
[  150.720767][ T2394] input: syz0 as /devices/virtual/input/input15
[  150.727392][ T2384] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  150.873492][  T290] EXT4-fs (loop0): unmounting filesystem.
[  150.977020][   T28] audit: type=1400 audit(1784904562.743:346): avc:  denied  { checkpoint_restore } for  pid=2402 comm="syz.0.592" capability=40  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  151.267688][  T434] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  151.358272][ T2414] loop4: detected capacity change from 0 to 40427
[  151.380538][ T2414] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64)
[  151.399758][ T2414] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  151.408662][ T2414] F2FS-fs (loop4): Image doesn't support compression
[  151.415654][ T2414] F2FS-fs (loop4): Image doesn't support compression
[  151.425070][ T2414] F2FS-fs (loop4): invalid crc value
[  151.433476][ T2414] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  151.458600][  T434] usb 2-1: Using ep0 maxpacket: 8
[  151.465184][  T434] usb 2-1: config 1 interface 0 has no altsetting 0
[  151.483625][  T434] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice= 0.40
[  151.497923][ T2414] F2FS-fs (loop4): Start checkpoint disabled!
[  151.505598][  T434] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  151.515644][ T2414] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0
[  151.524276][  T434] usb 2-1: Product: ﯸ㪎ᕦ᳧坫酘ꘄ좻Ὣꜻ㉨⛝ร꘭꥗咋쑵맯쀱Ⳙ⭵ꚢ᳣䡡ˣ殝6翉羌꘸뽬㬦쬋빖2뉲࣐㐧鞅吼鵳랞㏊萚Ċ媚䉦鿥㴉熉笓篶᏾ﳧ㰂쪜ｊ設짼⓵왌暁㼞峌叅鯔ᔿ霅릋蘤燰踕쬸獭ꏆ턿矆㊟㹩糧艛◣뭱騭ᘖ톁礦ಅ俢솓ꫨ鎧㉅컯໓জ䶻㰫蔓㹩옟얽
[  151.557469][ T2414] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  151.564752][ T2414] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  151.587396][  T434] usb 2-1: Manufacturer: ꒑
[  151.596757][  T434] usb 2-1: SerialNumber: ࠇ
[  151.650130][ T2420] FAULT_INJECTION: forcing a failure.
[  151.650130][ T2420] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  151.666176][ T2414] syz.4.597: attempt to access beyond end of device
[  151.666176][ T2414] loop4: rw=2049, sector=53248, nr_sectors = 2232 limit=40427
[  151.680376][ T2420] CPU: 1 PID: 2420 Comm: syz.4.597 Not tainted syzkaller #0
[  151.687693][ T2420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  151.697756][ T2420] Call Trace:
[  151.701052][ T2420]  <TASK>
[  151.704004][ T2420]  __dump_stack+0x21/0x24
[  151.708350][ T2420]  dump_stack_lvl+0x110/0x170
[  151.713043][ T2420]  ? __cfi_dump_stack_lvl+0x8/0x8
[  151.718098][ T2420]  dump_stack+0x15/0x24
[  151.722280][ T2420]  should_fail_ex+0x3bf/0x510
[  151.726971][ T2420]  should_fail+0xb/0x10
[  151.731131][ T2420]  should_fail_usercopy+0x1a/0x20
[  151.736185][ T2420]  _copy_to_user+0x1e/0x90
[  151.740623][ T2420]  simple_read_from_buffer+0xe9/0x160
[  151.742799][ T2414] syz.4.597: attempt to access beyond end of device
[  151.742799][ T2414] loop4: rw=2049, sector=55480, nr_sectors = 1864 limit=40427
[  151.746016][ T2420]  proc_fail_nth_read+0x1a6/0x220
[  151.764905][ T2420]  ? __cfi_proc_fail_nth_read+0x10/0x10
[  151.770472][ T2420]  ? security_file_permission+0x94/0xb0
[  151.776039][ T2420]  ? __cfi_proc_fail_nth_read+0x10/0x10
[  151.781595][ T2420]  vfs_read+0x286/0x930
[  151.785762][ T2420]  ? __cfi_vfs_read+0x10/0x10
[  151.790981][ T2420]  ? __kasan_check_write+0x14/0x20
[  151.796145][ T2420]  ? mutex_lock+0x93/0x1b0
[  151.800595][ T2420]  ? __cfi_mutex_lock+0x10/0x10
[  151.805477][ T2420]  ? __fdget_pos+0x2cd/0x380
[  151.810083][ T2420]  ? ksys_read+0x70/0x260
[  151.814434][ T2420]  ksys_read+0x14a/0x260
[  151.818694][ T2420]  ? __cfi_ksys_read+0x10/0x10
[  151.823471][ T2420]  ? fpregs_restore_userregs+0x128/0x260
[  151.829142][ T2420]  __x64_sys_read+0x7b/0x90
[  151.833656][ T2420]  x64_sys_call+0x2f/0x9a0
[  151.838085][ T2420]  do_syscall_64+0x4c/0xa0
[  151.842514][ T2420]  ? clear_bhb_loop+0x30/0x80
[  151.847199][ T2420]  ? clear_bhb_loop+0x30/0x80
[  151.851882][ T2420]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  151.857800][ T2420] RIP: 0033:0x7fa684b5e6ce
[  151.862244][ T2420] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  151.881881][ T2420] RSP: 002b:00007fa685a67fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  151.890330][ T2420] RAX: ffffffffffffffda RBX: 00007fa685a686c0 RCX: 00007fa684b5e6ce
[  151.898237][ T2414] syz.4.597: attempt to access beyond end of device
[  151.898237][ T2414] loop4: rw=2049, sector=126976, nr_sectors = 4096 limit=40427
[  151.898335][ T2420] RDX: 000000000000000f RSI: 00007fa685a680a0 RDI: 0000000000000007
[  151.921088][ T2420] RBP: 00007fa685a68090 R08: 0000000000000000 R09: 0000000000000000
[  151.929094][ T2420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  151.937088][ T2420] R13: 00007fa684e26128 R14: 00007fa684e26090 R15: 00007ffebe53fb78
[  151.940945][ T2414] syz.4.597: attempt to access beyond end of device
[  151.940945][ T2414] loop4: rw=2049, sector=49152, nr_sectors = 8 limit=40427
[  151.945093][ T2420]  </TASK>
[  151.979017][ T2414] syz.4.597: attempt to access beyond end of device
[  151.979017][ T2414] loop4: rw=2049, sector=49192, nr_sectors = 2744 limit=40427
[  152.001393][ T2422] loop0: detected capacity change from 0 to 512
[  152.011326][   T43] kworker/u4:2: attempt to access beyond end of device
[  152.011326][   T43] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  152.071613][ T2422] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  152.074601][ T2426] loop5: detected capacity change from 0 to 256
[  152.091526][ T2422] ext4 filesystem being mounted at /115/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  152.114428][ T2426] exfat: Bad value for 'uid'
[  152.178921][  T290] EXT4-fs (loop0): unmounting filesystem.
[  152.212092][  T434] usbhid 2-1:1.0: can't add hid device: -71
[  152.219937][  T434] usbhid: probe of 2-1:1.0 failed with error -71
[  152.240891][  T434] usb 2-1: USB disconnect, device number 12
[  152.249441][ T2427] loop5: detected capacity change from 0 to 512
[  152.256083][ T2427] EXT4-fs: Ignoring removed nobh option
[  152.262096][ T2427] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  152.272116][ T2427] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (35405!=33349)
[  152.296264][ T2427] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002]
[  152.304377][ T2427] System zones: 1-12
[  152.308939][ T2427] EXT4-fs (loop5): orphan cleanup on readonly fs
[  152.315710][ T2427] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:511: comm syz.5.601: Block bitmap for bg 0 marked uninitialized
[  152.331145][ T2427] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:511: comm syz.5.601: Block bitmap for bg 0 marked uninitialized
[  152.345071][ T2427] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:511: comm syz.5.601: Block bitmap for bg 0 marked uninitialized
[  152.358467][ T2427] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  152.371701][ T2427] EXT4-fs (loop5): 1 truncate cleaned up
[  152.377380][ T2427] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  152.393640][ T2407] loop3: detected capacity change from 0 to 131072
[  152.405049][ T2429] loop0: detected capacity change from 0 to 4096
[  152.405234][ T2432] input: syz0 as /devices/virtual/input/input17
[  152.426658][ T2429] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  152.435548][ T2429] EXT4-fs (loop0): Test dummy encryption mode enabled
[  152.449614][ T1389] I/O error, dev loop3, sector 130944 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  152.450074][ T2435] input: syz0 as /devices/virtual/input/input18
[  152.476686][ T2429] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=284ec118, mo2=0003]
[  152.504569][ T2429] System zones: 0-5
[  152.526776][ T2429] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  152.681244][  T290] EXT4-fs (loop0): unmounting filesystem.
[  152.759702][ T2439] loop0: detected capacity change from 0 to 256
[  152.776043][ T2439] exfat: Bad value for 'uid'
[  152.872759][ T2445] EXT4-fs: Ignoring removed nobh option
[  152.879713][ T2445] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  152.889619][ T2445] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (35405!=33349)
[  152.914988][ T2286] EXT4-fs (loop5): unmounting filesystem.
[  152.921769][ T2445] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002]
[  152.930307][ T2445] System zones: 1-12
[  152.935292][ T2445] EXT4-fs (loop0): orphan cleanup on readonly fs
[  152.942193][ T2445] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:511: comm syz.0.605: Block bitmap for bg 0 marked uninitialized
[  152.955865][ T2445] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:511: comm syz.0.605: Block bitmap for bg 0 marked uninitialized
[  152.969195][ T2445] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:511: comm syz.0.605: Block bitmap for bg 0 marked uninitialized
[  152.985361][ T2445] EXT4-fs (loop0): 1 truncate cleaned up
[  152.991125][ T2445] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  153.000472][ T2445] FAULT_INJECTION: forcing a failure.
[  153.000472][ T2445] name failslab, interval 1, probability 0, space 0, times 0
[  153.013149][ T2445] CPU: 1 PID: 2445 Comm: syz.0.605 Not tainted syzkaller #0
[  153.020467][ T2445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  153.030544][ T2445] Call Trace:
[  153.033844][ T2445]  <TASK>
[  153.036798][ T2445]  __dump_stack+0x21/0x24
[  153.041152][ T2445]  dump_stack_lvl+0x110/0x170
[  153.045846][ T2445]  ? __cfi_dump_stack_lvl+0x8/0x8
[  153.050902][ T2445]  ? __cfi_avc_has_perm_noaudit+0x10/0x10
[  153.050931][ T2445]  dump_stack+0x15/0x24
[  153.050953][ T2445]  should_fail_ex+0x3bf/0x510
[  153.050971][ T2445]  __should_failslab+0xac/0xf0
[  153.050995][ T2445]  should_failslab+0x9/0x20
[  153.051012][ T2445]  __kmem_cache_alloc_node+0x3d/0x2d0
[  153.051034][ T2445]  ? kvmalloc_node+0x28a/0x460
[  153.051054][ T2445]  ? kvmalloc_node+0x28a/0x460
[  153.051069][ T2445]  __kmalloc_node+0xa2/0x1e0
[  153.051085][ T2445]  kvmalloc_node+0x28a/0x460
[  153.051103][ T2445]  ? __cfi_kvmalloc_node+0x10/0x10
[  153.051120][ T2445]  ? security_capable+0x99/0xc0
[  153.051141][ T2445]  __se_sys_setgroups+0xef/0x400
[  153.051161][ T2445]  ? debug_smp_processor_id+0x17/0x20
[  153.051181][ T2445]  __x64_sys_setgroups+0x5b/0x70
[  153.051200][ T2445]  x64_sys_call+0x3ee/0x9a0
[  153.051220][ T2445]  do_syscall_64+0x4c/0xa0
[  153.051240][ T2445]  ? clear_bhb_loop+0x30/0x80
[  153.051256][ T2445]  ? clear_bhb_loop+0x30/0x80
[  153.051273][ T2445]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  153.051298][ T2445] RIP: 0033:0x7fc62e39de99
[  153.051315][ T2445] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  153.051330][ T2445] RSP: 002b:00007fc62f24f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000074
[  153.051353][ T2445] RAX: ffffffffffffffda RBX: 00007fc62e626090 RCX: 00007fc62e39de99
[  153.051367][ T2445] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 40000000000002e6
[  153.051380][ T2445] RBP: 00007fc62f24f090 R08: 0000000000000000 R09: 0000000000000000
[  153.051392][ T2445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  153.051403][ T2445] R13: 00007fc62e626128 R14: 00007fc62e626090 R15: 00007fffca2e6478
[  153.051419][ T2445]  </TASK>
[  153.074269][   T10] Bluetooth: hci0: Frame reassembly failed (-84)
[  153.153073][   T28] audit: type=1400 audit(1784904564.923:347): avc:  denied  { connect } for  pid=2452 comm="syz.5.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  153.569589][ T2464] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66dc59, utbl_chksum : 0xe619d30d)
[  153.625876][  T290] EXT4-fs (loop0): unmounting filesystem.
[  153.869520][   T28] audit: type=1400 audit(1784904564.923:348): avc:  denied  { write } for  pid=2452 comm="syz.5.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  154.074826][ T2466] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  154.084754][ T2466] ext4 filesystem being mounted at /135/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  154.120035][  T287] EXT4-fs (loop1): unmounting filesystem.
[  154.241442][ T1389] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  154.258793][ T2471] netlink: 8 bytes leftover after parsing attributes in process `syz.0.611'.
[  154.293906][ T2471] netlink: 8 bytes leftover after parsing attributes in process `syz.0.611'.
[  154.499688][   T28] audit: type=1400 audit(1784904566.273:349): avc:  denied  { mount } for  pid=2493 comm="syz.1.621" name="/" dev="ramfs" ino=37190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  154.557721][  T434] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  154.737723][  T434] usb 5-1: Using ep0 maxpacket: 32
[  154.743974][  T434] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  154.754152][  T434] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  154.763171][  T408] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  154.772211][  T434] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  154.781317][  T434] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.789348][  T434] usb 5-1: Product: syz
[  154.793524][  T434] usb 5-1: Manufacturer: syz
[  154.798173][  T434] usb 5-1: SerialNumber: syz
[  154.803548][  T434] usb 5-1: config 0 descriptor??
[  154.947691][  T408] usb 4-1: Using ep0 maxpacket: 8
[  154.954010][  T408] usb 4-1: config 0 has an invalid interface number: 31 but max is 0
[  154.962193][  T408] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  154.972348][  T408] usb 4-1: config 0 has no interface number 0
[  154.979872][  T408] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  154.988964][  T408] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.996957][  T408] usb 4-1: Product: syz
[  155.001145][  T408] usb 4-1: Manufacturer: syz
[  155.005763][  T408] usb 4-1: SerialNumber: syz
[  155.011420][  T408] usb 4-1: config 0 descriptor??
[  155.017278][  T408] usb 4-1: Found UVC 0.04 device syz (046d:08c3)
[  155.023675][  T408] usb 4-1: No valid video chain found.
[  155.087721][ T2456] Bluetooth: hci0: command 0x1003 tx timeout
[  155.087749][ T1675] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  155.100094][ T2455] Bluetooth: hci0: Opcode 0x0c20 failed: -22
[  155.228069][  T408] usb 4-1: USB disconnect, device number 12
[  155.404000][ T2514] FAULT_INJECTION: forcing a failure.
[  155.404000][ T2514] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  155.417525][ T2514] CPU: 1 PID: 2514 Comm: syz.5.627 Not tainted syzkaller #0
[  155.424844][ T2514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  155.434925][ T2514] Call Trace:
[  155.438236][ T2514]  <TASK>
[  155.441187][ T2514]  __dump_stack+0x21/0x24
[  155.445546][ T2514]  dump_stack_lvl+0x110/0x170
[  155.450249][ T2514]  ? __cfi_dump_stack_lvl+0x8/0x8
[  155.455305][ T2514]  ? _parse_integer+0x2a/0x40
[  155.460003][ T2514]  dump_stack+0x15/0x24
[  155.464180][ T2514]  should_fail_ex+0x3bf/0x510
[  155.468912][ T2514]  should_fail+0xb/0x10
[  155.473067][ T2514]  should_fail_usercopy+0x1a/0x20
[  155.478083][ T2514]  _copy_from_user+0x1e/0xc0
[  155.482676][ T2514]  ___sys_sendmsg+0x1c3/0x360
[  155.487344][ T2514]  ? __sys_sendmsg+0x290/0x290
[  155.492102][ T2514]  ? __kasan_check_write+0x14/0x20
[  155.497224][ T2514]  ? proc_fail_nth_write+0x180/0x200
[  155.502515][ T2514]  ? vfs_write+0xa51/0xd00
[  155.506965][ T2514]  ? __fdget+0x19c/0x220
[  155.511213][ T2514]  __x64_sys_sendmsg+0x20d/0x2e0
[  155.516159][ T2514]  ? __cfi___x64_sys_sendmsg+0x10/0x10
[  155.521617][ T2514]  ? fpregs_assert_state_consistent+0xb1/0xe0
[  155.527688][ T2514]  x64_sys_call+0x171/0x9a0
[  155.532189][ T2514]  do_syscall_64+0x4c/0xa0
[  155.536605][ T2514]  ? clear_bhb_loop+0x30/0x80
[  155.541276][ T2514]  ? clear_bhb_loop+0x30/0x80
[  155.545968][ T2514]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  155.551886][ T2514] RIP: 0033:0x7f8ddc59de99
[  155.556308][ T2514] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  155.576267][ T2514] RSP: 002b:00007f8ddd42b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  155.584683][ T2514] RAX: ffffffffffffffda RBX: 00007f8ddc825fa0 RCX: 00007f8ddc59de99
[  155.592954][ T2514] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000003
[  155.600930][ T2514] RBP: 00007f8ddd42b090 R08: 0000000000000000 R09: 0000000000000000
[  155.608899][ T2514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  155.616871][ T2514] R13: 00007f8ddc826038 R14: 00007f8ddc825fa0 R15: 00007ffd6e4e74a8
[  155.624844][ T2514]  </TASK>
[  155.835292][ T2529] set_capacity_and_notify: 6 callbacks suppressed
[  155.835312][ T2529] loop5: detected capacity change from 0 to 512
[  156.989032][ T2542] input: syz0 as /devices/virtual/input/input19
[  156.993485][   T28] audit: type=1400 audit(1784904568.763:350): avc:  denied  { create } for  pid=2541 comm="syz.5.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  157.036370][   T28] audit: type=1400 audit(1784904568.763:351): avc:  denied  { write } for  pid=2541 comm="syz.5.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  157.038547][ T2545] loop5: detected capacity change from 0 to 256
[  157.056056][   T28] audit: type=1400 audit(1784904568.763:352): avc:  denied  { ioctl } for  pid=2541 comm="syz.5.636" path="socket:[38032]" dev="sockfs" ino=38032 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  157.087145][ T2545] FAT-fs (loop5): Unrecognized mount option "showexc" or missing value
[  157.097535][   T28] audit: type=1400 audit(1784904568.773:353): avc:  denied  { connect } for  pid=2541 comm="syz.5.636" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  157.134396][   T28] audit: type=1400 audit(1784904568.783:354): avc:  denied  { read } for  pid=2541 comm="syz.5.636" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  157.167648][    C1] ==================================================================
[  157.170409][ T2545] loop5: detected capacity change from 0 to 256
[  157.175752][    C1] BUG: KASAN: use-after-free in __run_timers+0x341/0x9b0
[  157.175790][    C1] Write of size 8 at addr ffff88811dd94a00 by task udevd/1389
[  157.196493][    C1] 
[  157.198819][    C1] CPU: 1 PID: 1389 Comm: udevd Not tainted syzkaller #0
[  157.205753][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  157.215806][    C1] Call Trace:
[  157.219082][    C1]  <IRQ>
[  157.221926][    C1]  __dump_stack+0x21/0x24
[  157.226272][    C1]  dump_stack_lvl+0x110/0x170
[  157.231015][    C1]  ? __cfi_dump_stack_lvl+0x8/0x8
[  157.236059][    C1]  ? __cfi_trigger_load_balance+0x10/0x10
[  157.241802][    C1]  ? __run_timers+0x341/0x9b0
[  157.246485][    C1]  print_address_description+0x71/0x200
[  157.252033][    C1]  print_report+0x4a/0x60
[  157.256361][    C1]  kasan_report+0x122/0x150
[  157.260863][    C1]  ? __run_timers+0x341/0x9b0
[  157.265538][    C1]  __asan_report_store8_noabort+0x17/0x20
[  157.271253][    C1]  __run_timers+0x341/0x9b0
[  157.275757][    C1]  ? calc_index+0x200/0x200
[  157.280255][    C1]  ? __kasan_check_read+0x11/0x20
[  157.285272][    C1]  ? asm_sysvec_reschedule_ipi+0x1b/0x20
[  157.290908][    C1]  run_timer_softirq+0x6a/0xf0
[  157.295695][    C1]  handle_softirqs+0x1d7/0x600
[  157.300459][    C1]  __irq_exit_rcu+0x52/0xf0
[  157.304961][    C1]  irq_exit_rcu+0x9/0x10
[  157.309196][    C1]  sysvec_apic_timer_interrupt+0xa9/0xc0
[  157.314830][    C1]  </IRQ>
[  157.317756][    C1]  <TASK>
[  157.320681][    C1]  asm_sysvec_apic_timer_interrupt+0x1b/0x20
[  157.326659][    C1] RIP: 0010:__stack_depot_save+0x19c/0x490
[  157.332469][    C1] Code: 85 ed 74 62 89 ca eb 09 4d 8b 6d 00 4d 85 ed 74 55 45 39 7d 08 75 f1 41 39 4d 0c 75 eb 31 f6 49 8b 3c f6 49 3b 7c f5 18 75 de <48> ff c6 39 f2 75 ee 4d 85 ed 74 09 b8 ff ff ff 07 41 23 45 10 65
[  157.352072][    C1] RSP: 0018:ffffc9000e2af360 EFLAGS: 00000246
[  157.358159][    C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000012
[  157.366125][    C1] RDX: 0000000000000012 RSI: 0000000000000000 RDI: ffffffff81b6c39a
[  157.374089][    C1] RBP: ffffc9000e2af3c0 R08: 0000000000000800 R09: 0000000000000000
[  157.382054][    C1] R10: ffff8881f5a00000 R11: 000000000f7c986c R12: 000000000001c4b0
[  157.390022][    C1] R13: ffff8881335491f0 R14: ffffc9000e2af3d0 R15: 000000009401c4b0
[  157.397992][    C1]  ? kasan_save_stack+0x3a/0x60
[  157.402842][    C1]  kasan_save_stack+0x4c/0x60
[  157.407518][    C1]  ? kasan_save_stack+0x3a/0x60
[  157.412366][    C1]  ? __kasan_record_aux_stack+0xb6/0xc0
[  157.417918][    C1]  ? kasan_record_aux_stack_noalloc+0xb/0x10
[  157.423910][    C1]  ? call_rcu+0xcf/0xf50
[  157.428156][    C1]  ? dentry_free+0xbd/0x150
[  157.432657][    C1]  ? __dentry_kill+0x535/0x680
[  157.437421][    C1]  ? dentry_kill+0xc0/0x2a0
[  157.441923][    C1]  ? dput+0x42/0x80
[  157.445732][    C1]  ? lookup_fast+0x35c/0x520
[  157.450319][    C1]  ? walk_component+0x5d/0x430
[  157.455076][    C1]  ? path_lookupat+0x155/0x430
[  157.459834][    C1]  ? filename_lookup+0x229/0x580
[  157.464769][    C1]  ? vfs_statx+0x11b/0x6b0
[  157.469178][    C1]  ? __se_sys_newfstatat+0x142/0x440
[  157.474458][    C1]  ? __x64_sys_newfstatat+0x9b/0xb0
[  157.479648][    C1]  ? x64_sys_call+0x77c/0x9a0
[  157.484320][    C1]  ? do_syscall_64+0x4c/0xa0
[  157.488908][    C1]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  157.494987][    C1]  __kasan_record_aux_stack+0xb6/0xc0
[  157.500352][    C1]  ? __cfi___d_free+0x10/0x10
[  157.505026][    C1]  kasan_record_aux_stack_noalloc+0xb/0x10
[  157.510825][    C1]  call_rcu+0xcf/0xf50
[  157.514891][    C1]  ? rwsem_mark_wake+0x139/0x760
[  157.519836][    C1]  ? __kasan_check_write+0x14/0x20
[  157.524940][    C1]  ? _raw_spin_lock+0x94/0xf0
[  157.529618][    C1]  ? __cfi_call_rcu+0x10/0x10
[  157.534290][    C1]  ? __kasan_check_write+0x14/0x20
[  157.539393][    C1]  ? _raw_spin_lock+0x94/0xf0
[  157.544067][    C1]  ? __cfi__raw_spin_lock+0x10/0x10
[  157.549260][    C1]  ? _raw_spin_unlock+0x4c/0x70
[  157.554106][    C1]  dentry_free+0xbd/0x150
[  157.558433][    C1]  __dentry_kill+0x535/0x680
[  157.563027][    C1]  dentry_kill+0xc0/0x2a0
[  157.567352][    C1]  dput+0x42/0x80
[  157.570983][    C1]  lookup_fast+0x35c/0x520
[  157.575393][    C1]  ? handle_lookup_down+0x130/0x130
[  157.580590][    C1]  ? __stack_depot_save+0x36/0x490
[  157.585699][    C1]  walk_component+0x5d/0x430
[  157.590284][    C1]  path_lookupat+0x155/0x430
[  157.594872][    C1]  filename_lookup+0x229/0x580
[  157.599633][    C1]  ? __cfi_filename_lookup+0x10/0x10
[  157.604914][    C1]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  157.610983][    C1]  vfs_statx+0x11b/0x6b0
[  157.615219][    C1]  ? __check_object_size+0x45a/0x600
[  157.620498][    C1]  ? strncpy_from_user+0x172/0x2c0
[  157.625612][    C1]  ? vfs_fstatat+0x80/0x80
[  157.630031][    C1]  __se_sys_newfstatat+0x142/0x440
[  157.635137][    C1]  ? __x64_sys_newfstatat+0xb0/0xb0
[  157.640330][    C1]  ? kmem_cache_free+0x12d/0x300
[  157.645269][    C1]  ? ____kasan_slab_free+0x13d/0x180
[  157.650555][    C1]  ? __kasan_slab_free+0x11/0x20
[  157.655489][    C1]  ? slab_free_freelist_hook+0xc2/0x190
[  157.661028][    C1]  ? do_unlinkat+0x630/0x6c0
[  157.665635][    C1]  __x64_sys_newfstatat+0x9b/0xb0
[  157.670655][    C1]  x64_sys_call+0x77c/0x9a0
[  157.675155][    C1]  do_syscall_64+0x4c/0xa0
[  157.679571][    C1]  ? clear_bhb_loop+0x30/0x80
[  157.684248][    C1]  ? clear_bhb_loop+0x30/0x80
[  157.688916][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  157.694813][    C1] RIP: 0033:0x7fa3bdd11b0a
[  157.699233][    C1] Code: 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 48 8b 15 b9 f2 0d 00 f7
[  157.718849][    C1] RSP: 002b:00007ffd29123df8 EFLAGS: 00000206 ORIG_RAX: 0000000000000106
[  157.727262][    C1] RAX: ffffffffffffffda RBX: 000055bb13982841 RCX: 00007fa3bdd11b0a
[  157.735231][    C1] RDX: 00007ffd29123e00 RSI: 00007ffd29123e90 RDI: 00000000ffffff9c
[  157.743199][    C1] RBP: 000055bb13969330 R08: 000055bb13982841 R09: 0000000000000000
[  157.751175][    C1] R10: 0000000000000100 R11: 0000000000000206 R12: 000055bb13969420
[  157.759149][    C1] R13: 00007ffd29123e90 R14: 000055bb13956fec R15: 000055badfdb7bcc
[  157.767215][    C1]  </TASK>
[  157.770231][    C1] 
[  157.772568][    C1] Allocated by task 2455:
[  157.776893][    C1]  kasan_set_track+0x4b/0x70
[  157.781486][    C1]  kasan_save_alloc_info+0x1f/0x30
[  157.786591][    C1]  __kasan_kmalloc+0x95/0xb0
[  157.791180][    C1]  __kmalloc+0xb4/0x1e0
[  157.795332][    C1]  hci_alloc_dev_priv+0x27/0x1bd0
[  157.800380][    C1]  hci_uart_tty_ioctl+0x3c4/0xa40
[  157.805412][    C1]  tty_ioctl+0x8ef/0xc60
[  157.809678][    C1]  __se_sys_ioctl+0x12f/0x1b0
[  157.814361][    C1]  __x64_sys_ioctl+0x7b/0x90
[  157.818960][    C1]  x64_sys_call+0x58b/0x9a0
[  157.823470][    C1]  do_syscall_64+0x4c/0xa0
[  157.827889][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  157.833805][    C1] 
[  157.836127][    C1] Freed by task 2455:
[  157.840106][    C1]  kasan_set_track+0x4b/0x70
[  157.844692][    C1]  kasan_save_free_info+0x2b/0x40
[  157.849710][    C1]  ____kasan_slab_free+0x132/0x180
[  157.854824][    C1]  __kasan_slab_free+0x11/0x20
[  157.859587][    C1]  slab_free_freelist_hook+0xc2/0x190
[  157.864957][    C1]  __kmem_cache_free+0xb7/0x1b0
[  157.869807][    C1]  kfree+0x6f/0xf0
[  157.873532][    C1]  hci_release_dev+0x12a3/0x13b0
[  157.878472][    C1]  bt_host_release+0x82/0x90
[  157.883067][    C1]  device_release+0xa4/0x1d0
[  157.887678][    C1]  kobject_put+0x19d/0x280
[  157.892099][    C1]  put_device+0x1f/0x30
[  157.896251][    C1]  hci_dev_cmd+0x279/0x740
[  157.900690][    C1]  hci_sock_ioctl+0x41e/0x7f0
[  157.905377][    C1]  sock_do_ioctl+0x114/0x330
[  157.909967][    C1]  sock_ioctl+0x475/0x700
[  157.914298][    C1]  __se_sys_ioctl+0x12f/0x1b0
[  157.918991][    C1]  __x64_sys_ioctl+0x7b/0x90
[  157.924188][    C1]  x64_sys_call+0x58b/0x9a0
[  157.928696][    C1]  do_syscall_64+0x4c/0xa0
[  157.933118][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  157.939058][    C1] 
[  157.941391][    C1] Last potentially related work creation:
[  157.947101][    C1]  kasan_save_stack+0x3a/0x60
[  157.951781][    C1]  __kasan_record_aux_stack+0xb6/0xc0
[  157.957149][    C1]  kasan_record_aux_stack_noalloc+0xb/0x10
[  157.962946][    C1]  insert_work+0x51/0x300
[  157.967273][    C1]  __queue_work+0x9d0/0xd50
[  157.971772][    C1]  queue_work_on+0xde/0x150
[  157.976272][    C1]  __hci_cmd_sync_sk+0xaa8/0xd80
[  157.981209][    C1]  hci_cmd_sync_status+0x53/0x120
[  157.986232][    C1]  hci_dev_cmd+0x642/0x740
[  157.990652][    C1]  hci_sock_ioctl+0x41e/0x7f0
[  157.995327][    C1]  sock_do_ioctl+0x114/0x330
[  157.999916][    C1]  sock_ioctl+0x475/0x700
[  158.004247][    C1]  __se_sys_ioctl+0x12f/0x1b0
[  158.008918][    C1]  __x64_sys_ioctl+0x7b/0x90
[  158.013505][    C1]  x64_sys_call+0x58b/0x9a0
[  158.018005][    C1]  do_syscall_64+0x4c/0xa0
[  158.022423][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  158.028316][    C1] 
[  158.030635][    C1] Second to last potentially related work creation:
[  158.037207][    C1]  kasan_save_stack+0x3a/0x60
[  158.041891][    C1]  __kasan_record_aux_stack+0xb6/0xc0
[  158.047255][    C1]  kasan_record_aux_stack_noalloc+0xb/0x10
[  158.053054][    C1]  insert_work+0x51/0x300
[  158.057403][    C1]  __queue_work+0x9d0/0xd50
[  158.061904][    C1]  queue_work_on+0xde/0x150
[  158.066405][    C1]  hci_cmd_timeout+0x191/0x200
[  158.071166][    C1]  process_one_work+0x717/0xc30
[  158.076024][    C1]  worker_thread+0xa4d/0x11d0
[  158.080700][    C1]  kthread+0x281/0x320
[  158.084766][    C1]  ret_from_fork+0x1f/0x30
[  158.089179][    C1] 
[  158.091498][    C1] The buggy address belongs to the object at ffff88811dd94000
[  158.091498][    C1]  which belongs to the cache kmalloc-8k of size 8192
[  158.105544][    C1] The buggy address is located 2560 bytes inside of
[  158.105544][    C1]  8192-byte region [ffff88811dd94000, ffff88811dd96000)
[  158.118985][    C1] 
[  158.121305][    C1] The buggy address belongs to the physical page:
[  158.127708][    C1] page:ffffea0004776400 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88811dd90000 pfn:0x11dd90
[  158.139248][    C1] head:ffffea0004776400 order:3 compound_mapcount:0 compound_pincount:0
[  158.147565][    C1] flags: 0x4000000000010200(slab|head|zone=1)
[  158.153633][    C1] raw: 4000000000010200 ffffea0004812a08 ffffea000436a008 ffff888100043500
[  158.162211][    C1] raw: ffff88811dd90000 0000000000020001 00000001ffffffff 0000000000000000
[  158.170800][    C1] page dumped because: kasan: bad access detected
[  158.177203][    C1] page_owner tracks the page as allocated
[  158.182907][    C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 135, tgid 135 (ip), ts 5143984264, free_ts 0
[  158.200789][    C1]  post_alloc_hook+0x1f5/0x210
[  158.205556][    C1]  prep_new_page+0x1c/0x110
[  158.210065][    C1]  get_page_from_freelist+0x2ca9/0x2d20
[  158.215610][    C1]  __alloc_pages+0x1fa/0x610
[  158.220199][    C1]  alloc_slab_page+0x6e/0xf0
[  158.224781][    C1]  new_slab+0x98/0x3e0
[  158.228844][    C1]  ___slab_alloc+0x70f/0xb70
[  158.233435][    C1]  __slab_alloc+0x5e/0xa0
[  158.237761][    C1]  __kmem_cache_alloc_node+0x204/0x2d0
[  158.243217][    C1]  kmalloc_trace+0x29/0xb0
[  158.247629][    C1]  audit_log_d_path+0xc6/0x240
[  158.252395][    C1]  common_lsm_audit+0x330/0x1730
[  158.257334][    C1]  slow_avc_audit+0x1c4/0x240
[  158.262096][    C1]  avc_has_perm+0x1fb/0x250
[  158.266593][    C1]  file_has_perm+0x52d/0x700
[  158.271182][    C1]  match_file+0xc8/0x130
[  158.275423][    C1] page_owner free stack trace missing
[  158.280783][    C1] 
[  158.283104][    C1] Memory state around the buggy address:
[  158.288725][    C1]  ffff88811dd94900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  158.296781][    C1]  ffff88811dd94980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  158.304834][    C1] >ffff88811dd94a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  158.312885][    C1]                    ^
[  158.316948][    C1]  ffff88811dd94a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  158.325006][    C1]  ffff88811dd94b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  158.333080][    C1] ==================================================================
[  158.341139][    C1] Disabling lock debugging due to kernel taint
[  158.347303][    C1] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN
[  158.359007][    C1] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[  158.367415][    C1] CPU: 1 PID: 1389 Comm: udevd Tainted: G    B              syzkaller #0
[  158.375823][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  158.385879][    C1] RIP: 0010:__queue_work+0x582/0xd50
[  158.391167][    C1] Code: b4 00 00 00 e8 7f 4d 29 00 48 bb 00 00 00 00 00 fc ff df 4c 89 ef e8 ed e5 b8 03 4c 8b 65 d0 4c 8b 6d c0 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 00 d8 6e 00 49 8b 3e e8 88 e1 b8 03
[  158.410792][    C1] RSP: 0018:ffffc900001b0c78 EFLAGS: 00010046
[  158.416861][    C1] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff888116196540
[  158.424830][    C1] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff
[  158.432800][    C1] RBP: ffffc900001b0d08 R08: 0000000000000007 R09: 00000000fffffffb
[  158.440768][    C1] R10: dffffc0000000000 R11: ffffed1023bb2939 R12: ffff88811dd949c8
[  158.448770][    C1] R13: ffff8881105c7800 R14: 0000000000000000 R15: 000000007fffffff
[  158.456738][    C1] FS:  00007fa3be353880(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[  158.465667][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  158.472250][    C1] CR2: 0000001b33f20ff8 CR3: 0000000139b68000 CR4: 00000000003526a0
[  158.480223][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  158.488209][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  158.496176][    C1] Call Trace:
[  158.499451][    C1]  <IRQ>
[  158.502295][    C1]  delayed_work_timer_fn+0x61/0x80
[  158.507412][    C1]  ? __cfi_delayed_work_timer_fn+0x10/0x10
[  158.513225][    C1]  call_timer_fn+0x46/0x2a0
[  158.517729][    C1]  ? __cfi_delayed_work_timer_fn+0x10/0x10
[  158.523536][    C1]  __run_timers+0x672/0x9b0
[  158.528044][    C1]  ? calc_index+0x200/0x200
[  158.532546][    C1]  ? __kasan_check_read+0x11/0x20
[  158.537567][    C1]  ? asm_sysvec_reschedule_ipi+0x1b/0x20
[  158.543202][    C1]  run_timer_softirq+0x6a/0xf0
[  158.547967][    C1]  handle_softirqs+0x1d7/0x600
[  158.552733][    C1]  __irq_exit_rcu+0x52/0xf0
[  158.557238][    C1]  irq_exit_rcu+0x9/0x10
[  158.561477][    C1]  sysvec_apic_timer_interrupt+0xa9/0xc0
[  158.567113][    C1]  </IRQ>
[  158.570042][    C1]  <TASK>
[  158.572968][    C1]  asm_sysvec_apic_timer_interrupt+0x1b/0x20
[  158.578954][    C1] RIP: 0010:__stack_depot_save+0x19c/0x490
[  158.584768][    C1] Code: 85 ed 74 62 89 ca eb 09 4d 8b 6d 00 4d 85 ed 74 55 45 39 7d 08 75 f1 41 39 4d 0c 75 eb 31 f6 49 8b 3c f6 49 3b 7c f5 18 75 de <48> ff c6 39 f2 75 ee 4d 85 ed 74 09 b8 ff ff ff 07 41 23 45 10 65
[  158.604372][    C1] RSP: 0018:ffffc9000e2af360 EFLAGS: 00000246
[  158.610434][    C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000012
[  158.618403][    C1] RDX: 0000000000000012 RSI: 0000000000000000 RDI: ffffffff81b6c39a
[  158.626374][    C1] RBP: ffffc9000e2af3c0 R08: 0000000000000800 R09: 0000000000000000
[  158.634344][    C1] R10: ffff8881f5a00000 R11: 000000000f7c986c R12: 000000000001c4b0
[  158.642312][    C1] R13: ffff8881335491f0 R14: ffffc9000e2af3d0 R15: 000000009401c4b0
[  158.650283][    C1]  ? kasan_save_stack+0x3a/0x60
[  158.655138][    C1]  kasan_save_stack+0x4c/0x60
[  158.659812][    C1]  ? kasan_save_stack+0x3a/0x60
[  158.664672][    C1]  ? __kasan_record_aux_stack+0xb6/0xc0
[  158.670213][    C1]  ? kasan_record_aux_stack_noalloc+0xb/0x10
[  158.676198][    C1]  ? call_rcu+0xcf/0xf50
[  158.680463][    C1]  ? dentry_free+0xbd/0x150
[  158.684966][    C1]  ? __dentry_kill+0x535/0x680
[  158.689730][    C1]  ? dentry_kill+0xc0/0x2a0
[  158.694235][    C1]  ? dput+0x42/0x80
[  158.698041][    C1]  ? lookup_fast+0x35c/0x520
[  158.702628][    C1]  ? walk_component+0x5d/0x430
[  158.707384][    C1]  ? path_lookupat+0x155/0x430
[  158.712141][    C1]  ? filename_lookup+0x229/0x580
[  158.717077][    C1]  ? vfs_statx+0x11b/0x6b0
[  158.721488][    C1]  ? __se_sys_newfstatat+0x142/0x440
[  158.726771][    C1]  ? __x64_sys_newfstatat+0x9b/0xb0
[  158.731966][    C1]  ? x64_sys_call+0x77c/0x9a0
[  158.736642][    C1]  ? do_syscall_64+0x4c/0xa0
[  158.741230][    C1]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  158.747305][    C1]  __kasan_record_aux_stack+0xb6/0xc0
[  158.752670][    C1]  ? __cfi___d_free+0x10/0x10
[  158.757359][    C1]  kasan_record_aux_stack_noalloc+0xb/0x10
[  158.763160][    C1]  call_rcu+0xcf/0xf50
[  158.767228][    C1]  ? rwsem_mark_wake+0x139/0x760
[  158.772173][    C1]  ? __kasan_check_write+0x14/0x20
[  158.777280][    C1]  ? _raw_spin_lock+0x94/0xf0
[  158.781955][    C1]  ? __cfi_call_rcu+0x10/0x10
[  158.786631][    C1]  ? __kasan_check_write+0x14/0x20
[  158.791740][    C1]  ? _raw_spin_lock+0x94/0xf0
[  158.796413][    C1]  ? __cfi__raw_spin_lock+0x10/0x10
[  158.801607][    C1]  ? _raw_spin_unlock+0x4c/0x70
[  158.806456][    C1]  dentry_free+0xbd/0x150
[  158.810784][    C1]  __dentry_kill+0x535/0x680
[  158.815375][    C1]  dentry_kill+0xc0/0x2a0
[  158.819705][    C1]  dput+0x42/0x80
[  158.823340][    C1]  lookup_fast+0x35c/0x520
[  158.827749][    C1]  ? handle_lookup_down+0x130/0x130
[  158.832948][    C1]  ? __stack_depot_save+0x36/0x490
[  158.838058][    C1]  walk_component+0x5d/0x430
[  158.842642][    C1]  path_lookupat+0x155/0x430
[  158.847247][    C1]  filename_lookup+0x229/0x580
[  158.852007][    C1]  ? __cfi_filename_lookup+0x10/0x10
[  158.857304][    C1]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  158.863375][    C1]  vfs_statx+0x11b/0x6b0
[  158.867627][    C1]  ? __check_object_size+0x45a/0x600
[  158.873803][    C1]  ? strncpy_from_user+0x172/0x2c0
[  158.878917][    C1]  ? vfs_fstatat+0x80/0x80
[  158.883342][    C1]  __se_sys_newfstatat+0x142/0x440
[  158.888452][    C1]  ? __x64_sys_newfstatat+0xb0/0xb0
[  158.893652][    C1]  ? kmem_cache_free+0x12d/0x300
[  158.898594][    C1]  ? ____kasan_slab_free+0x13d/0x180
[  158.903878][    C1]  ? __kasan_slab_free+0x11/0x20
[  158.908812][    C1]  ? slab_free_freelist_hook+0xc2/0x190
[  158.914355][    C1]  ? do_unlinkat+0x630/0x6c0
[  158.918948][    C1]  __x64_sys_newfstatat+0x9b/0xb0
[  158.923971][    C1]  x64_sys_call+0x77c/0x9a0
[  158.928472][    C1]  do_syscall_64+0x4c/0xa0
[  158.932887][    C1]  ? clear_bhb_loop+0x30/0x80
[  158.937558][    C1]  ? clear_bhb_loop+0x30/0x80
[  158.942230][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  158.948126][    C1] RIP: 0033:0x7fa3bdd11b0a
[  158.952556][    C1] Code: 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 48 8b 15 b9 f2 0d 00 f7
[  158.972167][    C1] RSP: 002b:00007ffd29123df8 EFLAGS: 00000206 ORIG_RAX: 0000000000000106
[  158.980597][    C1] RAX: ffffffffffffffda RBX: 000055bb13982841 RCX: 00007fa3bdd11b0a
[  158.988570][    C1] RDX: 00007ffd29123e00 RSI: 00007ffd29123e90 RDI: 00000000ffffff9c
[  158.996539][    C1] RBP: 000055bb13969330 R08: 000055bb13982841 R09: 0000000000000000
[  159.004511][    C1] R10: 0000000000000100 R11: 0000000000000206 R12: 000055bb13969420
[  159.012482][    C1] R13: 00007ffd29123e90 R14: 000055bb13956fec R15: 000055badfdb7bcc
[  159.020462][    C1]  </TASK>
[  159.023477][    C1] Modules linked in:
[  159.027383][    C1] ---[ end trace 0000000000000000 ]---
[  159.032829][    C1] RIP: 0010:__queue_work+0x582/0xd50
[  159.038120][    C1] Code: b4 00 00 00 e8 7f 4d 29 00 48 bb 00 00 00 00 00 fc ff df 4c 89 ef e8 ed e5 b8 03 4c 8b 65 d0 4c 8b 6d c0 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 00 d8 6e 00 49 8b 3e e8 88 e1 b8 03
[  159.057742][    C1] RSP: 0018:ffffc900001b0c78 EFLAGS: 00010046
[  159.063825][    C1] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff888116196540
[  159.071794][    C1] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff
[  159.079764][    C1] RBP: ffffc900001b0d08 R08: 0000000000000007 R09: 00000000fffffffb
[  159.087732][    C1] R10: dffffc0000000000 R11: ffffed1023bb2939 R12: ffff88811dd949c8
[  159.095699][    C1] R13: ffff8881105c7800 R14: 0000000000000000 R15: 000000007fffffff
[  159.103665][    C1] FS:  00007fa3be353880(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[  159.112589][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  159.119172][    C1] CR2: 0000001b33f20ff8 CR3: 0000000139b68000 CR4: 00000000003526a0
[  159.127145][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  159.135117][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  159.143086][    C1] Kernel panic - not syncing: Fatal exception in interrupt
[  159.150395][    C1] Kernel Offset: disabled
[  159.154776][    C1] Rebooting in 86400 seconds..