last executing test programs:

1m5.392131841s ago: executing program 32 (id=230):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x101000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)={0x3, 0x0, [{0xb, 0x80000001, 0x6, 0x2c, 0x3, 0x0, 0xf9d}, {0x7, 0x7, 0x7, 0x0, 0x1, 0x7fff, 0x1}, {0x80000000, 0x6, 0x4, 0x4, 0xc, 0x6, 0xfffffffb}]})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

1m4.675323245s ago: executing program 5 (id=231):
unshare(0x22020600)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x402, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0xe0f, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xb60d, 0x6, 0x5, 0x7, 0x5, 0xdb, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x80, 0x7, 0x20003, 0x8, 0x4c76, 0x10000, 0x242, 0x3, 0x0, 0x4, 0x80008071, 0x800, 0x17, 0x0, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x0, 0x8, 0x8000, 0x1, 0x7], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xffffbff3, 0x129432f6, 0xc8, 0xc9, 0xe, 0x2bf, 0x6c7, 0x1, 0xfffffffc, 0x5, 0x0, 0x0, 0x9, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x8, 0x4, 0x5, 0x7fff, 0x6, 0x500, 0x401, 0x6, 0x1, 0xff, 0x6, 0x2, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0xfffff256, 0x6, 0x1, 0xfdfffffd, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000008, 0x6, 0x0, 0x3, 0xfffffffc, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x9, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x6, 0x1ef, 0x5, 0x0, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0xffffffff, 0x2, 0x400003, 0xfffffffd, 0x4, 0x6d01, 0x8, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x5, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x7, 0xb1, 0xaca, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x200807ff, 0x2006, 0x80a2ed, 0x1000004, 0x25], [0x5, 0xbb33, 0x7, 0x503d, 0x5, 0x4, 0x6, 0x6, 0x80000000, 0xb9, 0x1, 0x10001ff, 0x2, 0x4184, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x3, 0x6, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x80000002, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

1m4.587852419s ago: executing program 5 (id=234):
openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x109882, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc})
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000240)={0x7e, 0x0, [{0x0, 0x4, 0x0, 0x0, @msi={0x5, 0x800, 0x4}}]})

1m4.429065447s ago: executing program 5 (id=237):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000140)={[{@grpquota}, {@bh}]}, 0x4, 0x500, &(0x7f0000000a40)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)

1m4.019093696s ago: executing program 5 (id=245):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/class/rtc/rtc0/wakealarm\x00', 0x2, 0x61)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='fd/3\x00')
write$cgroup_int(r0, &(0x7f0000000100)=0x100000000, 0x12)

1m3.629277755s ago: executing program 5 (id=249):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000100)=ANY=[@ANYBLOB='iocharset=macgreek,umask=00000000005,namecase=1,namecase=1,fmask=00000000000000000000010,discard,keep_last_dots,iocharset=euc-jp,errors=continue,errors=continue,\x00'], 0x1, 0x1528, &(0x7f00000037c0)="$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")
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{}, 0x0, &(0x7f0000000280)}, 0x20)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0)

1m3.606436326s ago: executing program 33 (id=249):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000100)=ANY=[@ANYBLOB='iocharset=macgreek,umask=00000000005,namecase=1,namecase=1,fmask=00000000000000000000010,discard,keep_last_dots,iocharset=euc-jp,errors=continue,errors=continue,\x00'], 0x1, 0x1528, &(0x7f00000037c0)="$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")
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{}, 0x0, &(0x7f0000000280)}, 0x20)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0)

52.396136111s ago: executing program 6 (id=445):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000680)={[{@user_xattr}, {@noquota}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@jqfmt_vfsv1}, {@block_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@quota}]}, 0x1, 0x562, &(0x7f0000001080)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r1 = open(&(0x7f0000000140)='./file2\x00', 0x66842, 0x1)
pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1e200}], 0x1, 0x1a00, 0x0, 0x3)
write$binfmt_script(r0, &(0x7f0000000100), 0xfecc)

52.168323092s ago: executing program 6 (id=448):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x2800402, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/sys/net/ipv6/fib_multipath_hash_fields\x00', 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
read$FUSE(r0, 0x0, 0x4a)

52.070260546s ago: executing program 6 (id=449):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
syz_read_part_table(0x5c2, &(0x7f0000000000)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0)
ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000")

51.873194566s ago: executing program 6 (id=451):
r0 = syz_clone(0x84008200, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f0000001200)={[{@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'cp862'}}, {@utf8}, {@shortname_lower}, {@shortname_lower}, {@utf8}, {@rodir}, {@utf8}, {@numtail}, {@fat=@codepage={'codepage', 0x3d, '775'}}, {@fat=@check_strict}, {@shortname_mixed}, {@utf8no}, {@shortname_lower}, {@shortname_lower}, {@shortname_mixed}]}, 0x3, 0x29e, &(0x7f0000000800)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/net/pppol2tp\x00', 0x0, 0x0)
sched_getscheduler(r0)
creat(&(0x7f0000000040)='./file0\x00', 0x0)

51.752730252s ago: executing program 6 (id=452):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2a18c56, &(0x7f00000000c0)={[{@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@rodir}, {@fat=@tz_utc}, {@shortname_winnt}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@utf8}, {@fat=@codepage={'codepage', 0x3d, '1255'}}, {@utf8}, {@utf8no}, {@uni_xlateno}, {@utf8no}]}, 0x7f, 0x2be, &(0x7f0000000580)="$eJzs3c2KI1UUAOBT6Up3WoXOwpUIFujCVTMzT9CNtDDYK6UWutHB6QFJwkAHAv5gZlbuBVe+gzsfwAdw4xu4cKm4cxZiSVJV+akkdkfSrQzft6mTe++pe+ty+4dATj56ddB7+Hj46OkXP0enk0TrJE7iWRLdaEXtSayXbmgHAP7fnhVF/F6Urhq7v/Qqbd3kugCAm7Pp7/9Bc+DerS4LALhB773/wTun5+dn72ZZJ2Lw1ShPoryW/aeP4pPox0XciaP4M6KYKeOX7p+fRZpl9ZsBo8PIIwYf/li9Pv01Ypp/N46i28yv31HIpuKNwXiUT2aeXNvxQhJxWiTlkHtxFC9HFO2oblJe3r5/fnYvW82PfD/efP3bav1/XcRxHMVPH8fj6MfD6S3m+V/ezbK3im/++Lx8gjwiGY/yg+m4ucJ/QAAAAAAAAAAAAAAAAAAAAAAA7MxxNtNdrJ9TVwM8Pm72p3nEb4M6f14f6CSm9YGqCj/jhfo6d7Isq8v4jPJ2lPV90ngl9RUCAAAAAAAAAAAAAAAAAAAAMDH89LPeg37/4nIp+KGYBIf/OKYZpAst9cf6r85aH/S+i9g+6zpB7FVL6ycrUyR11xY3/H5D18E2CztcN2m0Nu1h2o9y8V9f486Nlte2fcDrB935XPXp6j1IYrbzT6rdXc7qrD8kC6euPoaXw2SLA1ms2bq9jVn7O9qE/Rf/bfphrOuaPHF7tpnLWZ16M6ugveOflIZkt794AAAAAAAAAAAAAAAAAACAFfMP/cYvK51P/5MlAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCtm3///yyI7lJLsTpmXCVPW1qN9EZwcDlcM233lh8TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA59zfAQAA//+pYU34")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x82)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x1, 0x8000, 0x9})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x8, 0x40000cca8, 0x4010})

51.57453525s ago: executing program 6 (id=453):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000040000000400000022"], 0x50)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0xe5, 0x4)
listen(r1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000240), &(0x7f0000000080)=@tcp=r1}, 0x20)

51.492476794s ago: executing program 34 (id=453):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000040000000400000022"], 0x50)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0xe5, 0x4)
listen(r1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000240), &(0x7f0000000080)=@tcp=r1}, 0x20)

29.425724075s ago: executing program 7 (id=766):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000480)={{0xfffc, 0x3, 0x0, 0x3}, 'syz0\x00', 0x2})
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_DEV_DESTROY(r0, 0x5502)

29.346664218s ago: executing program 7 (id=768):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000002"], 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

29.318622969s ago: executing program 7 (id=771):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1, 0x553a, &(0x7f0000006040)="$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")
r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20)
fallocate(r0, 0x0, 0x0, 0x8800000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a)
lseek(r1, 0x1, 0x3)

29.241113433s ago: executing program 0 (id=786):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, r3, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x840)

29.224717154s ago: executing program 0 (id=778):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x3, @empty}, 0x1c)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e)
syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3, 0x0, @val=0x97}, "ffb00afe4e70"}}}}}}}, 0x0)

25.73621247s ago: executing program 7 (id=779):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x3008002, &(0x7f0000000d00)={[{@grpjquota}]}, 0x3, 0x5ee, &(0x7f0000000280)="$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")
add_key(0x0, 0x0, &(0x7f0000000200)="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", 0x183, 0xffffffffffffffff)
syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0)
setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380), 0x64, 0x1)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]})

25.715168231s ago: executing program 0 (id=780):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e20, 0x80000000, @mcast2, 0x5}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
socket$packet(0x11, 0xa, 0x300)

25.411301376s ago: executing program 7 (id=788):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r0}, 0x20)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000000), 0x4)

25.172246317s ago: executing program 0 (id=801):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x3008002, &(0x7f0000000d00)={[{@grpjquota}]}, 0x3, 0x5ee, &(0x7f0000000280)="$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")
add_key(0x0, 0x0, &(0x7f0000000200)="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", 0x183, 0xffffffffffffffff)
syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0)
setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380), 0x64, 0x1)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]})

25.022441654s ago: executing program 7 (id=795):
syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x180880c, &(0x7f0000000280)={[{@utf8}, {@allow_utime={'allow_utime', 0x3d, 0xb1}}, {@uid={'uid', 0x3d, 0xee00}}, {@errors_continue}, {@fmask={'fmask', 0x3d, 0x1}}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {@discard}, {@fmask={'fmask', 0x3d, 0x6f00}}, {@namecase}, {@namecase}]}, 0x1, 0x152f, &(0x7f00000005c0)="$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")
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r0 = open(&(0x7f0000000040)='.\x00', 0x8c00, 0x0)
getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0)
getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0)

24.996961555s ago: executing program 35 (id=795):
syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x180880c, &(0x7f0000000280)={[{@utf8}, {@allow_utime={'allow_utime', 0x3d, 0xb1}}, {@uid={'uid', 0x3d, 0xee00}}, {@errors_continue}, {@fmask={'fmask', 0x3d, 0x1}}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {@discard}, {@fmask={'fmask', 0x3d, 0x6f00}}, {@namecase}, {@namecase}]}, 0x1, 0x152f, &(0x7f00000005c0)="$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")
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r0 = open(&(0x7f0000000040)='.\x00', 0x8c00, 0x0)
getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0)
getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0)

24.993875885s ago: executing program 0 (id=797):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000600)={0x2, &(0x7f0000000080)=[{0x40, 0x83, 0x0, 0x80000001}, {0x6, 0x3, 0x0, 0xfffffc}]}, 0x10)
syz_emit_ethernet(0xff76, &(0x7f0000000000)=ANY=[], 0x0)

24.446453642s ago: executing program 0 (id=805):
r0 = fsopen(&(0x7f0000000140)='fuseblk\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
close(r1)
socket$inet6(0xa, 0x80002, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

24.412705954s ago: executing program 36 (id=805):
r0 = fsopen(&(0x7f0000000140)='fuseblk\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
close(r1)
socket$inet6(0xa, 0x80002, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

5.760236126s ago: executing program 9 (id=1099):
unshare(0x2020600)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6)

5.669736981s ago: executing program 9 (id=1102):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000010000000400000008"], 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

5.650939692s ago: executing program 9 (id=1103):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
socket$packet(0x11, 0x3, 0x300)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x3, 0x0, @loopback={0x0, 0xac141400}}, 0x1c)

5.312469658s ago: executing program 9 (id=1111):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0)
pivot_root(&(0x7f0000000000)='./file0/../file0/../file0\x00', &(0x7f0000000340)='./file0\x00')

5.2544832s ago: executing program 9 (id=1112):
openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040))
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)={0x8000203d})

5.235409021s ago: executing program 9 (id=1113):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x3)
write$uinput_user_dev(r0, &(0x7f0000001740)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0xffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1ff, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xd95, 0x0, 0xdf51, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x10, 0x0, 0x4000], [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0xfffffffc, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0xfffffffc, 0x2, 0xfffffffd, 0xfaea, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38000, 0x6, 0x9], [0x0, 0x0, 0xfffffffd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x27, 0x3, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000]}, 0x45c)

5.130203457s ago: executing program 37 (id=1113):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x3)
write$uinput_user_dev(r0, &(0x7f0000001740)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0xffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1ff, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xd95, 0x0, 0xdf51, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x10, 0x0, 0x4000], [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0xfffffffc, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0xfffffffc, 0x2, 0xfffffffd, 0xfaea, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38000, 0x6, 0x9], [0x0, 0x0, 0xfffffffd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x27, 0x3, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000]}, 0x45c)

3.656064507s ago: executing program 8 (id=1138):
syz_usb_connect$rtl8150(0x3, 0x12, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x5b05b05b05b0810, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="120100006366e240f30c7593"], 0x0)
ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, &(0x7f0000000000)={0x2, 0x1, 0xffff0000})
syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x56a, 0xc0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x40, 0x40, 0x6, "", [{{0x9, 0x4, 0x0, 0xf6, 0x2, 0x3, 0x1, 0x2, 0x7, {0x9, 0x21, 0x8, 0xa, 0x1, {0x22, 0x4f2}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x81, 0x2, 0x3}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x3, 0x32, 0x9}}]}}}]}}]}}, 0x0)
syz_usb_disconnect(0xffffffffffffffff)

3.37882132s ago: executing program 3 (id=1142):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x2000085c, &(0x7f0000001a80)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESDEC=0x0, @ANYBLOB=',,\x00\x00\x00\x00\x00\x00', @ANYBLOB="f9ee7ee6616006527905abd668ea17e382e0c83dc34879c344093674bfcb9afe6942e93d2c31ef3422c5857ce514a621738e2e0ca9f3b51f9577ee83ca37bd7a2dda7be50c9438a6731ec6303c2b70c0282527857939030300203de5ad9ccf10f399d47a553c3815a8140e156f525b62a6c34f36a440f37ac333648bccb6c848db175245696642c3000000000000", @ANYRES32, @ANYRES64=0x0, @ANYRESOCT, @ANYRES8=0x0, @ANYRESHEX, @ANYRESHEX], 0x1, 0x151f, &(0x7f0000000440)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', r0, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
unlink(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8d43, 0x0)

3.306226733s ago: executing program 3 (id=1146):
syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c636865636b3d72656c617865642c646d61736b3d30303030303030303030303030303030303030303036322c666c7573682c00ed65503ccec9beef4e3a71579390a78893cf794eabe67967531177a5a8a723cb36529bc238be0bc2df664dee9ab34c2269c61c143e0c11a83b8a7214e0a160bcc29b3c030bf99ccb18520651f6cb1a99bbe9b6f8235a156c38c8cb2a8312538163a9da8fb380c7caa6475b7003c0e3003e88bd4ef6abe8b7c2dad0d8e397576687df8ae41502420d0aba004f5b98e9a286"], 0x1, 0x29b, &(0x7f0000000340)="$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")
syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file2\x00', 0x8040, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c756e695f786c6174653d312c756e695f786c6174653d302c757466383d302c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c696f636861727365743d64656661756c742c6e6f6e756d7461696c3d302c73686f72746e616d653d6c6f7765722c726f6469722c757466383d302c6572726f72733d72656d6f756e742d726f2c6572726f72733d636f6e74696e75652c756e695f786c6174653d302c756e695f786c6174653d302c646d61736b3d30303030303030303030303030303030303030303030312c747a3d5554432c6e6f6e756d7461696c3d302c73686f72746e616d653d6d697865642c6572726f72733d72656d6f756e742d726f2c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c726f6469722c696f636861727365743d63703733372c73686f72746e616d653d77696e39352c696f636861727365743d6370313235312c73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c6e6f6e756d7461696c02002c00"], 0x1, 0x2d1, &(0x7f0000000740)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
unlink(&(0x7f0000000000)='./file2\x00')

3.035497986s ago: executing program 1 (id=1148):
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00')
preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0)

2.975760809s ago: executing program 1 (id=1149):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x3010052, &(0x7f0000000600)=ANY=[], 0x41, 0x14fe, &(0x7f0000000700)="$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")
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240))

2.975492249s ago: executing program 3 (id=1150):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB="000a06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

2.850449525s ago: executing program 1 (id=1153):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TCFLSH(r1, 0x400455c8, 0x1000000000)
ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000400)={0x1, 0xcda, "74bb23", 0xfe, 0xff})

2.131679319s ago: executing program 8 (id=1154):
memfd_create(&(0x7f0000000040)='rootmode', 0x0)
unshare(0x2040400)
bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x5, 0x4, 0x8, 0xf}, 0x50)
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400df0325010ebc000000000000008000f0fffeffe809035300fff5dd0000001000020008000140040000006da2898e", 0x58}], 0x1)

2.131401569s ago: executing program 2 (id=1155):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880)
r1 = socket(0xa, 0x3, 0xff)
sendmsg$inet6(r1, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0x6, 0xfff, @mcast2}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000180)="6797f04cdb6f2c8ff1c922acb0da67dc73c026576fddc232ca696ae6c56d0800e17949d4adaf547b", 0x28}], 0x1}, 0x1b5f0e9c35f4c8de)

2.119967569s ago: executing program 8 (id=1156):
pipe2(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RGETLOCK(r1, &(0x7f0000000040)=ANY=[], 0xffffff6a)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x800)
tee(r0, r2, 0xfffffffffffffc01, 0x0)
write$make_it_fail(r2, &(0x7f0000000080)='Y\x00', 0x2)

2.066449852s ago: executing program 2 (id=1157):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10)

2.066130122s ago: executing program 2 (id=1158):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f00000003c0)=ANY=[], 0x3, 0x174, &(0x7f0000000240)="$eJzsmD9PwkAYxp9rESJxcMZBE0lEI6UtalxMJPEDmOCfsEGkErSIQgdh85MYv4CLu/GjKJMLo3NN2wNOouKgJsbnN7z3vNe317u3ydOkIIT8W3pPL48XvcaKDmAGaSTk/LM+qtGU+tVssTl3vZ28K9+WdlL3/fH1BADf//rzYwAeCjo8mfv+27vTctyDNtT70LAs9SEEDKnL0HAgtQOBktQnim4G9YZxXHcd46jpVgNhBsEKgh2E/Pj++lcCVWV/Qrne7nRPK67rtH5QTOpfv6BhS9mf+r4GvTGV/lnQYEmdh0BR6k0kBr2JWqKcPxUbra//8vkpKCj+mhj5k38jsKT4U0zxj5zXOM+1O91svVGpOTXnzLbzG+aaaa7budCIoviJ/02H/pRU1p/6oDYu4riseF7LiuIwt6P4nuPGQ//TkFmMciHnVMLvwaxYCIaMLnNCCCGEEEIIIYQQQgj5duYhwr+gE7B3w+rXAAAA//9nP3XZ")
r0 = open(&(0x7f0000000000)='./file1\x00', 0x4000, 0x0)
preadv2(r0, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0)

1.998459595s ago: executing program 2 (id=1159):
rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8)
r0 = gettid()
timer_create(0x9, &(0x7f0000000180)={0x0, 0x4, 0x4, @tid=r0}, &(0x7f00000001c0)=<r1=>0x0)
timer_settime(r1, 0x1, &(0x7f0000000080)={{0x77359400}, {0x0, 0x3938700}}, 0x0)
rt_sigtimedwait(&(0x7f0000000100)={[0x3ff]}, 0x0, 0x0, 0x8)

1.985450986s ago: executing program 2 (id=1160):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = syz_usb_connect$uac1(0x0, 0xb1, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000000000106b1d0101890f0000030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c24020000000300000000000924060006010000000924030000000005000b2406050001", @ANYRES64=r0], 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000680)=ANY=[@ANYBLOB="200704"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f00000012c0)={0x1c, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\v3'], 0x0, 0x0})
syz_usb_control_io(r1, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000200)={0x40, 0x30, 0x3, "fa2d94"}, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x4, {0x20, 0x40}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1.68203129s ago: executing program 4 (id=1170):
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4012011, r0, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil)

1.665914291s ago: executing program 4 (id=1171):
syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c636865636b3d72656c617865642c646d61736b3d30303030303030303030303030303030303030303036322c666c7573682c00ed65503ccec9beef4e3a71579390a78893cf794eabe67967531177a5a8a723cb36529bc238be0bc2df664dee9ab34c2269c61c143e0c11a83b8a7214e0a160bcc29b3c030bf99ccb18520651f6cb1a99bbe9b6f8235a156c38c8cb2a8312538163a9da8fb380c7caa6475b7003c0e3003e88bd4ef6abe8b7c2dad0d8e397576687df8ae41502420d0aba004f5b98e9a286"], 0x1, 0x29b, &(0x7f0000000340)="$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")
syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file2\x00', 0x8040, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1, 0x2d1, &(0x7f0000000740)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
unlink(&(0x7f0000000000)='./file2\x00')

1.509684228s ago: executing program 4 (id=1172):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1fa, 0x2, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]})

1.356096316s ago: executing program 4 (id=1173):
r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_elf64(r0, &(0x7f0000000a40)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x0, 0x7, 0xe1, 0x8, 0x3, 0x3e, 0xfffffdf9, 0x1d8, 0x40, 0x2d9, 0xd33, 0x5, 0x38, 0x1, 0x78, 0x1f, 0x9}, [{0x70000000, 0x101, 0xb, 0xffff, 0x5, 0x8, 0x4a8a, 0x63b}]}, 0x78)
lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0)
close(r0)
execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)

1.290473869s ago: executing program 4 (id=1174):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0xa0b00, 0x0)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='1', 0x1)

832.12713ms ago: executing program 3 (id=1175):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000300)=@filter={'filter\x00', 0xc, 0x4, 0x280, 0xffffffff, 0x148, 0x0, 0x4000000, 0x98, 0xffffffff, 0x1e8, 0x1e8, 0x1e8, 0x98, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x1000}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x6, {0x3ff}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="b000000000010501000000000000000002000000380001801400018008000100ac14140108000200ac14140220000280050001000600000006000200303900000600030000150000380002801400018008000100ac14140208000200ac14140120000280050001000600000006000200001500000600030030390000080003000000000a0800070000000e10100004800c00018005000100030000000c0005800800010066747000"], 0xb0}}, 0x0)
syz_emit_ethernet(0x47, &(0x7f0000000200)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x33, 0x0, 0x0, 0x40, 0x6, 0x0, @local, @remote}}}}}, 0x0)

785.381553ms ago: executing program 8 (id=1185):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x2000085c, &(0x7f0000001a80)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESDEC=0x0, @ANYBLOB=',,\x00\x00\x00\x00\x00\x00', @ANYBLOB="f9ee7ee6616006527905abd668ea17e382e0c83dc34879c344093674bfcb9afe6942e93d2c31ef3422c5857ce514a621738e2e0ca9f3b51f9577ee83ca37bd7a2dda7be50c9438a6731ec6303c2b70c0282527857939030300203de5ad9ccf10f399d47a553c3815a8140e156f525b62a6c34f36a440f37ac333648bccb6c848db175245696642c3000000000000", @ANYRES32, @ANYRES64=0x0, @ANYRESOCT, @ANYRES8=0x0, @ANYRESHEX, @ANYRESHEX], 0x1, 0x151f, &(0x7f0000000440)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', r0, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
unlink(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8d43, 0x0)

752.019865ms ago: executing program 1 (id=1176):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0)
pivot_root(&(0x7f0000000000)='./file0/../file0/../file0\x00', &(0x7f0000000340)='./file0\x00')

737.462735ms ago: executing program 1 (id=1177):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x1001a, &(0x7f0000000400)={[{@nouser_xattr}, {@nojournal_checksum}, {@inlinecrypt}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nogrpid}, {@bsdgroups}, {@test_dummy_encryption}, {@barrier}], [{@fsname}]}, 0x0, 0x44f, &(0x7f0000000540)="$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")
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000002280)={0x3, &(0x7f0000000180)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x48, 0x3, 0x0, 0x1}, {0x6, 0xba, 0x2, 0x3}]}, 0x10)
syz_emit_ethernet(0x52, &(0x7f0000000280)={@link_local, @remote, @void, {@ipv4={0x800, @icmp={{0xa, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local, {[@timestamp_prespec={0x7, 0x14, 0x13, 0x3, 0x0, [{@multicast2}, {@private=0xa010100, 0xfffffffc}]}]}}, @redirect={0x8, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x21}, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, @remote, @broadcast}}}}}}, 0x0)

648.431419ms ago: executing program 8 (id=1178):
syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file1\x00', 0x0, &(0x7f0000000080)={[{@nobarrier}, {@noinit_itable}, {@i_version}, {@init_itable}]}, 0x1, 0x75b, &(0x7f00000017c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2440, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xa7ae6000)
ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f00000000c0)={0x2, 0x4, 0x0, 0x0})

648.246909ms ago: executing program 1 (id=1179):
r0 = getpid()
add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff)
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
syz_clone(0x498144ee5762a149, 0x0, 0x0, 0x0, 0x0, 0x0)

525.512615ms ago: executing program 38 (id=1179):
r0 = getpid()
add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff)
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
syz_clone(0x498144ee5762a149, 0x0, 0x0, 0x0, 0x0, 0x0)

511.282566ms ago: executing program 3 (id=1181):
openat(0xffffffffffffff9c, 0x0, 0x2d6041, 0x108)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0x2, 0x4fd, &(0x7f0000000b00)="$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")
socket$packet(0x11, 0x2, 0x300)
bind$packet(0xffffffffffffffff, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./mysys\x00', 0x1ff)

4.9092ms ago: executing program 8 (id=1182):
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4012011, r0, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil)

3.81402ms ago: executing program 3 (id=1183):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f0000000180)=r1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

497.78µs ago: executing program 2 (id=1192):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r2, r1, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0x3e, &(0x7f0000000840)={@local, @local, @val={@val={0x88a8, 0x0, 0x0, 0x3}, {0x8100, 0x6, 0x1, 0x1}}, {@ipv6={0x86dd, @generic={0x1, 0x6, 'FP ', 0x0, 0x67, 0x1, @private0, @ipv4={'\x00', '\xff\xff', @multicast1}}}}}, 0x0)

0s ago: executing program 4 (id=1193):
syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file1\x00', 0x0, &(0x7f0000000080)={[{@nobarrier}, {@noinit_itable}, {@i_version}, {@init_itable}]}, 0x1, 0x75b, &(0x7f00000017c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2440, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xa7ae6000)
ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f00000000c0)={0x2, 0x4, 0x0, 0x0})

kernel console output (not intermixed with test programs):

inconsistent: 191 vs 220 free clusters
[   61.538369][ T1852] F2FS-fs (loop3): invalid crc value
[   61.555034][ T1898] EXT4-fs (loop7): 1 truncate cleaned up
[   61.560733][ T1898] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[   61.567984][  T287] EXT4-fs (loop4): unmounting filesystem.
[   61.579021][ T1898] EXT4-fs error (device loop7) in ext4_setattr:5697: error 28
[   61.592773][ T1852] F2FS-fs (loop3): Found nat_bits in checkpoint
[   61.609757][ T1505] EXT4-fs (loop7): unmounting filesystem.
[   61.688699][ T1852] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[   61.771326][ T1914] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   61.830389][ T1914] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[   61.857140][ T1914] EXT4-fs (loop2): 1 truncate cleaned up
[   61.864333][ T1914] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   61.879759][ T1914] EXT4-fs error (device loop2) in ext4_setattr:5697: error 28
[   61.939774][  T290] EXT4-fs (loop2): unmounting filesystem.
[   62.104720][ T1932] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   62.132901][ T1932] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   62.159727][ T1924] set_capacity_and_notify: 8 callbacks suppressed
[   62.159742][ T1924] loop7: detected capacity change from 0 to 40427
[   62.193432][ T1924] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12
[   62.215894][ T1924] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[   62.236500][ T1924] F2FS-fs (loop7): invalid crc value
[   62.242866][  T290] EXT4-fs (loop2): unmounting filesystem.
[   62.256409][   T28] audit: type=1400 audit(1789376272.063:322): avc:  denied  { read } for  pid=1939 comm="syz.0.618" name="trace_pipe" dev="tracefs" ino=13229 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[   62.285039][   T28] audit: type=1400 audit(1789376272.073:323): avc:  denied  { open } for  pid=1939 comm="syz.0.618" path="/122/dir0/per_cpu/cpu0/trace_pipe" dev="tracefs" ino=13229 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[   62.321206][ T1924] F2FS-fs (loop7): Found nat_bits in checkpoint
[   62.330570][   T28] audit: type=1400 audit(1789376272.093:324): avc:  denied  { append } for  pid=1939 comm="syz.0.618" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   62.355455][   T28] audit: type=1400 audit(1789376272.133:325): avc:  denied  { mounton } for  pid=1939 comm="syz.0.618" path="/122/dir0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[   62.371416][ T1944] loop2: detected capacity change from 0 to 8192
[   62.405929][ T1924] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[   62.413281][ T1924] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[   62.461825][   T28] audit: type=1400 audit(1789376272.273:326): avc:  denied  { setattr } for  pid=1920 comm="syz.7.600" path="/35/file0/bus" dev="loop7" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   62.494899][ T1951] netlink: 'syz.3.611': attribute type 4 has an invalid length.
[   62.613582][ T1960] loop2: detected capacity change from 0 to 256
[   62.625333][ T1960] exfat: Deprecated parameter 'utf8'
[   62.634760][ T1960] exfat: Deprecated parameter 'namecase'
[   62.651483][ T1960] exfat: Deprecated parameter 'namecase'
[   62.661938][ T1960] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbcba5927, utbl_chksum : 0xe619d30d)
[   62.721645][  T308] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   62.768507][ T1972] netlink: 24 bytes leftover after parsing attributes in process `syz.2.621'.
[   62.778924][ T1972] netlink: 67 bytes leftover after parsing attributes in process `syz.2.621'.
[   62.850692][ T1978] loop2: detected capacity change from 0 to 512
[   62.872254][ T1978] EXT4-fs error (device loop2): __ext4_iget:5104: inode #11: block 1: comm syz.2.624: invalid block
[   62.883731][ T1978] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.624: couldn't read orphan inode 11 (err -117)
[   62.907841][  T308] usb 5-1: config index 0 descriptor too short (expected 64906, got 45)
[   62.927979][  T308] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[   62.951620][  T308] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   62.959693][  T308] usb 5-1: Product: syz
[   62.964544][  T308] usb 5-1: Manufacturer: syz
[   62.969171][  T308] usb 5-1: SerialNumber: syz
[   62.991732][  T303] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   63.040685][ T1985] device-mapper: ioctl: invalid device name
[   63.143061][ T1958] loop7: detected capacity change from 0 to 131072
[   63.153367][ T1958] F2FS-fs (loop7): invalid crc value
[   63.166517][ T1958] F2FS-fs (loop7): Found nat_bits in checkpoint
[   63.188657][  T308] usb 5-1: USB disconnect, device number 4
[   63.194800][  T303] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[   63.214662][  T303] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[   63.253168][  T303] usb 4-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00
[   63.264035][ T2002] loop2: detected capacity change from 0 to 1024
[   63.267304][  T303] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   63.283911][ T1958] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4
[   63.293114][ T2002] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   63.301626][  T303] usb 4-1: Product: syz
[   63.307895][  T303] usb 4-1: Manufacturer: syz
[   63.313327][  T303] usb 4-1: SerialNumber: syz
[   63.326573][ T2002] EXT4-fs error (device loop2): ext4_map_blocks:747: inode #15: comm syz.2.634: lblock 0 mapped to illegal pblock 0 (length 1)
[   63.332156][  T303] ums-sddr09 4-1:1.0: USB Mass Storage device detected
[   63.340663][ T2002] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[   63.361058][ T2002] EXT4-fs (loop2): This should not happen!! Data will be lost
[   63.361058][ T2002] 
[   63.361395][  T303] ums-sddr09 4-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller)
[   63.361395][  T303]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[   63.380185][ T2002] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #15: comm syz.2.634: lblock 0 mapped to illegal pblock 0 (length 1)
[   63.409667][ T2002] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #15: comm syz.2.634: lblock 0 mapped to illegal pblock 0 (length 1)
[   63.431979][ T2002] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #15: comm syz.2.634: lblock 0 mapped to illegal pblock 0 (length 1)
[   63.446419][ T2002] EXT4-fs error (device loop2): ext4_ext_remove_space:2945: inode #15: comm syz.2.634: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[   63.553315][ T2009] loop5: detected capacity change from 0 to 7
[   63.684925][ T2019] loop2: detected capacity change from 0 to 256
[   63.729075][ T2023] Invalid argument reading file caps for ./file0
[   63.759294][ T2027] FAULT_INJECTION: forcing a failure.
[   63.759294][ T2027] name failslab, interval 1, probability 0, space 0, times 1
[   63.773174][ T2027] CPU: 1 PID: 2027 Comm: syz.4.643 Not tainted syzkaller #0
[   63.780604][ T2027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026
[   63.790773][ T2027] Call Trace:
[   63.794073][ T2027]  <TASK>
[   63.797019][ T2027]  __dump_stack+0x21/0x24
[   63.801374][ T2027]  dump_stack_lvl+0x110/0x170
[   63.806075][ T2027]  ? __cfi_dump_stack_lvl+0x8/0x8
[   63.811124][ T2027]  dump_stack+0x15/0x24
[   63.815375][ T2027]  should_fail_ex+0x3bf/0x510
[   63.820146][ T2027]  __should_failslab+0xac/0xf0
[   63.824918][ T2027]  should_failslab+0x9/0x20
[   63.829513][ T2027]  __kmem_cache_alloc_node+0x3d/0x2d0
[   63.834983][ T2027]  ? security_prepare_creds+0x4e/0x150
[   63.840459][ T2027]  ? security_prepare_creds+0x4e/0x150
[   63.845925][ T2027]  __kmalloc+0xa4/0x1e0
[   63.850083][ T2027]  security_prepare_creds+0x4e/0x150
[   63.855369][ T2027]  prepare_creds+0x428/0x610
[   63.859984][ T2027]  cap_task_prctl+0x536/0x950
[   63.864664][ T2027]  security_task_prctl+0x89/0x110
[   63.869782][ T2027]  __se_sys_prctl+0xd6/0x1170
[   63.874503][ T2027]  ? __x64_sys_prctl+0xd0/0xd0
[   63.879285][ T2027]  ? __kasan_check_write+0x14/0x20
[   63.884495][ T2027]  ? fpregs_restore_userregs+0x128/0x260
[   63.890161][ T2027]  __x64_sys_prctl+0xbf/0xd0
[   63.894799][ T2027]  x64_sys_call+0x6e9/0x9a0
[   63.899334][ T2027]  do_syscall_64+0x4c/0xa0
[   63.903777][ T2027]  ? clear_bhb_loop+0x30/0x80
[   63.908458][ T2027]  ? clear_bhb_loop+0x30/0x80
[   63.913139][ T2027]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   63.919158][ T2027] RIP: 0033:0x7fb8c639e159
[   63.923668][ T2027] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   63.943562][ T2027] RSP: 002b:00007fb8c71ab028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d
[   63.952092][ T2027] RAX: ffffffffffffffda RBX: 00007fb8c6625fa0 RCX: 00007fb8c639e159
[   63.960090][ T2027] RDX: 0000000000000000 RSI: 0000000000000015 RDI: 000000000000001c
[   63.968155][ T2027] RBP: 00007fb8c643503b R08: 0000000000000000 R09: 0000000000000000
[   63.976385][ T2027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   63.984651][ T2027] R13: 00007fb8c6626038 R14: 00007fb8c6625fa0 R15: 00007ffd240fbe78
[   63.992727][ T2027]  </TASK>
[   64.014640][   T28] audit: type=1400 audit(1789376273.823:327): avc:  denied  { write } for  pid=2032 comm="syz.0.645" name="kmsg" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1
[   64.157614][ T2044] loop2: detected capacity change from 0 to 2048
[   64.204082][ T2044] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   64.235095][ T2044] fs-verity: sha512 using implementation "sha512-avx2"
[   64.336653][ T2040] netlink: 40 bytes leftover after parsing attributes in process `syz.0.649'.
[   64.404993][  T303] scsi host1: usb-storage 4-1:1.0
[   64.409623][ T2067] FAULT_INJECTION: forcing a failure.
[   64.409623][ T2067] name failslab, interval 1, probability 0, space 0, times 0
[   64.418534][  T303] usb 4-1: USB disconnect, device number 4
[   64.428414][ T2067] CPU: 1 PID: 2067 Comm: syz.0.661 Not tainted syzkaller #0
[   64.435904][ T2067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026
[   64.445989][ T2067] Call Trace:
[   64.449304][ T2067]  <TASK>
[   64.452269][ T2067]  __dump_stack+0x21/0x24
[   64.456637][ T2067]  dump_stack_lvl+0x110/0x170
[   64.461340][ T2067]  ? __cfi_dump_stack_lvl+0x8/0x8
[   64.466386][ T2067]  ? __kasan_check_write+0x14/0x20
[   64.471687][ T2067]  ? _raw_spin_lock_irqsave+0xc2/0x130
[   64.477173][ T2067]  ? __cfi__raw_spin_lock_irqsave+0x10/0x10
[   64.483274][ T2067]  dump_stack+0x15/0x24
[   64.487477][ T2067]  should_fail_ex+0x3bf/0x510
[   64.492269][ T2067]  __should_failslab+0xac/0xf0
[   64.497052][ T2067]  should_failslab+0x9/0x20
[   64.501570][ T2067]  slab_pre_alloc_hook+0x30/0x1d0
[   64.506626][ T2067]  ? __sock_create+0x39e/0x7c0
[   64.511406][ T2067]  ? __sys_socket+0xcd/0x1a0
[   64.516015][ T2067]  ? __x64_sys_socket+0x7a/0x90
[   64.520997][ T2067]  kmem_cache_alloc_lru+0x49/0x280
[   64.526611][ T2067]  ? __d_alloc+0x34/0x6d0
[   64.531105][ T2067]  __d_alloc+0x34/0x6d0
[   64.535288][ T2067]  d_alloc_pseudo+0x1d/0x70
[   64.539892][ T2067]  alloc_file_pseudo+0xe0/0x200
[   64.545109][ T2067]  ? __cfi_alloc_file_pseudo+0x10/0x10
[   64.550586][ T2067]  ? _raw_spin_unlock+0x4c/0x70
[   64.555541][ T2067]  ? alloc_fd+0x4c1/0x570
[   64.559878][ T2067]  sock_alloc_file+0xba/0x270
[   64.564645][ T2067]  __sys_socket+0x138/0x1a0
[   64.569150][ T2067]  __x64_sys_socket+0x7a/0x90
[   64.573835][ T2067]  x64_sys_call+0x449/0x9a0
[   64.578343][ T2067]  do_syscall_64+0x4c/0xa0
[   64.582769][ T2067]  ? clear_bhb_loop+0x30/0x80
[   64.587474][ T2067]  ? clear_bhb_loop+0x30/0x80
[   64.592245][ T2067]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   64.598141][ T2067] RIP: 0033:0x7feb0679f9c7
[   64.602560][ T2067] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   64.622535][ T2067] RSP: 002b:00007feb0768cf98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029
[   64.631142][ T2067] RAX: ffffffffffffffda RBX: 00007feb06a25fa0 RCX: 00007feb0679f9c7
[   64.639156][ T2067] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010
[   64.647309][ T2067] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000
[   64.655539][ T2067] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000000
[   64.663777][ T2067] R13: 00007feb06a26038 R14: 00007feb06a25fa0 R15: 00007ffd66b9b028
[   64.671756][ T2067]  </TASK>
[   65.751562][    C0] sched: RT throttling activated
[   66.830432][ T2084] loop7: detected capacity change from 0 to 256
[   66.892786][   T28] kauditd_printk_skb: 1 callbacks suppressed
[   66.892804][   T28] audit: type=1400 audit(1789376276.703:329): avc:  denied  { write } for  pid=2086 comm="syz.4.671" name="dynamic_events" dev="tracefs" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[   67.013579][ T2076] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[   67.030629][ T2076] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   67.039830][ T2102] netlink: 8 bytes leftover after parsing attributes in process `syz.4.679'.
[   67.040658][ T2100] ext4: Unknown parameter 'subj_user'
[   67.103321][ T2076] F2FS-fs (loop3): Found nat_bits in checkpoint
[   67.154161][ T2100] 9pnet: p9_errstr2errno: server reported unknown error 
[   67.166148][ T2076] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   67.173410][ T2076] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   67.272221][   T28] audit: type=1326 audit(1789376277.080:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2113 comm="syz.0.682" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb0679e159 code=0x7ffc0000
[   67.328983][ T2096] set_capacity_and_notify: 3 callbacks suppressed
[   67.329006][ T2096] loop2: detected capacity change from 0 to 40427
[   67.333574][   T28] audit: type=1326 audit(1789376277.080:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2113 comm="syz.0.682" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb0679e159 code=0x7ffc0000
[   67.367859][   T28] audit: type=1326 audit(1789376277.080:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2113 comm="syz.0.682" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb0679e159 code=0x7ffc0000
[   67.368109][ T2096] F2FS-fs (loop2): fault_injection options not supported
[   67.393613][   T28] audit: type=1326 audit(1789376277.080:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2113 comm="syz.0.682" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7feb0679e159 code=0x7ffc0000
[   67.425209][   T28] audit: type=1326 audit(1789376277.080:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2113 comm="syz.0.682" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb0679e159 code=0x7ffc0000
[   67.449925][   T28] audit: type=1326 audit(1789376277.080:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2113 comm="syz.0.682" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb0679e159 code=0x7ffc0000
[   67.474641][   T28] audit: type=1326 audit(1789376277.080:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2113 comm="syz.0.682" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb0679e159 code=0x7ffc0000
[   67.475163][ T2096] F2FS-fs (loop2): Image doesn't support compression
[   67.500441][   T28] audit: type=1326 audit(1789376277.080:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2113 comm="syz.0.682" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7feb0679e159 code=0x7ffc0000
[   67.580529][   T28] audit: type=1326 audit(1789376277.080:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2113 comm="syz.0.682" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb0679e159 code=0x7ffc0000
[   67.596217][ T2096] F2FS-fs (loop2): heap/no_heap options were deprecated
[   67.622989][  T312] tipc: Left network mode
[   67.644262][ T2112] loop7: detected capacity change from 0 to 40427
[   67.662357][ T2112] F2FS-fs (loop7): invalid crc value
[   67.669207][ T2112] F2FS-fs (loop7): Found nat_bits in checkpoint
[   67.672626][ T2096] F2FS-fs (loop2): invalid crc value
[   67.712038][ T2119] loop3: detected capacity change from 0 to 256
[   67.718964][ T2096] F2FS-fs (loop2): Found nat_bits in checkpoint
[   67.738922][ T2119] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011d3e, chksum : 0x09ccb45e, utbl_chksum : 0xe619d30d)
[   67.755820][ T2112] F2FS-fs (loop7): Start checkpoint disabled!
[   67.771376][ T2112] F2FS-fs (loop7): f2fs_disable_checkpoint() finish, err:0
[   67.791031][ T2112] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6
[   67.835770][ T2096] F2FS-fs (loop2): Start checkpoint disabled!
[   67.853423][ T2096] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0
[   67.854680][ T2112] syz.7.681: attempt to access beyond end of device
[   67.854680][ T2112] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   67.871936][ T2096] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[   67.927225][ T2112] syz.7.681: attempt to access beyond end of device
[   67.927225][ T2112] loop7: rw=2049, sector=45128, nr_sectors = 24 limit=40427
[   67.941284][ T2096] syz.2.676: attempt to access beyond end of device
[   67.941284][ T2096] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   67.956997][ T2096] syz.2.676: attempt to access beyond end of device
[   67.956997][ T2096] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   67.960265][ T2112] syz.7.681: attempt to access beyond end of device
[   67.960265][ T2112] loop7: rw=2049, sector=45168, nr_sectors = 24 limit=40427
[   67.984930][ T2123] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.992519][ T2112] syz.7.681: attempt to access beyond end of device
[   67.992519][ T2112] loop7: rw=2049, sector=45200, nr_sectors = 32 limit=40427
[   68.016968][ T2123] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.035668][  T325] kworker/u4:4: attempt to access beyond end of device
[   68.035668][  T325] loop2: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[   68.054001][ T2138] loop5: detected capacity change from 0 to 7
[   68.059017][ T2140] loop3: detected capacity change from 0 to 1024
[   68.060645][ T2123] device bridge_slave_0 entered promiscuous mode
[   68.070251][ T2112] syz.7.681: attempt to access beyond end of device
[   68.070251][ T2112] loop7: rw=2049, sector=45264, nr_sectors = 8 limit=40427
[   68.087676][ T2112] syz.7.681: attempt to access beyond end of device
[   68.087676][ T2112] loop7: rw=2049, sector=45296, nr_sectors = 8 limit=40427
[   68.101931][ T2112] syz.7.681: attempt to access beyond end of device
[   68.101931][ T2112] loop7: rw=2049, sector=45328, nr_sectors = 8 limit=40427
[   68.115845][ T2123] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.129373][ T2123] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.142362][ T2123] device bridge_slave_1 entered promiscuous mode
[   68.197653][ T2140] EXT4-fs mount: 6 callbacks suppressed
[   68.197675][ T2140] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   68.228316][ T2140] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   68.250095][ T2146] loop2: detected capacity change from 0 to 512
[   68.257980][ T2140] EXT4-fs error (device loop3): ext4_map_blocks:747: inode #15: comm syz.3.693: lblock 0 mapped to illegal pblock 0 (length 1)
[   68.335172][ T2140] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[   68.380818][  T312] device vlan2 left promiscuous mode
[   68.386482][  T312] bridge0: port 3(vlan2) entered disabled state
[   68.396831][ T2140] EXT4-fs (loop3): This should not happen!! Data will be lost
[   68.396831][ T2140] 
[   68.401812][  T312] device bridge_slave_1 left promiscuous mode
[   68.415818][  T312] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.423930][  T312] device bridge_slave_0 left promiscuous mode
[   68.428996][ T2151] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #15: comm syz.3.693: lblock 0 mapped to illegal pblock 0 (length 1)
[   68.430280][  T312] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.459489][  T312] device veth1_macvtap left promiscuous mode
[   68.466250][  T312] device veth0_vlan left promiscuous mode
[   68.467158][ T2151] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #15: comm syz.3.693: lblock 0 mapped to illegal pblock 0 (length 1)
[   68.498835][ T2151] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #15: comm syz.3.693: lblock 0 mapped to illegal pblock 0 (length 1)
[   68.512636][ T2151] EXT4-fs error (device loop3): ext4_ext_remove_space:2945: inode #15: comm syz.3.693: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[   68.565684][  T788] EXT4-fs (loop3): unmounting filesystem.
[   68.613482][ T2150] netlink: 40 bytes leftover after parsing attributes in process `syz.4.695'.
[   68.654700][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   68.662621][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   68.677377][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   68.685927][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   68.694666][   T43] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.701768][   T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.709470][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   68.717989][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   68.726459][   T43] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.733947][   T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.741291][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   68.752531][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   68.760651][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   68.769912][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   68.778529][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   68.792495][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   68.801016][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   68.812682][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   68.820752][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   68.828399][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   68.836942][ T2123] device veth0_vlan entered promiscuous mode
[   68.849947][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   68.859957][ T2123] device veth1_macvtap entered promiscuous mode
[   68.869904][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   68.878198][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   68.887094][ T1517] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   68.897521][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   68.906282][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   69.081670][ T1517] usb 3-1: Using ep0 maxpacket: 16
[   69.088306][ T1517] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   69.098552][ T1517] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   69.109772][ T1517] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[   69.119854][ T1517] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[   69.132710][ T1517] usb 3-1: config 0 interface 0 has no altsetting 0
[   69.139399][ T1517] usb 3-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00
[   69.149033][ T1517] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   69.158181][ T1517] usb 3-1: config 0 descriptor??
[   69.284085][ T2179] loop7: detected capacity change from 0 to 128
[   69.326367][ T2182] loop5: detected capacity change from 0 to 7
[   69.435696][ T2192] loop4: detected capacity change from 0 to 1024
[   69.452144][ T2192] EXT4-fs: Ignoring removed orlov option
[   69.454113][ T2196] incfs: Can't find or create .index dir in ./file0
[   69.485430][ T2192] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   69.521777][ T2196] incfs: mount failed -22
[   69.551082][  T287] EXT4-fs (loop4): unmounting filesystem.
[   69.569850][ T1517] logitech-djreceiver 0003:046D:C53A.0003: hiddev96,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.2-1/input0
[   69.657112][ T2212] loop5: detected capacity change from 0 to 7
[   69.765318][ T2202] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12
[   69.788281][ T1517] usb 3-1: USB disconnect, device number 5
[   69.797183][ T2202] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[   69.841139][ T2202] F2FS-fs (loop7): Found nat_bits in checkpoint
[   69.921928][ T2202] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[   69.929109][ T2202] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[   69.971795][ T2227] netlink: 40 bytes leftover after parsing attributes in process `syz.3.727'.
[   70.046820][ T2234] F2FS-fs (loop4): Invalid SB checksum offset: 0
[   70.061624][ T2234] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[   70.070437][ T2234] F2FS-fs (loop4): invalid crc value
[   70.129111][ T2234] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[   70.131634][   T19] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   70.196041][ T2247] incfs: Can't find or create .incomplete dir in ./file0
[   70.203728][ T2247] incfs: mount failed -22
[   70.210001][ T2234] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[   70.217618][ T2234] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   70.265463][ T2254] input: syz0 as /devices/virtual/input/input8
[   70.338664][ T2260] EXT4-fs: Ignoring removed bh option
[   70.352836][ T2260] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[   70.364342][ T2259] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d)
[   70.383505][   T19] usb 1-1: config 1 has an invalid descriptor of length 125, skipping remainder of the config
[   70.398812][   T19] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   70.411717][   T19] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   70.412058][ T2260] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1087: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   70.432445][   T19] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   70.454365][ T2259] exFAT-fs (loop2): error, tried to truncate zeroed cluster.
[   70.463184][ T2259] exFAT-fs (loop2): Filesystem has been set read-only
[   70.470046][   T19] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   70.479490][   T19] usb 1-1: Product: syz
[   70.480277][ T2259] exFAT-fs (loop2): error, invalid access to exfat cache (entry 0x00000000)
[   70.483796][   T19] usb 1-1: Manufacturer: syz
[   70.497482][   T19] usb 1-1: SerialNumber: syz
[   70.504932][ T2259] exFAT-fs (loop2): error, failed to bmap (inode : ffff888115beb670 iblock : 73, err : -5)
[   70.511991][ T2260] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.740: bg 0: block 248: padding at end of block bitmap is not set
[   70.516720][ T2259] exFAT-fs (loop2): error, tried to truncate zeroed cluster.
[   70.563691][ T2260] EXT4-fs error (device loop3): ext4_acquire_dquot:6828: comm syz.3.740: Failed to acquire dquot type 1
[   70.585155][ T2260] EXT4-fs (loop3): 1 truncate cleaned up
[   70.591191][ T2260] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   70.702358][ T2265] F2FS-fs (loop4): invalid crc value
[   70.714961][ T2260] syz.3.740 (2260) used greatest stack depth: 20640 bytes left
[   70.723267][ T2265] F2FS-fs (loop4): Found nat_bits in checkpoint
[   70.746965][  T788] EXT4-fs (loop3): unmounting filesystem.
[   70.799296][ T2265] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   70.808939][ T2283] incfs: ino conflict with backing FS 1
[   71.095797][ T2300] EXT4-fs: Ignoring removed bh option
[   71.100755][ T2298] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d)
[   71.149700][ T2298] exFAT-fs (loop4): error, tried to truncate zeroed cluster.
[   71.158275][ T2298] exFAT-fs (loop4): Filesystem has been set read-only
[   71.158438][ T2300] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended
[   71.167793][ T2298] exFAT-fs (loop4): error, invalid access to exfat cache (entry 0x00000000)
[   71.182360][ T2287] F2FS-fs (loop3): Invalid SB checksum offset: 0
[   71.190966][ T2287] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[   71.201354][ T2298] exFAT-fs (loop4): error, failed to bmap (inode : ffff888115ad5db0 iblock : 73, err : -5)
[   71.201990][ T2287] F2FS-fs (loop3): invalid crc value
[   71.212044][ T2298] exFAT-fs (loop4): error, tried to truncate zeroed cluster.
[   71.236091][ T2287] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[   71.236420][ T2300] EXT4-fs warning (device loop7): ext4_update_dynamic_rev:1087: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   71.266998][ T2300] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.754: bg 0: block 248: padding at end of block bitmap is not set
[   71.282758][ T2300] EXT4-fs error (device loop7): ext4_acquire_dquot:6828: comm syz.7.754: Failed to acquire dquot type 1
[   71.294579][ T2311] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.757: iget: bad i_size value: 38620345925642
[   71.299451][ T2300] EXT4-fs (loop7): 1 truncate cleaned up
[   71.313184][ T2300] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[   71.343745][ T2311] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.757: couldn't read orphan inode 15 (err -117)
[   71.365639][ T2287] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[   71.379754][ T2287] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   71.423691][ T2311] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   71.459420][ T1505] EXT4-fs (loop7): unmounting filesystem.
[   71.494326][ T2311] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.757: bg 0: block 5: invalid block bitmap
[   71.522590][ T2311] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 3 with max blocks 64 with error 28
[   71.530429][   T19] cdc_ncm 1-1:1.0: bind() failure
[   71.552364][   T19] usb 1-1: USB disconnect, device number 3
[   71.561063][ T2311] EXT4-fs (loop2): This should not happen!! Data will be lost
[   71.561063][ T2311] 
[   71.591437][ T2311] EXT4-fs (loop2): Total free blocks count 0
[   71.611343][ T2311] EXT4-fs (loop2): Free/Dirty block details
[   71.612444][ T2325] incfs: ino conflict with backing FS 1
[   71.621427][ T2311] EXT4-fs (loop2): free_blocks=0
[   71.631535][ T2311] EXT4-fs (loop2): dirty_blocks=64
[   71.641694][ T2311] EXT4-fs (loop2): Block reservation details
[   71.658555][ T2311] EXT4-fs (loop2): i_reserved_data_blocks=64
[   71.681880][ T2327] FAULT_INJECTION: forcing a failure.
[   71.681880][ T2327] name failslab, interval 1, probability 0, space 0, times 0
[   71.698256][  T290] EXT4-fs (loop2): unmounting filesystem.
[   71.701695][ T2327] CPU: 1 PID: 2327 Comm: syz.3.762 Not tainted syzkaller #0
[   71.711366][ T2327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026
[   71.721546][ T2327] Call Trace:
[   71.724855][ T2327]  <TASK>
[   71.727820][ T2327]  __dump_stack+0x21/0x24
[   71.732258][ T2327]  dump_stack_lvl+0x110/0x170
[   71.736971][ T2327]  ? __cfi_dump_stack_lvl+0x8/0x8
[   71.742066][ T2327]  dump_stack+0x15/0x24
[   71.746231][ T2327]  should_fail_ex+0x3bf/0x510
[   71.751259][ T2327]  __should_failslab+0xac/0xf0
[   71.756463][ T2327]  should_failslab+0x9/0x20
[   71.761285][ T2327]  __kmem_cache_alloc_node+0x3d/0x2d0
[   71.766701][ T2327]  ? selinux_sk_alloc_security+0x7e/0x1a0
[   71.772655][ T2327]  ? selinux_sk_alloc_security+0x7e/0x1a0
[   71.778395][ T2327]  kmalloc_trace+0x29/0xb0
[   71.782835][ T2327]  selinux_sk_alloc_security+0x7e/0x1a0
[   71.788589][ T2327]  security_sk_alloc+0x83/0xb0
[   71.793387][ T2327]  sk_prot_alloc+0x108/0x320
[   71.797993][ T2327]  ? _raw_read_lock_irqsave+0x94/0xf0
[   71.803381][ T2327]  sk_alloc+0x3b/0x460
[   71.807473][ T2327]  netlink_create+0x3c2/0x640
[   71.812160][ T2327]  ? __cfi_genl_bind+0x10/0x10
[   71.816933][ T2327]  __sock_create+0x39e/0x7c0
[   71.821648][ T2327]  __sys_socket+0xcd/0x1a0
[   71.826181][ T2327]  __x64_sys_socket+0x7a/0x90
[   71.831044][ T2327]  x64_sys_call+0x449/0x9a0
[   71.835560][ T2327]  do_syscall_64+0x4c/0xa0
[   71.840183][ T2327]  ? clear_bhb_loop+0x30/0x80
[   71.844884][ T2327]  ? clear_bhb_loop+0x30/0x80
[   71.849852][ T2327]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   71.855758][ T2327] RIP: 0033:0x7f308a59f9c7
[   71.860177][ T2327] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   71.880154][ T2327] RSP: 002b:00007f308b4a7f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029
[   71.889196][ T2327] RAX: ffffffffffffffda RBX: 00007f308a825fa0 RCX: 00007f308a59f9c7
[   71.897528][ T2327] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010
[   71.905608][ T2327] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000
[   71.913671][ T2327] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000000
[   71.921821][ T2327] R13: 00007f308a826038 R14: 00007f308a825fa0 R15: 00007ffc041e89e8
[   71.930189][ T2327]  </TASK>
[   71.976676][ T2322] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[   71.984812][ T2322] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   71.994240][ T2322] F2FS-fs (loop4): invalid crc value
[   72.006312][ T2329] EXT4-fs: Ignoring removed orlov option
[   72.023774][ T2329] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   72.036497][ T2322] F2FS-fs (loop4): Found nat_bits in checkpoint
[   72.102553][ T2344] input: syz0 as /devices/virtual/input/input9
[   72.110600][ T2322] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[   72.117837][ T2322] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   72.159764][  T290] EXT4-fs (loop2): unmounting filesystem.
[   72.202441][ T2353] device-mapper: ioctl: invalid device name
[   72.258274][ T2359] FAULT_INJECTION: forcing a failure.
[   72.258274][ T2359] name failslab, interval 1, probability 0, space 0, times 0
[   73.753271][ T2359] CPU: 1 PID: 2359 Comm: syz.2.775 Not tainted syzkaller #0
[   73.760637][ T2359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026
[   73.770701][ T2359] Call Trace:
[   73.774025][ T2359]  <TASK>
[   73.776959][ T2359]  __dump_stack+0x21/0x24
[   73.781307][ T2359]  dump_stack_lvl+0x110/0x170
[   73.786176][ T2359]  ? __cfi_dump_stack_lvl+0x8/0x8
[   73.791233][ T2359]  ? __kasan_check_write+0x14/0x20
[   73.796367][ T2359]  ? _raw_spin_lock_irqsave+0xc2/0x130
[   73.801923][ T2359]  ? __cfi__raw_spin_lock_irqsave+0x10/0x10
[   73.807826][ T2359]  dump_stack+0x15/0x24
[   73.811987][ T2359]  should_fail_ex+0x3bf/0x510
[   73.816669][ T2359]  __should_failslab+0xac/0xf0
[   73.821617][ T2359]  should_failslab+0x9/0x20
[   73.826130][ T2359]  slab_pre_alloc_hook+0x30/0x1d0
[   73.831164][ T2359]  ? __sock_create+0x39e/0x7c0
[   73.836105][ T2359]  ? __sys_socket+0xcd/0x1a0
[   73.840699][ T2359]  ? __x64_sys_socket+0x7a/0x90
[   73.845635][ T2359]  kmem_cache_alloc_lru+0x49/0x280
[   73.850750][ T2359]  ? __d_alloc+0x34/0x6d0
[   73.855088][ T2359]  __d_alloc+0x34/0x6d0
[   73.859249][ T2359]  d_alloc_pseudo+0x1d/0x70
[   73.863759][ T2359]  alloc_file_pseudo+0xe0/0x200
[   73.868613][ T2359]  ? __cfi_alloc_file_pseudo+0x10/0x10
[   73.874079][ T2359]  ? _raw_spin_unlock+0x4c/0x70
[   73.879036][ T2359]  ? alloc_fd+0x4c1/0x570
[   73.883578][ T2359]  sock_alloc_file+0xba/0x270
[   73.888279][ T2359]  __sys_socket+0x138/0x1a0
[   73.892910][ T2359]  __x64_sys_socket+0x7a/0x90
[   73.897685][ T2359]  x64_sys_call+0x449/0x9a0
[   73.902200][ T2359]  do_syscall_64+0x4c/0xa0
[   73.906840][ T2359]  ? clear_bhb_loop+0x30/0x80
[   73.911644][ T2359]  ? clear_bhb_loop+0x30/0x80
[   73.916421][ T2359]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   73.922335][ T2359] RIP: 0033:0x7fb8bc39f9c7
[   73.926783][ T2359] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   73.946752][ T2359] RSP: 002b:00007fb8bd2acf98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029
[   73.955360][ T2359] RAX: ffffffffffffffda RBX: 00007fb8bc625fa0 RCX: 00007fb8bc39f9c7
[   73.963526][ T2359] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010
[   73.971611][ T2359] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000
[   73.979582][ T2359] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000000
[   73.987552][ T2359] R13: 00007fb8bc626038 R14: 00007fb8bc625fa0 R15: 00007ffc18eee4c8
[   73.995555][ T2359]  </TASK>
[   75.820447][ T2368] set_capacity_and_notify: 12 callbacks suppressed
[   75.820468][ T2368] loop7: detected capacity change from 0 to 1024
[   75.838414][ T2374] loop3: detected capacity change from 0 to 256
[   75.849211][ T2374] exfat: Deprecated parameter 'utf8'
[   75.855298][ T2374] exfat: Deprecated parameter 'namecase'
[   75.864156][ T2374] exfat: Deprecated parameter 'namecase'
[   75.874593][ T2374] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbcba5927, utbl_chksum : 0xe619d30d)
[   75.892762][ T2368] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   75.895674][ T2377] input: syz0 as /devices/virtual/input/input10
[   75.930034][ T2368] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[   75.947092][   T28] kauditd_printk_skb: 29 callbacks suppressed
[   75.947111][   T28] audit: type=1400 audit(1789376285.750:364): avc:  denied  { mounton } for  pid=2366 comm="syz.7.779" path="/67/file0/file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   75.948391][ T2368] overlayfs: invalid origin (00000079004c5a2d4f4bba8bad131b97fffe7a22e2c9188cae78f0cb1b8c4f5f2db472c08eaa258df76ea08c12f10f2595f703f26bfb95d7c195427a254027dc)
[   75.960983][ T2383] loop3: detected capacity change from 0 to 512
[   76.015341][ T2386] loop4: detected capacity change from 0 to 256
[   76.027599][ T2386] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011d3e, chksum : 0x09ccb45e, utbl_chksum : 0xe619d30d)
[   76.058082][ T2388] device-mapper: ioctl: invalid device name
[   76.104126][   T28] audit: type=1400 audit(1789376285.910:365): avc:  denied  { unlink } for  pid=1505 comm="syz-executor" name="file1" dev="loop7" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1
[   76.122390][ T2394] loop4: detected capacity change from 0 to 512
[   76.127540][ T1505] EXT4-fs warning (device loop7): empty_inline_dir:1884: bad inline directory (dir #12) - no `..'
[   76.133962][ T2383] ext4: Unknown parameter 'subj_user'
[   76.162073][ T1505] EXT4-fs warning (device loop7): empty_inline_dir:1884: bad inline directory (dir #12) - no `..'
[   76.186683][ T1505] EXT4-fs warning (device loop7): empty_inline_dir:1884: bad inline directory (dir #12) - no `..'
[   76.200428][ T1505] EXT4-fs warning (device loop7): empty_inline_dir:1884: bad inline directory (dir #12) - no `..'
[   76.211815][ T1505] EXT4-fs warning (device loop7): empty_inline_dir:1884: bad inline directory (dir #12) - no `..'
[   76.223008][ T1505] EXT4-fs warning (device loop7): empty_inline_dir:1884: bad inline directory (dir #12) - no `..'
[   76.223179][ T2394] EXT4-fs error (device loop4): __ext4_iget:5104: inode #11: block 1: comm syz.4.787: invalid block
[   76.234336][ T1505] EXT4-fs warning (device loop7): empty_inline_dir:1884: bad inline directory (dir #12) - no `..'
[   76.255606][ T1505] EXT4-fs warning (device loop7): empty_inline_dir:1884: bad inline directory (dir #12) - no `..'
[   76.266578][ T1505] EXT4-fs warning (device loop7): empty_inline_dir:1884: bad inline directory (dir #12) - no `..'
[   76.270123][ T2383] 9pnet: p9_errstr2errno: server reported unknown error 
[   76.281527][ T2394] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.787: couldn't read orphan inode 11 (err -117)
[   76.284929][ T1505] EXT4-fs warning (device loop7): empty_inline_dir:1884: bad inline directory (dir #12) - no `..'
[   76.297801][ T2394] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   76.352359][ T2397] 9pnet: p9_errstr2errno: server reported unknown error 00000000000000000003
[   76.366584][ T2399] loop0: detected capacity change from 0 to 1024
[   76.386185][ T2399] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   76.396950][ T2399] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   76.420920][  T287] EXT4-fs (loop4): unmounting filesystem.
[   76.421020][ T1505] EXT4-fs (loop7): unmounting filesystem.
[   76.460396][ T2399] overlayfs: invalid origin (00000079004c5a2d4f4bba8bad131b97fffe7a22e2c9188cae78f0cb1b8c4f5f2db472c08eaa258df76ea08c12f10f2595f703f26bfb95d7c195427a254027dc)
[   76.523340][   T28] audit: type=1326 audit(1789376286.330:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2413 comm="syz.3.799" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308a59e159 code=0x7ffc0000
[   76.562163][ T2123] EXT4-fs warning (device loop0): empty_inline_dir:1884: bad inline directory (dir #12) - no `..'
[   76.601889][ T2123] EXT4-fs warning (device loop0): empty_inline_dir:1884: bad inline directory (dir #12) - no `..'
[   76.621964][   T28] audit: type=1326 audit(1789376286.330:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2413 comm="syz.3.799" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308a59e159 code=0x7ffc0000
[   76.653055][ T2123] EXT4-fs warning (device loop0): empty_inline_dir:1884: bad inline directory (dir #12) - no `..'
[   76.671777][ T2123] EXT4-fs warning (device loop0): empty_inline_dir:1884: bad inline directory (dir #12) - no `..'
[   76.686165][   T28] audit: type=1326 audit(1789376286.360:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2413 comm="syz.3.799" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308a59e159 code=0x7ffc0000
[   76.713856][   T28] audit: type=1326 audit(1789376286.360:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2413 comm="syz.3.799" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308a59e159 code=0x7ffc0000
[   76.714088][ T2123] EXT4-fs warning (device loop0): empty_inline_dir:1884: bad inline directory (dir #12) - no `..'
[   76.751778][   T28] audit: type=1326 audit(1789376286.360:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2413 comm="syz.3.799" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f308a59e159 code=0x7ffc0000
[   76.765153][ T2123] EXT4-fs warning (device loop0): empty_inline_dir:1884: bad inline directory (dir #12) - no `..'
[   76.787345][ T2123] EXT4-fs warning (device loop0): empty_inline_dir:1884: bad inline directory (dir #12) - no `..'
[   76.798342][ T2123] EXT4-fs warning (device loop0): empty_inline_dir:1884: bad inline directory (dir #12) - no `..'
[   76.800874][   T28] audit: type=1326 audit(1789376286.410:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2413 comm="syz.3.799" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308a59e159 code=0x7ffc0000
[   76.809391][ T2123] EXT4-fs warning (device loop0): empty_inline_dir:1884: bad inline directory (dir #12) - no `..'
[   76.846211][ T2123] EXT4-fs warning (device loop0): empty_inline_dir:1884: bad inline directory (dir #12) - no `..'
[   76.852483][ T2418] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.872463][   T28] audit: type=1326 audit(1789376286.410:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2413 comm="syz.3.799" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308a59e159 code=0x7ffc0000
[   76.887827][ T2418] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.898787][   T28] audit: type=1326 audit(1789376286.410:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2413 comm="syz.3.799" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f308a59dec2 code=0x7ffc0000
[   76.929819][ T2418] device bridge_slave_0 entered promiscuous mode
[   76.941656][   T19] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   76.942735][ T2425] loop4: detected capacity change from 0 to 512
[   76.958660][ T2425] ext4: Unknown parameter 'subj_user'
[   76.968727][ T2418] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.976415][ T2418] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.983811][ T2123] EXT4-fs (loop0): unmounting filesystem.
[   76.984192][ T2418] device bridge_slave_1 entered promiscuous mode
[   76.995015][ T2380] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   77.006753][ T2425] 9pnet: p9_errstr2errno: server reported unknown error 
[   77.034726][ T2429] loop3: detected capacity change from 0 to 512
[   77.085688][ T2429] EXT4-fs error (device loop3): __ext4_iget:5104: inode #11: block 1: comm syz.3.807: invalid block
[   77.105212][ T2429] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.807: couldn't read orphan inode 11 (err -117)
[   77.124723][ T2418] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.131837][ T2418] bridge0: port 2(bridge_slave_1) entered forwarding state
[   77.139234][ T2418] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.142657][   T19] usb 3-1: config index 0 descriptor too short (expected 64906, got 45)
[   77.146593][ T2418] bridge0: port 1(bridge_slave_0) entered forwarding state
[   77.162884][ T2429] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   77.171682][   T19] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[   77.181011][   T19] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   77.197288][ T2435] loop4: detected capacity change from 0 to 256
[   77.206453][   T19] usb 3-1: Product: syz
[   77.220693][  T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   77.222606][   T19] usb 3-1: Manufacturer: syz
[   77.232743][   T19] usb 3-1: SerialNumber: syz
[   77.233285][  T788] EXT4-fs (loop3): unmounting filesystem.
[   77.244031][  T411] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.266909][  T411] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.285076][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   77.302030][  T312] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.302793][ T2437] loop4: detected capacity change from 0 to 1024
[   77.309147][  T312] bridge0: port 1(bridge_slave_0) entered forwarding state
[   77.325942][ T2437] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   77.339495][  T325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   77.354204][  T325] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.361293][  T325] bridge0: port 2(bridge_slave_1) entered forwarding state
[   77.370457][ T2437] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   77.381517][  T411] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   77.389999][ T2440] EXT4-fs (loop3): 1 orphan inode deleted
[   77.390027][ T2440] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   77.390153][ T2440] ext4 filesystem being mounted at /132/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   77.396618][  T411] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   77.416881][  T312] EXT4-fs error (device loop3): ext4_release_dquot:6864: comm kworker/u4:3: Failed to release dquot type 1
[   77.446393][ T2437] overlayfs: invalid origin (00000079004c5a2d4f4bba8bad131b97fffe7a22e2c9188cae78f0cb1b8c4f5f2db472c08eaa258df76ea08c12f10f2595f703f26bfb95d7c195427a254027dc)
[   77.468446][  T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   77.479248][  T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   77.497253][  T788] EXT4-fs (loop3): unmounting filesystem.
[   77.500639][  T303] usb 3-1: USB disconnect, device number 6
[   77.512506][   T10] device bridge_slave_1 left promiscuous mode
[   77.518876][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.527202][  T287] EXT4-fs warning (device loop4): empty_inline_dir:1884: bad inline directory (dir #12) - no `..'
[   77.538335][   T10] device bridge_slave_0 left promiscuous mode
[   77.538345][  T287] EXT4-fs warning (device loop4): empty_inline_dir:1884: bad inline directory (dir #12) - no `..'
[   77.544808][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.555614][  T287] EXT4-fs warning (device loop4): empty_inline_dir:1884: bad inline directory (dir #12) - no `..'
[   77.573281][  T287] EXT4-fs warning (device loop4): empty_inline_dir:1884: bad inline directory (dir #12) - no `..'
[   77.584237][   T10] device veth1_macvtap left promiscuous mode
[   77.584352][  T287] EXT4-fs warning (device loop4): empty_inline_dir:1884: bad inline directory (dir #12) - no `..'
[   77.591928][   T10] device veth0_vlan left promiscuous mode
[   77.602571][  T287] EXT4-fs warning (device loop4): empty_inline_dir:1884: bad inline directory (dir #12) - no `..'
[   77.618984][  T287] EXT4-fs warning (device loop4): empty_inline_dir:1884: bad inline directory (dir #12) - no `..'
[   77.630061][  T287] EXT4-fs warning (device loop4): empty_inline_dir:1884: bad inline directory (dir #12) - no `..'
[   77.641114][  T287] EXT4-fs warning (device loop4): empty_inline_dir:1884: bad inline directory (dir #12) - no `..'
[   77.651977][  T287] EXT4-fs warning (device loop4): empty_inline_dir:1884: bad inline directory (dir #12) - no `..'
[   77.734297][ T2418] device veth0_vlan entered promiscuous mode
[   77.742011][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   77.750043][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   77.766458][ T2438] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.773778][ T2438] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.782082][ T2438] device bridge_slave_0 entered promiscuous mode
[   77.782080][  T287] EXT4-fs (loop4): unmounting filesystem.
[   77.782591][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   77.802071][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   77.818898][ T2438] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.835774][ T2438] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.843963][ T2438] device bridge_slave_1 entered promiscuous mode
[   77.856344][ T2418] device veth1_macvtap entered promiscuous mode
[   77.863810][  T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   77.874054][  T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   77.883418][  T325] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   77.901042][  T325] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   77.911164][  T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   77.932207][  T325] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   77.940927][  T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   78.017334][ T2451] exFAT-fs (loop8): failed to load upcase table (idx : 0x00011d3e, chksum : 0x09ccb45e, utbl_chksum : 0xe619d30d)
[   78.027768][ T2438] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.036621][ T2438] bridge0: port 2(bridge_slave_1) entered forwarding state
[   78.044051][ T2438] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.051104][ T2438] bridge0: port 1(bridge_slave_0) entered forwarding state
[   78.094892][  T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   78.103558][  T411] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.114672][  T411] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.148244][  T411] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   78.172980][ T2460] FAT-fs (loop8): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[   78.183191][  T411] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.190247][  T411] bridge0: port 1(bridge_slave_0) entered forwarding state
[   78.237037][  T411] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   78.247725][  T411] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.254841][  T411] bridge0: port 2(bridge_slave_1) entered forwarding state
[   78.276595][  T411] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   78.296133][ T2465] ext4: Unknown parameter 'subj_user'
[   78.303239][  T325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   78.305047][ T2465] 9pnet: p9_errstr2errno: server reported unknown error 
[   78.370251][  T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   78.399606][  T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   78.410784][ T2455] F2FS-fs (loop2): invalid crc value
[   78.421715][  T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   78.433841][ T2455] F2FS-fs (loop2): Found nat_bits in checkpoint
[   78.440436][  T325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   78.451967][  T325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   78.460484][ T2438] device veth0_vlan entered promiscuous mode
[   78.473754][ T2455] F2FS-fs (loop2): Start checkpoint disabled!
[   78.482391][ T2455] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0
[   78.487014][ T2457] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.497000][ T2455] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[   78.497062][ T2457] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.522425][ T2457] device bridge_slave_0 entered promiscuous mode
[   78.531978][  T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   78.540637][  T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   78.551828][ T2438] device veth1_macvtap entered promiscuous mode
[   78.559574][ T2455] bio_check_eod: 6 callbacks suppressed
[   78.559586][ T2455] syz.2.815: attempt to access beyond end of device
[   78.559586][ T2455] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   78.579083][ T2455] syz.2.815: attempt to access beyond end of device
[   78.579083][ T2455] loop2: rw=2049, sector=45120, nr_sectors = 24 limit=40427
[   78.593805][ T2455] syz.2.815: attempt to access beyond end of device
[   78.593805][ T2455] loop2: rw=2049, sector=45168, nr_sectors = 24 limit=40427
[   78.607876][ T2455] syz.2.815: attempt to access beyond end of device
[   78.607876][ T2455] loop2: rw=2049, sector=45216, nr_sectors = 8 limit=40427
[   78.608012][ T2457] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.622143][ T2455] syz.2.815: attempt to access beyond end of device
[   78.622143][ T2455] loop2: rw=2049, sector=45256, nr_sectors = 32 limit=40427
[   78.642859][   T39] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[   78.643160][ T2455] syz.2.815: attempt to access beyond end of device
[   78.643160][ T2455] loop2: rw=2049, sector=45296, nr_sectors = 32 limit=40427
[   78.651230][ T2457] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.672526][ T2457] device bridge_slave_1 entered promiscuous mode
[   78.684141][  T325] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   78.692895][  T325] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   78.702051][  T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   78.714677][  T325] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   78.723148][  T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   78.725905][  T312] kworker/u4:3: attempt to access beyond end of device
[   78.725905][  T312] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[   78.746356][  T312] kworker/u4:3: attempt to access beyond end of device
[   78.746356][  T312] loop2: rw=2049, sector=40992, nr_sectors = 8 limit=40427
[   78.832137][   T24] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   78.840500][   T10] device bridge_slave_1 left promiscuous mode
[   78.846959][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.852899][   T39] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[   78.864221][   T10] device bridge_slave_0 left promiscuous mode
[   78.867445][   T39] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[   78.870720][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.884742][ T2482] ext4: Unknown parameter 'subj_user'
[   78.894477][   T39] usb 9-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00
[   78.899376][ T2482] 9pnet: p9_errstr2errno: server reported unknown error 
[   78.904420][   T39] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   78.919457][   T10] device veth1_macvtap left promiscuous mode
[   78.920127][   T39] usb 9-1: Product: syz
[   78.930553][   T39] usb 9-1: Manufacturer: syz
[   78.933310][   T10] device veth0_vlan left promiscuous mode
[   78.935780][   T39] usb 9-1: SerialNumber: syz
[   78.955529][   T39] ums-sddr09 9-1:1.0: USB Mass Storage device detected
[   78.973322][   T39] ums-sddr09 9-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller)
[   78.973322][   T39]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[   79.023173][   T24] usb 4-1: config index 0 descriptor too short (expected 64906, got 45)
[   79.033757][   T24] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[   79.043353][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   79.051641][   T24] usb 4-1: Product: syz
[   79.056236][   T24] usb 4-1: Manufacturer: syz
[   79.060916][   T24] usb 4-1: SerialNumber: syz
[   79.075946][ T2457] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.083081][ T2457] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.090491][ T2457] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.098409][ T2457] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.141988][  T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   79.163591][  T325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   79.179110][  T325] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.206924][  T325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   79.224471][  T325] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.231809][  T325] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.246243][  T325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   79.256769][ T2492] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   79.275204][ T2492] ext4 filesystem being mounted at /163/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   79.287057][  T325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   79.303033][  T308] usb 4-1: USB disconnect, device number 5
[   79.337028][ T2492] EXT4-fs error (device loop2): ext4_lookup:1858: inode #12: comm syz.2.826: iget: bad i_size value: 2533274857506816
[   79.356816][ T2499] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   79.356995][  T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   79.377332][ T2457] device veth0_vlan entered promiscuous mode
[   79.385207][  T290] EXT4-fs (loop2): unmounting filesystem.
[   79.393249][  T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   79.401484][  T325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   79.401804][ T2499] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[   79.409286][  T325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   79.446189][  T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   79.455159][  T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   79.462658][ T2499] overlayfs: invalid origin (00000079004c5a2d4f4bba8bad131b97fffe7a22e2c9188cae78f0cb1b8c4f5f2db472c08eaa258df76ea08c12f10f2595f703f26bfb95d7c195427a254027dc)
[   79.470470][ T2457] device veth1_macvtap entered promiscuous mode
[   79.509833][ T2438] EXT4-fs warning (device loop9): empty_inline_dir:1884: bad inline directory (dir #12) - no `..'
[   79.521305][ T2438] EXT4-fs warning (device loop9): empty_inline_dir:1884: bad inline directory (dir #12) - no `..'
[   79.534236][ T2438] EXT4-fs warning (device loop9): empty_inline_dir:1884: bad inline directory (dir #12) - no `..'
[   79.534299][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   79.546195][ T2438] EXT4-fs warning (device loop9): empty_inline_dir:1884: bad inline directory (dir #12) - no `..'
[   79.554221][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   79.572452][ T2438] EXT4-fs warning (device loop9): empty_inline_dir:1884: bad inline directory (dir #12) - no `..'
[   79.573419][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   79.584165][ T2438] EXT4-fs warning (device loop9): empty_inline_dir:1884: bad inline directory (dir #12) - no `..'
[   79.592214][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   79.603280][ T2438] EXT4-fs warning (device loop9): empty_inline_dir:1884: bad inline directory (dir #12) - no `..'
[   79.612302][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   79.625480][ T2438] EXT4-fs warning (device loop9): empty_inline_dir:1884: bad inline directory (dir #12) - no `..'
[   79.642059][ T2438] EXT4-fs warning (device loop9): empty_inline_dir:1884: bad inline directory (dir #12) - no `..'
[   79.656131][ T2438] EXT4-fs warning (device loop9): empty_inline_dir:1884: bad inline directory (dir #12) - no `..'
[   79.754974][ T2438] EXT4-fs (loop9): unmounting filesystem.
[   79.889439][ T2508] F2FS-fs (loop4): invalid crc value
[   79.912704][ T2508] F2FS-fs (loop4): Found nat_bits in checkpoint
[   79.966804][ T2508] F2FS-fs (loop4): Start checkpoint disabled!
[   79.988287][ T2508] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0
[   79.996448][   T39] scsi host1: usb-storage 9-1:1.0
[   80.014771][   T39] usb 9-1: USB disconnect, device number 2
[   80.035041][ T2518] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001)
[   80.041503][ T2508] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[   80.076719][ T2518] FAT-fs (loop3): Filesystem has been set read-only
[   80.128937][ T2508] syz.4.822: attempt to access beyond end of device
[   80.128937][ T2508] loop4: rw=2049, sector=77824, nr_sectors = 136 limit=40427
[   80.185521][ T2508] syz.4.822: attempt to access beyond end of device
[   80.185521][ T2508] loop4: rw=2049, sector=45096, nr_sectors = 128 limit=40427
[   80.303985][  T312] device bridge_slave_1 left promiscuous mode
[   80.310303][  T312] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.338601][  T312] device bridge_slave_0 left promiscuous mode
[   80.345369][  T312] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.365310][  T312] device veth1_macvtap left promiscuous mode
[   80.382693][  T312] device veth0_vlan left promiscuous mode
[   80.479523][ T2510] F2FS-fs (loop2): invalid crc value
[   80.496886][ T2532] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   80.519093][ T2532] ext4 filesystem being mounted at /141/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   80.567038][ T2532] EXT4-fs error (device loop3): ext4_lookup:1858: inode #12: comm syz.3.841: iget: bad i_size value: 2533274857506816
[   80.586568][ T2510] F2FS-fs (loop2): Found nat_bits in checkpoint
[   80.661997][  T788] EXT4-fs (loop3): unmounting filesystem.
[   80.667975][ T2510] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[   80.756443][ T2521] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.782048][ T2521] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.789849][ T2521] device bridge_slave_0 entered promiscuous mode
[   80.818618][ T2521] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.825902][ T2521] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.834073][ T2521] device bridge_slave_1 entered promiscuous mode
[   80.846141][ T2546] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   80.927671][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   80.936984][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   80.951024][  T788] EXT4-fs (loop3): unmounting filesystem.
[   80.963338][  T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   80.973153][  T325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   80.981422][  T325] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.988507][  T325] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.998170][  T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   81.017134][  T325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   81.025726][  T325] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.032891][  T325] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.041885][  T325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   81.064664][  T325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   81.088996][  T325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   81.131526][  T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   81.145819][  T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   81.162401][  T325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   81.177745][  T325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   81.190842][ T2559] set_capacity_and_notify: 13 callbacks suppressed
[   81.190866][ T2559] loop2: detected capacity change from 0 to 256
[   81.204822][ T2521] device veth0_vlan entered promiscuous mode
[   81.219717][  T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   81.231828][   T24] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   81.243451][ T2521] device veth1_macvtap entered promiscuous mode
[   81.252534][ T2559] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001)
[   81.256035][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   81.272325][ T2559] FAT-fs (loop2): Filesystem has been set read-only
[   81.283352][  T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   81.284076][ T2557] loop3: detected capacity change from 0 to 40427
[   81.305037][ T2557] F2FS-fs (loop3): invalid crc value
[   81.327140][ T2557] F2FS-fs (loop3): Found nat_bits in checkpoint
[   81.329908][ T2561] loop9: detected capacity change from 0 to 256
[   81.342038][ T1517] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[   81.405139][ T2557] F2FS-fs (loop3): Start checkpoint disabled!
[   81.414638][ T2557] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0
[   81.423165][ T2557] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[   81.444380][   T24] usb 5-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 0.00
[   81.464736][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   81.484529][   T24] usb 5-1: Product: syz
[   81.491733][   T24] usb 5-1: Manufacturer: syz
[   81.502234][   T24] usb 5-1: SerialNumber: syz
[   81.516627][   T24] pl2303 5-1:1.0: pl2303 converter detected
[   81.534016][   T24] pl2303 5-1:1.0: unknown device type, please report to linux-usb@vger.kernel.org
[   81.563173][ T1517] usb 9-1: config index 0 descriptor too short (expected 64906, got 45)
[   81.574551][   T28] kauditd_printk_skb: 97 callbacks suppressed
[   81.574568][   T28] audit: type=1400 audit(1789376291.380:470): avc:  denied  { execheap } for  pid=2580 comm="syz.9.860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   81.607222][ T1517] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[   81.621663][ T1517] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   81.631047][ T1517] usb 9-1: Product: syz
[   81.635736][ T1517] usb 9-1: Manufacturer: syz
[   81.645126][ T2586] loop9: detected capacity change from 0 to 256
[   81.645313][ T1517] usb 9-1: SerialNumber: syz
[   81.723928][ T2586] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000001)
[   81.737057][ T2586] FAT-fs (loop9): Filesystem has been set read-only
[   81.884944][ T1517] usb 9-1: USB disconnect, device number 3
[   82.095002][ T2609] loop9: detected capacity change from 0 to 40427
[   82.105216][ T2609] F2FS-fs (loop9): invalid crc value
[   82.112158][ T2609] F2FS-fs (loop9): Found nat_bits in checkpoint
[   82.150249][ T2609] F2FS-fs (loop9): Start checkpoint disabled!
[   82.154242][ T2615] loop2: detected capacity change from 0 to 1024
[   82.164121][ T2609] F2FS-fs (loop9): f2fs_disable_checkpoint() finish, err:0
[   82.178253][ T2609] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6
[   82.214606][ T2615] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   82.253400][  T290] EXT4-fs (loop2): unmounting filesystem.
[   82.290988][   T28] audit: type=1400 audit(1789376292.090:471): avc:  denied  { read write } for  pid=2628 comm="syz.2.886" name="vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   82.323022][   T28] audit: type=1400 audit(1789376292.130:472): avc:  denied  { open } for  pid=2628 comm="syz.2.886" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   82.347799][   T28] audit: type=1400 audit(1789376292.130:473): avc:  denied  { ioctl } for  pid=2628 comm="syz.2.886" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   82.590340][ T2658] loop9: detected capacity change from 0 to 1024
[   82.600386][ T2660] loop2: detected capacity change from 0 to 128
[   82.629074][ T2660] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   82.638073][ T2660] ext4 filesystem being mounted at /182/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   82.661687][ T2658] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[   82.679552][  T290] EXT4-fs (loop2): unmounting filesystem.
[   82.706072][ T2521] EXT4-fs (loop9): unmounting filesystem.
[   82.739387][ T2656] loop8: detected capacity change from 0 to 40427
[   82.751703][  T308] usb 4-1: new full-speed USB device number 6 using dummy_hcd
[   82.759998][ T2656] F2FS-fs (loop8): invalid crc value
[   82.772370][ T2656] F2FS-fs (loop8): Found nat_bits in checkpoint
[   82.818792][ T2656] F2FS-fs (loop8): Start checkpoint disabled!
[   82.825569][ T2656] F2FS-fs (loop8): f2fs_disable_checkpoint() finish, err:0
[   82.833621][ T2656] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6
[   82.932790][  T308] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[   82.941168][  T308] usb 4-1: config 0 has no interface number 0
[   82.951371][  T308] usb 4-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   82.976401][  T308] usb 4-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[   83.002822][  T308] usb 4-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   83.015830][ T2677] loop8: detected capacity change from 0 to 256
[   83.023256][  T308] usb 4-1: config 0 interface 1 has no altsetting 0
[   83.033938][  T308] usb 4-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00
[   83.044976][  T308] usb 4-1: New USB device strings: Mfr=93, Product=0, SerialNumber=0
[   83.059353][  T308] usb 4-1: Manufacturer: syz
[   83.074037][  T308] usb 4-1: config 0 descriptor??
[   83.097399][ T2681] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[   83.130603][ T2521] EXT4-fs (loop9): unmounting filesystem.
[   83.155667][   T28] audit: type=1400 audit(1789376292.960:474): avc:  denied  { mounton } for  pid=2685 comm="syz.8.899" path="/14/file0" dev="incremental-fs" ino=95 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   83.200281][   T28] audit: type=1400 audit(1789376292.980:475): avc:  denied  { getattr } for  pid=2685 comm="syz.8.899" name="/" dev="incremental-fs" ino=95 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   83.468861][ T2695] F2FS-fs (loop9): Invalid SB checksum offset: 0
[   83.475705][ T2695] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock
[   83.484430][ T2695] F2FS-fs (loop9): invalid crc value
[   83.498555][ T2695] F2FS-fs (loop9): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[   83.514581][ T2702] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[   83.539713][ T2418] EXT4-fs (loop8): unmounting filesystem.
[   83.543301][ T2695] F2FS-fs (loop9): Try to recover 2th superblock, ret: 0
[   83.553812][ T2695] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[   83.593119][ T2521] bio_check_eod: 10 callbacks suppressed
[   83.593137][ T2521] syz-executor: attempt to access beyond end of device
[   83.593137][ T2521] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   83.667277][ T2713] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   83.687865][  T308] uclogic 0003:145F:0212.0004: pen parameters not found
[   83.698522][  T308] uclogic 0003:145F:0212.0004: interface is invalid, ignoring
[   83.713204][  T308] usb 4-1: USB disconnect, device number 6
[   83.743094][  T290] EXT4-fs (loop2): unmounting filesystem.
[   83.911667][  T303] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[   83.963275][  T308] usb 5-1: USB disconnect, device number 5
[   84.106189][  T303] usb 9-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00
[   84.121954][  T303] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   84.142500][  T303] usb-storage 9-1:1.0: USB Mass Storage device detected
[   84.161378][  T303] scsi host1: usb-storage 9-1:1.0
[   84.260303][ T2739] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   84.271674][ T1517] usb 3-1: new full-speed USB device number 7 using dummy_hcd
[   84.287365][  T788] EXT4-fs (loop3): unmounting filesystem.
[   84.302562][   T28] audit: type=1400 audit(1789376294.110:476): avc:  denied  { mounton } for  pid=2744 comm="syz.3.918" path="/proc/349/task" dev="proc" ino=28855 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[   84.339262][   T28] audit: type=1400 audit(1789376294.140:477): avc:  denied  { ioctl } for  pid=2748 comm="syz.3.919" path="socket:[28865]" dev="sockfs" ino=28865 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   84.462480][ T1517] usb 3-1: not running at top speed; connect to a high speed hub
[   84.471298][ T1517] usb 3-1: config 0 has too many interfaces: 223, using maximum allowed: 32
[   84.483145][ T1517] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   84.493417][ T1517] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 223
[   84.502616][ T1517] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[   84.512265][ T1517] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   84.521172][ T1517] usb 3-1: config 0 descriptor??
[   84.527709][ T1517] usb 3-1: Found UVC 9.00 device <unnamed> (046d:0825)
[   84.852175][ T2756] syz.9.923 (2756) used greatest stack depth: 18504 bytes left
[   84.870339][ T2759] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   84.881300][ T2759] ext4 filesystem being mounted at /159/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   84.905431][  T788] EXT4-fs (loop3): unmounting filesystem.
[   84.928370][ T1517] usb 3-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround.
[   84.965600][  T312] kworker/u4:3: attempt to access beyond end of device
[   84.965600][  T312] loop3: rw=1, sector=145, nr_sectors = 6 limit=128
[   85.100822][   T28] audit: type=1400 audit(1789376294.900:478): avc:  denied  { getopt } for  pid=2767 comm="syz.3.937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   85.131247][   T28] audit: type=1400 audit(1789376294.930:479): avc:  denied  { bind } for  pid=2773 comm="syz.3.929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   85.131644][  T308] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[   85.167736][  T295] usb 3-1: USB disconnect, device number 7
[   85.354247][  T308] usb 10-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 0.00
[   85.363826][  T308] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   85.372294][  T308] usb 10-1: Product: syz
[   85.377078][  T308] usb 10-1: Manufacturer: syz
[   85.381880][  T308] usb 10-1: SerialNumber: syz
[   85.388068][  T308] pl2303 10-1:1.0: pl2303 converter detected
[   85.391636][  T335] usb 5-1: new full-speed USB device number 6 using dummy_hcd
[   85.394326][  T308] pl2303 10-1:1.0: unknown device type, please report to linux-usb@vger.kernel.org
[   85.582686][  T335] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[   85.590924][  T335] usb 5-1: config 0 has no interface number 0
[   85.597645][  T335] usb 5-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   85.609324][  T335] usb 5-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[   85.619708][  T335] usb 5-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   85.633313][  T335] usb 5-1: config 0 interface 1 has no altsetting 0
[   85.640804][  T335] usb 5-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00
[   85.649955][  T335] usb 5-1: New USB device strings: Mfr=93, Product=0, SerialNumber=0
[   85.658096][  T335] usb 5-1: Manufacturer: syz
[   85.663757][  T335] usb 5-1: config 0 descriptor??
[   86.275869][  T335] uclogic 0003:145F:0212.0005: pen parameters not found
[   86.284385][  T335] uclogic 0003:145F:0212.0005: interface is invalid, ignoring
[   86.293355][  T335] usb 5-1: USB disconnect, device number 6
[   86.626589][  T335] usb 9-1: USB disconnect, device number 4
[   86.806373][ T2783] input: syz1 as /devices/virtual/input/input11
[   86.821016][ T2784] set_capacity_and_notify: 7 callbacks suppressed
[   86.821035][ T2784] loop4: detected capacity change from 0 to 1024
[   86.864329][ T2784] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   86.904217][ T2457] EXT4-fs (loop4): unmounting filesystem.
[   86.934649][ T2804] loop4: detected capacity change from 0 to 128
[   86.936293][ T2802] loop3: detected capacity change from 0 to 512
[   86.974413][ T2809] loop3: detected capacity change from 0 to 512
[   86.983780][ T2809] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   86.996117][ T2809] ext4 filesystem being mounted at /169/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   87.022364][   T28] audit: type=1400 audit(1789376296.830:480): avc:  denied  { mount } for  pid=2811 comm="syz.2.944" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1
[   87.052646][  T788] EXT4-fs (loop3): unmounting filesystem.
[   87.096960][   T10] kworker/u4:1: attempt to access beyond end of device
[   87.096960][   T10] loop4: rw=1, sector=145, nr_sectors = 6 limit=128
[   87.138545][ T2821] loop4: detected capacity change from 0 to 256
[   87.163435][ T2825] loop3: detected capacity change from 0 to 256
[   87.173886][ T2821] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[   87.197667][ T2825] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d)
[   87.225576][ T2829] loop4: detected capacity change from 0 to 128
[   87.239094][ T2829] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   87.248908][ T2829] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   87.271930][ T2457] EXT4-fs (loop4): unmounting filesystem.
[   87.313627][ T2835] loop3: detected capacity change from 0 to 512
[   87.381022][ T2844] loop4: detected capacity change from 0 to 512
[   87.395467][ T2844] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   87.404653][ T2844] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   87.430506][ T2457] EXT4-fs (loop4): unmounting filesystem.
[   87.722743][ T2851] loop8: detected capacity change from 0 to 128
[   87.785045][   T43] kworker/u4:2: attempt to access beyond end of device
[   87.785045][   T43] loop8: rw=1, sector=145, nr_sectors = 6 limit=128
[   87.892814][  T308] usb 10-1: USB disconnect, device number 2
[   87.959250][ T2877] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[   87.973187][ T2877] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   88.019822][ T2418] EXT4-fs (loop8): unmounting filesystem.
[   88.119456][   T10] kworker/u4:1: attempt to access beyond end of device
[   88.119456][   T10] loop2: rw=1, sector=145, nr_sectors = 6 limit=128
[   88.191641][   T28] audit: type=1400 audit(1789376297.990:481): avc:  denied  { ioctl } for  pid=2900 comm="syz.8.982" path="/30/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   88.228342][   T28] audit: type=1400 audit(1789376298.000:482): avc:  denied  { create } for  pid=2903 comm="syz.2.984" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key_socket permissive=1
[   88.321673][  T308] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[   88.511644][  T308] usb 5-1: Using ep0 maxpacket: 16
[   88.518717][  T308] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   88.529330][  T308] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[   88.532272][  T312] kworker/u4:3: attempt to access beyond end of device
[   88.532272][  T312] loop9: rw=1, sector=145, nr_sectors = 6 limit=128
[   88.540352][  T308] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   88.561408][  T308] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   88.569808][  T308] usb 5-1: Product: syz
[   88.602616][  T308] usb 5-1: Manufacturer: syz
[   88.609163][  T308] usb 5-1: SerialNumber: syz
[   88.826278][  T308] usb 5-1: 0:2 : does not exist
[   88.833935][  T308] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[   88.846746][  T308] usb 5-1: USB disconnect, device number 7
[   88.915199][ T2936] input: syz1 as /devices/virtual/input/input12
[   88.942333][ T2939] syz.9.1007: attempt to access beyond end of device
[   88.942333][ T2939] loop9: rw=2049, sector=256, nr_sectors = 4 limit=256
[   89.009004][ T2946] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d)
[   89.106412][   T43] kworker/u4:2: attempt to access beyond end of device
[   89.106412][   T43] loop9: rw=1, sector=145, nr_sectors = 6 limit=128
[   89.202478][   T28] audit: type=1400 audit(1789376299.010:483): avc:  denied  { mounton } for  pid=2957 comm="syz.2.1003" path="/208/dev/kmsg" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1
[   89.352049][ T2962] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[   89.363931][ T2962] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   89.373479][ T2962] F2FS-fs (loop2): Unrecognized mount option "Í
" or missing value
[   89.391969][  T308] usb 10-1: new full-speed USB device number 3 using dummy_hcd
[   89.551646][  T335] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[   89.593397][  T308] usb 10-1: unable to get BOS descriptor or descriptor too short
[   89.601752][  T308] usb 10-1: not running at top speed; connect to a high speed hub
[   89.610569][  T308] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4
[   89.623394][  T308] usb 10-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[   89.633045][  T308] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   89.641224][  T308] usb 10-1: Product: syz
[   89.645690][  T308] usb 10-1: Manufacturer: syz
[   89.650412][  T308] usb 10-1: SerialNumber: syz
[   89.655146][  T295] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[   89.671654][   T24] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[   89.732855][  T335] usb 9-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[   89.742233][  T335] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   89.750984][  T335] usb 9-1: config 0 descriptor??
[   89.842129][  T295] usb 5-1: Using ep0 maxpacket: 16
[   89.852073][   T24] usb 3-1: too many configurations: 16, using maximum allowed: 8
[   89.863964][  T295] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   89.875746][  T308] usb 10-1: 1:1 : UAC_AS_GENERAL descriptor not found
[   89.883924][  T295] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   89.894231][  T295] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   89.908206][  T295] usb 5-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00
[   89.918676][  T295] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   89.928025][  T295] usb 5-1: config 0 descriptor??
[   89.938698][   T24] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice= 0.00
[   89.948046][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   89.956299][   T24] usb 3-1: Product: syz
[   89.960591][   T24] usb 3-1: Manufacturer: syz
[   89.965295][   T24] usb 3-1: SerialNumber: syz
[   90.075514][  T308] usb 10-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[   90.084227][  T308] usb 10-1: found format II with max.bitrate = 4, frame size=7372
[   90.178470][ T2969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   90.187180][ T2969] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   90.338122][  T295] hid-generic 0003:0457:07DA.0006: unknown main item tag 0x0
[   90.346465][  T295] hid-generic 0003:0457:07DA.0006: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.4-1/input0
[   90.397379][  T303] usb 3-1: USB disconnect, device number 8
[   90.476437][  T308] usb 10-1: invalid uac2 rates
[   90.481453][  T308] usb 10-1: invalid uac2 rates
[   90.486603][  T308] usb 10-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[   90.495272][  T308] usb 10-1: found format II with max.bitrate = 4, frame size=7372
[   90.612624][   T39] usb 5-1: USB disconnect, device number 8
[   90.676964][  T308] usb 10-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0)
[   90.690448][  T308] usb 10-1: USB disconnect, device number 3
[   90.764280][  T335] usb 9-1: Cannot set autoneg
[   90.769087][  T335] MOSCHIP usb-ethernet driver: probe of 9-1:0.0 failed with error -71
[   90.778487][  T335] usb 9-1: USB disconnect, device number 5
[   90.902132][ T2715] udevd[2715]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   91.293308][   T28] audit: type=1400 audit(1789376301.100:484): avc:  denied  { connect } for  pid=2978 comm="syz.4.1026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   91.341600][   T28] audit: type=1400 audit(1789376301.120:485): avc:  denied  { ioctl } for  pid=2978 comm="syz.4.1026" path="socket:[29984]" dev="sockfs" ino=29984 ioctlcmd=0x48c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   91.367224][   T43] kworker/u4:2: attempt to access beyond end of device
[   91.367224][   T43] loop2: rw=1, sector=145, nr_sectors = 6 limit=128
[   91.395795][ T2989] input: syz1 as /devices/virtual/input/input13
[   91.636073][   T43] kworker/u4:2: attempt to access beyond end of device
[   91.636073][   T43] loop3: rw=1, sector=145, nr_sectors = 6 limit=128
[   91.751632][ T1517] usb 9-1: new full-speed USB device number 6 using dummy_hcd
[   91.773559][ T3027] EXT4-fs (loop4): orphan cleanup on readonly fs
[   91.780808][ T3027] EXT4-fs warning (device loop4): ext4_enable_quotas:7080: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[   91.796382][ T3027] EXT4-fs (loop4): Cannot turn on quotas: error -22
[   91.803624][ T3027] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #13: comm syz.4.1038: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[   91.822285][ T3027] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.1038: couldn't read orphan inode 13 (err -117)
[   91.834956][ T3027] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   91.856536][ T3025] set_capacity_and_notify: 12 callbacks suppressed
[   91.856556][ T3025] loop3: detected capacity change from 0 to 40427
[   91.870344][ T2457] EXT4-fs (loop4): unmounting filesystem.
[   91.879500][ T3025] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[   91.898149][ T3025] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   91.907400][ T3025] F2FS-fs (loop3): invalid crc value
[   91.914021][ T3025] F2FS-fs (loop3): Found nat_bits in checkpoint
[   91.936583][ T3025] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   91.943888][ T3025] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   91.952746][ T1517] usb 9-1: config 0 has an invalid interface number: 1 but max is 0
[   91.970564][ T1517] usb 9-1: config 0 has no interface number 0
[   91.978889][ T1517] usb 9-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   91.993669][ T1517] usb 9-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[   92.005892][ T1517] usb 9-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   92.018973][ T1517] usb 9-1: config 0 interface 1 has no altsetting 0
[   92.026465][ T1517] usb 9-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00
[   92.035635][ T1517] usb 9-1: New USB device strings: Mfr=93, Product=0, SerialNumber=0
[   92.043755][ T1517] usb 9-1: Manufacturer: syz
[   92.052133][ T1517] usb 9-1: config 0 descriptor??
[   92.247932][ T3049] loop3: detected capacity change from 0 to 128
[   92.347386][  T312] kworker/u4:3: attempt to access beyond end of device
[   92.347386][  T312] loop3: rw=1, sector=145, nr_sectors = 6 limit=128
[   92.465147][ T3063] loop9: detected capacity change from 0 to 8192
[   92.478020][ T3063] syz.9.1052: attempt to access beyond end of device
[   92.478020][ T3063] loop9: rw=0, sector=57847, nr_sectors = 1 limit=8192
[   92.495139][ T3063] Buffer I/O error on dev loop9, logical block 57847, async page read
[   92.504756][ T3063] syz.9.1052: attempt to access beyond end of device
[   92.504756][ T3063] loop9: rw=0, sector=57847, nr_sectors = 1 limit=8192
[   92.518759][ T3063] Buffer I/O error on dev loop9, logical block 57847, async page read
[   92.527436][ T3063] syz.9.1052: attempt to access beyond end of device
[   92.527436][ T3063] loop9: rw=0, sector=57847, nr_sectors = 1 limit=8192
[   92.541717][ T3063] Buffer I/O error on dev loop9, logical block 57847, async page read
[   92.551333][ T3063] syz.9.1052: attempt to access beyond end of device
[   92.551333][ T3063] loop9: rw=0, sector=57847, nr_sectors = 1 limit=8192
[   92.555852][ T3068] loop3: detected capacity change from 0 to 1024
[   92.564888][ T3063] Buffer I/O error on dev loop9, logical block 57847, async page read
[   92.564968][ T3063] syz.9.1052: attempt to access beyond end of device
[   92.564968][ T3063] loop9: rw=0, sector=57847, nr_sectors = 1 limit=8192
[   92.583381][ T3068] EXT4-fs: Ignoring removed orlov option
[   92.593470][ T3063] Buffer I/O error on dev loop9, logical block 57847, async page read
[   92.599285][   T24] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[   92.615687][ T3063] Buffer I/O error on dev loop9, logical block 57847, async page read
[   92.624242][ T3063] Buffer I/O error on dev loop9, logical block 57847, async page read
[   92.632918][ T3063] Buffer I/O error on dev loop9, logical block 57847, async page read
[   92.641724][ T3063] Buffer I/O error on dev loop9, logical block 57847, async page read
[   92.650325][ T3063] Buffer I/O error on dev loop9, logical block 57847, async page read
[   92.659254][ T3068] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   92.672806][ T1517] uclogic 0003:145F:0212.0007: pen parameters not found
[   92.679904][ T1517] uclogic 0003:145F:0212.0007: interface is invalid, ignoring
[   92.703062][ T1517] usb 9-1: USB disconnect, device number 6
[   92.715843][  T788] EXT4-fs (loop3): unmounting filesystem.
[   92.791831][   T24] usb 3-1: Using ep0 maxpacket: 16
[   92.798289][   T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   92.808781][   T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[   92.830389][   T24] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   92.840256][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   92.856319][   T24] usb 3-1: Product: syz
[   92.860791][   T24] usb 3-1: Manufacturer: syz
[   92.865683][   T24] usb 3-1: SerialNumber: syz
[   93.080574][   T24] usb 3-1: 0:2 : does not exist
[   93.087922][   T24] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[   93.117214][   T24] usb 3-1: USB disconnect, device number 9
[   93.222144][ T3088] loop8: detected capacity change from 0 to 128
[   93.561641][   T24] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[   93.636538][   T28] audit: type=1400 audit(1789376303.440:486): avc:  denied  { wake_alarm } for  pid=3097 comm="syz.2.1065" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   93.686157][ T3102] xt_hashlimit: size too large, truncated to 1048576
[   93.716847][ T3106] loop2: detected capacity change from 0 to 1024
[   93.730540][ T3106] EXT4-fs: Ignoring removed orlov option
[   93.754582][ T3106] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   93.763720][   T24] usb 10-1: too many configurations: 16, using maximum allowed: 8
[   93.782387][   T24] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice= 0.00
[   93.792051][   T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.793102][  T290] EXT4-fs (loop2): unmounting filesystem.
[   93.801887][   T24] usb 10-1: Product: syz
[   93.810607][   T24] usb 10-1: Manufacturer: syz
[   93.815643][   T24] usb 10-1: SerialNumber: syz
[   93.919524][ T3118] loop3: detected capacity change from 0 to 128
[   94.017179][  T312] bio_check_eod: 34169 callbacks suppressed
[   94.017197][  T312] kworker/u4:3: attempt to access beyond end of device
[   94.017197][  T312] loop3: rw=1, sector=145, nr_sectors = 6 limit=128
[   94.048566][ T3090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   94.067369][ T3090] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   94.099609][ T3130] loop3: detected capacity change from 0 to 512
[   94.137412][ T3130] EXT4-fs (loop3): orphan cleanup on readonly fs
[   94.145898][ T3130] EXT4-fs warning (device loop3): ext4_enable_quotas:7080: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[   94.160384][ T3122] loop2: detected capacity change from 0 to 40427
[   94.160911][ T3130] EXT4-fs (loop3): Cannot turn on quotas: error -22
[   94.174032][ T3130] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #13: comm syz.3.1077: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[   94.184458][ T3122] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[   94.201242][ T3130] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.1077: couldn't read orphan inode 13 (err -117)
[   94.221745][ T3122] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   94.253074][ T3122] F2FS-fs (loop2): invalid crc value
[   94.276397][ T3122] F2FS-fs (loop2): Found nat_bits in checkpoint
[   94.285342][  T308] usb 10-1: USB disconnect, device number 4
[   94.331898][ T3122] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   94.344787][ T3122] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   94.666028][ T3143] loop4: detected capacity change from 0 to 1024
[   94.673071][ T3143] EXT4-fs: Ignoring removed orlov option
[   94.848365][   T10] kworker/u4:1: attempt to access beyond end of device
[   94.848365][   T10] loop4: rw=1, sector=145, nr_sectors = 6 limit=128
[   94.931660][ T1517] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[   95.111703][ T1517] usb 3-1: Using ep0 maxpacket: 16
[   95.118019][ T1517] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   95.128973][ T1517] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   95.138750][ T1517] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   95.151797][ T1517] usb 3-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00
[   95.160937][ T1517] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   95.170018][ T1517] usb 3-1: config 0 descriptor??
[   95.391610][   T45] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   95.391617][ T3096] Bluetooth: hci0: command 0x1003 tx timeout
[   95.432512][ T3172] EXT4-fs (loop8): orphan cleanup on readonly fs
[   95.439303][ T3172] EXT4-fs warning (device loop8): ext4_enable_quotas:7080: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[   95.454513][ T3172] EXT4-fs (loop8): Cannot turn on quotas: error -22
[   95.461674][ T3172] EXT4-fs error (device loop8): ext4_ext_check_inode:520: inode #13: comm syz.8.1091: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[   95.481193][ T3172] EXT4-fs error (device loop8): ext4_orphan_get:1410: comm syz.8.1091: couldn't read orphan inode 13 (err -117)
[   95.542611][ T3178] erofs: (device loop3): mounted with root inode @ nid 36.
[   95.580562][ T3178] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[   95.581124][ T1517] hid-generic 0003:0457:07DA.0008: unknown main item tag 0x0
[   95.598034][ T3178] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -37 in[64, 4032] out[1851]
[   95.609368][ T3178] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117]
[   95.612738][ T1517] hid-generic 0003:0457:07DA.0008: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.2-1/input0
[   95.620125][ T3178] syz.3.1106: attempt to access beyond end of device
[   95.620125][ T3178] loop3: rw=524288, sector=16, nr_sectors = 16 limit=16
[   95.661141][ T3178] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -37 in[64, 4032] out[3797]
[   95.883728][ T3199] xt_hashlimit: size too large, truncated to 1048576
[   95.893243][ T1517] usb 3-1: USB disconnect, device number 10
[   96.017239][ T3202] Zero length message leads to an empty skb
[   96.061618][  T303] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[   96.090551][ T3206] netlink: 48 bytes leftover after parsing attributes in process `syz.8.1117'.
[   96.111515][ T3206] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1117'.
[   96.143699][ T3206] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1117'.
[   96.185373][ T3212] ext4: Unknown parameter 'nouser_xattr'
[   96.213210][   T28] audit: type=1400 audit(1789376306.020:487): avc:  denied  { unmount } for  pid=2521 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   96.262130][  T303] usb 4-1: too many configurations: 16, using maximum allowed: 8
[   96.265339][ T3218] xt_hashlimit: size too large, truncated to 1048576
[   96.286862][  T303] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice= 0.00
[   96.311586][  T303] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.319733][  T303] usb 4-1: Product: syz
[   96.338983][  T303] usb 4-1: Manufacturer: syz
[   96.351594][  T303] usb 4-1: SerialNumber: syz
[   96.517072][ T3221] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.526834][ T3221] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.537894][ T3221] device bridge_slave_0 entered promiscuous mode
[   96.557372][ T3221] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.570914][ T3195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   96.579743][ T3195] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   96.599500][ T3221] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.608110][ T3221] device bridge_slave_1 entered promiscuous mode
[   96.708413][  T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   96.716233][  T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   96.737721][  T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   96.746246][  T325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   96.754985][  T325] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.762077][  T325] bridge0: port 1(bridge_slave_0) entered forwarding state
[   96.769662][  T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   96.778355][  T325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   96.787087][  T325] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.794154][  T325] bridge0: port 2(bridge_slave_1) entered forwarding state
[   96.802405][  T308] usb 4-1: USB disconnect, device number 7
[   96.803430][  T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   96.816882][  T325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   96.825119][  T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   96.833581][  T325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   96.850341][ T3221] device veth0_vlan entered promiscuous mode
[   96.859050][  T325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   96.866940][  T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   96.875532][  T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   96.884750][  T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   96.893125][  T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   96.902579][   T10] device bridge_slave_1 left promiscuous mode
[   96.909055][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.916781][   T10] device bridge_slave_0 left promiscuous mode
[   96.923026][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.930985][   T10] device veth1_macvtap left promiscuous mode
[   96.937337][   T10] device veth0_vlan left promiscuous mode
[   97.041826][  T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   97.050322][  T325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   97.059232][  T325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   97.076244][ T3221] device veth1_macvtap entered promiscuous mode
[   97.094201][  T325] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   97.104695][  T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   97.115118][  T325] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   97.124725][  T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   97.190707][ T3247] set_capacity_and_notify: 4 callbacks suppressed
[   97.190727][ T3247] loop2: detected capacity change from 0 to 2048
[   97.211939][ T3247] EXT4-fs: Ignoring removed i_version option
[   97.247709][ T3247] ext4 filesystem being mounted at /229/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   97.294016][ T3252] x86/PAT: syz.1.1125:3252 freeing invalid memtype [mem 0xfe004000-0xfe008fff]
[   97.312554][ T3252] x86/PAT: syz.1.1125:3252 freeing invalid memtype [mem 0xfe000000-0xfe003fff]
[   97.358686][ T3256] loop1: detected capacity change from 0 to 16
[   97.370600][ T3256] erofs: (device loop1): mounted with root inode @ nid 36.
[   97.383976][ T3256] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[   97.414557][ T3256] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -37 in[64, 4032] out[1851]
[   97.447861][ T3261] loop3: detected capacity change from 0 to 1024
[   97.458049][ T3256] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117]
[   97.478298][ T3263] syz.1.1127: attempt to access beyond end of device
[   97.478298][ T3263] loop1: rw=524288, sector=16, nr_sectors = 16 limit=16
[   97.502471][ T3263] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -37 in[64, 4032] out[3797]
[   97.513505][  T325] Bluetooth: hci0: Frame reassembly failed (-84)
[   97.521253][ T3261] ext4 filesystem being mounted at /215/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   97.545330][ T3261] EXT4-fs error (device loop3): ext4_free_blocks:6220: comm syz.3.1130: Freeing blocks not in datazone - block = 0, count = 16
[   97.622935][ T3271] loop1: detected capacity change from 0 to 8192
[   97.643226][   T28] audit: type=1400 audit(1789376307.450:488): avc:  denied  { create } for  pid=3273 comm="syz.2.1134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[   97.671920][ T3271] syz.1.1133: attempt to access beyond end of device
[   97.671920][ T3271] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192
[   97.685454][ T3271] buffer_io_error: 34163 callbacks suppressed
[   97.685472][ T3271] Buffer I/O error on dev loop1, logical block 57847, async page read
[   97.703592][ T3271] syz.1.1133: attempt to access beyond end of device
[   97.703592][ T3271] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192
[   97.714337][   T28] audit: type=1400 audit(1789376307.450:489): avc:  denied  { sys_admin } for  pid=3273 comm="syz.2.1134" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[   97.717627][ T3271] Buffer I/O error on dev loop1, logical block 57847, async page read
[   97.748061][ T3271] syz.1.1133: attempt to access beyond end of device
[   97.748061][ T3271] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192
[   97.767631][ T3278] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1135'.
[   97.781927][ T3260] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1130: bg 0: block 112: padding at end of block bitmap is not set
[   97.792557][ T3271] Buffer I/O error on dev loop1, logical block 57847, async page read
[   97.812114][ T3260] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28
[   97.818178][ T3271] syz.1.1133: attempt to access beyond end of device
[   97.818178][ T3271] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192
[   97.832426][ T3260] EXT4-fs (loop3): This should not happen!! Data will be lost
[   97.832426][ T3260] 
[   97.848122][ T3271] Buffer I/O error on dev loop1, logical block 57847, async page read
[   97.849307][ T3260] EXT4-fs (loop3): Total free blocks count 0
[   97.864717][ T3271] syz.1.1133: attempt to access beyond end of device
[   97.864717][ T3271] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192
[   97.882674][ T3285] loop2: detected capacity change from 0 to 512
[   97.884161][ T3271] Buffer I/O error on dev loop1, logical block 57847, async page read
[   97.899632][ T3271] syz.1.1133: attempt to access beyond end of device
[   97.899632][ T3271] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192
[   97.906227][ T3260] EXT4-fs (loop3): Free/Dirty block details
[   97.913473][ T3271] Buffer I/O error on dev loop1, logical block 57847, async page read
[   97.919702][ T3260] EXT4-fs (loop3): free_blocks=0
[   97.928264][ T3271] Buffer I/O error on dev loop1, logical block 57847, async page read
[   97.943219][ T3271] Buffer I/O error on dev loop1, logical block 57847, async page read
[   97.947401][ T3260] EXT4-fs (loop3): dirty_blocks=80
[   97.951532][ T3271] Buffer I/O error on dev loop1, logical block 57847, async page read
[   97.957019][ T3260] EXT4-fs (loop3): Block reservation details
[   97.965375][ T3271] Buffer I/O error on dev loop1, logical block 57847, async page read
[   97.970895][ T3260] EXT4-fs (loop3): i_reserved_data_blocks=5
[   97.992379][  T325] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1152 with max blocks 64 with error 28
[   98.006195][ T3285] EXT4-fs error (device loop2): ext4_orphan_get:1431: comm syz.2.1139: bad orphan inode 11862016
[   98.016999][ T3285] ext4 filesystem being mounted at /234/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   98.027592][  T325] EXT4-fs (loop3): This should not happen!! Data will be lost
[   98.027592][  T325] 
[   98.126332][ T3293] loop3: detected capacity change from 0 to 256
[   98.151596][  T335] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[   98.160306][ T3293] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d)
[   98.198601][   T28] audit: type=1400 audit(1789376308.000:490): avc:  denied  { unlink } for  pid=3292 comm="syz.3.1142" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=1048820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   98.248150][ T3299] loop2: detected capacity change from 0 to 16
[   98.259396][ T3299] erofs: (device loop2): mounted with root inode @ nid 36.
[   98.269803][ T3299] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[   98.272048][ T3301] loop3: detected capacity change from 0 to 512
[   98.286573][ T3299] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -37 in[64, 4032] out[1851]
[   98.300942][ T3299] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117]
[   98.322219][ T3299] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -37 in[64, 4032] out[3797]
[   98.335101][ T3301] FAT-fs (loop3): error, corrupted file size (i_pos 0, 8960)
[   98.343113][  T335] usb 9-1: too many configurations: 16, using maximum allowed: 8
[   98.361857][ T3301] FAT-fs (loop3): error, corrupted file size (i_pos 0, 8960)
[   98.368975][  T335] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice= 0.00
[   98.384663][  T335] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   98.407753][  T335] usb 9-1: Product: syz
[   98.421687][  T335] usb 9-1: Manufacturer: syz
[   98.427140][  T335] usb 9-1: SerialNumber: syz
[   98.521191][ T3308] loop1: detected capacity change from 0 to 256
[   98.542657][ T3308] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   98.553895][ T3314] loop2: detected capacity change from 0 to 1024
[   98.554066][ T3308] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[   98.571772][ T3308] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[   98.584929][ T3314] EXT4-fs mount: 12 callbacks suppressed
[   98.584948][ T3314] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   98.599787][ T3314] ext4 filesystem being mounted at /241/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   98.617657][ T3314] EXT4-fs error (device loop2): ext4_free_blocks:6220: comm syz.2.1152: Freeing blocks not in datazone - block = 0, count = 16
[   98.643156][ T3284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   98.662661][ T3284] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   98.754211][ T3313] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.1152: bg 0: block 112: padding at end of block bitmap is not set
[   98.768920][ T3313] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28
[   98.781145][ T3313] EXT4-fs (loop2): This should not happen!! Data will be lost
[   98.781145][ T3313] 
[   98.790819][ T3313] EXT4-fs (loop2): Total free blocks count 0
[   98.791637][   T24] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[   98.796891][ T3313] EXT4-fs (loop2): Free/Dirty block details
[   98.810464][ T3313] EXT4-fs (loop2): free_blocks=0
[   98.815498][ T3313] EXT4-fs (loop2): dirty_blocks=80
[   98.820632][ T3313] EXT4-fs (loop2): Block reservation details
[   98.826785][ T3313] EXT4-fs (loop2): i_reserved_data_blocks=5
[   98.836933][   T43] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 4352 with max blocks 64 with error 28
[   98.873748][  T303] usb 9-1: USB disconnect, device number 7
[   99.002772][   T24] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[   99.011928][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   99.020839][   T24] usb 4-1: config 0 descriptor??
[   99.487185][ T3331] erofs: (device loop2): mounted with root inode @ nid 36.
[   99.551624][ T3320] Bluetooth: hci0: command 0x1003 tx timeout
[   99.551638][   T45] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   99.564796][ T3267] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   99.653386][ T3346] EXT4-fs error (device loop4): ext4_orphan_get:1431: comm syz.4.1165: bad orphan inode 11862016
[   99.665080][ T3346] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   99.674173][ T3346] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   99.697245][ T2457] EXT4-fs (loop4): unmounting filesystem.
[   99.791449][ T3357] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d)
[   99.804774][   T39] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[   99.875186][ T3361] FAT-fs (loop4): error, corrupted file size (i_pos 0, 8960)
[   99.882809][ T3361] FAT-fs (loop4): error, corrupted file size (i_pos 0, 8960)
[   99.991688][   T39] usb 3-1: Using ep0 maxpacket: 16
[   99.998276][   T39] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  100.009033][   T39] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  100.026269][   T39] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89
[  100.036050][   T24] usb 4-1: Cannot set autoneg
[  100.040810][   T24] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -71
[  100.054077][   T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  100.063644][   T24] usb 4-1: USB disconnect, device number 8
[  100.070006][   T39] usb 3-1: SerialNumber: syz
[  100.080591][   T39] usb 3-1: 0:2 : does not exist
[  100.166172][ T3366] Invalid argument reading file caps for ./file0
[  100.184538][   T28] audit: type=1400 audit(1789376309.990:491): avc:  denied  { read write } for  pid=3367 comm="syz.4.1174" name="snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  100.208563][   T28] audit: type=1400 audit(1789376309.990:492): avc:  denied  { open } for  pid=3367 comm="syz.4.1174" path="/dev/snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  100.242868][  T312] device offline error, dev sda, sector 1147190 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[  100.253480][  T312] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2028 starting block 143398)
[  100.265107][  T312] Buffer I/O error on device sda1, logical block 143360
[  100.272147][  T312] device offline error, dev sda, sector 1155374 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[  100.282863][  T312] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2028 starting block 144421)
[  100.295774][  T312] Buffer I/O error on device sda1, logical block 144383
[  100.302976][  T312] device offline error, dev sda, sector 1159326 op 0x1:(WRITE) flags 0x0 phys_seg 16 prio class 2
[  100.314235][  T312] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2028 starting block 144915)
[  100.325900][  T312] Buffer I/O error on device sda1, logical block 144877
[  100.332930][  T312] Buffer I/O error on device sda1, logical block 144878
[  100.340051][  T312] Buffer I/O error on device sda1, logical block 144879
[  100.347060][  T312] Buffer I/O error on device sda1, logical block 144880
[  100.356401][  T312] Buffer I/O error on device sda1, logical block 144881
[  100.363468][  T312] Buffer I/O error on device sda1, logical block 144882
[  100.370420][  T312] Buffer I/O error on device sda1, logical block 144883
[  100.377425][  T312] Buffer I/O error on device sda1, logical block 144884
[  100.384469][  T312] device offline error, dev sda, sector 1212726 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[  100.395049][  T312] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2035 starting block 151590)
[  100.406944][  T312] device offline error, dev sda, sector 1220910 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[  100.417672][  T312] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2035 starting block 152613)
[  100.429574][  T312] device offline error, dev sda, sector 1224830 op 0x1:(WRITE) flags 0x0 phys_seg 23 prio class 2
[  100.440629][  T312] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2035 starting block 153103)
[  100.452448][  T312] device offline error, dev sda, sector 1261878 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[  100.463600][  T312] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2038 starting block 157734)
[  100.475623][  T312] device offline error, dev sda, sector 1270062 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[  100.486215][  T312] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2038 starting block 158757)
[  100.498044][  T312] device offline error, dev sda, sector 1273958 op 0x1:(WRITE) flags 0x0 phys_seg 19 prio class 2
[  100.508783][  T312] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2038 starting block 159244)
[  100.521292][  T312] device offline error, dev sda, sector 1290542 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[  100.532336][  T312] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2028 starting block 161317)
[  100.547612][   T65] Aborting journal on device sda1-8.
[  100.553085][   T65] JBD2: I/O error when updating journal superblock for sda1-8.
[  100.569185][  T278] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[  100.581619][ T3367] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.1174: Detected aborted journal
[  100.589208][  T278] EXT4-fs (sda1): I/O error while writing superblock
[  100.602399][ T3367] EXT4-fs (sda1): previous I/O error to superblock detected
[  100.603518][  T278] EXT4-fs (sda1): Remounting filesystem read-only
[  100.616502][  T278] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[  100.619698][ T3367] EXT4-fs (sda1): I/O error while writing superblock
[  100.627774][  T278] EXT4-fs (sda1): previous I/O error to superblock detected
[  100.634799][ T3367] EXT4-fs (sda1): Remounting filesystem read-only
[  100.641926][  T278] EXT4-fs (sda1): I/O error while writing superblock
[  100.653581][ T3367] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.1174: Detected aborted journal
[  100.655079][  T278] EXT4-fs (sda1): Remounting filesystem read-only
[  100.666436][ T3367] EXT4-fs (sda1): Remounting filesystem read-only
[  100.672779][ T3095] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  100.678955][  T278] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[  100.688770][ T3335] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.1160: Detected aborted journal
[  100.697932][  T278] EXT4-fs (sda1): Remounting filesystem read-only
[  100.710393][ T3335] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.1160: Detected aborted journal
[  100.719139][ T3370] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.1175: Detected aborted journal
[  100.727215][  T278] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[  100.739402][ T3370] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.1175: Detected aborted journal
[  100.766328][ T3369] sd 0:0:1:0: [sda] Synchronizing SCSI cache
[  100.780407][ T3371] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1175'.
[  100.782075][ T3375] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d)
[  100.799008][ T3371] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1175'.
[  100.822686][ T3371] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1175'.
[  100.938057][ T3378] EXT4-fs: Ignoring removed i_version option
[  100.959895][   T39] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[  101.001823][   T39] usb 3-1: USB disconnect, device number 11
[  101.040855][ T3381] EXT4-fs error (device loop3): ext4_orphan_get:1431: comm syz.3.1181: bad orphan inode 11862016
[  101.079118][ T3381] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  101.095280][ T3381] ext4 filesystem being mounted at /221/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  101.105169][ T3378] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  101.122808][ T3378] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  101.142931][  T788] EXT4-fs (loop3): unmounting filesystem.
[  101.212143][ T2715] udevd[2715]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  101.248472][ T2418] EXT4-fs (loop8): unmounting filesystem.
[  101.527220][   T10] device bridge_slave_1 left promiscuous mode
[  101.536225][ T3396] EXT4-fs: Ignoring removed i_version option
[  101.549809][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.571011][   T10] device bridge_slave_0 left promiscuous mode
[  101.577576][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.579570][ T3396] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  101.594132][ T3396] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  101.605079][   T10] device veth1_macvtap left promiscuous mode
[  101.611881][   T10] device veth0_vlan left promiscuous mode
[  101.631573][    C0] ==================================================================
[  101.639804][    C0] BUG: KASAN: use-after-free in __run_timers+0x341/0x9b0
[  101.646932][    C0] Write of size 8 at addr ffff8881122b0a00 by task kworker/u4:1/10
[  101.654955][    C0] 
[  101.657313][    C0] CPU: 0 PID: 10 Comm: kworker/u4:1 Not tainted syzkaller #0
[  101.664807][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026
[  101.674980][    C0] Workqueue: netns cleanup_net
[  101.679873][    C0] Call Trace:
[  101.683357][    C0]  <IRQ>
[  101.686241][    C0]  __dump_stack+0x21/0x24
[  101.690696][    C0]  dump_stack_lvl+0x110/0x170
[  101.695447][    C0]  ? __cfi_dump_stack_lvl+0x8/0x8
[  101.700544][    C0]  ? __cfi_trigger_load_balance+0x10/0x10
[  101.706312][    C0]  ? __run_timers+0x341/0x9b0
[  101.711036][    C0]  print_address_description+0x71/0x200
[  101.716633][    C0]  print_report+0x4a/0x60
[  101.721017][    C0]  kasan_report+0x122/0x150
[  101.725553][    C0]  ? __run_timers+0x341/0x9b0
[  101.730261][    C0]  __asan_report_store8_noabort+0x17/0x20
[  101.736006][    C0]  __run_timers+0x341/0x9b0
[  101.740530][    C0]  ? sched_clock_cpu+0x6e/0x260
[  101.745383][    C0]  ? calc_index+0x200/0x200
[  101.749889][    C0]  ? kvm_sched_clock_read+0x18/0x40
[  101.755090][    C0]  run_timer_softirq+0x6a/0xf0
[  101.759851][    C0]  handle_softirqs+0x1d7/0x600
[  101.764615][    C0]  __irq_exit_rcu+0x52/0xf0
[  101.769392][    C0]  irq_exit_rcu+0x9/0x10
[  101.773659][    C0]  sysvec_apic_timer_interrupt+0xa9/0xc0
[  101.779314][    C0]  </IRQ>
[  101.782255][    C0]  <TASK>
[  101.785181][    C0]  asm_sysvec_apic_timer_interrupt+0x1b/0x20
[  101.791157][    C0] RIP: 0010:kernel_text_address+0x33/0xd0
[  101.796879][    C0] Code: 48 81 ff 00 00 00 81 0f 93 c0 48 81 ff 60 48 40 85 0f 92 c1 41 be 01 00 00 00 84 c8 75 0c 48 89 fb e8 31 be b6 ff 85 c0 74 0a <44> 89 f0 5b 41 5e 41 5f 5d c3 48 c7 c0 00 cd 92 87 48 c1 e8 03 48
[  101.816490][    C0] RSP: 0018:ffffc900000a7260 EFLAGS: 00000202
[  101.822561][    C0] RAX: 0000000000000001 RBX: ffffffff81b63ded RCX: 0000000000014e01
[  101.830796][    C0] RDX: ffffc900000a76e0 RSI: 1ffff92000014e5a RDI: ffffffff81b63ded
[  101.839102][    C0] RBP: ffffc900000a7278 R08: ffffc900000a7390 R09: ffffc900000a7388
[  101.847073][    C0] R10: 0000000000000004 R11: fffff52000014e65 R12: ffff888100299440
[  101.855187][    C0] R13: 0000000000000000 R14: 0000000000000001 R15: 1ffff92000014e62
[  101.863368][    C0]  ? kmem_cache_free+0x12d/0x300
[  101.868411][    C0]  ? kmem_cache_free+0x12d/0x300
[  101.873357][    C0]  ? kmem_cache_free+0x12d/0x300
[  101.878300][    C0]  __kernel_text_address+0xd/0x30
[  101.883527][    C0]  unwind_get_return_address+0x4d/0x90
[  101.889026][    C0]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[  101.895408][    C0]  arch_stack_walk+0xfc/0x150
[  101.900233][    C0]  ? kmem_cache_free+0x12d/0x300
[  101.905464][    C0]  stack_trace_save+0xa6/0xf0
[  101.910349][    C0]  ? __cfi_stack_trace_save+0x10/0x10
[  101.915733][    C0]  ? kasan_save_free_info+0x2b/0x40
[  101.921103][    C0]  ? memset+0x35/0x40
[  101.925104][    C0]  kasan_set_track+0x4b/0x70
[  101.929701][    C0]  ? kasan_set_track+0x4b/0x70
[  101.934500][    C0]  ? kasan_save_free_info+0x2b/0x40
[  101.939707][    C0]  ? ____kasan_slab_free+0x132/0x180
[  101.945087][    C0]  ? __kasan_slab_free+0x11/0x20
[  101.950308][    C0]  ? slab_free_freelist_hook+0xc2/0x190
[  101.956067][    C0]  ? kmem_cache_free+0x12d/0x300
[  101.961216][    C0]  kasan_save_free_info+0x2b/0x40
[  101.966257][    C0]  ____kasan_slab_free+0x132/0x180
[  101.971559][    C0]  __kasan_slab_free+0x11/0x20
[  101.976466][    C0]  slab_free_freelist_hook+0xc2/0x190
[  101.981867][    C0]  ? kfree_skbmem+0x10c/0x180
[  101.986559][    C0]  kmem_cache_free+0x12d/0x300
[  101.991366][    C0]  kfree_skbmem+0x10c/0x180
[  101.995883][    C0]  consume_skb+0xb3/0x1f0
[  102.000236][    C0]  netlink_broadcast+0x10c4/0x11c0
[  102.005435][    C0]  nlmsg_notify+0xdf/0x1a0
[  102.009869][    C0]  rtmsg_ifinfo+0xea/0x130
[  102.014298][    C0]  dev_close_many+0x26b/0x4d0
[  102.018986][    C0]  ? __cfi_dev_close_many+0x10/0x10
[  102.024190][    C0]  ? __kasan_check_read+0x11/0x20
[  102.029232][    C0]  unregister_netdevice_many+0x43f/0x1910
[  102.035089][    C0]  ? __cfi_unregister_netdevice_many+0x10/0x10
[  102.041239][    C0]  ? unregister_netdevice_queue+0x17c/0x320
[  102.047125][    C0]  ? __cfi_unregister_netdevice_queue+0x10/0x10
[  102.053365][    C0]  ? br_dev_delete+0xfc/0x110
[  102.058064][    C0]  default_device_exit_batch+0x951/0x9f0
[  102.063708][    C0]  ? idr_destroy+0x21e/0x290
[  102.068334][    C0]  ? __cfi_netdev_run_todo+0x10/0x10
[  102.073619][    C0]  ? mutex_lock+0x93/0x1b0
[  102.078025][    C0]  ? __cfi_mutex_lock+0x10/0x10
[  102.082883][    C0]  ? __cfi_default_device_exit_batch+0x10/0x10
[  102.089130][    C0]  ? __cfi_xfrmi_exit_batch_net+0x10/0x10
[  102.094849][    C0]  ? rtnl_unlock+0xe/0x10
[  102.099287][    C0]  ? __cfi_default_device_exit_batch+0x10/0x10
[  102.105634][    C0]  cleanup_net+0x630/0xb10
[  102.110071][    C0]  ? __kasan_check_write+0x14/0x20
[  102.115366][    C0]  ? pwq_activate_inactive_work+0x2ea/0x3f0
[  102.121266][    C0]  ? __cfi_cleanup_net+0x10/0x10
[  102.126295][    C0]  process_one_work+0x717/0xc30
[  102.131138][    C0]  worker_thread+0xa4d/0x11d0
[  102.135809][    C0]  kthread+0x281/0x320
[  102.139979][    C0]  ? __cfi_worker_thread+0x10/0x10
[  102.145082][    C0]  ? __cfi_kthread+0x10/0x10
[  102.149663][    C0]  ret_from_fork+0x1f/0x30
[  102.154360][    C0]  </TASK>
[  102.157382][    C0] 
[  102.159700][    C0] Allocated by task 3267:
[  102.164095][    C0]  kasan_set_track+0x4b/0x70
[  102.168675][    C0]  kasan_save_alloc_info+0x1f/0x30
[  102.173787][    C0]  __kasan_kmalloc+0x95/0xb0
[  102.178461][    C0]  __kmalloc+0xb4/0x1e0
[  102.182687][    C0]  hci_alloc_dev_priv+0x27/0x1bd0
[  102.187763][    C0]  hci_uart_tty_ioctl+0x3c4/0xa70
[  102.192892][    C0]  tty_ioctl+0x8ef/0xc60
[  102.197224][    C0]  __se_sys_ioctl+0x12f/0x1b0
[  102.201893][    C0]  __x64_sys_ioctl+0x7b/0x90
[  102.206479][    C0]  x64_sys_call+0x58b/0x9a0
[  102.210989][    C0]  do_syscall_64+0x4c/0xa0
[  102.215496][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  102.221376][    C0] 
[  102.223774][    C0] Freed by task 3267:
[  102.227737][    C0]  kasan_set_track+0x4b/0x70
[  102.232311][    C0]  kasan_save_free_info+0x2b/0x40
[  102.237400][    C0]  ____kasan_slab_free+0x132/0x180
[  102.242508][    C0]  __kasan_slab_free+0x11/0x20
[  102.247275][    C0]  slab_free_freelist_hook+0xc2/0x190
[  102.252632][    C0]  __kmem_cache_free+0xb7/0x1b0
[  102.257556][    C0]  kfree+0x6f/0xf0
[  102.261265][    C0]  hci_release_dev+0x12a3/0x13b0
[  102.266197][    C0]  bt_host_release+0x82/0x90
[  102.271056][    C0]  device_release+0xa4/0x1d0
[  102.275645][    C0]  kobject_put+0x19d/0x280
[  102.280156][    C0]  put_device+0x1f/0x30
[  102.284396][    C0]  hci_dev_cmd+0x279/0x740
[  102.288898][    C0]  hci_sock_ioctl+0x41e/0x7f0
[  102.293585][    C0]  sock_do_ioctl+0x114/0x330
[  102.298267][    C0]  sock_ioctl+0x475/0x700
[  102.302616][    C0]  __se_sys_ioctl+0x12f/0x1b0
[  102.307433][    C0]  __x64_sys_ioctl+0x7b/0x90
[  102.312027][    C0]  x64_sys_call+0x58b/0x9a0
[  102.316620][    C0]  do_syscall_64+0x4c/0xa0
[  102.321028][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  102.326909][    C0] 
[  102.329311][    C0] Last potentially related work creation:
[  102.335118][    C0]  kasan_save_stack+0x3a/0x60
[  102.339788][    C0]  __kasan_record_aux_stack+0xb6/0xc0
[  102.345232][    C0]  kasan_record_aux_stack_noalloc+0xb/0x10
[  102.351052][    C0]  insert_work+0x51/0x300
[  102.355823][    C0]  __queue_work+0x9d0/0xd50
[  102.360351][    C0]  queue_work_on+0xde/0x150
[  102.364860][    C0]  __hci_cmd_sync_sk+0xaa8/0xd80
[  102.369834][    C0]  hci_cmd_sync_status+0x53/0x120
[  102.374857][    C0]  hci_dev_cmd+0x357/0x740
[  102.379261][    C0]  hci_sock_ioctl+0x41e/0x7f0
[  102.384018][    C0]  sock_do_ioctl+0x114/0x330
[  102.388610][    C0]  sock_ioctl+0x475/0x700
[  102.392951][    C0]  __se_sys_ioctl+0x12f/0x1b0
[  102.397806][    C0]  __x64_sys_ioctl+0x7b/0x90
[  102.402494][    C0]  x64_sys_call+0x58b/0x9a0
[  102.407042][    C0]  do_syscall_64+0x4c/0xa0
[  102.411468][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  102.417366][    C0] 
[  102.419680][    C0] Second to last potentially related work creation:
[  102.426338][    C0]  kasan_save_stack+0x3a/0x60
[  102.431098][    C0]  __kasan_record_aux_stack+0xb6/0xc0
[  102.436456][    C0]  kasan_record_aux_stack_noalloc+0xb/0x10
[  102.442249][    C0]  insert_work+0x51/0x300
[  102.446563][    C0]  __queue_work+0x9d0/0xd50
[  102.451145][    C0]  queue_work_on+0xde/0x150
[  102.455900][    C0]  hci_cmd_timeout+0x191/0x200
[  102.460675][    C0]  process_one_work+0x717/0xc30
[  102.465876][    C0]  worker_thread+0xa4d/0x11d0
[  102.470931][    C0]  kthread+0x281/0x320
[  102.475198][    C0]  ret_from_fork+0x1f/0x30
[  102.479624][    C0] 
[  102.481944][    C0] The buggy address belongs to the object at ffff8881122b0000
[  102.481944][    C0]  which belongs to the cache kmalloc-8k of size 8192
[  102.496507][    C0] The buggy address is located 2560 bytes inside of
[  102.496507][    C0]  8192-byte region [ffff8881122b0000, ffff8881122b2000)
[  102.510220][    C0] 
[  102.512632][    C0] The buggy address belongs to the physical page:
[  102.519053][    C0] page:ffffea000448ac00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1122b0
[  102.529315][    C0] head:ffffea000448ac00 order:3 compound_mapcount:0 compound_pincount:0
[  102.537662][    C0] flags: 0x4000000000010200(slab|head|zone=1)
[  102.543731][    C0] raw: 4000000000010200 ffffea0004f1f600 dead000000000004 ffff888100043500
[  102.552300][    C0] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000
[  102.560879][    C0] page dumped because: kasan: bad access detected
[  102.567385][    C0] page_owner tracks the page as allocated
[  102.573085][    C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 1765, tgid 1763 (syz.4.541), ts 59258161484, free_ts 59257419085
[  102.594969][    C0]  post_alloc_hook+0x1f5/0x210
[  102.599834][    C0]  prep_new_page+0x1c/0x110
[  102.604335][    C0]  get_page_from_freelist+0x2ca9/0x2d20
[  102.609872][    C0]  __alloc_pages+0x1fa/0x610
[  102.614454][    C0]  alloc_slab_page+0x6e/0xf0
[  102.619029][    C0]  new_slab+0x98/0x3e0
[  102.623111][    C0]  ___slab_alloc+0x70f/0xb70
[  102.627872][    C0]  __slab_alloc+0x5e/0xa0
[  102.632890][    C0]  __kmem_cache_alloc_node+0x204/0x2d0
[  102.638340][    C0]  __kmalloc_node_track_caller+0xa1/0x1e0
[  102.644157][    C0]  pskb_expand_head+0x1c2/0x12b0
[  102.649103][    C0]  __pskb_pull_tail+0xae/0x1570
[  102.653944][    C0]  tipc_msg_reverse+0x77/0x940
[  102.658703][    C0]  tipc_sk_filter_rcv+0xced/0x3010
[  102.663921][    C0]  tipc_sk_rcv+0x7e7/0x2c20
[  102.668435][    C0]  tipc_sk_mcast_rcv+0xe27/0xf10
[  102.673371][    C0] page last free stack trace:
[  102.678047][    C0]  free_unref_page_prepare+0x81b/0x820
[  102.683596][    C0]  free_unref_page+0x93/0x530
[  102.688288][    C0]  __free_pages+0x67/0x100
[  102.692761][    C0]  __free_slab+0xc7/0x1a0
[  102.697075][    C0]  __unfreeze_partials+0x15a/0x190
[  102.702186][    C0]  put_cpu_partial+0xa9/0x100
[  102.706874][    C0]  __slab_free+0x1c4/0x280
[  102.711294][    C0]  ___cache_free+0xbf/0xd0
[  102.715706][    C0]  qlist_free_all+0xc6/0x140
[  102.720299][    C0]  kasan_quarantine_reduce+0x14a/0x170
[  102.725762][    C0]  __kasan_slab_alloc+0x24/0x80
[  102.730614][    C0]  slab_post_alloc_hook+0x4f/0x2d0
[  102.735737][    C0]  kmem_cache_alloc_node+0x179/0x330
[  102.741018][    C0]  __alloc_skb+0xe8/0x4a0
[  102.745361][    C0]  tipc_buf_acquire+0x2b/0xe0
[  102.750132][    C0]  tipc_msg_build+0x532/0xf60
[  102.754809][    C0] 
[  102.757133][    C0] Memory state around the buggy address:
[  102.762774][    C0]  ffff8881122b0900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  102.770829][    C0]  ffff8881122b0980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  102.778883][    C0] >ffff8881122b0a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  102.787015][    C0]                    ^
[  102.791072][    C0]  ffff8881122b0a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  102.799390][    C0]  ffff8881122b0b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  102.807570][    C0] ==================================================================
[  102.815879][    C0] Disabling lock debugging due to kernel taint
[  102.822147][    C0] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN
[  102.833952][    C0] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[  102.842376][    C0] CPU: 0 PID: 10 Comm: kworker/u4:1 Tainted: G    B              syzkaller #0
[  102.851246][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026
[  102.861307][    C0] Workqueue: netns cleanup_net
[  102.866081][    C0] RIP: 0010:__queue_work+0x582/0xd50
[  102.871369][    C0] Code: b4 00 00 00 e8 ff 53 29 00 48 bb 00 00 00 00 00 fc ff df 4c 89 ef e8 1d bc b9 03 4c 8b 65 d0 4c 8b 6d c0 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 10 df 6e 00 49 8b 3e e8 b8 b7 b9 03
[  102.891064][    C0] RSP: 0018:ffffc90000007c78 EFLAGS: 00010046
[  102.897136][    C0] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff888100299440
[  102.905193][    C0] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff
[  102.913271][    C0] RBP: ffffc90000007d08 R08: 0000000000000007 R09: 00000000fffffffb
[  102.921333][    C0] R10: dffffc0000000000 R11: ffffed1022456139 R12: ffff8881122b09c8
[  102.929391][    C0] R13: ffff8881203d0800 R14: 0000000000000000 R15: 000000007fffffff
[  102.937369][    C0] FS:  0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  102.946318][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  102.952902][    C0] CR2: 00007f049c5d1000 CR3: 000000012b78a000 CR4: 00000000003506b0
[  102.961140][    C0] Call Trace:
[  102.964423][    C0]  <IRQ>
[  102.967270][    C0]  delayed_work_timer_fn+0x61/0x80
[  102.972492][    C0]  ? __cfi_delayed_work_timer_fn+0x10/0x10
[  102.978325][    C0]  call_timer_fn+0x46/0x2a0
[  102.982850][    C0]  ? __cfi_delayed_work_timer_fn+0x10/0x10
[  102.988670][    C0]  __run_timers+0x672/0x9b0
[  102.993192][    C0]  ? calc_index+0x200/0x200
[  102.997697][    C0]  ? kvm_sched_clock_read+0x18/0x40
[  103.002906][    C0]  run_timer_softirq+0x6a/0xf0
[  103.007762][    C0]  handle_softirqs+0x1d7/0x600
[  103.012532][    C0]  __irq_exit_rcu+0x52/0xf0
[  103.017225][    C0]  irq_exit_rcu+0x9/0x10
[  103.021493][    C0]  sysvec_apic_timer_interrupt+0xa9/0xc0
[  103.027155][    C0]  </IRQ>
[  103.030162][    C0]  <TASK>
[  103.033104][    C0]  asm_sysvec_apic_timer_interrupt+0x1b/0x20
[  103.039185][    C0] RIP: 0010:kernel_text_address+0x33/0xd0
[  103.045010][    C0] Code: 48 81 ff 00 00 00 81 0f 93 c0 48 81 ff 60 48 40 85 0f 92 c1 41 be 01 00 00 00 84 c8 75 0c 48 89 fb e8 31 be b6 ff 85 c0 74 0a <44> 89 f0 5b 41 5e 41 5f 5d c3 48 c7 c0 00 cd 92 87 48 c1 e8 03 48
[  103.065066][    C0] RSP: 0018:ffffc900000a7260 EFLAGS: 00000202
[  103.071136][    C0] RAX: 0000000000000001 RBX: ffffffff81b63ded RCX: 0000000000014e01
[  103.079191][    C0] RDX: ffffc900000a76e0 RSI: 1ffff92000014e5a RDI: ffffffff81b63ded
[  103.087200][    C0] RBP: ffffc900000a7278 R08: ffffc900000a7390 R09: ffffc900000a7388
[  103.095285][    C0] R10: 0000000000000004 R11: fffff52000014e65 R12: ffff888100299440
[  103.103370][    C0] R13: 0000000000000000 R14: 0000000000000001 R15: 1ffff92000014e62
[  103.111431][    C0]  ? kmem_cache_free+0x12d/0x300
[  103.116379][    C0]  ? kmem_cache_free+0x12d/0x300
[  103.121322][    C0]  ? kmem_cache_free+0x12d/0x300
[  103.126525][    C0]  __kernel_text_address+0xd/0x30
[  103.131573][    C0]  unwind_get_return_address+0x4d/0x90
[  103.137211][    C0]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[  103.143367][    C0]  arch_stack_walk+0xfc/0x150
[  103.148050][    C0]  ? kmem_cache_free+0x12d/0x300
[  103.152998][    C0]  stack_trace_save+0xa6/0xf0
[  103.157699][    C0]  ? __cfi_stack_trace_save+0x10/0x10
[  103.163197][    C0]  ? kasan_save_free_info+0x2b/0x40
[  103.168511][    C0]  ? memset+0x35/0x40
[  103.172510][    C0]  kasan_set_track+0x4b/0x70
[  103.177103][    C0]  ? kasan_set_track+0x4b/0x70
[  103.182068][    C0]  ? kasan_save_free_info+0x2b/0x40
[  103.187274][    C0]  ? ____kasan_slab_free+0x132/0x180
[  103.192695][    C0]  ? __kasan_slab_free+0x11/0x20
[  103.197837][    C0]  ? slab_free_freelist_hook+0xc2/0x190
[  103.203401][    C0]  ? kmem_cache_free+0x12d/0x300
[  103.208348][    C0]  kasan_save_free_info+0x2b/0x40
[  103.213599][    C0]  ____kasan_slab_free+0x132/0x180
[  103.218776][    C0]  __kasan_slab_free+0x11/0x20
[  103.223644][    C0]  slab_free_freelist_hook+0xc2/0x190
[  103.229059][    C0]  ? kfree_skbmem+0x10c/0x180
[  103.233768][    C0]  kmem_cache_free+0x12d/0x300
[  103.238550][    C0]  kfree_skbmem+0x10c/0x180
[  103.243061][    C0]  consume_skb+0xb3/0x1f0
[  103.247394][    C0]  netlink_broadcast+0x10c4/0x11c0
[  103.252511][    C0]  nlmsg_notify+0xdf/0x1a0
[  103.256930][    C0]  rtmsg_ifinfo+0xea/0x130
[  103.261354][    C0]  dev_close_many+0x26b/0x4d0
[  103.266035][    C0]  ? __cfi_dev_close_many+0x10/0x10
[  103.271240][    C0]  ? __kasan_check_read+0x11/0x20
[  103.276276][    C0]  unregister_netdevice_many+0x43f/0x1910
[  103.281998][    C0]  ? __cfi_unregister_netdevice_many+0x10/0x10
[  103.288240][    C0]  ? unregister_netdevice_queue+0x17c/0x320
[  103.294393][    C0]  ? __cfi_unregister_netdevice_queue+0x10/0x10
[  103.300722][    C0]  ? br_dev_delete+0xfc/0x110
[  103.305487][    C0]  default_device_exit_batch+0x951/0x9f0
[  103.311117][    C0]  ? idr_destroy+0x21e/0x290
[  103.315708][    C0]  ? __cfi_netdev_run_todo+0x10/0x10
[  103.320993][    C0]  ? mutex_lock+0x93/0x1b0
[  103.325411][    C0]  ? __cfi_mutex_lock+0x10/0x10
[  103.330352][    C0]  ? __cfi_default_device_exit_batch+0x10/0x10
[  103.336765][    C0]  ? __cfi_xfrmi_exit_batch_net+0x10/0x10
[  103.342927][    C0]  ? rtnl_unlock+0xe/0x10
[  103.347282][    C0]  ? __cfi_default_device_exit_batch+0x10/0x10
[  103.353535][    C0]  cleanup_net+0x630/0xb10
[  103.358036][    C0]  ? __kasan_check_write+0x14/0x20
[  103.363146][    C0]  ? pwq_activate_inactive_work+0x2ea/0x3f0
[  103.369180][    C0]  ? __cfi_cleanup_net+0x10/0x10
[  103.374120][    C0]  process_one_work+0x717/0xc30
[  103.378975][    C0]  worker_thread+0xa4d/0x11d0
[  103.383655][    C0]  kthread+0x281/0x320
[  103.387724][    C0]  ? __cfi_worker_thread+0x10/0x10
[  103.392834][    C0]  ? __cfi_kthread+0x10/0x10
[  103.397421][    C0]  ret_from_fork+0x1f/0x30
[  103.401848][    C0]  </TASK>
[  103.404864][    C0] Modules linked in:
[  103.408850][    C0] ---[ end trace 0000000000000000 ]---
[  103.414305][    C0] RIP: 0010:__queue_work+0x582/0xd50
[  103.419617][    C0] Code: b4 00 00 00 e8 ff 53 29 00 48 bb 00 00 00 00 00 fc ff df 4c 89 ef e8 1d bc b9 03 4c 8b 65 d0 4c 8b 6d c0 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 10 df 6e 00 49 8b 3e e8 b8 b7 b9 03
[  103.439324][    C0] RSP: 0018:ffffc90000007c78 EFLAGS: 00010046
[  103.445394][    C0] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff888100299440
[  103.453362][    C0] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff
[  103.461344][    C0] RBP: ffffc90000007d08 R08: 0000000000000007 R09: 00000000fffffffb
[  103.469400][    C0] R10: dffffc0000000000 R11: ffffed1022456139 R12: ffff8881122b09c8
[  103.477371][    C0] R13: ffff8881203d0800 R14: 0000000000000000 R15: 000000007fffffff
[  103.485433][    C0] FS:  0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  103.494535][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  103.501284][    C0] CR2: 00007f049c5d1000 CR3: 000000012b78a000 CR4: 00000000003506b0
[  103.509458][    C0] Kernel panic - not syncing: Fatal exception in interrupt
[  103.517024][    C0] Kernel Offset: disabled
[  103.521533][    C0] Rebooting in 86400 seconds..