last executing test programs:

4m57.052227602s ago: executing program 1 (id=159):
ioperm(0x400, 0x7, 0x200000005)
ioperm(0x9, 0x7ff, 0x100000000)

4m57.008089171s ago: executing program 1 (id=160):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6)
pwrite64(r0, &(0x7f0000000100)="0000010042", 0x5, 0x1be)
pwrite64(r0, &(0x7f0000000100)="55aa", 0x2, 0x1fe)
pwrite64(r0, &(0x7f0000000100)='PRIVHEAD', 0x8, 0xc00)
pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\a', 0x7, 0xd23)
pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\b', 0x7, 0xd2b)
pwrite64(r0, &(0x7f0000000100)='PRIVHEAD', 0x8, 0x1e8000)
r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2)
ioctl$LOOP_SET_FD(r1, 0x4c00, r0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8})

4m56.322131752s ago: executing program 1 (id=164):
syz_mount_image$fuse(0x0, &(0x7f00000005c0)='./file1\x00', 0x190864, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x210a055, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000180)='./bus\x00', 0x3000408, 0x0, 0x1, 0x0, 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x4002, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0/file0'}}, {@workdir={'workdir', 0x3d, './file1'}}]})
syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x323020, &(0x7f0000000100)=ANY=[], 0x1, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0)
write$FUSE_DIRENT(r0, &(0x7f0000000440)={0x10}, 0x10)
renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file0/file1\x00', 0x2)

4m56.057678686s ago: executing program 1 (id=166):
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x1214040, 0x0)
syz_mount_image$cramfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00e5496ddf42b572a11a00801680", @ANYRESHEX, @ANYRES32=0x0], 0x1, 0x14c, &(0x7f00000001c0)="$eJzszr9LOnEcBvDnvnen30r7QQYWZEJDRyKdJ9XUoJEkdAmFS5NQJwVKkVCORbS1tTpIQpP4L1jWYihE/RMtbkFrfO6OwCb3ntdy3PN+Pm/eG2tdDWFAhmP9uHhyapVK1kF4J2Omdj+azYTIPQD+982d/kMCOBRfBehdAiJ+8sPrriuI/14C0AAkR4D8UcHS4XSHRRYAFLcsMm0eaE2pds/oy+wTrLibzShAcuxnn5nPq1gQ+yacLAbgE0C5EmnUX7Y77XR08X5WxnU6Mjcp9ech68ZITdd8QRlZ6/kOSXv+vtSOvg416m/djrmVMb3duGGsxPWYri/73YOhbPrOgL1f+zwIhpQscCUBt/as9yiJN63qV6Y4ulp1X1+cy2FAKlf2c0G1lguM/4OsQcIg1IFaRERERERERERERERERET0V3wHAAD//1/LWts=")
mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000580)=""/174, 0xff56)

4m55.568308087s ago: executing program 1 (id=171):
unshare(0x8040480)
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, 0x0, 0x0)

4m51.093822746s ago: executing program 1 (id=182):
r0 = getpid()
sched_getparam(r0, &(0x7f0000001180))

4m50.410563076s ago: executing program 32 (id=182):
r0 = getpid()
sched_getparam(r0, &(0x7f0000001180))

1m40.428724477s ago: executing program 2 (id=677):
syz_open_dev$dri(0x0, 0xd21, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000140)='vers\x00', &(0x7f0000000180)='3\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000001c0)='source\x00', &(0x7f0000000200)='127.0.0.1:/export\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000240)='addr\x00', &(0x7f0000000280)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)

1m39.232414661s ago: executing program 2 (id=678):
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000181000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x10000080000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1m38.990472411s ago: executing program 2 (id=683):
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300)
setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000180)=0x80, 0x4)
setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000000)=0x10, 0x4)
recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)

1m37.18801084s ago: executing program 2 (id=691):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x280440e, &(0x7f0000000440)={[{@data_err_ignore}, {@test_dummy_encryption_v1}, {@inlinecrypt}, {@errors_remount}, {@noinit_itable}, {@auto_da_alloc}, {@minixdf}, {@usrquota}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@nodioread_nolock}, {@mb_optimize_scan}]}, 0x1, 0xbdb, &(0x7f0000001000)="$eJzs3M1rHOcZAPBnRqsP23JXLqXUvVilFBtK17KLTG0KtYtLLz0U2mvBQl4ZofUHkoorWdBV8g+EJP9ALjkkJsGH+OxLArnmkjjXmBwCJihWAiEkCrMfkiztSpa1q1Hk3w9ezfsxM+/zaKSdeWF3A3hhDWc/0ojjEXEliSg2+tOI6KvVBiKq9f2WlxbGv1laGE9iZeVfXyaRRMSTpYXx5rmSxvZIozEQER/9NYmfv7x53pm5+amxSqU83Wifnr1+6/TM3PwfJq+PXStfK984c+5Po2dHz42cH+1Yrt9+dvH+17/5++fV7976/u5Xr72ZxMUYbIytz6OR9a4Nx/Dq72S9QkSMdeD8+0FPI5/1eSaFbQ5KuxwUAABtpeue4X4ZxeiJtYe3Yrz/ca7BAQAAAB2x0hOxAgAAABxwifU/AAAAHHDN9wE8WVoYb5Z835Gwtx5fioihev7LjVIfKUS1th2I3og4/CSJ9R9rTeqH7dpwRDz69Py7WYkWn0PutupiRPyq1fVPavkPNT4JvTH/NCJGOjD/8Ib2Tyn/ix2YP+/8AXgxPbhUv5Ftvv+lq88/0eL+V2hx73oeed//ms9/y5ue/9by72nz/PfPZ5zjTiFutxvL8v/z/b+90yzZ/Nl2V0ntwOPFiF8XWuWfrOaftMn/yjbnTqJ+iuIPt8vt9sk7/5U3Ik5G6/ybkq2/n+j0xGSlPFL/2XKOxQ9H3243f975Z9f/cJv8t7j+A1nfrafO1P5Lff5z+fK9TZ2N3bfPP/2iL/l3rdbX6Pnf2Ozs9JmIvuQfm/vPbp1vc5/mObL8T/126///Vn//2WtCtfG3kaWy2Nhm7Zc2zPmXu3feaxdPc/2X5/W/uvPrX+t75Rnn+N0Hr57a2Nf8fq3169+sZPM/SuprYQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABoSiNiMJK0FBFJrZ6mpVLEkYj4RRxOKzdnZn8/cfO/N65mYxFD0ZtOTFbKIxFRrLeTrH2mVl9rn93Q/mNEHIuI14uHau3S+M3K1byTBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNWRiBiMJC1FRBoRy8U0LZXyjgoAAADouKG8AwAAAAC6zvofAAAADj7rfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALrs2IkHD5OIqF44VCuZvsZYb66RAd2W5h0AkJuevAMAclPIOwAgNztc43tcgAMo2WZ8oGVv9urR35V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANifTh5/8DCJiOqFQ7WS6WuM9bY84sQeRgd0U5p3AEBuerYaLOxdHMDee+5/8aOdjQPYe63X+MCLJNlmfGBtn+rTI/1diwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/WewVpK0FBFprZ6mpVLE0YgYit5kYrJSHomIn0XEJ8Xe/qzdn3fQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdNzM3PzUWKVSnn6eSrK7w1VU2lX+vz/C2NtKUqsM5B1GvZL3KxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHmYmZufGqtUytMzeUcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA5G1mbn5qrFIpTz9D5d5Odl5XyTtHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADy82MAAAD//1sCDDY=")
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000300)={0x7, 0xd0c, 0x1000, 0x8, 0x6, 0xa9, 0x5, 0xf64, 0xfffffffe})

1m35.425859041s ago: executing program 2 (id=696):
open(0x0, 0x4c1c0, 0x50)
setns(0xc9, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xffffffff, @empty, 0x3}], 0x1c)
sendmsg$inet6(r0, &(0x7f0000000540)={&(0x7f00000000c0)={0xa, 0x4e24, 0x8004, @loopback, 0x7fff}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000100)="f0", 0x1}], 0x1}, 0x400d4)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e1e, @empty}}, 0xffffff01, 0x67, 0xa4f, 0xc0, 0x15, 0xffffff86, 0xa9}, 0x9c)

1m34.349033821s ago: executing program 2 (id=699):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='sysfs\x00', &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r0, &(0x7f0000000500)='md', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/block/md0/md/metadata_version\x00', 0x1, 0x0)
write(r1, &(0x7f0000000700)='none\n', 0x5)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/block/md0/md/level\x00', 0x1, 0x0)
write(r2, &(0x7f0000000900)='raid1\n', 0x6)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0)
write(r3, &(0x7f0000000b00)='2\n', 0x2)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0)
write(r4, &(0x7f0000000d00)='1:0\n', 0x4)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./sys/block/md0/md/dev-ram0/slot\x00', 0x1, 0x0)
write(r5, &(0x7f0000000f00)='0', 0x1)
r6 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./sys/block/md0/md/array_state\x00', 0x1, 0x0)
write(r6, &(0x7f0000001100)='active\n', 0x7)
close(r6)
r7 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r7, &(0x7f0000001300)='1:1\n', 0x4)

1m18.560593472s ago: executing program 33 (id=699):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='sysfs\x00', &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r0, &(0x7f0000000500)='md', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/block/md0/md/metadata_version\x00', 0x1, 0x0)
write(r1, &(0x7f0000000700)='none\n', 0x5)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/block/md0/md/level\x00', 0x1, 0x0)
write(r2, &(0x7f0000000900)='raid1\n', 0x6)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0)
write(r3, &(0x7f0000000b00)='2\n', 0x2)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0)
write(r4, &(0x7f0000000d00)='1:0\n', 0x4)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./sys/block/md0/md/dev-ram0/slot\x00', 0x1, 0x0)
write(r5, &(0x7f0000000f00)='0', 0x1)
r6 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./sys/block/md0/md/array_state\x00', 0x1, 0x0)
write(r6, &(0x7f0000001100)='active\n', 0x7)
close(r6)
r7 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r7, &(0x7f0000001300)='1:1\n', 0x4)

12.011848822s ago: executing program 3 (id=939):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x10)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
listen(r0, 0x5)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)

10.355142431s ago: executing program 6 (id=948):
gettid()
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x10)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10)
r3 = fcntl$dupfd(r2, 0x406, r2)
sendto$inet(r2, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
modify_ldt$write2(0x11, &(0x7f0000000200)={0x77b, 0x0, 0x0, 0x1}, 0x10)
modify_ldt$read(0x0, &(0x7f0000002140)=""/4098, 0xfffffffffffffe8e)
sendmsg$NFT_BATCH(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000007f40)=ANY=[], 0x76b0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004001)

10.16333278s ago: executing program 3 (id=950):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x1c}}, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)="180c4552", 0x4)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000207, 0x0, 0x0, 0x1d, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000200f97a640d35a7386700", "28094cf00000000000004ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac000000000000000000080000000000000000001900", "90be8b1c55080021000c147d03daa0f4bd00000e60deeb00", [0x7f, 0x9]}})

8.636194233s ago: executing program 6 (id=953):
open(0x0, 0x4c1c0, 0x50)
setns(0xc9, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xffffffff, @empty, 0x3}], 0x1c)
sendmsg$inet6(r0, &(0x7f0000000540)={&(0x7f00000000c0)={0xa, 0x4e24, 0x8004, @loopback, 0x7fff}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000100)="f0", 0x1}], 0x1}, 0x400d4)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e1e, @empty}}, 0xffffff01, 0x67, 0xa4f, 0xc0, 0x15, 0xffffff86, 0xa9}, 0x9c)

8.624065895s ago: executing program 4 (id=954):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000100)={[{@shortname_winnt}, {@utf8no}, {@fat=@sys_immutable}, {@fat=@time_offset={'time_offset', 0x3d, 0x400000000161}}, {@shortname_winnt}, {@numtail}, {@fat=@check_normal}, {@utf8no}, {@utf8}], [{@fsmagic={'fsmagic', 0x3d, 0x3}}]}, 0xfd, 0x2c7, &(0x7f0000000480)="$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")
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$bt_hci(r3, 0x0, 0x2, 0x0, &(0x7f0000000640))
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x0, 0x1, 0x1000, 0xb, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xca58, 0x200, 0x2000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2, 0x0, 0x3e3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x800, 0x2, 0x23e}}], 0x1, 0x0, 0x0)

8.436008694s ago: executing program 5 (id=955):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000000400000008000000"], 0x48)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x100102, 0x40)
sendfile(r1, r1, 0x0, 0x6)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCSPGRP(r5, 0x8902, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setpriority(0x0, r2, 0x5)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, 0x0)
write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x6e)
r6 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x11, 0x0, 0x10001, 0x0, 0x2, 0x0, 0x0, 0x3, 0x4}})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000880)=ANY=[@ANYRES64=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94)
r7 = socket(0x10, 0x3, 0x0)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10023}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r8}}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x40}}, 0x0)

8.412628088s ago: executing program 3 (id=956):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x1, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x60, 0x0, &(0x7f0000000a80)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @increfs_done={0x40106308, 0x3}], 0x0, 0x0, 0x0})

6.607895428s ago: executing program 3 (id=957):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
socket$inet6(0xa, 0x1, 0x84)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}, 0x80)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000040)=0x4)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000440)={[0x3ff, 0x2, 0x3, 0x5fffffffffffffff, 0x58f24867, 0xffff, 0x7f, 0x0, 0x9, 0x0, 0xb197, 0x1, 0x2, 0x4, 0x100000000000008, 0x1], 0x54000, 0x100204})
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x3, 0xbde, 0x0, &(0x7f0000000180)="a1984ec3aec3fc2e025f90eda6dbc903939aac644fd36f1e65174cae030c42cbacc392851a695f247112e91f059460a2c031929dc0515ac7cd20775ff9da9c2b6cb48968dcd6d8d982c492932c572f084d3af58650d207eec0794b3e47c5678c36b99eed61e1dbac68ce8a79aa21a51202018bdc4a51489844f785887083841d65c129992bbe5a51c71b95a9847d2bdede66c6e3184c386faf938fd6db888e73a5c0dcc69c3de7458e68ed33226a8d1c8e17", 0x0, 0xb2})
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0xc, 0xc5, 0x0, 0x6, 0x9, 0x4, 0x6, 0x1, 0xf8, 0x0, 0x1, 0x0, 0x3, 0x439, 0x6, 0x9, 0x4, 0x8, '\x00', 0x4, 0x4})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

6.607661148s ago: executing program 4 (id=958):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00')
init_module(0x0, 0xa99, &(0x7f0000001800)='GPL\x00')
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r3, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1, 0x0, 0x0, 0xff000000}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000340)="01", 0x1}], 0x1b6}}], 0x2, 0x0)

6.388801892s ago: executing program 0 (id=959):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
mount(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)='gid=1\x00nk]e\xe5\xcd\xeb\x12\xcdx\xa6\xfb\xc7\f5\xaf\xea)\xfc\x80\x81X\xbb\xd33\xdf\bbx\x10\xa3\xc8n\xa4\'')
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000000ac40)={0x0, 0x0, &(0x7f000000ac00)={&(0x7f000000a900)=@getsa={0x3c, 0x12, 0x1, 0x70bd2d, 0x25dfdbff, {@in=@multicast2, 0x4d4, 0x2}, [@srcaddr={0x14, 0xd, @in=@broadcast}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44010}, 0x800)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
r2 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9e\xd4JSG\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0)
write$binfmt_script(r2, &(0x7f0000000dc0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x101)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

6.259298899s ago: executing program 5 (id=960):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='allow_utime=00000000000000000000004,rodir,shortname=mixed,errors=continue,utf8=0,shor\vname=lower,shortname=mixed,shortname=winnt,quiet,shortname=mixed,nonumtail=0,rodir,shortname=winnt,\x00'], 0x1, 0x2b8, &(0x7f00000004c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x4, 0x401d031, r0, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000100)='./file1\x00', 0x4002, &(0x7f00000001c0)=ANY=[@ANYBLOB='longad,uid=', @ANYRESDEC=0x0, @ANYBLOB=',uid=forget,volume=00000000000000000003,shortad,gid=', @ANYRESDEC=0x0, @ANYBLOB=',session=18446744073709551489,gid=ignore,lastblock=0000001002,partition=18446744073709551612,undelete,\x00'], 0x2, 0xc30, &(0x7f0000002740)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThoXm7ZIZcZy9S+mYhXOqqbZBpBlIhRzC8AVSakLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgpYzOxbcUWRNi2KEmV9Pjb13Z15b/a9eesZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxO+/cvHU6fSwWwEAPEiXx7526oz7PwA8Vq74/38AAAAAAAAAAAAAADjoUhTxZKSYv7yeJqr3HfVL7b6bt8aHR7avdiRVNQ9V5cuf+ukzZ8996YWh89281J79gPr322fjtbErFxsvz92YX5heXJyeaozPtifnpqZ3fYS91t9qsDoBjRuv35y6dm2xceb5s3fsvjXwfv8TxwcuDD178plu2fHhkZGxzSL13vK1e25Ix04zPA5HEScjxXPf/1lqRUQRez8X9Qc79lsdqToxWHVifHik6shMuzW7VO4c7Z6IIqLRU6nZPUfbj0XU+h5oH3bWjFgum182eLDs3th8a6F1dWa6MdpaWGovtedmR1OntWV/GlHE+RSxEhFr/Xcfri+KqEWK7x5bT1cj4lD3PHyxmhi8czuKfezjLpTtbPRFrBSPwJgdYP1RxKuR4ufvnIjJfJ2prjVfiHi1zB9GvFXmSxGp/GKci3hvm+8Rj6ZaFPEX5fhfWE9T1fWge1259PXGV2evzfWU7V5XPuL94a4rxUO6PxzZkg/GAb821aOIVnXFX0/3/psdAAAAAAAAAAAAAAAAAO63I1HEZyLFK//+x9W84qjmpR+7MPQHA7/aO2f86Q85Tln2+YhYLnY3J/dwnhg4mkZTeshziR9n9SjiT/L8v28/7MYAAAAAAAAAAAAAAAAAAAA81or4aaR48d0TaSV61xRvz15vXGldnemsCttd+7e7ZvrGxsZGI3WymXMi53LOlZyrOddyRpHr52zmnMi5nHMl52rOtZxxKNfP2cw5kXM550rO1ZxrOaOW6+ds5pzIuZxzJedqzrWccUDW7gUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+DgpoohfRorvfHM9RYqIZsREdHK1/2G3DgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAo9acifhApGn/YvL2tFhGp+rfjRPnLuWgeLvOT0Rwq86VoXszZqrLW/PZDaD9705eK+Emk6K+/fXvA8/j3dd7d/hrEW9/afPfZWicPdXcOvN//xPFjF4ZGfuPpnV6n7RoweKk9e/NWY3x4ZGSsZ3Mtf/one7YN5M8t7k/XiYjFN958vTUzM71w7y/Kr8Aeqj9CL1LtcempF9WLqB2IZjycvvMYKO//70WK3333P7o3/M79vx6/0nl3+w4fv/jTzfv/i1sPtMv7f21rvXz/L+/p293/n+zZ9mL+3UhfLaK+dGO+73hEffGNN0+2b7SuT1+fnj136tSXh4a+fPZU3+GI+rX2zHTPq/tyugAAAAAAAAAAAAAAAAAenFTEVyJF6yfrqRERt6r5WgMXhp49+cyhOFTNt7pj3vZrY1cuNl6euzG/ML24OD3VGJ9tT85NTe/24+rVdK/x4ZF96cyHOrLP7T9Sf3lu/o2F9vU/Wtp2/9H6xauLSwutye13x5EoIpq9WwarBo8Pj1SNnmm3Zquqo9tOpv/o+lIR/xkpJs810ufztjz/f+sM/zvm/y9vPdA+zf//RM+28jNTKuIXkeJ3/vLp+HzVzqNx1znL5f42Ugye/1wuF4fLct02dJ4r0JkZWJb930jxj7+8s2x3PuSTm2VP7/rEPiLK8T8WKX7w59+L38zb7nz+w/bjf3TrgfZp/J/q2Xb0jucV7Lnr5PE/GSleevLt+K287YOe/9F99saJXPj28zn2afw/1bNtIH/ub9+frgMAAAAAAAAAADzS+lIRfxcpfjRSSy/kbbv5+39TWw+0T3//69M926buz3pFH/pizycVAAAAAA6IvlTETyPF9aW3b8+hvnP+d8/8z9/bnP85nLbsrf6c79eq5wbczz//6zWQP3di790GAAAAAAAAAAAAAAAAAACAAyWlIl7I66lPVPP5p3ZcT301Urzy38/lcul4Wa67DvxA9Wv98tzsyYszM3OTraXW1Znpxth8a3K6rPtUpFj/m8/lukW1vnp3vfnOGu+ba7EvRIqRv++W7azF3l2b/KnNsqfLsp+IFP/1D3eW7a5j/anNsmfKsn8dKb7xz9uXPb5Z9mxZ9nuR4sffaHTLHi3Ldp+P+unNss9PzhX7MCoAAAAAAAAAAAAAAAAAAAA8bvpSEX8WKf7nxsrtufx5/f++nreVt77Vs97/Freqdf4HqvX/d3p9L+v/V88VWN7pUwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4OMpRRFvRor5y+tptb9831G/1J69eWt8eGT7akdSVfNQVb78qZ8+c/bcl14YOt/ND65/v30mXhu7crHx8tyN+YXpxcXpqcb4bHtybmp610fYa/2tBqsT0Ljx+s2pa9cWG2eeP1ttPpx33xp4v/+J4wMXhp49+Uy37PjwyMhYzyFqfff86XdJO2w/HEX8VaR47vs/Sz/qjyhi7+fiQ747++1I1YnBqhPjwyNVR2bardmlcudo90QUEY2eSs3uOXoAY7EnzYjlsvllgwfL7o3NtxZaV2emG6OthaX2UntudjR1Wlv2pxFFnE8RKxGx1n/34fqiiNcjxXePrad/6Y841D0PX7w89rVTZ3ZuR7GPfdyFsp2NvoiV4hEYswOsP4r4p0jx83dOxL/2R9Si8xNfiHi1zB9GvBWd8U7lF+NcxHvbfI94NNWiiP8rx//Cenqnv7wedK8rl77e+Orstbmest3ryiN/f3iQdr42feWBtmMH9Sjix9UVfz39m/+uAQAAAAAAAAAAAAAAAA6QIn49Urz47olUzQ/Oc4qfynuvznSm9XXn/nXnTG9sbGw0UiebOSdyLudcybmacy1nFLl+zmaZ9Y2Nifx+OedKztWcaznjUK6fs5lzIudyzpWcqznXckYt18/ZzDmRcznnSs7VnGs5w7xiAAAAAAAAAAAAAAAAAABgHxTVPym+8831tNHfWV96Ijq5aj3Qj73/DwAA//8H5/Ye")
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x2c, &(0x7f0000000180)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f00004dd000/0x4000)=nil, &(0x7f0000816000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ef5000/0x3000)=nil, &(0x7f0000000300), 0x0, r2}, 0x68)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1c)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0)

5.1283051s ago: executing program 0 (id=961):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
recvmmsg(r0, 0x0, 0x0, 0x10080, 0x0)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000051c0)={0x1, 0x1000}, 0x4)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000080)=0x9, 0x4)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20044000}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r5, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$tipc(r2, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f00000016c0)=""/18, 0x12}], 0x1}, 0xfffffffb}], 0x1, 0x0, 0x0)
close(0x4)
ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(0xffffffffffffffff, 0x4068aea3, &(0x7f00000000c0)={0xdf, 0x0, 0x8000})
socketpair(0x1, 0x100000005, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="030704707900000000"], 0x18}}, 0x0)

5.119523522s ago: executing program 4 (id=962):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f00000005c0)={{0x80, 0xfd}, 'port1\x00', 0x72, 0x11cfa, 0x100, 0x800000c, 0x3, 0x3, 0x1000001})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, &(0x7f0000000680)={0x80, 0x2, 0x80000002, 0x7ff, 0x6, 0xfffffff2})

4.986957849s ago: executing program 3 (id=963):
gettid()
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x10)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10)
r3 = fcntl$dupfd(r2, 0x406, r2)
sendto$inet(r2, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
modify_ldt$write2(0x11, &(0x7f0000000200)={0x77b, 0x0, 0x0, 0x1}, 0x10)
modify_ldt$read(0x0, &(0x7f0000002140)=""/4098, 0xfffffffffffffe8e)
sendmsg$NFT_BATCH(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000007f40)=ANY=[], 0x76b0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004001)

4.49607428s ago: executing program 0 (id=964):
close(0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56d43, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0xa, 0x5ae, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000090}, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56e4f, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xfff2}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_RATE_ENABLE={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

4.4452441s ago: executing program 5 (id=965):
syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffd}}, 0x2e)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r3, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2, 0x3}}, 0x26)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000500)=0x2)
ioctl$PPPIOCBRIDGECHAN(r4, 0x40047435, &(0x7f0000000200)=0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0))
ioctl$PPPIOCBRIDGECHAN(r4, 0x40047435, &(0x7f0000000080))

3.256555054s ago: executing program 0 (id=966):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}], {0x14}}, 0x54}, 0x1, 0x0, 0x0, 0x48840}, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0xdb, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
socket$unix(0x1, 0x1, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]})
setuid(0x0)
r1 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x1070bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0x7, 0xffff}, {0xfff2, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0x7}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40844}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40800}, 0x44000)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$inet6(0xa, 0x400000000001, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x20004048, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}, 0x4}, 0x1c)
io_submit(0x0, 0x0, &(0x7f0000001300))
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040040)
getsockopt$inet_int(r3, 0x0, 0xe, 0x0, &(0x7f00000000c0))
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge0\x00'})
sendmsg$nl_route(r5, 0x0, 0x8000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0)
write(r6, &(0x7f0000000180)='1', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/test/file0\x00', 0x20)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_EEE_SET(r1, 0x0, 0x4040010)

3.256314314s ago: executing program 5 (id=967):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x1, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x60, 0x0, &(0x7f0000000a80)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @increfs_done={0x40106308, 0x3}], 0x0, 0x0, 0x0})

3.256168984s ago: executing program 3 (id=968):
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@local, @in=@rand_addr=0x64010101, 0xfffd, 0xfffe, 0x0, 0x0, 0x2, 0x20}, {0x0, 0x0, 0x2, 0x0, 0xffffffffffff235b, 0x0, 0x9, 0x1000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4d5, 0x6c}, 0x2, @in6=@loopback, 0x0, 0x2, 0x0, 0x0, 0xffdffffc, 0x1000000}}, 0xe8)
socket(0x10, 0x3, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00'})
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000ac0)='gid', &(0x7f00000005c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0)
sendto$inet(r1, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10)
recvmmsg(r1, &(0x7f0000001080), 0x3fffffffffffc65, 0x22, 0x0)

3.256086014s ago: executing program 4 (id=969):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x4}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r5=>0x0})
sendto$packet(r4, &(0x7f00000002c0)="0503e5fdd3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x8100, r5, 0x1, 0x0, 0x6, @multicast}, 0x14)

3.057165795s ago: executing program 4 (id=970):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001})
mount(0x0, 0x0, &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
write$tun(r0, &(0x7f00000000c0)={@void, @val={0x1, 0x5, 0x1c, 0x10, 0x14, 0x6}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x40, 0x11, 0x0, @dev={0xac, 0x14, 0x0, 0x2}, @dev={0xac, 0x14, 0x0, 0x1}}, {0x1234, 0x4e20, 0x8}}}, 0x26)

3.056515105s ago: executing program 5 (id=971):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x4000, &(0x7f00000000c0)=ANY=[], 0xff, 0x5fc4, &(0x7f0000006400)="$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")
socket(0xa, 0x3, 0xff)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x2, 0x1}]}, @void, @void, @void, @val={0x2d, 0x1a, {0x112d, 0x0, 0x0, 0x0, {0x1}}}, @void, @void}, 0x4b)
syz_80211_inject_frame(0x0, 0x0, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x44042, 0x1ff)
syz_80211_inject_frame(&(0x7f00000001c0), 0x0, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0)
sendfile(r2, r3, 0x0, 0x20fffe82)
ftruncate(r2, 0x10001)

2.709466576s ago: executing program 6 (id=972):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
mount(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)='gid=1\x00nk]e\xe5\xcd\xeb\x12\xcdx\xa6\xfb\xc7\f5\xaf\xea)\xfc\x80\x81X\xbb\xd33\xdf\bbx\x10\xa3\xc8n\xa4\'')
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000000ac40)={0x0, 0x0, &(0x7f000000ac00)={&(0x7f000000a900)=@getsa={0x3c, 0x12, 0x1, 0x70bd2d, 0x25dfdbff, {@in=@multicast2, 0x4d4, 0x2}, [@srcaddr={0x14, 0xd, @in=@broadcast}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44010}, 0x800)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
r2 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9e\xd4JSG\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0)
write$binfmt_script(r2, &(0x7f0000000dc0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x101)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

1.939025723s ago: executing program 0 (id=973):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00')
init_module(0x0, 0xa99, &(0x7f0000001800)='GPL\x00')
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r3, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1, 0x0, 0x0, 0xff000000}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000340)="01", 0x1}], 0x1b6}}], 0x2, 0x0)

1.938223253s ago: executing program 4 (id=983):
open(0x0, 0x4c1c0, 0x50)
setns(0xc9, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xffffffff, @empty, 0x3}], 0x1c)
sendmsg$inet6(r0, &(0x7f0000000540)={&(0x7f00000000c0)={0xa, 0x4e24, 0x8004, @loopback, 0x7fff}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000100)="f0", 0x1}], 0x1}, 0x400d4)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e1e, @empty}}, 0xffffff01, 0x67, 0xa4f, 0xc0, 0x15, 0xffffff86, 0xa9}, 0x9c)

1.617053439s ago: executing program 6 (id=974):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
socket$inet6(0xa, 0x1, 0x84)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}, 0x80)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000040)=0x4)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000440)={[0x3ff, 0x2, 0x3, 0x5fffffffffffffff, 0x58f24867, 0xffff, 0x7f, 0x0, 0x9, 0x0, 0xb197, 0x1, 0x2, 0x4, 0x100000000000008, 0x1], 0x54000, 0x100204})
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x3, 0xbde, 0x0, &(0x7f0000000180)="a1984ec3aec3fc2e025f90eda6dbc903939aac644fd36f1e65174cae030c42cbacc392851a695f247112e91f059460a2c031929dc0515ac7cd20775ff9da9c2b6cb48968dcd6d8d982c492932c572f084d3af58650d207eec0794b3e47c5678c36b99eed61e1dbac68ce8a79aa21a51202018bdc4a51489844f785887083841d65c129992bbe5a51c71b95a9847d2bdede66c6e3184c386faf938fd6db888e73a5c0dcc69c3de7458e68ed33226a8d1c8e17", 0x0, 0xb2})
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0xc, 0xc5, 0x0, 0x6, 0x9, 0x4, 0x6, 0x1, 0xf8, 0x0, 0x1, 0x0, 0x3, 0x439, 0x6, 0x9, 0x4, 0x8, '\x00', 0x4, 0x4})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

620.401023ms ago: executing program 0 (id=975):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x50)
socket$netlink(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10000)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4040011)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x3, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'wlan0\x00'}]}]}], {0x14}}, 0xa4}, 0x1, 0x0, 0x0, 0x4c841}, 0x802)

399.079758ms ago: executing program 6 (id=976):
close(0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56d43, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0xa, 0x5ae, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000090}, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56e4f, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xfff2}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_RATE_ENABLE={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

1.99787ms ago: executing program 6 (id=977):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f00000005c0)={{0x80, 0xfd}, 'port1\x00', 0x72, 0x11cfa, 0x100, 0x800000c, 0x3, 0x3, 0x1000001})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, &(0x7f0000000680)={0x80, 0x2, 0x80000002, 0x7ff, 0x6, 0xfffffff2})

0s ago: executing program 5 (id=978):
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1})
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xb, 0x11, r0, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000001000/0x2000)=nil)

kernel console output (not intermixed with test programs):

 using dummy_hcd
[  118.254973][ T4876] overlayfs: failed to resolve './file0/file0': -2
[  118.282068][ T4878] loop4: detected capacity change from 0 to 128
[  118.322681][ T4469] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  119.086084][ T4891] FAULT_INJECTION: forcing a failure.
[  119.086084][ T4891] name failslab, interval 1, probability 0, space 0, times 0
[  119.120822][ T4671] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.195411][ T4891] CPU: 1 PID: 4891 Comm: syz.3.181 Not tainted syzkaller #0
[  119.202788][ T4891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  119.212890][ T4891] Call Trace:
[  119.216214][ T4891]  <TASK>
[  119.219182][ T4891]  dump_stack_lvl+0x188/0x24e
[  119.224068][ T4891]  ? show_regs_print_info+0x12/0x12
[  119.229401][ T4891]  ? load_image+0x410/0x410
[  119.233965][ T4891]  ? __might_sleep+0xd0/0xd0
[  119.238676][ T4891]  ? __lock_acquire+0x7c40/0x7c40
[  119.243751][ T4891]  should_fail_ex+0x390/0x4c0
[  119.248478][ T4891]  should_failslab+0x5/0x20
[  119.253104][ T4891]  slab_pre_alloc_hook+0x59/0x300
[  119.258168][ T4891]  ? sk_prot_alloc+0xe7/0x210
[  119.262884][ T4891]  __kmem_cache_alloc_node+0x4f/0x270
[  119.268312][ T4891]  ? sk_prot_alloc+0xe7/0x210
[  119.273029][ T4891]  __kmalloc+0xa3/0x240
[  119.277241][ T4891]  ? __rwlock_init+0x140/0x140
[  119.282106][ T4891]  sk_prot_alloc+0xe7/0x210
[  119.286649][ T4891]  ? sk_alloc+0x20/0x330
[  119.290932][ T4891]  sk_alloc+0x36/0x330
[  119.295061][ T4891]  __netlink_create+0x6b/0x2d0
[  119.299866][ T4891]  __netlink_kernel_create+0x144/0x7b0
[  119.305360][ T4891]  ? netlink_set_err+0x3b0/0x3b0
[  119.310322][ T4891]  uevent_net_init+0xf8/0x2d0
[  119.315041][ T4891]  ? audit_net_init+0xed/0x1f0
[  119.319820][ T4891]  ? alloc_uevent_skb+0x230/0x230
[  119.324863][ T4891]  ? uevent_net_exit+0x1d0/0x1d0
[  119.329818][ T4891]  ? __kmem_cache_alloc_node+0x19d/0x270
[  119.335494][ T4891]  ops_init+0x360/0x5e0
[  119.339795][ T4891]  setup_net+0x4f2/0xbd0
[  119.344060][ T4891]  ? copy_net_ns+0x5b0/0x5b0
[  119.348669][ T4891]  ? copy_net_ns+0x324/0x5b0
[  119.353275][ T4891]  ? down_read_killable+0x1cc/0x340
[  119.358584][ T4891]  copy_net_ns+0x33e/0x5b0
[  119.363026][ T4891]  create_new_namespaces+0x3ce/0x700
[  119.368334][ T4891]  unshare_nsproxy_namespaces+0x116/0x160
[  119.374070][ T4891]  ksys_unshare+0x4f6/0x8e0
[  119.378588][ T4891]  ? sighand_ctor+0x40/0x40
[  119.383104][ T4891]  ? lock_chain_count+0x20/0x20
[  119.387972][ T4891]  ? syscall_enter_from_user_mode+0x21/0x80
[  119.394083][ T4891]  __x64_sys_unshare+0x34/0x40
[  119.398885][ T4891]  do_syscall_64+0x4c/0xa0
[  119.403402][ T4891]  ? clear_bhb_loop+0x60/0xb0
[  119.408096][ T4891]  ? clear_bhb_loop+0x60/0xb0
[  119.412796][ T4891]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  119.418710][ T4891] RIP: 0033:0x7f9d8159e159
[  119.423140][ T4891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  119.442757][ T4891] RSP: 002b:00007f9d823f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  119.451305][ T4891] RAX: ffffffffffffffda RBX: 00007f9d81825fa0 RCX: 00007f9d8159e159
[  119.459499][ T4891] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
[  119.467589][ T4891] RBP: 00007f9d8163506b R08: 0000000000000000 R09: 0000000000000000
[  119.475573][ T4891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  119.483557][ T4891] R13: 00007f9d81826038 R14: 00007f9d81825fa0 R15: 00007ffe5f555288
[  119.491640][ T4891]  </TASK>
[  119.551733][ T4891] kobject_uevent: unable to create netlink socket!
[  119.678678][ T4671] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.490808][ T4671] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.726204][ T4671] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.112942][ T4284] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  123.132018][ T4292] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  123.140648][ T4292] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  123.149640][ T4292] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  123.151295][ T4264] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  123.174004][ T4292] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  123.187762][ T4292] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  123.432929][ T4264] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  123.451788][ T4264] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  123.507430][ T4264] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[  123.537712][ T4264] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  123.605160][ T4264] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  123.659636][ T4264] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  123.708227][ T4264] usb 1-1: Product: syz
[  123.721169][ T4264] usb 1-1: Manufacturer: syz
[  123.762809][ T4264] cdc_wdm 1-1:1.0: skipping garbage
[  123.768217][ T4264] cdc_wdm 1-1:1.0: skipping garbage
[  123.851663][ T4264] cdc_wdm: probe of 1-1:1.0 failed with error -22
[  124.081993][ T4264] usb 1-1: USB disconnect, device number 2
[  124.225287][ T4911] chnl_net:caif_netlink_parms(): no params data found
[  125.301840][ T4292] Bluetooth: hci0: command 0x0409 tx timeout
[  125.544332][ T4940] loop2: detected capacity change from 0 to 1024
[  125.605423][ T4940] EXT4-fs: Ignoring removed oldalloc option
[  125.661354][ T4940] ext4: Bad value for 'auto_da_alloc'
[  125.667335][ T4945] Zero length message leads to an empty skb
[  125.674114][ T4911] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.734949][ T4911] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.787788][ T4911] device bridge_slave_0 entered promiscuous mode
[  126.569076][ T4954] loop0: detected capacity change from 0 to 3904
[  126.624051][ T4954] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting.
[  126.660797][ T4954] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[  126.674803][ T4951] netlink: 'syz.0.193': attribute type 10 has an invalid length.
[  126.691217][ T4951] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.693755][ T4954]  loop0:
[  126.698874][ T4951] bridge0: port 1(bridge_slave_0) entered disabled state
[  126.777169][ T4951] bridge0: port 2(bridge_slave_1) entered blocking state
[  126.784472][ T4951] bridge0: port 2(bridge_slave_1) entered forwarding state
[  126.792931][ T4951] bridge0: port 1(bridge_slave_0) entered blocking state
[  126.800203][ T4951] bridge0: port 1(bridge_slave_0) entered forwarding state
[  126.915771][ T4951] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  127.028727][ T4911] bridge0: port 2(bridge_slave_1) entered blocking state
[  127.064917][ T4911] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.264270][ T4911] device bridge_slave_1 entered promiscuous mode
[  127.381414][ T4292] Bluetooth: hci0: command 0x041b tx timeout
[  128.144555][ T4971] loop0: detected capacity change from 0 to 128
[  129.491089][    C0] sched: RT throttling activated
[  129.491980][ T4278] Bluetooth: hci0: command 0x040f tx timeout
[  130.679151][ T4708] Bluetooth: hci5: Frame reassembly failed (-84)
[  130.742339][ T4278] Bluetooth: hci5: command 0x1003 tx timeout
[  130.749048][ T4292] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  131.414712][ T4911] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  131.470716][ T4911] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  131.541410][ T4292] Bluetooth: hci0: command 0x0419 tx timeout
[  131.580503][ T4671] device hsr_slave_0 left promiscuous mode
[  131.603502][ T4671] device hsr_slave_1 left promiscuous mode
[  131.650213][ T4671] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  131.673837][ T4671] batman_adv: batadv0: Removing interface: batadv_slave_0
[  131.703029][ T4671] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  131.710504][ T4671] batman_adv: batadv0: Removing interface: batadv_slave_1
[  131.734276][ T4671] device bridge_slave_1 left promiscuous mode
[  131.752003][ T4671] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.806930][ T4671] device bridge_slave_0 left promiscuous mode
[  131.814813][ T4671] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.913385][ T4279] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  131.937972][ T4671] device veth1_macvtap left promiscuous mode
[  131.960128][ T4985] loop4: detected capacity change from 0 to 8192
[  131.965489][ T4671] device veth0_macvtap left promiscuous mode
[  131.977769][ T4671] device veth1_vlan left promiscuous mode
[  131.984027][ T4671] device veth0_vlan left promiscuous mode
[  132.037122][ T4991] loop0: detected capacity change from 0 to 3904
[  132.129954][ T4279] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  132.188302][ T4279] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  132.377255][ T4279] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  132.528294][ T4279] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  132.712026][ T4279] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  132.876691][ T4279] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  132.906342][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  132.913312][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  132.991960][ T4279] usb 3-1: Product: syz
[  133.029320][ T4279] usb 3-1: Manufacturer: syz
[  133.170743][ T4279] cdc_wdm 3-1:1.0: skipping garbage
[  133.180943][ T5001] process 'syz.3.210' launched './file0' with NULL argv: empty string added
[  133.215924][ T4279] cdc_wdm 3-1:1.0: skipping garbage
[  133.239202][ T4279] cdc_wdm: probe of 3-1:1.0 failed with error -22
[  134.026839][ T4287] usb 3-1: USB disconnect, device number 2
[  134.698474][ T5012] loop0: detected capacity change from 0 to 128
[  137.647509][ T4671] team0 (unregistering): Port device team_slave_1 removed
[  137.780227][ T5042] loop0: detected capacity change from 0 to 3904
[  137.801891][ T4671] team0 (unregistering): Port device team_slave_0 removed
[  137.851325][ T5042] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting.
[  137.892972][ T5042] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[  137.908011][ T4671] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  137.937625][ T5042]  loop0:
[  138.075042][ T4671] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  138.111985][ T5044] cgroup: noprefix used incorrectly
[  139.728108][ T5059] loop2: detected capacity change from 0 to 40427
[  139.749855][ T5059] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  139.758237][ T5059] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  139.774313][ T5059] F2FS-fs (loop2): invalid crc value
[  139.793242][ T5059] F2FS-fs (loop2): Found nat_bits in checkpoint
[  139.830888][ T5059] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  139.838221][ T5059] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  141.758091][ T4671] bond0 (unregistering): Released all slaves
[  141.789798][ T5069] loop3: detected capacity change from 0 to 4096
[  141.856176][ T5069] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  141.883324][ T5069] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #15: comm syz.3.228: corrupted inode contents
[  141.947497][ T5069] EXT4-fs error (device loop3): ext4_dirty_inode:6166: inode #15: comm syz.3.228: mark_inode_dirty error
[  142.024645][ T5069] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #15: comm syz.3.228: corrupted inode contents
[  142.079203][ T5069] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #15: comm syz.3.228: mark_inode_dirty error
[  142.102339][ T5069] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #15: comm syz.3.228: corrupted inode contents
[  142.148263][ T5026] syzkaller1: tun_chr_ioctl cmd 35108
[  142.158728][ T5069] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #15: comm syz.3.228: mark_inode_dirty error
[  142.177269][ T5052] netlink: 36 bytes leftover after parsing attributes in process `syz.0.223'.
[  142.192324][ T5069] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #15: comm syz.3.228: corrupted inode contents
[  142.198712][ T4911] team0: Port device team_slave_0 added
[  142.330031][ T4911] team0: Port device team_slave_1 added
[  142.350226][ T5069] EXT4-fs error (device loop3): ext4_truncate:4325: inode #15: comm syz.3.228: mark_inode_dirty error
[  142.411834][ T5069] EXT4-fs error (device loop3) in ext4_setattr:5695: Corrupt filesystem
[  142.512973][ T5076] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #15: comm syz.3.228: corrupted inode contents
[  142.548364][ T4911] batman_adv: batadv0: Adding interface: batadv_slave_0
[  142.579111][ T4911] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  142.609323][ T5086] loop0: detected capacity change from 0 to 128
[  142.661843][ T4421] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  142.860940][ T4911] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  142.921744][ T4283] EXT4-fs (loop3): unmounting filesystem.
[  142.977897][ T5091] loop0: detected capacity change from 0 to 3904
[  142.995315][ T4911] batman_adv: batadv0: Adding interface: batadv_slave_1
[  143.041122][ T4911] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  143.294117][ T4911] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  144.111027][ T5103] cgroup: noprefix used incorrectly
[  144.280285][ T4911] device hsr_slave_0 entered promiscuous mode
[  144.319241][ T4911] device hsr_slave_1 entered promiscuous mode
[  144.372930][ T4911] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  144.505413][ T4911] Cannot create hsr debugfs directory
[  145.150989][ T5111] loop3: detected capacity change from 0 to 8192
[  145.306428][ T4911] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  145.378354][ T4911] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  145.422761][ T4911] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  145.465074][ T4911] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  145.812076][ T4911] 8021q: adding VLAN 0 to HW filter on device bond0
[  145.875486][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  145.899544][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  145.959403][ T4911] 8021q: adding VLAN 0 to HW filter on device team0
[  146.001565][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  146.067842][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  146.114176][ T4747] bridge0: port 1(bridge_slave_0) entered blocking state
[  146.121462][ T4747] bridge0: port 1(bridge_slave_0) entered forwarding state
[  146.186598][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  146.235465][ T4900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  146.285890][ T4900] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  146.659033][ T4900] bridge0: port 2(bridge_slave_1) entered blocking state
[  146.666276][ T4900] bridge0: port 2(bridge_slave_1) entered forwarding state
[  146.949164][ T4900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  147.043588][ T4900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  147.128001][ T4900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  147.182496][ T4900] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  147.214034][ T5143] binder: 5142:5143 ioctl 4018620d 0 returned -22
[  147.284896][ T4900] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  147.412504][ T4900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  147.436531][ T4900] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  147.454062][ T4900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  147.823756][ T4900] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  147.934721][ T4900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  147.980266][ T5151] loop2: detected capacity change from 0 to 512
[  148.018338][ T4900] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  148.024909][ T4911] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  148.031957][ T5151] EXT4-fs: Ignoring removed nobh option
[  148.114939][ T5159] loop0: detected capacity change from 0 to 3904
[  148.127888][ T5151] EXT4-fs (loop2): orphan cleanup on readonly fs
[  148.162198][ T5151] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #15: comm syz.2.243: corrupted inode contents
[  148.177086][ T5151] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem
[  148.177704][ T5151] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #15: comm syz.2.243: corrupted inode contents
[  148.471783][ T5151] EXT4-fs error (device loop2): ext4_evict_inode:329: inode #15: comm syz.2.243: mark_inode_dirty error
[  148.546502][ T5151] EXT4-fs (loop2): 1 orphan inode deleted
[  148.760187][ T5151] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  149.066289][ T4911] 8021q: adding VLAN 0 to HW filter on device batadv0
[  149.096643][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  149.110858][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  149.164357][ T4285] EXT4-fs (loop2): unmounting filesystem.
[  149.322291][ T5179] device syzkaller0 entered promiscuous mode
[  149.359078][ T5179] tipc: Started in network mode
[  149.374709][ T5179] tipc: Node identity 6242924b00c1, cluster identity 4711
[  149.402420][ T5179] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  149.557318][ T5179] tipc: Resetting bearer <eth:syzkaller0>
[  150.358682][ T5177] tipc: Resetting bearer <eth:syzkaller0>
[  150.502331][ T5177] tipc: Disabling bearer <eth:syzkaller0>
[  150.542943][ T4368] tipc: Node number set to 1652789835
[  150.796021][ T5192] cgroup: noprefix used incorrectly
[  151.990994][ T5210] binder: 5206:5210 ioctl 4018620d 0 returned -22
[  152.023566][ T5209] loop4: detected capacity change from 0 to 128
[  152.047740][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  152.061820][ T4469] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  152.080434][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  152.467991][ T5213] loop3: detected capacity change from 0 to 40427
[  152.478649][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  152.515442][ T5213] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  152.516819][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  152.523306][ T5213] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  152.550750][ T5213] F2FS-fs (loop3): invalid crc value
[  152.572430][ T5219] loop0: detected capacity change from 0 to 3904
[  152.582901][ T5213] F2FS-fs (loop3): Found nat_bits in checkpoint
[  152.642328][ T4911] device veth0_vlan entered promiscuous mode
[  152.667534][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  152.675851][ T5223]  loop0:
[  152.689512][ T5213] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  152.697016][ T5213] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  152.728742][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  152.796851][ T4911] device veth1_vlan entered promiscuous mode
[  152.942110][ T4708] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  152.962013][ T4708] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  152.992108][ T4708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  153.121929][ T4708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  153.180693][ T4911] device veth0_macvtap entered promiscuous mode
[  154.171979][ T4911] device veth1_macvtap entered promiscuous mode
[  154.327732][ T4911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  154.421432][ T4911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  154.432462][ T4911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  154.443167][ T4911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  154.461125][ T4911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  154.501229][ T4911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  154.555134][ T4911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  154.591125][ T4911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  154.619385][ T5238] loop0: detected capacity change from 0 to 4096
[  154.758333][ T4911] batman_adv: batadv0: Interface activated: batadv_slave_0
[  154.790667][ T5238] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  154.799373][ T4911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  154.832830][ T4911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  155.357175][ T5238] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #15: comm syz.0.262: corrupted inode contents
[  155.411609][ T5238] EXT4-fs error (device loop0): ext4_dirty_inode:6166: inode #15: comm syz.0.262: mark_inode_dirty error
[  155.426291][ T5238] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #15: comm syz.0.262: corrupted inode contents
[  155.508435][ T4911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  155.522747][ T5238] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #15: comm syz.0.262: mark_inode_dirty error
[  155.570777][ T4911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  155.571502][ T5238] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #15: comm syz.0.262: corrupted inode contents
[  155.610539][ T4911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  155.638819][ T4911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  155.670570][ T4911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  155.671604][ T5238] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #15: comm syz.0.262: mark_inode_dirty error
[  155.717801][ T4911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  155.777857][ T5238] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #15: comm syz.0.262: corrupted inode contents
[  155.811415][ T4911] batman_adv: batadv0: Interface activated: batadv_slave_1
[  155.861833][ T4708] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  155.877077][ T5238] EXT4-fs error (device loop0): ext4_truncate:4325: inode #15: comm syz.0.262: mark_inode_dirty error
[  155.889648][ T4708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  155.926750][ T5238] EXT4-fs error (device loop0) in ext4_setattr:5695: Corrupt filesystem
[  155.931925][ T4708] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  155.963071][ T5249] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #15: comm syz.0.262: corrupted inode contents
[  156.001960][ T4708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  156.028836][ T4911] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  156.061571][ T4911] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  156.108045][ T4911] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  156.158795][ T4911] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  156.199389][ T4277] EXT4-fs (loop0): unmounting filesystem.
[  156.214580][ T5258] loop2: detected capacity change from 0 to 512
[  156.467996][   T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  156.504517][   T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  156.548587][ T5258] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  156.610868][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  156.652493][ T5258] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  156.672384][ T4672] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  156.681827][ T4672] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  156.712895][ T4708] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  156.725357][ T5267] binder: 5266:5267 ioctl 4018620d 0 returned -22
[  157.311192][ T4287] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  157.574716][ T5281] zram0: detected capacity change from 0 to 72
[  158.332441][ T4287] usb 5-1: config 0 has an invalid interface number: 50 but max is 0
[  158.951206][ T4287] usb 5-1: config 0 has no interface number 0
[  158.957452][ T4287] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  158.975981][ T4287] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  158.985184][ T4287] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  158.993522][ T4287] usb 5-1: Product: syz
[  158.997916][ T4287] usb 5-1: Manufacturer: syz
[  159.002623][ T4287] usb 5-1: SerialNumber: syz
[  159.008772][ T4287] usb 5-1: config 0 descriptor??
[  159.022028][ T4287] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0
[  159.441654][ T4323] usb 5-1: USB disconnect, device number 3
[  159.641566][ T5271] yurex 5-1:0.50: yurex_write - failed to send bulk msg, error -19
[  160.255548][ T4323] yurex 5-1:0.50: USB YUREX #0 now disconnected
[  160.352727][ T4285] EXT4-fs (loop2): unmounting filesystem.
[  160.522192][ T5296] device syzkaller0 entered promiscuous mode
[  160.562339][ T5296] tipc: Started in network mode
[  160.567887][ T5296] tipc: Node identity 827ff933a45e, cluster identity 4711
[  160.750334][ T5298] loop5: detected capacity change from 0 to 40427
[  160.778603][ T5298] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  160.786529][ T5298] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  160.798188][ T5298] F2FS-fs (loop5): invalid crc value
[  160.805830][ T5296] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  160.843915][ T5298] F2FS-fs (loop5): Found nat_bits in checkpoint
[  160.891030][ T5296] tipc: Resetting bearer <eth:syzkaller0>
[  160.905284][ T5298] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  160.912714][ T5298] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  160.952245][ T5295] tipc: Resetting bearer <eth:syzkaller0>
[  160.959530][ T5303] loop2: detected capacity change from 0 to 128
[  161.028087][ T5303] FAT-fs (loop2): Unrecognized mount option "shorname=lower" or missing value
[  161.077599][ T5295] tipc: Disabling bearer <eth:syzkaller0>
[  161.264517][ T5309] loop4: detected capacity change from 0 to 128
[  161.415204][ T5310] binder: BINDER_SET_CONTEXT_MGR already set
[  161.892766][ T5310] binder: 5307:5310 ioctl 4018620d 200000000040 returned -16
[  162.070638][ T4421] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  162.086425][ T5303] loop2: detected capacity change from 0 to 2048
[  162.175844][ T5318] binder: 5316:5318 ioctl 4018620d 0 returned -22
[  162.328211][ T5303] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  163.435976][ T5325] loop3: detected capacity change from 0 to 32768
[  163.525213][ T5325] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  164.823737][ T5325] syz.3.281 (5325) used greatest stack depth: 18624 bytes left
[  165.091376][ T5335] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  165.216489][ T5340] tipc: Started in network mode
[  165.222741][ T4283] ocfs2: Unmounting device (7,3) on (node local)
[  165.251834][ T5340] tipc: Node identity 8ad880fde747, cluster identity 4711
[  165.259186][ T5340] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  165.424665][ T5331] device syzkaller0 entered promiscuous mode
[  165.452930][ T5345] loop3: detected capacity change from 0 to 512
[  165.540175][ T5346] tipc: Resetting bearer <eth:syzkaller0>
[  165.570816][ T5345] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  165.601853][ T5345] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  165.645795][ T5329] tipc: Resetting bearer <eth:syzkaller0>
[  166.662210][ T5329] tipc: Disabling bearer <eth:syzkaller0>
[  167.079834][   T22] tipc: Node number set to 1839169789
[  167.193350][ T5363] loop5: detected capacity change from 0 to 512
[  167.294174][ T5363] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  167.920032][ T4911] EXT4-fs (loop5): unmounting filesystem.
[  168.075084][ T5375] binder: BINDER_SET_CONTEXT_MGR already set
[  168.301368][ T5375] binder: 5374:5375 ioctl 4018620d 200000000040 returned -16
[  168.344426][ T5378] device syzkaller0 entered promiscuous mode
[  168.376845][ T5378] tipc: Started in network mode
[  168.382283][ T5378] tipc: Node identity aa9592a1bc3, cluster identity 4711
[  168.404262][ T5378] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  168.794196][ T5378] tipc: Resetting bearer <eth:syzkaller0>
[  169.044931][ T5377] tipc: Resetting bearer <eth:syzkaller0>
[  169.133778][ T5384] binder: 5382:5384 ioctl 4018620d 0 returned -22
[  169.186874][ T5377] tipc: Disabling bearer <eth:syzkaller0>
[  169.265779][ T4283] EXT4-fs (loop3): unmounting filesystem.
[  170.860584][ T5397] loop5: detected capacity change from 0 to 128
[  172.410944][ T5408] null_blk: disk nullb1 created
[  173.230251][ T5414] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  174.364272][ T5419] tipc: Started in network mode
[  174.393516][ T5419] tipc: Node identity 16e34a124e14, cluster identity 4711
[  174.405289][ T5421] binder: BINDER_SET_CONTEXT_MGR already set
[  174.431652][ T5419] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  174.438837][ T5421] binder: 5420:5421 ioctl 4018620d 200000000040 returned -16
[  174.479963][ T5419] device syzkaller0 entered promiscuous mode
[  174.580605][ T5419] tipc: Resetting bearer <eth:syzkaller0>
[  174.636579][ T5417] tipc: Resetting bearer <eth:syzkaller0>
[  174.749958][ T5417] tipc: Disabling bearer <eth:syzkaller0>
[  174.762519][ T5426] loop5: detected capacity change from 0 to 512
[  175.693453][   T41] tipc: Node number set to 1492601362
[  175.785776][ T5426] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  175.928092][ T5426] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  177.067556][ T5453] binder: 5452:5453 ioctl 4018620d 0 returned -22
[  178.499234][ T4911] EXT4-fs (loop5): unmounting filesystem.
[  178.662109][ T5473] binder: 5472:5473 ioctl c0306201 0 returned -14
[  178.729864][ T5475] loop5: detected capacity change from 0 to 128
[  178.837573][ T4469] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  180.002433][ T5493] binder: 5492:5493 ioctl c0306201 0 returned -14
[  180.112565][ T5495] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  180.149464][ T5495] device syzkaller0 entered promiscuous mode
[  180.201238][ T5495] tipc: Resetting bearer <eth:syzkaller0>
[  180.251877][ T5494] tipc: Resetting bearer <eth:syzkaller0>
[  180.526346][ T5494] tipc: Disabling bearer <eth:syzkaller0>
[  180.974687][ T5503] zram: Cannot change disksize for initialized device
[  183.458773][ T4323] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  184.471225][ T4323] usb 3-1: Using ep0 maxpacket: 8
[  184.487693][ T4323] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  184.554096][ T4323] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  184.611306][ T4323] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  184.653155][ T5531] loop4: detected capacity change from 0 to 256
[  184.661260][ T4323] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  184.700394][ T4323] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  184.744248][ T4323] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  184.780359][ T4323] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  185.562580][ T5538] netlink: 'syz.0.326': attribute type 1 has an invalid length.
[  185.611196][ T5538] netlink: 'syz.0.326': attribute type 2 has an invalid length.
[  185.662894][ T5538] netlink: 8 bytes leftover after parsing attributes in process `syz.0.326'.
[  185.842573][ T5543] usbtmc 3-1:16.0: simple usb_control_msg returned 0
[  185.950134][ T5546] binder: 5545:5546 ioctl c0306201 0 returned -14
[  186.099998][ T4350] usb 3-1: USB disconnect, device number 3
[  187.325928][ T5565] loop3: detected capacity change from 0 to 164
[  187.343813][ T5565] rock: directory entry would overflow storage
[  187.350441][ T5565] rock: sig=0x66, size=4, remaining=3
[  187.378537][ T5565] rock: directory entry would overflow storage
[  187.385186][ T5565] rock: sig=0x66, size=4, remaining=3
[  192.459457][ T5608] loop4: detected capacity change from 0 to 128
[  192.482298][ T5608] FAT-fs (loop4): Unrecognized mount option "shorname=lower" or missing value
[  192.634041][ T4469] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  192.750974][ T5608] loop4: detected capacity change from 0 to 2048
[  192.778461][ T4469] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  192.802783][ T5613] loop2: detected capacity change from 0 to 128
[  192.875157][ T5608] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  194.011165][ T4324] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  194.344427][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  194.350977][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  194.365973][ T5633] loop5: detected capacity change from 0 to 256
[  194.401286][ T4324] usb 5-1: Using ep0 maxpacket: 16
[  194.445388][ T4324] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  195.232591][ T4324] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  195.301825][ T4324] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  195.381233][ T4324] usb 5-1: Product: syz
[  195.386048][ T4324] usb 5-1: Manufacturer: syz
[  195.402754][ T4324] usb 5-1: SerialNumber: syz
[  195.473553][ T4324] usb 5-1: config 0 descriptor??
[  195.513442][ T4324] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  195.556542][ T4324] em28xx 5-1:0.0: DVB interface 0 found: bulk
[  196.102754][ T4324] em28xx 5-1:0.0: unknown em28xx chip ID (0)
[  197.350622][ T4324] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  197.361375][ T4324] em28xx 5-1:0.0: board has no eeprom
[  199.861881][ T4324] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  199.919654][ T4324] em28xx 5-1:0.0: dvb set to bulk mode.
[  200.188239][  T130] em28xx 5-1:0.0: Binding DVB extension
[  200.339138][ T4324] usb 5-1: USB disconnect, device number 4
[  200.374277][ T4324] em28xx 5-1:0.0: Disconnecting em28xx
[  200.655152][  T130] em28xx 5-1:0.0: Registering input extension
[  200.669071][ T4324] em28xx 5-1:0.0: Closing input extension
[  200.735800][ T4324] em28xx 5-1:0.0: Freeing device
[  201.331302][  T130] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  201.541526][ T4292] Bluetooth: hci3: command 0x0406 tx timeout
[  201.547678][ T4292] Bluetooth: hci1: command 0x0406 tx timeout
[  201.554164][ T4284] Bluetooth: hci2: command 0x0406 tx timeout
[  201.561991][  T130] usb 6-1: Using ep0 maxpacket: 32
[  201.580349][  T130] usb 6-1: unable to get BOS descriptor or descriptor too short
[  201.666890][ T5698] loop2: detected capacity change from 0 to 512
[  201.675618][  T130] usb 6-1: config 14 has an invalid interface number: 57 but max is 0
[  201.740130][  T130] usb 6-1: config 14 has no interface number 0
[  201.767911][  T130] usb 6-1: config 14 interface 57 has no altsetting 0
[  201.816393][  T130] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  201.851257][  T130] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  201.865496][ T5698] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  201.874843][  T130] usb 6-1: Product: syz
[  201.874894][  T130] usb 6-1: Manufacturer: syz
[  201.874909][  T130] usb 6-1: SerialNumber: syz
[  201.961212][ T4324] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  201.966365][ T5698] ext4 filesystem being mounted at /89/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  202.075546][ T5698] Bluetooth: MGMT ver 1.22
[  202.151191][ T4324] usb 4-1: Using ep0 maxpacket: 8
[  202.191373][ T4324] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  202.343807][ T4324] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  202.550271][ T4324] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  202.729232][ T5709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  202.809664][ T4324] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  202.938990][ T5709] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  202.968317][ T4324] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  202.992736][ T4285] EXT4-fs (loop2): unmounting filesystem.
[  203.052172][ T4324] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  203.103920][ T4324] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  204.198420][  T130] legousbtower 6-1:14.57: interrupt endpoints not found
[  204.218809][  T130] usb 6-1: USB disconnect, device number 2
[  204.650315][ T5696] usbtmc 4-1:16.0: simple usb_control_msg returned 0
[  204.801501][ T5734] loop5: detected capacity change from 0 to 164
[  204.839388][ T5734] rock: directory entry would overflow storage
[  204.845776][ T5734] rock: sig=0x66, size=4, remaining=3
[  204.866390][ T5734] rock: directory entry would overflow storage
[  204.872906][ T5734] rock: sig=0x66, size=4, remaining=3
[  204.977501][   T41] usb 4-1: USB disconnect, device number 3
[  208.305068][ T5740] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  208.457599][ T5740] device syzkaller0 entered promiscuous mode
[  208.581635][ T5741] tipc: Resetting bearer <eth:syzkaller0>
[  208.622430][ T5739] tipc: Resetting bearer <eth:syzkaller0>
[  208.725382][ T5739] tipc: Disabling bearer <eth:syzkaller0>
[  208.925489][ T5747] vivid-000: disconnect
[  208.955143][ T5747] vivid-000: reconnect
[  208.999618][ T5749] loop2: detected capacity change from 0 to 256
[  210.737216][ T5770] binder: 5768:5770 ioctl c0306201 0 returned -14
[  217.651560][ T5781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.380'.
[  217.669891][ T5781] netlink: 4 bytes leftover after parsing attributes in process `syz.2.380'.
[  217.949161][ T5826] loop4: detected capacity change from 0 to 128
[  217.977146][ T5828] binder: 5827:5828 ioctl c0306201 0 returned -14
[  219.535024][   T26] audit: type=1800 audit(1790534126.669:3): pid=5848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.400" name="file0" dev="sda1" ino=2052 res=0 errno=0
[  219.830489][ T5850] device syzkaller0 entered promiscuous mode
[  220.379072][ T5868] vivid-000: disconnect
[  221.251008][ T5863] vivid-000: reconnect
[  221.784320][ T5880] loop5: detected capacity change from 0 to 128
[  221.842412][ T5880] FAT-fs (loop5): Unrecognized mount option "shorname=lower" or missing value
[  222.066831][ T5880] loop5: detected capacity change from 0 to 2048
[  222.156261][ T5880] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  226.236577][ T5918] loop2: detected capacity change from 0 to 128
[  226.270352][ T4469] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  228.721447][ T4323] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  229.485106][ T4323] usb 6-1: Using ep0 maxpacket: 32
[  229.492701][ T4323] usb 6-1: config index 0 descriptor too short (expected 29220, got 36)
[  229.521144][ T4323] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  229.557888][ T4323] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81
[  229.614135][ T4323] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  229.638526][ T4323] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  229.691168][ T4323] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  229.776975][ T4323] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  229.796975][ T4323] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  229.884147][ T4323] usb 6-1: config 0 descriptor??
[  230.170656][ T4323] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  230.389337][ T4323] usb 6-1: USB disconnect, device number 3
[  230.407086][ T4323] usblp0: removed
[  232.261407][ T4292] Bluetooth: hci4: command 0x0406 tx timeout
[  233.336107][   T26] audit: type=1800 audit(1790534140.469:4): pid=5984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.438" name="ipv4_address" dev="configfs" ino=38859 res=0 errno=0
[  233.412093][   T26] audit: type=1800 audit(1790534140.529:5): pid=5984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.438" name="ipv4_port" dev="configfs" ino=39544 res=0 errno=0
[  233.473363][   T26] audit: type=1800 audit(1790534140.529:6): pid=5984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.438" name="num" dev="configfs" ino=39545 res=0 errno=0
[  233.593709][   T26] audit: type=1800 audit(1790534140.529:7): pid=5984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.438" name="local" dev="configfs" ino=39546 res=0 errno=0
[  233.701450][   T26] audit: type=1800 audit(1790534140.539:8): pid=5984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.438" name="dev" dev="configfs" ino=39553 res=0 errno=0
[  233.888300][ T5999] loop5: detected capacity change from 0 to 128
[  233.988808][ T4469] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  235.255956][ T6017] binder: 6015:6017 ioctl 4018620d 0 returned -22
[  236.586307][ T6026] loop3: detected capacity change from 0 to 128
[  236.783329][ T6026] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  236.947408][ T6026] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  237.798720][ T4283] EXT4-fs (loop3): unmounting filesystem.
[  238.177915][ T6048] netlink: 12 bytes leftover after parsing attributes in process `syz.2.453'.
[  239.438891][ T4292] block nbd0: Receive control failed (result -1)
[  239.813960][ T6073] binder: 6072:6073 ioctl 4018620d 0 returned -22
[  240.118935][ T6082] device syzkaller0 entered promiscuous mode
[  241.133784][ T6057] loop4: detected capacity change from 0 to 32768
[  241.363547][ T6090] syz.3.462 uses obsolete (PF_INET,SOCK_PACKET)
[  242.087798][ T6090] device syzkaller1 entered promiscuous mode
[  242.158605][ T6101] loop2: detected capacity change from 0 to 128
[  242.359221][ T6101] FAT-fs (loop2): Unrecognized mount option "shorname=lower" or missing value
[  242.637548][ T6101] loop2: detected capacity change from 0 to 2048
[  242.796160][ T6101] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  243.933283][ T6115] netlink: 12 bytes leftover after parsing attributes in process `syz.5.469'.
[  244.361994][ T6119] binder: 6117:6119 ioctl 4018620d 0 returned -22
[  244.643535][ T4292] block nbd1: Receive control failed (result -1)
[  246.349220][ T6141] loop2: detected capacity change from 0 to 2048
[  246.391950][ T6141]  loop2: p1 < > p3 p4
[  246.391950][ T6141]  p4: <solaris: [s1] p5 [s2] p6 >
[  246.434991][ T6141] loop2: p3 start 458752 is beyond EOD, truncated
[  246.477053][ T6141] loop2: p4 size 722688 extends beyond EOD, truncated
[  246.491229][ T6141] loop2: p5 start 262464109 is beyond EOD, truncated
[  246.499085][ T6141] loop2: p6 size 2304 extends beyond EOD, truncated
[  246.717292][ T6151] loop3: detected capacity change from 0 to 512
[  246.796419][ T6151] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  246.813568][ T6151] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  246.942743][ T6156] loop2: detected capacity change from 0 to 128
[  246.965571][ T6156] EXT4-fs (loop2): Test dummy encryption mode enabled
[  247.004693][ T6156] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  247.019948][ T6156] ext4 filesystem being mounted at /115/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  247.054792][ T4283] EXT4-fs (loop3): unmounting filesystem.
[  247.125449][ T4469] udevd[4469]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  247.136594][ T4421] udevd[4421]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory
[  247.171748][ T4408] udevd[4408]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[  247.469911][ T4469] udevd[4469]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  247.470027][ T6168] loop5: detected capacity change from 0 to 128
[  247.483367][ T4421] udevd[4421]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory
[  247.512125][ T4408] udevd[4408]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[  247.548819][ T6170] binder: 6169:6170 ioctl c0306201 0 returned -14
[  247.642470][ T6168] FAT-fs (loop5): Unrecognized mount option "shorname=lower" or missing value
[  247.742027][ T4408] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  247.815111][ T6168] loop5: detected capacity change from 0 to 2048
[  247.816734][ T4408] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  247.870782][   T26] audit: type=1326 audit(1790534154.999:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6173 comm="syz.0.486" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020619e159 code=0x7ffc0000
[  247.916974][ T6168] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  247.978031][   T26] audit: type=1326 audit(1790534155.039:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6173 comm="syz.0.486" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020619e159 code=0x7ffc0000
[  248.181123][ T4278] Bluetooth: hci0: command 0x0406 tx timeout
[  248.263268][   T26] audit: type=1326 audit(1790534155.049:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6173 comm="syz.0.486" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f020619e159 code=0x7ffc0000
[  248.463213][   T26] audit: type=1326 audit(1790534155.049:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6173 comm="syz.0.486" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020619e159 code=0x7ffc0000
[  248.635705][   T26] audit: type=1326 audit(1790534155.049:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6173 comm="syz.0.486" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020619e159 code=0x7ffc0000
[  248.685777][   T26] audit: type=1326 audit(1790534155.059:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6173 comm="syz.0.486" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f020619e159 code=0x7ffc0000
[  248.767175][ T6185] ip_tables: iptables: counters copy to user failed while replacing table
[  249.550657][   T26] audit: type=1326 audit(1790534155.059:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6173 comm="syz.0.486" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020619e159 code=0x7ffc0000
[  249.656115][   T26] audit: type=1326 audit(1790534155.059:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6173 comm="syz.0.486" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020619e159 code=0x7ffc0000
[  249.751815][ T6190] loop5: detected capacity change from 0 to 256
[  250.294603][ T6190] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  250.423731][   T26] audit: type=1326 audit(1790534155.059:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6173 comm="syz.0.486" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f020619e159 code=0x7ffc0000
[  250.493882][   T26] audit: type=1326 audit(1790534155.059:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6173 comm="syz.0.486" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020619e159 code=0x7ffc0000
[  252.176909][ T6211] loop3: detected capacity change from 0 to 256
[  252.259985][ T6211] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  252.431408][ T6214] binder: 6213:6214 ioctl c0306201 0 returned -14
[  253.543621][ T6226] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  253.737177][ T6225] tipc: Disabling bearer <eth:syzkaller0>
[  253.861397][   T22] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  254.449486][ T6239] block device autoloading is deprecated and will be removed.
[  254.469591][ T6239] syz.4.499: attempt to access beyond end of device
[  254.469591][ T6239] md32: rw=2048, sector=0, nr_sectors = 8 limit=0
[  254.731776][ T4285] EXT4-fs (loop2): unmounting filesystem.
[  254.752976][   T22] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  254.780666][   T22] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  254.803334][   T22] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  255.132034][   T22] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  255.149507][   T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  255.163463][   T22] usb 1-1: Product: syz
[  255.167778][   T22] usb 1-1: Manufacturer: syz
[  255.172879][   T22] usb 1-1: SerialNumber: syz
[  255.391675][   T22] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  256.120812][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  256.127392][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  256.193581][ T4279] usb 1-1: USB disconnect, device number 3
[  256.258825][ T6256] loop4: detected capacity change from 0 to 512
[  256.304328][ T4279] usblp0: removed
[  256.325280][ T6256] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  256.435353][ T6256] EXT4-fs error (device loop4): ext4_orphan_get:1409: inode #15: comm syz.4.504: iget: bad i_size value: 38620345925642
[  256.522508][ T6263] loop3: detected capacity change from 0 to 256
[  256.527778][ T6256] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.504: couldn't read orphan inode 15 (err -117)
[  256.546910][ T6263] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  256.988331][ T6256] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  257.328497][ T4379] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm kworker/u4:7: bg 0: block 5: invalid block bitmap
[  257.368825][ T6268] binder: 6267:6268 ioctl c0306201 0 returned -14
[  257.395082][ T4379] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 131075 with max blocks 1 with error 28
[  257.441239][ T4379] EXT4-fs (loop4): This should not happen!! Data will be lost
[  257.441239][ T4379] 
[  257.471097][ T4379] EXT4-fs (loop4): Total free blocks count 0
[  257.477267][ T4379] EXT4-fs (loop4): Free/Dirty block details
[  257.503275][ T4379] EXT4-fs (loop4): free_blocks=0
[  257.553430][ T4379] EXT4-fs (loop4): dirty_blocks=1
[  257.564476][ T4379] EXT4-fs (loop4): Block reservation details
[  257.570800][ T4379] EXT4-fs (loop4): i_reserved_data_blocks=1
[  257.587346][ T4276] EXT4-fs (loop4): unmounting filesystem.
[  258.340300][   T26] kauditd_printk_skb: 10 callbacks suppressed
[  258.340316][   T26] audit: type=1800 audit(1790534165.469:29): pid=6303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.514" name="bmaControls" dev="configfs" ino=41076 res=0 errno=0
[  259.720747][ T6319] loop2: detected capacity change from 0 to 256
[  259.735556][ T6319] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  260.448228][ T6324] loop5: detected capacity change from 0 to 512
[  260.505584][ T6324] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  260.562399][ T6324] EXT4-fs error (device loop5): ext4_orphan_get:1409: inode #15: comm syz.5.521: iget: bad i_size value: 38620345925642
[  260.591648][ T6324] EXT4-fs error (device loop5): ext4_orphan_get:1414: comm syz.5.521: couldn't read orphan inode 15 (err -117)
[  260.629077][ T6324] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  261.653534][ T4911] EXT4-fs (loop5): unmounting filesystem.
[  261.677134][ T6336] jffs2: notice: (6336) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  261.796399][   T26] audit: type=1800 audit(1790534168.929:30): pid=6341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.528" name="bmaControls" dev="configfs" ino=41133 res=0 errno=0
[  261.980773][ T6342] ieee802154 phy0 wpan0: encryption failed: -22
[  262.059161][ T6346] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  262.125187][ T6346] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  262.158624][ T6346] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  262.200278][ T6346] device bridge_slave_0 left promiscuous mode
[  262.258930][ T6351] loop2: detected capacity change from 0 to 256
[  262.261204][ T6346] bridge0: port 1(bridge_slave_0) entered disabled state
[  263.100898][ T6351] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010321, chksum : 0x3a8a43f6, utbl_chksum : 0xe619d30d)
[  263.655937][   T26] audit: type=1804 audit(1790534170.769:31): pid=6351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.529" name="/newroot/123/file0/bus" dev="loop2" ino=1048645 res=1 errno=0
[  263.950604][   T26] audit: type=1804 audit(1790534170.869:32): pid=6359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.529" name="/newroot/123/file0/bus" dev="loop2" ino=1048645 res=1 errno=0
[  264.402571][ T6346] device bridge_slave_1 left promiscuous mode
[  264.408978][ T6346] bridge0: port 2(bridge_slave_1) entered disabled state
[  264.966832][ T6346] bond0: (slave bond_slave_0): Releasing backup interface
[  265.470743][ T6346] bond0: (slave bond_slave_1): Releasing backup interface
[  265.585970][ T6346] team0: Port device team_slave_0 removed
[  265.631522][ T6346] team0: Port device team_slave_1 removed
[  265.648661][ T6346] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  265.667835][ T6346] batman_adv: batadv0: Removing interface: batadv_slave_0
[  265.689941][ T6346] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  265.708342][ T6346] batman_adv: batadv0: Removing interface: batadv_slave_1
[  266.017584][ T6372] jffs2: notice: (6372) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  266.118249][ T6377] loop4: detected capacity change from 0 to 256
[  266.170437][ T6377] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  267.430280][ T6389] syz.3.539: attempt to access beyond end of device
[  267.430280][ T6389] md32: rw=2048, sector=0, nr_sectors = 8 limit=0
[  267.480041][   T26] audit: type=1800 audit(1790534179.607:33): pid=6391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.540" name="bmaControls" dev="configfs" ino=41207 res=0 errno=0
[  269.076729][ T6415] ip_tables: iptables: counters copy to user failed while replacing table
[  270.408516][ T6428] hub 8-0:1.0: USB hub found
[  270.414645][ T6428] hub 8-0:1.0: 1 port detected
[  270.559503][ T6420] loop5: detected capacity change from 0 to 32768
[  270.971472][ T6423] loop3: detected capacity change from 0 to 32768
[  271.268177][ T6434] netlink: 16 bytes leftover after parsing attributes in process `syz.4.557'.
[  271.322444][ T6436] syz.0.556: attempt to access beyond end of device
[  271.322444][ T6436] md32: rw=2048, sector=0, nr_sectors = 8 limit=0
[  272.435516][ T6443] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  272.514775][ T6447] ip_tables: iptables: counters copy to user failed while replacing table
[  272.540668][ T6448] tipc: Resetting bearer <eth:syzkaller0>
[  272.652342][   T41] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[  272.692043][ T6440] tipc: Disabling bearer <eth:syzkaller0>
[  272.874507][   T41] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x3 has an invalid bInterval 0, changing to 10
[  272.926481][   T41] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x3 has invalid maxpacket 169, setting to 64
[  272.970439][   T41] usb 5-1: config 0 interface 0 has no altsetting 0
[  272.996886][   T41] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  273.017007][   T41] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  273.042053][   T41] usb 5-1: Product: syz
[  273.046293][   T41] usb 5-1: Manufacturer: syz
[  273.096405][   T41] usb 5-1: SerialNumber: syz
[  273.123423][   T41] usb 5-1: config 0 descriptor??
[  273.132882][ T6445] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  273.285763][   T41] usb 5-1: selecting invalid altsetting 0
[  273.381088][   T41] usb 5-1: USB disconnect, device number 5
[  273.502851][ T4357] udevd[4357]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  274.647760][ T6465] loop3: detected capacity change from 0 to 128
[  274.690521][ T6465] FAT-fs (loop3): Unrecognized mount option "shorname=lower" or missing value
[  274.895405][ T6465] loop3: detected capacity change from 0 to 2048
[  274.939407][ T6471] hub 8-0:1.0: USB hub found
[  274.945047][ T6471] hub 8-0:1.0: 1 port detected
[  275.008446][ T6465] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  275.984300][ T6484] device syzkaller0 entered promiscuous mode
[  276.008414][ T6477] loop5: detected capacity change from 0 to 32768
[  276.014642][ T6486] binder: 6485:6486 ioctl 4018620d 0 returned -22
[  276.028292][ T6484] syzkaller0: mtu less than device minimum
[  276.451774][ T4279] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[  276.675873][ T4279] usb 4-1: not running at top speed; connect to a high speed hub
[  276.737485][ T4279] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  276.912010][ T4279] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  277.057425][ T4279] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[  277.151242][ T4279] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  278.467103][ T4323] usb 4-1: USB disconnect, device number 4
[  279.420072][ T6511] loop5: detected capacity change from 0 to 128
[  279.469315][ T6511] FAT-fs (loop5): Unrecognized mount option "shorname=lower" or missing value
[  279.696203][ T6511] loop5: detected capacity change from 0 to 2048
[  279.734079][ T6511] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  279.736015][ T6517] loop3: detected capacity change from 0 to 256
[  279.787382][ T6521] device syzkaller0 entered promiscuous mode
[  279.942031][ T6517] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010321, chksum : 0x3a8a43f6, utbl_chksum : 0xe619d30d)
[  280.432392][   T26] audit: type=1804 audit(1790534192.547:34): pid=6517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.588" name="/newroot/127/file0/bus" dev="loop3" ino=1048651 res=1 errno=0
[  280.513604][ T6521] syzkaller0: mtu less than device minimum
[  281.168718][   T26] audit: type=1800 audit(1790534193.277:35): pid=6511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.585" name="file2" dev="loop5" ino=1347 res=0 errno=0
[  281.631524][ T6531] binder: 6528:6531 ioctl c0306201 0 returned -14
[  281.776669][ T6539] device-mapper: ioctl: Invalid ioctl structure: name t, dev f800
[  283.258544][ T4368] usb 6-1: new full-speed USB device number 4 using dummy_hcd
[  283.376842][ T6560] device syzkaller1 entered promiscuous mode
[  283.460095][ T6562] syzkaller0: mtu less than device minimum
[  283.468539][ T4368] usb 6-1: not running at top speed; connect to a high speed hub
[  283.480782][ T4368] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  283.721781][ T4279] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  284.306911][ T4368] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[  284.315946][ T4368] usb 6-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[  284.332002][ T4368] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  284.449341][ T6573] loop2: detected capacity change from 0 to 128
[  284.462790][ T6573] FAT-fs (loop2): Unrecognized mount option "shorname=lower" or missing value
[  284.862971][ T6573] loop2: detected capacity change from 0 to 2048
[  284.878488][ T4368] usb 6-1: USB disconnect, device number 4
[  285.174830][ T6573] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  286.814412][ T4279] usb 4-1: unable to get BOS descriptor or descriptor too short
[  286.867959][ T4279] usb 4-1: unable to read config index 0 descriptor/start: -71
[  286.911704][ T4279] usb 4-1: can't read configurations, error -71
[  287.201434][ T6593] device-mapper: dirty region log: invalid region size 1024
[  287.382860][ T6593] device-mapper: table: 248:0: mirror: Error creating mirror dirty log (-EINVAL)
[  287.442123][ T6593] device-mapper: ioctl: error adding target to table
[  288.553302][ T6604] loop3: detected capacity change from 0 to 128
[  290.721129][ T4324] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[  292.005080][ T4324] usb 3-1: not running at top speed; connect to a high speed hub
[  292.022707][ T4324] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  292.049724][ T4324] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  292.069219][ T4324] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[  292.093081][ T4324] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  292.115976][ T6626] netlink: 4 bytes leftover after parsing attributes in process `syz.4.621'.
[  292.381750][ T4324] usb 3-1: USB disconnect, device number 4
[  293.111169][ T4709] Bluetooth: hci5: Frame reassembly failed (-84)
[  293.944998][ T6647] mmap: syz.2.628 (6647) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  294.041550][ T6650] device-mapper: dirty region log: invalid region size 1024
[  294.111791][ T6650] device-mapper: table: 248:0: mirror: Error creating mirror dirty log (-EINVAL)
[  294.217239][ T6650] device-mapper: ioctl: error adding target to table
[  295.061341][ T4292] Bluetooth: hci5: command 0x1003 tx timeout
[  295.070960][ T4278] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  296.136536][ T6666] binder: 6663:6666 ioctl c0306201 0 returned -14
[  296.466367][ T6673] loop4: detected capacity change from 0 to 128
[  298.323743][ T6693] loop5: detected capacity change from 0 to 16
[  298.899442][ T6693] erofs: (device loop5): mounted with root inode @ nid 36.
[  299.003713][ T6697] 9pnet_virtio: no channels available for device syz
[  299.311507][ T6699] loop5: detected capacity change from 0 to 2048
[  299.368468][ T6699] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  299.768348][ T4911] EXT4-fs (loop5): unmounting filesystem.
[  308.731033][ T6784] loop2: detected capacity change from 0 to 16
[  308.756488][ T6784] erofs: (device loop2): mounted with root inode @ nid 36.
[  308.891259][   T22] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  309.122900][   T22] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  309.363539][   T22] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  309.418099][   T22] usb 5-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00
[  309.464601][   T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  309.478596][   T22] usb 5-1: Product: syz
[  309.495713][   T22] usb 5-1: Manufacturer: syz
[  309.500572][   T22] usb 5-1: SerialNumber: syz
[  309.570821][   T22] sisusb 5-1:1.0: Invalid USB2VGA device
[  309.595832][   T22] sisusb: probe of 5-1:1.0 failed with error -22
[  309.908018][ T6796] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  309.916502][ T6796] device syzkaller0 entered promiscuous mode
[  309.943973][ T6796] tipc: Resetting bearer <eth:syzkaller0>
[  310.068071][   T22] usb 5-1: USB disconnect, device number 6
[  310.286963][ T6794] tipc: Resetting bearer <eth:syzkaller0>
[  310.942386][ T6794] tipc: Disabling bearer <eth:syzkaller0>
[  310.988726][   T22] tipc: Node number set to 379949729
[  311.577280][ T6814] loop5: detected capacity change from 0 to 256
[  311.594090][ T6813] loop3: detected capacity change from 0 to 128
[  311.684465][ T6813] FAT-fs (loop3): Unrecognized mount option "shorname=lower" or missing value
[  312.201403][ T6813] loop3: detected capacity change from 0 to 2048
[  312.302234][ T6817] md/raid1:md0: active with 1 out of 2 mirrors
[  312.397902][ T6813] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  314.203712][ T6837] loop2: detected capacity change from 0 to 4096
[  314.210906][ T6837] EXT4-fs: inline encryption not supported
[  314.287632][ T6837] EXT4-fs (loop2): Test dummy encryption mode enabled
[  314.380203][ T6837] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  314.645667][ T6850] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  314.684920][ T4285] EXT4-fs (loop2): unmounting filesystem.
[  314.736933][ T6850] syzkaller0: mtu less than device minimum
[  314.938246][ T4324] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  315.353275][ T4324] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  315.389845][ T4324] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  315.489602][ T4324] usb 6-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00
[  315.548179][ T4324] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  315.725780][ T4324] usb 6-1: Product: syz
[  315.730631][ T4324] usb 6-1: Manufacturer: syz
[  315.736010][ T4324] usb 6-1: SerialNumber: syz
[  315.785456][ T4324] sisusb 6-1:1.0: Invalid USB2VGA device
[  315.807468][ T4324] sisusb: probe of 6-1:1.0 failed with error -22
[  316.211890][ T6873] loop4: detected capacity change from 0 to 128
[  316.213432][ T4287] usb 6-1: USB disconnect, device number 5
[  316.271920][ T6873] FAT-fs (loop4): Unrecognized mount option "shorname=lower" or missing value
[  316.513195][ T6873] loop4: detected capacity change from 0 to 2048
[  316.546035][ T6873] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  317.223658][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  317.230368][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  320.368872][ T6899] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  320.447830][ T6899] syzkaller0: mtu less than device minimum
[  321.584722][ T6916] loop3: detected capacity change from 0 to 128
[  321.598449][ T6916] FAT-fs (loop3): Unrecognized mount option "shorname=lower" or missing value
[  321.746126][ T6916] loop3: detected capacity change from 0 to 2048
[  321.770762][ T6916] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  323.246911][ T4279] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  323.493230][ T4279] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  323.511118][ T4279] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  323.536689][ T4279] usb 1-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00
[  323.571230][ T4279] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  323.588200][ T4279] usb 1-1: Product: syz
[  323.601060][ T4279] usb 1-1: Manufacturer: syz
[  323.605907][ T4279] usb 1-1: SerialNumber: syz
[  323.696630][ T4279] sisusb 1-1:1.0: Invalid USB2VGA device
[  323.705061][ T4279] sisusb: probe of 1-1:1.0 failed with error -22
[  324.116682][ T4279] usb 1-1: USB disconnect, device number 4
[  324.399874][ T6937] loop4: detected capacity change from 0 to 128
[  324.454444][ T4469] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  325.057073][ T6946] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  325.087709][ T6946] device syzkaller0 entered promiscuous mode
[  325.488488][ T6946] tipc: Resetting bearer <eth:syzkaller0>
[  325.723281][ T6943] tipc: Resetting bearer <eth:syzkaller0>
[  325.902240][ T6943] tipc: Disabling bearer <eth:syzkaller0>
[  328.028504][ T6974] binder: 6973:6974 ioctl c0306201 0 returned -14
[  330.257379][ T6996] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  330.273280][ T6996] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  330.296218][ T6996] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  330.313878][ T6996] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  330.327758][ T6996] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  330.342393][ T6996] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  330.361734][ T6996] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  330.880466][ T7000] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  330.888058][ T7000] device syzkaller0 entered promiscuous mode
[  330.900034][ T7000] tipc: Resetting bearer <eth:syzkaller0>
[  330.907468][ T6999] tipc: Resetting bearer <eth:syzkaller0>
[  331.493824][ T6999] tipc: Disabling bearer <eth:syzkaller0>
[  331.605557][ T7006] loop4: detected capacity change from 0 to 128
[  331.639957][ T7008] binder: 7007:7008 ioctl c0306201 0 returned -14
[  331.871479][ T4469] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  334.194407][ T4278] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  334.204458][ T4292] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  334.216132][ T4278] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  334.229308][ T4278] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  334.242958][ T4278] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  334.250345][ T4278] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  335.449588][ T7036] chnl_net:caif_netlink_parms(): no params data found
[  335.744429][ T7050] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  336.117655][ T7060] syzkaller0: mtu less than device minimum
[  336.341308][ T4278] Bluetooth: hci5: command 0x0409 tx timeout
[  336.697262][ T7036] bridge0: port 1(bridge_slave_0) entered blocking state
[  336.731303][ T7036] bridge0: port 1(bridge_slave_0) entered disabled state
[  336.739730][ T7036] device bridge_slave_0 entered promiscuous mode
[  336.785788][ T7064] loop5: detected capacity change from 0 to 128
[  336.786395][ T7036] bridge0: port 2(bridge_slave_1) entered blocking state
[  336.827571][ T7036] bridge0: port 2(bridge_slave_1) entered disabled state
[  336.837105][ T7066] binder: 7065:7066 ioctl c0306201 0 returned -14
[  336.846206][ T4469] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  336.847369][ T7036] device bridge_slave_1 entered promiscuous mode
[  336.918074][ T7036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  336.954949][ T7036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  337.058354][ T7036] team0: Port device team_slave_0 added
[  337.066710][ T7036] team0: Port device team_slave_1 added
[  337.251998][ T7036] batman_adv: batadv0: Adding interface: batadv_slave_0
[  337.270207][ T7036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  337.417233][ T7036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  337.491669][ T7036] batman_adv: batadv0: Adding interface: batadv_slave_1
[  337.499694][ T7036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  337.540807][ T7036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  337.607404][ T7036] device hsr_slave_0 entered promiscuous mode
[  337.631798][ T7036] device hsr_slave_1 entered promiscuous mode
[  337.661887][ T7036] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  337.669519][ T7036] Cannot create hsr debugfs directory
[  338.461147][ T4278] Bluetooth: hci5: command 0x041b tx timeout
[  339.240328][ T7036] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  339.550183][ T7036] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  339.569835][ T7106] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  339.598828][ T7036] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  339.628582][ T7036] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  339.907044][ T7036] 8021q: adding VLAN 0 to HW filter on device bond0
[  339.946883][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  339.967221][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  340.006447][ T7036] 8021q: adding VLAN 0 to HW filter on device team0
[  340.041181][ T4709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  340.055595][ T4709] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  340.064942][ T4709] bridge0: port 1(bridge_slave_0) entered blocking state
[  340.072143][ T4709] bridge0: port 1(bridge_slave_0) entered forwarding state
[  340.115208][ T4709] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  340.274972][ T7036] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  340.297857][ T7036] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  340.339150][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  340.365696][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  340.375665][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  340.383078][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  340.393217][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  340.410407][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  340.420234][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  340.446728][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  340.465227][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  340.490520][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  340.501596][ T4278] Bluetooth: hci5: command 0x040f tx timeout
[  340.516736][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  340.530098][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  340.542488][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  340.559122][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  340.576783][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  340.607624][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  340.948565][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  340.956653][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  340.979294][ T7036] 8021q: adding VLAN 0 to HW filter on device batadv0
[  342.581507][ T4278] Bluetooth: hci5: command 0x0419 tx timeout
[  342.601023][ T4809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  342.625924][ T4809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  342.767968][ T4809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  342.880550][ T4809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  342.977808][ T7036] device veth0_vlan entered promiscuous mode
[  343.025718][ T4809] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  343.086887][ T4809] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  343.256499][ T7036] device veth1_vlan entered promiscuous mode
[  343.404717][ T4807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  343.439896][ T4807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  343.480778][ T7036] device veth0_macvtap entered promiscuous mode
[  343.492210][ T7036] device veth1_macvtap entered promiscuous mode
[  343.527730][ T7036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  343.539842][ T7162] loop5: detected capacity change from 0 to 1024
[  343.546808][ T7036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  343.559739][ T7162] EXT4-fs: Ignoring removed bh option
[  343.565778][ T7036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  343.577030][ T7036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  343.594523][ T7036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  343.607550][ T7036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  343.620746][ T7036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  343.634864][ T7036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  343.662832][ T7162] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  343.677873][ T7036] batman_adv: batadv0: Interface activated: batadv_slave_0
[  343.688431][ T4809] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  343.698688][ T4809] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  343.708647][ T4809] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  343.717743][ T4809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  343.729585][ T7036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  343.740856][ T7036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  343.751964][ T7036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  343.763644][ T7036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  343.773895][ T7036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  343.785067][ T7036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  343.795574][ T7036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  343.806609][ T7036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  343.827302][ T7036] batman_adv: batadv0: Interface activated: batadv_slave_1
[  343.853444][ T4809] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  343.877768][ T4809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  343.923135][ T7036] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  343.951587][ T7036] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  343.961145][ T7036] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  343.971839][ T7036] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  344.142571][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  344.166364][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  344.199222][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  344.225247][ T4304] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  344.246583][ T4304] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  344.269309][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  344.450445][ T7171] loop3: detected capacity change from 0 to 128
[  344.543226][ T4911] EXT4-fs (loop5): unmounting filesystem.
[  344.553144][ T4469] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  344.743331][ T7179] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  344.754285][ T7179] syzkaller0: mtu less than device minimum
[  349.440314][ T7203] loop5: detected capacity change from 0 to 128
[  350.355128][ T7203] FAT-fs (loop5): Unrecognized mount option "shorname=lower" or missing value
[  350.479219][ T7203] loop5: detected capacity change from 0 to 2048
[  350.535739][ T7203] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  352.053084][   T26] audit: type=1800 audit(1790534264.187:36): pid=7227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.797" name="protocol" dev="configfs" ino=44156 res=0 errno=0
[  352.109921][ T7229] loop6: detected capacity change from 0 to 128
[  352.141636][   T26] audit: type=1800 audit(1790534264.217:37): pid=7227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.797" name="local" dev="configfs" ino=42816 res=0 errno=0
[  352.141716][ T4469] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  352.616166][ T7233] zram: Cannot change disksize for initialized device
[  355.626518][ T7250] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  356.325581][ T7269] loop4: detected capacity change from 0 to 2048
[  356.388232][ T7269] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  356.520235][ T7271] FAULT_INJECTION: forcing a failure.
[  356.520235][ T7271] name fail_futex, interval 1, probability 0, space 0, times 1
[  356.565661][ T7271] CPU: 0 PID: 7271 Comm: syz.3.809 Not tainted syzkaller #0
[  356.573031][ T7271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  356.583222][ T7271] Call Trace:
[  356.586776][ T7271]  <TASK>
[  356.589812][ T7271]  dump_stack_lvl+0x188/0x24e
[  356.594659][ T7271]  ? verify_lock_unused+0x140/0x140
[  356.599991][ T7271]  ? show_regs_print_info+0x12/0x12
[  356.605243][ T7271]  ? load_image+0x410/0x410
[  356.609903][ T7271]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  356.615948][ T7271]  should_fail_ex+0x390/0x4c0
[  356.620761][ T7271]  get_futex_key+0x1b1/0x1000
[  356.625530][ T7271]  ? fd_install+0x5c/0x4e0
[  356.630022][ T7271]  ? futex_setup_timer+0xc0/0xc0
[  356.635004][ T7271]  ? __lock_acquire+0x7c40/0x7c40
[  356.640075][ T7271]  ? rcu_read_lock_sched_held+0x86/0x110
[  356.645820][ T7271]  futex_wake+0x123/0x4f0
[  356.650194][ T7271]  ? fd_install+0x5c/0x4e0
[  356.654672][ T7271]  ? futex_wake_mark+0x150/0x150
[  356.659666][ T7271]  ? sync_file_ioctl+0xe88/0xef0
[  356.664739][ T7271]  do_futex+0x2e2/0x320
[  356.668970][ T7271]  ? __ia32_sys_get_robust_list+0x100/0x100
[  356.675018][ T7271]  __se_sys_futex+0x381/0x410
[  356.679758][ T7271]  ? __x64_sys_futex+0xf0/0xf0
[  356.684580][ T7271]  ? __x64_sys_futex+0x1d/0xf0
[  356.689403][ T7271]  do_syscall_64+0x4c/0xa0
[  356.694049][ T7271]  ? clear_bhb_loop+0x60/0xb0
[  356.698847][ T7271]  ? clear_bhb_loop+0x60/0xb0
[  356.703659][ T7271]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  356.709834][ T7271] RIP: 0033:0x7f9d8159e159
[  356.714300][ T7271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  356.734057][ T7271] RSP: 002b:00007f9d823f80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  356.742614][ T7271] RAX: ffffffffffffffda RBX: 00007f9d81825fa8 RCX: 00007f9d8159e159
[  356.750681][ T7271] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9d81825fac
[  356.758697][ T7271] RBP: 00007f9d81825fa0 R08: 001b77200c25c8f0 R09: 0000000000000000
[  356.766675][ T7271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  356.774677][ T7271] R13: 00007f9d81826038 R14: 00007ffe5f5551a0 R15: 00007ffe5f555288
[  356.782752][ T7271]  </TASK>
[  357.107801][ T7283] loop4: detected capacity change from 0 to 128
[  357.411148][ T4469] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  358.137036][ T7289] syz.6.814 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[  358.184629][ T7289] CPU: 0 PID: 7289 Comm: syz.6.814 Not tainted syzkaller #0
[  358.192000][ T7289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  358.202086][ T7289] Call Trace:
[  358.205375][ T7289]  <TASK>
[  358.208311][ T7289]  dump_stack_lvl+0x188/0x24e
[  358.212992][ T7289]  ? ___ratelimit+0x14e/0x610
[  358.217699][ T7289]  ? show_regs_print_info+0x12/0x12
[  358.222910][ T7289]  ? load_image+0x410/0x410
[  358.227438][ T7289]  ? ___ratelimit+0x474/0x610
[  358.232144][ T7289]  ? radix_tree_cpu_dead+0x160/0x160
[  358.237461][ T7289]  dump_header+0xd8/0x820
[  358.241804][ T7289]  oom_kill_process+0x361/0x550
[  358.246729][ T7289]  out_of_memory+0xe25/0x1220
[  358.251423][ T7289]  ? mutex_lock_nested+0x10/0x10
[  358.256365][ T7289]  ? unregister_oom_notifier+0x20/0x20
[  358.261827][ T7289]  mem_cgroup_out_of_memory+0x2c0/0x390
[  358.267480][ T7289]  ? mem_cgroup_oom_trylock+0x210/0x210
[  358.273114][ T7289]  ? do_raw_spin_unlock+0x11d/0x230
[  358.278335][ T7289]  try_charge_memcg+0xc9d/0x17c0
[  358.283332][ T7289]  ? percpu_ref_put+0x180/0x180
[  358.288235][ T7289]  ? get_mem_cgroup_from_objcg+0x19/0x150
[  358.294000][ T7289]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  358.299992][ T7289]  ? percpu_ref_tryget+0x15/0x180
[  358.305053][ T7289]  ? percpu_ref_tryget+0x15/0x180
[  358.310154][ T7289]  ? get_mem_cgroup_from_objcg+0x19/0x150
[  358.315886][ T7289]  ? get_mem_cgroup_from_objcg+0x19/0x150
[  358.321653][ T7289]  ? get_mem_cgroup_from_objcg+0x13c/0x150
[  358.327489][ T7289]  obj_cgroup_charge+0x36a/0x620
[  358.333141][ T7289]  ? obj_cgroup_charge+0xe9/0x620
[  358.338272][ T7289]  ? mod_objcg_mlstate+0x320/0x320
[  358.343467][ T7289]  ? percpu_ref_put+0x12/0x100
[  358.348391][ T7289]  ? percpu_ref_put+0x12/0x100
[  358.353185][ T7289]  slab_pre_alloc_hook+0x2e2/0x300
[  358.358302][ T7289]  ? slab_pre_alloc_hook+0xb1/0x300
[  358.363520][ T7289]  kmem_cache_alloc_lru+0x49/0x2e0
[  358.368710][ T7289]  ? __d_alloc+0x2e/0x6e0
[  358.373062][ T7289]  __d_alloc+0x2e/0x6e0
[  358.377231][ T7289]  d_alloc_parallel+0xdc/0x1590
[  358.382118][ T7289]  ? memset+0x1e/0x40
[  358.386111][ T7289]  ? lockdep_init_map_type+0x98/0x8d0
[  358.391519][ T7289]  ? lockdep_softirqs_off+0x430/0x430
[  358.396941][ T7289]  ? d_hash_and_lookup+0x1b0/0x1b0
[  358.402240][ T7289]  ? __init_waitqueue_head+0xa4/0x140
[  358.407716][ T7289]  __lookup_slow+0x134/0x3f0
[  358.412338][ T7289]  ? lookup_one_len+0x2d0/0x2d0
[  358.417223][ T7289]  ? down_read+0x1a8/0x2d0
[  358.421737][ T7289]  lookup_slow+0x53/0x70
[  358.425989][ T7289]  walk_component+0x2ad/0x3e0
[  358.430782][ T7289]  path_lookupat+0x148/0x420
[  358.435421][ T7289]  filename_lookup+0x229/0x580
[  358.440208][ T7289]  ? hashlen_string+0x110/0x110
[  358.445117][ T7289]  ? strncpy_from_user+0x1dc/0x340
[  358.450346][ T7289]  ? getname_flags+0x206/0x500
[  358.455222][ T7289]  user_path_at_empty+0x3e/0x60
[  358.460098][ T7289]  __se_sys_mount+0x2a4/0x3d0
[  358.464795][ T7289]  ? __x64_sys_mount+0xc0/0xc0
[  358.469689][ T7289]  ? lockdep_hardirqs_on+0x94/0x140
[  358.474949][ T7289]  ? __x64_sys_mount+0x1c/0xc0
[  358.479776][ T7289]  do_syscall_64+0x4c/0xa0
[  358.484421][ T7289]  ? clear_bhb_loop+0x60/0xb0
[  358.489384][ T7289]  ? clear_bhb_loop+0x60/0xb0
[  358.494250][ T7289]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  358.500176][ T7289] RIP: 0033:0x7fbb7279e159
[  358.504598][ T7289] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  358.524482][ T7289] RSP: 002b:00007fbb73603028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  358.532901][ T7289] RAX: ffffffffffffffda RBX: 00007fbb72a25fa0 RCX: 00007fbb7279e159
[  358.540871][ T7289] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000000
[  358.548863][ T7289] RBP: 00007fbb7283506b R08: 0000000000000000 R09: 0000000000000000
[  358.556849][ T7289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  358.564919][ T7289] R13: 00007fbb72a26038 R14: 00007fbb72a25fa0 R15: 00007ffd75f21bb8
[  358.572908][ T7289]  </TASK>
[  358.735958][ T7280] loop3: detected capacity change from 0 to 32768
[  358.842423][ T7289] memory: usage 0kB, limit 0kB, failcnt 19
[  358.889785][ T7280] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 scanned by syz.3.812 (7280)
[  359.010466][ T7280] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  359.023182][ T7280] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  359.032927][ T7280] BTRFS info (device loop3): turning on async discard
[  359.040099][ T7280] BTRFS info (device loop3): using free space tree
[  359.049741][ T7289] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[  359.117391][ T7289] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[  359.168613][ T7289] Memory cgroup stats for /syz6/test:
[  359.169213][ T7289] anon 0
[  359.169213][ T7289] file 0
[  359.169213][ T7289] kernel 0
[  359.169213][ T7289] kernel_stack 0
[  359.169213][ T7289] pagetables 0
[  359.169213][ T7289] sec_pagetables 0
[  359.169213][ T7289] percpu 0
[  359.169213][ T7289] sock 0
[  359.169213][ T7289] vmalloc 0
[  359.169213][ T7289] shmem 0
[  359.169213][ T7289] zswap 0
[  359.169213][ T7289] zswapped 0
[  359.169213][ T7289] file_mapped 0
[  359.169213][ T7289] file_dirty 0
[  359.169213][ T7289] file_writeback 0
[  359.169213][ T7289] swapcached 0
[  359.169213][ T7289] anon_thp 0
[  359.169213][ T7289] file_thp 0
[  359.169213][ T7289] shmem_thp 0
[  359.169213][ T7289] inactive_anon 0
[  359.169213][ T7289] active_anon 0
[  359.169213][ T7289] inactive_file 0
[  359.169213][ T7289] active_file 0
[  359.169213][ T7289] unevictable 0
[  359.169213][ T7289] slab_reclaimable 0
[  359.169213][ T7289] slab_unreclaimable 0
[  359.169213][ T7289] slab 0
[  359.169213][ T7289] workingset_refault_anon 0
[  359.411258][ T7289] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz6/test,task_memcg=/syz6/test,task=syz.6.814,pid=7288,uid=0
[  359.526962][ T7320] zram: Cannot change disksize for initialized device
[  360.896702][ T7289] Memory cgroup out of memory: Killed process 7289 (syz.6.814) total-vm:102376kB, anon-rss:1424kB, file-rss:23564kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000
[  360.971383][ T7325] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  360.982238][ T7325] syzkaller0: mtu less than device minimum
[  361.063975][ T7280] BTRFS error (device loop3): open_ctree failed: -22
[  361.790592][ T7327] kvm [7326]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0x0
[  361.868538][ T7351] loop5: detected capacity change from 0 to 128
[  361.919026][ T7351] FAT-fs (loop5): Unrecognized mount option "shorname=lower" or missing value
[  361.965600][ T7353] loop3: detected capacity change from 0 to 128
[  362.025104][ T4408] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  363.880509][ T7370] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  366.939589][ T7381] loop5: detected capacity change from 0 to 32768
[  366.981688][ T7381] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.832 (7381)
[  367.059301][ T7381] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  367.105938][ T7381] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  367.148220][ T7381] BTRFS info (device loop5): setting nodatasum
[  367.172929][ T7381] BTRFS info (device loop5): enabling auto defrag
[  367.179439][ T7381] BTRFS info (device loop5): disabling tree log
[  367.187721][ T7381] BTRFS info (device loop5): using free space tree
[  367.545751][ T7381] BTRFS error (device loop5): open_ctree failed: -12
[  367.628171][ T4469] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by udevd (4469)
[  369.805008][ T7457] syzkaller0: mtu less than device minimum
[  370.983131][ T7466] zram: Cannot change disksize for initialized device
[  375.428619][ T7488] syzkaller0: mtu less than device minimum
[  376.809514][ T7505] netlink: 14 bytes leftover after parsing attributes in process `syz.5.864'.
[  378.077533][ T7528] loop5: detected capacity change from 0 to 512
[  378.085223][ T7529] syzkaller0: mtu less than device minimum
[  378.182910][ T7528] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  378.259505][ T7528] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  378.664362][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  378.670731][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  378.994302][ T4911] EXT4-fs (loop5): unmounting filesystem.
[  380.588023][ T7555] loop5: detected capacity change from 0 to 32768
[  380.715330][ T7555] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  380.725651][ T7555] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  380.735307][ T7555] BTRFS info (device loop5): setting nodatasum
[  380.741572][ T7555] BTRFS info (device loop5): force zlib compression, level 3
[  380.749084][ T7555] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8)
[  380.759703][ T7555] BTRFS info (device loop5): use lzo compression, level 0
[  380.766971][ T7555] BTRFS info (device loop5): turning on flush-on-commit
[  380.774105][ T7555] BTRFS info (device loop5): enabling auto defrag
[  380.780602][ T7555] BTRFS info (device loop5): max_inline at 4096
[  380.786963][ T7555] BTRFS info (device loop5): using free space tree
[  381.663635][   T26] audit: type=1326 audit(1790534293.797:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7587 comm="syz.3.882" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d8159e159 code=0x7ffc0000
[  381.687495][    C0] vkms_vblank_simulate: vblank timer overrun
[  381.696726][ T7555] BTRFS info (device loop5): enabling ssd optimizations
[  381.796591][ T7588] syz.3.882 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=1, oom_score_adj=1000
[  381.849016][   T26] audit: type=1326 audit(1790534293.817:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7587 comm="syz.3.882" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9d8159e159 code=0x7ffc0000
[  381.913077][ T7588] CPU: 1 PID: 7588 Comm: syz.3.882 Not tainted syzkaller #0
[  381.920542][ T7588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  381.930637][ T7588] Call Trace:
[  381.933937][ T7588]  <TASK>
[  381.936901][ T7588]  dump_stack_lvl+0x188/0x24e
[  381.941635][ T7588]  ? show_regs_print_info+0x12/0x12
[  381.946886][ T7588]  ? load_image+0x410/0x410
[  381.951468][ T7588]  dump_header+0xd8/0x820
[  381.955948][ T7588]  out_of_memory+0xe9a/0x1220
[  381.960666][ T7588]  ? mutex_lock_nested+0x10/0x10
[  381.965652][ T7588]  ? unregister_oom_notifier+0x20/0x20
[  381.971247][ T7588]  mem_cgroup_out_of_memory+0x2c0/0x390
[  381.976838][ T7588]  ? mem_cgroup_oom_trylock+0x210/0x210
[  381.981022][   T26] audit: type=1326 audit(1790534293.817:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7587 comm="syz.3.882" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d8159e159 code=0x7ffc0000
[  381.982504][ T7588]  ? do_raw_spin_unlock+0x11d/0x230
[  382.006305][    C0] vkms_vblank_simulate: vblank timer overrun
[  382.011521][ T7588]  try_charge_memcg+0xc9d/0x17c0
[  382.022568][ T7588]  ? percpu_ref_put+0x180/0x180
[  382.027478][ T7588]  ? get_mem_cgroup_from_objcg+0x19/0x150
[  382.033277][ T7588]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  382.039315][ T7588]  ? percpu_ref_tryget+0x15/0x180
[  382.044449][ T7588]  ? percpu_ref_tryget+0x15/0x180
[  382.049523][ T7588]  ? get_mem_cgroup_from_objcg+0x19/0x150
[  382.055298][ T7588]  ? get_mem_cgroup_from_objcg+0x19/0x150
[  382.061074][ T7588]  ? get_mem_cgroup_from_objcg+0x13c/0x150
[  382.067093][ T7588]  obj_cgroup_charge+0x36a/0x620
[  382.072092][ T7588]  ? obj_cgroup_charge+0xe9/0x620
[  382.077178][ T7588]  ? mod_objcg_mlstate+0x320/0x320
[  382.082347][ T7588]  ? percpu_ref_tryget+0x15/0x180
[  382.087429][ T7588]  ? get_obj_cgroup_from_current+0xd0/0x280
[  382.093371][ T7588]  ? get_obj_cgroup_from_current+0xd0/0x280
[  382.099309][ T7588]  ? __bitmap_weight+0xa8/0xf0
[  382.104144][ T7588]  pcpu_alloc+0x21c/0x16b0
[  382.108692][ T7588]  mem_cgroup_css_alloc+0x255/0x13b0
[  382.114079][ T7588]  cgroup_apply_control_enable+0x3cc/0xb00
[  382.119131][   T26] audit: type=1326 audit(1790534293.817:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7587 comm="syz.3.882" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d8159e159 code=0x7ffc0000
[  382.119970][ T7588]  cgroup_mkdir+0xc7f/0xe70
[  382.148390][ T7588]  ? css_task_iter_end+0x280/0x280
[  382.153564][ T7588]  ? kernfs_iop_permission+0x26d/0x350
[  382.159186][ T7588]  ? css_task_iter_end+0x280/0x280
[  382.164346][ T7588]  kernfs_iop_mkdir+0x23d/0x3d0
[  382.169251][ T7588]  vfs_mkdir+0x386/0x570
[  382.173546][ T7588]  do_mkdirat+0x1d8/0x440
[  382.178008][ T7588]  ? vfs_mkdir+0x570/0x570
[  382.182489][ T7588]  __x64_sys_mkdirat+0x85/0x90
[  382.187297][ T7588]  do_syscall_64+0x4c/0xa0
[  382.191752][ T7588]  ? clear_bhb_loop+0x60/0xb0
[  382.196469][ T7588]  ? clear_bhb_loop+0x60/0xb0
[  382.199113][   T26] audit: type=1326 audit(1790534293.817:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7587 comm="syz.3.882" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f9d8159e159 code=0x7ffc0000
[  382.201172][ T7588]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  382.201205][ T7588] RIP: 0033:0x7f9d8159e159
[  382.201226][ T7588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  382.201243][ T7588] RSP: 002b:00007f9d823f8028 EFLAGS: 00000246
[  382.248825][   T26] audit: type=1326 audit(1790534293.817:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7587 comm="syz.3.882" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d8159e159 code=0x7ffc0000
[  382.254861][ T7588]  ORIG_RAX: 0000000000000102
[  382.254876][ T7588] RAX: ffffffffffffffda RBX: 00007f9d81825fa0 RCX: 00007f9d8159e159
[  382.254892][ T7588] RDX: 0000000000000020 RSI: 0000200000000040 RDI: ffffffffffffff9c
[  382.254905][ T7588] RBP: 00007f9d8163506b R08: 0000000000000000 R09: 0000000000000000
[  382.254918][ T7588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  382.254930][ T7588] R13: 00007f9d81826038 R14: 00007f9d81825fa0 R15: 00007ffe5f555288
[  382.254961][ T7588]  </TASK>
[  382.261819][   T26] audit: type=1326 audit(1790534293.817:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7587 comm="syz.3.882" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d8159e159 code=0x7ffc0000
[  382.284805][    C0] vkms_vblank_simulate: vblank timer overrun
[  382.357547][    C0] vkms_vblank_simulate: vblank timer overrun
[  382.376726][ T7588] memory: usage 0kB, limit 0kB, failcnt 19
[  382.376749][ T7588] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[  382.376766][ T7588] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[  382.376780][ T7588] Memory cgroup stats for /syz3/test:
[  382.377125][ T7588] anon 0
[  382.377125][ T7588] file 0
[  382.377125][ T7588] kernel 0
[  382.377125][ T7588] kernel_stack 0
[  382.377125][ T7588] pagetables 0
[  382.377125][ T7588] sec_pagetables 0
[  382.377125][ T7588] percpu 0
[  382.377125][ T7588] sock 0
[  382.377125][ T7588] vmalloc 0
[  382.377125][ T7588] shmem 0
[  382.377125][ T7588] zswap 0
[  382.377125][ T7588] zswapped 0
[  382.377125][ T7588] file_mapped 0
[  382.377125][ T7588] file_dirty 0
[  382.377125][ T7588] file_writeback 0
[  382.377125][ T7588] swapcached 0
[  382.377125][ T7588] anon_thp 0
[  382.377125][ T7588] file_thp 0
[  382.377125][ T7588] shmem_thp 0
[  382.377125][ T7588] inactive_anon 0
[  382.377125][ T7588] active_anon 0
[  382.377125][ T7588] inactive_file 0
[  382.377125][ T7588] active_file 0
[  382.377125][ T7588] unevictable 0
[  382.377125][ T7588] slab_reclaimable 0
[  382.377125][ T7588] slab_unreclaimable 0
[  382.377125][ T7588] slab 0
[  382.377125][ T7588] workingset_refault_anon 0
[  382.377164][ T7588] Out of memory and no killable processes...
[  382.388018][   T26] audit: type=1326 audit(1790534293.817:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7587 comm="syz.3.882" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f9d8159e159 code=0x7ffc0000
[  382.388058][   T26] audit: type=1326 audit(1790534293.817:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7587 comm="syz.3.882" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d8159e159 code=0x7ffc0000
[  382.388093][   T26] audit: type=1326 audit(1790534293.817:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7587 comm="syz.3.882" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d8159e159 code=0x7ffc0000
[  382.536446][    C0] vkms_vblank_simulate: vblank timer overrun
[  382.567610][    C0] vkms_vblank_simulate: vblank timer overrun
[  382.745375][ T4911] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  384.656021][ T7630] loop5: detected capacity change from 0 to 4096
[  384.875051][ T7636] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  385.173307][ T7642] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4283] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[7642]
[  389.948828][ T7697] loop4: detected capacity change from 0 to 128
[  389.989051][ T7697] FAT-fs (loop4): Unrecognized mount option "shorname=lower" or missing value
[  390.763411][ T7702] loop4: detected capacity change from 0 to 2048
[  390.811176][ T7702] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  390.910680][ T7705] loop5: detected capacity change from 0 to 7
[  390.950261][ T7705] Dev loop5: unable to read RDB block 7
[  390.961118][ T7705]  loop5: unable to read partition table
[  390.978442][ T7705] loop5: partition table beyond EOD, truncated
[  391.015401][ T7705] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  391.684205][ T7714] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  391.815523][ T7713] tipc: Disabling bearer <eth:syzkaller0>
[  393.592753][   T26] kauditd_printk_skb: 53 callbacks suppressed
[  393.592834][   T26] audit: type=1326 audit(1790534305.727:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7750 comm="syz.4.929" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbab0b9e159 code=0x7ffc0000
[  393.668834][ T7753] loop3: detected capacity change from 0 to 128
[  393.710173][ T7753] FAT-fs (loop3): Unrecognized mount option "shorname=lower" or missing value
[  393.726353][   T26] audit: type=1326 audit(1790534305.727:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7750 comm="syz.4.929" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbab0b9e159 code=0x7ffc0000
[  393.814199][ T7751] syz.4.929 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=1, oom_score_adj=1000
[  393.838015][   T26] audit: type=1326 audit(1790534305.727:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7750 comm="syz.4.929" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbab0b9e159 code=0x7ffc0000
[  393.900115][ T7751] CPU: 0 PID: 7751 Comm: syz.4.929 Not tainted syzkaller #0
[  393.907497][ T7751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  393.917607][ T7751] Call Trace:
[  393.920564][ T7753] loop3: detected capacity change from 0 to 2048
[  393.920913][ T7751]  <TASK>
[  393.930305][ T7751]  dump_stack_lvl+0x188/0x24e
[  393.935029][ T7751]  ? show_regs_print_info+0x12/0x12
[  393.940244][ T7751]  ? load_image+0x410/0x410
[  393.944775][ T7751]  dump_header+0xd8/0x820
[  393.949123][ T7751]  out_of_memory+0xe9a/0x1220
[  393.953901][ T7751]  ? print_unlock_imbalance_bug+0x160/0x160
[  393.960013][ T7751]  ? mutex_lock_nested+0x10/0x10
[  393.964978][ T7751]  ? unregister_oom_notifier+0x20/0x20
[  393.970543][ T7751]  mem_cgroup_out_of_memory+0x2c0/0x390
[  393.976109][ T7751]  ? mem_cgroup_oom_trylock+0x210/0x210
[  393.981686][ T7751]  ? do_raw_spin_unlock+0x11d/0x230
[  393.986926][ T7751]  try_charge_memcg+0xc9d/0x17c0
[  393.991990][ T7751]  ? percpu_ref_put+0x180/0x180
[  393.996857][ T7751]  ? get_mem_cgroup_from_objcg+0x19/0x150
[  394.002603][ T7751]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  394.008775][ T7751]  ? percpu_ref_tryget+0x15/0x180
[  394.013810][ T7751]  ? percpu_ref_tryget+0x15/0x180
[  394.018849][ T7751]  ? get_mem_cgroup_from_objcg+0x19/0x150
[  394.024670][ T7751]  ? get_mem_cgroup_from_objcg+0x19/0x150
[  394.030429][ T7751]  ? get_mem_cgroup_from_objcg+0x13c/0x150
[  394.036250][ T7751]  obj_cgroup_charge+0x36a/0x620
[  394.041205][ T7751]  ? obj_cgroup_charge+0xe9/0x620
[  394.046260][ T7751]  ? mod_objcg_mlstate+0x320/0x320
[  394.051403][ T7751]  ? percpu_ref_tryget+0x15/0x180
[  394.056456][ T7751]  ? get_obj_cgroup_from_current+0xd0/0x280
[  394.062372][ T7751]  ? get_obj_cgroup_from_current+0xd0/0x280
[  394.068367][ T7751]  ? __bitmap_weight+0xa8/0xf0
[  394.073163][ T7751]  pcpu_alloc+0x21c/0x16b0
[  394.077610][ T7751]  mem_cgroup_css_alloc+0x255/0x13b0
[  394.082936][ T7751]  cgroup_apply_control_enable+0x3cc/0xb00
[  394.088765][ T7751]  cgroup_mkdir+0xc7f/0xe70
[  394.093291][ T7751]  ? css_task_iter_end+0x280/0x280
[  394.098427][ T7751]  ? kernfs_iop_permission+0x26d/0x350
[  394.103899][ T7751]  ? css_task_iter_end+0x280/0x280
[  394.109069][ T7751]  kernfs_iop_mkdir+0x23d/0x3d0
[  394.113960][ T7751]  vfs_mkdir+0x386/0x570
[  394.118230][ T7751]  do_mkdirat+0x1d8/0x440
[  394.122583][ T7751]  ? vfs_mkdir+0x570/0x570
[  394.127017][ T7751]  __x64_sys_mkdirat+0x85/0x90
[  394.131798][ T7751]  do_syscall_64+0x4c/0xa0
[  394.136236][ T7751]  ? clear_bhb_loop+0x60/0xb0
[  394.140943][ T7751]  ? clear_bhb_loop+0x60/0xb0
[  394.145639][ T7751]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  394.151558][ T7751] RIP: 0033:0x7fbab0b9e159
[  394.156006][ T7751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  394.175735][ T7751] RSP: 002b:00007fbab1a3b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  394.184170][ T7751] RAX: ffffffffffffffda RBX: 00007fbab0e25fa0 RCX: 00007fbab0b9e159
[  394.192154][ T7751] RDX: 0000000000000020 RSI: 0000200000000040 RDI: ffffffffffffff9c
[  394.200141][ T7751] RBP: 00007fbab0c3506b R08: 0000000000000000 R09: 0000000000000000
[  394.208122][ T7751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  394.216101][ T7751] R13: 00007fbab0e26038 R14: 00007fbab0e25fa0 R15: 00007ffc70056798
[  394.224097][ T7751]  </TASK>
[  394.227238][    C0] vkms_vblank_simulate: vblank timer overrun
[  394.292191][ T7753] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  394.334139][   T26] audit: type=1326 audit(1790534305.727:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7750 comm="syz.4.929" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fbab0b9e159 code=0x7ffc0000
[  394.339287][ T7757] binder: 7756:7757 ioctl c0306201 0 returned -14
[  394.367068][ T7751] memory: usage 0kB, limit 0kB, failcnt 19
[  394.397565][ T7751] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[  394.511336][ T7751] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[  394.572018][   T26] audit: type=1326 audit(1790534305.727:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7750 comm="syz.4.929" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbab0b9e159 code=0x7ffc0000
[  394.784413][   T26] audit: type=1326 audit(1790534305.727:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7750 comm="syz.4.929" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fbab0b9e159 code=0x7ffc0000
[  394.801182][ T7751] Memory cgroup stats for /syz4/test:
[  394.991332][ T7751] anon 0
[  394.991332][ T7751] file 0
[  394.991332][ T7751] kernel 0
[  394.991332][ T7751] kernel_stack 0
[  394.991332][ T7751] pagetables 0
[  394.991332][ T7751] sec_pagetables 0
[  394.991332][ T7751] percpu 0
[  394.991332][ T7751] sock 0
[  394.991332][ T7751] vmalloc 0
[  394.991332][ T7751] shmem 0
[  394.991332][ T7751] zswap 0
[  394.991332][ T7751] zswapped 0
[  394.991332][ T7751] file_mapped 0
[  394.991332][ T7751] file_dirty 0
[  394.991332][ T7751] file_writeback 0
[  394.991332][ T7751] swapcached 0
[  394.991332][ T7751] anon_thp 0
[  394.991332][ T7751] file_thp 0
[  394.991332][ T7751] shmem_thp 0
[  394.991332][ T7751] inactive_anon 0
[  394.991332][ T7751] active_anon 0
[  394.991332][ T7751] inactive_file 0
[  394.991332][ T7751] active_file 0
[  394.991332][ T7751] unevictable 0
[  394.991332][ T7751] slab_reclaimable 0
[  394.991332][ T7751] slab_unreclaimable 0
[  394.991332][ T7751] slab 0
[  394.991332][ T7751] workingset_refault_anon 0
[  395.111100][   T26] audit: type=1326 audit(1790534305.727:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7750 comm="syz.4.929" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbab0b9e159 code=0x7ffc0000
[  395.136742][   T26] audit: type=1326 audit(1790534305.727:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7750 comm="syz.4.929" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fbab0b9e159 code=0x7ffc0000
[  395.169897][   T26] audit: type=1326 audit(1790534305.727:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7750 comm="syz.4.929" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbab0b9e159 code=0x7ffc0000
[  395.331528][   T26] audit: type=1326 audit(1790534305.727:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7750 comm="syz.4.929" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbab0b9e159 code=0x7ffc0000
[  395.355649][    C0] vkms_vblank_simulate: vblank timer overrun
[  395.400794][ T7751] Out of memory and no killable processes...
[  396.461984][ T7771] tipc: Started in network mode
[  396.466943][ T7771] tipc: Node identity 5634b873c27a, cluster identity 4711
[  396.518351][ T7771] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  397.722879][ T7780] loop5: detected capacity change from 0 to 128
[  397.722924][ T7770] tipc: Disabling bearer <eth:syzkaller0>
[  397.789985][ T4469] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  397.978068][ T4321] tipc: Node number set to 2488186995
[  398.679346][ T7794] binder: 7793:7794 ioctl c0306201 0 returned -14
[  398.817135][   T26] kauditd_printk_skb: 50 callbacks suppressed
[  398.817153][   T26] audit: type=1326 audit(1790534310.947:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7797 comm="syz.5.946" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb864d9e159 code=0x7ffc0000
[  398.862443][   T26] audit: type=1326 audit(1790534310.947:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7797 comm="syz.5.946" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb864d9e159 code=0x7ffc0000
[  399.034726][   T26] audit: type=1326 audit(1790534311.157:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7797 comm="syz.5.946" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb864d9e159 code=0x7ffc0000
[  399.058693][    C1] vkms_vblank_simulate: vblank timer overrun
[  399.122051][   T26] audit: type=1326 audit(1790534311.237:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7797 comm="syz.5.946" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb864d9e159 code=0x7ffc0000
[  399.884737][   T26] audit: type=1326 audit(1790534311.257:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7797 comm="syz.5.946" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb864d9e159 code=0x7ffc0000
[  399.909068][    C1] vkms_vblank_simulate: vblank timer overrun
[  399.958777][   T26] audit: type=1326 audit(1790534311.267:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7797 comm="syz.5.946" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb864d9e159 code=0x7ffc0000
[  399.986358][   T26] audit: type=1326 audit(1790534311.267:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7797 comm="syz.5.946" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb864d9e159 code=0x7ffc0000
[  400.022309][   T26] audit: type=1326 audit(1790534311.267:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7797 comm="syz.5.946" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb864d9e159 code=0x7ffc0000
[  400.049125][   T26] audit: type=1326 audit(1790534311.267:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7797 comm="syz.5.946" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb864d9e159 code=0x7ffc0000
[  400.180019][ T7813] loop5: detected capacity change from 0 to 7
[  400.225966][ T7815] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  400.236887][ T7813] Dev loop5: unable to read RDB block 7
[  400.243613][ T7813]  loop5: unable to read partition table
[  401.280586][   T26] audit: type=1326 audit(1790534311.267:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7797 comm="syz.5.946" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb864d9e159 code=0x7ffc0000
[  401.341179][ T7813] loop5: partition table beyond EOD, truncated
[  401.421067][ T7813] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  401.674694][ T7822] loop4: detected capacity change from 0 to 128
[  402.014501][ T4469] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  402.125053][ T7829] binder: 7826:7829 ioctl c0306201 0 returned -14
[  403.858059][ T7846] loop5: detected capacity change from 0 to 128
[  403.908605][ T7846] FAT-fs (loop5): Unrecognized mount option "shorname=lower" or missing value
[  404.937445][ T7846] loop5: detected capacity change from 0 to 2048
[  405.048303][ T7846] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  405.481140][   T26] kauditd_printk_skb: 60 callbacks suppressed
[  405.481217][   T26] audit: type=1800 audit(1790534317.597:231): pid=7857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.960" name="file2" dev="loop5" ino=1347 res=0 errno=0
[  406.483438][ T7864] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  406.878976][   T26] audit: type=1326 audit(1790534319.007:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7869 comm="syz.0.966" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020619e159 code=0x7ffc0000
[  406.968513][   T26] audit: type=1326 audit(1790534319.047:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7869 comm="syz.0.966" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f020619e159 code=0x7ffc0000
[  407.053690][   T26] audit: type=1326 audit(1790534319.047:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7869 comm="syz.0.966" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020619e159 code=0x7ffc0000
[  407.091236][ T7870] syz.0.966 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=1, oom_score_adj=1000
[  407.136906][ T7870] CPU: 0 PID: 7870 Comm: syz.0.966 Not tainted syzkaller #0
[  407.144280][ T7870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  407.154381][ T7870] Call Trace:
[  407.157724][ T7870]  <TASK>
[  407.160689][ T7870]  dump_stack_lvl+0x188/0x24e
[  407.165422][ T7870]  ? show_regs_print_info+0x12/0x12
[  407.170712][ T7870]  ? load_image+0x410/0x410
[  407.175284][ T7870]  dump_header+0xd8/0x820
[  407.179753][ T7870]  out_of_memory+0xe9a/0x1220
[  407.184472][ T7870]  ? print_unlock_imbalance_bug+0x160/0x160
[  407.190502][ T7870]  ? mutex_lock_nested+0x10/0x10
[  407.195482][ T7870]  ? unregister_oom_notifier+0x20/0x20
[  407.200981][ T7870]  mem_cgroup_out_of_memory+0x2c0/0x390
[  407.206581][ T7870]  ? mem_cgroup_oom_trylock+0x210/0x210
[  407.212185][ T7870]  ? do_raw_spin_unlock+0x11d/0x230
[  407.217424][ T7870]  try_charge_memcg+0xc9d/0x17c0
[  407.222468][ T7870]  ? percpu_ref_put+0x180/0x180
[  407.227385][ T7870]  ? get_mem_cgroup_from_objcg+0x19/0x150
[  407.233173][ T7870]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  407.239222][ T7870]  ? percpu_ref_tryget+0x15/0x180
[  407.244293][ T7870]  ? percpu_ref_tryget+0x15/0x180
[  407.249363][ T7870]  ? get_mem_cgroup_from_objcg+0x19/0x150
[  407.255129][ T7870]  ? get_mem_cgroup_from_objcg+0x19/0x150
[  407.260899][ T7870]  ? get_mem_cgroup_from_objcg+0x13c/0x150
[  407.266751][ T7870]  obj_cgroup_charge+0x36a/0x620
[  407.271771][ T7870]  ? obj_cgroup_charge+0xe9/0x620
[  407.276839][ T7870]  ? mod_objcg_mlstate+0x320/0x320
[  407.281988][ T7870]  ? percpu_ref_tryget+0x15/0x180
[  407.282360][   T26] audit: type=1326 audit(1790534319.047:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7869 comm="syz.0.966" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f020619e159 code=0x7ffc0000
[  407.287050][ T7870]  ? get_obj_cgroup_from_current+0xd0/0x280
[  407.287081][ T7870]  ? get_obj_cgroup_from_current+0xd0/0x280
[  407.287103][ T7870]  ? __bitmap_weight+0xa8/0xf0
[  407.287130][ T7870]  pcpu_alloc+0x21c/0x16b0
[  407.332016][ T7870]  mem_cgroup_css_alloc+0x255/0x13b0
[  407.337373][ T7870]  cgroup_apply_control_enable+0x3cc/0xb00
[  407.343253][ T7870]  cgroup_mkdir+0xc7f/0xe70
[  407.347992][ T7870]  ? css_task_iter_end+0x280/0x280
[  407.353168][ T7870]  ? kernfs_iop_permission+0x26d/0x350
[  407.358669][ T7870]  ? css_task_iter_end+0x280/0x280
[  407.363907][ T7870]  kernfs_iop_mkdir+0x23d/0x3d0
[  407.368806][ T7870]  vfs_mkdir+0x386/0x570
[  407.373102][ T7870]  do_mkdirat+0x1d8/0x440
[  407.377481][ T7870]  ? vfs_mkdir+0x570/0x570
[  407.381963][ T7870]  __x64_sys_mkdirat+0x85/0x90
[  407.386768][ T7870]  do_syscall_64+0x4c/0xa0
[  407.391219][ T7870]  ? clear_bhb_loop+0x60/0xb0
[  407.395932][ T7870]  ? clear_bhb_loop+0x60/0xb0
[  407.399908][   T26] audit: type=1326 audit(1790534319.047:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7869 comm="syz.0.966" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020619e159 code=0x7ffc0000
[  407.400637][ T7870]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  407.400671][ T7870] RIP: 0033:0x7f020619e159
[  407.400692][ T7870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  407.454657][ T7870] RSP: 002b:00007f020703f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  407.463309][ T7870] RAX: ffffffffffffffda RBX: 00007f0206425fa0 RCX: 00007f020619e159
[  407.471326][ T7870] RDX: 0000000000000020 RSI: 0000200000000040 RDI: ffffffffffffff9c
[  407.479346][ T7870] RBP: 00007f020623506b R08: 0000000000000000 R09: 0000000000000000
[  407.480599][   T26] audit: type=1326 audit(1790534319.047:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7869 comm="syz.0.966" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f020619e159 code=0x7ffc0000
[  407.487336][ T7870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  407.487354][ T7870] R13: 00007f0206426038 R14: 00007f0206425fa0 R15: 00007fffb9126218
[  407.487387][ T7870]  </TASK>
[  407.630795][   T26] audit: type=1326 audit(1790534319.047:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7869 comm="syz.0.966" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020619e159 code=0x7ffc0000
[  407.654817][    C1] vkms_vblank_simulate: vblank timer overrun
[  407.774026][ T7870] memory: usage 0kB, limit 0kB, failcnt 19
[  407.779921][ T7870] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[  407.787665][   T26] audit: type=1326 audit(1790534319.047:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7869 comm="syz.0.966" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f020619e159 code=0x7ffc0000
[  407.838596][ T7870] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[  407.847689][   T26] audit: type=1326 audit(1790534319.047:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7869 comm="syz.0.966" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020619e159 code=0x7ffc0000
[  407.864756][ T7870] Memory cgroup stats for 
[  407.872153][    C1] vkms_vblank_simulate: vblank timer overrun
[  407.912133][ T7870] /syz0/test:
[  407.912327][ T7870] anon 0
[  407.912327][ T7870] file 0
[  407.912327][ T7870] kernel 0
[  407.912327][ T7870] kernel_stack 0
[  407.912327][ T7870] pagetables 0
[  407.912327][ T7870] sec_pagetables 0
[  407.912327][ T7870] percpu 0
[  407.912327][ T7870] sock 0
[  407.912327][ T7870] vmalloc 0
[  407.912327][ T7870] shmem 0
[  407.912327][ T7870] zswap 0
[  407.912327][ T7870] zswapped 0
[  407.912327][ T7870] file_mapped 0
[  407.912327][ T7870] file_dirty 0
[  407.912327][ T7870] file_writeback 0
[  407.912327][ T7870] swapcached 0
[  407.912327][ T7870] anon_thp 0
[  407.912327][ T7870] file_thp 0
[  407.912327][ T7870] shmem_thp 0
[  407.912327][ T7870] inactive_anon 0
[  407.912327][ T7870] active_anon 0
[  407.912327][ T7870] inactive_file 0
[  407.912327][ T7870] active_file 0
[  407.912327][ T7870] unevictable 0
[  407.912327][ T7870] slab_reclaimable 0
[  407.912327][ T7870] slab_unreclaimable 0
[  407.912327][ T7870] slab 0
[  407.912327][ T7870] workingset_refault_anon 0
[  408.049112][ T7881] loop5: detected capacity change from 0 to 32768
[  408.057370][ T7870] Out of memory and no killable processes...
[  408.118843][ T7881] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  408.740885][ T7878] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  409.839649][ T7902] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  409.906856][ T7900] tipc: Disabling bearer <eth:syzkaller0>
[  410.141091][  T108] ==================================================================
[  410.149378][  T108] BUG: KASAN: use-after-free in jfs_lazycommit+0x776/0xa90
[  410.156697][  T108] Read of size 4 at addr ffff88801866ee94 by task jfsCommit/108
[  410.164388][  T108] 
[  410.166789][  T108] CPU: 1 PID: 108 Comm: jfsCommit Not tainted syzkaller #0
[  410.174040][  T108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  410.184246][  T108] Call Trace:
[  410.187555][  T108]  <TASK>
[  410.190522][  T108]  dump_stack_lvl+0x188/0x24e
[  410.195239][  T108]  ? __lock_acquire+0x7c40/0x7c40
[  410.200303][  T108]  ? show_regs_print_info+0x12/0x12
[  410.205560][  T108]  ? load_image+0x410/0x410
[  410.210138][  T108]  ? _raw_spin_lock_irqsave+0xbc/0x100
[  410.215650][  T108]  ? __virt_addr_valid+0x188/0x540
[  410.220973][  T108]  ? __virt_addr_valid+0x467/0x540
[  410.226219][  T108]  ? jfs_lazycommit+0x776/0xa90
[  410.231112][  T108]  print_report+0xa8/0x210
[  410.235570][  T108]  kasan_report+0x10b/0x140
[  410.240113][  T108]  ? jfs_lazycommit+0x776/0xa90
[  410.245005][  T108]  jfs_lazycommit+0x776/0xa90
[  410.249886][  T108]  ? txFreelock+0x5a0/0x5a0
[  410.254402][  T108]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  410.260306][  T108]  ? do_task_dead+0xd0/0xd0
[  410.264874][  T108]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  410.270781][  T108]  ? __kthread_parkme+0x71/0x1c0
[  410.275838][  T108]  ? __kthread_parkme+0x15b/0x1c0
[  410.280869][  T108]  kthread+0x29d/0x330
[  410.284942][  T108]  ? txFreelock+0x5a0/0x5a0
[  410.289465][  T108]  ? kthread_blkcg+0xd0/0xd0
[  410.294068][  T108]  ret_from_fork+0x1f/0x30
[  410.298640][  T108]  </TASK>
[  410.301684][  T108] 
[  410.304014][  T108] Allocated by task 7881:
[  410.308428][  T108]  kasan_set_track+0x4b/0x70
[  410.313124][  T108]  __kasan_kmalloc+0x8e/0xa0
[  410.317722][  T108]  jfs_fill_super+0xd8/0xab0
[  410.322365][  T108]  mount_bdev+0x28a/0x3c0
[  410.326741][  T108]  legacy_get_tree+0xe6/0x180
[  410.331450][  T108]  vfs_get_tree+0x88/0x270
[  410.335868][  T108]  do_new_mount+0x247/0xa40
[  410.340378][  T108]  __se_sys_mount+0x2e3/0x3d0
[  410.345057][  T108]  do_syscall_64+0x4c/0xa0
[  410.349474][  T108]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  410.355378][  T108] 
[  410.357699][  T108] Freed by task 4911:
[  410.361678][  T108]  kasan_set_track+0x4b/0x70
[  410.366276][  T108]  kasan_save_free_info+0x27/0x40
[  410.371301][  T108]  ____kasan_slab_free+0x126/0x1f0
[  410.376416][  T108]  slab_free_freelist_hook+0x133/0x1b0
[  410.381881][  T108]  __kmem_cache_free+0xb6/0x200
[  410.386731][  T108]  generic_shutdown_super+0x130/0x340
[  410.392109][  T108]  kill_block_super+0x7c/0xe0
[  410.396880][  T108]  deactivate_locked_super+0x93/0xf0
[  410.402172][  T108]  cleanup_mnt+0x471/0x4f0
[  410.406594][  T108]  task_work_run+0x1d0/0x260
[  410.411281][  T108]  exit_to_user_mode_loop+0xe6/0x110
[  410.416646][  T108]  exit_to_user_mode_prepare+0xee/0x180
[  410.422207][  T108]  syscall_exit_to_user_mode+0x16/0x40
[  410.427675][  T108]  do_syscall_64+0x58/0xa0
[  410.432182][  T108]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  410.438095][  T108] 
[  410.440438][  T108] Last potentially related work creation:
[  410.446156][  T108]  kasan_save_stack+0x3a/0x60
[  410.450850][  T108]  __kasan_record_aux_stack+0xb2/0xc0
[  410.456330][  T108]  call_rcu+0x14f/0x950
[  410.460498][  T108]  bearer_disable+0x12d/0x260
[  410.465175][  T108]  tipc_l2_device_event+0x399/0x620
[  410.470435][  T108]  raw_notifier_call_chain+0xcb/0x160
[  410.475815][  T108]  unregister_netdevice_many_notify+0x10b1/0x1990
[  410.482256][  T108]  unregister_netdevice_queue+0x2e5/0x330
[  410.487988][  T108]  __tun_detach+0xdb7/0x1590
[  410.492695][  T108]  tun_chr_close+0x109/0x1b0
[  410.497294][  T108]  __fput+0x20a/0x8b0
[  410.501312][  T108]  task_work_run+0x1d0/0x260
[  410.505909][  T108]  exit_to_user_mode_loop+0xe6/0x110
[  410.511223][  T108]  exit_to_user_mode_prepare+0xee/0x180
[  410.516773][  T108]  syscall_exit_to_user_mode+0x16/0x40
[  410.522237][  T108]  do_syscall_64+0x58/0xa0
[  410.526655][  T108]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  410.533162][  T108] 
[  410.535486][  T108] The buggy address belongs to the object at ffff88801866ee00
[  410.535486][  T108]  which belongs to the cache kmalloc-256 of size 256
[  410.549788][  T108] The buggy address is located 148 bytes inside of
[  410.549788][  T108]  256-byte region [ffff88801866ee00, ffff88801866ef00)
[  410.563243][  T108] 
[  410.565585][  T108] The buggy address belongs to the physical page:
[  410.572062][  T108] page:ffffea0000619b80 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88801866f000 pfn:0x1866e
[  410.583522][  T108] head:ffffea0000619b80 order:1 compound_mapcount:0 compound_pincount:0
[  410.591854][  T108] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  410.599854][  T108] raw: 00fff00000010200 ffffea00006eb580 dead000000000003 ffff888017441b40
[  410.608444][  T108] raw: ffff88801866f000 000000008010000f 00000001ffffffff 0000000000000000
[  410.617112][  T108] page dumped because: kasan: bad access detected
[  410.623541][  T108] page_owner tracks the page as allocated
[  410.629271][  T108] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 2612740210, free_ts 0
[  410.649070][  T108]  post_alloc_hook+0x173/0x1a0
[  410.653900][  T108]  get_page_from_freelist+0x206b/0x2180
[  410.659454][  T108]  __alloc_pages+0x1ec/0x4f0
[  410.664048][  T108]  alloc_page_interleave+0x24/0x1e0
[  410.669274][  T108]  alloc_slab_page+0x5d/0x180
[  410.673972][  T108]  new_slab+0x87/0x2d0
[  410.678055][  T108]  ___slab_alloc+0xbc5/0x1240
[  410.682761][  T108]  __kmem_cache_alloc_node+0x126/0x270
[  410.688232][  T108]  __kmalloc_node_track_caller+0xa0/0x240
[  410.693966][  T108]  krealloc+0x6a/0x100
[  410.698041][  T108]  add_sysfs_param+0xe8/0x920
[  410.702732][  T108]  kernel_add_sysfs_param+0xaf/0x11b
[  410.708185][  T108]  param_sysfs_builtin+0x20d/0x2ae
[  410.713302][  T108]  param_sysfs_init+0x66/0x6a
[  410.717984][  T108]  do_one_initcall+0x257/0x800
[  410.722764][  T108]  do_initcall_level+0x13d/0x1ed
[  410.727730][  T108] page_owner free stack trace missing
[  410.733185][  T108] 
[  410.735513][  T108] Memory state around the buggy address:
[  410.741273][  T108]  ffff88801866ed80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  410.749331][  T108]  ffff88801866ee00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  410.757392][  T108] >ffff88801866ee80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  410.765540][  T108]                          ^
[  410.770125][  T108]  ffff88801866ef00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  410.778274][  T108]  ffff88801866ef80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  410.786331][  T108] ==================================================================
[  410.794390][  T108] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  410.801582][  T108] CPU: 1 PID: 108 Comm: jfsCommit Not tainted syzkaller #0
[  410.808784][  T108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  410.818842][  T108] Call Trace:
[  410.822141][  T108]  <TASK>
[  410.825078][  T108]  dump_stack_lvl+0x188/0x24e
[  410.829774][  T108]  ? memcpy+0x3c/0x60
[  410.833803][  T108]  ? show_regs_print_info+0x12/0x12
[  410.839008][  T108]  ? load_image+0x410/0x410
[  410.843530][  T108]  panic+0x2d3/0x710
[  410.847432][  T108]  ? __lock_acquire+0x7c40/0x7c40
[  410.852473][  T108]  ? bpf_jit_dump+0xd0/0xd0
[  410.856984][  T108]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  410.862890][  T108]  ? _raw_spin_unlock+0x40/0x40
[  410.867758][  T108]  check_panic_on_warn+0x80/0xa0
[  410.872813][  T108]  ? jfs_lazycommit+0x776/0xa90
[  410.877771][  T108]  end_report+0x66/0x110
[  410.882030][  T108]  kasan_report+0x118/0x140
[  410.886633][  T108]  ? jfs_lazycommit+0x776/0xa90
[  410.891491][  T108]  jfs_lazycommit+0x776/0xa90
[  410.896178][  T108]  ? txFreelock+0x5a0/0x5a0
[  410.900684][  T108]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  410.906586][  T108]  ? do_task_dead+0xd0/0xd0
[  410.911114][  T108]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  410.917065][  T108]  ? __kthread_parkme+0x71/0x1c0
[  410.922012][  T108]  ? __kthread_parkme+0x15b/0x1c0
[  410.927048][  T108]  kthread+0x29d/0x330
[  410.931123][  T108]  ? txFreelock+0x5a0/0x5a0
[  410.935631][  T108]  ? kthread_blkcg+0xd0/0xd0
[  410.940243][  T108]  ret_from_fork+0x1f/0x30
[  410.944770][  T108]  </TASK>
[  410.948109][  T108] Kernel Offset: disabled
[  410.952439][  T108] Rebooting in 86400 seconds..