last executing test programs:

14m33.479479702s ago: executing program 4 (id=149):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000a00)=@getrule={0x14, 0x22, 0x4, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000084}, 0x24040000)
connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000440)={'batadv_slave_0\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000006800e9780000000000dbdf250a0000000000000008000500", @ANYRES32=r4], 0x20}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000006800010003001000fdffff7f00000000000000000c00020001000000150000000c000c8006000100d43f00000600030001"], 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080)
sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@getnexthop={0x20, 0x76, 0xb0d, 0x4000, 0x0, {0x3}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}}, 0x0)

14m33.240403737s ago: executing program 4 (id=150):
socket$inet6(0xa, 0x80002, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
dup(r0)
openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x511003, 0x488)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280))
pipe2(&(0x7f00000002c0), 0x80000)
socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[@ANYRES32=r2], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r1, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_GETKMSGREDIRECT(r3, 0x541c, &(0x7f0000000000))

14m33.04634849s ago: executing program 4 (id=151):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r3, &(0x7f0000000a00)=""/102392, 0x18ff8)
r4 = syz_open_dev$sg(&(0x7f0000019d00), 0x6f5e, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000019d40)=ANY=[@ANYBLOB])

14m31.789543403s ago: executing program 4 (id=152):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, &(0x7f0000000580)={[{@grpjquota}, {@dioread_lock}, {@delalloc}, {@commit}]}, 0xfe, 0x258, &(0x7f0000000c40)="$eJzs3E1oHGUYB/BnZncTkywS9SKIHyAiGgjxJniJF4WAhCAiqBAR8aIkQkzwlnjy4kHPtuTUSyi9Ne2x5BJ6aSn0lLY5pJdCG3po6KE9bNmdJKTJJmm6252y8/vB7MzsfDzvsPt/Zy7zBlBYgxExGhGliBiKiEpEJHt3eC+bBrdXF/tWJyNqta/vJ439svXMznEDEbEQEZ9GxEqaxK/liLnl7zcern354T+zlQ/OLH/X19GL3La5sf7V1unxv8+PfTJ39frd8SRGo/rUdbVf0uS7chLx+oso9pJIynm3gGcx8ee5G/XcvxER7zfyX4k0sh/v35melUp8fOqwY/+7d+2tTrYVaL9arVK/By7UgMJJI6IaSTocEdlymg4PZ8/wN0v96W/TM38M/TI9O/Vz3j0V0C7ViPUvLvZeGNiX/zulLP9A96rn/5uJpVv15a1S3q0BOuLtbFbP/9CP8x+F/EPhyD90u/TQLSfLf0+b2wXkyf0fikv+oQsc/oh/JPmH4pJ/6GKVozfLPxSX/ENxyT8U1978AwDFUuvN+w1kIC959z8AAAAAAAAAAAAAAAAAAMBBi32rkztTp2pe/j9i8/OIKDerX9oe2vyVxmf/g6S+264kO6wlP7zb4gladDbnt69fvZ1v/Svv5Ft/fipi4a+IGCmXD/7/kucdWn/Xa8dsr/zUYoETSvatf/ZtZ+vv93gp3/pjaxGX6v3PSLP+J403G/Pm/U/1+CGWj/X7oxZPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQMc8CQAA//96pW1W")
openat(0xffffffffffffff9c, 0x0, 0x181341, 0x84)
symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x28541, 0x140)
timer_create(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x8010, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000300)='3', 0x4e)
setfsgid(0xee00)

14m28.756572378s ago: executing program 4 (id=165):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
socketpair(0x20, 0x2, 0x408, &(0x7f00000000c0))
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000080)={0x8})
ioctl$KVM_RUN(r5, 0xae80, 0x0)

14m26.102134446s ago: executing program 4 (id=178):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0xce22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x1c)
listen(r0, 0x2)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000100)=0x800001, 0x4)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20)
listen(r1, 0x2)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net/tcp6\x00')
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000280)=0x800001, 0x4)
bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20)
listen(r3, 0x2)
preadv(r2, &(0x7f0000000300)=[{&(0x7f0000000340)=""/225, 0xe1}, {&(0x7f0000000440)=""/106, 0x6a}, {&(0x7f00000004c0)=""/149, 0x95}, {&(0x7f0000000580)=""/60, 0x3c}], 0x4, 0x7, 0x20000000)

14m25.707752863s ago: executing program 32 (id=178):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0xce22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x1c)
listen(r0, 0x2)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000100)=0x800001, 0x4)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20)
listen(r1, 0x2)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net/tcp6\x00')
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000280)=0x800001, 0x4)
bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20)
listen(r3, 0x2)
preadv(r2, &(0x7f0000000300)=[{&(0x7f0000000340)=""/225, 0xe1}, {&(0x7f0000000440)=""/106, 0x6a}, {&(0x7f00000004c0)=""/149, 0x95}, {&(0x7f0000000580)=""/60, 0x3c}], 0x4, 0x7, 0x20000000)

7m58.900640051s ago: executing program 2 (id=860):
socket$inet6_sctp(0xa, 0x5, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
sched_setscheduler(0x0, 0x6, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f00000002c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000340)=@abs={0x0, 0x0, 0x3}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000003c0), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000000400), 0x10106, 0x2, 0x0)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0)
ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000440)={0x1})
sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f00000004c0)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r4, 0x0, 0x20048040)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000080000000000000200000a20000000000a050000000000000000000100fffc0900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000030900010073797a300000000048000000060a0104000000000000000001000000200004801c0001800b00010072656a65637400000c000280080001400000000108000b40000000000900010073797a30000000001400000011000100"], 0xd0}, 0x1, 0x0, 0x0, 0x24000890}, 0x0)
sendmsg$inet(r0, &(0x7f0000000680)={0x0, 0xeafbff3, &(0x7f00000006c0)=[{&(0x7f0000000700)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc)

7m56.634963867s ago: executing program 2 (id=863):
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$vfat(&(0x7f0000003880), &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES16], 0x88, 0x2a9, &(0x7f0000000c00)="$eJzs3T9rc1UYAPDnpmmSV4dkcJKCF3RwKm1XlxRpoZhJyaAOWmwL0gShhYJ/MHZydXH0EwiCm1/CxW8guApudihcuTf3mqSmaSNN9S2/39LTc89zznNOz6V0yNMPN4anR2mcXH7xa7RaSdS68SyukuhELSpfxYzuNwEAPM+usiz+yMaWiUsiorW6tACAFVr69/+PK08JAFixd959763dXm/v7TRtxf7w64t+/pd9/nX8fPckPo5BHMdWtOM6IvvbuL2fZdmonuY68dpwdNHPI4cf/FzOv/t7RBG/He3oFF2z8Qe9ve10bCp+lOfxQrl+N4/fiXa8NGf9g97ezpz46Dfi9Ven8t+MdvzyUXwSgzgqkpjEf7mdpm9m3/75+ft5enl8MrroN4txE9naI/9oAAAAAAAAAAAAAAAAAAAAAAB4wjbL2jnNKOr35F1l/Z216/yb9Ugrndn6POP4pJroRn2gURbfVfV1ttI0zcqBk/h6vFyP+n+zawAAAAAAAAAAAAAAAAAAAPh/Of/0s9PDweD47EEaVTWA6mP9/3ae7lTPK7F4cHOyVq1sLpg51qoxScTCNPJNPNCx3NV4dlvO3/+w7IStu8esLzqfh2lUt+v0MJl/hs2oelrVJflpekwj7rlW47ZHG0UC1eW4a57G3EftpffeeLFojBaMiWTRe/HGb+OEy57k5kvUKE51bvh62ZgKv3E3brvP1SnNvin/kKjWAQAAAAAAAAAAAAAAAAAAKzX5GPCch5cLQ2tZc2VpAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCjmvz//yUaozL4HoMbcXY+f+X6Y24TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAJ+6vAAAA//+lillR")
r1 = landlock_create_ruleset(0x0, 0x0, 0x0)
landlock_restrict_self(r1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
getsockopt$sock_timeval(r3, 0x1, 0x43, 0x0, &(0x7f00000000c0))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
fchmodat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0xfffffe43)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103)
truncate(&(0x7f0000000000)='./file1\x00', 0x1e0)
statfs(&(0x7f0000000ac0)='.\x00', &(0x7f0000000b00)=""/231)
syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x727, 0x7ffffd, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x10000, 0x10000000, 0x7}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x8080}, 0x10000084)

7m55.549997504s ago: executing program 2 (id=865):
syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x2730, 0x800, 0x1, 0x149}, &(0x7f0000000180), &(0x7f00000002c0), &(0x7f0000000240))
recvmmsg(0xffffffffffffffff, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{0x0}, {&(0x7f00000000c0)=""/250, 0xfa}], 0x2}}], 0x1, 0x34000, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
setxattr(0x0, &(0x7f0000000240)=@known='trusted.overlay.redirect\x00', 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000340)=[{0x20, 0xc, 0x77, 0xfffff024}, {0x28}, {0x6, 0x0, 0x0, 0x2}]}, 0x8)
openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x4844c1)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
socket$nl_generic(0x10, 0x3, 0x10)
fanotify_init(0x0, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(r1, &(0x7f0000001980)={0x9, {"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", 0x1061}}, 0x1006)

7m53.28189918s ago: executing program 2 (id=872):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200)
io_uring_enter(0xffffffffffffffff, 0x1, 0x1, 0x1, 0x0, 0x0)
shmget$private(0x0, 0x3000, 0x800, &(0x7f00007bd000/0x3000)=nil)

7m51.569857252s ago: executing program 2 (id=876):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
socket(0x10, 0x3, 0x0)
getpid()
sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r2, &(0x7f0000006800)=""/102392, 0x18ff8)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/icmp6\x00')
ioctl(r3, 0x3, &(0x7f0000000280))
preadv(r3, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/4096, 0x1000}], 0x1, 0xa3, 0x0)
io_uring_setup(0x6f0e, &(0x7f0000001300)={0x0, 0x2895, 0x100, 0x2, 0x1c3, 0x0, r3})
r4 = getpgrp(0x0)
r5 = syz_pidfd_open(r4, 0x0)
ioctl$FS_IOC_GETVERSION(r5, 0xff02, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r7, 0x4068aea3, &(0x7f00000000c0)={0xa8, 0x300})
r8 = openat$nsim_port_pp_hold(0xffffffffffffff9c, 0x0, 0x123842, 0x0)
write$nsim_bool(r8, &(0x7f0000000080)='1', 0x1)
write(r8, &(0x7f00000067c0)='F', 0x1)

7m49.070840384s ago: executing program 2 (id=877):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
socket$l2tp(0x2, 0x2, 0x73)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, 0x0, 0x0)
r4 = socket(0x1e, 0x4, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="64796e2c00c4bc028f592e8a95ba6d714e5521b2ebaa7d62e247bf1747f678a5e047976018da7aef126ec8cafd7aa358004bf31c125ed3f7d8aa9d5667ece18c5ff94e4565d911659ac5e6077427f7c6e4"])
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000500)={'ip6_vti0\x00', 0x0})
sendmsg$ETHTOOL_MSG_COALESCE_GET(r4, 0x0, 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x41, 0x0)
chdir(0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x101000, 0x0)

7m33.969371777s ago: executing program 33 (id=877):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
socket$l2tp(0x2, 0x2, 0x73)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, 0x0, 0x0)
r4 = socket(0x1e, 0x4, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="64796e2c00c4bc028f592e8a95ba6d714e5521b2ebaa7d62e247bf1747f678a5e047976018da7aef126ec8cafd7aa358004bf31c125ed3f7d8aa9d5667ece18c5ff94e4565d911659ac5e6077427f7c6e4"])
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000500)={'ip6_vti0\x00', 0x0})
sendmsg$ETHTOOL_MSG_COALESCE_GET(r4, 0x0, 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x41, 0x0)
chdir(0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x101000, 0x0)

34.468815059s ago: executing program 1 (id=2364):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000340)=0xfa, 0x4)

32.783992931s ago: executing program 1 (id=2376):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000033d000/0x18000)=nil, &(0x7f00000006c0)=[@text32={0x20, &(0x7f0000000700)="d8df7e23b3b9ce000000b807000000ba000000000f301b8154fea900b9b60a000080320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000b9a6080000b800000100ba000000000f300f300fc79d53bf0000c4b9e16dc301012202", 0xba}], 0x1, 0x10, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fdf000/0x18000)=nil, &(0x7f0000000780)=[@text16={0x10, 0x0}], 0x1, 0x1b, 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000900)={[0x1268f1c7, 0x3, 0x401, 0x9c5, 0x5, 0x7, 0x458, 0x4, 0x2, 0x6, 0x1000007, 0x3f, 0xfffffffffffffffd, 0x1000000d, 0x7e8, 0x100000000], 0x2ffc, 0x100000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

31.675579208s ago: executing program 1 (id=2385):
setresgid(0x0, 0xee01, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x2)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000100)=[{&(0x7f0000000140)="94", 0xf000}, {0x0}], 0x2)
syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="0180c2000003aaaaaaaaaabb0806000800400001000009000000ac1414aa000000000000e0000001979205006815f26020e1cacaacd9298a0a0c25b8c24f9829ea3b268fe197a79a9c3d44e1c12d990faaf4d687029c67b7473174ec36ca5d752f4b58601a820e6bb8a01919395b8accb200c37a90309e91e77a5244012f0000"], 0x0)
socket$inet6_udp(0xa, 0x2, 0x11)
bind$alg(0xffffffffffffffff, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58)
r1 = openat$kvm(0x0, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
io_uring_setup(0x1b7b, 0x0)
r2 = socket(0x10, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000440), &(0x7f0000000480)=0x8)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$kcm(0x29, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1, 0x5, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000001580)='GPL\x00'}, 0x48)
r6 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r6, &(0x7f00000015c0)={&(0x7f0000001600)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000001640)={r6, r5})
ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f00000016c0)={'wlan0\x00', @multicast})

28.501586317s ago: executing program 1 (id=2398):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x804000, &(0x7f0000000f00)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIhRzC8AVSakLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUmRNi2KEmV9Pjb13Z19b+a9eesZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8cun0mfSwWwEAPEhXRr96+qz7PwA8Vq76/38AAAAAAAAAAAAAADjoUhTxZKSYu7KWxqv3HfXL7b5bt8eGhrevdiRVNQ9V5cuf+pmz585/6YXBC9283J75gPr322fjtdGrlxovz96cm59aWJiabIzNtCdmJ6d2vYe91t/qZHUCGjdfvzV5/fpC4+zz5zZ9fHvg/f4njg9cHHz21DPdsmNDw8OjG0XqveVr99yQjp1meByOIk5Fiue+99PUiogi9n4u6g927Lc6UnXiZNWJsaHhqiPT7dbMYvnhSPdEFBGNnkrN7jnafiyi1vdA+7CzZsRS2fyywSfL7o3OteZb16anGiOt+cX2Ynt2ZiR1Wlv2pxFFXEgRyxGx2n/37vqiiFqk+M6xtXQtIg51z8MXq4nBO7ej2Mc+7kLZzkZfxHLxCIzZAdYfRbwaKX72zomYyNeZ6lrzhYhXy/xBxFtlvhSRyi/G+Yj3tvke8WiqRRF/WY7/xbU0WV0PuteVy19rfGXm+mxP2e515SPeH+66Ujyk+8ORLflgHPBrUz2KaFVX/LV077/ZAQAAAAAAAAAAAAAAAOB+OxJFfCZSvPIff1LNK45qXvqxi4N/OPCrvXPGn/6Q/ZRln4+IpWJ3c3IP54mBI2kkpYc8l/hxVo8i/jTP//vWw24MAAAAAAAAAAAAAAAAAADAY62In0SKF989kZajd03x9syNxtXWtenOqrDdtX+7a6avr6+vN1InmznHcy7lXM65knM1ZxS5fs5mzvGcSzmXc67kXM0Zh3L9nM2c4zmXci7nXMm5mjNquX7OZs7xnEs5l3Ou5FzNGQdk7V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgI+TIor4RaT49jfWUqSIaEaMRydX+h926wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAUn8q4vuRovFHzTvbahGRqn87TpS/nI/m4TI/Gc3BMl+K5qWcrSprzW89hPazN32piB9Hiv7623cGPI9/X+fdna9BvPXNjXefrXXyUPfDgff7nzh+7OLg8G88vdPrtF0DTl5uz9y63RgbGh4e7dlcy0f/ZM+2gXzc4v50nYhYeOPN11vT01Pz9/6i/Arsofoj9CLVHpeeelG9iNqBaMbD6TuPgfL+/16k+N13/7N7w+/c/+vxK513d+7w8fM/27j/v7h1R7u8/9e21sv3//Kevt39/8mebS/m34301SLqizfn+o5H1BfeePNU+2brxtSNqZnzp09/eXDwy+dO9x2OqF9vT0/1vLovpwsAAAAAAAAAAAAAAADgwUlF/H6kaP14LTUi4nY1X2vg4uCzp545FIeq+Vab5m2/Nnr1UuPl2Ztz81MLC1OTjbGZ9sTs5NRuD1evpnuNDQ3vS2c+1JF9bv+R+suzc2/Mt2/88eK2nx+tX7q2sDjfmtj+4zgSRUSzd8vJqsFjQ8NVo6fbrZmq6si2k+k/ur5UxH9FionzjfT5vC3P/986w3/T/P+lrTvap/n/n+jZVh4zpSJ+Hil+56+ejs9X7Twad52zXO7vIsXJC5/L5eJwWa7bhs5zBTozA8uy/xcp/ukXm8t250M+uVH2zK5P7COiHP9jkeL7f/Hd+M28bfPzH7Yf/6Nbd7RP4/9Uz7ajm55XsOeuk8f/VKR46cm347fytg96/kf32RsncuE7z+fYp/H/VM+2gXzc374/XQcAAAAAAAAAAHik9aUi/j5S/HC4ll7I23bz9/8mt+5on/7+16d7tk3en/WKPvTFnk8qAAAAABwQfamIn0SKG4tv35lDvXn+d8/8z9/bmP85lLZ8Wv05369Vzw24n3/+12sgH3d8790GAAAAAAAAAAAAAAAAAACAAyWlIl7I66mPV/P5J3dcT30lUrzyP8/lcul4Wa67DvxA9Wv9yuzMqUvT07MTrcXWtempxuhca2KqrPtUpFj728/lukW1vnp3vfnOGu8ba7HPR4rhf+iW7azF3l2b/KmNsmfKsp+IFP/9j5vLdtex/tRG2bNl2b+JFF//l+3LHt8oe64s+91I8aOvN7plj5Zlu89H/fRG2ecnZot9GBUAAAAAAAAAAAAAAAAAAAAeN32piD+PFP97c/nOXP68/n9fz9vKW9/sWe9/i9vVOv8D1fr/O72+l/X/q+cKLO10VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+HhKUcSbkWLuylpa6S/fd9Qvt2du3R4bGt6+2pFU1TxUlS9/6mfOnjv/pRcGL3Tzg+vfb5+J10avXmq8PHtzbn5qYWFqsjE2056YnZza9R72Wn+rk9UJaNx8/dbk9esLjbPPn9v08e2B9/ufOD5wcfDZU890y44NDQ+P9pSp9d3z0e+Sdth+OIr460jx3Pd+mn7YH1HE3s/Fh3x39tuRqhMnq06MDQ1XHZlut2YWyw9HuieiiGj0VGp2z9EDGIs9aUYslc0vG3yy7N7oXGu+dW16qjHSml9sL7ZnZ0ZSp7VlfxpRxIUUsRwRq/13764ving9Unzn2Fr61/6IQ93z8MUro189fXbndhT72MddKNvZ6ItYLh6BMTvA+qOIf44UP3vnRPxbf0QtOj/xhYhXy/xBxFvRGe9UfjHOR7y3zfeIR1Mtivj/cvwvrqV3+svrQfe6cvlrja/MXJ/tKdu9rjzy94cH6YBfm+pRxI+qK/5a+nf/XQMAAAAAAAAAAAAAAAAcIEX8eqR48d0TqZoffGdOcXvmRuNq69p0Z1pfd+5fd870+vr6eiN1splzPOdSzuWcKzlXc0aR6+dslllfXx/P75dyLudcybmaMw7l+jmbOcdzLuVczrmSczVn1HL9nM2c4zmXci7nXMm5mjMOyNw9AAAAAAAAAAAAAAAAAADg46Wo/knx7W+spfX+zvrS49HJFeuBfuz9MgAA//8hX/ir")
creat(&(0x7f0000000100)='./bus\x00', 0x44)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000002040)='./bus\x00', 0x0, 0x321001, 0x0)
r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x47)
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3)
syz_mount_image$erofs(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="61636c2c6e6f61636c2c6e6f61636c2c757365725f78617474722c6e6f757365725f78617474722c63616368655f73747261746567793d7265616461686561642c00fecc7fc2093271a7673d5b886b1fe81e2b7fbafb139d20c1e055e58cdda20264d746e65e4e180fc9adfb6132b24173b3cb1a8a51955fcb93d089261e9aafbb8f8fa1db5d78bc"], 0x1, 0x192, &(0x7f0000000540)="$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")
execve(&(0x7f0000000100)='./file2\x00', 0x0, 0x0)

27.418262293s ago: executing program 1 (id=2406):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x2000a, 0xd, 0x2}}, 0x30)
memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
unshare(0x22020600)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$FIBMAP(r0, 0x5393, &(0x7f0000000100)=0x3)

24.239785011s ago: executing program 1 (id=2421):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x8840, 0xa2)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x10, 0x16, &(0x7f00000001c0)=ANY=[@ANYBLOB], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000400000008000000010000", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000068fc4ce000057de5e7df36e4c6662f07b873b"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000004, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0), 0x8, 0x6c, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={0xffffffffffffffff, 0xe0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setns(0xc9, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r3, 0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r4, &(0x7f0000000c80)={0x10, 0x0, 0x0, 0x400000}, 0xc)
socket$netlink(0x10, 0x3, 0x4)
ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000d80)={0x6, 0x0, [{0x4, 0x0, 0x0, 0x6, 0x9e}, {0x0, 0x1, 0x0, 0x0, 0x9f86}, {0x1, 0xffffffff, 0xd, 0x29, 0x1, 0x80000001, 0x8}, {0x2, 0xfffffffe, 0x7, 0x8, 0x3, 0x110, 0x3}, {0x80000008, 0x2, 0x5, 0xfffffffb, 0x5, 0x7, 0x1}, {0x1, 0x67b7, 0x6, 0x62d9, 0x9, 0x3, 0x7f}]})

23.616895747s ago: executing program 34 (id=2421):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x8840, 0xa2)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x10, 0x16, &(0x7f00000001c0)=ANY=[@ANYBLOB], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000400000008000000010000", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000068fc4ce000057de5e7df36e4c6662f07b873b"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000004, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0), 0x8, 0x6c, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={0xffffffffffffffff, 0xe0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setns(0xc9, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r3, 0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r4, &(0x7f0000000c80)={0x10, 0x0, 0x0, 0x400000}, 0xc)
socket$netlink(0x10, 0x3, 0x4)
ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000d80)={0x6, 0x0, [{0x4, 0x0, 0x0, 0x6, 0x9e}, {0x0, 0x1, 0x0, 0x0, 0x9f86}, {0x1, 0xffffffff, 0xd, 0x29, 0x1, 0x80000001, 0x8}, {0x2, 0xfffffffe, 0x7, 0x8, 0x3, 0x110, 0x3}, {0x80000008, 0x2, 0x5, 0xfffffffb, 0x5, 0x7, 0x1}, {0x1, 0x67b7, 0x6, 0x62d9, 0x9, 0x3, 0x7f}]})

14.781048855s ago: executing program 6 (id=2463):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040}, 0x80)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4)
connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x800000e}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
r2 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840)
ioctl$SG_IO(r2, 0x2285, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
io_setup(0x1ff, &(0x7f00000003c0)=<r3=>0x0)
r4 = openat$sysfs(0xffffff9c, &(0x7f0000000140)='/sys/power/resume', 0x42, 0x17a)
io_submit(r3, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0xfffffc98}])
ioctl$MON_IOCX_GETX(r4, 0x4018920a, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/97, 0x61})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="000002aa00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg(r5, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4)
sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
unshare(0x28000600)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r7)
sendmsg$NL80211_CMD_VENDOR(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="70020000", @ANYRES16=r8, @ANYBLOB="0f0700000000000000006700000048000e00", @ANYBLOB='-'], 0x270}, 0x1, 0x0, 0x0, 0x44810}, 0x800)
syz_open_procfs(0x0, &(0x7f00000001c0)='net/mcfilter6\x00')

7.251026761s ago: executing program 6 (id=2476):
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x42, 0x1ff)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracefs\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./tracefs\x00', &(0x7f0000000180)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./tracefs/uprobe_events\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='p:p1 ./file0:0', 0xe)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracefs/events/uprobes/p1/enable\x00', 0x1, 0x0)
write(r1, &(0x7f0000000280)='1', 0x1)

6.624291976s ago: executing program 6 (id=2477):
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
close(r0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000006140)='./mnt/events/cdns3/cdns3_ep0_queue/inject\x00', 0x1, 0x0)
write(r4, &(0x7f00000061c0)='dir', 0x3)
syz_usb_ep_write(0xffffffffffffffff, 0x3, 0x4, &(0x7f0000000080)="69b5113d")
ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="030000000018"})
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x2, 0x0, 0x1, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r7, 0xffffffffffffffff, 0x0)

5.511839153s ago: executing program 6 (id=2481):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x101880a, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x5522, &(0x7f0000000b40)="$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")
syz_mount_image$vfat(&(0x7f000004abc0), &(0x7f000004ac00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x81d011, 0x0, 0x11, 0x0, &(0x7f000004ad00))
chdir(&(0x7f000004ad40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
syz_mount_image$vfat(&(0x7f000004ae40), &(0x7f000004ae80)='./bus\x00', 0x0, 0x0, 0xff, 0x0, &(0x7f000004aec0))
rename(&(0x7f000004af00)='./bus\x00', &(0x7f000004af40)='./file0\x00')
syz_mount_image$msdos(&(0x7f00000003c0), &(0x7f0000000640)='.\x02\x00', 0x4000, &(0x7f0000006080)=ANY=[@ANYBLOB="646973636172642c646f74732c646f74732c6e6f646f74732c636865636b3d7374726963742c646f74732c0080fcdc5c3dd34a5bee25f099008bade73ed878442a18112f260a6de8f9de23ca03128aff6e012a1d950f746fd8a192b6e048d4bcb62d5ee3a79d7ff9522014e3c0881f4cdda0cd5c0458cae665", @ANYRESHEX, @ANYBLOB="480739ec7f920fa6747a8d8b349973cf30a48915269c162dc20ae93cf8fbfa28624f375bdec0b1a8ea75b79c5d3d4d8ed5ac8a1508fb15b3ac020fccfcbbabba643c13fc7eac589762cbeb037eb9a48ae4fd4672bf3d1185e4693115a4b61ffece04ed4a690feb7ce885c8cec3623bb08fe74fd339982f378771670bc977462814b8835519212d0c4f23e8276671e88a5ac111f89af06d91333e6fe2cdf1e466adbd"], 0x1, 0x120c, &(0x7f000000a940)="$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")
syz_open_procfs(0x0, 0x0)

4.538758018s ago: executing program 0 (id=2488):
mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x181)
mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000640)='./bus\x00', &(0x7f0000000680), 0x8, &(0x7f00000006c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f0000000700)='./bus\x00')
openat(0xffffffffffffff9c, &(0x7f0000008680)='./file1\x00', 0x281c2, 0x10)
r0 = openat(0xffffffffffffff9c, &(0x7f00000086c0)='./file1\x00', 0x2040, 0x28)
fcntl$setlease(r0, 0x400, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000008700)='./file1\x00', 0x0)

4.118620198s ago: executing program 0 (id=2492):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x11c559de8a1ca209, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c230007)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x140, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c230005)
close(r1)

3.188052202s ago: executing program 5 (id=2495):
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x10000000})
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f)
r2 = dup2(r0, r0)
read$FUSE(r2, &(0x7f00000063c0)={0x2020}, 0x2020)

3.116526803s ago: executing program 0 (id=2496):
syz_mount_image$btrfs(&(0x7f0000000140), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000300)={[{@discard}, {@fatal_errors_bug}, {@discard}]}, 0xf4, 0x559e, &(0x7f000000ac40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000001480)='.\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000014c0)='./bus\x00', 0x42, 0x58)
renameat2(0xffffffffffffff9c, &(0x7f0000001500)='./bus\x00', r1, &(0x7f0000001540)='./file0\x00', 0x2)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048001}, 0x40)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c)

2.864396619s ago: executing program 5 (id=2497):
r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x1000000, &(0x7f0000000100)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYRES64=r0], 0x1, 0x3a2, &(0x7f0000000140)="$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")
openat(0xffffffffffffffff, 0x0, 0x800, 0x20)
unshare(0x2040400)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0)
open(0x0, 0x8000, 0x70)
unlink(&(0x7f0000000ec0)='./file1\x00')
ioctl$FAT_IOCTL_SET_ATTRIBUTES(r1, 0x40047211, &(0x7f0000000500)=0x1)

2.82885057s ago: executing program 3 (id=2498):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001800dd8d000000000000000002000004fe00000600"], 0x1c}}, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @private}})

2.568471487s ago: executing program 5 (id=2499):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0, 0xffffff7f}], 0x1, 0x42, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)

2.534110847s ago: executing program 3 (id=2500):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040}, 0x80)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4)
connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x800000e}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
r2 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840)
ioctl$SG_IO(r2, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffe, 0x0, 0x1, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0})
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
io_setup(0x1ff, &(0x7f00000003c0)=<r3=>0x0)
r4 = openat$sysfs(0xffffff9c, &(0x7f0000000140)='/sys/power/resume', 0x42, 0x17a)
io_submit(r3, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0xfffffc98}])
ioctl$MON_IOCX_GETX(r4, 0x4018920a, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=""/97, 0x61})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="000002aa00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg(r5, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4)
sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
unshare(0x28000600)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r7)
sendmsg$NL80211_CMD_VENDOR(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="70020000", @ANYRES16=r8, @ANYBLOB="0f0700000000000000006700000048000e00", @ANYBLOB='-'], 0x270}, 0x1, 0x0, 0x0, 0x44810}, 0x800)
syz_open_procfs(0x0, &(0x7f00000001c0)='net/mcfilter6\x00')

2.314312353s ago: executing program 5 (id=2501):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket(0x2b, 0x1, 0x1)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0x5)
accept4$unix(r1, &(0x7f00000010c0), 0x0, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)

2.254196264s ago: executing program 6 (id=2502):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'syzkaller0\x00', 0x2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000740)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x3ae7, 0x3}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8810)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000880)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0x1, 0xb}, {0xffff, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40408a4}, 0x4890)

2.186409516s ago: executing program 3 (id=2503):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000500)="3e40f4f04483ab3928000050c744240083b9d168c744240200000000c7442406000000000f011c24c4817571e50a66420f3a09830000c0fef566baf80cb8da60d38cef66bafc0c66b8900666efc744240071000000c7442402f4000000ff2c24b9b50a00000f3248b8ca000000000000000f23d80f21f835400000e00f23f866450f2f13", 0x84}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1.989526191s ago: executing program 3 (id=2504):
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r1 = syz_usb_connect(0x0, 0x47, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000006140)='./mnt/events/cdns3/cdns3_ep0_queue/inject\x00', 0x1, 0x0)
write(r5, &(0x7f00000061c0)='dir', 0x3)
syz_usb_ep_write(r1, 0x3, 0x4, &(0x7f0000000080)="69b5113d")
ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="030000000018"})
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x2, 0x0, 0x1, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r8, 0xffffffffffffffff, 0x0)

1.22041451s ago: executing program 5 (id=2505):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)={0x0, 0xc, 0x4, "ca258375"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000980)={0x44, &(0x7f00000006c0)={0x40, 0xd, 0x4, "8a55cd17"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000005c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="205aba"], 0x0, 0x0})

973.986466ms ago: executing program 3 (id=2506):
r0 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r1 = userfaultfd(0x1)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x2})
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000bfd000/0x400000)=nil, &(0x7f0000bd1000/0x2000)=nil, 0x400000, 0x2})
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
close_range(r0, 0xffffffffffffffff, 0x0)

783.195971ms ago: executing program 0 (id=2507):
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x10000000})
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f)
r2 = dup2(r0, r0)
read$FUSE(r2, &(0x7f00000063c0)={0x2020}, 0x2020)

526.092207ms ago: executing program 5 (id=2508):
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x0, <r0=>0x0}, 0x6)
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=r0, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={r1, 0x20, &(0x7f0000000280)={&(0x7f0000000080)=""/238, 0xffffffffffffff80, 0x0, 0x0}}, 0x1e)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x10, &(0x7f0000000340)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}]}, &(0x7f0000000380)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f00000003c0)=@assoc_value={<r4=>0x0}, &(0x7f0000000400)=0x8)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000440)={r4}, &(0x7f0000000480)=0x8)

444.320909ms ago: executing program 0 (id=2509):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000c80), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000cc0)={0x1, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000d00)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x2000000068ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000dc0)={{0xd000, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x8, 0x6, 0x40}, {0xffffffff, 0x10000, 0xa, 0x3, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0xe6ee2000, 0x3000, 0xc, 0x0, 0x8, 0xc4, 0x0, 0x0, 0x48, 0x3, 0x0, 0xfc}, {0xeeef0000, 0xeee96000, 0xa, 0x0, 0x1, 0xa6, 0x9, 0x0, 0x8, 0xfe, 0x7, 0x4}, {0xf000, 0xffff1000, 0xe, 0x0, 0x0, 0x4, 0x0, 0xfd, 0x0, 0x3c}, {0x8000000, 0x0, 0xb, 0x78, 0x5, 0x83, 0x0, 0x0, 0x3, 0xff, 0x1}, {0x0, 0xeeee0000, 0xa, 0x4, 0x0, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x8}, {0x81a0002, 0x6000, 0xf, 0x0, 0x0, 0x5, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x41000, 0x8cc}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x0, 0x114, 0xd, 0x0, 0x0, [0x80000005, 0x8, 0x1]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

403.74725ms ago: executing program 3 (id=2510):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00', <r2=>0x0})
connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10)
sendmsg$can_bcm(r1, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000022c0)=ANY=[@ANYBLOB="01000000670f00"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}, 0x1, 0x0, 0x0, 0xc080}, 0x11)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', <r4=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r4, {0xb, 0xfff2}, {0xe, 0xffff}, {0xb, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000040)

30.189009ms ago: executing program 0 (id=2511):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x101880a, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x5522, &(0x7f0000000b40)="$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")
syz_mount_image$vfat(&(0x7f000004abc0), &(0x7f000004ac00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x81d011, 0x0, 0x11, 0x0, &(0x7f000004ad00))
chdir(&(0x7f000004ad40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
syz_mount_image$vfat(&(0x7f000004ae40), &(0x7f000004ae80)='./bus\x00', 0x0, 0x0, 0xff, 0x0, &(0x7f000004aec0))
rename(&(0x7f000004af00)='./bus\x00', &(0x7f000004af40)='./file0\x00')
syz_mount_image$msdos(&(0x7f00000003c0), &(0x7f0000000640)='.\x02\x00', 0x4000, &(0x7f0000006080)=ANY=[@ANYBLOB="646973636172642c646f74732c646f74732c6e6f646f74732c636865636b3d7374726963742c646f74732c0080fcdc5c3dd34a5bee25f099008bade73ed878442a18112f260a6de8f9de23ca03128aff6e012a1d950f746fd8a192b6e048d4bcb62d5ee3a79d7ff9522014e3c0881f4cdda0cd5c0458cae665", @ANYRESHEX, @ANYBLOB="480739ec7f920fa6747a8d8b349973cf30a48915269c162dc20ae93cf8fbfa28624f375bdec0b1a8ea75b79c5d3d4d8ed5ac8a1508fb15b3ac020fccfcbbabba643c13fc7eac589762cbeb037eb9a48ae4fd4672bf3d1185e4693115a4b61ffece04ed4a690feb7ce885c8cec3623bb08fe74fd339982f378771670bc977462814b8835519212d0c4f23e8276671e88a5ac111f89af06d91333e6fe2cdf1e466adbd"], 0x1, 0x120c, &(0x7f000000a940)="$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")
syz_open_procfs(0x0, 0x0)

0s ago: executing program 6 (id=2512):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/class/vtconsole/vtcon1/bind\x00', 0x1, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
write$FUSE_INTERRUPT(r0, &(0x7f0000000380)={0x10, 0xffffffffffffffda}, 0x10)
write(r0, &(0x7f00000003c0)='1', 0x1)

kernel console output (not intermixed with test programs):

: inode #2: block 8: comm syz.1.940: lblock 0 mapped to illegal pblock 8 (length 1)
[  556.983746][ T8860] lo speed is unknown, defaulting to 1000
[  556.995119][ T8884] EXT4-fs (loop1): Remounting filesystem read-only
[  557.007507][ T8884] EXT4-fs warning (device loop1): dx_probe:823: inode #2: lblock 0: comm syz.1.940: error -117 reading directory block
[  557.161232][ T8884] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -117
[  557.319449][ T8884] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #2: block 8: comm syz.1.940: lblock 0 mapped to illegal pblock 8 (length 1)
[  557.650116][ T8884] EXT4-fs (loop1): Remounting filesystem read-only
[  557.704844][ T8884] EXT4-fs warning (device loop1): dx_probe:823: inode #2: lblock 0: comm syz.1.940: error -117 reading directory block
[  557.764660][ T8729] 8021q: adding VLAN 0 to HW filter on device bond0
[  557.790634][ T8884] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117
[  557.851602][ T8884] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  557.955776][ T8893] loop0: detected capacity change from 0 to 128
[  557.974624][ T8884] No such timeout policy "syz1"
[  558.620754][ T8893] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  558.652140][ T4569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  558.679333][ T4569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  558.900383][ T8886] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 255: padding at end of block bitmap is not set
[  558.970520][ T8729] 8021q: adding VLAN 0 to HW filter on device team0
[  558.983899][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  558.998554][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  559.007376][ T8886] EXT4-fs (loop1): Remounting filesystem read-only
[  559.055162][   T47] bridge0: port 1(bridge_slave_0) entered blocking state
[  559.064209][   T47] bridge0: port 1(bridge_slave_0) entered forwarding state
[  559.337728][ T8901] Unable to allocate crypto cipher with name [ecb(aes)]; rc = [-2]
[  559.345789][ T8901] Error attempting to initialize key TFM cipher with name = [aes]; rc = [-2]
[  559.354697][ T8901] Error attempting to initialize cipher with name = [aes] and key size = [16]; rc = [-2]
[  559.364685][ T8901] Error parsing options; rc = [-22]
[  559.565411][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  559.697235][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  559.716949][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  559.767347][   T47] bridge0: port 2(bridge_slave_1) entered blocking state
[  559.774632][   T47] bridge0: port 2(bridge_slave_1) entered forwarding state
[  559.918356][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  559.927806][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  559.995708][ T4271] EXT4-fs (loop1): unmounting filesystem.
[  561.860259][    C0] net_ratelimit: 26 callbacks suppressed
[  561.948372][ T5347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  561.950623][ T5347] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  561.996485][ T5347] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  561.997331][ T5347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  561.998009][ T5347] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  561.998570][ T5347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  561.999018][ T5347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  561.999567][ T5347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  562.000013][ T5347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  562.093143][ T8729] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  562.831211][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  562.837871][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  564.804710][ T8947] overlayfs: failed to clone upperpath
[  565.240038][ T5182] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  565.251101][ T5182] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  565.969487][ T8950] netlink: 34 bytes leftover after parsing attributes in process `syz.5.955'.
[  566.145405][ T8729] 8021q: adding VLAN 0 to HW filter on device batadv0
[  567.060332][    C1] net_ratelimit: 30 callbacks suppressed
[  567.689195][ T8971] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  570.310084][ T8992] overlayfs: failed to clone upperpath
[  570.490576][ T4351] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  570.701263][ T4351] usb 2-1: Using ep0 maxpacket: 32
[  570.730663][ T4351] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  570.900355][ T4351] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  570.912598][ T4351] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  570.935023][ T4351] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  571.004952][ T4351] usb 2-1: Product: syz
[  571.009183][ T4351] usb 2-1: Manufacturer: syz
[  571.048075][ T4351] usb 2-1: SerialNumber: syz
[  571.143727][ T9000] loop0: detected capacity change from 0 to 512
[  571.354276][ T4351] usb 2-1: config 0 descriptor??
[  571.382462][ T9000] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -13
[  571.391968][ T9000] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.966: inode #15: comm syz.0.966: iget: illegal inode #
[  571.406442][ T9000] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.966: couldn't read orphan inode 15 (err -117)
[  571.420222][ T9000] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  572.180235][    C0] net_ratelimit: 44 callbacks suppressed
[  572.262650][ T9008] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4279] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[9008]
[  572.468055][ T6267] usb 2-1: USB disconnect, device number 7
[  572.939946][ T5175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  572.984737][ T5175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  573.018435][ T9014] loop1: detected capacity change from 0 to 1024
[  573.748928][ T9020] hfsplus: unknown catalog record type 0
[  573.756191][ T9020] hfsplus: unknown catalog record type 0
[  574.147162][ T9020] hfsplus: xattr search failed
[  574.154039][ T5434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  574.175138][ T5434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  574.208107][ T8729] device veth0_vlan entered promiscuous mode
[  574.221402][ T5434] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  574.238703][ T5434] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  574.412530][ T4272] EXT4-fs (loop0): unmounting filesystem.
[  574.445795][ T8729] device veth1_vlan entered promiscuous mode
[  574.556086][ T9027] overlayfs: failed to clone upperpath
[  574.741313][ T4470] hfsplus: unknown catalog record type 0
[  574.873233][ T4470] hfsplus: unknown catalog record type 0
[  574.939508][ T8729] device veth0_macvtap entered promiscuous mode
[  575.114228][ T8729] device veth1_macvtap entered promiscuous mode
[  575.134968][ T8729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  575.145916][ T8729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  575.155803][ T8729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  575.166510][ T8729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  575.221193][ T8729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  575.297891][ T8729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  575.367252][ T8729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  575.405116][ T8729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  575.426272][ T8729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  575.439570][ T8729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  576.038319][ T9039] overlayfs: failed to clone upperpath
[  576.288290][ T8729] batman_adv: batadv0: Interface activated: batadv_slave_0
[  576.388029][ T9044] zram0: detected capacity change from 0 to 65536
[  576.644556][ T5434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  576.653766][ T5434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  576.663308][ T5434] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  576.674693][ T5434] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  576.684393][ T5434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  576.693856][ T5434] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  576.762507][ T8729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  576.815979][ T8729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  576.836427][ T8729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  576.857144][ T8729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  576.870980][ T8729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  576.882092][ T8729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  576.920860][ T8729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  576.966649][ T8729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  577.039356][ T8729] batman_adv: batadv0: Interface activated: batadv_slave_1
[  577.050378][ T8729] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  577.059197][ T8729] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  577.068402][ T8729] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  577.077371][ T8729] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  577.116415][ T5434] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  577.660122][   T47] net_ratelimit: 47 callbacks suppressed
[  578.060807][ T5434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  578.471311][ T9064] netlink: 20 bytes leftover after parsing attributes in process `syz.5.981'.
[  579.352565][ T9055] mac80211_hwsim hwsim6 »»»»»»: renamed from wlan0
[  581.192654][ T4470] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  581.206080][ T4470] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  581.302725][ T5434] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  581.438938][ T5175] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  581.489252][ T5175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  581.665506][ T5434] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  582.299167][ T9090] loop6: detected capacity change from 0 to 256
[  582.350369][ T9090] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d)
[  582.443683][ T9094] futex_wake_op: syz.1.989 tries to shift op by 144; fix this program
[  582.487155][ T9094] loop1: detected capacity change from 0 to 256
[  582.527881][ T9094] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  582.629197][   T26] kauditd_printk_skb: 116 callbacks suppressed
[  582.629235][   T26] audit: type=1800 audit(1792631861.300:350): pid=9094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.989" name="file1" dev="loop1" ino=1048685 res=0 errno=0
[  583.070225][    C1] net_ratelimit: 66 callbacks suppressed
[  584.001595][ T9108] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.990' sets config #0
[  584.016984][ T9108] loop1: detected capacity change from 0 to 256
[  585.097545][ T9108] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  586.320960][   T26] audit: type=1326 audit(1792631864.940:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9114 comm="syz.5.993" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f925979f559 code=0x7ffc0000
[  586.799254][   T26] audit: type=1326 audit(1792631864.940:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9114 comm="syz.5.993" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f925979f559 code=0x7ffc0000
[  586.901028][   T26] audit: type=1326 audit(1792631864.940:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9114 comm="syz.5.993" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f925979f559 code=0x7ffc0000
[  586.934714][ T9127] loop1: detected capacity change from 0 to 256
[  587.033312][   T26] audit: type=1326 audit(1792631864.940:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9114 comm="syz.5.993" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f925979f559 code=0x7ffc0000
[  587.210661][   T26] audit: type=1326 audit(1792631864.940:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9114 comm="syz.5.993" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f925979f559 code=0x7ffc0000
[  587.499466][   T26] audit: type=1326 audit(1792631864.940:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9114 comm="syz.5.993" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f925979f559 code=0x7ffc0000
[  587.550229][   T26] audit: type=1326 audit(1792631864.940:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9114 comm="syz.5.993" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f925979f559 code=0x7ffc0000
[  588.848211][    C0] net_ratelimit: 79 callbacks suppressed
[  588.920235][   T26] audit: type=1326 audit(1792631864.940:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9114 comm="syz.5.993" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f925979f559 code=0x7ffc0000
[  589.090312][   T26] audit: type=1326 audit(1792631864.940:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9114 comm="syz.5.993" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f925979f559 code=0x7ffc0000
[  589.253721][   T26] audit: type=1326 audit(1792631864.940:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9114 comm="syz.5.993" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f925979f559 code=0x7ffc0000
[  590.020390][   T26] audit: type=1326 audit(1792631864.940:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9114 comm="syz.5.993" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f925979f559 code=0x7ffc0000
[  590.077097][   T26] audit: type=1326 audit(1792631864.940:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9114 comm="syz.5.993" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f925979f559 code=0x7ffc0000
[  590.110324][   T26] audit: type=1326 audit(1792631864.940:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9114 comm="syz.5.993" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f925979f559 code=0x7ffc0000
[  590.180444][   T26] audit: type=1326 audit(1792631864.940:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9114 comm="syz.5.993" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7f925979f559 code=0x7ffc0000
[  590.261371][   T26] audit: type=1326 audit(1792631864.940:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9114 comm="syz.5.993" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f925979f559 code=0x7ffc0000
[  590.320229][   T26] audit: type=1326 audit(1792631864.940:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9114 comm="syz.5.993" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f925979f559 code=0x7ffc0000
[  590.400282][   T26] audit: type=1326 audit(1792631864.940:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9114 comm="syz.5.993" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f925979f559 code=0x7ffc0000
[  592.559622][ T9172] loop1: detected capacity change from 0 to 512
[  594.200780][ T5347] net_ratelimit: 41 callbacks suppressed
[  595.728579][ T9197] 9pnet_fd: Insufficient options for proto=fd
[  596.831564][ T8451] Bluetooth: Wrong link type (-71)
[  597.381034][ T9207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  599.300261][    C1] net_ratelimit: 68 callbacks suppressed
[  604.367582][    C0] net_ratelimit: 33 callbacks suppressed
[  606.638594][ T9269] typec_fusb302 0-0002: I2C/SMBus block functionality not supported!
[  606.652166][ T9269] i2c i2c-0: new_device: Instantiated device typec_fusb302 at 0x02
[  606.821382][ T8451] Bluetooth: Wrong link type (-71)
[  608.500786][ T9280] netlink: 'syz.3.1024': attribute type 2 has an invalid length.
[  608.508949][ T9280] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1024'.
[  608.518636][ T4278] Bluetooth: hci5: command 0x0405 tx timeout
[  609.540454][    C1] net_ratelimit: 70 callbacks suppressed
[  609.726167][ T9295] Malformed UNC in devname
[  609.726167][ T9295] 
[  609.733101][ T9295] CIFS: VFS: Malformed UNC in devname
[  610.016149][ T9300] loop6: detected capacity change from 0 to 256
[  610.026750][ T9300] exfat: Deprecated parameter 'namecase'
[  610.032646][ T9300] exfat: Deprecated parameter 'namecase'
[  610.064764][ T9300] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  610.750455][ T9304] netlink: 'syz.3.1041': attribute type 12 has an invalid length.
[  611.355427][ T9312] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.1042' sets config #0
[  611.405473][ T9312] loop0: detected capacity change from 0 to 256
[  612.016095][ T9312] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  612.828786][ T9325] exFAT-fs (nbd6): mounting with "discard" option, but the device does not support discard
[  612.841845][ T9325] syz.6.1044: attempt to access beyond end of device
[  612.841845][ T9325] nbd6: rw=0, sector=0, nr_sectors = 1 limit=0
[  612.854785][ T9325] exFAT-fs (nbd6): unable to read boot sector
[  612.861042][ T9325] exFAT-fs (nbd6): failed to read boot sector
[  612.867168][ T9325] exFAT-fs (nbd6): failed to recognize exfat type
[  614.660210][    C0] net_ratelimit: 319 callbacks suppressed
[  615.028518][ T9348] loop6: detected capacity change from 0 to 512
[  615.224748][ T9350] netlink: 'syz.0.1053': attribute type 2 has an invalid length.
[  615.232631][ T9350] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1053'.
[  616.224692][ T9352] loop1: detected capacity change from 0 to 4096
[  616.232181][ T9348] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -13
[  616.241363][ T9348] EXT4-fs error (device loop6): ext4_orphan_get:1409: comm syz.6.1050: inode #15: comm syz.6.1050: iget: illegal inode #
[  616.255431][ T9352] EXT4-fs: inline encryption not supported
[  616.263152][ T9348] EXT4-fs error (device loop6): ext4_orphan_get:1414: comm syz.6.1050: couldn't read orphan inode 15 (err -117)
[  616.279145][ T9352] EXT4-fs (loop1): Test dummy encryption mode enabled
[  616.279151][ T9348] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  617.206253][ T9352] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  617.463824][ T8729] EXT4-fs (loop6): unmounting filesystem.
[  619.401184][ T9382] sctp: [Deprecated]: syz.6.1058 (pid 9382) Use of int in max_burst socket option.
[  619.401184][ T9382] Use struct sctp_assoc_value instead
[  619.780202][    C0] net_ratelimit: 35 callbacks suppressed
[  620.698017][ T4271] EXT4-fs (loop1): unmounting filesystem.
[  621.617062][ T9412] zram: Can't change algorithm for initialized device
[  622.484746][ T9419] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  622.484746][ T9419] 
[  622.499238][ T9419] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  622.513028][ T9419] CIFS: Attempting to mount \\172.20.20.170\share
[  623.469024][ T9419] CIFS: VFS: Error connecting to socket. Aborting operation.
[  623.477298][ T9419] CIFS: VFS: cifs_mount failed w/return code = -4
[  624.363428][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  624.369994][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  624.583042][ T9444] tmpfs: Unknown parameter 'quota'
[  624.870345][    C1] net_ratelimit: 120 callbacks suppressed
[  626.159758][ T9456] loop6: detected capacity change from 0 to 4096
[  626.178958][ T9466] overlayfs: failed to clone upperpath
[  626.194812][ T9456] EXT4-fs: inline encryption not supported
[  626.420312][ T9467] exFAT-fs (nbd1): mounting with "discard" option, but the device does not support discard
[  626.433327][ T9467] syz.1.1080: attempt to access beyond end of device
[  626.433327][ T9467] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0
[  626.446235][ T9467] exFAT-fs (nbd1): unable to read boot sector
[  626.452569][ T9467] exFAT-fs (nbd1): failed to read boot sector
[  626.458726][ T9467] exFAT-fs (nbd1): failed to recognize exfat type
[  626.510289][ T9456] EXT4-fs (loop6): Test dummy encryption mode enabled
[  626.708897][ T9456] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  628.454364][ T8451] Bluetooth: Wrong link type (-22)
[  629.940429][ T5427] net_ratelimit: 41 callbacks suppressed
[  630.579478][ T9482] overlayfs: failed to resolve './bus': -2
[  631.552370][ T9498] loop1: detected capacity change from 0 to 1764
[  631.575505][ T4682] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  631.832951][ T4682] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  632.731942][ T8729] EXT4-fs (loop6): unmounting filesystem.
[  632.863507][ T4682] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  632.874151][ T4682] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  632.888324][ T9512] loop0: detected capacity change from 0 to 512
[  632.905454][ T9512] EXT4-fs: Ignoring removed nomblk_io_submit option
[  632.958216][ T9512] ext4: Unknown parameter 'fsname'
[  633.012655][ T4682] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  633.023758][ T4682] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  634.434199][ T4682] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  634.460255][ T4682] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  635.114903][   T47] net_ratelimit: 97 callbacks suppressed
[  636.897418][ T9550] loop1: detected capacity change from 0 to 2048
[  636.939980][ T9550] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  638.399038][ T9554] loop0: detected capacity change from 0 to 4096
[  639.201058][ T9554] EXT4-fs: inline encryption not supported
[  639.262924][ T9554] EXT4-fs (loop0): Test dummy encryption mode enabled
[  639.359273][ T9554] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  640.154608][ T9575] overlayfs: failed to resolve './bus': -2
[  640.180560][ T4732] net_ratelimit: 38 callbacks suppressed
[  640.246830][ T9581] loop1: detected capacity change from 0 to 1024
[  640.255931][ T4682] tipc: Left network mode
[  641.531757][ T4272] EXT4-fs (loop0): unmounting filesystem.
[  641.614456][ T9591] loop1: detected capacity change from 0 to 2048
[  642.340508][ T9604] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  642.340508][ T9604] 
[  642.354640][ T9604] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  642.369106][ T9604] CIFS: Attempting to mount \\127.0.0.1\share
[  642.383131][ T9604] CIFS: VFS: Error connecting to socket. Aborting operation.
[  642.396989][ T9604] CIFS: VFS: cifs_mount failed w/return code = -101
[  644.544550][ T9629] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  645.300213][    C1] net_ratelimit: 44 callbacks suppressed
[  648.656917][ T9656] loop1: detected capacity change from 0 to 8
[  650.504093][    C0] net_ratelimit: 35 callbacks suppressed
[  651.247010][ T9680] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  651.247010][ T9680] 
[  651.261020][ T9680] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  651.274083][ T9680] CIFS: Attempting to mount \\172.20.20.170\share
[  652.157597][ T9680] CIFS: VFS: cifs_mount failed w/return code = -112
[  654.854594][ T9687] netlink: 'syz.0.1111': attribute type 12 has an invalid length.
[  655.540174][    C0] net_ratelimit: 36 callbacks suppressed
[  656.578506][ T9722] tmpfs: Unknown parameter 'quota'
[  656.687525][ T9723] loop0: detected capacity change from 0 to 128
[  658.399849][ T4682] device hsr_slave_0 left promiscuous mode
[  658.448757][ T4682] device hsr_slave_1 left promiscuous mode
[  658.484286][ T9741] loop1: detected capacity change from 0 to 1024
[  658.630734][ T9741] EXT4-fs: Ignoring removed orlov option
[  658.678017][ T4682] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  658.718117][ T9741] ext4: Unknown parameter 'noacl'
[  658.953059][ T4682] batman_adv: batadv0: Removing interface: batadv_slave_0
[  659.250468][ T4682] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  659.258359][ T4682] batman_adv: batadv0: Removing interface: batadv_slave_1
[  659.266453][ T4682] device bridge_slave_1 left promiscuous mode
[  659.272942][ T4682] bridge0: port 2(bridge_slave_1) entered disabled state
[  659.281876][ T4682] device bridge_slave_0 left promiscuous mode
[  659.288296][ T4682] bridge0: port 1(bridge_slave_0) entered disabled state
[  659.945642][ T9756] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1133'.
[  660.604465][ T9761] ipt_REJECT: TCP_RESET invalid for non-tcp
[  660.605256][ T4682] device veth1_macvtap left promiscuous mode
[  660.640780][ T4682] device veth0_macvtap left promiscuous mode
[  660.646937][ T4682] device veth1_vlan left promiscuous mode
[  660.653060][ T4682] device veth0_vlan left promiscuous mode
[  660.667241][ T4682] net_ratelimit: 170 callbacks suppressed
[  662.485192][ T9781] ptrace attach of ""[9783] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[9781]
[  663.163031][ T9789] overlayfs: unrecognized mount option "workdir=" or missing value
[  664.456950][ T9797] loop1: detected capacity change from 0 to 1024
[  665.666311][ T4682] team0 (unregistering): Port device team_slave_1 removed
[  665.780189][    C1] net_ratelimit: 70 callbacks suppressed
[  665.804456][ T4682] team0 (unregistering): Port device team_slave_0 removed
[  665.884907][ T4682] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  665.987396][ T4682] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  666.419077][ T9809] vivid-002: disconnect
[  666.871371][ T9804] vivid-002: reconnect
[  667.140054][ T4682] bond0 (unregistering): Released all slaves
[  667.371269][ T9765] netlink: 'syz.6.1137': attribute type 12 has an invalid length.
[  669.633831][ T9840] netlink: 'syz.3.1152': attribute type 33 has an invalid length.
[  670.565629][ T9843] netlink: 'syz.1.1153': attribute type 10 has an invalid length.
[  670.672612][ T9843] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  670.820159][    C0] net_ratelimit: 38 callbacks suppressed
[  671.272353][ T9871] autofs4:pid:9871:autofs_fill_super: called with bogus options
[  671.951660][ T9874] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1158'.
[  672.395810][ T9878] ptrace attach of ""[9880] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[9878]
[  675.940177][    C0] net_ratelimit: 26 callbacks suppressed
[  676.135210][ T9920] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[  676.403417][ T9929] kernel profiling enabled (shift: 6)
[  676.471035][ T9930] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  677.860296][ T4347] usb 7-1: new full-speed USB device number 2 using dummy_hcd
[  678.053363][ T4347] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  678.077795][ T4347] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  678.115928][ T4347] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  678.144805][ T4347] usb 7-1: config 0 interface 0 has no altsetting 0
[  678.159577][ T4347] usb 7-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[  678.179121][ T4347] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  678.213691][ T4347] usb 7-1: config 0 descriptor??
[  679.647641][ T9952] zram0: detected capacity change from 65536 to 0
[  679.836247][ T4347] usbhid 7-1:0.0: can't add hid device: -71
[  679.862467][ T4347] usbhid: probe of 7-1:0.0 failed with error -71
[  679.923220][ T4347] usb 7-1: USB disconnect, device number 2
[  681.153743][    C0] net_ratelimit: 34 callbacks suppressed
[  685.636871][T10040] mac80211_hwsim hwsim8 »»»»»»: renamed from wlan0
[  685.703917][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  685.710296][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  686.340149][    C1] net_ratelimit: 64 callbacks suppressed
[  687.863695][T10064] netlink: 'syz.5.1193': attribute type 12 has an invalid length.
[  689.448163][T10087] overlayfs: failed to clone upperpath
[  691.540154][    C0] net_ratelimit: 41 callbacks suppressed
[  691.729929][ T4347] smpboot: CPU 1 is now offline
[  692.385304][T10111] FAULT_INJECTION: forcing a failure.
[  692.385304][T10111] name failslab, interval 1, probability 0, space 0, times 0
[  692.398721][T10111] CPU: 0 PID: 10111 Comm: syz.5.1197 Not tainted syzkaller #0
[  692.406175][T10111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  692.416217][T10111] Call Trace:
[  692.419546][T10111]  <TASK>
[  692.422507][T10111]  dump_stack_lvl+0x188/0x24e
[  692.427240][T10111]  ? show_regs_print_info+0x12/0x12
[  692.432439][T10111]  ? load_image+0x410/0x410
[  692.436946][T10111]  ? __lock_acquire+0x7ea0/0x7ea0
[  692.442012][T10111]  should_fail_ex+0x390/0x4c0
[  692.446739][T10111]  should_failslab+0x5/0x20
[  692.451254][T10111]  slab_pre_alloc_hook+0x59/0x300
[  692.456273][T10111]  ? lockdep_softirqs_off+0x430/0x430
[  692.461634][T10111]  ? nexthop_net_init+0x71/0x100
[  692.466562][T10111]  __kmem_cache_alloc_node+0x4f/0x270
[  692.471922][T10111]  ? nexthop_net_init+0x71/0x100
[  692.476846][T10111]  kmalloc_trace+0x26/0xe0
[  692.481243][T10111]  nexthop_net_init+0x71/0x100
[  692.485994][T10111]  ops_init+0x360/0x5e0
[  692.490162][T10111]  setup_net+0x4f2/0xbd0
[  692.494445][T10111]  ? copy_net_ns+0x5b0/0x5b0
[  692.499033][T10111]  ? copy_net_ns+0x324/0x5b0
[  692.503611][T10111]  ? down_read_killable+0x1cc/0x340
[  692.508870][T10111]  copy_net_ns+0x33e/0x5b0
[  692.513276][T10111]  create_new_namespaces+0x3ce/0x700
[  692.518616][T10111]  unshare_nsproxy_namespaces+0x116/0x160
[  692.524319][T10111]  ksys_unshare+0x4f6/0x8e0
[  692.528808][T10111]  ? sighand_ctor+0x40/0x40
[  692.533292][T10111]  ? lock_chain_count+0x20/0x20
[  692.538161][T10111]  ? syscall_enter_from_user_mode+0x21/0x80
[  692.544100][T10111]  __x64_sys_unshare+0x34/0x40
[  692.548854][T10111]  do_syscall_64+0x4c/0xa0
[  692.553260][T10111]  ? clear_bhb_loop+0x60/0xb0
[  692.557922][T10111]  ? clear_bhb_loop+0x60/0xb0
[  692.562587][T10111]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  692.568473][T10111] RIP: 0033:0x7f925979f559
[  692.572874][T10111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  692.592536][T10111] RSP: 002b:00007f925a59c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  692.600994][T10111] RAX: ffffffffffffffda RBX: 00007f9259a26180 RCX: 00007f925979f559
[  692.608950][T10111] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000004c000680
[  692.616905][T10111] RBP: 00007f9259836b20 R08: 0000000000000000 R09: 0000000000000000
[  692.624859][T10111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  692.632812][T10111] R13: 00007f9259a26218 R14: 00007f9259a26180 R15: 00007fff77a54eb8
[  692.640781][T10111]  </TASK>
[  696.580128][    C0] net_ratelimit: 31 callbacks suppressed
[  698.678496][T10131] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  698.678496][T10131] 
[  698.692500][T10131] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  698.705086][T10131] CIFS: Attempting to mount \\127.0.0.1\share
[  698.918146][T10131] CIFS: VFS: cifs_mount failed w/return code = -112
[  702.459558][    C0] net_ratelimit: 41 callbacks suppressed
[  706.017046][T10203] JFS: discard option not supported on device
[  706.025437][T10203] syz.6.1211: attempt to access beyond end of device
[  706.025437][T10203] nbd6: rw=0, sector=64, nr_sectors = 8 limit=0
[  706.038404][T10203] syz.6.1211: attempt to access beyond end of device
[  706.038404][T10203] nbd6: rw=0, sector=120, nr_sectors = 8 limit=0
[  706.051483][T10203] Mount JFS Failure: -5
[  706.055667][T10203] jfs_mount failed w/return code = -5
[  706.838743][T10196] mac80211_hwsim hwsim3 »»»»»»: renamed from wlan0
[  707.393719][T10224] netlink: 'syz.1.1217': attribute type 10 has an invalid length.
[  707.459831][T10224] batman_adv: batadv0: Interface deactivated: dummy0
[  707.547395][T10224] batman_adv: batadv0: Removing interface: dummy0
[  707.798987][T10224] team0: Port device dummy0 added
[  707.842137][T10234] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2
[  707.851099][T10234] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0
[  707.860154][    C0] net_ratelimit: 46 callbacks suppressed
[  713.380136][    C0] net_ratelimit: 44 callbacks suppressed
[  713.418408][T10276] mac80211_hwsim hwsim12 »»»»»»: renamed from wlan0
[  714.299249][T10289] loop1: detected capacity change from 0 to 512
[  714.368298][T10289] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  715.561503][T10289] EXT4-fs (loop1): 1 truncate cleaned up
[  715.606845][T10289] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  715.790286][ T4347] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  715.819383][T10310] loop6: detected capacity change from 0 to 1024
[  715.977289][T10310] EXT4-fs (loop6): filesystem is read-only
[  716.031604][ T4347] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  716.152470][ T4347] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  716.268639][ T4347] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  717.999087][ T4347] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[  718.103994][ T4347] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  718.152711][T10324] mac80211_hwsim hwsim14 »»»»»»: renamed from wlan0
[  718.500151][    C0] net_ratelimit: 26 callbacks suppressed
[  719.712442][ T4347] usb 1-1: can't set config #1, error -71
[  719.774520][ T4347] usb 1-1: USB disconnect, device number 6
[  720.044304][ T4271] EXT4-fs (loop1): unmounting filesystem.
[  720.391059][T10354] overlayfs: failed to clone upperpath
[  721.845772][T10351] loop6: detected capacity change from 0 to 2048
[  722.378355][T10351] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  723.620098][    C0] net_ratelimit: 18 callbacks suppressed
[  723.939557][ T8729] EXT4-fs (loop6): unmounting filesystem.
[  725.878305][T10384] loop1: detected capacity change from 0 to 128
[  725.885099][    T7] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  725.967940][T10384] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  726.034223][T10384] ext4 filesystem being mounted at /257/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  726.090678][    T7] usb 1-1: Using ep0 maxpacket: 16
[  726.122690][    T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  726.346882][    T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  727.481847][    T7] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40
[  727.691900][    T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  728.044617][    T7] usb 1-1: config 0 descriptor??
[  728.251157][    T7] usb 1-1: can't set config #0, error -71
[  728.285290][    T7] usb 1-1: USB disconnect, device number 7
[  728.357484][T10401] netlink: 'syz.6.1255': attribute type 4 has an invalid length.
[  728.497231][ T4271] EXT4-fs (loop1): unmounting filesystem.
[  728.719579][    C0] net_ratelimit: 117 callbacks suppressed
[  729.582747][T10429] binder_alloc: 10428: binder_alloc_buf, no vma
[  732.528580][T10441] Malformed UNC in devname
[  732.528580][T10441] 
[  732.719682][T10441] CIFS: VFS: Malformed UNC in devname
[  733.160663][T10435] ima: policy update failed
[  733.193755][   T26] kauditd_printk_skb: 6 callbacks suppressed
[  733.193762][   T26] audit: type=1802 audit(1792632011.883:374): pid=10435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.1265" res=0 errno=0
[  733.340435][T10459] netlink: 'syz.0.1273': attribute type 10 has an invalid length.
[  734.020087][    C0] net_ratelimit: 402 callbacks suppressed
[  737.404838][T10502] loop6: detected capacity change from 0 to 2048
[  737.520289][   T14] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  737.548737][T10507] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  737.770230][   T14] usb 2-1: Using ep0 maxpacket: 16
[  737.788591][   T14] usb 2-1: too many configurations: 55, using maximum allowed: 8
[  737.846901][   T14] usb 2-1: config 6 has 0 interfaces, different from the descriptor's value: 1
[  737.928753][   T14] usb 2-1: config 6 has 0 interfaces, different from the descriptor's value: 1
[  738.076981][T10518] overlayfs: failed to clone upperpath
[  738.791784][   T14] usb 2-1: config 6 has 0 interfaces, different from the descriptor's value: 1
[  738.900168][    T7] usb 7-1: new low-speed USB device number 3 using dummy_hcd
[  739.567963][ T4569] net_ratelimit: 38 callbacks suppressed
[  739.802927][   T14] usb 2-1: config 6 has 0 interfaces, different from the descriptor's value: 1
[  739.856597][   T14] usb 2-1: config 6 has 0 interfaces, different from the descriptor's value: 1
[  739.927885][   T14] usb 2-1: config 6 has 0 interfaces, different from the descriptor's value: 1
[  739.958072][    T7] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 8, setting to 0
[  740.017850][   T14] usb 2-1: config 6 has 0 interfaces, different from the descriptor's value: 1
[  740.044356][    T7] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 0
[  740.207428][   T14] usb 2-1: config 6 has 0 interfaces, different from the descriptor's value: 1
[  740.424660][    T7] usb 7-1: string descriptor 0 read error: -22
[  740.458884][   T14] usb 2-1: string descriptor 0 read error: -71
[  740.467495][    T7] usb 7-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40
[  740.514798][   T14] usb 2-1: New USB device found, idVendor=2304, idProduct=a1a0, bcdDevice=7f.58
[  740.537837][    T7] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  740.565908][   T14] usb 2-1: New USB device strings: Mfr=220, Product=245, SerialNumber=158
[  741.738831][T10542] loop1: detected capacity change from 0 to 512
[  741.775043][   T14] usb 2-1: rejected 8 configurations due to insufficient available bus power
[  741.793363][    T7] usb 7-1: can't set config #1, error -71
[  741.890715][    T7] usb 7-1: USB disconnect, device number 3
[  741.904159][T10542] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  741.944380][   T14] usb 2-1: no configuration chosen from 8 choices
[  742.037985][   T14] usb 2-1: USB disconnect, device number 8
[  742.178308][ T4271] EXT4-fs (loop1): unmounting filesystem.
[  742.310029][    C0] Adjusting tsc more than 11% (6672517 vs 8464021)
[  742.366852][T10561] binder_alloc: 10560: binder_alloc_buf, no vma
[  743.830888][T10574] loop6: detected capacity change from 0 to 512
[  744.461152][T10574] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors
[  744.581788][T10574] EXT4-fs (loop6): group descriptors corrupted!
[  744.846985][    C0] net_ratelimit: 31 callbacks suppressed
[  745.075052][   T14] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  745.293726][   T14] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  745.330796][   T14] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  745.409718][   T14] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  745.496161][   T14] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  745.531870][T10609] binder: BINDER_SET_CONTEXT_MGR already set
[  745.552356][   T14] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  745.699723][T10609] binder: 10607:10609 ioctl 4018620d 200000004a80 returned -16
[  745.907388][   T14] usb 2-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00
[  745.963057][   T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  746.018979][T10587] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  746.065440][   T14] pegasus 2-1:1.0: Missing or invalid endpoints
[  746.219437][T10626] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615)
[  746.251652][T10626] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647
[  746.345221][    T7] usb 2-1: USB disconnect, device number 9
[  746.480258][   T14] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  746.839142][   T14] usb 7-1: unable to get BOS descriptor or descriptor too short
[  747.101407][   T14] usb 7-1: config 1 has an invalid interface number: 5 but max is 2
[  747.175383][   T14] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  747.234103][   T14] usb 7-1: config 1 has no interface number 2
[  747.265309][T10650] binder: BINDER_SET_CONTEXT_MGR already set
[  747.274811][   T14] usb 7-1: config 1 interface 5 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  747.309236][T10650] binder: 10649:10650 ioctl 4018620d 200000004a80 returned -16
[  747.352109][   T14] usb 7-1: config 1 interface 5 has no altsetting 0
[  747.394581][   T14] usb 7-1: New USB device found, idVendor=1235, idProduct=8210, bcdDevice= 0.40
[  747.461348][   T14] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  747.498494][   T14] usb 7-1: Product: syz
[  747.524350][   T14] usb 7-1: Manufacturer: syz
[  747.548473][   T14] usb 7-1: SerialNumber: syz
[  747.555369][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  747.563261][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  747.840043][   T14] usb 7-1: unit 2 not found!
[  747.884213][   T14] usb 7-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8210); report any issues to g@b4.vu
[  748.050591][   T14] usb 7-1: Error initialising Scarlett Gen 3 Mixer Driver: -22
[  748.355227][T10674] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  748.403130][   T14] snd-usb-audio: probe of 7-1:1.0 failed with error -22
[  748.490220][   T14] usb 7-1: USB disconnect, device number 4
[  748.550025][T10551] udevd[10551]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  748.951720][T10691] binder_alloc: 10688: binder_alloc_buf, no vma
[  748.960842][T10692] comedi comedi0: No hardware detected at I/O base 0x300
[  749.219935][   T14] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  749.455356][   T14] usb 1-1: Using ep0 maxpacket: 32
[  749.514705][   T14] usb 1-1: unable to get BOS descriptor or descriptor too short
[  749.556617][   T14] usb 1-1: config 1 interface 0 has no altsetting 0
[  749.624808][   T14] usb 1-1: New USB device found, idVendor=05ac, idProduct=0253, bcdDevice= 0.40
[  749.703712][   T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  749.776841][   T14] usb 1-1: Product: syz
[  749.781029][   T14] usb 1-1: Manufacturer: syz
[  749.857582][   T14] usb 1-1: SerialNumber: syz
[  749.962972][T10722] binder: BINDER_SET_CONTEXT_MGR already set
[  750.016284][T10722] binder: 10719:10722 ioctl 4018620d 200000004a80 returned -16
[  750.097812][ T4682] net_ratelimit: 118 callbacks suppressed
[  750.136376][   T14] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input13
[  750.300424][ T3622] bcm5974 1-1:1.0: could not read from device
[  750.536846][   T14] usb 1-1: USB disconnect, device number 8
[  750.884056][T10746] overlayfs: failed to clone upperpath
[  750.915113][T10548] udevd[10548]: Error opening device "/dev/input/event4": No such file or directory
[  750.988890][T10548] udevd[10548]: Unable to EVIOCGABS device "/dev/input/event4"
[  751.114653][T10548] udevd[10548]: Unable to EVIOCGABS device "/dev/input/event4"
[  751.196259][T10548] udevd[10548]: Unable to EVIOCGABS device "/dev/input/event4"
[  751.260513][T10548] udevd[10548]: Unable to EVIOCGABS device "/dev/input/event4"
[  751.671920][T10770] loop6: detected capacity change from 0 to 512
[  751.707125][T10772] binder_alloc: 10771: binder_alloc_buf, no vma
[  751.768813][T10770] EXT4-fs error (device loop6): ext4_orphan_get:1435: comm syz.6.1364: bad orphan inode 11862016
[  751.841351][T10770] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  751.872707][ T9066] usb 2-1: new full-speed USB device number 10 using dummy_hcd
[  751.931396][T10770] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  752.096249][ T9066] usb 2-1: config 29 has an invalid interface number: 91 but max is 0
[  752.158421][ T9066] usb 2-1: config 29 has no interface number 0
[  752.187413][ T9066] usb 2-1: config 29 interface 91 has no altsetting 0
[  752.244906][ T9066] usb 2-1: New USB device found, idVendor=50ff, idProduct=2657, bcdDevice=56.04
[  752.280672][ T8729] EXT4-fs (loop6): unmounting filesystem.
[  752.329575][ T9066] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  752.387221][ T9066] usb 2-1: Product: syz
[  752.411826][ T9066] usb 2-1: Manufacturer: syz
[  752.442279][ T9066] usb 2-1: SerialNumber: syz
[  752.753611][ T9066] cdc_eem: probe of 2-1:29.91 failed with error -22
[  752.885676][ T9066] usb 2-1: USB disconnect, device number 10
[  755.345376][    C0] net_ratelimit: 46 callbacks suppressed
[  755.457740][T10818] netlink: 'syz.6.1379': attribute type 1 has an invalid length.
[  755.566993][T10818] netlink: 'syz.6.1379': attribute type 2 has an invalid length.
[  755.645348][T10818] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1379'.
[  756.157245][T10840] binder: 10839:10840 ioctl c0306201 200000000680 returned -14
[  757.375908][T10863] netlink: 'syz.3.1392': attribute type 3 has an invalid length.
[  758.858929][T10874] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1395'.
[  760.534975][ T4682] net_ratelimit: 221 callbacks suppressed
[  764.599802][T10945] loop6: detected capacity change from 0 to 64
[  765.597921][    C0] net_ratelimit: 27 callbacks suppressed
[  766.560612][T10993] overlayfs: failed to clone upperpath
[  766.712166][T10989] loop1: detected capacity change from 0 to 4096
[  766.854051][T10989] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512)
[  768.384393][T11028] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1437'.
[  768.441569][T11028] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1437'.
[  768.543263][T11032] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1442'.
[  768.646773][T11034] loop6: detected capacity change from 0 to 2048
[  768.736683][T11034] UDF-fs: error (device loop6): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  768.855975][T11034] UDF-fs: error (device loop6): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  769.005457][T11034] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found
[  769.069418][T11034] UDF-fs: Scanning with blocksize 512 failed
[  769.146825][T11034] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  770.718104][    C0] net_ratelimit: 64 callbacks suppressed
[  772.427043][T11126] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  772.515573][T11126] bond0: (slave team0): Releasing backup interface
[  772.612620][T11126] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  772.672526][T11126] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  772.724017][T11126] device bridge_slave_0 left promiscuous mode
[  772.774430][T11126] bridge0: port 1(bridge_slave_0) entered disabled state
[  772.844713][T11126] device bridge_slave_1 left promiscuous mode
[  772.979687][T11126] bridge0: port 2(bridge_slave_1) entered disabled state
[  773.240562][T11126] bond0: (slave bond_slave_0): Releasing backup interface
[  773.306161][T11126] bond0: (slave bond_slave_1): Releasing backup interface
[  773.473603][T11126] team0: Port device team_slave_0 removed
[  773.544624][T11126] team0: Port device team_slave_1 removed
[  773.571344][T11126] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  773.595664][T11126] batman_adv: batadv0: Removing interface: batadv_slave_0
[  773.616304][T11126] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  773.636020][T11126] batman_adv: batadv0: Removing interface: batadv_slave_1
[  775.732072][    C0] net_ratelimit: 407 callbacks suppressed
[  780.748012][    C0] net_ratelimit: 184 callbacks suppressed
[  785.970094][ T4682] net_ratelimit: 248 callbacks suppressed
[  786.154764][T11323] xt_l2tp: v2 sid > 0xffff: 1114112
[  786.254436][T11326] loop1: detected capacity change from 0 to 64
[  786.490299][T11333] ip_tables: iptables: counters copy to user failed while replacing table
[  790.977153][    C0] net_ratelimit: 121 callbacks suppressed
[  791.064619][T11384] bridge_slave_0: default FDB implementation only supports local addresses
[  791.474908][T11395] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  791.565928][T11395] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  791.659660][T11395] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  791.998253][ T4349] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  792.156250][T11397] infiniband syz0: set active
[  792.191949][T11397] infiniband syz0: added bridge_slave_0
[  792.219679][ T4349] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  792.290183][ T4349] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00
[  792.383234][ T4349] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  792.396481][T11397] RDS/IB: syz0: added
[  792.426761][T11397] smc: adding ib device syz0 with port count 1
[  792.459431][ T4349] usb 2-1: Product: syz
[  792.484122][T11397] smc:    ib device syz0 port 1 has pnetid 
[  792.501883][ T4349] usb 2-1: Manufacturer: syz
[  792.570931][ T4349] usb 2-1: selecting invalid altsetting 1
[  792.634495][ T4349] dvb_ttusb_budget: ttusb_init_controller: error
[  792.686133][ T4349] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  793.064271][ T4349] DVB: Unable to find symbol cx22700_attach()
[  793.364355][ T4349] DVB: Unable to find symbol tda10046_attach()
[  793.402592][ T4349] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  793.482605][ T4349] usb 2-1: USB disconnect, device number 11
[  796.156801][    C0] net_ratelimit: 325 callbacks suppressed
[  796.915790][ T4260] lg-g15 0003:046D:0A07.0003: hidraw0: USB HID v0.06 Device [syz0] on syz0
[  797.063584][ T4260] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.0003/input/input14
[  797.768750][T11478] loop1: detected capacity change from 0 to 32768
[  798.245292][T11517] netlink: 'syz.6.1597': attribute type 4 has an invalid length.
[  798.371802][T11517] netlink: 17 bytes leftover after parsing attributes in process `syz.6.1597'.
[  801.436598][    C0] net_ratelimit: 35 callbacks suppressed
[  803.404927][T11587] block device autoloading is deprecated and will be removed.
[  804.166506][ T4349] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  804.376686][ T4349] usb 7-1: Using ep0 maxpacket: 8
[  804.396204][ T4349] usb 7-1: config 0 interface 0 altsetting 111 has 1 endpoint descriptor, different from the interface descriptor's value: 13
[  806.103101][ T4349] usb 7-1: config 0 interface 0 has no altsetting 0
[  806.148803][ T4349] usb 7-1: New USB device found, idVendor=056a, idProduct=ffff, bcdDevice= 0.00
[  806.232318][ T4349] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  806.342722][ T4349] usb 7-1: config 0 descriptor??
[  806.576342][   T11] net_ratelimit: 44 callbacks suppressed
[  806.812919][ T4349] wacom 0003:056A:FFFF.0004: unknown main item tag 0x0
[  806.877276][ T4349] wacom 0003:056A:FFFF.0004: unknown main item tag 0x0
[  806.889989][T11649] loop1: detected capacity change from 0 to 128
[  806.932427][ T4349] wacom 0003:056A:FFFF.0004: unknown main item tag 0x0
[  806.968323][T11649] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  807.006308][ T4349] wacom 0003:056A:FFFF.0004: unknown main item tag 0x0
[  807.065856][ T4349] wacom 0003:056A:FFFF.0004: unknown main item tag 0x0
[  807.080793][T11649] hpfs: filesystem error: improperly stopped
[  807.104421][ T4349] wacom 0003:056A:FFFF.0004: unknown main item tag 0x0
[  807.114742][T11649] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  807.141088][T11649] hpfs: You really don't want any checks? You are crazy...
[  807.421757][ T4349] wacom 0003:056A:FFFF.0004: unknown main item tag 0x0
[  807.449231][T11649] hpfs: Code page index out of array
[  807.457331][ T4349] wacom 0003:056A:FFFF.0004: Unknown device_type for 'HID 056a:ffff'. Ignoring.
[  807.488059][T11649] hpfs: code page support is disabled
[  807.510474][T11649] hpfs: hpfs_map_4sectors(): unaligned read
[  807.535645][ T4349] usb 7-1: USB disconnect, device number 5
[  807.555190][T11649] hpfs: hpfs_map_4sectors(): unaligned read
[  807.565883][T11660] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  807.610455][T11649] hpfs: filesystem error: unable to find root dir
[  807.714823][T11649] hpfs: hpfs_map_4sectors(): unaligned read
[  809.118871][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  809.125248][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  810.468768][T11703] loop1: detected capacity change from 0 to 512
[  810.551630][T11703] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  810.698593][T11703] EXT4-fs (loop1): 1 truncate cleaned up
[  810.753381][T11703] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  811.002678][ T4271] EXT4-fs (loop1): unmounting filesystem.
[  811.074165][T11716] tipc: Enabled bearer <eth:team0>, priority 0
[  811.183841][T11719] block device autoloading is deprecated and will be removed.
[  811.676266][ T4465] net_ratelimit: 400 callbacks suppressed
[  814.412309][T11785] loop1: detected capacity change from 0 to 256
[  816.875663][    C0] net_ratelimit: 405 callbacks suppressed
[  818.746583][T11849] loop6: detected capacity change from 0 to 1024
[  819.101650][T11858] device vlan2 entered promiscuous mode
[  819.151985][T11858] device bond0 entered promiscuous mode
[  819.207999][T11858] device bond_slave_0 entered promiscuous mode
[  819.252750][T11858] device bond_slave_1 entered promiscuous mode
[  820.169175][T11877] loop6: detected capacity change from 0 to 256
[  820.303212][T11877] FAT-fs (loop6): Directory bread(block 64) failed
[  820.342981][T11877] FAT-fs (loop6): Directory bread(block 65) failed
[  820.401805][T11877] FAT-fs (loop6): Directory bread(block 66) failed
[  820.451741][T11877] FAT-fs (loop6): Directory bread(block 67) failed
[  820.489177][T11877] FAT-fs (loop6): Directory bread(block 68) failed
[  820.526583][T11877] FAT-fs (loop6): Directory bread(block 69) failed
[  820.550691][T11877] FAT-fs (loop6): Directory bread(block 70) failed
[  820.854739][T11877] FAT-fs (loop6): Directory bread(block 71) failed
[  820.892390][T11877] FAT-fs (loop6): Directory bread(block 72) failed
[  820.917638][T11877] FAT-fs (loop6): Directory bread(block 73) failed
[  821.889716][    C0] net_ratelimit: 187 callbacks suppressed
[  824.735000][T11953] loop1: detected capacity change from 0 to 128
[  824.904051][T11953] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  825.056127][T11953] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  825.079623][T11961] loop6: detected capacity change from 0 to 512
[  825.199671][T11961] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  825.261920][T11961] ext4 filesystem being mounted at /142/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  825.571560][ T8729] EXT4-fs (loop6): unmounting filesystem.
[  826.955552][    C0] net_ratelimit: 67 callbacks suppressed
[  828.976979][T11986] loop1: detected capacity change from 0 to 32768
[  832.081155][    C0] net_ratelimit: 45 callbacks suppressed
[  833.804510][T12097] usb usb7: usbfs: process 12097 (syz.0.1793) did not claim interface 0 before use
[  834.121137][T12061] loop6: detected capacity change from 0 to 32768
[  834.201558][T12061] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.1780 (12061)
[  834.374740][   T14] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  834.704859][   T14] usb 1-1: Using ep0 maxpacket: 32
[  834.732481][   T14] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  834.802687][   T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  834.919761][   T14] usb 1-1: config 0 descriptor??
[  835.083779][   T14] as10x_usb: device has been detected
[  835.187108][   T14] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  835.303644][   T14] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  835.636691][   T14] as10x_usb: error during firmware upload part1
[  835.690144][   T14] Registered device nBox DVB-T Dongle
[  835.749182][   T14] usb 1-1: USB disconnect, device number 9
[  835.834350][   T14] Unregistered device nBox DVB-T Dongle
[  835.867979][   T14] as10x_usb: device has been disconnected
[  837.274496][    C0] net_ratelimit: 74 callbacks suppressed
[  838.541936][T12165] loop1: detected capacity change from 0 to 128
[  838.601211][T12165] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  838.637471][T12165] ext4 filesystem being mounted at /356/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  838.690140][T12165] EXT4-fs (loop1): shut down requested (2)
[  838.703498][T12165] EXT4-fs (loop1): re-mounted. Quota mode: none.
[  838.826443][ T4271] EXT4-fs (loop1): unmounting filesystem.
[  842.794171][    C0] net_ratelimit: 65 callbacks suppressed
[  845.730400][T12264] overlayfs: failed to clone upperpath
[  845.804155][ T4349] usb 1-1: new full-speed USB device number 10 using dummy_hcd
[  845.911905][T12266] loop1: detected capacity change from 0 to 4096
[  845.951255][T12266] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512)
[  846.007131][ T4349] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x3 has invalid wMaxPacketSize 0
[  846.052450][ T4349] usb 1-1: config 0 interface 0 has no altsetting 0
[  846.108653][ T4349] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  846.131303][T12266] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  846.181554][ T4349] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  846.309850][ T4349] usb 1-1: Product: syz
[  846.352280][ T4349] usb 1-1: Manufacturer: syz
[  846.388854][ T4349] usb 1-1: SerialNumber: syz
[  846.437017][ T4349] usb 1-1: config 0 descriptor??
[  846.490289][ T4271] ntfs3: loop1: ntfs_sync_fs r=1a failed, -22.
[  846.500691][ T4349] usb 1-1: selecting invalid altsetting 0
[  846.532403][ T4271] ntfs3: loop1: ntfs_evict_inode r=1a failed, -22.
[  846.808561][ T4349] usb 1-1: USB disconnect, device number 10
[  847.913931][    C0] net_ratelimit: 51 callbacks suppressed
[  853.274122][T10006] net_ratelimit: 34 callbacks suppressed
[  858.313366][    C0] net_ratelimit: 39 callbacks suppressed
[  863.588003][   T11] net_ratelimit: 42 callbacks suppressed
[  864.393384][   T14] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  864.439824][T12467] fuse: Bad value for 'fd'
[  864.465430][T12467] overlayfs: failed to clone lowerpath
[  864.593172][   T14] usb 2-1: Using ep0 maxpacket: 8
[  864.611567][   T14] usb 2-1: config index 0 descriptor too short (expected 74, got 45)
[  864.676434][   T14] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  864.752656][   T14] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  864.816757][   T14] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[  864.886746][   T14] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  864.943731][   T14] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  865.022275][   T14] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  865.082345][   T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  865.096453][T12463] loop6: detected capacity change from 0 to 32768
[  865.328593][   T14] usb 2-1: GET_CAPABILITIES returned 0
[  865.359267][   T14] usbtmc 2-1:16.0: can't read capabilities
[  865.408761][T12490] cougar: G6 mapped to F18
[  865.608194][   T14] usb 2-1: USB disconnect, device number 12
[  867.974051][T12513] FAULT_INJECTION: forcing a failure.
[  867.974051][T12513] name failslab, interval 1, probability 0, space 0, times 0
[  868.086081][T12513] CPU: 0 PID: 12513 Comm: syz.1.1921 Not tainted syzkaller #0
[  868.093582][T12513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  868.103635][T12513] Call Trace:
[  868.106905][T12513]  <TASK>
[  868.109847][T12513]  dump_stack_lvl+0x188/0x24e
[  868.114517][T12513]  ? show_regs_print_info+0x12/0x12
[  868.119701][T12513]  ? load_image+0x410/0x410
[  868.124189][T12513]  ? __might_sleep+0xd0/0xd0
[  868.128832][T12513]  ? __lock_acquire+0x7ea0/0x7ea0
[  868.133849][T12513]  should_fail_ex+0x390/0x4c0
[  868.138522][T12513]  should_failslab+0x5/0x20
[  868.143027][T12513]  slab_pre_alloc_hook+0x59/0x300
[  868.148038][T12513]  ? file_end_write+0x156/0x250
[  868.152955][T12513]  kmem_cache_alloc+0x56/0x2f0
[  868.157702][T12513]  ? getname_flags+0xb7/0x500
[  868.162408][T12513]  getname_flags+0xb7/0x500
[  868.166898][T12513]  __se_sys_quotactl+0x1dd/0x6f0
[  868.171870][T12513]  ? __x64_sys_quotactl+0xa0/0xa0
[  868.176881][T12513]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  868.182849][T12513]  ? lock_chain_count+0x20/0x20
[  868.187692][T12513]  ? lockdep_hardirqs_on+0x94/0x140
[  868.192885][T12513]  do_syscall_64+0x4c/0xa0
[  868.197292][T12513]  ? clear_bhb_loop+0x60/0xb0
[  868.201951][T12513]  ? clear_bhb_loop+0x60/0xb0
[  868.206617][T12513]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  868.212493][T12513] RIP: 0033:0x7f455b19f559
[  868.216892][T12513] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  868.236488][T12513] RSP: 002b:00007f455c14b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3
[  868.244883][T12513] RAX: ffffffffffffffda RBX: 00007f455b425fa0 RCX: 00007f455b19f559
[  868.252840][T12513] RDX: 000000000000ee01 RSI: 0000200000000040 RDI: ffffffff80000902
[  868.260798][T12513] RBP: 00007f455b236b20 R08: 0000000000000000 R09: 0000000000000000
[  868.268754][T12513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  868.276707][T12513] R13: 00007f455b426038 R14: 00007f455b425fa0 R15: 00007ffefc389ba8
[  868.284670][T12513]  </TASK>
[  868.632940][ T4732] net_ratelimit: 45 callbacks suppressed
[  870.554432][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  870.560804][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  871.078027][T12546] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1931'.
[  871.379134][T12559] netlink: 'syz.3.1936': attribute type 29 has an invalid length.
[  871.451270][T12559] netlink: 'syz.3.1936': attribute type 29 has an invalid length.
[  871.510172][T12563] netlink: 'syz.3.1936': attribute type 29 has an invalid length.
[  871.553604][T12559] netlink: 'syz.3.1936': attribute type 29 has an invalid length.
[  871.599698][T12564] netlink: 'syz.3.1936': attribute type 29 has an invalid length.
[  872.190717][   T26] audit: type=1326 audit(1792632150.340:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12579 comm="syz.1.1941" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f455b19f559 code=0x7ffc0000
[  872.398503][   T26] audit: type=1326 audit(1792632150.370:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12579 comm="syz.1.1941" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f455b19f559 code=0x7ffc0000
[  872.755285][   T26] audit: type=1326 audit(1792632150.370:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12579 comm="syz.1.1941" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f455b19f559 code=0x7ffc0000
[  872.755312][   T26] audit: type=1326 audit(1792632150.370:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12579 comm="syz.1.1941" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f455b19f559 code=0x7ffc0000
[  872.755330][   T26] audit: type=1326 audit(1792632150.380:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12579 comm="syz.1.1941" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f455b19f559 code=0x7ffc0000
[  872.755349][   T26] audit: type=1326 audit(1792632150.380:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12579 comm="syz.1.1941" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f455b19f559 code=0x7ffc0000
[  872.755368][   T26] audit: type=1326 audit(1792632150.380:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12579 comm="syz.1.1941" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f455b19f559 code=0x7ffc0000
[  872.755388][   T26] audit: type=1326 audit(1792632150.380:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12579 comm="syz.1.1941" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f455b19f559 code=0x7ffc0000
[  872.755405][   T26] audit: type=1326 audit(1792632150.380:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12579 comm="syz.1.1941" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f455b19f559 code=0x7ffc0000
[  872.755425][   T26] audit: type=1326 audit(1792632150.380:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12579 comm="syz.1.1941" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f455b19f559 code=0x7ffc0000
[  874.392480][    C0] net_ratelimit: 49 callbacks suppressed
[  874.469586][T12628] rxe_eth0 speed is unknown, defaulting to 1000
[  874.519303][T12628] lo speed is unknown, defaulting to 1000
[  874.833490][T12628] netlink: 'syz.1.1957': attribute type 7 has an invalid length.
[  874.841288][T12628] netlink: 'syz.1.1957': attribute type 5 has an invalid length.
[  874.849224][T12628] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1957'.
[  879.512084][    C0] net_ratelimit: 47 callbacks suppressed
[  883.303366][ T4349] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  884.843445][ T4349] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  884.930777][ T4349] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  884.999604][ T4349] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  885.230393][   T11] net_ratelimit: 785 callbacks suppressed
[  885.281274][ T4349] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  885.366164][ T4349] usb 2-1: config 0 descriptor??
[  885.809062][ T4349] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0
[  887.398939][ T4349] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0
[  887.679959][ T4349] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.0005/input/input18
[  887.847066][ T4349] cm6533_jd 0003:0D8C:0022.0005: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0
[  887.926937][ T4349] usb 2-1: USB disconnect, device number 13
[  888.404469][T12807] fido_id[12807]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  890.391805][ T5164] net_ratelimit: 31 callbacks suppressed
[  890.906668][T12837] netlink: 9 bytes leftover after parsing attributes in process `syz.5.2024'.
[  890.961038][T12837] device gretap0 entered promiscuous mode
[  891.003726][T12840] block device autoloading is deprecated and will be removed.
[  891.043123][T12839] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2024'.
[  891.088187][T12839] 0ªî{X¹¦: renamed from gretap0
[  891.144956][T12839] device 
30ªî{X¹¦ left promiscuous mode
[  893.611789][T12857] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size
[  895.511304][    C0] net_ratelimit: 41 callbacks suppressed
[  895.950260][T12889] input: syz0 as /devices/virtual/input/input19
[  896.468044][T12906] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2045'.
[  896.527344][T12908] device veth1_to_bond entered promiscuous mode
[  896.560985][T12908] device veth1_to_bond left promiscuous mode
[  897.824522][T12936] netlink: 'syz.6.2055': attribute type 1 has an invalid length.
[  897.977922][T12936] 8021q: adding VLAN 0 to HW filter on device bond1
[  898.069333][T12938] bond1: (slave geneve2): making interface the new active one
[  898.130459][T12938] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  898.184605][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  900.116688][T12956] loop6: detected capacity change from 0 to 512
[  900.397577][T12956] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  900.476159][T12956] ext4 filesystem being mounted at /202/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  900.601148][T12956] EXT4-fs (loop6): shut down requested (0)
[  900.631790][    C0] net_ratelimit: 420 callbacks suppressed
[  900.660612][T12972] EXT4-fs (loop6): shut down requested (0)
[  902.648646][ T8729] EXT4-fs (loop6): unmounting filesystem.
[  903.140919][ T9066] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  903.354382][ T9066] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  903.418936][ T9066] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  903.499419][ T9066] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  903.558789][ T9066] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  903.645676][ T9066] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  903.688887][T13018] input: syz0 as /devices/virtual/input/input20
[  903.714149][ T9066] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  903.775558][ T9066] usb 2-1: Manufacturer: syz
[  903.804825][ T9066] usb 2-1: config 0 descriptor??
[  904.524589][ T9066] appleir 0003:05AC:8243.0006: unknown main item tag 0x0
[  905.866500][T10006] net_ratelimit: 42 callbacks suppressed
[  905.877020][ T9066] appleir 0003:05AC:8243.0006: No inputs registered, leaving
[  905.993263][ T9066] appleir 0003:05AC:8243.0006: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0
[  906.122108][ T9066] usb 2-1: USB disconnect, device number 14
[  906.471767][T13045] fido_id[13045]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  906.879286][T13060] overlayfs: missing 'lowerdir'
[  908.792382][T13101] overlayfs: missing 'lowerdir'
[  909.247362][T13107] rxe_eth0 speed is unknown, defaulting to 1000
[  909.867720][T13107] lo speed is unknown, defaulting to 1000
[  910.880576][   T11] net_ratelimit: 48 callbacks suppressed
[  911.250610][T13143] overlayfs: missing 'lowerdir'
[  911.538617][T13149] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  911.654987][T13149] bond1: (slave lo): Enslaving as an active interface with an up link
[  911.789719][ T4347] lo speed is unknown, defaulting to 1000
[  911.836890][ T4349] lo speed is unknown, defaulting to 1000
[  911.870819][ T4260] lo speed is unknown, defaulting to 1000
[  913.587613][T13197] overlayfs: missing 'lowerdir'
[  914.295537][T13211] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2138'.
[  916.010188][T13241] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  916.018973][T13241] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  916.053908][    C0] net_ratelimit: 47 callbacks suppressed
[  916.112056][T13244] device erspan0 left promiscuous mode
[  916.160452][T13244] bridge1: port 1(erspan0) entered disabled state
[  916.261513][T13244] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  916.381628][T13244] team0: Port device dummy0 removed
[  916.424542][T13244] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  916.486748][T13244] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  916.615458][T13244] device bridge_slave_0 left promiscuous mode
[  916.665179][T13244] bridge0: port 1(bridge_slave_0) entered disabled state
[  916.726916][T13244] bridge0: port 2(bridge_slave_1) entered disabled state
[  916.775079][T13244] bond0: (slave bond_slave_0): Releasing backup interface
[  916.834270][T13244] bond0: (slave bond_slave_1): Releasing backup interface
[  916.926936][T13244] team0: Port device team_slave_0 removed
[  916.993719][T13244] team0: Port device team_slave_1 removed
[  917.018021][T13244] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  917.057268][T13244] batman_adv: batadv0: Removing interface: batadv_slave_0
[  917.088003][T13244] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  917.135681][T13244] batman_adv: batadv0: Removing interface: batadv_slave_1
[  917.259645][T13248] team0: Port device xfrm0 added
[  918.203852][T13275] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  918.212690][T13275] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  918.225302][ T4349] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  918.440859][ T4349] usb 7-1: Using ep0 maxpacket: 16
[  918.463910][ T4349] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  918.525161][ T4349] usb 7-1: config 0 interface 0 has no altsetting 0
[  918.556218][ T4349] usb 7-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20
[  918.606239][ T4349] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  918.660143][ T4349] usb 7-1: Product: syz
[  918.684617][ T4349] usb 7-1: Manufacturer: syz
[  918.768363][ T4349] usb 7-1: SerialNumber: syz
[  918.816157][ T4349] usb 7-1: config 0 descriptor??
[  919.231930][T13295] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  919.240786][T13295] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  919.326921][ T4349] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input21
[  919.899954][ T4349] rc_core: IR keymap rc-imon-pad not found
[  919.929517][ T4349] Registered IR keymap rc-empty
[  919.974224][ T4349] imon 7-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[  920.067920][ T4349] imon 7-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  920.178272][ T4349] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0
[  920.255504][ T4349] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input22
[  920.349612][ T4349] imon 7-1:0.0: iMON device (15c2:0041, intf0) on usb<7:6> initialized
[  920.360115][    C0] imon 7-1:0.0: imon usb_rx_callback_intf0: status(-71)
[  920.453275][ T4349] usb 7-1: USB disconnect, device number 6
[  921.002412][T13324] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  921.011330][T13324] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  921.111125][   T11] net_ratelimit: 55 callbacks suppressed
[  922.005744][T13344] overlayfs: missing 'lowerdir'
[  922.556278][   T26] kauditd_printk_skb: 3 callbacks suppressed
[  922.556288][   T26] audit: type=1326 audit(1792632200.713:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13358 comm="syz.5.2191" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f925979f559 code=0x0
[  922.930973][T13365] overlayfs: missing 'lowerdir'
[  923.338961][T13369] overlayfs: missing 'lowerdir'
[  924.806492][T13397] overlayfs: missing 'lowerdir'
[  925.047950][ T4349] libceph: connect (1)127.0.0.1:6789 error -101
[  925.080556][ T4349] libceph: mon0 (1)127.0.0.1:6789 connect error
[  925.215234][ T9066] libceph: connect (1)127.0.0.1:6789 error -101
[  925.232701][ T9066] libceph: mon0 (1)127.0.0.1:6789 connect error
[  925.433158][T13411] overlayfs: missing 'lowerdir'
[  925.504461][ T4349] libceph: connect (1)127.0.0.1:6789 error -101
[  925.534035][ T4349] libceph: mon0 (1)127.0.0.1:6789 connect error
[  926.188481][T13423] overlayfs: missing 'lowerdir'
[  926.200389][ T9066] libceph: connect (1)127.0.0.1:6789 error -101
[  926.206754][ T9066] libceph: mon0 (1)127.0.0.1:6789 connect error
[  926.213388][    C0] net_ratelimit: 45 callbacks suppressed
[  926.229874][T13402] ceph: No mds server is up or the cluster is laggy
[  926.243378][   T26] audit: type=1326 audit(1792632204.403:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13419 comm="syz.6.2211" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e01d9f559 code=0x7ffc0000
[  927.225660][   T26] audit: type=1326 audit(1792632204.433:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13419 comm="syz.6.2211" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e01d9f559 code=0x7ffc0000
[  927.946882][   T26] audit: type=1326 audit(1792632204.433:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13419 comm="syz.6.2211" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e01d9f559 code=0x7ffc0000
[  928.496661][   T26] audit: type=1326 audit(1792632204.433:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13419 comm="syz.6.2211" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e01d9f559 code=0x7ffc0000
[  928.899714][T13447] overlayfs: missing 'lowerdir'
[  929.049404][   T26] audit: type=1326 audit(1792632204.433:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13419 comm="syz.6.2211" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f0e01d9f559 code=0x7ffc0000
[  929.326011][   T26] audit: type=1326 audit(1792632204.433:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13419 comm="syz.6.2211" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e01d9f559 code=0x7ffc0000
[  929.668933][   T26] audit: type=1326 audit(1792632204.433:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13419 comm="syz.6.2211" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e01d9f559 code=0x7ffc0000
[  929.872885][T13466] overlayfs: missing 'lowerdir'
[  929.913994][T13467] loop1: detected capacity change from 0 to 128
[  930.085531][   T26] audit: type=1326 audit(1792632204.433:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13419 comm="syz.6.2211" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f0e01d9f559 code=0x7ffc0000
[  930.334289][   T26] audit: type=1326 audit(1792632204.433:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13419 comm="syz.6.2211" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e01d9f559 code=0x7ffc0000
[  931.437078][ T5352] net_ratelimit: 53 callbacks suppressed
[  931.903231][   T26] audit: type=1326 audit(1792632204.433:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13419 comm="syz.6.2211" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e01d9f559 code=0x7ffc0000
[  931.991654][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  931.997990][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  932.027208][T13486] raw_sendmsg: syz.0.2230 forgot to set AF_INET. Fix it!
[  932.477515][   T26] audit: type=1326 audit(1792632204.433:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13419 comm="syz.6.2211" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f0e01d9f559 code=0x7ffc0000
[  932.906884][T13498] overlayfs: missing 'workdir'
[  933.018605][   T26] audit: type=1326 audit(1792632204.433:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13419 comm="syz.6.2211" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e01d9f559 code=0x7ffc0000
[  933.254784][   T26] audit: type=1326 audit(1792632204.433:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13419 comm="syz.6.2211" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e01d9f559 code=0x7ffc0000
[  933.317882][T13509] xt_hashlimit: size too large, truncated to 1048576
[  933.509720][ T4347] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  933.886118][T13515] overlayfs: missing 'lowerdir'
[  933.919250][ T4347] usb 2-1: Using ep0 maxpacket: 16
[  933.942777][ T4347] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  934.018439][ T4347] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0
[  934.097745][ T4347] usb 2-1: config 0 interface 0 has no altsetting 0
[  934.142878][ T4347] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  934.195016][ T4347] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  934.258744][ T4347] usb 2-1: config 0 descriptor??
[  934.633543][T13531] jffs2: notice: (13531) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  934.712746][ T4347] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0
[  934.746321][ T4347] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0
[  934.804684][ T4347] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0
[  934.853123][ T4347] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0
[  934.901978][ T4347] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0
[  934.982987][ T4347] mcp2221 0003:04D8:00DD.0007: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0
[  935.317149][T13543] overlayfs: missing 'workdir'
[  935.513972][ T4347] usb 2-1: USB disconnect, device number 15
[  935.989600][T13557] loop6: detected capacity change from 0 to 16
[  936.041460][T13557] erofs: (device loop6): mounted with root inode @ nid 36.
[  936.788836][    C0] net_ratelimit: 34 callbacks suppressed
[  937.919800][T13567] overlayfs: missing 'lowerdir'
[  938.144439][T13574] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2257'.
[  938.181936][T13574] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2257'.
[  941.020406][T13600] overlayfs: missing 'workdir'
[  941.214642][T13596] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  941.291829][T13596] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  941.345325][T13596] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  942.149159][ T4732] net_ratelimit: 432 callbacks suppressed
[  942.629812][T13626] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  942.638673][T13626] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  942.917554][T13631] loop1: detected capacity change from 0 to 2048
[  943.001156][T13631] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  943.123514][T13631] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  943.338653][T13631] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 17 with error 28
[  943.449212][T13631] EXT4-fs (loop1): This should not happen!! Data will be lost
[  943.449212][T13631] 
[  943.533122][T13631] EXT4-fs (loop1): Total free blocks count 0
[  943.598571][T13631] EXT4-fs (loop1): Free/Dirty block details
[  943.648005][T13631] EXT4-fs (loop1): free_blocks=2415919504
[  943.797450][T13631] EXT4-fs (loop1): dirty_blocks=32
[  944.025943][T13631] EXT4-fs (loop1): Block reservation details
[  944.078509][T13631] EXT4-fs (loop1): i_reserved_data_blocks=2
[  944.156331][T13637] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 2 with error 28
[  944.186837][T13657] file system registered
[  944.224711][T13657] unloading
[  944.641228][T13669] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2284'.
[  944.815768][T13669] netlink: 'syz.5.2284': attribute type 11 has an invalid length.
[  945.031021][T13676] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  945.039830][T13676] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  945.086912][T13669] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  945.095939][T13669] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  945.104642][T13669] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  945.113337][T13669] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  945.287621][T13669] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2284'.
[  945.341518][T13669] netlink: 'syz.5.2284': attribute type 11 has an invalid length.
[  947.268325][    C0] net_ratelimit: 39 callbacks suppressed
[  948.686998][T13727] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  948.695829][T13727] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  949.371612][T13739] FAULT_INJECTION: forcing a failure.
[  949.371612][T13739] name fail_futex, interval 1, probability 0, space 0, times 1
[  949.384692][T13739] CPU: 0 PID: 13739 Comm: syz.6.2307 Not tainted syzkaller #0
[  949.392140][T13739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  949.402180][T13739] Call Trace:
[  949.405444][T13739]  <TASK>
[  949.408361][T13739]  dump_stack_lvl+0x188/0x24e
[  949.413031][T13739]  ? show_regs_print_info+0x12/0x12
[  949.418230][T13739]  ? load_image+0x410/0x410
[  949.422718][T13739]  ? get_futex_key+0x38c/0x1000
[  949.427639][T13739]  should_fail_ex+0x390/0x4c0
[  949.432316][T13739]  futex_lock_pi_atomic+0x148/0xcb0
[  949.437545][T13739]  ? pi_state_update_owner+0x340/0x340
[  949.442990][T13739]  ? futex_setup_timer+0xc0/0xc0
[  949.447914][T13739]  futex_lock_pi+0x227/0x9e0
[  949.452491][T13739]  ? futex_wait_queue+0x134/0x1b0
[  949.457496][T13739]  ? fixup_pi_state_owner+0x5e0/0x5e0
[  949.462852][T13739]  ? futex_setup_timer+0xc0/0xc0
[  949.467786][T13739]  ? file_end_write+0x156/0x250
[  949.472622][T13739]  ? vfs_write+0x777/0x9a0
[  949.477022][T13739]  do_futex+0x1c1/0x320
[  949.481161][T13739]  ? __ia32_sys_get_robust_list+0x100/0x100
[  949.487042][T13739]  __se_sys_futex+0x381/0x410
[  949.491707][T13739]  ? __x64_sys_futex+0xf0/0xf0
[  949.496455][T13739]  ? __x64_sys_futex+0x1d/0xf0
[  949.501201][T13739]  do_syscall_64+0x4c/0xa0
[  949.505603][T13739]  ? clear_bhb_loop+0x60/0xb0
[  949.510260][T13739]  ? clear_bhb_loop+0x60/0xb0
[  949.514917][T13739]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  949.520794][T13739] RIP: 0033:0x7f0e01d9f559
[  949.525196][T13739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  949.544787][T13739] RSP: 002b:00007f0dffff6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  949.553181][T13739] RAX: ffffffffffffffda RBX: 00007f0e02025fa0 RCX: 00007f0e01d9f559
[  949.561133][T13739] RDX: 0000000000000000 RSI: 000000000000000d RDI: 0000000000000000
[  949.569109][T13739] RBP: 00007f0e01e36b20 R08: 0000000000000000 R09: 0000000000000000
[  949.577078][T13739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  949.585032][T13739] R13: 00007f0e02026038 R14: 00007f0e02025fa0 R15: 00007ffd5130d528
[  949.592999][T13739]  </TASK>
[  949.928728][T13750] device syzkaller1 entered promiscuous mode
[  950.044618][T13752] printk: console [ttyS0] disabled
[  950.290682][T13754] printk: console [ttyS0] enabled
[  950.902702][T13775] overlayfs: missing 'lowerdir'
[  952.469608][ T4732] net_ratelimit: 45 callbacks suppressed
[  953.376366][T13803] jffs2: notice: (13803) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  954.689509][T13827] overlayfs: missing 'lowerdir'
[  955.904170][T13842] overlayfs: failed to clone upperpath
[  955.953760][T13842] overlayfs: failed to clone upperpath
[  957.080206][T13859] overlayfs: missing 'lowerdir'
[  957.086491][T13831] Bluetooth: hci4: command 0x1003 tx timeout
[  957.094685][ T8451] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  957.660696][ T5352] net_ratelimit: 44 callbacks suppressed
[  959.345094][T13907] loop6: detected capacity change from 0 to 1024
[  959.716447][T13907] hfsplus: inconsistency in B*Tree (1,0,1,0,1)
[  959.760708][T13913] hfsplus: inconsistency in B*Tree (1,0,1,0,1)
[  959.786149][T13907] hfsplus: inconsistency in B*Tree (1,0,1,0,1)
[  959.830043][T13913] hfsplus: inconsistency in B*Tree (1,0,1,0,1)
[  959.957200][ T5156] hfsplus: b-tree write err: -5, ino 25
[  960.001756][ T5156] hfsplus: b-tree write err: -5, ino 4
[  960.046846][ T5156] hfsplus: b-tree write err: -5, ino 2
[  960.077189][ T5156] hfsplus: b-tree write err: -5, ino 26
[  960.181534][ T5156] hfsplus: inconsistency in B*Tree (1,0,1,0,1)
[  960.912224][T13932] kvm [13931]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x1268d8c3
[  961.025324][T13932] kvm [13931]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0x126896f4
[  961.106942][T13932] kvm [13931]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x1268799c
[  961.209509][T13932] kvm [13931]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0x12681981
[  961.242964][T13945] netlink: 'syz.6.2381': attribute type 5 has an invalid length.
[  961.275392][T13932] kvm [13931]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x126863ec
[  961.335118][T13932] kvm [13931]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x12683e94
[  961.457648][ T4347] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  961.719009][ T4347] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  961.887428][ T4349] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  962.707449][    C0] net_ratelimit: 428 callbacks suppressed
[  963.340027][ T4347] usb 1-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00
[  963.435821][ T4347] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  963.487757][ T4349] usb 7-1: Using ep0 maxpacket: 32
[  963.537022][ T4349] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  963.637681][ T4349] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 179, changing to 11
[  963.730079][ T4349] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  963.867448][ T4349] usb 7-1: New USB device found, idVendor=056a, idProduct=032f, bcdDevice= 0.00
[  963.916885][T13975] fuse: Bad value for 'fd'
[  963.923174][ T4349] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  963.939364][ T4347] wacom 0003:056A:033B.0008: Unknown device_type for 'HID 056a:033b'. Assuming pen.
[  964.002912][ T4349] usb 7-1: config 0 descriptor??
[  964.058064][ T4347] wacom 0003:056A:033B.0008: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.0-1/input0
[  964.145028][ T4347] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:056A:033B.0008/input/input23
[  964.408019][ T4347] usb 1-1: USB disconnect, device number 11
[  964.527986][ T4349] wacom 0003:056A:032F.0009: hidraw0: USB HID v0.05 Device [HID 056a:032f] on usb-dummy_hcd.6-1/input0
[  964.615586][T13986] fido_id[13986]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory
[  964.673916][ T4349] usb 7-1: USB disconnect, device number 7
[  964.859313][T13996] loop1: detected capacity change from 0 to 2048
[  964.962119][T13996] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  965.305365][T13997] fido_id[13997]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[  965.509920][T14010] fuse: Bad value for 'fd'
[  965.763740][T14012] FAULT_INJECTION: forcing a failure.
[  965.763740][T14012] name failslab, interval 1, probability 0, space 0, times 0
[  965.849929][ T4271] UDF-fs: error (device loop1): udf_read_inode: (ino 1317) failed !bh
[  965.917022][T14012] CPU: 0 PID: 14012 Comm: syz.0.2403 Not tainted syzkaller #0
[  965.924543][T14012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  965.934591][T14012] Call Trace:
[  965.937885][T14012]  <TASK>
[  965.940831][T14012]  dump_stack_lvl+0x188/0x24e
[  965.945510][T14012]  ? show_regs_print_info+0x12/0x12
[  965.950714][T14012]  ? load_image+0x410/0x410
[  965.955226][T14012]  ? __might_sleep+0xd0/0xd0
[  965.959804][T14012]  ? __lock_acquire+0x7ea0/0x7ea0
[  965.964822][T14012]  should_fail_ex+0x390/0x4c0
[  965.969498][T14012]  should_failslab+0x5/0x20
[  965.973987][T14012]  slab_pre_alloc_hook+0x59/0x300
[  965.979001][T14012]  kmem_cache_alloc+0x56/0x2f0
[  965.983748][T14012]  ? __kernfs_new_node+0xe1/0x7f0
[  965.988833][T14012]  __kernfs_new_node+0xe1/0x7f0
[  965.993679][T14012]  ? __lock_acquire+0x7ea0/0x7ea0
[  965.998688][T14012]  ? kernfs_new_node+0x250/0x250
[  966.003629][T14012]  kernfs_new_node+0x148/0x250
[  966.008397][T14012]  __kernfs_create_file+0x47/0x2e0
[  966.013497][T14012]  sysfs_add_file_mode_ns+0x233/0x2f0
[  966.018862][T14012]  sysfs_merge_group+0x180/0x320
[  966.023817][T14012]  ? sysfs_remove_groups+0xa0/0xa0
[  966.028932][T14012]  ? kernfs_put+0x442/0x480
[  966.033436][T14012]  dpm_sysfs_add+0xce/0x270
[  966.038004][T14012]  device_add+0x745/0x1050
[  966.042477][T14012]  rfkill_register+0x16c/0x9b0
[  966.047315][T14012]  hci_register_dev+0x3f5/0x880
[  966.052211][T14012]  hci_uart_tty_ioctl+0x819/0xa10
[  966.057258][T14012]  ? hci_uart_tty_write+0x10/0x10
[  966.062273][T14012]  tty_ioctl+0x878/0xba0
[  966.066573][T14012]  ? security_file_ioctl+0x7c/0xa0
[  966.071836][T14012]  ? tty_get_icount+0xa0/0xa0
[  966.076497][T14012]  __se_sys_ioctl+0xfa/0x170
[  966.081094][T14012]  do_syscall_64+0x4c/0xa0
[  966.085495][T14012]  ? clear_bhb_loop+0x60/0xb0
[  966.090154][T14012]  ? clear_bhb_loop+0x60/0xb0
[  966.094815][T14012]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  966.100712][T14012] RIP: 0033:0x7f6f4f19f559
[  966.105121][T14012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  966.124712][T14012] RSP: 002b:00007f6f500ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  966.133121][T14012] RAX: ffffffffffffffda RBX: 00007f6f4f425fa0 RCX: 00007f6f4f19f559
[  966.141078][T14012] RDX: 0000000000000004 RSI: 00000000400455c8 RDI: 0000000000000004
[  966.149031][T14012] RBP: 00007f6f4f236b20 R08: 0000000000000000 R09: 0000000000000000
[  966.156982][T14012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  966.164941][T14012] R13: 00007f6f4f426038 R14: 00007f6f4f425fa0 R15: 00007ffd3b6c8178
[  966.172907][T14012]  </TASK>
[  966.214670][ T4271] UDF-fs: error (device loop1): udf_read_inode: (ino 1317) failed !bh
[  967.752647][    C0] net_ratelimit: 36 callbacks suppressed
[  969.282312][ T5156] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  969.601452][ T5156] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  969.954519][ T5156] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  970.196140][ T5156] bond0: (slave netdevsim0): Releasing backup interface
[  970.754993][ T8451] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  970.774922][ T8451] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  970.787310][ T8451] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  970.795558][ T8451] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  970.808909][ T8451] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  970.816472][T13831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  970.867130][T13860] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  971.049685][ T5156] tipc: Left network mode
[  971.133928][T14071] rxe_eth0 speed is unknown, defaulting to 1000
[  971.902713][T14071] lo speed is unknown, defaulting to 1000
[  972.867114][T13860] Bluetooth: hci1: command 0x0409 tx timeout
[  972.947033][ T4732] net_ratelimit: 51 callbacks suppressed
[  974.076022][T14124] loop6: detected capacity change from 0 to 32768
[  974.084298][T14142] device syzkaller0 entered promiscuous mode
[  974.138872][T14124] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.2443 (14124)
[  974.403700][T14124] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  974.494851][T14124] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm
[  974.566312][T14124] BTRFS info (device loop6): turning on sync discard
[  974.625880][T14124] BTRFS info (device loop6): using free space tree
[  974.839288][T14124] BTRFS info (device loop6): enabling ssd optimizations
[  974.946864][T13860] Bluetooth: hci1: command 0x041b tx timeout
[  975.655532][ T8729] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  977.026717][T13860] Bluetooth: hci1: command 0x040f tx timeout
[  977.200548][T14071] chnl_net:caif_netlink_parms(): no params data found
[  977.689887][T14226] CIFS: Attempting to mount \\127.0.0.1\share
[  977.931232][T14071] bridge0: port 1(bridge_slave_0) entered blocking state
[  978.005417][T14071] bridge0: port 1(bridge_slave_0) entered disabled state
[  978.053355][    C0] net_ratelimit: 42 callbacks suppressed
[  978.091111][T14071] device bridge_slave_0 entered promiscuous mode
[  978.490523][T14226] CIFS: VFS: Error connecting to socket. Aborting operation.
[  978.531415][T14226] CIFS: VFS: cifs_mount failed w/return code = -4
[  979.106565][T13860] Bluetooth: hci1: command 0x0419 tx timeout
[  979.820429][ T5156] device hsr_slave_0 left promiscuous mode
[  979.906007][ T5156] device hsr_slave_1 left promiscuous mode
[  979.923657][ T5156] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  980.179186][ T5156] batman_adv: batadv0: Removing interface: batadv_slave_0
[  980.217166][ T5156] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  980.249387][ T5156] batman_adv: batadv0: Removing interface: batadv_slave_1
[  980.302376][ T5156] device bridge_slave_1 left promiscuous mode
[  980.332808][ T5156] bridge0: port 2(bridge_slave_1) entered disabled state
[  980.430399][ T5156] device bridge_slave_0 left promiscuous mode
[  980.463255][ T5156] bridge0: port 1(bridge_slave_0) entered disabled state
[  980.599428][ T5156] device veth1_macvtap left promiscuous mode
[  980.633148][ T5156] device veth0_macvtap left promiscuous mode
[  980.691905][ T5156] device veth1_vlan left promiscuous mode
[  980.719993][ T5156] device veth0_vlan left promiscuous mode
[  981.132266][ T5156] bond1 (unregistering): (slave bridge1): Releasing active interface
[  981.215242][ T5156] bond1 (unregistering): Released all slaves
[  983.186452][    C0] net_ratelimit: 417 callbacks suppressed
[  984.513131][ T5156] team0 (unregistering): Port device team_slave_1 removed
[  984.605589][ T5156] team0 (unregistering): Port device team_slave_0 removed
[  984.695862][ T5156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  984.795170][ T5156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  985.430456][ T5156] team0 (unregistering): Port device dummy0 removed
[  985.483041][ T5156] bond0 (unregistering): (slave team0): Releasing backup interface
[  985.553940][ T5156] bond0 (unregistering): Released all slaves
[  985.690990][T14071] bridge0: port 2(bridge_slave_1) entered blocking state
[  985.729257][T14071] bridge0: port 2(bridge_slave_1) entered disabled state
[  985.745351][T14071] device bridge_slave_1 entered promiscuous mode
[  986.363928][T14071] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  986.469469][T14071] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  986.902060][T14071] team0: Port device team_slave_0 added
[  987.211834][T14071] team0: Port device team_slave_1 added
[  987.461953][T14071] batman_adv: batadv0: Adding interface: batadv_slave_0
[  987.565710][T14071] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  987.645762][T14316] overlayfs: failed to clone upperpath
[  987.839600][T14071] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  987.894533][T14324] fuse: Bad value for 'fd'
[  987.911789][T14325] overlayfs: failed to clone upperpath
[  987.942231][T14071] batman_adv: batadv0: Adding interface: batadv_slave_1
[  988.005702][T14071] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  988.176755][T14332] overlayfs: failed to clone upperpath
[  988.215614][T14071] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  988.226269][    C0] net_ratelimit: 27 callbacks suppressed
[  988.635250][T14071] device hsr_slave_0 entered promiscuous mode
[  988.695325][T14071] device hsr_slave_1 entered promiscuous mode
[  988.809587][T14071] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  988.859957][T14071] Cannot create hsr debugfs directory
[  988.984397][   T26] audit: type=1804 audit(1792632267.107:402): pid=14346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2488" name="/newroot/485/bus/file1" dev="overlay" ino=2625 res=1 errno=0
[  989.573643][T14321] loop6: detected capacity change from 0 to 40427
[  989.695915][T14321] F2FS-fs (loop6): Corrupted extension count (327717 + 1 > 64)
[  989.776779][T14321] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock
[  989.841411][T14321] F2FS-fs (loop6): build fault injection attr: rate: 771, type: 0x3ffff
[  989.961806][T14321] F2FS-fs (loop6): invalid crc value
[  990.107407][T14321] F2FS-fs (loop6): Found nat_bits in checkpoint
[  990.586407][T14321] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0
[  990.674811][T14321] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  990.985032][T14071] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  991.124244][T14071] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  991.222858][T14071] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  991.336692][T14071] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  992.097383][T14071] 8021q: adding VLAN 0 to HW filter on device bond0
[  992.165404][ T4569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  992.192608][ T4569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  992.312709][T14071] 8021q: adding VLAN 0 to HW filter on device team0
[  992.392582][ T4569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  992.440601][ T4569] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  992.519492][ T4569] bridge0: port 1(bridge_slave_0) entered blocking state
[  992.526692][ T4569] bridge0: port 1(bridge_slave_0) entered forwarding state
[  992.658523][ T4569] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  992.716974][ T4569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  992.818256][ T4569] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  992.896089][ T4569] bridge0: port 2(bridge_slave_1) entered blocking state
[  992.903229][ T4569] bridge0: port 2(bridge_slave_1) entered forwarding state
[  992.987564][T14424] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  993.002893][ T4569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  993.065320][ T4569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  993.140921][T14425] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2510'.
[  993.347300][ T5164] net_ratelimit: 35 callbacks suppressed
[  993.374565][T14431] Console: switching to colour VGA+ 80x25
[  993.433727][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  993.433750][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  993.535270][T14432] mode:   vkmsdrmfb
[  993.535283][T14432] visual: 2
[  993.535290][T14432] res:    874x120-32
[  993.549451][T14425] kobject: 'rx-1' (ffff8880570e2d10): kobject_cleanup, parent ffff888028e0dc50
[  993.549472][T14425] kobject: 'rx-1' (ffff8880570e2d10): auto cleanup kobject_del
[  993.549483][T14425] kernfs rps_cpus: removing
[  993.549505][T14425] kernfs rps_flow_cnt: removing
[  993.549518][T14425] kobject: 'rx-1' (ffff8880570e2d10): auto cleanup 'remove' event
[  993.549527][T14425] kobject: 'rx-1' (ffff8880570e2d10): kobject_uevent_env
[  993.549548][T14425] kobject: 'rx-1' (ffff8880570e2d10): fill_kobj_path: path = '/devices/virtual/net/vxcan0/queues/rx-1'
[  993.549606][T14425] kernfs rx-1: removing
[  993.549626][T14425] kobject: 'rx-1' (ffff8880570e2d10): calling ktype release
[  993.549640][T14425] kobject: 'rx-1': free name
[  993.549650][T14425] kobject: 'rx-0' (ffff8880570e2c50): kobject_cleanup, parent ffff888028e0dc50
[  993.549660][T14425] kobject: 'rx-0' (ffff8880570e2c50): auto cleanup kobject_del
[  993.549668][T14425] kernfs rps_cpus: removing
[  993.549682][T14425] kernfs rps_flow_cnt: removing
[  993.549695][T14425] kobject: 'rx-0' (ffff8880570e2c50): auto cleanup 'remove' event
[  993.549702][T14425] kobject: 'rx-0' (ffff8880570e2c50): kobject_uevent_env
[  993.549722][T14425] kobject: 'rx-0' (ffff8880570e2c50): fill_kobj_path: path = '/devices/virtual/net/vxcan0/queues/rx-0'
[  993.549776][T14425] kernfs rx-0: removing
[  993.549794][T14425] kobject: 'rx-0' (ffff8880570e2c50): calling ktype release
[  993.549806][T14425] kobject: 'rx-0': free name
[  993.549819][T14425] kernfs limit: removing
[  993.549834][T14425] kernfs limit_max: removing
[  993.549846][T14425] kernfs limit_min: removing
[  993.549859][T14425] kernfs hold_time: removing
[  993.549871][T14425] kernfs inflight: removing
[  993.549883][T14425] kernfs byte_queue_limits: removing
[  993.549895][T14425] kobject: 'tx-1' (ffff8880731109e0): kobject_cleanup, parent ffff888028e0dc50
[  993.549905][T14425] kobject: 'tx-1' (ffff8880731109e0): auto cleanup kobject_del
[  993.549914][T14425] kernfs tx_timeout: removing
[  993.549927][T14425] kernfs traffic_class: removing
[  993.549941][T14425] kernfs xps_cpus: removing
[  993.549954][T14425] kernfs xps_rxqs: removing
[  993.549966][T14425] kernfs tx_maxrate: removing
[  993.549979][T14425] kobject: 'tx-1' (ffff8880731109e0): auto cleanup 'remove' event
[  993.549987][T14425] kobject: 'tx-1' (ffff8880731109e0): kobject_uevent_env
[  993.550005][T14425] kobject: 'tx-1' (ffff8880731109e0): fill_kobj_path: path = '/devices/virtual/net/vxcan0/queues/tx-1'
[  993.552326][T14425] kernfs tx-1: removing
[  993.552354][T14425] kobject: 'tx-1' (ffff8880731109e0): calling ktype release
[  993.552368][T14425] kobject: 'tx-1': free name
[  993.552381][T14425] kernfs limit: removing
[  993.552397][T14425] kernfs limit_max: removing
[  993.552409][T14425] kernfs limit_min: removing
[  993.552422][T14425] kernfs hold_time: removing
[  993.552434][T14425] kernfs inflight: removing
[  993.552447][T14425] kernfs byte_queue_limits: removing
[  993.552459][T14425] kobject: 'tx-0' (ffff888073110820): kobject_cleanup, parent ffff888028e0dc50
[  993.552469][T14425] kobject: 'tx-0' (ffff888073110820): auto cleanup kobject_del
[  993.552479][T14425] kernfs tx_timeout: removing
[  993.552492][T14425] kernfs traffic_class: removing
[  993.552505][T14425] kernfs xps_cpus: removing
[  993.552518][T14425] kernfs xps_rxqs: removing
[  993.552531][T14425] kernfs tx_maxrate: removing
[  993.552554][T14425] kobject: 'tx-0' (ffff888073110820): auto cleanup 'remove' event
[  993.552562][T14425] kobject: 'tx-0' (ffff888073110820): kobject_uevent_env
[  993.552584][T14425] kobject: 'tx-0' (ffff888073110820): fill_kobj_path: path = '/devices/virtual/net/vxcan0/queues/tx-0'
[  993.552643][T14425] kernfs tx-0: removing
[  993.552660][T14425] kobject: 'tx-0' (ffff888073110820): calling ktype release
[  993.552671][T14425] kobject: 'tx-0': free name
[  993.552682][T14425] kernfs queues: removing
[  993.552695][T14425] kobject: 'queues' (ffff888028e0dc50): kobject_cleanup, parent 0000000000000000
[  993.552705][T14425] kobject: 'queues' (ffff888028e0dc50): calling ktype release
[  993.552712][T14425] kobject: 'queues' (ffff888028e0dc50): kset_release
[  993.552728][T14425] kobject: 'queues': free name
[  993.552750][T14425] kernfs runtime_status: removing
[  993.552765][T14425] kernfs control: removing
[  993.552806][T14425] kernfs runtime_suspended_time: removing
[  993.552820][T14425] kernfs runtime_active_time: removing
[  993.552833][T14425] kernfs autosuspend_delay_ms: removing
[  993.552854][T14425] kernfs power: removing
[  993.552867][T14425] kernfs subsystem: removing
[  993.552883][T14425] kernfs vxcan0: removing
[  993.552905][T14425] kernfs uevent: removing
[  993.552923][T14425] kernfs rx_packets: removing
[  993.552937][T14425] kernfs tx_packets: removing
[  993.552950][T14425] kernfs rx_bytes: removing
[  993.552963][T14425] kernfs tx_bytes: removing
[  993.552975][T14425] kernfs rx_errors: removing
[  993.552988][T14425] kernfs tx_errors: removing
[  993.553001][T14425] kernfs rx_dropped: removing
[  993.553013][T14425] kernfs tx_dropped: removing
[  993.553026][T14425] kernfs multicast: removing
[  993.553038][T14425] kernfs collisions: removing
[  993.553051][T14425] kernfs rx_length_errors: removing
[  993.553064][T14425] kernfs rx_over_errors: removing
[  993.553077][T14425] kernfs rx_crc_errors: removing
[  993.553089][T14425] kernfs rx_frame_errors: removing
[  993.553102][T14425] kernfs rx_fifo_errors: removing
[  993.553115][T14425] kernfs rx_missed_errors: removing
[  993.553128][T14425] kernfs tx_aborted_errors: removing
[  993.553141][T14425] kernfs tx_carrier_errors: removing
[  993.553154][T14425] kernfs tx_fifo_errors: removing
[  993.553167][T14425] kernfs tx_heartbeat_errors: removing
[  993.553179][T14425] kernfs tx_window_errors: removing
[  993.553192][T14425] kernfs rx_compressed: removing
[  993.553205][T14425] kernfs tx_compressed: removing
[  993.553218][T14425] kernfs rx_nohandler: removing
[  993.553230][T14425] kernfs statistics: removing
[  993.553243][T14425] kernfs netdev_group: removing
[  993.553256][T14425] kernfs type: removing
[  993.553269][T14425] kernfs dev_id: removing
[  993.553281][T14425] kernfs dev_port: removing
[  993.553294][T14425] kernfs iflink: removing
[  993.553307][T14425] kernfs ifindex: removing
[  993.553319][T14425] kernfs name_assign_type: removing
[  993.565412][T14425] kernfs addr_assign_type: removing
[  993.565441][T14425] kernfs addr_len: removing
[  993.565456][T14425] kernfs link_mode: removing
[  993.565470][T14425] kernfs address: removing
[  993.565484][T14425] kernfs broadcast: removing
[  993.565497][T14425] kernfs speed: removing
[  993.565510][T14425] kernfs duplex: removing
[  993.565523][T14425] kernfs dormant: removing
[  993.565536][T14425] kernfs testing: removing
[  993.565549][T14425] kernfs operstate: removing
[  993.565562][T14425] kernfs carrier_changes: removing
[  993.567588][T14425] kernfs ifalias: removing
[  993.567610][T14425] kernfs carrier: removing
[  993.567624][T14425] kernfs mtu: removing
[  993.567638][T14425] kernfs flags: removing
[  993.567651][T14425] kernfs tx_queue_len: removing
[  993.567665][T14425] kernfs gro_flush_timeout: removing
[  993.567678][T14425] kernfs napi_defer_hard_irqs: removing
[  993.567692][T14425] kernfs phys_port_id: removing
[  993.567705][T14425] kernfs phys_port_name: removing
[  993.567718][T14425] kernfs phys_switch_id: removing
[  993.567730][T14425] kernfs proto_down: removing
[  993.567743][T14425] kernfs carrier_up_count: removing
[  993.567756][T14425] kernfs carrier_down_count: removing
[  993.567769][T14425] kernfs threaded: removing
[  993.567794][T14425] PM: Removing info for No Bus:vxcan0
[  993.567814][T14425] kobject: 'vxcan0' (ffff888073118688): kobject_uevent_env
[  993.567839][T14425] kobject: 'vxcan0' (ffff888073118688): fill_kobj_path: path = '/devices/virtual/net/vxcan0'
[  993.567902][T14425] kernfs vxcan0: removing
[  993.568036][ T3932] lapb15: bond_netdev_event received NETDEV_PRE_UP
[  993.568063][ T3932] net lapb15: siw: event 14
[  993.568267][ T3932] lapb15: bond_netdev_event received NETDEV_UP
[  993.568280][ T3932] net lapb15: siw: event 1
[  993.569809][ T4569] veth0_to_team: bond_netdev_event received NETDEV_CHANGE
[  993.569827][ T4569] net veth0_to_team: siw: event 4
[  993.569849][ T4569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  993.570026][ T4569] sctp: sctp_addr_wq_mgmt: add new entry for cmd:0, addr:fe80::a8aa:aaff:feaa:aa1f in wq:ffff888079c6c6d8
[  993.570292][ T4569] team_slave_0: bond_netdev_event received NETDEV_CHANGE
[  993.570375][ T4569] team_slave_0: bond_netdev_event received NETDEV_CHANGELOWERSTATE
[  993.570437][ T4569] net team_slave_0: siw: event 27
[  993.571737][ T4569] net team_slave_0: siw: event 4
[  993.571757][ T4569] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  993.571916][ T4569] sctp: sctp_addr_wq_mgmt: add new entry for cmd:0, addr:fe80::b061:27ff:fe4c:eef2 in wq:ffff888079c6c6d8
[  993.572289][ T4569] veth1_to_team: bond_netdev_event received NETDEV_CHANGE
[  993.572304][ T4569] net veth1_to_team: siw: event 4
[  993.572319][ T4569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  993.572577][ T4569] sctp: sctp_addr_wq_mgmt: add new entry for cmd:0, addr:fe80::a8aa:aaff:feaa:aa20 in wq:ffff888079c6c6d8
[  993.572891][ T4569] team_slave_1: bond_netdev_event received NETDEV_CHANGE
[  993.572962][ T4569] team_slave_1: bond_netdev_event received NETDEV_CHANGELOWERSTATE
[  993.572974][ T4569] net team_slave_1: siw: event 27
[  993.573041][ T4569] net team_slave_1: siw: event 4
[  993.573053][ T4569] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  993.573214][ T4569] sctp: sctp_addr_wq_mgmt: add new entry for cmd:0, addr:fe80::4028:e1ff:fea3:2ce4 in wq:ffff888079c6c6d8
[  993.573537][T14071] veth0_to_hsr: bond_netdev_event received NETDEV_PRE_CHANGEADDR
[  993.573550][T14071] net veth0_to_hsr: siw: event 9
[  993.573670][T14071] veth0_to_hsr: bond_netdev_event received NETDEV_CHANGEADDR
[  993.573683][T14071] net veth0_to_hsr: siw: event 8
[  993.573871][T14071] veth0_to_hsr: bond_netdev_event received NETDEV_PRE_UP
[  993.573883][T14071] net veth0_to_hsr: siw: event 14
[  993.574058][T14071] Insert table=255 ac141421/32
[  993.574109][T14071] Insert table=254 ac141400/24
[  993.574213][T14071] Insert table=255 ac1414ff/32
[  993.574295][T14071] veth0_to_hsr: bond_netdev_event received NETDEV_UP
[  993.574306][T14071] net veth0_to_hsr: siw: event 1
[  993.574403][T14071] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[  993.574976][T14071] Insert table=255 ac141422/32
[  993.575032][T14071] AT ffff88807e22d180 s=40 16
[  993.575042][T14071] In tnode_resize ffff88807e22d1a0 inflate_threshold=50 threshold=25
[  993.575052][T14071] In inflate
[  993.575063][T14071] AT ffff888073bd3300 s=40 32
[  993.575087][T14071] In tnode_resize ffff888077640320 inflate_threshold=50 threshold=25
[  993.575097][T14071] In tnode_resize ffff88802dea55a0 inflate_threshold=50 threshold=25
[  993.575226][T14071] sctp: sctp_addr_wq_mgmt: add new entry for cmd:0, addr:172.20.20.34 in wq:ffff888079c6c6d8
[  993.577019][ T4349] IPv6: now = 4295036431, schedule = 4295048500, rounded schedule = 4295048600 => 4295048500
[  993.577792][T14071] sctp: sctp_addr_wq_mgmt: add new entry for cmd:0, addr:fe80::22 in wq:ffff888079c6c6d8
[  993.577895][T14071] IPv6: now = 4295036431, schedule = 4295048500, rounded schedule = 4295048600 => 4295048500
[  993.578137][T14071] veth1_to_hsr: bond_netdev_event received NETDEV_PRE_CHANGEADDR
[  993.578153][T14071] net veth1_to_hsr: siw: event 9
[  993.578290][T14071] veth1_to_hsr: bond_netdev_event received NETDEV_CHANGEADDR
[  993.578304][T14071] net veth1_to_hsr: siw: event 8
[  993.578564][T14071] veth1_to_hsr: bond_netdev_event received NETDEV_PRE_UP
[  993.578577][T14071] net veth1_to_hsr: siw: event 14
[  993.578764][T14071] Insert table=255 ac141422/32
[  993.578811][T14071] Insert table=254 ac141400/24
[  993.578905][T14071] Insert table=255 ac1414ff/32
[  993.578985][T14071] veth1_to_hsr: bond_netdev_event received NETDEV_UP
[  993.578996][T14071] net veth1_to_hsr: siw: event 1
[  993.589067][T14071] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[  993.589313][ T4569] team0: bond_netdev_event received NETDEV_CHANGE
[  993.589339][ T4569] net team0: siw: event 4
[  993.589361][ T4569] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  993.589558][ T4569] sctp: sctp_addr_wq_mgmt: add new entry for cmd:0, addr:fe80::a8aa:aaff:feaa:aa1a in wq:ffff888079c6c6d8
[  993.589900][ T4569] veth0_to_hsr: bond_netdev_event received NETDEV_CHANGE
[  993.589915][ T4569] net veth0_to_hsr: siw: event 4
[  993.589931][ T4569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  993.590100][ T4569] sctp: sctp_addr_wq_mgmt: add new entry for cmd:0, addr:fe80::a8aa:aaff:feaa:aa21 in wq:ffff888079c6c6d8
[  993.590395][ T4569] hsr_slave_0: bond_netdev_event received NETDEV_CHANGE
[  993.590409][ T4569] net hsr_slave_0: siw: event 4
[  993.590424][ T4569] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  993.590551][ T4569] sctp: sctp_addr_wq_mgmt: add new entry for cmd:0, addr:fe80::5c16:6dff:fecf:6837 in wq:ffff888079c6c6d8
[  993.590791][ T4569] veth1_to_hsr: bond_netdev_event received NETDEV_CHANGE
[  993.590803][ T4569] net veth1_to_hsr: siw: event 4
[  993.590817][ T4569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  993.590937][ T4569] sctp: sctp_addr_wq_mgmt: add new entry for cmd:0, addr:fe80::a8aa:aaff:feaa:aa22 in wq:ffff888079c6c6d8
[  993.603722][ T4569] hsr_slave_1: bond_netdev_event received NETDEV_CHANGE
[  993.603747][ T4569] net hsr_slave_1: siw: event 4
[  993.603770][ T4569] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  993.603961][ T4569] sctp: sctp_addr_wq_mgmt: add new entry for cmd:0, addr:fe80::aceb:beff:fe0f:a8b5 in wq:ffff888079c6c6d8
[  993.604745][T14071] Insert table=255 ac141423/32
[  993.604804][T14071] In tnode_resize ffff888073bd3320 inflate_threshold=50 threshold=25
[  993.604816][T14071] In tnode_resize ffff888077640320 inflate_threshold=50 threshold=25
[  993.604825][T14071] In tnode_resize ffff88802dea55a0 inflate_threshold=50 threshold=25
[  993.604927][T14071] sctp: sctp_addr_wq_mgmt: add new entry for cmd:0, addr:172.20.20.35 in wq:ffff888079c6c6d8
[  993.605408][T14071] sctp: sctp_addr_wq_mgmt: add new entry for cmd:0, addr:fe80::23 in wq:ffff888079c6c6d8
[  993.605511][T14071] IPv6: now = 4295036433, schedule = 4295048500, rounded schedule = 4295048600 => 4295048500
[  993.607448][T14425] kobject: 'vxcan1' (ffff8880730f8688): kobject_cleanup, parent 0000000000000000
[  993.607464][T14425] kobject: 'vxcan1' (ffff8880730f8688): calling ktype release
[  993.607497][T14425] kobject: 'vxcan1': free name
[  993.607583][T14425] kobject: 'vxcan0' (ffff888073118688): kobject_cleanup, parent 0000000000000000
[  993.607593][T14425] kobject: 'vxcan0' (ffff888073118688): calling ktype release
[  993.607618][T14425] kobject: 'vxcan0': free name
[  993.607936][T14071] hsr0: bond_netdev_event received NETDEV_PRE_UP
[  993.607955][T14071] net hsr0: siw: event 14
[  993.608239][T14071] Insert table=255 ac141423/32
[  993.608289][T14071] Insert table=254 ac141400/24
[  993.618135][T14071] Insert table=255 ac1414ff/32
[  993.618249][T14071] hsr0: bond_netdev_event received NETDEV_UP
[  993.618267][T14071] net hsr0: siw: event 1
[  993.618424][T14071] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[  993.618512][T14071] hsr0: bond_netdev_event received NETDEV_CHANGE
[  993.618523][T14071] net hsr0: siw: event 4
[  993.618536][T14071] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  993.632709][T14418] sctp: sctp_close: sk:ffff88814da7f500, timeout:0
[  993.632739][T14418] sctp: sctp_destroy_sock: sk:ffff88814da7f500
[  993.632881][T14422] sctp: sctp_close: sk:ffff88814da7ec00, timeout:0
[  993.632898][T14422] sctp: sctp_do_sm[pre-fn]: ep:ffff888055b29800, EVENT_T_PRIMITIVE, PRIMITIVE_SHUTDOWN, asoc:ffff888037d98000[STATE_COOKIE_WAIT], sctp_sf_cookie_wait_prm_shutdown
[  993.632940][T14422] sctp: sctp_do_sm[post-fn]: asoc:ffff888037d98000, status:DISPOSITION_DELETE_TCB
[  993.632957][T14422] sctp: sctp_cmd_new_state: asoc:ffff888037d98000[STATE_CLOSED]
[  993.633061][T14422] sctp: sctp_packet_free: packet:ffff888020eb3308
[  993.633101][T14422] sctp: sctp_do_sm[post-sfx]: error:0, asoc:0000000000000000[STATE_CLOSED]
[  993.633114][T14422] sctp: sctp_destroy_sock: sk:ffff88814da7ec00
[  993.633197][T14422] kcov: kcov_task_exit: t = ffff88804a2d3c00, kcov->t = ffff88804a2d3c00
[  993.633362][T14427] kcov: kcov_task_exit: t = ffff8880620d5a00, kcov->t = ffff8880620d5a00
[  993.638893][ T4465] bond1: (slave geneve2): Send learning packet: mac aa:c5:2c:da:7f:d8 vlan 0
[  993.639010][ T4465] nf_conntrack: new packet for ffff88801eaab380
[  993.639065][ T4465] nf_nat: Already setup manip DST for ct ffff88801eaab380 (status bits 0x188)
[  993.639079][ T4465] nf_nat: Already setup manip SRC for ct ffff88801eaab380 (status bits 0x188)
[  993.639114][    C0] nf_nat: Already setup manip DST for ct ffff88801eaab380 (status bits 0x188)
[  993.639130][    C0] nf_nat: Already setup manip SRC for ct ffff88801eaab380 (status bits 0x188)
[  993.639148][    C0] IPv6: udp checksum is 0 for [::1]:22468->[::1]:6081
[  993.641390][T14071] Insert table=255 ac141424/32
[  993.641458][T14071] AT ffff88807e489a80 s=40 16
[  993.641469][T14071] In tnode_resize ffff88807e489aa0 inflate_threshold=50 threshold=25
[  993.641479][T14071] In inflate
[  993.641490][T14071] AT ffff8880275c8800 s=40 32
[  993.641503][T14071] AT ffff88807e489b80 s=40 16
[  993.641517][T14071] AT ffff88802a8c9e80 s=40 16
[  993.641542][T14071] In tnode_resize ffff88807e489ba0 inflate_threshold=50 threshold=25
[  993.641552][T14071] In tnode_resize ffff88802a8c9ea0 inflate_threshold=50 threshold=25
[  993.641561][T14071] In inflate
[  993.641570][T14071] AT ffff8880610d2100 s=40 64
[  993.641599][T14071] In tnode_resize ffff888077640320 inflate_threshold=50 threshold=25
[  993.641608][T14071] In tnode_resize ffff88802dea55a0 inflate_threshold=50 threshold=25
[  993.641683][T14071] sctp: sctp_addr_wq_mgmt: add new entry for cmd:0, addr:172.20.20.36 in wq:ffff888079c6c6d8
[  993.642021][T14071] sctp: sctp_addr_wq_mgmt: add new entry for cmd:0, addr:fe80::24 in wq:ffff888079c6c6d8
[  993.642128][T14071] IPv6: now = 4295036437, schedule = 4295048500, rounded schedule = 4295048600 => 4295048500
[  993.642773][T14071] dummy0: bond_netdev_event received NETDEV_PRE_CHANGEADDR
[  993.642794][T14071] net dummy0: siw: event 9
[  993.644181][T14432] ==================================================================
[  993.644190][T14432] BUG: KASAN: slab-out-of-bounds in fbcon_prepare_logo+0x48a/0xb50
[  993.644237][T14432] Read of size 218 at addr ffff88803a8694aa by task syz.6.2512/14432
[  993.644247][T14432] 
[  993.644251][T14432] CPU: 0 PID: 14432 Comm: syz.6.2512 Not tainted syzkaller #0
[  993.644262][T14432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  993.644269][T14432] Call Trace:
[  993.644274][T14432]  <TASK>
[  993.644280][T14432]  dump_stack_lvl+0x188/0x24e
[  993.644295][T14432]  ? read_lock_is_recursive+0x10/0x10
[  993.644309][T14432]  ? show_regs_print_info+0x12/0x12
[  993.644320][T14432]  ? load_image+0x410/0x410
[  993.644337][T14432]  ? _raw_spin_lock_irqsave+0xbc/0x100
[  993.644349][T14432]  ? __virt_addr_valid+0x188/0x540
[  993.644394][T14432]  ? __virt_addr_valid+0x467/0x540
[  993.644407][T14432]  ? fbcon_prepare_logo+0x48a/0xb50
[  993.644416][T14432]  print_report+0xa8/0x210
[  993.644427][T14432]  kasan_report+0x10b/0x140
[  993.644442][T14432]  ? fbcon_prepare_logo+0x48a/0xb50
[  993.644452][T14432]  kasan_check_range+0x235/0x290
[  993.644465][T14432]  ? fbcon_prepare_logo+0x48a/0xb50
[  993.644475][T14432]  memcpy+0x25/0x60
[  993.644510][T14432]  fbcon_prepare_logo+0x48a/0xb50
[  993.644522][T14432]  fbcon_init+0x137c/0x2460
[  993.644534][T14432]  visual_init+0x2dd/0x650
[  993.644551][T14432]  do_bind_con_driver+0x859/0x1030
[  993.644565][T14432]  ? sysfs_kf_read+0x350/0x350
[  993.644578][T14432]  store_bind+0x794/0xa20
[  993.644591][T14432]  ? sysfs_kf_read+0x350/0x350
[  993.644603][T14432]  kernfs_fop_write_iter+0x3a0/0x520
[  993.644616][T14432]  vfs_write+0x482/0x9a0
[  993.644631][T14432]  ? file_end_write+0x250/0x250
[  993.644645][T14432]  ? __fget_files+0x3fc/0x460
[  993.644663][T14432]  ? __fdget_pos+0x2ae/0x360
[  993.644679][T14432]  ? ksys_write+0x70/0x260
[  993.644692][T14432]  ksys_write+0x14d/0x260
[  993.644705][T14432]  ? __ia32_sys_read+0x80/0x80
[  993.644719][T14432]  ? lockdep_hardirqs_on+0x94/0x140
[  993.644733][T14432]  do_syscall_64+0x4c/0xa0
[  993.644744][T14432]  ? clear_bhb_loop+0x60/0xb0
[  993.644755][T14432]  ? clear_bhb_loop+0x60/0xb0
[  993.644766][T14432]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  993.644777][T14432] RIP: 0033:0x7f0e01d9f559
[  993.644787][T14432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  993.644795][T14432] RSP: 002b:00007f0dfffd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  993.644808][T14432] RAX: ffffffffffffffda RBX: 00007f0e02026090 RCX: 00007f0e01d9f559
[  993.644815][T14432] RDX: 0000000000000001 RSI: 00002000000003c0 RDI: 0000000000000003
[  993.644822][T14432] RBP: 00007f0e01e36b20 R08: 0000000000000000 R09: 0000000000000000
[  993.644829][T14432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  993.644835][T14432] R13: 00007f0e02026128 R14: 00007f0e02026090 R15: 00007ffd5130d528
[  993.644846][T14432]  </TASK>
[  993.644850][T14432] 
[  993.644853][T14432] Allocated by task 14432:
[  993.644886][T14432]  kasan_set_track+0x4b/0x70
[  993.644900][T14432]  __kasan_kmalloc+0x8e/0xa0
[  993.644911][T14432]  __kmalloc+0xb3/0x240
[  993.644920][T14432]  vc_do_resize+0x36e/0x17b0
[  993.644930][T14432]  fbcon_init+0x1395/0x2460
[  993.644938][T14432]  visual_init+0x2dd/0x650
[  993.644947][T14432]  do_bind_con_driver+0x859/0x1030
[  993.644958][T14432]  store_bind+0x794/0xa20
[  993.644969][T14432]  kernfs_fop_write_iter+0x3a0/0x520
[  993.644981][T14432]  vfs_write+0x482/0x9a0
[  993.644993][T14432]  ksys_write+0x14d/0x260
[  993.645005][T14432]  do_syscall_64+0x4c/0xa0
[  993.645015][T14432]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  993.645024][T14432] 
[  993.645027][T14432] Last potentially related work creation:
[  993.645030][T14432]  kasan_save_stack+0x3a/0x60
[  993.645042][T14432]  __kasan_record_aux_stack+0xb2/0xc0
[  993.645050][T14432]  kvfree_call_rcu+0x103/0x890
[  993.645104][T14432]  sctp_do_sm+0x379a/0x5690
[  993.645140][T14432]  sctp_assoc_bh_rcv+0x3ee/0x630
[  993.645172][T14432]  sctp_backlog_rcv+0x158/0x360
[  993.645182][T14432]  __release_sock+0x1e6/0x460
[  993.645195][T14432]  release_sock+0x5b/0x1b0
[  993.645205][T14432]  sctp_sendmsg+0x1bed/0x2940
[  993.645216][T14432]  __sys_sendto+0x497/0x650
[  993.645224][T14432]  __x64_sys_sendto+0xda/0xf0
[  993.645233][T14432]  do_syscall_64+0x4c/0xa0
[  993.645243][T14432]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  993.645253][T14432] 
[  993.645255][T14432] The buggy address belongs to the object at ffff88803a868000
[  993.645255][T14432]  which belongs to the cache kmalloc-4k of size 4096
[  993.645310][T14432] The buggy address is located 1194 bytes to the right of
[  993.645310][T14432]  4096-byte region [ffff88803a868000, ffff88803a869000)
[  993.645320][T14432] 
[  993.645328][T14432] The buggy address belongs to the physical page:
[  993.645359][T14432] page:ffffea0000ea1a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3a868
[  993.645371][T14432] head:ffffea0000ea1a00 order:3 compound_mapcount:0 compound_pincount:0
[  993.645379][T14432] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  993.645395][T14432] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888018442140
[  993.645403][T14432] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000
[  993.645408][T14432] page dumped because: kasan: bad access detected
[  993.645416][T14432] page_owner tracks the page as allocated
[  993.645420][T14432] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 4732, tgid 4732 (kworker/u4:15), ts 766580382779, free_ts 766240476241
[  993.645438][T14432]  post_alloc_hook+0x173/0x1a0
[  993.645478][T14432]  get_page_from_freelist+0x206b/0x2180
[  993.645491][T14432]  __alloc_pages+0x1ec/0x4f0
[  993.645503][T14432]  alloc_slab_page+0x5d/0x180
[  993.645515][T14432]  new_slab+0x87/0x2d0
[  993.645525][T14432]  ___slab_alloc+0xbc5/0x1240
[  993.645535][T14432]  __kmem_cache_alloc_node+0x126/0x270
[  993.645544][T14432]  __kmalloc_node_track_caller+0xa0/0x240
[  993.645553][T14432]  __alloc_skb+0x226/0x7d0
[  993.645562][T14432]  nsim_dev_trap_report_work+0x24f/0xa80
[  993.645619][T14432]  process_one_work+0x8ab/0x1160
[  993.645650][T14432]  worker_thread+0xaf5/0x12a0
[  993.645660][T14432]  kthread+0x29d/0x330
[  993.645668][T14432]  ret_from_fork+0x1f/0x30
[  993.645685][T14432] page last free stack trace:
[  993.645688][T14432]  free_unref_page_prepare+0x8e5/0x9e0
[  993.645701][T14432]  free_unref_page+0x2e/0x3f0
[  993.645714][T14432]  __unfreeze_partials+0x188/0x1e0
[  993.645724][T14432]  put_cpu_partial+0x17c/0x250
[  993.645734][T14432]  qlist_free_all+0x76/0xe0
[  993.645742][T14432]  kasan_quarantine_reduce+0x144/0x160
[  993.645752][T14432]  __kasan_slab_alloc+0x1e/0x80
[  993.645763][T14432]  slab_post_alloc_hook+0x4b/0x490
[  993.645773][T14432]  kmem_cache_alloc_node+0x1ad/0x310
[  993.645782][T14432]  __alloc_skb+0xf9/0x7d0
[  993.645790][T14432]  alloc_skb_with_frags+0xa7/0x710
[  993.645801][T14432]  sock_alloc_send_pskb+0x87f/0x9a0
[  993.645813][T14432]  unix_dgram_sendmsg+0x5c1/0x16f0
[  993.645822][T14432]  __sys_sendto+0x497/0x650
[  993.645830][T14432]  __x64_sys_sendto+0xda/0xf0
[  993.645839][T14432]  do_syscall_64+0x4c/0xa0
[  993.645848][T14432] 
[  993.645850][T14432] Memory state around the buggy address:
[  993.645856][T14432]  ffff88803a869380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  993.645862][T14432]  ffff88803a869400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  993.645868][T14432] >ffff88803a869480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  993.645873][T14432]                                   ^
[  993.645878][T14432]  ffff88803a869500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  993.645884][T14432]  ffff88803a869580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  993.645888][T14432] ==================================================================
[  993.653072][T14071] dummy0: bond_netdev_event received NETDEV_CHANGEADDR
[  993.653100][T14071] net dummy0: siw: event 8
[  993.653531][T14071] dummy0: bond_netdev_event received NETDEV_PRE_UP
[  993.653553][T14071] net dummy0: siw: event 14
[  993.654018][T14071] Insert table=255 ac141424/32
[  993.654078][T14071] Insert table=254 ac141400/24
[  993.654168][T14071] Insert table=255 ac1414ff/32
[  993.654252][T14071] dummy0: bond_netdev_event received NETDEV_UP
[  993.654265][T14071] net dummy0: siw: event 1
[  993.662408][T14071] sctp: sctp_addr_wq_mgmt: add new entry for cmd:0, addr:fe80::a8aa:aaff:feaa:aa24 in wq:ffff888079c6c6d8
[  993.671503][T14432] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  993.671513][T14432] CPU: 0 PID: 14432 Comm: syz.6.2512 Not tainted syzkaller #0
[  993.671524][T14432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  993.671531][T14432] Call Trace:
[  993.671535][T14432]  <TASK>
[  993.671539][T14432]  dump_stack_lvl+0x188/0x24e
[  993.671556][T14432]  ? memcpy+0x3c/0x60
[  993.671567][T14432]  ? show_regs_print_info+0x12/0x12
[  993.671578][T14432]  ? load_image+0x410/0x410
[  993.671590][T14432]  panic+0x2d3/0x710
[  993.671623][T14432]  ? bpf_jit_dump+0xd0/0xd0
[  993.671636][T14432]  ? _raw_spin_unlock_irqrestore+0x10d/0x120
[  993.671647][T14432]  ? _raw_spin_unlock+0x40/0x40
[  993.671658][T14432]  check_panic_on_warn+0x80/0xa0
[  993.671671][T14432]  ? fbcon_prepare_logo+0x48a/0xb50
[  993.671681][T14432]  end_report+0x66/0x110
[  993.671693][T14432]  kasan_report+0x118/0x140
[  993.671706][T14432]  ? fbcon_prepare_logo+0x48a/0xb50
[  993.671716][T14432]  kasan_check_range+0x235/0x290
[  993.671729][T14432]  ? fbcon_prepare_logo+0x48a/0xb50
[  993.671738][T14432]  memcpy+0x25/0x60
[  993.671748][T14432]  fbcon_prepare_logo+0x48a/0xb50
[  993.671760][T14432]  fbcon_init+0x137c/0x2460
[  993.671772][T14432]  visual_init+0x2dd/0x650
[  993.671783][T14432]  do_bind_con_driver+0x859/0x1030
[  993.671803][T14432]  ? sysfs_kf_read+0x350/0x350
[  993.671816][T14432]  store_bind+0x794/0xa20
[  993.671830][T14432]  ? sysfs_kf_read+0x350/0x350
[  993.671841][T14432]  kernfs_fop_write_iter+0x3a0/0x520
[  993.671854][T14432]  vfs_write+0x482/0x9a0
[  993.671870][T14432]  ? file_end_write+0x250/0x250
[  993.671884][T14432]  ? __fget_files+0x3fc/0x460
[  993.671898][T14432]  ? __fdget_pos+0x2ae/0x360
[  993.671910][T14432]  ? ksys_write+0x70/0x260
[  993.671923][T14432]  ksys_write+0x14d/0x260
[  993.671937][T14432]  ? __ia32_sys_read+0x80/0x80
[  993.671950][T14432]  ? lockdep_hardirqs_on+0x94/0x140
[  993.671964][T14432]  do_syscall_64+0x4c/0xa0
[  993.671974][T14432]  ? clear_bhb_loop+0x60/0xb0
[  993.671984][T14432]  ? clear_bhb_loop+0x60/0xb0
[  993.671995][T14432]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  993.672005][T14432] RIP: 0033:0x7f0e01d9f559
[  993.672015][T14432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  993.672023][T14432] RSP: 002b:00007f0dfffd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  993.672034][T14432] RAX: ffffffffffffffda RBX: 00007f0e02026090 RCX: 00007f0e01d9f559
[  993.672041][T14432] RDX: 0000000000000001 RSI: 00002000000003c0 RDI: 0000000000000003
[  993.672047][T14432] RBP: 00007f0e01e36b20 R08: 0000000000000000 R09: 0000000000000000
[  993.672053][T14432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  993.672059][T14432] R13: 00007f0e02026128 R14: 00007f0e02026090 R15: 00007ffd5130d528
[  993.672069][T14432]  </TASK>
[  993.672129][T14432] Kernel Offset: disabled
[  996.466418][T14432] Rebooting in 86400 seconds..