last executing test programs:

9m22.11345427s ago: executing program 0 (id=605):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
getpgrp(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = timerfd_create(0x8, 0x80000)
timerfd_settime(r2, 0x3, &(0x7f00000001c0)={{}, {0x0, 0x989680}}, 0x0)

9m18.921214758s ago: executing program 0 (id=611):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000003c0)=0x7)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000500)={0x1, 0x0, [{0x4b564d05, 0x0, 0x1000}]})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x45)
write$FUSE_LSEEK(r4, &(0x7f0000002700)={0x4e, 0x7ffffffffffffffa, 0x0, {0xff}}, 0x18)

9m16.375991729s ago: executing program 0 (id=613):
r0 = open(&(0x7f0000000280)='.\x00', 0x880, 0x0)
fcntl$lock(r0, 0x410, 0x0)
close(r0)
landlock_create_ruleset(&(0x7f00000000c0)={0x110, 0xb, 0x2, 0x400, 0xe, 0x1}, 0x30, 0x2)
ioctl$VIDIOC_SUBDEV_G_CROP(r0, 0xc038563b, &(0x7f0000000040)={0x0, 0x0, {0x421d, 0x5, 0x9e4, 0x8000000}})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x44890)
ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece)
r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x103000, 0x0)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x50009405, &(0x7f00000003c0))
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)

9m15.819386643s ago: executing program 0 (id=614):
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
syz_open_procfs(0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340))
ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f)
write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)

9m9.780777049s ago: executing program 0 (id=619):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
getpgrp(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = timerfd_create(0x8, 0x80000)
timerfd_settime(r2, 0x3, &(0x7f00000001c0)={{}, {0x0, 0x989680}}, 0x0)

9m3.870824923s ago: executing program 0 (id=626):
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d20bddda7d1db9342de76eec7967fe97751f13a23aeaacb0565c1c2251560ed1"}})
r1 = syz_open_dev$dri(&(0x7f0000000140), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940), 0x0})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000008c0)=[0x0], &(0x7f0000000900), 0x0, 0x1})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRES16=r3, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r5 = syz_open_procfs(0x0, 0x0)
pread64(r5, &(0x7f0000000500)=""/31, 0x1f, 0x6677)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000000300)=""/102400, 0x19000)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x46032, 0xffffffffffffffff, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00')
preadv(r7, 0x0, 0x0, 0x2c2, 0xca)
close(r4)
r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/profiling', 0x1, 0x1cc)
writev(r8, 0x0, 0x0)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r8, 0x114, 0xa, &(0x7f0000019300)=ANY=[@ANYBLOB="03bb0354c497ce8ea30222944779ea6d7ab87c96ae1c3361e469ca1476b664aa4da519378e3a9ede7f5b1df166f1242459c650bb9c01d7cbe038331467cdc4b7422c6aeea554821cdd691ec8bb958302bf976b09ad30baafabbfff824d41a67a8eeeda98def17d55c633b29e7344f6c22e7fddaf9959d906956438ceaebaa5f288efd8367b327d55c300285ea04d825a57f84fad8a75354cfd140e43acc8de9c65a431100572b499dbbfb1a8a79b2a2d3a9a338860c9c65a2efc90d45677f3779375324b1148b0239cae840ec8742afd69ad9f727890b32a0aef496eb9327b52378ead6266a159"], 0x4)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @empty, 0x2}, 0x1c)
syz_open_dev$loop(&(0x7f0000000000), 0xf, 0x183043)

8m47.383958423s ago: executing program 32 (id=626):
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d20bddda7d1db9342de76eec7967fe97751f13a23aeaacb0565c1c2251560ed1"}})
r1 = syz_open_dev$dri(&(0x7f0000000140), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940), 0x0})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000008c0)=[0x0], &(0x7f0000000900), 0x0, 0x1})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRES16=r3, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r5 = syz_open_procfs(0x0, 0x0)
pread64(r5, &(0x7f0000000500)=""/31, 0x1f, 0x6677)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000000300)=""/102400, 0x19000)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x46032, 0xffffffffffffffff, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00')
preadv(r7, 0x0, 0x0, 0x2c2, 0xca)
close(r4)
r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/profiling', 0x1, 0x1cc)
writev(r8, 0x0, 0x0)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r8, 0x114, 0xa, &(0x7f0000019300)=ANY=[@ANYBLOB="03bb0354c497ce8ea30222944779ea6d7ab87c96ae1c3361e469ca1476b664aa4da519378e3a9ede7f5b1df166f1242459c650bb9c01d7cbe038331467cdc4b7422c6aeea554821cdd691ec8bb958302bf976b09ad30baafabbfff824d41a67a8eeeda98def17d55c633b29e7344f6c22e7fddaf9959d906956438ceaebaa5f288efd8367b327d55c300285ea04d825a57f84fad8a75354cfd140e43acc8de9c65a431100572b499dbbfb1a8a79b2a2d3a9a338860c9c65a2efc90d45677f3779375324b1148b0239cae840ec8742afd69ad9f727890b32a0aef496eb9327b52378ead6266a159"], 0x4)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @empty, 0x2}, 0x1c)
syz_open_dev$loop(&(0x7f0000000000), 0xf, 0x183043)

47.119653449s ago: executing program 2 (id=2562):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000003c0)={[{@minixdf}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@init_itable_val={'init_itable', 0x3d, 0x200}}, {@nombcache}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}]}, 0x23, 0x44d, &(0x7f0000000480)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './bus'}, 0x9)

44.72811982s ago: executing program 2 (id=2564):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x110)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
capset(&(0x7f00000006c0)={0x20080522}, &(0x7f0000000040)={0x200000, 0x41200003, 0x0, 0x6, 0x2040007, 0x9})
syz_fuse_handle_req(r0, &(0x7f0000004140)="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", 0x2000, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x4, {0x7, 0x28, 0x0, 0x8010, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x3, 0x1000)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
umount2(0x0, 0x2)
syz_fuse_handle_req(r0, &(0x7f0000006140)="e0332f8f5747b9f778142cc174a9b5f0244b78bb6346cb5fc9135b8220090ee698fddc241870359d32327f299718466d88c89e68097036bb35abfe03e3c02234dcdb2c7d1209c657485ca1aa3f2fb80e71397b80fca6f3cf2367fb19eb95e5b4a0170063374645d9e020099ffd7def3d94cd29412b3d7b7a47bc70121be848cfcecea78d41a93622b134bd06e84dec07a9e5abc29cb02d5b9091e748cffacf48352628822bab7b24a17bdf4b3f3bd9fb17793496aa6490da3f58039ce5b40745dd63f82d93bed80b50ca5742d67d39029a98db95c9392e2d5fd9a35bad30cfe98682b5a069738a12c3cfd25949106cfc839202fd21c2b28e44be73280d5037351ead2dd1c277d9cc9088c6b14365eb0937ea9685f6b26232293803260f2c8cfe176b55df304bc2865b8f52581afc4beed445ae8cc405cb7bcc51103aef812c41437c5b070a3591ad0964677f4f9017bb300727dfab009056bee3671a9694be2e2f2173fcc06ceba5aed0d93a3d7cd88365c5c354788efcc705e90d572e34e9e566fc206a8167970ecb9cbc43f4d9de4d43688582b6600dfcfc7379c831e756a45835647bd87879a3e3942c61b9ea2c2af35d49a4caa9a109b0beb972996ff8924ea371e15dc48efd12b1203a7f1fe354977fcf9e4ee2c8f210387e551ddb55e5f67ee6bb9bc8772649693b0adf24606e8ccc59f020834d8cbfcadfa1770549fe464dfc412308fbaee8d30bd20c002794bfb923bac6b490841248d12ad9a0e54d1d96e3aff5dc4930a6c8b7c75264a46af7a6339725fb84e0363463ebaaaf58d6b9309ae7c87a8df8c68d2487d684011de1fa7645f3f48cf3bb61bee8bcace2f8ef5f967f2765f8086aeaa5dcc34c84e379a7ddd6438cccb5b8098dfbffffffffffffeadbc4ad2b2ef98412a46f74a171ad056429dbb723cdb9ca9f9f03170dba2870e5988b7cb755599d1eb8f7eaf5c8ded4b56022cb479d0bdfae18f69f9ecc42f4c181ea10838229ba5db7f088ad8d5f77e49c1fd93ed6b983c43b23c7eeb1233f0c114885057a27cd3f67a309e3fecba241836bc92308b830b10b04af6c9595b44e859b9ca7ef079e151fdd500060787be3a7a5b3e23b06ec70f087134504f8b8e7b6799ebfe14f698ba7a813a380e6f92cace9230aa8094a2465f7224e2becad469d0aaf0e48b0098eacfb17abdb69bb2ebba97a09d2b739b532d70db91fcb0fcb38bccdc01d7c8113024ea8b619e385e58d31899721416e10b408504a9c4fcf870d21051227440a616cf62f6637b62eceaee09029f88009be02269cb5e5ed090c6f5e6c652c31214aef301bd23ec2504f90991cd27539c1b8b54db51825e951d076cd0e70f56de4b91894ce22049205483a0fe7d7886b36118bebd96d138980e26604b6e70a7275c6b81501143119a8c2c271558202eda196704ef9ae3c33301e1afbe56d069ce4926bf531d960f3df58192f3da558adc169d48d39e24e04e95c406b34b1f4ed2726ef0f6a67dd84c75636984191d019cebfa883fdf99affcdb4c874614a5312455403895891daf7469d6721583ccd1290ab05b14516f22965fc52c4a528f1a5c20cc133fea279d9efc991ec4d51d2654daceda234f6d3b0c635db697aba3eeaf8356319adba42428266ac09a6e6495ca8f60c1c4e052068511696296e88ef86a591948627ba97df634e0063eb5f208df00a069b1213c29e58cf76f591253d60de9d7c01d29992ccc728140299c429fec0df9d90f83fa2467ce00de83b16d10c7edb80ff8d4b1b19eea9bd1e2783a0d41215c9cf23bc3ca1ff414e3f29aadba00c5a8d5b44c28c10e99140e5428278e54bfd880a93fd1b54b560422ab2bfcf120a7902373b6442c6e9867b19aa0a6b77b1634ab6fd1c8a1d90d99ebb9ebcb89d593562b266fbc53c40501f9298690283c45059b3f6ee278e46cb3904c947446c28af8855b2a68e6e0c0da205a6e12fdd15b393d579039b31c1a54230ac2ea13cf1f5540046b4dcccdd731fff7323c4880e5d2d8668d8a7f08920715c17ef9652eb55f224c82a6fdb970dbf1032403f283bd868a23f4785a6ab9c0bcd2308dba1a1f258ae512cf64784e501008db366ab7093a6cc4b6ee86154d44a1a15c10834602dd5ccf730f6d1142ac19d113496dbcb80021cb5733924265d082a8453b5c21e0245e4a2627e8df090da6a129ee49c58c1a7437369acdee15f5e4e5638f05d9f6391572d9890219def702a013a2b05239664dba44feec2a9508a3200b47de03e6a784bca2f3633df534af33da0a95a34ca845b61a22ff55a5a4c04ff9e06e7162f458a8c56e106e75ffb76a921f4057dd73d5f3801aa78ca4c78d6b79bce560404c2fe3d57876287f73e84c27c486ffb997951f9e0b3aa81a5e7804ac7360add11e7851842d0ed8df041c999e50226fef006373bbb53d5d8e9d1653924e60234fd0b6645b821746f3d88591ff66e294e8e958ca425ddbc7d604f7cbbcb9d5fe0d4ad53878eb16bc801def1005e1eb12a6d4924d2179948e7aa542f2600ba3c6c600629d64c529c7326c1f38aa4e1a6cc259e58f86400d65d67856c8f4fffc33ad4c279dc05367307f562f8127f37b03c3cf38a97cfde0c02aad8ac40d347a9e0a496f227c068dc6c666fb2b6a18990f607399b0707d135752d93739e1840b5b4c125c81eeeb318869b408f87778451e49f3ad988a8aa97672989ad367833ff7e7f0e79c37ac794fe466623e122127fb94ebbc01bc775183b26b2dc407b1aa1a55d4ce04dbe1df4fba0377fea4c4bfa5a37c4dd733fd116b9c7f50b11dd512ad68646b9ddca295fe27bee78476901fbb5c8d2856ae0e9e21ab26e3587c1325f1fa28edb4081f2ba309d5fc39f7f54abbd0d5a152c2f7e3a8b3a5ef6e097b109061c91124f41f33055a7bb86706629f614d40346715cf2fe387ef4e4fc6646839824d3ef85eeac85bc5e681320f6fa7057e0a10de8c4678b48510f77b91bb397dd1209eaba8ea1f237c348e9e0d7af1229e2c04b6560e48e3a7491f3066b63a8923becdcfd8594c1c55098a51283b599765b049831cacd9478e5e996c778d524b476f6677218c94886d7548be7617e5796e35bb3c9b13d70e4897867d85f0350e9329985f051fb556b861aef7dead54e6b29b9ad837cb4774f47a5371ef034612aa0c151345546b876b53e9f2c06e3ce0113e67eba8842f4ac5b51a61315bf050078c710dcf14371d9593730b1d0302ef999f488bbf42b7360171da98ad68932bda4937358fd1d0c2bcd04f7dbe2beaffa0d53cccda316cb19270cf4aa56695ef3203b49fe92d1623cc1d714da6b8f94112db1781562ab2ae50bda23debd55da440434299c992f2f8c264310d6d8ccdd042737db0253d6889d8bf36fe99a131b73300c9798b8fd58b5fc681b97e71230cd3094e441fe5cf1294bbc28f41146f06e39d5e19e673dd489dbddfc16fe281160a8008e375025cbf25e84945f2f0a5ffb2cd58273328ea9d7533b2f0861eff95823cea18dc1877183fefab808bda0890f91f1d79b36953b138fd62caea3411900647a4afadfecade2ff6274175f06614d108daaf9821c413a137e33c826957953bb39e2d852097f978c3577abcb71d68b45794247d8e82614979708f6d6d0e469828206b22913d6d320d815d42c0d943640c63196f703f946089f535eac511e26c6a5a529e875eb15aaf65fd50dcbaf37a009f2f9081cdbc744cf7aa2336913e89f1961581ad4bb6aeb1d23a787e2d3f99639871df5842c30581263d5139128f0a3f37ef48bb636d7aae06581de6baa55a12019d3ed831950915fdc1eee819dd01047bda606f2852699529718c99606246a92bb1dd9435d8f3a48646c0e423441bc783be358c0c91e6846419b6c0a81354500cb2721834dc11ba40c3bbe5717e5142922a168ca0e20fc269ea584c7f68ff7cced62c4277385368b4ad596b79c45a9c4575c37f300cab37a5693cb777fabed412934d3a77505b17cb2628119ddff45f3fcbffb50386eb9cfb6f82b37fa852ad4b65bf8e2898b11bf051cb7fb0fa81cbf81b9ceebb05498aeb2691eb15297edd682976d5a4f444cdaa82f063bc4482c28c4e6257c7cf3e5ee5a502c6527b77b12725e7526ff896ee2f8066536dce04d63072a34c19d533d4dbdb93e7185482cbf7510c5eef2f8aebebad011727cd8061a367b7e1868252bb43d9a74c9c6a10539e357d5367fac69a9296fe5a79a2e5b45950ff462e0e882aa32ff7f29b5644e5311f3e0b076c58683de29ad9dd8b2c92a41ca8313ac997e44981e82aec550bbf6c88adf3d54e9fdf93d9dce95289e9086043d888f19d209cbea79f8f5b2c81b2c3889eae1cb5305e282b883c4cfa3798eceeabb442a74ff6a8470020a296ef01d8e32553663c844e67e5a3a44375f0074ce9547a6c489ee86d7652219491f35c6b904d51a26c3d2cc77d8ff97050dd0d0aed4a1ecf1db7ac48673a1dcc70ac16f709dcf4b90148aede5302111ceaa3a81c49b724cfa206283b62513f96c1da77efafe2d2d08a5f391ab690b5d974ceed2e95e85b1039def0e94c79cc0aa1de1f8133e985adfadf4a657710487b265bb6692fd2b91a06ac98d50b052b8a13168e2638b93209238fbe67f4590a81a2cdbcc479ca9178720a6ec05bc9457f27ad2e2fd2f4e9c643ef85b6287a01f7fd597799cce7d6464ed3c95110733d4ba92314ba3dd81e51f541a6e37f8bb14376e41560f9049b4ff349a467defc205f915a345b5f06d090645180ca642c719f03e9813bff7fd635660efe38b022130d42f2cedd792bcba2bfb14385c6d1cbe5ff2e38c22f1f8d5e4d93d296042507e43f24ff904827b16f2a3572d26078d7fdb0cfdbe2e6bee07b94ae441e510681c96f97ef0ddbd7efbd80ce0689f6e2022a189dd2937d3eadd82a154a5fac91b5ef48523706957b8d5f55077973e9a036009d745a6df39ba154dc59c4ef784d62b3f2d782dc508242a1b0e4cc294b6e62e98ef946f0d984c3174cf86b8a0beb615f046ec50dd0c8a9c0f36df60bd162f1130f894085e7c47b6c28ff336f5d75166c1840e7ad07204fc10ce976505f6aece0316d8c65b973f61cea2fe4c6db722717985c25249f041c07a86b878702a8c9ab7c33fe41039041aa38489b02a28f18d69ab34619e9e35514c54592c8059984ace64b5302b5f22d68c35c7ffb23c63ce877a1e1b160dd2c329eabcc0e1e3072021bd811de3c0c7a68af20ddb9e2912b7eecc2a8cf083a252d0fe31629b20559f7b976e4d8625644385c692b8cdc2886a42d750962d0dee10a1546ecb7ef961216cc456d2450a44aab07014fe0be076ca6bcb46b644af844b2ad8b3817f1895a5d579af3dc937541f4b7e9203e7a7af534b406d8f6e3bc555d767603122ab1c4e62de19d6af63be8e39fe45732859d6d92e11f1a847f7d62764b6364aa7f95f03cc7deba467da5be71657ae50ff6bf93c51efb7d19ac9887e92fe5f3c9d545209eff307c9e02073bd3404827e148aa63c135ed668589bdfec38cb47716201a9d02f1b03993f89e96b33b32e52ddffb0580dac45422ba7a3fef76e519a3dc8d12eac60c2d2f8c4303aafa3e80135c403360d51c9cdeba3ffb31e664302f587e0e983ede7f9b2bfe2bc64bd5029cfa88445e043e08f3e9affee25e980e75d2664738726e3d2eade7dce0ece78a514bbbe5a54c121374d079e3b05996052d66889742232b73e950e1a9892e7352c9e546a8cfb48332d2b2be6327208ca51dc2869a562581947f62b0d5bfb3e0911d4854f822d6738b4deb195840d2bbae0b074b8d1e1010c24ec00052dce7d259e3044aab1a99d261fb3b49cf09dfc85473f94db06d49e202ca12182283d48144f8389a5301679901600bf8130d36315b277a99204b85a1598f84bd2d4c4893108f6717bf44234181467d6eeee61e1823268b5c60bf04d0e13e429f411b51adfca20ff1a1b1eee203d59b03da1643c3e9fc474a91470116c6c5275542adb10f3adae2ae87e88b93f334e0ceb6216fc081e8d84d8b0a503196dc50599b22b89b807627b427a815aea0dbca69e5fb215ee996395d8a21a1c67ac295be33c6517504e1f00f579f8c484873cc670b5b9e787b1c30ca1f0b25f8bb8f4bde3b3f4fa730c292cbf97b25068ba9c65f78c555d5f75d52a57958d7111e824f3afa16484f625abf62afc80654c36fd9f8284466422fb18e08274e8febc719d45b784974d50d187ad2349429af3f7930252a4d45997762e9d5f5493d408ca144532aa89aa3d43c46951dafb8f81794e2e9679ce238cfe86e112f4f046d87feec3be04461032819d62f217faa71fa9dc6da8861015567d1f7309090e25b7015dcc6d72a5e7ba53296ab1bc72467ac50831628cf5238155aed3fb189a8b527ebd38771e16454fe51e3edde55cea454414690491207c23f6cf33aaeeda432de2d1ede04e039a16245e66cce6f4e4ea534f290f02a2a81a46d6ffea7967dfbe37461f83d472091156594852823392efc953f4ac099d74e2d0328d9f47bd952352981a34055acd0273309484ab56afa85ff0c22fb53ac5d7cc8e346b4c2f38a4e2451738146b7b90c14f826c7dbc1b2be79d83772a8d629f2dfaf15286a15be1ea22a05d4ee3de6a6bfb7e208dbbcc88e77baac940d6438aeeb77c3a32db08b46e79545b65f7f3c1bd433092bc9116668c338ab35c01cb5871167868c6b61bd4c0ca5f96e5ce2465da06c4a320839f3bb7c0dffd40d5bb9a32fcbc6f691787de7211da062616272c77c62ac83ed2e256c954ab27d9009877b79be54acd336bfe2a6e087abaab004743f5ea4ec8ddfb8086920e8e458a413adb98077a3cf860513cc8a453eb129556c871be7e7232a6130c4332819ad17b289fdb31f8f8854dffb4cfeca6d792567b444c750820a2a8a2e0f93779e61a4966650909369fc8bd5bd2bad4ff95cc8a14f6cd83ae6411b4bfe1a9b5cdf1fcf32c54cef1731edc47d41fa581376b25006fc859b98805d70a157e501a2cb2ab425340965213adfecdb5addb2b4b2ec5cc6935e4e279bb98283fb20dfcd8a2c91aefda9dc5a57bba4d8803d1eb0f4ba9529de01e39c2aa60a91267c31d036a3f669b9377661837f58c6950fdf38986ea13ff5e9c4d966bf999002da1a854d54aa225b259d91eb88425328e7d13b06dea321a151a8dfc44755214da97168e8acf027d66b7fff45ded94fcde53ff80342d4595644549c4ed827225596e2b30480e94eb049b6cd718fe8424d044bb5098e0206047ddb81755e3cb92131dd47ec754b64c4b78f663e364cf8a74cdd9857c81316dc4ccd5f02a84b310abfbc9d6a23ee6d1eaf6b8fc1544cfeb06002c8a40fb0e49859d2073a7b1cb112713518ad5e007d0a256f901469bfa5cae98841f877faeb584d41bfe695da72ca5700ae085f39c99f769502ea9f43c0b84ca4611441d5adb3e5d0a426297e535258748169cad487f97d171c0630642943508206ce648aad2971297f3d4037d73e5fbc73460ca7401b7dbd7807273ae077a81fd0d4bc90b6068e3ec95afcfeab16619306fb23942a4308e8253b35f4912df392dfc5daf35dd842a5a1f78fc294cbdbd504056f0c7779121b5b3db7461e437347452476f3b0bb22e63aa23cb9d3e797c6c95513058d8fb2c27864ac0e1f5001c988e29c79bfa4236c7be41dee5561d825c1f0fbebc0c06cc4712e88ad5efd94f4eb4e93794af42a9752a2ebc57dc2f3881c75bbb23ad25b69619f9f5b07fe114ba291d2b5b4c1c175e1aa3ee3eda55e6126b3ad1e613bf8e0bbac727b879e7796fa0ad100893677a18b53f5eb31db43a97370d3749afa92fd0291fa96b05daa6beb43b9c1c11d9515976976d1cc1e44f35d317299ceb68ea2545f2a2b92b4e1046f6f92c33aae6995593189bb2611576599fd765b8e6fe2e88674ffd57ee8252287b1904d622c36a502db45c72b0d5fc3d983cc44bc955eb43911404667a4ab147d72b69ff2514dfb820ad75758e85df88499cea94ed658b4c1c2f49fe2bbb8d2dd97f844a6df289296cfb9cd5bc8d17aa235e2c4501b1422b25acd6dbc3a91d03904c545320524f9034955ab02f5d058097c37d23984baf808d28b3e12821eb8919a77c1b6a8bdeceecfcc487c39db592817dd378a7c5127b427e7279b2a82f6b8eec6b3fabe0947e353e7a386475b15011de93e2f2891f772ef90f4aba1ee1c4d7321c81ce4dcaa378daeabb93182c319494436dbe67d252a01291cacb59686ebd53c6df21c083e98fa299cf5e9b59f1ccea95c62b1437c8ff8754a6372b5b879ebc3241f6430871eafe35337d75cb68c42862846df4342ab434f7f0a7b9f66824e1e696e3dbecde179592774b7511e5a7a1a06ba601eb5f2a935c7cef0f83ecd412a84afdd05120fceb1afb6445ebfcdff8fffffffb75dddccc45afb4f5bb1308d39309c92c0b61a322d5229881fa5d598113cce54107036ca9f63fe863d257c706fe89d5c7ae59a459c6f15ba48d80da4aff541797b26418acddb987df3544bc4918cdbbdd8dd1bc2163c89635044e7b4da878457727a667c0146a12b4c46639497243259bfe4aa5ea50eb79f39fa9209256c9a685e3e39d6d8b6a9ca7d3554fbff0908ad6c6ecf68e506c20b16cd4a98e3ada9eb0cb3eb0b75b13b6d80bf99eddf2282da52cec085d3a725b71c29395d605e1eb26143290946a3a0d24347fa46145735dbf4eabc12150b8d5f7eeca804d7ed1fecd0132d1b94ebec65cbc07dfd4d54a5140567e77c646bd92666922c43aca8e482c59b970fa43087eb76d6715e4e8e5ebe54ca391383ef685b133534fcc1e5c5eb56f9d76a888506c4ac8d289c37039e0c4f927b0e11e85c5c7ec1cf4b19bebee6014cb89ee57f2ade8d166005e956d46a0c01f60b58299479e8a59a2e88f1a7ffd08b27d92fc2772b338959bd0a1c9cb95075c3cc17043c818345b29b76c0b8ed41c8c7259cc780c657cb9509daec1558453cfe061f54e08523a55d3223897559d51096b680802140800000000000000322e007c2af0c08867291dd732bfe4b24d1d5ae517a7f5903c369ac6b157d42eb6ca8c0d7b50fd533a56c814e7cf04db3012eebd53ec1b123d65ab1e462dc19182b690d56a88ad5a1f4d89f1749b005e88085505cc6d7de8eeee08def67bc1d1519d44b7a62dc07e491f328f786956d9200f00d78829e6af7c1a5835366201374b9487330920d4c57e2f7073292e173acc2424bb0d5e0e9448b4c02f9cfc99bc408110b6a3e9bc3799e4b178c2871069bc7d9ceba564378f02b2932c36f159478b5facd452b595a86d119216af9d860bd3997305320159a69a70fc62284141d23d2dc1e5394b271d99e5570450f1c55807e96c7cbe1b7c2e3e96f69fecf0f375e36e0d2acf319e37199e98486a8d145ce2d996c1909402744cce63664a75e480b197c345360321e830e5912d1d7bfe5a129a67fa98e6eda5268fa588047859daa11d087d0dbf0ccc7e120e3a5820cb4f5dc06748317e3f866518eb66e39dc8a68a7411b3403fc8eeab8283dee4d767e8e5842ed922e03ae5b3c9c494d5ebc61527ccd1222740fedd9e469ba6b30761cf387d654081c7e63182860e4548748058914a9cea01caf074fe6a78fafa2b45c516f9f20af9ac6773a400fa9661a872f6b55f0ed52a9be9e9c35502604b924f0eb628d6545da322e0713f9a5587e87e4b04fa495423b7c72093b764adfd1430a2e608b7af3d2bf80fef00e5b69abe386618274921ff57621bb99739de2e066ff17e95eba027f6a35170af3a69e93359a9643e155832d45c1aa9a8f71ad35504b99d3d0a1c11ae108664ea36f4dcded083aee17ac9efe7ee3fdf7b63c7c09bcef62caa88708510d45cea79d323083ddbfe7e5d3d9138f206a7af82ef1d26c85015c3e55a285a35d0052546493536b9061db27291a9292033753b7bddac63dac6f6271689240e43523c434a65e1d35299e386c953d0c92f21057e0b7883e049d20961e75069587eb3df6206496f76bbfd96635bb19837ba2ab193d79072ffb8829306b63697ff104a65031b8a38c24cca9ba23d5cdf753169a00fe2b2c3849f234a7029b657b3324c10d553e601aa97d17024f7bf5a99f96392f4a079a83daa27f4e3b512ee8536e764ce4dc36fd0874dfa502a693e55bd9f116202c5e906703e2c43d84448598b7af78aa60a205c152841e75e23436738ccaa6bbcef87e6a237d86d1a5e38e56c162cd6d61a4fb8b410b1643ad557a22348edfa82c23db11c9abdd8141fce263a66537512e93a930a4801ad862a902c7c1e00eb7c7466b1351318b7196c2a9016c55a05e104e124bdb568132f9397e31b10d04e5284bd029ea2f6a3ed11854e09b5871d6a725c21a9ef5d7e729a90a8206d5f61e6e42e47dda3e31b9134d47872a0dd7a576b665ec6ceaa5fd7d85ed7feede9ac9fc23e40241c0318077edda75b62eb271e28fb3705f7b4950c14b721a3a74a7a4e4de02cef5de76a1602b906016c0892ef37db51b0a1dd53f28b3d896f20abbad1ad0e0220960423267fc6e1779d1150fd584dd184bb43278d2d68ff21ac0daeef5408348cb80f4a9e0e606f6048bbaa517289451f084fffb63c5d904788cfc310b5495528a58f4650dafc4e4675b99d35ebab710ac6fefcee6c51a2835510fb6d2dbd8f97c3e53fb7a23c3f3c0283eb2271504581b9c1fa31e35c117e56a5d668a9c57df3b4e1129ca019a8b877fa4a22768dfbdd9d2154e17f4a7755b065090d88982471bfb242d89af5c6782693a6ab1b1be74dfa5655ac3b5ef4ace8dc595803cf4025bdf5c0e9fbe7a12a3a313311809591da08a2cc6cd8480dc960e1f79fa208440a0e589be5756c36d5830a51c4bdc39c2a85c0431bae3a7331b2ffdf23623693d343a7938a8a8a4dd4d523c6450a705bccbb38427f06f4f84a18adf303c0ddecf4ce2b6cdde4e09a4c31816195f0fe9f05fcdc0609f8a75ad2f23d5c24faaf346c13ec0512a5c29477ac561c878085d1a323f6bab08e2fb9ee57d7bb621ef21caf3609d74036c6dc1d7be0b6058d89dcb8d9aa4462fa0a740be66e3fdaa957f27c5a26dc586ac8c927ab2d7cf1b761798ea4191be8f4423cf1a6727d0c5f27a9969a753573afa584dea82678f3471ba36d726c396d68c671e579120f1a11cd50fa66b26fc2d6cb74ba07edbd5d3a288cf58ed1255381df02b2fb8983b7cf833433d1ab8fdef12651c3507e4b69fbc4b234678cca36761e8da434e5f036f204a1400da15277ef27ac140e2d574b89c0fd617da27e6ce862883bbe81c288834b9477d0d440c15dad505b363fcc1cfef8e2e3a96438809505844196acd0af751dedfced67f209c2ffa9c6da842c93ff4b5fd54a67df904f2f31b4236728c99582a667a8461d397770a657ffa7d514b0f076d7f35e9704a836e7882a2acf0a0ec2158ac7234953c3696abdc791c0b163ee76fbcc5adc18b6fa0f51f76f3d313a0d891f1deb69f6e44289b1aa43a768b8d13270959763a2c45129daeea493a5b0d7b36753b223dca9a8037368653400", 0x2000, &(0x7f0000000700)={&(0x7f00000002c0)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x0, 0x10000, 0x40}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)

44.099092397s ago: executing program 2 (id=2566):
r0 = syz_open_dev$usbfs(&(0x7f0000000380), 0x201, 0x402)
ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f0000000140)={0x0, "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"})

43.863484643s ago: executing program 2 (id=2567):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4)
bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000f59ffc)=0x92, 0x4)
bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c)
r4 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c)
r5 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback, 0x5}, 0x1c)
r6 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r6, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x6}, 0x1c)
r7 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r7, &(0x7f0000000000)={0xa, 0xe20, 0x0, @empty}, 0x1c)
r8 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000080)=0x5, 0x4)
bind$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c)
r9 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r9, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
r10 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r10, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c)
r11 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r11, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10)

43.55955248s ago: executing program 2 (id=2568):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000851000000300000018000000000000000000000000000000950000000000000095000000000000005e77eb3ecde6d889151a82c747d94c192f20d686333bc2180b1e1ad07fa24a24aa95e4c4c9fbfb7e0a093f482abd36ea6557d32ae2ef9b5318658e5137cc74bd47c1ba07359cc96ce1b24b205237ca919a7d4cacef39d01e2f880f2937913c23f5e872c502aed31dc9dfdf53d554c19dc296251b"], &(0x7f0000000000)='GPL\x00'}, 0x1a)

43.264238278s ago: executing program 2 (id=2570):
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10)
recvmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/77, 0x4d}], 0x1}, 0x5}], 0x40000, 0x0, 0x0)

28.230071782s ago: executing program 33 (id=2570):
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10)
recvmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/77, 0x4d}], 0x1}, 0x5}], 0x40000, 0x0, 0x0)

10.419856969s ago: executing program 1 (id=2643):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x2}}, 0x10)

10.134275136s ago: executing program 3 (id=2645):
userfaultfd(0x80001)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x7, 0x4)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040084)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x727, 0x7ffffd, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x10000, 0x10000000, 0x7}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004}, 0x0)

10.040278658s ago: executing program 1 (id=2647):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901)

6.664601193s ago: executing program 1 (id=2649):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c7, &(0x7f0000000b80)="$eJzs3M1rXFUfAODfnUnSr7STt2/fvm/7thqtYvEjadIPu3ChoiCoIOiiLmOS1tppI02EtgSNInVdcC8uBZeu3LkRdSH+AQoupVA0CE0FIXJn7k0n85FOmq828zwwnXPmnnvPOfeekzlzTu8NoGP1p/8kEb0R8XNElKrRxQn6q29zs9Ojt2anR5OYn3/996SS7ubs9GieNN9vRxY5XIgofJzEs0ljvpOXr5wbKZfHL2bxwanz7w5OXr7y1NnzI2fGz4xfGD558tjRoadPDB9ftF+TQzXY1uSztF43978/cWDfS29ee3X01LW3vv8yPdbeg9XttfW4o1sNpXi5WbL+9Kz9MV9Rv+3RtjO7P+ysCSddG1gQlqUYEenl6q70/1IU4/bFK8WLH21o4YA1lX43bWm9eWYe2MSSaCfROhQEWGf5F336+zd/xd/rNPi4B9x4LqInC8/NTo/OLcwDdEUh+7x7DfPvj4hTM399lr5iufMQAAB3oTK2ebJu/FdRiL2V9+pax65sDaUvIv4VEbsj4t8RsSci/hNRSfvfiPhfdef5Upv599fFG8c/hetNy7xK0vHfMzVjv7ma+mdvfcUstrNS/+7k9Nny+JHsnByO7i1pfGiJPL55oaflttrxX/pK88/HglkBrndVJ+gWDjI2MjWyWifhxocR+7ua1T9ZWAlIW8C+iNi/vEPvygNnH//iQKtEd67/ElZhnWn+84jHqtd/Jurqn0tarE+mbfzE8PHBrVEePzKYt4pGP/x09bVW+a+o/qsgvf7bF7f/uhSlP5Pqem13lMvjFyeXn8fVXz5p+ZtmGe1/Qdr+e5I3KmvWP75d/ezSyNTUxaGInuSVSjzrLFsj/Xz49r6XsniePq3/4UPN+//ubJ+0/v+PiLQRH4zY9UBEPJiV/aGIeDgiDi1R/++ef+SdJeqfRBIbev3Hmv79W2j/fUntev1dBIrnvv261bp9e9f/WMxU/ta23+XbLeBKzh0AAADcLwoR0RtJYaAa7u+NQmFgoPp/+PfE9kJ5YnLqidMT710Yq94j0BfdhXymq1QzHzqUzGRHrMaHs7nifPvRbN740+K2SnxgdKI8tsF1h063Y3H/j7z/p34rbnTpgDXXelJ9iVsDgE2hvv8XNqgcwPprZ1HdbwHYnOr7/5bmz9AANiHPa4HO1az/f1AXbxj/GyHAptDY/39t8sg6YDMy/ofOpf9D59L/oSOt5L7+tgLXI6JhU36zwJK750VsmmZr23f4d0ogfzzMWua1reZSRqES6I17oO53Eyi1kzgivlpxXsVVKHPaY9b3/NQ8cAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOA+9k8AAAD//9fZ3EU=")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='cpuacct.usage_sys\x00', 0x275a, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x10000, 0x4)
lseek(r0, 0xfffffffffffffffc, 0x2)
getdents(r0, 0x0, 0x54)

6.272232613s ago: executing program 3 (id=2650):
sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x20040000)
socket$inet6(0xa, 0x800000000000002, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0)
write(r3, &(0x7f0000000700)='disable=', 0x8)

4.752120921s ago: executing program 3 (id=2651):
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x1, 0x0, 0x0, 0x0, 0x20, 0x172f, 0x501, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x20, "", [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0x1, 0xf3}}}}}]}}]}}, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0)
ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000100)="178d", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800"], 0x64}}, 0x0)

4.00108707s ago: executing program 1 (id=2652):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0xfff)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x75, 0x8, 0x6, 0x0, 0xf, 0x6, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0xff, 0xfd, 0x2})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3.138218591s ago: executing program 1 (id=2655):
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000000240)='./file2\x00', 0x2000000, &(0x7f00000018c0)=ANY=[], 0xfb, 0x1501, &(0x7f00000002c0)="$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")
openat$khugepaged_scan(0xffffffffffffff9c, 0x0, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000001800)='/proc/sys/fs/binfmt_misc/registe9\x0e', &(0x7f00000001c0)='\x00\x00\x00\x00\x00', 0x0)
ioctl(r0, 0x40104d02, &(0x7f0000000900))

2.80420783s ago: executing program 3 (id=2656):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@abort}]}, 0x0, 0x5e2, &(0x7f0000000bc0)="$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")
quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x2, 0x2, 0x1000000000000c8, 0xfffffffffffffffd, 0x7, 0x8000000000000001, 0x3, 0xfffffffffffffffa, 0x5164})

2.366027361s ago: executing program 1 (id=2657):
syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f00000105c0)='./file1\x00', 0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], 0x9, 0x105fc, &(0x7f0000010600)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0)
fallocate(r0, 0x0, 0xfea000, 0x2000402)
lseek(r0, 0x1, 0x3)

1.881824443s ago: executing program 3 (id=2658):
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000b40)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000290000003b0000000000000000000000280000000000000029000000050000000002020100000000fe8000000000000000000000000000bb1800000000000000290000000400000002ab"], 0xb4}, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x9)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8983, &(0x7f0000000000)={0x6, 'pim6reg0\x00', {0x2}, 0x108})
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000180)={0x0, 'veth0_vlan\x00', {0x804}, 0x5})
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000140)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x31, 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000040)=0xfff)
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000080)=@x86={0x40, 0x1, 0xc, 0x0, 0xfffffffb, 0x8, 0x6, 0x1, 0xf, 0x6, 0x9, 0x2, 0x0, 0x0, 0x7, 0x0, 0xff, 0xfd, 0x2})
syz_clone(0x829000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

1.034572264s ago: executing program 4 (id=2661):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000002c0)={0x3f})
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000001740)={'syz1\x00', {}, 0x0, [0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf51, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7fffffff], [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x802, 0x0, 0x2, 0x0, 0xfaea, 0x100, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7]}, 0x45c)

808.18378ms ago: executing program 4 (id=2662):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0xe88, 0x10000, 0x4, 0xffffffffffffffff, 0xcead591d4d31e499})

703.541872ms ago: executing program 4 (id=2663):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x4)

455.326849ms ago: executing program 4 (id=2664):
r0 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000040)="08001efbb009006e", 0x8}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="140000000000000000000000010000009904"], 0xb8}, 0x804)

256.059454ms ago: executing program 4 (id=2665):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x3010050, &(0x7f0000000600)=ANY=[], 0x41, 0x14fe, &(0x7f0000000700)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
setresuid(0x0, 0xee00, 0x0)
utimensat(r0, 0x0, &(0x7f0000000580)={{0x77359400}, {0x77359400}}, 0x0)

59.233359ms ago: executing program 4 (id=2666):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
socket$unix(0x1, 0x5, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000)
fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8})
fcntl$lock(r1, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9})

0s ago: executing program 3 (id=2667):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@empty, @in=@remote, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x1d}, {@in=@local, 0xfe, 0x32}, @in6=@empty, {0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x1, 0x9, 0x7fffffff, 0x543}, {0x4, 0x7fffffffffffffff, 0xfffffffffffffffc, 0xebe2}, {0x2, 0x1}, 0x70bd2c, 0x0, 0x2, 0x4, 0x0, 0x58}, [@algo_aead={0x4c, 0x12, {{'rfc7539(ctr(aes),sha224)\x00'}, 0x20, 0x60}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x80}, 0x0)

kernel console output (not intermixed with test programs):

-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f216759e019 code=0x7ffc0000
[  474.493396][ T9043] vhci_hcd: connection reset by peer
[  474.518768][ T1101] vhci_hcd: stop threads
[  474.561692][ T1101] vhci_hcd: release socket
[  474.600913][ T1101] vhci_hcd: disconnect device
[  474.617854][   T28] audit: type=1326 audit(1785530134.611:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9056 comm="syz.2.903" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f216759e019 code=0x7ffc0000
[  477.946226][   T28] audit: type=1326 audit(1785530134.611:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9056 comm="syz.2.903" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f216759e019 code=0x7ffc0000
[  479.476225][    T8] usb 42-1: device descriptor read/8, error -110
[  481.105304][   T28] audit: type=1326 audit(1785530134.611:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9056 comm="syz.2.903" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f216759e019 code=0x7ffc0000
[  481.338736][ T9096] netlink: 12 bytes leftover after parsing attributes in process `syz.3.913'.
[  481.367794][   T28] audit: type=1326 audit(1785530134.611:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9056 comm="syz.2.903" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f216759e019 code=0x7ffc0000
[  481.413491][ T9096] netlink: 12 bytes leftover after parsing attributes in process `syz.3.913'.
[  481.469762][ T9096] netlink: 16 bytes leftover after parsing attributes in process `syz.3.913'.
[  481.501491][    T8] usb usb42-port1: attempt power cycle
[  481.548877][   T28] audit: type=1326 audit(1785530134.611:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9056 comm="syz.2.903" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f216759e019 code=0x7ffc0000
[  481.814021][   T28] audit: type=1326 audit(1785530134.611:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9056 comm="syz.2.903" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f216759e019 code=0x7ffc0000
[  482.111514][   T28] audit: type=1326 audit(1785530134.611:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9056 comm="syz.2.903" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f216759e019 code=0x7ffc0000
[  483.348146][    T8] usb usb42-port1: unable to enumerate USB device
[  483.486182][ T9110] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8)
[  483.492747][ T9110] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  483.500581][ T9110] vhci_hcd vhci_hcd.0: Device attached
[  483.629567][   T28] audit: type=1326 audit(1785530134.611:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9056 comm="syz.2.903" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f216759e019 code=0x7ffc0000
[  485.073169][   T28] audit: type=1326 audit(1785530134.611:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9056 comm="syz.2.903" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f216759e019 code=0x7ffc0000
[  485.117781][  T175] usb 38-1: SetAddress Request (13) to port 0
[  485.176676][  T175] usb 38-1: new SuperSpeed USB device number 13 using vhci_hcd
[  485.214264][ T9111] vhci_hcd: connection closed
[  485.218315][   T12] vhci_hcd: stop threads
[  485.294775][   T28] audit: type=1326 audit(1785530134.831:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9056 comm="syz.2.903" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f216759e019 code=0x7ffc0000
[  485.319593][   T12] vhci_hcd: release socket
[  485.324034][   T12] vhci_hcd: disconnect device
[  485.523022][   T28] audit: type=1326 audit(1785530134.831:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9056 comm="syz.2.903" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f216759e019 code=0x7ffc0000
[  485.679055][   T28] audit: type=1326 audit(1785530134.831:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9056 comm="syz.2.903" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f216759e019 code=0x7ffc0000
[  487.440619][ T9176] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7)
[  487.447163][ T9176] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  487.455003][ T9176] vhci_hcd vhci_hcd.0: Device attached
[  487.644841][ T9187] netlink: 8 bytes leftover after parsing attributes in process `syz.1.935'.
[  487.705275][ T9187] netlink: 12 bytes leftover after parsing attributes in process `syz.1.935'.
[  487.766397][    T9] usb 42-1: SetAddress Request (10) to port 0
[  487.793459][    T9] usb 42-1: new SuperSpeed USB device number 10 using vhci_hcd
[  489.549273][ T9178] vhci_hcd: connection reset by peer
[  489.688927][ T1080] vhci_hcd: stop threads
[  489.734344][ T1080] vhci_hcd: release socket
[  489.779544][ T1080] vhci_hcd: disconnect device
[  490.590290][ T9204] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  490.617280][ T9204] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  490.641202][  T175] usb 38-1: device descriptor read/8, error -110
[  490.916352][ T9214] capability: warning: `syz.4.943' uses 32-bit capabilities (legacy support in use)
[  490.993825][ T9214] program syz.4.943 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  491.930354][ T9216] input: syz1 as /devices/virtual/input/input37
[  491.936762][ T9216] input: failed to attach handler leds to device input37, error: -6
[  491.950135][  T175] usb usb38-port1: attempt power cycle
[  492.266568][ T9221] netlink: 8 bytes leftover after parsing attributes in process `syz.4.946'.
[  492.637647][  T175] usb usb38-port1: unable to enumerate USB device
[  492.916336][    T9] usb 42-1: device descriptor read/8, error -110
[  493.398635][    T9] usb usb42-port1: attempt power cycle
[  495.176973][    T9] usb usb42-port1: unable to enumerate USB device
[  496.120486][ T9242] input: syz1 as /devices/virtual/input/input38
[  496.126857][ T9242] input: failed to attach handler leds to device input38, error: -6
[  499.287412][ T9271] input: syz1 as /devices/virtual/input/input39
[  499.293735][ T9271] input: failed to attach handler leds to device input39, error: -6
[  500.117475][   T28] audit: type=1800 audit(1785530160.581:27): pid=9283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.969" name="file0" dev="overlay" ino=1401 res=0 errno=0
[  500.138075][    C0] vkms_vblank_simulate: vblank timer overrun
[  502.415372][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  502.422764][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  503.558003][ T9301] input: syz1 as /devices/virtual/input/input40
[  503.564309][ T9301] input: failed to attach handler leds to device input40, error: -6
[  506.641621][ T9333] Bluetooth: MGMT ver 1.22
[  513.139989][ T9401] binder: BINDER_SET_CONTEXT_MGR already set
[  513.180999][ T9401] binder: 9400:9401 ioctl 4018620d 200000000040 returned -16
[  520.380143][ T9468] vlan0: entered promiscuous mode
[  523.737331][  T175] IPVS: starting estimator thread 0...
[  523.760459][ T9494] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  523.848423][ T9500] IPVS: using max 35 ests per chain, 84000 per kthread
[  524.206131][  T175] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  525.696361][  T175] usb 5-1: Using ep0 maxpacket: 8
[  525.730459][  T175] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[  525.771857][  T175] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  525.876776][  T175] usb 5-1: Product: syz
[  525.880998][  T175] usb 5-1: Manufacturer: syz
[  525.885615][  T175] usb 5-1: SerialNumber: syz
[  525.979490][  T175] usb 5-1: config 0 descriptor??
[  526.012094][  T175] gspca_main: sq930x-2.14.0 probing 2770:930c
[  526.561308][  T175] gspca_sq930x: ucbus_write failed -71
[  526.946120][  T175] gspca_sq930x: Sensor ov9630 not yet treated
[  528.236275][  T175] sq930x: probe of 5-1:0.0 failed with error -22
[  528.299638][  T175] usb 5-1: USB disconnect, device number 2
[  530.109626][ T9560] loop5: detected capacity change from 0 to 7
[  530.141871][ T9560] Dev loop5: unable to read RDB block 7
[  530.167062][ T9560]  loop5: unable to read partition table
[  530.203449][ T9560] loop5: partition table beyond EOD, truncated
[  530.226190][    T9] usb 4-1: new full-speed USB device number 9 using dummy_hcd
[  530.247533][ T9560] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  530.460331][    T9] usb 4-1: not running at top speed; connect to a high speed hub
[  532.103121][    T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  532.162652][    T9] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00
[  532.185948][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  533.517560][    T9] usb 4-1: can't set config #1, error -71
[  533.630621][    T9] usb 4-1: USB disconnect, device number 9
[  539.750714][ T9618] overlayfs: overlapping lowerdir path
[  547.060305][ T9677] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1112'.
[  551.792511][ T9739] binder: BINDER_SET_CONTEXT_MGR already set
[  551.829095][ T9739] binder: 9738:9739 ioctl 4018620d 200000004a80 returned -16
[  555.118303][ T9773] program syz.2.1151 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  557.550971][ T9816] syzkaller0: entered promiscuous mode
[  557.571913][ T9816] syzkaller0: entered allmulticast mode
[  562.468691][ T9861] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1187'.
[  562.524256][ T9861] bond0: option lp_interval: invalid value (0)
[  562.552536][ T9861] bond0: option lp_interval: allowed values 1 - 2147483647
[  563.159768][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  563.169044][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  564.175656][ T9875] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3223532450 (12894129800 ns) > initial count (12015864336 ns). Using initial count to start timer.
[  564.753498][ T9888] binder: BINDER_SET_CONTEXT_MGR already set
[  564.787468][ T9888] binder: 9885:9888 ioctl 4018620d 200000004a80 returned -16
[  566.086564][ T9898] syzkaller0: entered promiscuous mode
[  566.115542][ T9898] syzkaller0: entered allmulticast mode
[  566.174305][ T9898] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 65487
[  567.661861][ T9918] binder: BINDER_SET_CONTEXT_MGR already set
[  567.710091][ T9918] binder: 9917:9918 ioctl 4018620d 200000004a80 returned -16
[  567.899091][ T9927] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1210'.
[  568.472176][ T9943] loop5: detected capacity change from 0 to 7
[  568.722495][ T9943] Dev loop5: unable to read RDB block 7
[  568.747161][ T9943]  loop5: AHDI p1 p2 p3
[  568.770054][ T9943] loop5: partition table partially beyond EOD, truncated
[  568.799569][ T9943] loop5: p1 start 1818582900 is beyond EOD, truncated
[  568.832839][ T9943] loop5: p3 start 335544320 is beyond EOD, truncated
[  569.203593][ T9954] binder: BINDER_SET_CONTEXT_MGR already set
[  569.349813][ T9954] binder: 9953:9954 ioctl 4018620d 200000004a80 returned -16
[  569.606293][ T9960] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1221'.
[  569.903114][ T9967] kvm: requested 136609 ns i8254 timer period limited to 200000 ns
[  569.942768][ T9967] kvm: requested 67885 ns i8254 timer period limited to 200000 ns
[  570.009678][ T9967] kvm: requested 134933 ns i8254 timer period limited to 200000 ns
[  570.150372][ T9967] kvm: requested 128228 ns i8254 timer period limited to 200000 ns
[  570.182180][ T9967] kvm: requested 111466 ns i8254 timer period limited to 200000 ns
[  570.250136][ T9967] kvm: requested 128228 ns i8254 timer period limited to 200000 ns
[  571.618374][T10003] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1234'.
[  572.071127][T10009] loop3: detected capacity change from 0 to 8192
[  572.289201][T10020] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1239'.
[  572.492646][T10009] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  573.349071][T10040] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1247'.
[  573.775755][T10048] binder: BINDER_SET_CONTEXT_MGR already set
[  573.878864][T10048] binder: 10046:10048 ioctl 4018620d 200000000240 returned -16
[  574.128309][T10055] loop1: detected capacity change from 0 to 16
[  574.205842][T10055] erofs: (device loop1): mounted with root inode @ nid 36.
[  574.359028][T10055] erofs: (device loop1): z_erofs_readahead: readahead error at folio 79 @ nid 36
[  574.432387][T10055] erofs: (device loop1): z_erofs_readahead: readahead error at folio 78 @ nid 36
[  574.526434][T10055] erofs: (device loop1): z_erofs_readahead: readahead error at folio 72 @ nid 36
[  574.585215][T10055] erofs: (device loop1): z_erofs_readahead: readahead error at folio 71 @ nid 36
[  574.636192][T10055] erofs: (device loop1): z_erofs_readahead: readahead error at folio 70 @ nid 36
[  574.702570][T10055] erofs: (device loop1): z_erofs_readahead: readahead error at folio 63 @ nid 36
[  574.764242][T10055] erofs: (device loop1): z_erofs_readahead: readahead error at folio 61 @ nid 36
[  574.810168][T10055] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1024 @ lcn 58 of nid 36
[  574.868058][T10055] erofs: (device loop1): z_erofs_readahead: readahead error at folio 59 @ nid 36
[  574.948512][T10055] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1024 @ lcn 58 of nid 36
[  575.046888][T10055] erofs: (device loop1): z_erofs_readahead: readahead error at folio 58 @ nid 36
[  575.109576][T10055] erofs: (device loop1): z_erofs_readahead: readahead error at folio 56 @ nid 36
[  575.160040][T10055] erofs: (device loop1): z_erofs_readahead: readahead error at folio 54 @ nid 36
[  575.315237][T10074] PM: suspend entry (deep)
[  575.321413][T10055] erofs: (device loop1): z_erofs_readahead: readahead error at folio 51 @ nid 36
[  575.345025][T10055] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36
[  575.570700][T10077] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1263'.
[  575.640410][T10055] erofs: (device loop1): z_erofs_readahead: readahead error at folio 47 @ nid 36
[  575.695013][T10055] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36
[  575.733134][T10077] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1263'.
[  575.768346][T10055] erofs: (device loop1): z_erofs_readahead: readahead error at folio 46 @ nid 36
[  575.804029][T10074] Filesystems sync: 0.217 seconds
[  575.817905][T10055] erofs: (device loop1): z_erofs_readahead: readahead error at folio 45 @ nid 36
[  575.866237][T10055] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36
[  575.928378][T10055] erofs: (device loop1): z_erofs_readahead: readahead error at folio 43 @ nid 36
[  575.979823][T10077] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1263'.
[  575.991921][T10055] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36
[  576.100641][T10074] Freezing user space processes
[  576.124671][T10055] erofs: (device loop1): z_erofs_readahead: readahead error at folio 42 @ nid 36
[  576.151540][T10055] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36
[  576.176213][T10055] erofs: (device loop1): z_erofs_readahead: readahead error at folio 41 @ nid 36
[  576.200544][T10055] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36
[  576.226204][T10055] erofs: (device loop1): z_erofs_readahead: readahead error at folio 40 @ nid 36
[  576.235429][T10055] erofs: (device loop1): z_erofs_readahead: readahead error at folio 39 @ nid 36
[  576.270807][T10055] erofs: (device loop1): z_erofs_readahead: readahead error at folio 38 @ nid 36
[  576.304496][T10055] erofs: (device loop1): z_erofs_readahead: readahead error at folio 36 @ nid 36
[  576.337732][T10055] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1468 @ lcn 31 of nid 36
[  576.376202][T10055] erofs: (device loop1): z_erofs_readahead: readahead error at folio 31 @ nid 36
[  576.396454][T10055] erofs: (device loop1): z_erofs_readahead: readahead error at folio 26 @ nid 36
[  576.417791][T10055] erofs: (device loop1): z_erofs_readahead: readahead error at folio 24 @ nid 36
[  576.448859][T10055] erofs: (device loop1): z_erofs_readahead: readahead error at folio 19 @ nid 36
[  576.476954][T10055] erofs: (device loop1): z_erofs_readahead: readahead error at folio 13 @ nid 36
[  576.496528][T10055] erofs: (device loop1): z_erofs_readahead: readahead error at folio 8 @ nid 36
[  576.505718][T10055] erofs: (device loop1): z_erofs_readahead: readahead error at folio 6 @ nid 36
[  576.525688][T10055] erofs: (device loop1): z_erofs_readahead: readahead error at folio 4 @ nid 36
[  576.539922][T10055] erofs: (device loop1): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36
[  576.552153][T10055] erofs: (device loop1): z_erofs_readahead: readahead error at folio 0 @ nid 36
[  576.565746][T10055] syz.1.1254: attempt to access beyond end of device
[  576.565746][T10055] loop1: rw=524288, sector=296, nr_sectors = 16 limit=16
[  576.582971][T10055] syz.1.1254: attempt to access beyond end of device
[  576.582971][T10055] loop1: rw=524288, sector=1049264, nr_sectors = 16 limit=16
[  576.601353][T10055] syz.1.1254: attempt to access beyond end of device
[  576.601353][T10055] loop1: rw=524288, sector=720, nr_sectors = 128 limit=16
[  576.619501][T10055] syz.1.1254: attempt to access beyond end of device
[  576.619501][T10055] loop1: rw=524288, sector=13478624080, nr_sectors = 24 limit=16
[  576.634842][T10055] syz.1.1254: attempt to access beyond end of device
[  576.634842][T10055] loop1: rw=524288, sector=13478624032, nr_sectors = 48 limit=16
[  576.654104][T10055] syz.1.1254: attempt to access beyond end of device
[  576.654104][T10055] loop1: rw=524288, sector=24, nr_sectors = 72 limit=16
[  576.674154][T10055] syz.1.1254: attempt to access beyond end of device
[  576.674154][T10055] loop1: rw=524288, sector=221968, nr_sectors = 8 limit=16
[  576.693711][T10055] syz.1.1254: attempt to access beyond end of device
[  576.693711][T10055] loop1: rw=524288, sector=14552337248, nr_sectors = 16 limit=16
[  576.711194][T10055] syz.1.1254: attempt to access beyond end of device
[  576.711194][T10055] loop1: rw=524288, sector=14546590680, nr_sectors = 16 limit=16
[  576.728842][T10055] syz.1.1254: attempt to access beyond end of device
[  576.728842][T10055] loop1: rw=524288, sector=8, nr_sectors = 16 limit=16
[  576.747474][T10074] Freezing user space processes completed (elapsed 0.599 seconds)
[  576.755562][T10074] OOM killer disabled.
[  576.764744][T10074] Freezing remaining freezable tasks
[  576.774340][T10074] Freezing remaining freezable tasks completed (elapsed 0.003 seconds)
[  576.788790][T10074] printk: Suspending console(s) (use no_console_suspend to debug)
[  576.937040][T10074] vhci_hcd vhci_hcd.14: suspend vhci_hcd
[  576.978496][T10074] vhci_hcd vhci_hcd.13: suspend vhci_hcd
[  577.017370][T10074] vhci_hcd vhci_hcd.12: suspend vhci_hcd
[  577.058165][T10074] vhci_hcd vhci_hcd.11: suspend vhci_hcd
[  577.097781][T10074] vhci_hcd vhci_hcd.10: suspend vhci_hcd
[  577.137156][T10074] vhci_hcd vhci_hcd.9: suspend vhci_hcd
[  577.176881][T10074] vhci_hcd vhci_hcd.8: suspend vhci_hcd
[  577.218044][T10074] vhci_hcd vhci_hcd.7: suspend vhci_hcd
[  577.257018][T10074] vhci_hcd vhci_hcd.6: suspend vhci_hcd
[  577.296863][T10074] vhci_hcd vhci_hcd.5: suspend vhci_hcd
[  577.337243][T10074] vhci_hcd vhci_hcd.4: We have 1 active connection. Do not suspend.
[  577.337262][T10074] vhci_hcd vhci_hcd.4: PM: dpm_run_callback(): platform_pm_suspend+0x0/0x100 returns -16
[  577.337405][T10074] vhci_hcd vhci_hcd.4: PM: failed to suspend: error -16
[  577.337526][T10074] PM: Some devices failed to suspend, or early wake event detected
[  577.592112][T10074] OOM killer enabled.
[  577.596243][T10074] Restarting tasks ... done.
[  577.686853][T10074] random: crng reseeded on system resumption
[  577.731139][T10074] PM: suspend exit
[  578.070932][T10203] syzkaller1: entered promiscuous mode
[  578.104227][T10203] syzkaller1: entered allmulticast mode
[  578.197395][    T9] usb usb42-port1: attempt power cycle
[  578.236587][ T5780] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  578.353875][T10211] FAULT_INJECTION: forcing a failure.
[  578.353875][T10211] name fail_futex, interval 1, probability 0, space 0, times 1
[  578.419375][T10211] CPU: 0 PID: 10211 Comm: syz.4.1274 Not tainted syzkaller #0
[  578.426917][T10211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  578.436998][T10211] Call Trace:
[  578.440333][T10211]  <TASK>
[  578.443347][T10211]  dump_stack_lvl+0x18c/0x250
[  578.448124][T10211]  ? show_regs_print_info+0x20/0x20
[  578.453361][T10211]  ? load_image+0x420/0x420
[  578.457879][T10211]  should_fail_ex+0x394/0x4c0
[  578.462664][T10211]  get_futex_key+0x136/0x1030
[  578.467369][T10211]  ? verify_lock_unused+0x140/0x140
[  578.472570][T10211]  ? futex_setup_timer+0xc0/0xc0
[  578.477496][T10211]  futex_wait_setup+0xbc/0x270
[  578.482248][T10211]  ? futex_wait_multiple+0x920/0x920
[  578.487523][T10211]  futex_wait+0x1bc/0x5c0
[  578.491853][T10211]  ? futex_setup_timer+0xc0/0xc0
[  578.496781][T10211]  ? futex_wait_setup+0x270/0x270
[  578.501815][T10211]  ? file_end_write+0x159/0x250
[  578.506767][T10211]  ? vfs_write+0x5de/0x9a0
[  578.511244][T10211]  do_futex+0x2ff/0x3e0
[  578.515404][T10211]  ? __ia32_sys_get_robust_list+0x110/0x110
[  578.521294][T10211]  __se_sys_futex+0x3a9/0x440
[  578.525974][T10211]  ? __x64_sys_futex+0xf0/0xf0
[  578.530729][T10211]  ? __x64_sys_futex+0x21/0xf0
[  578.535481][T10211]  do_syscall_64+0x55/0xb0
[  578.539885][T10211]  ? clear_bhb_loop+0x40/0x90
[  578.544650][T10211]  ? clear_bhb_loop+0x40/0x90
[  578.549319][T10211]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  578.555300][T10211] RIP: 0033:0x7fbf40b9e019
[  578.559823][T10211] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  578.579498][T10211] RSP: 002b:00007fbf41af20e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  578.587980][T10211] RAX: ffffffffffffffda RBX: 00007fbf40e25fa8 RCX: 00007fbf40b9e019
[  578.595965][T10211] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fbf40e25fa8
[  578.603924][T10211] RBP: 00007fbf40e25fa0 R08: 0000000000000000 R09: 0000000000000000
[  578.611884][T10211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  578.619842][T10211] R13: 00007fbf40e26038 R14: 00007ffd47c20ca0 R15: 00007ffd47c20d88
[  578.627836][T10211]  </TASK>
[  578.735059][ T5780] usb 4-1: unable to get BOS descriptor or descriptor too short
[  578.806784][ T5780] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  578.839150][ T5780] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  578.890359][ T5780] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  578.917439][ T5780] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  578.968821][ T5780] usb 4-1: Product: syz
[  578.977302][    T9] usb usb42-port1: unable to enumerate USB device
[  579.001410][ T5780] usb 4-1: Manufacturer: syz
[  579.021961][ T5780] usb 4-1: SerialNumber: syz
[  579.063532][ T5780] usb 4-1: selecting invalid altsetting 1
[  579.094997][ T5780] usb 4-1: unit 6 not found!
[  580.387525][ T5780] usb 4-1: 2:0: cannot get min/max values for control 1 (id 2)
[  580.563560][ T5780] snd-usb-audio: probe of 4-1:1.0 failed with error -22
[  580.628843][ T5780] usb 4-1: USB disconnect, device number 10
[  580.667274][ T8239] udevd[8239]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  581.146225][  T175] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  581.346173][  T175] usb 5-1: Using ep0 maxpacket: 32
[  581.365850][  T175] usb 5-1: config 0 has an invalid interface number: 184 but max is 0
[  581.390436][  T175] usb 5-1: config 0 has no interface number 0
[  581.428162][  T175] usb 5-1: config 0 interface 184 has no altsetting 0
[  581.464908][  T175] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  581.503344][  T175] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  581.537959][  T175] usb 5-1: Product: syz
[  581.549786][  T175] usb 5-1: Manufacturer: syz
[  581.561007][  T175] usb 5-1: SerialNumber: syz
[  581.584959][  T175] usb 5-1: config 0 descriptor??
[  582.870168][  T175] smsc75xx v1.0.0
[  583.473934][  T175] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[  583.516428][  T175] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32
[  583.559174][  T175] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[  583.597045][  T175] smsc75xx: probe of 5-1:0.184 failed with error -32
[  583.642959][  T175] usb 5-1: USB disconnect, device number 3
[  583.649098][ T5780] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  583.906192][ T5780] usb 4-1: Using ep0 maxpacket: 16
[  583.920487][ T5780] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  584.165240][ T5780] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  584.190875][ T5780] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  584.210542][ T5780] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  584.231403][ T5780] usb 4-1: Product: syz
[  584.243823][ T5780] usb 4-1: Manufacturer: syz
[  584.268981][ T5780] usb 4-1: SerialNumber: syz
[  584.497096][ T5780] usb 4-1: 0:2 : does not exist
[  584.526797][ T5780] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[  584.571025][ T5780] usb 4-1: USB disconnect, device number 11
[  584.718983][ T8239] udevd[8239]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  584.786355][T10287] netlink: 'syz.1.1305': attribute type 12 has an invalid length.
[  586.619581][T10310] input: syz1 as /devices/virtual/input/input41
[  586.625903][T10310] input: failed to attach handler leds to device input41, error: -6
[  589.344730][T10364] syzkaller1: entered promiscuous mode
[  589.481751][T10364] syzkaller1: entered allmulticast mode
[  590.155424][T10384] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  590.678003][T10399] fuse: Bad value for 'fd'
[  591.275858][T10418] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  591.343469][T10418] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  593.236222][  T175] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  593.466220][  T175] usb 4-1: Using ep0 maxpacket: 32
[  593.506416][  T175] usb 4-1: config 0 has an invalid interface number: 184 but max is 0
[  593.514661][  T175] usb 4-1: config 0 has no interface number 0
[  593.573927][  T175] usb 4-1: config 0 interface 184 has no altsetting 0
[  593.630668][  T175] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  593.696862][  T175] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  593.760455][  T175] usb 4-1: Product: syz
[  593.764687][  T175] usb 4-1: Manufacturer: syz
[  593.809231][  T175] usb 4-1: SerialNumber: syz
[  593.858672][  T175] usb 4-1: config 0 descriptor??
[  593.896484][  T175] smsc75xx v1.0.0
[  594.532183][T10470] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  594.568435][T10470] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  596.249552][T10481] input: syz1 as /devices/virtual/input/input42
[  596.255867][T10481] input: failed to attach handler leds to device input42, error: -6
[  596.488341][  T175] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71
[  596.584681][  T175] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD
[  596.657693][  T175] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  596.759976][  T175] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  596.827195][  T175] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  596.904708][  T175] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  596.993679][  T175] smsc75xx: probe of 4-1:0.184 failed with error -71
[  597.059749][  T175] usb 4-1: USB disconnect, device number 12
[  598.730830][T10545] program syz.1.1381 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  598.766515][ T5780] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  598.916232][  T175] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  598.966193][ T5780] usb 4-1: Using ep0 maxpacket: 32
[  598.982815][ T5780] usb 4-1: config 0 has an invalid interface number: 184 but max is 0
[  599.007605][ T5780] usb 4-1: config 0 has no interface number 0
[  599.035491][ T5780] usb 4-1: config 0 interface 184 has no altsetting 0
[  599.073001][ T5780] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  599.108821][ T5780] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  599.140438][ T5780] usb 4-1: Product: syz
[  599.159224][ T5780] usb 4-1: Manufacturer: syz
[  599.169365][  T175] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  599.189791][ T5780] usb 4-1: SerialNumber: syz
[  599.204592][  T175] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  599.223488][ T5780] usb 4-1: config 0 descriptor??
[  599.251903][  T175] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  599.264768][ T5780] smsc75xx v1.0.0
[  599.301667][  T175] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  599.352056][  T175] usb 5-1: config 0 descriptor??
[  599.595221][  T175] usb 5-1: USB disconnect, device number 4
[  600.769273][ T5780] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  600.827826][ T5780] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  601.113234][T10581] kvm: kvm [10580]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x800100000080
[  601.186797][T10581] kvm: kvm [10580]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80
[  601.247928][T10581] kvm: kvm [10580]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80
[  601.309477][T10581] kvm: kvm [10580]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80
[  601.368535][T10581] kvm: kvm [10580]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80
[  601.433401][T10581] kvm: kvm [10580]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80
[  601.501853][T10581] kvm: kvm [10580]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80
[  601.564439][T10581] kvm: kvm [10580]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80
[  601.588234][T10594] overlayfs: failed to clone upperpath
[  601.621529][T10581] kvm: kvm [10580]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80
[  601.669934][ T5780] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71
[  601.697955][T10581] kvm: kvm [10580]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80
[  601.726082][ T5780] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71
[  601.763638][ T5780] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  601.808507][ T5780] smsc75xx: probe of 4-1:0.184 failed with error -71
[  601.902428][ T5780] usb 4-1: USB disconnect, device number 13
[  602.312495][T10606] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000
[  602.346638][T10611] program syz.3.1411 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  604.315314][T10624] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6)
[  604.321854][T10624] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  604.423375][T10624] vhci_hcd vhci_hcd.0: Device attached
[  604.457660][T10625] vhci_hcd: connection closed
[  604.457957][T10163] vhci_hcd: stop threads
[  604.514231][T10163] vhci_hcd: release socket
[  604.544588][T10163] vhci_hcd: disconnect device
[  605.153263][T10662] program syz.1.1434 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  605.788175][T10685] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[  605.831583][T10685] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  606.050365][T10696] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1450'.
[  606.420006][T10710] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  607.057967][  T175] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  607.274518][  T175] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  607.312416][  T175] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  607.352223][  T175] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  607.404817][  T175] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  607.440386][  T175] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  607.472661][  T175] usb 2-1: Product: syz
[  607.491804][  T175] usb 2-1: Manufacturer: syz
[  607.510236][  T175] usb 2-1: SerialNumber: syz
[  607.742285][  T175] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  608.885132][ T5780] usb 2-1: USB disconnect, device number 5
[  608.934246][ T5780] usblp0: removed
[  613.596300][  T175] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  613.796220][  T175] usb 2-1: Using ep0 maxpacket: 8
[  613.812031][  T175] usb 2-1: config 0 has an invalid interface number: 31 but max is 0
[  613.830322][  T175] usb 2-1: config 0 has no interface number 0
[  613.845699][  T175] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  613.865725][  T175] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  613.908807][  T175] usb 2-1: Product: syz
[  613.923285][  T175] usb 2-1: Manufacturer: syz
[  613.940704][  T175] usb 2-1: SerialNumber: syz
[  613.963417][  T175] usb 2-1: config 0 descriptor??
[  614.433386][  T175] usb 2-1: USB disconnect, device number 6
[  614.971613][T10862] overlayfs: failed to clone upperpath
[  616.901899][T10875] overlayfs: failed to clone upperpath
[  617.524697][T10891] overlayfs: failed to clone upperpath
[  621.253822][T10946] overlayfs: failed to clone upperpath
[  624.622608][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  624.631093][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  624.698287][T10986] overlayfs: failed to clone upperpath
[  626.111299][T11002] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1579'.
[  626.177038][T11002] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1579'.
[  626.431824][T11008] overlayfs: failed to clone upperpath
[  626.761751][T11019] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1587'.
[  630.192229][T11057] netlink: 'syz.2.1604': attribute type 4 has an invalid length.
[  630.905757][T11084] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1616'.
[  632.390057][T11141] tunl0: entered promiscuous mode
[  632.459126][T11141] netlink: 'syz.4.1638': attribute type 4 has an invalid length.
[  632.507387][T11141] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1638'.
[  633.062877][T11139] loop1: detected capacity change from 0 to 32768
[  633.120602][T11139] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1640 (11139)
[  633.293736][T11139] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  633.350299][T11139] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  633.398855][T11139] BTRFS info (device loop1): setting nodatacow, compression disabled
[  633.437838][T11139] BTRFS info (device loop1): turning on flush-on-commit
[  633.444879][T11139] BTRFS info (device loop1): trying to use backup root at mount time
[  633.556297][T11139] BTRFS info (device loop1): max_inline at 0
[  633.562342][T11139] BTRFS info (device loop1): using free space tree
[  633.768586][T10142] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  633.857743][T11139] BTRFS error (device loop1): failed to load root extent
[  633.879231][T11139] BTRFS warning (device loop1): try to load backup roots slot 1
[  633.956932][T10142] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  634.027416][T11183] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1652'.
[  634.052328][T11139] BTRFS warning (device loop1): couldn't read tree root
[  634.086113][T11139] BTRFS warning (device loop1): try to load backup roots slot 2
[  634.144626][T10144] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  634.207456][T11139] BTRFS warning (device loop1): couldn't read tree root
[  634.251990][T11139] BTRFS warning (device loop1): try to load backup roots slot 3
[  634.342404][T11139] BTRFS info (device loop1): enabling ssd optimizations
[  634.396372][T11139] BTRFS info (device loop1): auto enabling async discard
[  634.425438][T11139] BTRFS info (device loop1): rebuilding free space tree
[  634.622101][T11139] BTRFS info (device loop1): checking UUID tree
[  635.087115][T11193] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1653'.
[  635.197323][T11164] overlayfs: failed to clone upperpath
[  635.214947][T11193] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1653'.
[  636.264569][ T5777] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  638.047532][T11225] bridge0: port 3(syz_tun) entered blocking state
[  638.086125][T11225] bridge0: port 3(syz_tun) entered disabled state
[  638.143102][T11225] syz_tun: entered allmulticast mode
[  638.182312][T11225] syz_tun: entered promiscuous mode
[  638.208011][T11225] bridge0: port 3(syz_tun) entered blocking state
[  638.214825][T11225] bridge0: port 3(syz_tun) entered forwarding state
[  639.871420][T11233] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6)
[  639.877956][T11233] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  639.992319][T11233] vhci_hcd vhci_hcd.0: Device attached
[  640.024201][T11234] vhci_hcd: connection closed
[  640.024494][T10142] vhci_hcd: stop threads
[  640.071968][T10142] vhci_hcd: release socket
[  640.092211][T10142] vhci_hcd: disconnect device
[  641.690476][T11259] overlayfs: failed to clone upperpath
[  643.603736][T11263] loop1: detected capacity change from 0 to 32768
[  643.666206][T11263] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1679 (11263)
[  643.761629][T11263] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  643.843038][T11263] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  643.906904][T11263] BTRFS info (device loop1): force clearing of disk cache
[  643.968602][T11263] BTRFS info (device loop1): enabling ssd optimizations
[  643.975633][T11263] BTRFS info (device loop1): using spread ssd allocation scheme
[  644.036267][T11263] BTRFS info (device loop1): metadata ratio 0
[  644.078818][T11263] BTRFS info (device loop1): using free space tree
[  644.298992][T11263] BTRFS info (device loop1): auto enabling async discard
[  644.373034][T11263] BTRFS info (device loop1): rebuilding free space tree
[  644.928716][T10142] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared)
[  645.104805][ T5777] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  646.530741][T11319] loop1: detected capacity change from 0 to 32768
[  646.578017][T11319] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.1694 (11319)
[  646.689949][T11319] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  646.761920][T11319] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  646.790382][T11319] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  646.835292][T11319] BTRFS info (device loop1): use zstd compression, level 3
[  646.874494][T11319] BTRFS info (device loop1): using free space tree
[  646.986630][T11319] BTRFS info (device loop1): enabling ssd optimizations
[  647.024244][T11319] BTRFS info (device loop1): auto enabling async discard
[  647.135526][   T28] audit: type=1800 audit(1785530307.601:28): pid=11319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1694" name="bus" dev="loop1" ino=263 res=0 errno=0
[  647.237871][   T28] audit: type=1800 audit(1785530307.631:29): pid=11319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1694" name="bus" dev="loop1" ino=263 res=0 errno=0
[  647.365889][   T28] audit: type=1800 audit(1785530307.831:30): pid=11319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1694" name="file1" dev="loop1" ino=260 res=0 errno=0
[  648.117290][    T9] usb 2-1: new full-speed USB device number 7 using dummy_hcd
[  648.537466][T11310] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1692'.
[  649.891024][T11380] overlayfs: failed to resolve './file0': -2
[  650.706256][    T9] usb 2-1: unable to get BOS descriptor or descriptor too short
[  650.758263][    T9] usb 2-1: no configurations
[  650.762915][    T9] usb 2-1: can't read configurations, error -22
[  651.342677][ T5777] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  651.701281][T11400] overlayfs: failed to resolve './file0': -2
[  652.496108][ T5839] usb 2-1: new full-speed USB device number 9 using dummy_hcd
[  652.705882][ T5839] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  652.744889][ T5839] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  652.815689][ T5839] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[  652.845947][ T5839] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  652.887934][ T5839] usb 2-1: SerialNumber: syz
[  652.925184][ T5839] usb 2-1: 0:2 : does not exist
[  653.008844][T11422] overlayfs: failed to resolve './file0': -2
[  653.409121][ T5839] usb 2-1: USB disconnect, device number 9
[  654.479045][T11437] overlayfs: failed to resolve './file0': -2
[  654.909789][T11449] overlayfs: failed to resolve './file0': -2
[  659.468409][T11494] ubi0: attaching mtd0
[  659.475602][T11494] ubi0: scanning is finished
[  659.559712][T11494] ubi0: empty MTD device detected
[  659.770136][T11494] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  659.836367][T11494] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  659.843714][T11494] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  659.917950][T11494] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  659.925390][T11494] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  660.007918][T11494] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  660.049053][T11494] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2251616230
[  660.120215][T11494] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  660.203859][T11495] ubi0: background thread "ubi_bgt0d" started, PID 11495
[  662.450563][T11515] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1760'.
[  663.286209][T11507] loop1: detected capacity change from 0 to 65536
[  663.401816][T11507] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  663.535275][T11507] XFS (loop1): Ending clean mount
[  663.609252][T11507] XFS (loop1): Quotacheck needed: Please wait.
[  663.721405][  T175] XFS (loop1): Metadata CRC error detected at xfs_agf_read_verify+0x196/0x260, xfs_agf block 0x1 
[  663.778599][  T175] XFS (loop1): Unmount and run xfs_repair
[  663.784903][  T175] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  663.848621][  T175] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  663.893827][  T175] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  663.936303][  T175] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  663.993405][  T175] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  664.047733][  T175] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  664.086650][  T175] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  664.134166][  T175] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  664.186387][  T175] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  664.206358][T10144] XFS (loop1): metadata I/O error in "xfs_read_agf+0x277/0x5a0" at daddr 0x1 len 1 error 74
[  664.290963][T11507] XFS (loop1): Quotacheck: Unsuccessful (Error -117): Disabling quotas.
[  664.442827][ T5777] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  664.577245][T11541] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1774'.
[  665.627487][T11558] autofs4:pid:11558:autofs_fill_super: called with bogus options
[  667.814996][T11579] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1790'.
[  668.739659][T11590] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1793'.
[  668.908467][T11594] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  669.422046][T11602] overlayfs: failed to clone upperpath
[  671.041391][T11620] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1805'.
[  671.634834][T11626] overlayfs: failed to clone upperpath
[  673.221716][T11648] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1815'.
[  673.437980][T11652] overlayfs: failed to clone upperpath
[  673.582113][T11654] CIFS: Attempting to mount //1#7.0.0.1/Ë7Ì/Ðä…¯»—yshare
[  673.628663][T11654] CIFS: VFS: Error connecting to socket. Aborting operation.
[  673.760048][T11654] CIFS: VFS: cifs_mount failed w/return code = -101
[  674.065523][T11658] loop1: detected capacity change from 0 to 4096
[  674.181685][T11658] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512).
[  674.413610][T11658] ntfs3: loop1: Failed to initialize $Extend/$ObjId.
[  674.647207][T11672] overlayfs: failed to clone upperpath
[  674.864166][T11563] Set syz1 is full, maxelem 65536 reached
[  676.494024][T11700] loop1: detected capacity change from 0 to 32768
[  676.551853][T11700] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1838 (11700)
[  676.651607][T11700] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  676.720288][T11700] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  676.786116][T11700] BTRFS info (device loop1): setting nodatacow, compression disabled
[  676.794315][T11700] BTRFS info (device loop1): turning on flush-on-commit
[  676.867552][T11700] BTRFS info (device loop1): trying to use backup root at mount time
[  676.918902][T11700] BTRFS info (device loop1): enabling auto defrag
[  676.925425][T11700] BTRFS info (device loop1): max_inline at 0
[  676.978548][T11700] BTRFS info (device loop1): using free space tree
[  677.131107][T11700] BTRFS info (device loop1): enabling ssd optimizations
[  677.166401][T11700] BTRFS info (device loop1): auto enabling async discard
[  677.289905][T11700] syzkaller0: entered promiscuous mode
[  677.325824][T11700] syzkaller0: entered allmulticast mode
[  677.635495][ T5777] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  678.746236][    T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  678.966239][    T9] usb 2-1: Using ep0 maxpacket: 8
[  678.987632][    T9] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  679.019729][    T9] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  679.074175][    T9] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  679.143275][    T9] usb 2-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping
[  679.192278][    T9] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  679.263453][    T9] usb 2-1: config 168 interface 0 has no altsetting 0
[  679.298760][    T9] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  679.333937][    T9] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  679.389048][    T9] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  679.451433][    T9] usb 2-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping
[  679.510795][    T9] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  679.585104][    T9] usb 2-1: config 168 interface 0 has no altsetting 0
[  679.628060][    T9] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  679.666219][    T9] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  679.712176][    T9] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  679.774451][    T9] usb 2-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping
[  679.828018][    T9] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  679.870840][T11752] netlink: 'syz.4.1853': attribute type 1 has an invalid length.
[  679.893689][    T9] usb 2-1: config 168 interface 0 has no altsetting 0
[  679.916928][T11752] netlink: 'syz.4.1853': attribute type 2 has an invalid length.
[  679.949234][    T9] usb 2-1: string descriptor 0 read error: -22
[  679.955871][    T9] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  679.996215][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  680.056482][    T9] adutux 2-1:168.0: interrupt endpoints not found
[  680.265606][    T9] usb 2-1: USB disconnect, device number 10
[  680.315534][T11760] autofs4:pid:11760:autofs_fill_super: called with bogus options
[  681.409305][    T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  681.666147][    T9] usb 2-1: Using ep0 maxpacket: 8
[  681.683962][    T9] usb 2-1: config 0 has an invalid interface number: 55 but max is 0
[  681.695142][    T9] usb 2-1: config 0 has no interface number 0
[  681.718626][    T9] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping
[  681.768764][    T9] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping
[  681.824767][    T9] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  681.880735][    T9] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  681.938011][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  681.989632][    T9] usb 2-1: config 0 descriptor??
[  682.020414][    T9] ldusb 2-1:0.55: Interrupt in endpoint not found
[  682.217562][    T9] usb 2-1: USB disconnect, device number 11
[  683.600013][T11813] ubi: mtd0 is already attached to ubi0
[  683.643107][T11802] ubi0 error: verify_mkvol_req: bad volume creation request
[  683.676226][T11802] Volume creation request dump:
[  683.694910][T11802] 	vol_id    0
[  683.706052][T11802] 	alignment 1
[  683.709478][T11802] 	bytes     65536
[  683.752720][T11802] 	vol_type  3
[  683.776083][T11802] 	name_len  7
[  683.786211][T11802] 	1st 16 characters of name: tes
[  685.689603][T11825] ubi: mtd0 is already attached to ubi0
[  686.041047][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  686.049303][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  686.296173][T11832] ima: policy update failed
[  686.348361][   T28] audit: type=1802 audit(1785530346.811:31): pid=11832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.1889" res=0 errno=0
[  686.617876][T11836] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  686.977884][T11845] bridge0: port 3(syz_tun) entered blocking state
[  687.017301][T11845] bridge0: port 3(syz_tun) entered disabled state
[  687.998858][T11845] syz_tun: entered allmulticast mode
[  688.005829][T11845] syz_tun: left allmulticast mode
[  688.740460][T11850] loop1: detected capacity change from 0 to 32768
[  688.798900][T11850] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1896 (11850)
[  688.908687][T11850] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  688.978643][T11850] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  689.048601][T11850] BTRFS info (device loop1): using free space tree
[  689.279120][T11850] BTRFS info (device loop1): enabling ssd optimizations
[  689.331208][T11850] BTRFS info (device loop1): auto enabling async discard
[  690.919030][ T5777] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  693.741053][T11909] overlayfs: failed to clone upperpath
[  693.817589][  T175] usb 2-1: new full-speed USB device number 12 using dummy_hcd
[  694.038161][  T175] usb 2-1: not running at top speed; connect to a high speed hub
[  694.060232][  T175] usb 2-1: config 1 has an invalid descriptor of length 115, skipping remainder of the config
[  694.099839][  T175] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 25970, setting to 64
[  694.147689][  T175] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[  694.216174][  T175] usb 2-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  694.255884][  T175] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  694.308863][T11914] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  694.339654][  T175] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected
[  694.396780][  T175] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 84
[  694.434960][  T175] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2
[  694.492292][  T175] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  694.560020][  T175] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 88
[  694.628845][  T175] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6
[  694.682367][  T175] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  695.882112][  T175] usb 2-1: USB disconnect, device number 12
[  695.912505][  T175] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  695.975032][  T175] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  696.035793][  T175] keyspan 2-1:1.0: device disconnected
[  696.672794][T11936] loop1: detected capacity change from 0 to 512
[  696.933388][T11936] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  697.030584][T11936] ext4 filesystem being mounted at /474/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  697.523185][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  699.722921][T11986] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1938'.
[  702.473855][T12040] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6)
[  702.480392][T12040] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  703.034383][T12040] vhci_hcd vhci_hcd.0: Device attached
[  703.079204][T12042] vhci_hcd: connection closed
[  703.079501][T10144] vhci_hcd: stop threads
[  703.124834][T10144] vhci_hcd: release socket
[  703.135270][T10144] vhci_hcd: disconnect device
[  705.436273][T12103] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  706.210500][T12126] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  706.403685][T12133] fuse: Bad value for 'group_id'
[  706.752634][T12148] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  707.030093][T12158] fuse: Bad value for 'group_id'
[  707.766198][T12165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2019'.
[  707.906067][T12165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2019'.
[  707.915233][T12165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2019'.
[  707.924875][T12165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2019'.
[  708.731312][T12185] fuse: Bad value for 'group_id'
[  708.951160][T12192] 9pnet_fd: p9_fd_create_unix (12192): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  709.525883][T12214] loop1: detected capacity change from 0 to 512
[  709.542625][T12214] EXT4-fs: inline encryption not supported
[  709.572737][T12214] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  709.697401][T12214] EXT4-fs error (device loop1): ext4_iget_extra_inode:4740: inode #15: comm syz.1.2042: corrupted in-inode xattr: e_value size too large
[  709.902149][T12214] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.2042: couldn't read orphan inode 15 (err -117)
[  711.096350][T12214] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  711.390170][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  711.593026][T12238] CIFS: Unable to determine destination address
[  712.861738][T12243] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2054'.
[  713.041031][T12245] kvm: emulating exchange as write
[  713.428130][T12260] CIFS: Unable to determine destination address
[  713.519754][T12264] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2064'.
[  713.680469][T12268] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  713.765343][T12270] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  714.288874][T12266] loop1: detected capacity change from 0 to 40427
[  714.354176][T12266] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  714.393670][T12266] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  714.466096][T12266] F2FS-fs (loop1): invalid crc_offset: 33558524
[  714.533834][T12266] F2FS-fs (loop1): Found nat_bits in checkpoint
[  714.779016][T12266] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  714.816419][T12266] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  715.363667][T12289] CIFS: Unable to determine destination address
[  717.614382][T12312] CIFS: Unable to determine destination address
[  718.704419][T12319] xt_CT: You must specify a L4 protocol and not use inversions on it
[  719.601169][T12338] CIFS: Unable to determine destination address
[  724.447671][T12365] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6)
[  724.454212][T12365] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  724.521879][T12365] vhci_hcd vhci_hcd.0: Device attached
[  724.552402][T12367] vhci_hcd: connection closed
[  724.552705][T10142] vhci_hcd: stop threads
[  724.606572][T10142] vhci_hcd: release socket
[  724.626235][T10142] vhci_hcd: disconnect device
[  728.372904][T12405] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6)
[  728.379452][T12405] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  728.449286][T12405] vhci_hcd vhci_hcd.0: Device attached
[  728.476101][T12406] vhci_hcd: connection closed
[  728.479006][T10151] vhci_hcd: stop threads
[  728.529904][T10151] vhci_hcd: release socket
[  728.554648][T10151] vhci_hcd: disconnect device
[  729.961119][T12424] loop1: detected capacity change from 0 to 40427
[  730.031385][T12424] F2FS-fs (loop1): invalid crc value
[  730.272208][T12424] F2FS-fs (loop1): access invalid blkaddr:0
[  730.302394][T12424] CPU: 0 PID: 12424 Comm: syz.1.2126 Not tainted syzkaller #0
[  730.309886][T12424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  730.319929][T12424] Call Trace:
[  730.323198][T12424]  <TASK>
[  730.326114][T12424]  dump_stack_lvl+0x18c/0x250
[  730.330788][T12424]  ? show_regs_print_info+0x20/0x20
[  730.335970][T12424]  ? __up_read+0x2b8/0x6b0
[  730.340372][T12424]  ? __lock_acquire+0x7d80/0x7d80
[  730.345380][T12424]  f2fs_is_valid_blkaddr+0xe6c/0x15c0
[  730.350778][T12424]  sanity_check_extent_cache+0xfc/0x1f0
[  730.356309][T12424]  f2fs_iget+0x336f/0x47d0
[  730.360741][T12424]  f2fs_fill_super+0x4853/0x6b60
[  730.365688][T12424]  ? kill_f2fs_super+0x3f0/0x3f0
[  730.370608][T12424]  ? down_write+0x16e/0x200
[  730.375164][T12424]  ? down_read_killable+0x340/0x340
[  730.380347][T12424]  ? setup_bdev_super+0x56b/0x660
[  730.385354][T12424]  mount_bdev+0x21c/0x2c0
[  730.389667][T12424]  ? kfree+0x31/0x1a0
[  730.393668][T12424]  ? kill_f2fs_super+0x3f0/0x3f0
[  730.398589][T12424]  ? get_tree_bdev+0x520/0x520
[  730.403334][T12424]  ? vfs_parse_fs_param+0x420/0x420
[  730.408530][T12424]  legacy_get_tree+0xea/0x180
[  730.413199][T12424]  ? trace_raw_output_f2fs__rw_end+0x110/0x110
[  730.419344][T12424]  vfs_get_tree+0x8c/0x280
[  730.423747][T12424]  do_new_mount+0x24a/0xa40
[  730.428237][T12424]  __se_sys_mount+0x2e7/0x3d0
[  730.432902][T12424]  ? __x64_sys_mount+0xc0/0xc0
[  730.437654][T12424]  ? lockdep_hardirqs_on+0x98/0x150
[  730.442838][T12424]  ? __x64_sys_mount+0x20/0xc0
[  730.447582][T12424]  do_syscall_64+0x55/0xb0
[  730.451981][T12424]  ? clear_bhb_loop+0x40/0x90
[  730.456642][T12424]  ? clear_bhb_loop+0x40/0x90
[  730.461309][T12424]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  730.467182][T12424] RIP: 0033:0x7f0483f9f28a
[  730.471607][T12424] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  730.491220][T12424] RSP: 002b:00007f0484e51e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  730.499622][T12424] RAX: ffffffffffffffda RBX: 00007f0484e51ee0 RCX: 00007f0483f9f28a
[  730.507587][T12424] RDX: 0000200000000140 RSI: 00002000000002c0 RDI: 00007f0484e51ea0
[  730.515542][T12424] RBP: 0000200000000140 R08: 00007f0484e51ee0 R09: 000000000000000a
[  730.523498][T12424] R10: 000000000000000a R11: 0000000000000246 R12: 00002000000002c0
[  730.531452][T12424] R13: 00007f0484e51ea0 R14: 0000000000005546 R15: 0000200000001480
[  730.539417][T12424]  </TASK>
[  730.873147][T12439] fuse: Unknown parameter 'group_i00000000000000000000'
[  730.947155][T12424] F2FS-fs (loop1): sanity_check_extent_cache: inode (ino=3) extent info [0, 0, 24244] is incorrect, run fsck to fix
[  731.004482][T12424] F2FS-fs (loop1): Failed to read root inode
[  731.945016][T12459] fuse: Unknown parameter 'group_i00000000000000000000'
[  732.318490][T12466] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2143'.
[  733.036620][T12481] fuse: Unknown parameter 'group_id00000000000000000000'
[  733.265810][T12486] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2152'.
[  735.194592][T12494] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6)
[  735.201148][T12494] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  735.283377][T12494] vhci_hcd vhci_hcd.0: Device attached
[  735.315466][T12495] vhci_hcd: connection closed
[  735.315750][T10152] vhci_hcd: stop threads
[  735.373531][T10152] vhci_hcd: release socket
[  735.395243][T10152] vhci_hcd: disconnect device
[  735.401400][T12504] fuse: Unknown parameter 'group_id00000000000000000000'
[  735.553116][T12512] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2163'.
[  736.112000][T12529] fuse: Unknown parameter 'group_id00000000000000000000'
[  736.282447][T12535] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2173'.
[  736.461236][T12541] binder: 12540:12541 ioctl c0306201 0 returned -14
[  738.235193][T12544] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6)
[  738.241733][T12544] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  738.313763][T12544] vhci_hcd vhci_hcd.0: Device attached
[  738.352584][T12546] vhci_hcd: connection closed
[  738.352883][T10144] vhci_hcd: stop threads
[  738.362750][T12553] fuse: Bad value for 'user_id'
[  738.396180][T10144] vhci_hcd: release socket
[  738.400707][T10144] vhci_hcd: disconnect device
[  738.538207][T12559] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2183'.
[  739.051547][T12578] fuse: Bad value for 'user_id'
[  739.874420][T12597] fuse: Bad value for 'user_id'
[  740.965499][T12603] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6)
[  740.972038][T12603] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  741.711212][T12603] vhci_hcd vhci_hcd.0: Device attached
[  741.745800][T12604] vhci_hcd: connection closed
[  741.748901][T10151] vhci_hcd: stop threads
[  741.786385][T10151] vhci_hcd: release socket
[  741.802384][T10151] vhci_hcd: disconnect device
[  742.987613][T12616] overlayfs: failed to resolve './file0': -2
[  743.382601][T12631] fuse: Bad value for 'fd'
[  743.612721][T12641] loop1: detected capacity change from 0 to 512
[  743.625500][T12641] EXT4-fs: Ignoring removed bh option
[  743.652638][T12641] EXT4-fs error (device loop1): ext4_iget_extra_inode:4740: inode #15: comm syz.1.2216: corrupted in-inode xattr: e_value size too large
[  743.680052][T12641] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.2216: couldn't read orphan inode 15 (err -117)
[  743.695307][T12641] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  743.758294][T12641] EXT4-fs warning (device loop1): dx_probe:833: inode #2: comm syz.1.2216: Unrecognised inode hash code 4
[  743.772908][T12641] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.2216: Corrupt directory, running e2fsck is recommended
[  743.818789][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  745.825764][T12660] fuse: Bad value for 'fd'
[  747.478642][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  747.577552][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  749.036330][T12676] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8)
[  749.042871][T12676] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  749.050764][T12676] vhci_hcd vhci_hcd.0: Device attached
[  749.366363][ T5839] usb 36-1: SetAddress Request (18) to port 0
[  749.372583][ T5839] usb 36-1: new SuperSpeed USB device number 18 using vhci_hcd
[  749.515720][T12697] fuse: Bad value for 'fd'
[  749.571417][T12678] vhci_hcd: connection reset by peer
[  749.605487][T10151] vhci_hcd: stop threads
[  749.644185][T10151] vhci_hcd: release socket
[  749.673141][T10151] vhci_hcd: disconnect device
[  750.385377][T12722] fuse: Bad value for 'fd'
[  752.778934][T12746] fuse: Bad value for 'fd'
[  754.639731][T12759] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6)
[  754.646260][T12759] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  754.924130][T12759] vhci_hcd vhci_hcd.0: Device attached
[  754.949577][T12760] vhci_hcd: connection reset by peer
[  754.968854][T10156] vhci_hcd: stop threads
[  754.973222][T10156] vhci_hcd: release socket
[  755.003411][T10156] vhci_hcd: disconnect device
[  755.013262][ T5839] usb 36-1: device descriptor read/8, error -110
[  755.040038][T12771] fuse: Bad value for 'fd'
[  755.152110][T12776] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2270'.
[  755.472342][ T5839] usb usb36-port1: attempt power cycle
[  755.972019][T12798] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2280'.
[  756.020400][T12803] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2283'.
[  756.146750][ T5839] usb usb36-port1: unable to enumerate USB device
[  758.086083][T12820] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8)
[  758.092625][T12820] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  758.100546][T12820] vhci_hcd vhci_hcd.0: Device attached
[  758.404745][T12829] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2294'.
[  758.434293][    T8] usb 36-1: SetAddress Request (22) to port 0
[  758.464907][    T8] usb 36-1: new SuperSpeed USB device number 22 using vhci_hcd
[  758.663301][T12823] vhci_hcd: connection reset by peer
[  758.700986][T10142] vhci_hcd: stop threads
[  758.705287][T10142] vhci_hcd: release socket
[  758.786401][T10142] vhci_hcd: disconnect device
[  758.811208][T12835] loop1: detected capacity change from 0 to 128
[  759.206806][T12839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  759.217875][T12839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  759.226770][T12839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  759.236979][T12839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  759.246104][T12839] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  759.253384][T12839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  761.426639][T12857] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2303'.
[  761.458452][ T8195] bridge0: port 3(syz_tun) entered disabled state
[  761.600889][ T8195] syz_tun (unregistering): left allmulticast mode
[  761.623012][ T8195] syz_tun (unregistering): left promiscuous mode
[  761.642514][ T8195] bridge0: port 3(syz_tun) entered disabled state
[  763.636051][    T8] usb 36-1: device descriptor read/8, error -110
[  763.816292][T12879] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6)
[  763.822830][T12879] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  763.873433][T12879] vhci_hcd vhci_hcd.0: Device attached
[  763.947325][    T8] usb 36-1: SetAddress Request (23) to port 0
[  763.974766][T12880] vhci_hcd: connection closed
[  763.975046][T10151] vhci_hcd: stop threads
[  764.007371][    T8] usb 36-1: new SuperSpeed USB device number 23 using vhci_hcd
[  764.017564][T10142] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  764.030657][T10151] vhci_hcd: release socket
[  764.045369][T10151] vhci_hcd: disconnect device
[  764.086297][    T8] usb 36-1: enqueue for inactive port 0
[  764.142531][T12836] chnl_net:caif_netlink_parms(): no params data found
[  764.216395][    T8] usb usb36-port1: attempt power cycle
[  764.247297][T12891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2313'.
[  764.272561][T10142] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  764.421322][T10142] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  764.643358][T10142] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  764.851154][T12836] bridge0: port 1(bridge_slave_0) entered blocking state
[  764.873112][T12836] bridge0: port 1(bridge_slave_0) entered disabled state
[  764.886711][    T8] usb usb36-port1: unable to enumerate USB device
[  764.903546][T12836] bridge_slave_0: entered allmulticast mode
[  764.925535][T12836] bridge_slave_0: entered promiscuous mode
[  764.935534][T12910] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2320'.
[  764.956248][T12836] bridge0: port 2(bridge_slave_1) entered blocking state
[  764.965000][T12836] bridge0: port 2(bridge_slave_1) entered disabled state
[  764.976658][T12836] bridge_slave_1: entered allmulticast mode
[  764.983659][T12836] bridge_slave_1: entered promiscuous mode
[  765.202825][T12836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  765.270928][T12836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  765.522850][T12917] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2322'.
[  765.649743][T12836] team0: Port device team_slave_0 added
[  765.807038][T12836] team0: Port device team_slave_1 added
[  767.630475][T12925] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6)
[  767.637008][T12925] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  767.726227][T12925] vhci_hcd vhci_hcd.0: Device attached
[  767.785759][T12926] vhci_hcd: connection closed
[  767.787555][T12836] batman_adv: batadv0: Adding interface: batadv_slave_0
[  767.800769][T10152] vhci_hcd: stop threads
[  767.805078][T10152] vhci_hcd: release socket
[  767.850328][T10152] vhci_hcd: disconnect device
[  767.864335][T12836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  768.012451][T12836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  768.087043][T12836] batman_adv: batadv0: Adding interface: batadv_slave_1
[  768.094416][T12836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  768.196663][T12836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  768.533198][T12836] hsr_slave_0: entered promiscuous mode
[  768.542711][T12951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2331'.
[  768.582506][T12836] hsr_slave_1: entered promiscuous mode
[  768.632488][T12836] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  768.670368][T12836] Cannot create hsr debugfs directory
[  769.782321][T10142] hsr_slave_0: left promiscuous mode
[  769.858992][T10142] hsr_slave_1: left promiscuous mode
[  769.882883][T10142] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  769.937132][T10142] batman_adv: batadv0: Removing interface: batadv_slave_0
[  769.980180][T10142] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  770.056047][T10142] batman_adv: batadv0: Removing interface: batadv_slave_1
[  770.099940][T10142] bridge_slave_1: left allmulticast mode
[  770.140306][T10142] bridge_slave_1: left promiscuous mode
[  770.179558][T10142] bridge0: port 2(bridge_slave_1) entered disabled state
[  770.248274][T10142] bridge_slave_0: left allmulticast mode
[  770.278405][T10142] bridge_slave_0: left promiscuous mode
[  770.308529][T10142] bridge0: port 1(bridge_slave_0) entered disabled state
[  770.411226][T10142] veth1_macvtap: left promiscuous mode
[  770.434755][T10142] veth0_macvtap: left promiscuous mode
[  770.460593][T10142] veth1_vlan: left promiscuous mode
[  770.481721][T10142] veth0_vlan: left promiscuous mode
[  771.203698][T13003] 9pnet_fd: Insufficient options for proto=fd
[  772.023639][T10142] ` (unregistering): Port device team_slave_1 removed
[  772.149216][T10142] ` (unregistering): Port device team_slave_0 removed
[  772.267283][T10142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  772.386973][T10142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  772.731596][T13035] fuse: Unknown parameter 'use00000000000000000000'
[  773.298403][T10142] bond0 (unregistering): Released all slaves
[  773.634762][T13052] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  773.725707][T13055] fuse: Unknown parameter 'use00000000000000000000'
[  775.631981][T12836] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  775.692487][T12836] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  775.750746][T12836] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  775.842010][T12836] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  776.156994][T13092] fuse: Unknown parameter 'use00000000000000000000'
[  776.251763][T12836] 8021q: adding VLAN 0 to HW filter on device bond0
[  776.388926][T12836] 8021q: adding VLAN 0 to HW filter on device team0
[  776.482697][T10152] bridge0: port 1(bridge_slave_0) entered blocking state
[  776.489862][T10152] bridge0: port 1(bridge_slave_0) entered forwarding state
[  776.621477][T10172] bridge0: port 2(bridge_slave_1) entered blocking state
[  776.628709][T10172] bridge0: port 2(bridge_slave_1) entered forwarding state
[  777.044468][T13111] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2388'.
[  777.506771][T12836] 8021q: adding VLAN 0 to HW filter on device batadv0
[  777.691781][T12836] veth0_vlan: entered promiscuous mode
[  777.758964][T12836] veth1_vlan: entered promiscuous mode
[  777.941090][T12836] veth0_macvtap: entered promiscuous mode
[  778.008676][T12836] veth1_macvtap: entered promiscuous mode
[  778.023098][T13129] fuse: Unknown parameter 'user_i00000000000000000000'
[  778.092282][T12836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  778.151337][T12836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  778.208043][T12836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  778.265308][T12836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  778.318104][T12836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  778.369273][T12836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  778.429267][T12836] batman_adv: batadv0: Interface activated: batadv_slave_0
[  778.510559][T12836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  778.582991][T12836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  778.638502][T12836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  778.690255][T12836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  778.740773][T12836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  778.796895][T12836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  778.881199][T12836] batman_adv: batadv0: Interface activated: batadv_slave_1
[  778.934687][T12836] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  779.006152][T12836] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  779.014925][T12836] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  779.099390][T12836] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  779.414393][T10142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  779.467148][T10142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  779.597859][T10142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  779.648113][T10142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  780.055723][T13162] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2398'.
[  780.207772][T13165] fuse: Unknown parameter 'user_i00000000000000000000'
[  784.467383][T13187] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6)
[  784.473927][T13187] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  784.574759][T13187] vhci_hcd vhci_hcd.0: Device attached
[  784.584816][T13188] vhci_hcd: connection closed
[  784.613778][T10178] vhci_hcd: stop threads
[  784.628549][T10178] vhci_hcd: release socket
[  784.680436][T10178] vhci_hcd: disconnect device
[  784.956474][T13201] fuse: Unknown parameter 'user_i00000000000000000000'
[  785.271884][T13210] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2409'.
[  787.632335][T13225] loop2: detected capacity change from 0 to 2048
[  787.821383][T13225] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  789.753189][T13246] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2420'.
[  790.504843][ T5786] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  790.527218][ T5786] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  790.536134][ T5786] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  790.544096][ T5786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  790.551707][ T5786] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  790.559231][ T5786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  790.863377][T10144] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  790.926694][T13235] UDF-fs: error (device loop2): udf_truncate_tail_extent: Extent after EOF in inode 1367
[  791.063716][T10142] bio_check_eod: 1 callbacks suppressed
[  791.063756][T10142] kworker/u4:65: attempt to access beyond end of device
[  791.063756][T10142] loop2: rw=1, sector=2048, nr_sectors = 1 limit=2048
[  791.151872][T10142] Buffer I/O error on dev loop2, logical block 2048, lost async page write
[  791.173093][T10144] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  791.208557][T10142] kworker/u4:65: attempt to access beyond end of device
[  791.208557][T10142] loop2: rw=1, sector=2048, nr_sectors = 1 limit=2048
[  791.287886][T10142] Buffer I/O error on dev loop2, logical block 2048, lost async page write
[  791.327974][T10142] kworker/u4:65: attempt to access beyond end of device
[  791.327974][T10142] loop2: rw=1, sector=2048, nr_sectors = 1 limit=2048
[  791.369960][T10144] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  791.394621][T10142] Buffer I/O error on dev loop2, logical block 2048, lost async page write
[  791.428538][T10142] kworker/u4:65: attempt to access beyond end of device
[  791.428538][T10142] loop2: rw=1, sector=2048, nr_sectors = 1 limit=2048
[  791.473858][T13276] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2433'.
[  791.508627][T10142] Buffer I/O error on dev loop2, logical block 2048, lost async page write
[  791.529569][T10144] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  791.546994][T10142] kworker/u4:65: attempt to access beyond end of device
[  791.546994][T10142] loop2: rw=1, sector=2049, nr_sectors = 1 limit=2048
[  791.604024][T10142] Buffer I/O error on dev loop2, logical block 2049, lost async page write
[  791.664823][T10142] kworker/u4:65: attempt to access beyond end of device
[  791.664823][T10142] loop2: rw=1, sector=2049, nr_sectors = 1 limit=2048
[  791.750546][T10142] Buffer I/O error on dev loop2, logical block 2049, lost async page write
[  791.815421][T10142] kworker/u4:65: attempt to access beyond end of device
[  791.815421][T10142] loop2: rw=1, sector=2049, nr_sectors = 1 limit=2048
[  791.840150][T13252] chnl_net:caif_netlink_parms(): no params data found
[  791.889096][T10142] Buffer I/O error on dev loop2, logical block 2049, lost async page write
[  791.938931][T10142] kworker/u4:65: attempt to access beyond end of device
[  791.938931][T10142] loop2: rw=1, sector=2049, nr_sectors = 1 limit=2048
[  792.026612][T10142] Buffer I/O error on dev loop2, logical block 2049, lost async page write
[  792.079385][T10142] kworker/u4:65: attempt to access beyond end of device
[  792.079385][T10142] loop2: rw=1, sector=2050, nr_sectors = 1 limit=2048
[  792.134424][T10142] Buffer I/O error on dev loop2, logical block 2050, lost async page write
[  792.168313][T10142] kworker/u4:65: attempt to access beyond end of device
[  792.168313][T10142] loop2: rw=1, sector=2050, nr_sectors = 1 limit=2048
[  792.237129][T10142] Buffer I/O error on dev loop2, logical block 2050, lost async page write
[  792.435019][T13252] bridge0: port 1(bridge_slave_0) entered blocking state
[  792.472859][T13252] bridge0: port 1(bridge_slave_0) entered disabled state
[  792.506453][T13252] bridge_slave_0: entered allmulticast mode
[  792.513295][T13252] bridge_slave_0: entered promiscuous mode
[  792.601346][ T5786] Bluetooth: hci0: command tx timeout
[  792.622199][T13252] bridge0: port 2(bridge_slave_1) entered blocking state
[  792.658362][T13252] bridge0: port 2(bridge_slave_1) entered disabled state
[  792.701212][T13252] bridge_slave_1: entered allmulticast mode
[  792.737412][T13252] bridge_slave_1: entered promiscuous mode
[  793.378542][T13252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  793.415662][T13252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  793.605840][T13252] team0: Port device team_slave_0 added
[  793.673065][T13252] team0: Port device team_slave_1 added
[  793.830752][T13252] batman_adv: batadv0: Adding interface: batadv_slave_0
[  793.852765][T13252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  793.971016][T13330] loop2: detected capacity change from 0 to 128
[  793.979857][T13252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  794.025678][T13330] FAT-fs (loop2): error, invalid FAT chain (i_pos 548, last_block 8)
[  794.073966][T13252] batman_adv: batadv0: Adding interface: batadv_slave_1
[  794.096337][T13330] FAT-fs (loop2): Filesystem has been set read-only
[  794.109130][T13252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  794.165809][T13332] FAT-fs (loop2): error, invalid FAT chain (i_pos 548, last_block 8)
[  794.243882][T13252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  794.666620][T13349] capability: warning: `syz.3.2454' uses deprecated v2 capabilities in a way that may be insecure
[  794.681839][ T5786] Bluetooth: hci0: command tx timeout
[  794.786878][T13252] hsr_slave_0: entered promiscuous mode
[  794.816856][T13252] hsr_slave_1: entered promiscuous mode
[  794.853933][T13252] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  794.894359][T13252] Cannot create hsr debugfs directory
[  795.011276][T10144] hsr_slave_0: left promiscuous mode
[  795.038183][T10144] hsr_slave_1: left promiscuous mode
[  795.057223][T10144] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  795.083591][T10144] batman_adv: batadv0: Removing interface: batadv_slave_0
[  795.122626][T10144] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  795.151524][T10144] batman_adv: batadv0: Removing interface: batadv_slave_1
[  795.182399][T10144] bridge_slave_1: left allmulticast mode
[  795.204010][T10144] bridge_slave_1: left promiscuous mode
[  795.355165][T10144] bridge0: port 2(bridge_slave_1) entered disabled state
[  795.377621][T10144] bridge_slave_0: left allmulticast mode
[  795.394588][T10144] bridge_slave_0: left promiscuous mode
[  795.413228][T10144] bridge0: port 1(bridge_slave_0) entered disabled state
[  795.483759][T10144] veth1_macvtap: left promiscuous mode
[  795.500106][T10144] veth0_macvtap: left promiscuous mode
[  795.511313][T10144] veth1_vlan: left promiscuous mode
[  796.767197][ T5786] Bluetooth: hci0: command tx timeout
[  796.793224][T13391] raw_sendmsg: syz.3.2469 forgot to set AF_INET. Fix it!
[  797.427034][T10144] team0 (unregistering): Port device team_slave_1 removed
[  797.609452][T10144] team0 (unregistering): Port device team_slave_0 removed
[  797.811215][T10144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  797.999983][T10144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  798.842711][ T5786] Bluetooth: hci0: command tx timeout
[  799.481178][T10144] bond0 (unregistering): Released all slaves
[  800.908867][T10144] IPVS: stop unused estimator thread 0...
[  801.814100][T13433] loop2: detected capacity change from 0 to 40427
[  801.890752][T13433] F2FS-fs (loop2): Invalid SB checksum offset: 0
[  801.970897][T13433] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[  801.988994][T13252] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  802.051960][T13433] F2FS-fs (loop2): invalid crc value
[  802.066419][T13252] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  802.172199][T13252] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  802.239448][T13252] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  802.427564][T13433] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0
[  802.470796][T13433] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  802.760338][T13252] 8021q: adding VLAN 0 to HW filter on device bond0
[  802.841104][T13252] 8021q: adding VLAN 0 to HW filter on device team0
[  802.873858][T12836] bio_check_eod: 24 callbacks suppressed
[  802.873871][T12836] syz-executor: attempt to access beyond end of device
[  802.873871][T12836] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  802.978543][T10152] bridge0: port 1(bridge_slave_0) entered blocking state
[  802.985697][T10152] bridge0: port 1(bridge_slave_0) entered forwarding state
[  803.042625][T12836] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  803.083258][T10152] bridge0: port 2(bridge_slave_1) entered blocking state
[  803.090429][T10152] bridge0: port 2(bridge_slave_1) entered forwarding state
[  803.281405][T13252] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  803.965865][T13252] 8021q: adding VLAN 0 to HW filter on device batadv0
[  804.192971][T13252] veth0_vlan: entered promiscuous mode
[  804.260682][T13252] veth1_vlan: entered promiscuous mode
[  804.367950][T13252] veth0_macvtap: entered promiscuous mode
[  804.414474][T13252] veth1_macvtap: entered promiscuous mode
[  804.478283][T13252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  804.507670][  T175] usb 3-1: new full-speed USB device number 15 using dummy_hcd
[  804.542096][T13252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  804.598528][T13252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  804.655554][T13252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  804.709512][T13252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  804.730874][  T175] usb 3-1: config 0 has an invalid interface number: 41 but max is 0
[  804.769503][  T175] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  804.790157][T13252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  804.826612][  T175] usb 3-1: config 0 has no interface number 0
[  804.838960][T13252] batman_adv: batadv0: Interface activated: batadv_slave_0
[  804.860291][  T175] usb 3-1: config 0 interface 41 altsetting 2 has an invalid endpoint with address 0x0, skipping
[  804.893947][T13252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  804.917857][  T175] usb 3-1: config 0 interface 41 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  804.941158][T13252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  804.961448][  T175] usb 3-1: config 0 interface 41 has no altsetting 0
[  804.974871][T13252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  804.991697][T13252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  805.002670][T13252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  805.018029][  T175] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  805.029756][  T175] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  805.040788][  T175] usb 3-1: Product: syz
[  806.227177][  T175] usb 3-1: Manufacturer: syz
[  806.232901][T13252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  806.249321][  T175] usb 3-1: SerialNumber: syz
[  806.256917][  T175] usb 3-1: config 0 descriptor??
[  806.274489][T13252] batman_adv: batadv0: Interface activated: batadv_slave_1
[  806.295862][  T175] CoreChips: probe of 3-1:0.41 failed with error -22
[  806.398166][T13252] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  806.466223][T13252] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  806.519130][T13252] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  806.556121][T13252] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  806.856023][T10144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  806.910609][T10144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  807.024307][T10156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  807.078016][T10156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  807.538629][  T175] usb 3-1: USB disconnect, device number 15
[  809.388757][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  809.395087][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  813.739343][T12839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  813.756459][T12839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  813.764974][T12839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  813.774460][T12839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  813.782230][T12839] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  813.790895][T12839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  814.073795][T13575] loop2: detected capacity change from 0 to 512
[  814.121074][T13575] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  814.289150][T13575] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003)
[  814.543706][T13565] chnl_net:caif_netlink_parms(): no params data found
[  814.649891][T13586] support for the xor transformation has been removed.
[  814.872001][T13565] bridge0: port 1(bridge_slave_0) entered blocking state
[  814.944149][T13565] bridge0: port 1(bridge_slave_0) entered disabled state
[  814.997589][T13565] bridge_slave_0: entered allmulticast mode
[  815.004502][T13565] bridge_slave_0: entered promiscuous mode
[  815.052268][T13594] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2521'.
[  815.087945][T13565] bridge0: port 2(bridge_slave_1) entered blocking state
[  815.095118][T13565] bridge0: port 2(bridge_slave_1) entered disabled state
[  815.170893][T13565] bridge_slave_1: entered allmulticast mode
[  815.211814][T13565] bridge_slave_1: entered promiscuous mode
[  815.404438][T13565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  816.649094][T12839] Bluetooth: hci1: command tx timeout
[  816.671043][T13565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  818.262603][T13565] team0: Port device team_slave_0 added
[  818.314343][T13565] team0: Port device team_slave_1 added
[  818.334177][T13618] loop2: detected capacity change from 0 to 256
[  818.443772][T13565] batman_adv: batadv0: Adding interface: batadv_slave_0
[  818.509480][T13618] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011e7e, chksum : 0x04bede55, utbl_chksum : 0xe619d30d)
[  818.570762][T13565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  818.639787][T13624] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2530'.
[  818.684899][T12839] Bluetooth: hci1: command tx timeout
[  818.706618][T13624] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2530'.
[  818.758226][T13565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  818.839542][T13565] batman_adv: batadv0: Adding interface: batadv_slave_1
[  818.919907][T13565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  819.075670][T13565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  819.145086][T13638] syzkaller0: entered promiscuous mode
[  819.151370][T13638] syzkaller0: entered allmulticast mode
[  819.254381][T13636] kvm_pr_unimpl_wrmsr: 4 callbacks suppressed
[  819.254476][T13636] kvm: kvm [13635]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x800100000080
[  819.372705][T13636] kvm: kvm [13635]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80
[  819.451786][T13636] kvm: kvm [13635]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80
[  819.549405][T13636] kvm: kvm [13635]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80
[  819.648732][T13636] kvm: kvm [13635]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80
[  819.746674][T13636] kvm: kvm [13635]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80
[  819.929536][T13565] hsr_slave_0: entered promiscuous mode
[  820.720598][T13565] hsr_slave_1: entered promiscuous mode
[  820.758362][T12839] Bluetooth: hci1: command tx timeout
[  820.769721][T13565] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  820.804613][T13565] Cannot create hsr debugfs directory
[  821.369122][T13682] loop2: detected capacity change from 0 to 16
[  821.411072][T13682] erofs: (device loop2): mounted with root inode @ nid 36.
[  821.504799][T13565] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  821.740846][T13687] loop1: detected capacity change from 0 to 512
[  821.761037][T13565] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  821.786546][T13687] EXT4-fs: Ignoring removed bh option
[  821.835355][T13687] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  821.926084][T13687] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  822.025160][T13687] EXT4-fs (loop1): 1 truncate cleaned up
[  822.054475][T13687] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  822.097348][T13565] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  822.304383][T13252] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  822.319198][T13565] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  822.836618][T12839] Bluetooth: hci1: command tx timeout
[  824.399501][T13565] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  824.461063][T13565] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  824.520332][T13565] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  824.549073][T13565] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  824.811656][T13565] 8021q: adding VLAN 0 to HW filter on device bond0
[  824.906343][T13565] 8021q: adding VLAN 0 to HW filter on device team0
[  824.964661][T10156] bridge0: port 1(bridge_slave_0) entered blocking state
[  824.971872][T10156] bridge0: port 1(bridge_slave_0) entered forwarding state
[  825.043814][T10156] bridge0: port 2(bridge_slave_1) entered blocking state
[  825.050990][T10156] bridge0: port 2(bridge_slave_1) entered forwarding state
[  825.881033][T13565] 8021q: adding VLAN 0 to HW filter on device batadv0
[  827.632481][T13739] loop2: detected capacity change from 0 to 512
[  827.684601][T13739] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  827.720944][T13565] veth0_vlan: entered promiscuous mode
[  827.799192][T13739] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  827.838889][T13565] veth1_vlan: entered promiscuous mode
[  827.917831][T13739] EXT4-fs (loop2): 1 truncate cleaned up
[  827.943848][T13739] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  827.977893][T13565] veth0_macvtap: entered promiscuous mode
[  828.020483][T13565] veth1_macvtap: entered promiscuous mode
[  828.140246][T13565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  828.196699][T13565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  828.248382][T13565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  828.285991][T13565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  828.319820][T13565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  828.365850][T13565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  828.401155][T13565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  828.439317][T13565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  828.489676][T13565] batman_adv: batadv0: Interface activated: batadv_slave_0
[  828.508107][T12836] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  828.548103][T13565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  828.636968][T13565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  828.693435][T13565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  828.742832][T13565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  828.772114][T13565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  828.799255][T13565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  828.833518][T13565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  828.877326][T13565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  828.920682][T13565] batman_adv: batadv0: Interface activated: batadv_slave_1
[  828.998498][T13565] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  829.036421][T13565] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  829.069442][T13565] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  829.108301][T13565] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  829.376527][T10152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  829.444436][T10152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  829.548620][T10142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  829.591946][T10142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  832.341364][T13773] loop3: detected capacity change from 0 to 40427
[  832.416256][T13773] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  832.424117][T13773] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  832.551939][T13773] F2FS-fs (loop3): Found nat_bits in checkpoint
[  832.784773][T13773] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  832.833877][T13773] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  833.089501][   T28] audit: type=1804 audit(1785530493.561:32): pid=13773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2572" name="/newroot/1/bus/bus" dev="loop3" ino=10 res=1 errno=0
[  833.423459][T13773] syz.3.2572: attempt to access beyond end of device
[  833.423459][T13773] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  833.632385][T13782] loop1: detected capacity change from 0 to 40427
[  833.687512][T13782] F2FS-fs (loop1): Invalid SB checksum offset: 0
[  833.746205][T13782] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[  833.811141][T13782] F2FS-fs (loop1): invalid crc value
[  834.129398][T13782] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[  834.176174][T13782] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  834.318458][T13782] syz.1.2574: attempt to access beyond end of device
[  834.318458][T13782] loop1: rw=34817, sector=77824, nr_sectors = 8 limit=40427
[  834.548992][T13252] syz-executor: attempt to access beyond end of device
[  834.548992][T13252] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  834.641382][T13252] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  838.443688][T13813] binder: 13812:13813 ioctl c018620c 200000000040 returned -1
[  840.623281][T13828] overlayfs: failed to clone upperpath
[  844.384073][T13856] loop1: detected capacity change from 0 to 256
[  844.390600][  T175] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  844.591389][  T175] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  844.605381][  T175] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  844.619053][  T175] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[  844.643168][  T175] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  844.709193][  T175] usb 4-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00
[  844.748877][  T175] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  844.798698][  T175] usb 4-1: Product: syz
[  844.815582][  T175] usb 4-1: Manufacturer: syz
[  844.837916][  T175] usb 4-1: SerialNumber: syz
[  844.882780][  T175] usbserial_generic 4-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes.
[  844.914350][  T175] usbserial_generic 4-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver.
[  844.967678][  T175] usbserial_generic 4-1:1.0: generic converter detected
[  845.041021][  T175] usb 4-1: generic converter now attached to ttyUSB0
[  845.216247][  T175] usb 4-1: USB disconnect, device number 14
[  845.264960][  T175] generic ttyUSB0: generic converter now disconnected from ttyUSB0
[  845.308998][  T175] usbserial_generic 4-1:1.0: device disconnected
[  845.328469][T13866] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2603'.
[  845.589188][ T5786] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  845.599703][ T5786] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  845.609330][ T5786] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  845.625159][ T5786] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  845.633048][ T5786] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  845.640732][ T5786] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  845.993094][T13870] loop3: detected capacity change from 0 to 2048
[  846.081906][T13870] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  846.144636][T13863] loop1: detected capacity change from 0 to 40427
[  846.240712][T13863] F2FS-fs (loop1): invalid crc value
[  846.328102][T13863] F2FS-fs (loop1): Found nat_bits in checkpoint
[  846.345435][T13867] chnl_net:caif_netlink_parms(): no params data found
[  846.569705][T13863] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  846.746832][   T28] audit: type=1800 audit(1785530507.221:33): pid=13863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2601" name="file1" dev="loop1" ino=10 res=0 errno=0
[  846.821573][T13869] UDF-fs: error (device loop3): udf_truncate_tail_extent: Extent after EOF in inode 1367
[  846.850817][T10152] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  846.880295][T13252] syz-executor: attempt to access beyond end of device
[  846.880295][T13252] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  846.969329][T13252] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  847.033423][T10142] kworker/u4:65: attempt to access beyond end of device
[  847.033423][T10142] loop3: rw=1, sector=2048, nr_sectors = 1 limit=2048
[  847.094710][T10142] buffer_io_error: 24 callbacks suppressed
[  847.094793][T10142] Buffer I/O error on dev loop3, logical block 2048, lost async page write
[  847.118454][T10152] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  847.402640][T10142] kworker/u4:65: attempt to access beyond end of device
[  847.402640][T10142] loop3: rw=1, sector=2048, nr_sectors = 1 limit=2048
[  847.427113][T13882] netlink: 51 bytes leftover after parsing attributes in process `syz.4.2612'.
[  847.440434][T13867] bridge0: port 1(bridge_slave_0) entered blocking state
[  847.454838][T13867] bridge0: port 1(bridge_slave_0) entered disabled state
[  847.475821][T10142] Buffer I/O error on dev loop3, logical block 2048, lost async page write
[  847.496166][T13867] bridge_slave_0: entered allmulticast mode
[  847.518706][T13867] bridge_slave_0: entered promiscuous mode
[  847.525708][T10142] kworker/u4:65: attempt to access beyond end of device
[  847.525708][T10142] loop3: rw=1, sector=2048, nr_sectors = 1 limit=2048
[  847.550309][T13885] 
: renamed from bond_slave_0 (while UP)
[  847.590485][T10142] Buffer I/O error on dev loop3, logical block 2048, lost async page write
[  847.608977][T10152] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  847.632105][T10142] kworker/u4:65: attempt to access beyond end of device
[  847.632105][T10142] loop3: rw=1, sector=2048, nr_sectors = 1 limit=2048
[  847.661090][T13867] bridge0: port 2(bridge_slave_1) entered blocking state
[  847.695344][T13867] bridge0: port 2(bridge_slave_1) entered disabled state
[  847.705139][T10142] Buffer I/O error on dev loop3, logical block 2048, lost async page write
[  847.716573][ T5786] Bluetooth: hci3: command tx timeout
[  847.743501][T13867] bridge_slave_1: entered allmulticast mode
[  847.756719][T10142] kworker/u4:65: attempt to access beyond end of device
[  847.756719][T10142] loop3: rw=1, sector=2049, nr_sectors = 1 limit=2048
[  847.791005][T13867] bridge_slave_1: entered promiscuous mode
[  847.837960][T10142] Buffer I/O error on dev loop3, logical block 2049, lost async page write
[  847.881848][T10152] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  847.906141][T10142] kworker/u4:65: attempt to access beyond end of device
[  847.906141][T10142] loop3: rw=1, sector=2049, nr_sectors = 1 limit=2048
[  847.961622][T10142] Buffer I/O error on dev loop3, logical block 2049, lost async page write
[  847.991383][T10142] kworker/u4:65: attempt to access beyond end of device
[  847.991383][T10142] loop3: rw=1, sector=2049, nr_sectors = 1 limit=2048
[  848.082767][T13867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  848.106062][T10142] Buffer I/O error on dev loop3, logical block 2049, lost async page write
[  848.114729][T10142] kworker/u4:65: attempt to access beyond end of device
[  848.114729][T10142] loop3: rw=1, sector=2049, nr_sectors = 1 limit=2048
[  848.163209][T13867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  848.203729][T13892] 9p: Unknown Cache mode or invalid value c
[  848.232240][T10142] Buffer I/O error on dev loop3, logical block 2049, lost async page write
[  848.324125][T10142] kworker/u4:65: attempt to access beyond end of device
[  848.324125][T10142] loop3: rw=1, sector=2050, nr_sectors = 1 limit=2048
[  848.418434][T10142] Buffer I/O error on dev loop3, logical block 2050, lost async page write
[  848.491843][T10142] Buffer I/O error on dev loop3, logical block 2050, lost async page write
[  848.502579][T13867] team0: Port device team_slave_0 added
[  848.577359][T13867] team0: Port device team_slave_1 added
[  848.723060][T13867] batman_adv: batadv0: Adding interface: batadv_slave_0
[  849.935994][ T5786] Bluetooth: hci3: command tx timeout
[  849.972501][T13867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  850.172827][T13867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  850.238319][T13867] batman_adv: batadv0: Adding interface: batadv_slave_1
[  850.280801][T13867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  850.425066][T13867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  851.073669][T13924] loop1: detected capacity change from 0 to 512
[  851.149799][T13867] hsr_slave_0: entered promiscuous mode
[  851.161645][T13907] loop3: detected capacity change from 0 to 40427
[  851.265075][T13924] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  851.278200][T13907] F2FS-fs (loop3): Invalid SB checksum offset: 0
[  851.284573][T13907] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[  851.340322][T13867] hsr_slave_1: entered promiscuous mode
[  851.384958][T13924] ext4 filesystem being mounted at /33/file7 supports timestamps until 2038-01-19 (0x7fffffff)
[  851.416669][T13867] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  851.436880][T13907] F2FS-fs (loop3): invalid crc value
[  851.486134][T13867] Cannot create hsr debugfs directory
[  851.781429][T13252] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  851.827791][T13907] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[  851.834888][T13907] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  851.960433][T12839] Bluetooth: hci3: command tx timeout
[  853.914231][T13565] bio_check_eod: 25 callbacks suppressed
[  853.914262][T13565] syz-executor: attempt to access beyond end of device
[  853.914262][T13565] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  854.040191][T12839] Bluetooth: hci3: command tx timeout
[  854.071505][T13565] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  855.804515][T13956] loop1: detected capacity change from 0 to 2048
[  855.893512][T13956] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  856.478310][T10152] hsr_slave_0: left promiscuous mode
[  856.514288][T10152] hsr_slave_1: left promiscuous mode
[  856.552082][T10152] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  856.593638][T10152] batman_adv: batadv0: Removing interface: batadv_slave_0
[  856.642483][T10152] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  856.687541][T10152] batman_adv: batadv0: Removing interface: batadv_slave_1
[  856.738018][T10152] bridge_slave_1: left allmulticast mode
[  856.769757][T10152] bridge_slave_1: left promiscuous mode
[  856.801117][T10152] bridge0: port 2(bridge_slave_1) entered disabled state
[  856.856671][T10152] bridge_slave_0: left allmulticast mode
[  856.888587][T10152] bridge_slave_0: left promiscuous mode
[  856.929082][T10152] bridge0: port 1(bridge_slave_0) entered disabled state
[  857.141289][T10152] veth1_macvtap: left promiscuous mode
[  857.173619][T10152] veth0_macvtap: left promiscuous mode
[  857.197470][T10152] veth1_vlan: left promiscuous mode
[  857.220243][T10152] veth0_vlan: left promiscuous mode
[  857.482309][T13982] loop3: detected capacity change from 0 to 256
[  857.578162][T13982] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d)
[  857.941070][T13985] loop3: detected capacity change from 0 to 512
[  857.989327][T13985] EXT4-fs: Ignoring removed nomblk_io_submit option
[  858.056793][T13985] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  858.156924][T13985] EXT4-fs (loop3): 1 truncate cleaned up
[  858.163393][T13985] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  858.668334][T13565] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  859.150424][    T8] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  859.360365][    T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  859.405676][    T8] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  859.472482][    T8] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  859.538861][    T8] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 65535, setting to 1024
[  859.601849][    T8] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024
[  859.685341][    T8] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  859.727969][    T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  859.776327][    T8] usb 4-1: Product: syz
[  859.785772][    T8] usb 4-1: Manufacturer: syz
[  859.800712][    T8] usb 4-1: SerialNumber: syz
[  859.839323][    T8] cdc_mbim 4-1:1.0: skipping garbage
[  860.041817][T13990] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  860.467856][T10152] team0 (unregistering): Port device team_slave_1 removed
[  860.623863][T10152] team0 (unregistering): Port device team_slave_0 removed
[  860.703051][T13990] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  860.725011][T10152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  860.889171][T10152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  860.925725][    T8] cdc_mbim 4-1:1.0: bind() failure
[  860.959830][    T8] cdc_ncm: probe of 4-1:1.1 failed with error -71
[  860.987042][    T8] cdc_mbim: probe of 4-1:1.1 failed with error -71
[  861.011450][    T8] usbtest: probe of 4-1:1.1 failed with error -71
[  861.060010][    T8] usb 4-1: USB disconnect, device number 15
[  861.670084][T10152] bond0 (unregistering): Released all slaves
[  861.682620][T14019] loop3: detected capacity change from 0 to 512
[  861.740133][T14019] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  861.805093][T14019] ext4 filesystem being mounted at /16/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  862.002670][T13565] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  862.471810][T13867] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  862.621009][T13867] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  862.704704][T14039] tipc: Can't bind to reserved service type 2
[  862.717393][T13867] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  862.806507][T13867] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  866.500429][T14062] loop1: detected capacity change from 0 to 512
[  866.732461][T13867] 8021q: adding VLAN 0 to HW filter on device bond0
[  866.832793][T13867] 8021q: adding VLAN 0 to HW filter on device team0
[  868.093244][T10147] bridge0: port 1(bridge_slave_0) entered blocking state
[  868.100423][T10147] bridge0: port 1(bridge_slave_0) entered forwarding state
[  868.142350][T14062] EXT4-fs (loop1): Test dummy encryption mode enabled
[  868.210135][T14062] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.2649: inode has both inline data and extents flags
[  868.237463][T10147] bridge0: port 2(bridge_slave_1) entered blocking state
[  868.244567][T10147] bridge0: port 2(bridge_slave_1) entered forwarding state
[  868.311752][T14062] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.2649: couldn't read orphan inode 15 (err -117)
[  868.407769][T14062] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  868.626026][T13757] usb 4-1: new full-speed USB device number 16 using dummy_hcd
[  868.786798][T14062] fscrypt (loop1): Error allocating 'xts(aes)' transform: -4
[  868.876087][T13757] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  868.937142][T13757] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  868.987414][T13252] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  869.049854][T13757] usb 4-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00
[  869.155161][T13757] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  869.240260][T13757] usb 4-1: config 0 descriptor??
[  869.246248][T14077] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  869.312678][T13867] 8021q: adding VLAN 0 to HW filter on device batadv0
[  869.531618][T14093] kvm: pic: non byte write
[  869.537688][T13757] usbhid 4-1:0.0: can't add hid device: -71
[  869.543714][T13757] usbhid: probe of 4-1:0.0 failed with error -71
[  869.635623][T13757] usb 4-1: USB disconnect, device number 16
[  869.956444][T14110] loop1: detected capacity change from 0 to 256
[  870.012105][T14110] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d)
[  870.121188][T14110] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 1)
[  870.209461][T14110] exFAT-fs (loop1): failed to load alloc-bitmap
[  870.266143][T14110] exFAT-fs (loop1): failed to recognize exfat type
[  870.303771][T14116] loop3: detected capacity change from 0 to 1024
[  870.389294][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  870.395624][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  870.434332][T14116] EXT4-fs: Ignoring removed nomblk_io_submit option
[  870.530087][T14116] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  870.553877][T13867] veth0_vlan: entered promiscuous mode
[  870.642397][T13867] veth1_vlan: entered promiscuous mode
[  870.689213][T14116] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e854c01c, mo2=0103]
[  870.759800][T14116] System zones: 0-1, 3-36
[  870.805390][T14116] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  870.841319][T13867] veth0_macvtap: entered promiscuous mode
[  870.912200][T13867] veth1_macvtap: entered promiscuous mode
[  871.039758][T13867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  871.106288][T13867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  871.155749][T13867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  871.209277][T13867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  871.262188][T13867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  871.331479][T13867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  871.375976][T13867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  871.419289][T13867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  871.471628][T13867] batman_adv: batadv0: Interface activated: batadv_slave_0
[  871.481135][T13565] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  871.550010][T13867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  871.649312][T13867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  871.707590][T13867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  871.765907][T13867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  871.813939][T13867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  871.852783][T13867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  871.895971][T13867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  871.957843][T13867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  872.007331][T13867] batman_adv: batadv0: Interface activated: batadv_slave_1
[  872.068693][T13867] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  872.119188][T13867] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  872.169196][T13867] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  872.217426][T13867] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  872.558316][T10152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  872.595543][T10152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  872.709879][T10144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  872.756875][T10144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  978.045837][    C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  978.052843][    C0] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P14124/1:b..l P14059/1:b..l
[  978.062511][    C0] rcu: 	(detected by 0, t=10502 jiffies, g=92321, q=490 ncpus=1)
[  978.070225][    C0] task:udevd           state:R  running task     stack:25032 pid:14059 ppid:5140   flags:0x00004002
[  978.082088][    C0] Call Trace:
[  978.085363][    C0]  <TASK>
[  978.088285][    C0]  __schedule+0x15ae/0x4660
[  978.092788][    C0]  ? __wake_up_sync+0x125/0x190
[  978.097659][    C0]  ? __lock_acquire+0x7d80/0x7d80
[  978.102673][    C0]  ? asan.module_dtor+0x20/0x20
[  978.107506][    C0]  ? ep_poll_callback+0x5c8/0xa40
[  978.112516][    C0]  ? preempt_schedule+0xc0/0xd0
[  978.117350][    C0]  preempt_schedule_common+0x82/0xc0
[  978.122620][    C0]  preempt_schedule+0xc0/0xd0
[  978.127283][    C0]  ? schedule_preempt_disabled+0x20/0x20
[  978.132896][    C0]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  978.138869][    C0]  ? __lock_acquire+0x7d80/0x7d80
[  978.143909][    C0]  ? lock_chain_count+0x20/0x20
[  978.148778][    C0]  preempt_schedule_thunk+0x1a/0x30
[  978.154002][    C0]  _raw_spin_unlock_irqrestore+0x111/0x120
[  978.159801][    C0]  ? _raw_spin_unlock+0x40/0x40
[  978.164655][    C0]  ? __wake_up_common+0x28e/0x4d0
[  978.169667][    C0]  __wake_up_sync_key+0x12c/0x1a0
[  978.174681][    C0]  ? __wake_up_locked_key_bookmark+0x20/0x20
[  978.180644][    C0]  ? __lock_acquire+0x7d80/0x7d80
[  978.185667][    C0]  ? sock_def_readable+0xad/0x420
[  978.190756][    C0]  sock_def_readable+0x1e1/0x420
[  978.195679][    C0]  unix_dgram_sendmsg+0x1093/0x16e0
[  978.200887][    C0]  ? unix_dgram_poll+0x680/0x680
[  978.205804][    C0]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[  978.212230][    C0]  ? apparmor_socket_sendmsg+0x8e/0x330
[  978.217759][    C0]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  978.223046][    C0]  ? security_socket_sendmsg+0x80/0xa0
[  978.228488][    C0]  sock_write_iter+0x2dc/0x420
[  978.233233][    C0]  ? sock_read_iter+0x3f0/0x3f0
[  978.238077][    C0]  ? common_file_perm+0x198/0x1f0
[  978.243088][    C0]  vfs_write+0x474/0x9a0
[  978.247321][    C0]  ? file_end_write+0x250/0x250
[  978.252169][    C0]  ? __se_sys_sendmsg+0x1e7/0x2c0
[  978.257173][    C0]  ? __fdget_pos+0x1d8/0x330
[  978.261745][    C0]  ksys_write+0x151/0x260
[  978.266056][    C0]  ? __ia32_sys_read+0x90/0x90
[  978.270800][    C0]  ? lockdep_hardirqs_on+0x98/0x150
[  978.275985][    C0]  do_syscall_64+0x55/0xb0
[  978.280381][    C0]  ? clear_bhb_loop+0x40/0x90
[  978.285038][    C0]  ? clear_bhb_loop+0x40/0x90
[  978.289695][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  978.295564][    C0] RIP: 0033:0x7f06ddaa7407
[  978.300047][    C0] RSP: 002b:00007ffd8d8f2010 EFLAGS: 00000202 ORIG_RAX: 0000000000000001
[  978.308438][    C0] RAX: ffffffffffffffda RBX: 00007f06de24d880 RCX: 00007f06ddaa7407
[  978.316405][    C0] RDX: 0000000000000000 RSI: 00007ffd8d8f20b7 RDI: 000000000000000a
[  978.324355][    C0] RBP: 000000000000000a R08: 0000000000000000 R09: 0000000000000000
[  978.332308][    C0] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f06de24d6e8
[  978.340275][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 00005573749c3690
[  978.348244][    C0]  </TASK>
[  978.351245][    C0] task:syz.1.2657      state:R  running task     stack:26408 pid:14124 ppid:13252  flags:0x00004002
[  978.362001][    C0] Call Trace:
[  978.365259][    C0]  <TASK>
[  978.368175][    C0]  __schedule+0x15ae/0x4660
[  978.372672][    C0]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  978.378724][    C0]  ? asan.module_dtor+0x20/0x20
[  978.383553][    C0]  ? mark_lock+0x94/0x320
[  978.387862][    C0]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  978.393830][    C0]  ? preempt_schedule_irq+0xb4/0x150
[  978.399114][    C0]  preempt_schedule_irq+0xbf/0x150
[  978.404210][    C0]  ? preempt_schedule_notrace+0x110/0x110
[  978.409912][    C0]  ? rcu_irq_exit_check_preempt+0xdf/0x210
[  978.415719][    C0]  irqentry_exit+0x67/0x70
[  978.420143][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  978.426118][    C0] RIP: 0010:page_ext_get+0x4b/0x2b0
[  978.431310][    C0] Code: 00 48 c7 c7 a0 1d 13 8d 31 f6 31 d2 b9 02 00 00 00 45 31 c0 45 31 c9 53 e8 b2 aa 7d ff 48 83 c4 08 e8 19 f1 a1 08 89 c5 31 ff <89> c6 e8 5e 98 9c ff 85 ed 74 10 e8 f5 5e 86 ff 84 c0 74 0e e8 9c
[  978.450897][    C0] RSP: 0018:ffffc900042572b8 EFLAGS: 00000246
[  978.456944][    C0] RAX: 0000000000000001 RBX: ffffffff81eada42 RCX: ffff888021641e00
[  978.464895][    C0] RDX: 0000000000000000 RSI: ffffffff8acadd60 RDI: 0000000000000000
[  978.472862][    C0] RBP: 0000000000000001 R08: dffffc0000000000 R09: 1ffffffff223d6a0
[  978.480812][    C0] R10: dffffc0000000000 R11: fffffbfff223d6a1 R12: 00fff00000000000
[  978.488763][    C0] R13: dffffc0000000000 R14: ffffea000143e380 R15: ffffea000143e380
[  978.496731][    C0]  ? page_ext_get+0x22/0x2b0
[  978.501311][    C0]  ? page_ext_get+0x47/0x2b0
[  978.505885][    C0]  __page_table_check_zero+0x138/0x4b0
[  978.511328][    C0]  get_page_from_freelist+0x2181/0x22a0
[  978.516886][    C0]  ? verify_lock_unused+0x140/0x140
[  978.522097][    C0]  ? __next_zones_zonelist+0x9d/0x130
[  978.527472][    C0]  __alloc_pages+0x1f0/0x460
[  978.532053][    C0]  ? zone_statistics+0x170/0x170
[  978.536979][    C0]  __folio_alloc+0x10/0x20
[  978.541377][    C0]  vma_alloc_folio+0x474/0x8f0
[  978.546161][    C0]  ? mpol_shared_policy_lookup+0x14b/0x1e0
[  978.551977][    C0]  shmem_alloc_folio+0x1a9/0x2a0
[  978.556915][    C0]  ? folio_put+0xd0/0xd0
[  978.561156][    C0]  ? __vm_enough_memory+0x11a/0x370
[  978.566362][    C0]  ? shmem_inode_acct_block+0x324/0x460
[  978.571937][    C0]  shmem_alloc_and_acct_folio+0x1cb/0x6c0
[  978.577656][    C0]  ? put_swap_device+0x230/0x230
[  978.582583][    C0]  ? xas_load+0x12b/0x140
[  978.586894][    C0]  ? filemap_get_entry+0xce/0x3f0
[  978.591909][    C0]  ? filemap_get_entry+0xce/0x3f0
[  978.596916][    C0]  ? filemap_get_entry+0x375/0x3f0
[  978.602013][    C0]  ? page_cache_prev_miss+0x390/0x390
[  978.607372][    C0]  ? page_copy_sane+0x4e/0x270
[  978.612124][    C0]  shmem_get_folio_gfp+0xe1d/0x2b40
[  978.617332][    C0]  shmem_write_begin+0xf2/0x430
[  978.622171][    C0]  generic_perform_write+0x2fe/0x5c0
[  978.627449][    C0]  ? generic_file_direct_write+0x3e0/0x3e0
[  978.633240][    C0]  ? file_update_time+0x192/0x1a0
[  978.638248][    C0]  shmem_file_write_iter+0xfb/0x120
[  978.643430][    C0]  vfs_write+0x474/0x9a0
[  978.647659][    C0]  ? file_end_write+0x250/0x250
[  978.652490][    C0]  ? __fget_files+0x3fc/0x460
[  978.657153][    C0]  ? __fdget_pos+0x1d8/0x330
[  978.661727][    C0]  ? ksys_write+0x74/0x260
[  978.666127][    C0]  ksys_write+0x151/0x260
[  978.670439][    C0]  ? __ia32_sys_read+0x90/0x90
[  978.675186][    C0]  ? lockdep_hardirqs_on+0x98/0x150
[  978.680370][    C0]  do_syscall_64+0x55/0xb0
[  978.684773][    C0]  ? clear_bhb_loop+0x40/0x90
[  978.689448][    C0]  ? clear_bhb_loop+0x40/0x90
[  978.694104][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  978.699992][    C0] RIP: 0033:0x7fd5e7d5e84e
[  978.704391][    C0] RSP: 002b:00007fd5e8d08da8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  978.712874][    C0] RAX: ffffffffffffffda RBX: 00007fd5e8d096c0 RCX: 00007fd5e7d5e84e
[  978.720842][    C0] RDX: 0000000004000000 RSI: 00007fd5ddbf7000 RDI: 0000000000000003
[  978.728805][    C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  978.736765][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[  978.744725][    C0] R13: 00007fd5e8d08ee0 R14: 00007fd5e8d08ea0 R15: 00007fd5ddbf7000
[  978.752705][    C0]  </TASK>
[  978.755705][    C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g92321 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
[  978.766874][    C0] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  978.776820][    C0] rcu: RCU grace-period kthread stack dump:
[  978.782687][    C0] task:rcu_preempt     state:R  running task     stack:27848 pid:17    ppid:2      flags:0x00004000
[  978.793440][    C0] Call Trace:
[  978.796697][    C0]  <TASK>
[  978.799609][    C0]  __schedule+0x15ae/0x4660
[  978.804100][    C0]  ? __lock_acquire+0x7d80/0x7d80
[  978.809109][    C0]  ? lock_chain_count+0x20/0x20
[  978.813941][    C0]  ? lockdep_hardirqs_on+0x98/0x150
[  978.819122][    C0]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  978.824997][    C0]  ? asan.module_dtor+0x20/0x20
[  978.829848][    C0]  ? rcu_is_watching+0x15/0xb0
[  978.834605][    C0]  schedule+0xbd/0x170
[  978.838669][    C0]  schedule_timeout+0x188/0x2d0
[  978.843516][    C0]  ? console_conditional_schedule+0x40/0x40
[  978.849396][    C0]  ? update_process_times+0x1b0/0x1b0
[  978.854748][    C0]  ? prepare_to_swait_event+0x344/0x360
[  978.860280][    C0]  rcu_gp_fqs_loop+0x30d/0x1590
[  978.865114][    C0]  ? rcu_gp_kthread+0x3b0/0x3b0
[  978.869945][    C0]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  978.875906][    C0]  ? __lock_acquire+0x7d80/0x7d80
[  978.880909][    C0]  ? rcu_gp_init+0x1530/0x1530
[  978.885652][    C0]  ? rcu_gp_cleanup+0xade/0xc30
[  978.890481][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  978.895660][    C0]  ? lockdep_hardirqs_on+0x98/0x150
[  978.900842][    C0]  rcu_gp_kthread+0x9d/0x3b0
[  978.905410][    C0]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[  978.910498][    C0]  ? __kthread_parkme+0x71/0x1c0
[  978.915418][    C0]  ? __kthread_parkme+0x15b/0x1c0
[  978.920453][    C0]  kthread+0x2fa/0x390
[  978.924516][    C0]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[  978.929611][    C0]  ? kthread_blkcg+0xd0/0xd0
[  978.934200][    C0]  ret_from_fork+0x48/0x80
[  978.938622][    C0]  ? kthread_blkcg+0xd0/0xd0
[  978.943193][    C0]  ret_from_fork_asm+0x11/0x20
[  978.947946][    C0]  </TASK>
[  978.950948][    C0] rcu: Stack dump where RCU GP kthread last ran:
[  978.957248][    C0] CPU: 0 PID: 14153 Comm: syz.4.2666 Not tainted syzkaller #0
[  978.964681][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  978.974717][    C0] RIP: 0010:__sanitizer_cov_trace_pc+0x30/0x60
[  978.980851][    C0] Code: 04 24 65 48 8b 0d 10 49 7c 7e 65 8b 15 11 49 7c 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 1c 16 00 00 00 74 2c <8b> 91 f8 15 00 00 83 fa 02 75 21 48 8b 91 00 16 00 00 48 8b 32 48
[  979.000438][    C0] RSP: 0018:ffffc9000449faa0 EFLAGS: 00000246
[  979.006513][    C0] RAX: ffffffff813256c7 RBX: ffffc9000449fb60 RCX: ffff888026659e00
[  979.014465][    C0] RDX: 0000000000000000 RSI: 000000000007ffff RDI: 0000000000080000
[  979.022414][    C0] RBP: 0000000000000000 R08: ffffffff8e8c7caf R09: 1ffffffff1d18f95
[  979.030372][    C0] R10: dffffc0000000000 R11: fffffbfff1d18f96 R12: 0000000000000340
[  979.038345][    C0] R13: dffffc0000000000 R14: 00007fbf41af1fa8 R15: ffffc9000449fb80
[  979.046345][    C0] FS:  00007fbf41af26c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  979.055266][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  979.061838][    C0] CR2: 00007fbf40beb700 CR3: 00000000684a0000 CR4: 00000000003506f0
[  979.069794][    C0] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083
[  979.077746][    C0] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  979.085699][    C0] Call Trace:
[  979.088960][    C0]  <TASK>
[  979.091876][    C0]  fpu__alloc_mathframe+0x77/0x120
[  979.096977][    C0]  get_sigframe+0x4c3/0x7d0
[  979.101495][    C0]  ? load_gs_index+0x1a0/0x1a0
[  979.106260][    C0]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  979.112255][    C0]  ? get_signal+0x1197/0x1390
[  979.116925][    C0]  x64_setup_rt_frame+0x164/0xc30
[  979.121960][    C0]  ? lockdep_hardirqs_on+0x98/0x150
[  979.127154][    C0]  ? _raw_spin_unlock_irq+0x2e/0x50
[  979.132342][    C0]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  979.138305][    C0]  ? sigaltstack_size_valid+0x1e0/0x1e0
[  979.143843][    C0]  ? arch_do_signal_or_restart+0x39b/0x7b0
[  979.149636][    C0]  arch_do_signal_or_restart+0x411/0x7b0
[  979.155259][    C0]  ? get_sigframe_size+0x20/0x20
[  979.160185][    C0]  ? exit_to_user_mode_loop+0x3b/0x110
[  979.165627][    C0]  exit_to_user_mode_loop+0x70/0x110
[  979.170893][    C0]  exit_to_user_mode_prepare+0xee/0x180
[  979.176419][    C0]  syscall_exit_to_user_mode+0x1a/0x50
[  979.181864][    C0]  do_syscall_64+0x61/0xb0
[  979.186263][    C0]  ? clear_bhb_loop+0x40/0x90
[  979.190920][    C0]  ? clear_bhb_loop+0x40/0x90
[  979.195581][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  979.201452][    C0] RIP: 0033:0x7fbf40b9e017
[  979.205859][    C0] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89
[  979.226160][    C0] RSP: 002b:00007fbf41af2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048
[  979.234554][    C0] RAX: 0000000000000048 RBX: 00007fbf40e25fa0 RCX: 00007fbf40b9e019
[  979.242517][    C0] RDX: 0000200000000280 RSI: 0000000000000026 RDI: 0000000000000003
[  979.250566][    C0] RBP: 00007fbf40c3500c R08: 0000000000000000 R09: 0000000000000000
[  979.258516][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  979.266470][    C0] R13: 00007fbf40e26038 R14: 00007fbf40e25fa0 R15: 00007ffd47c20d88
[  979.274444][    C0]  </TASK>
[  979.277803][    C0] sched: RT throttling activated