last executing test programs:

2.815214767s ago: executing program 2 (id=38):
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setfsuid(0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0)
r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
sendfile(r6, r5, 0x0, 0x7ffff000)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)=ANY=[])
read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, <r7=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, r7}, 0x50)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)

1.932849616s ago: executing program 2 (id=47):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f00000004c0)={[{@nodiscard}, {}, {@acl}, {@alloc_mode_reuse}, {@checkpoint_diasble}, {@disable_roll_forward}, {@background_gc_on}, {@nouser_xattr}, {@fsync_mode_posix}, {@six_active_logs}, {@data_flush}, {@adaptive_mode}, {@jqfmt_vfsold}, {@noinline_dentry}]}, 0x1, 0x5505, &(0x7f0000002480)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x441, 0x11b)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0)

1.7244939s ago: executing program 0 (id=49):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000100)={[{@quota}, {@bsdgroups}, {@nobh}, {@nodelalloc}, {@abort}]}, 0x4, 0x756, &(0x7f00000002c0)="$eJzs3M1rXOUaAPDnnGaafuTeyYUL9+pChBZaKD1Jmk27aty4KxQKbmtITkLISSZkJrUTC7auhdpsFARR1y7dCqX+Ae6koOBeEK1xIW5GzuSjNGam0ybpSPr7wcl53vP1vE/m8GYO5D0BvLReL38kEUMRcTUiqpvb04g42o6ORdzeOG790a2pckmi1br2S1KeFuut6va1ks31yWifEv+PiAeViHPv/z1vvbk6P1kU+fJme6SxsDRSb66en1uYnM1n88Wx8UujF8fHL46OP7WG//VY6+m3Lh2/9+2ba2vffdW4+9rA+SQm2nXHZm09XuaZbPxOKjGxY/viQSTro6TfHQAAoCfl9/wjETHQ/pZajSPtCAAAADhMWoMtAAAA4NBLot89AAAAAA7W1v8BbM3tPah5sJ38/EZEDO+Wf6A9hzjiWFQi4sR68sTMhGTjNNiT23ci4v7Ezvvvi/IOu73Ha4/uaD85R/roHq/Ofrhfjj8Tu40/6fb4E7uMPwNb707Yo87j3+P8RzqMf1d7zPH1p69UOua/E/HqwG75k+38SYf8b/eY/+7aB/c67Wt9HnFm178/yRO5urwfYmJmruj6+oEHf5592K3+E53yJ93rX+qx/nfXf5vvNJaU+c+e6v7575a/vCc+3OxHGhH3Ntdle21HjlML33/Trf7piNbzfP6f9Vj/j18O3uzxUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGhLI2IokjTbjtM0yyJORsR/40Ra1OqNczO1lcXpcl/EcFTSmbkiH42I6kY7Kdtj7fhx+8KO9nhE/OeH4xtJ54o8m6oV0/0uHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG0nI2IokjSLiDQifq+maZZFDPRw7uAL6B8AAACwT4b73QEAAADgwHn+BwAAgMPveZ//k33uBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCoXb1ypVxa649uTZXt6RvNlfnajfPTeX0+W1iZyqZqy0vZbK02W+TZVG3hadcrarWlsUuxcnOkkdcbI/Xm6vWF2spi4/rcwuRsfj2vvJCqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFZD7SVJs4hI23GaZlnEvyJiOCrJzFyRj0bEvyPiYbUyWLbH+t1pAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9l29uTo/WRT5skAgeGHBexHxD+hGl6DfIxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP1Qb67OTxZFvlzvd08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADor/SnJCLK5Uz19NDOvUeTP6rtdUS888m1j25ONhrLY+X2X7e3Nz7e3H6hH/0HAACAl8LlZzl46zl96zkeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgV/Xm6vxkUeTLewsuR3O1lXQ4pt81AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz+evAAAA//8KQsc4")
chdir(&(0x7f0000000240)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80101, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000240)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})

1.618103914s ago: executing program 0 (id=51):
r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @pix={0x0, 0xe55, 0x33565348, 0x9, 0x0, 0x0, 0x0, 0xfeedcafe, 0x3, 0x8}})

1.454973347s ago: executing program 0 (id=52):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, 0x0)
ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, <r1=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x1)

1.310679401s ago: executing program 2 (id=53):
socket(0xf, 0x800, 0x2)

1.310249553s ago: executing program 0 (id=54):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000)
migrate_pages(0x0, 0x5, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x272)
sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$tipc(0x1e, 0x2, 0x0)

933.371055ms ago: executing program 2 (id=58):
setresuid(0x0, 0xee00, 0x0)
faccessat2(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup\x00', 0x7, 0x1100)

825.112357ms ago: executing program 1 (id=59):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x4}, 0x1c)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x200}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002800)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000240)={0xa, 0x4e22, 0x2, @loopback={0x60}, 0x7ff}, 0x1c, 0x0}}], 0x2, 0x0)

824.864371ms ago: executing program 2 (id=60):
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[<r1=>0x0], 0x0, 0x0, 0x0, 0x40000004})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc01c64b9, &(0x7f0000000600)={&(0x7f00000001c0)=[<r2=>0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0], 0x3, r1})
ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000640)={&(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}, {}, {}], r2, 0x0, '\x00', 0x9, 0x8})

824.135492ms ago: executing program 1 (id=61):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, 0x0)

774.323493ms ago: executing program 2 (id=62):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="00000800000008048263d1cb"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000040)='P')

774.01341ms ago: executing program 1 (id=63):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x1, 0x0, 0x7, 0x0, 0x0, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x0, 0xffffffffffffffff}, 0xfffffffe}}, 0xb8}}, 0x4004)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x1, 0xa, 0x20}, {}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x4000}}, 0xb8}}, 0x0)

693.09692ms ago: executing program 1 (id=64):
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0xe7ff, 0x4, 0x32344d59, 0x0, 0x0, [{}, {}, {}, {0x8001}, {}, {}, {0x0, 0x2}], 0x0, 0x0, 0x7}})

692.802141ms ago: executing program 1 (id=65):
r0 = syz_open_dev$cec(&(0x7f0000000400), 0x0, 0x80200)
ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000000c0)={"f2efe21e", 0x0, 0x5, 0x4a, 0x0, 0x1ff, "2179d46fd08e3c0ced34c7d0c7e6d7", "7ca24a13", "0400", "a2d1d4a2", ["1af0b1ba1cb8fd54c9c9b587", "bed0f3d6ce7a5f7389827f04", "33af343c60abc64f2fdc9ddf", "9b3842fc63849f62b6eb1c3c"]})
r1 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0)
ioctl$CEC_TRANSMIT(r1, 0xc0386105, &(0x7f0000000d40)={0x2, 0x3, 0x3, 0xfffffffc, 0x0, 0x4063, "57c1169b6664ea61326ac71ae7213059", 0x0, 0x0, 0x0, 0xfd, 0x5, 0x1, 0x4})
ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000340)={"8171f879", 0x7, 0xb0, 0x0, 0x9, 0x5, "00800000000000f51000", "00598b00", "0200", "01000800", ["dc001000", "0000000000ffe700005a00", "4a218302000000215c384d00", "790000a5a16706008c00edbf"]})

624.466087ms ago: executing program 1 (id=66):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r1, &(0x7f0000000380), 0x0}, 0x20)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c000000100009060400"/20, @ANYRES32=0x0, @ANYBLOB="a7ffa888080001002c0012800800010067747000200002fd7e13552a7880050005000100000014000800fc01"], 0x4c}}, 0x20000040)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x77, 0x4)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x4000000, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0xff}, 0x0, 0x1}}, @TCA_TBF_BURST={0xfef9, 0x6, 0x9}]}}]}, 0x60}}, 0x0)

196.90415ms ago: executing program 0 (id=67):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000400000000000008000000180001801400020073797a5f74756e0000000000000000001c0002800400010014000380"], 0x48}, 0x1, 0x0, 0x0, 0x20004094}, 0x0)

0s ago: executing program 0 (id=68):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000078000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000213c0011800a0001006c696d69740000002c0002800c00024000000000000000030c000140000000000000010108000540400000010800044000000001"], 0xc0}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:29792' (ED25519) to the list of known hosts.
syzkaller login: [   56.087935][ T5826] cgroup: Unknown subsys name 'net'
[   56.175337][ T5826] cgroup: Unknown subsys name 'cpuset'
[   56.179726][ T5826] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.209382][ T5826] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   63.755893][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   63.762386][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   63.765413][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   63.769774][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   63.773631][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   63.821825][ T5852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   63.826532][ T5852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   63.830247][ T5852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   63.835296][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   63.838577][ T5852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   63.841866][ T5852] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   63.846041][   T57] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   63.849785][ T5852] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   63.875166][ T5854] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   63.882311][ T5854] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   64.139959][ T5843] chnl_net:caif_netlink_parms(): no params data found
[   64.329676][ T5848] chnl_net:caif_netlink_parms(): no params data found
[   64.369945][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.373697][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.376843][ T5843] bridge_slave_0: entered allmulticast mode
[   64.380659][ T5843] bridge_slave_0: entered promiscuous mode
[   64.390715][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.394041][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.396891][ T5843] bridge_slave_1: entered allmulticast mode
[   64.399988][ T5843] bridge_slave_1: entered promiscuous mode
[   64.426541][ T5847] chnl_net:caif_netlink_parms(): no params data found
[   64.458453][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.488313][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.579618][ T5843] team0: Port device team_slave_0 added
[   64.583025][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.586476][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.589175][ T5848] bridge_slave_0: entered allmulticast mode
[   64.594284][ T5848] bridge_slave_0: entered promiscuous mode
[   64.606279][ T5843] team0: Port device team_slave_1 added
[   64.621742][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.624386][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.627351][ T5848] bridge_slave_1: entered allmulticast mode
[   64.630936][ T5848] bridge_slave_1: entered promiscuous mode
[   64.700098][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.704471][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.715005][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.723328][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.726904][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.729557][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.733581][ T5847] bridge_slave_0: entered allmulticast mode
[   64.737437][ T5847] bridge_slave_0: entered promiscuous mode
[   64.744723][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.747292][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.757774][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.773962][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.777612][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.780149][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.782602][ T5847] bridge_slave_1: entered allmulticast mode
[   64.785714][ T5847] bridge_slave_1: entered promiscuous mode
[   64.861342][ T5848] team0: Port device team_slave_0 added
[   64.867231][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.874747][ T5843] hsr_slave_0: entered promiscuous mode
[   64.877992][ T5843] hsr_slave_1: entered promiscuous mode
[   64.883356][ T5848] team0: Port device team_slave_1 added
[   64.887856][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.962584][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.965596][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.977686][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.985316][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.988352][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.999436][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.027281][ T5847] team0: Port device team_slave_0 added
[   65.045277][ T5847] team0: Port device team_slave_1 added
[   65.102583][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.105675][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.117515][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.125534][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.128586][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.139832][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.194310][ T5848] hsr_slave_0: entered promiscuous mode
[   65.197477][ T5848] hsr_slave_1: entered promiscuous mode
[   65.200385][ T5848] debugfs: 'hsr0' already exists in 'hsr'
[   65.203601][ T5848] Cannot create hsr debugfs directory
[   65.314939][ T5847] hsr_slave_0: entered promiscuous mode
[   65.318149][ T5847] hsr_slave_1: entered promiscuous mode
[   65.320938][ T5847] debugfs: 'hsr0' already exists in 'hsr'
[   65.323335][ T5847] Cannot create hsr debugfs directory
[   65.515382][ T5843] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   65.525168][ T5843] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   65.534186][ T5843] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   65.547041][ T5843] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   65.624084][ T5848] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   65.638047][ T5848] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   65.645343][ T5848] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   65.664129][ T5848] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   65.734453][ T5847] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   65.757992][ T5847] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   65.775689][ T5847] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   65.783532][ T5847] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   65.822432][ T5234] Bluetooth: hci0: command tx timeout
[   65.863365][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.902597][ T5234] Bluetooth: hci1: command tx timeout
[   65.912861][ T5843] 8021q: adding VLAN 0 to HW filter on device team0
[   65.934350][ T3591] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.937256][ T3591] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.943374][ T3591] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.945692][ T3591] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.979060][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.982276][ T5234] Bluetooth: hci2: command tx timeout
[   66.002549][ T5848] 8021q: adding VLAN 0 to HW filter on device team0
[   66.022548][ T3591] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.025407][ T3591] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.047654][ T3591] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.050645][ T3591] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.067767][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.147434][ T5847] 8021q: adding VLAN 0 to HW filter on device team0
[   66.168696][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.171746][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.179022][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.181872][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.278953][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.333689][ T5843] veth0_vlan: entered promiscuous mode
[   66.342589][ T5843] veth1_vlan: entered promiscuous mode
[   66.386684][ T5843] veth0_macvtap: entered promiscuous mode
[   66.409018][ T5843] veth1_macvtap: entered promiscuous mode
[   66.423842][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.434756][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.447426][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.455699][ T5861] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.482496][ T5861] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.487141][ T5861] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.491549][ T5861] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.564868][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.576554][ T5848] veth0_vlan: entered promiscuous mode
[   66.589540][   T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.599069][ T5848] veth1_vlan: entered promiscuous mode
[   66.600604][   T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.644099][   T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.650672][   T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.678197][ T5847] veth0_vlan: entered promiscuous mode
[   66.693024][ T5848] veth0_macvtap: entered promiscuous mode
[   66.697601][ T5847] veth1_vlan: entered promiscuous mode
[   66.707787][ T5848] veth1_macvtap: entered promiscuous mode
[   66.707816][ T5843] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   66.749524][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.770513][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.786925][ T5847] veth0_macvtap: entered promiscuous mode
[   66.798842][ T5847] veth1_macvtap: entered promiscuous mode
[   66.804797][ T5908] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.810837][ T5908] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.815476][ T5908] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.835924][ T5908] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.869823][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.910239][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.940108][ T5908] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.944948][ T5908] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.954241][ T3591] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.957220][ T3591] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.962750][ T5908] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.968434][ T5908] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.003193][ T3020] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.006382][ T3020] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.053216][ T3591] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.056328][ T3591] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.093114][ T3591] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.097180][ T3591] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.133592][   T10] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[   67.205642][ T5921] loop0: detected capacity change from 0 to 1024
[   67.298543][   T10] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[   67.306483][   T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   67.309677][   T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[   67.325026][   T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   67.332925][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   67.335387][   T10] usb 3-1: Product: syz
[   67.339582][   T10] usb 3-1: Manufacturer: syz
[   67.342906][   T10] usb 3-1: SerialNumber: syz
[   67.541237][ T5894] psmouse serio2: Failed to reset mouse on : -5
[   67.595393][ T5935] loop0: detected capacity change from 0 to 512
[   67.606985][ T5935] EXT4-fs (loop0): revision level too high, forcing read-only mode
[   67.610098][ T5935] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002]
[   67.616633][ T5935] EXT4-fs (loop0): orphan cleanup on readonly fs
[   67.618956][ T5935] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #13: comm syz.0.12: iget: bad i_size value: 12154761577498
[   67.625645][ T5935] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.12: couldn't read orphan inode 13 (err -117)
[   67.632707][ T5935] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[   67.644126][ T5935] EXT4-fs warning (device loop0): dx_probe:861: inode #2: comm syz.0.12: dx entry: limit 65535 != root limit 120
[   67.648539][ T5935] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.12: Corrupt directory, running e2fsck is recommended
[   67.654885][ T5935] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 3: comm syz.0.12: path /6/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0
[   67.681025][ T5847] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   67.757836][   T10] usb 3-1: 0:2 : does not exist
[   67.901725][ T5234] Bluetooth: hci0: command tx timeout
[   67.937561][ T5944] 8021q: adding VLAN 0 to HW filter on device bond1
[   67.982993][ T5234] Bluetooth: hci1: command tx timeout
[   68.062224][ T5234] Bluetooth: hci2: command tx timeout
[   68.341501][ T5895] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   68.491318][ T5895] usb 1-1: Using ep0 maxpacket: 32
[   68.497071][ T5895] usb 1-1: config 0 has an invalid interface number: 132 but max is 0
[   68.500297][ T5895] usb 1-1: config 0 has no interface number 0
[   68.503272][ T5895] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[   68.509886][ T5895] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[   68.513539][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   68.516607][ T5895] usb 1-1: Product: syz
[   68.518327][ T5895] usb 1-1: Manufacturer: syz
[   68.520205][ T5895] usb 1-1: SerialNumber: syz
[   68.526531][ T5895] usb 1-1: config 0 descriptor??
[   68.536912][ T5895] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[   68.540681][ T5895] em28xx 1-1:0.132: Video interface 132 found:
[   68.777521][   T10] usb 3-1: 1:0: failed to get current value for ch 0 (-22)
[   68.818046][   T10] usb 3-1: USB disconnect, device number 2
[   68.845795][ T5849] udevd[5849]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   68.940132][ T5895] em28xx 1-1:0.132: unknown em28xx chip ID (39)
[   69.359067][ T5957] loop2: detected capacity change from 0 to 4096
[   69.385421][ T5957] ntfs3(loop2): ino=19, mi_enum_attr
[   69.387916][ T5957] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[   69.762415][ T5895] em28xx 1-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5)
[   69.766060][ T5895] em28xx 1-1:0.132: failed to read eeprom (err=-5)
[   69.768708][ T5895] em28xx 1-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5]
[   69.841247][ T5895] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[   69.844912][ T5895] em28xx 1-1:0.132: analog set to bulk mode.
[   69.847778][  T793] em28xx 1-1:0.132: Registering V4L2 extension
[   69.865400][ T5895] usb 1-1: USB disconnect, device number 2
[   69.878393][ T5895] em28xx 1-1:0.132: Disconnecting em28xx
[   69.981871][ T5234] Bluetooth: hci0: command tx timeout
[   70.071864][ T5234] Bluetooth: hci1: command tx timeout
[   70.139544][  T793] em28xx 1-1:0.132: Config register raw data: 0xffffffed
[   70.151585][ T5234] Bluetooth: hci2: command tx timeout
[   70.157716][  T793] em28xx 1-1:0.132: AC97 chip type couldn't be determined
[   70.160772][  T793] em28xx 1-1:0.132: No AC97 audio processor
[   70.175872][  T793] usb 1-1: Decoder not found
[   70.183593][  T793] em28xx 1-1:0.132: failed to create media graph
[   70.186248][  T793] em28xx 1-1:0.132: V4L2 device video103 deregistered
[   70.209358][  T793] em28xx 1-1:0.132: Remote control support is not available for this card.
[   70.222766][ T5895] em28xx 1-1:0.132: Closing input extension
[   70.263158][ T5895] em28xx 1-1:0.132: Freeing device
[   70.845760][ T5969] netlink: 44 bytes leftover after parsing attributes in process `syz.2.24'.
[   71.077312][ T5971] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1
[   71.081089][ T5971] ref_ctr increment failed for inode: 0x64 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88810de3eb80
[   71.103199][   T33] audit: type=1804 audit(1757322486.511:2): pid=5971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.23" name="/newroot/16/file0" dev="tmpfs" ino=100 res=1 errno=0
[   71.189821][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[   71.193787][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[   71.285694][ T5975] sctp: [Deprecated]: syz.2.26 (pid 5975) Use of int in max_burst socket option deprecated.
[   71.285694][ T5975] Use struct sctp_assoc_value instead
[   71.405016][ T5979] netlink: 24 bytes leftover after parsing attributes in process `syz.2.28'.
[   71.439767][ T5894] misc userio: Buffer overflowed, userio client isn't keeping up
[   71.467430][ T5981] @: renamed from vlan0 (while UP)
[   71.688639][ T5991] nbd: socks must be embedded in a SOCK_ITEM attr
[   71.745963][ T5995] loop2: detected capacity change from 0 to 136
[   71.758720][ T5995] Attempt to read inode for relocated directory
[   72.064523][ T5234] Bluetooth: hci0: command tx timeout
[   72.143187][ T5234] Bluetooth: hci1: command tx timeout
[   72.221867][ T5234] Bluetooth: hci2: command tx timeout
[   72.374331][ T6007] loop0: detected capacity change from 0 to 4096
[   72.412716][ T6008] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   72.597203][ T6014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.44'.
[   72.774267][ T5894] input: PS/2 Generic Mouse as /devices/serio2/input/input4
[   72.903050][ T5234] Bluetooth: hci1: ISO packet too small
[   72.975974][ T6027] loop0: detected capacity change from 0 to 2048
[   72.981920][ T6027] EXT4-fs: Ignoring removed nobh option
[   72.993021][ T5894] psmouse serio2: Failed to enable mouse on 
[   73.001092][ T6027] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   73.017521][ T6027] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   73.059732][ T6021] loop2: detected capacity change from 0 to 40427
[   73.093756][ T6021] F2FS-fs (loop2): invalid crc value
[   73.107242][ T5847] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.208382][ T6021] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[   73.224468][ T6021] F2FS-fs (loop2): Start checkpoint disabled!
[   73.239360][ T6021] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0
[   73.243820][ T6021] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[   73.303764][ T1091] kworker/u10:4: attempt to access beyond end of device
[   73.303764][ T1091] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   73.319308][ T1091] CPU: 1 UID: 0 PID: 1091 Comm: kworker/u10:4 Not tainted syzkaller #0 PREEMPT(full) 
[   73.319330][ T1091] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   73.319338][ T1091] Workqueue: writeback wb_workfn (flush-7:2)
[   73.319362][ T1091] Call Trace:
[   73.319369][ T1091]  <TASK>
[   73.319376][ T1091]  dump_stack_lvl+0x189/0x250
[   73.319432][ T1091]  ? __pfx_dump_stack_lvl+0x10/0x10
[   73.319447][ T1091]  ? __pfx_queue_work_on+0x10/0x10
[   73.319459][ T1091]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   73.319479][ T1091]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   73.319505][ T1091]  f2fs_handle_critical_error+0x37c/0x540
[   73.319528][ T1091]  f2fs_write_end_io+0x886/0xb60
[   73.319551][ T1091]  __submit_merged_bio+0x27a/0x6a0
[   73.319573][ T1091]  __submit_merged_write_cond+0x255/0x530
[   73.319594][ T1091]  f2fs_write_data_pages+0x261d/0x3000
[   73.319634][ T1091]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   73.319661][ T1091]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[   73.319673][ T1091]  ? stack_trace_save+0x9c/0xe0
[   73.319710][ T1091]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[   73.319738][ T1091]  ? trace_f2fs_writepages+0x7f/0x200
[   73.319756][ T1091]  ? f2fs_write_node_pages+0x478/0x6e0
[   73.319777][ T1091]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[   73.319805][ T1091]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   73.319831][ T1091]  do_writepages+0x32e/0x550
[   73.319853][ T1091]  ? reacquire_held_locks+0x127/0x1d0
[   73.319867][ T1091]  ? writeback_sb_inodes+0x384/0x1010
[   73.319893][ T1091]  __writeback_single_inode+0x145/0xff0
[   73.319910][ T1091]  ? do_raw_spin_unlock+0x4d/0x240
[   73.319928][ T1091]  writeback_sb_inodes+0x6c7/0x1010
[   73.319964][ T1091]  ? __pfx_writeback_sb_inodes+0x10/0x10
[   73.320012][ T1091]  ? rcu_is_watching+0x15/0xb0
[   73.320032][ T1091]  wb_writeback+0x43b/0xaf0
[   73.320053][ T1091]  ? queue_io+0x2f1/0x590
[   73.320070][ T1091]  ? __pfx_wb_writeback+0x10/0x10
[   73.320092][ T1091]  ? _raw_spin_unlock_irq+0x23/0x50
[   73.320114][ T1091]  wb_workfn+0x409/0xef0
[   73.320139][ T1091]  ? __pfx_wb_workfn+0x10/0x10
[   73.320155][ T1091]  ? __lock_acquire+0xab9/0xd20
[   73.320180][ T1091]  ? process_scheduled_works+0x9ef/0x17b0
[   73.320203][ T1091]  ? _raw_spin_unlock_irq+0x23/0x50
[   73.320220][ T1091]  ? process_scheduled_works+0x9ef/0x17b0
[   73.320238][ T1091]  ? process_scheduled_works+0x9ef/0x17b0
[   73.320256][ T1091]  process_scheduled_works+0xae1/0x17b0
[   73.320294][ T1091]  ? __pfx_process_scheduled_works+0x10/0x10
[   73.320325][ T1091]  worker_thread+0x8a0/0xda0
[   73.320359][ T1091]  kthread+0x711/0x8a0
[   73.320377][ T1091]  ? __pfx_worker_thread+0x10/0x10
[   73.320416][ T1091]  ? __pfx_kthread+0x10/0x10
[   73.320433][ T1091]  ? _raw_spin_unlock_irq+0x23/0x50
[   73.320451][ T1091]  ? lockdep_hardirqs_on+0x9c/0x150
[   73.320463][ T1091]  ? __pfx_kthread+0x10/0x10
[   73.320478][ T1091]  ret_from_fork+0x47f/0x820
[   73.320519][ T1091]  ? __pfx_ret_from_fork+0x10/0x10
[   73.320543][ T1091]  ? __switch_to_asm+0x39/0x70
[   73.320559][ T1091]  ? __switch_to_asm+0x33/0x70
[   73.320573][ T1091]  ? __pfx_kthread+0x10/0x10
[   73.320593][ T1091]  ret_from_fork_asm+0x1a/0x30
[   73.320623][ T1091]  </TASK>
[   73.388572][ T6032] loop1: detected capacity change from 0 to 32768
[   73.399090][ T1091] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[   73.443532][ T6032] btrfs: Deprecated parameter 'usebackuproot'
[   73.490989][ T6032] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[   73.496878][ T6032] btrfs: Unknown parameter 'context'
[   73.837959][ T6056] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   73.953466][ T6063] netlink: 104 bytes leftover after parsing attributes in process `syz.1.63'.
[   74.161622][  T793] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   74.198967][ T6071] netlink: 8 bytes leftover after parsing attributes in process `syz.1.66'.
[   74.204704][ T6071] sch_tbf: burst 274 is lower than device lo mtu (65550) !
[   74.323160][  T793] usb 3-1: Using ep0 maxpacket: 16
[   74.343966][  T793] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   74.357634][  T793] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[   74.362582][  T793] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   74.390859][  T793] usb 3-1: config 0 descriptor??
[   74.859553][  T793] mcp2221 0003:04D8:00DD.0001: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0
[   75.036708][    C0] ==================================================================
[   75.039950][    C0] BUG: KASAN: slab-out-of-bounds in mcp2221_raw_event+0x106a/0x1240
[   75.043097][    C0] Read of size 1 at addr ffff88803115ffff by task syz-executor/5848
[   75.047492][    C0] 
[   75.048461][    C0] CPU: 0 UID: 0 PID: 5848 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[   75.048482][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   75.048493][    C0] Call Trace:
[   75.048502][    C0]  <IRQ>
[   75.048510][    C0]  dump_stack_lvl+0x189/0x250
[   75.048535][    C0]  ? __kasan_check_byte+0x12/0x40
[   75.048561][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[   75.048580][    C0]  ? lock_release+0x4b/0x3e0
[   75.048604][    C0]  ? __virt_addr_valid+0x4a5/0x5c0
[   75.048624][    C0]  print_report+0xca/0x240
[   75.048640][    C0]  ? mcp2221_raw_event+0x106a/0x1240
[   75.048656][    C0]  kasan_report+0x118/0x150
[   75.048680][    C0]  ? mcp2221_raw_event+0x106a/0x1240
[   75.048699][    C0]  mcp2221_raw_event+0x106a/0x1240
[   75.048717][    C0]  ? down_trylock+0x50/0xb0
[   75.048736][    C0]  hid_input_report+0x40a/0x520
[   75.048760][    C0]  ? __pfx_mcp2221_raw_event+0x10/0x10
[   75.048775][    C0]  hid_irq_in+0x47e/0x6d0
[   75.048790][    C0]  __usb_hcd_giveback_urb+0x376/0x540
[   75.048809][    C0]  dummy_timer+0x862/0x4550
[   75.048840][    C0]  ? __pfx_dummy_timer+0x10/0x10
[   75.048856][    C0]  ? __pfx_dummy_timer+0x10/0x10
[   75.048869][    C0]  ? __pfx_dummy_timer+0x10/0x10
[   75.048881][    C0]  __hrtimer_run_queues+0x52c/0xc60
[   75.048905][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[   75.048922][    C0]  ? __pfx___local_bh_disable_ip+0x10/0x10
[   75.048943][    C0]  hrtimer_run_softirq+0x187/0x2b0
[   75.048955][    C0]  handle_softirqs+0x286/0x870
[   75.048977][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[   75.048999][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[   75.049022][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[   75.049040][    C0]  __irq_exit_rcu+0xca/0x1f0
[   75.049061][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[   75.049085][    C0]  irq_exit_rcu+0x9/0x30
[   75.049105][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[   75.049130][    C0]  </IRQ>
[   75.049135][    C0]  <TASK>
[   75.049141][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[   75.049159][    C0] RIP: 0010:finish_task_switch+0x26b/0x950
[   75.049180][    C0] Code: 0f 84 3c 01 00 00 48 85 db 0f 85 63 01 00 00 0f 1f 44 00 00 4c 8b 75 d0 4c 89 e7 e8 bf 0e ef 09 e8 aa 4f 36 00 fb 4c 8b 65 c0 <49> 8d bc 24 18 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0
[   75.049212][    C0] RSP: 0018:ffffc90003327938 EFLAGS: 00000282
[   75.049228][    C0] RAX: eb0177e690194900 RBX: 0000000000000000 RCX: eb0177e690194900
[   75.049240][    C0] RDX: 0000000000000000 RSI: ffffffff8dbbc9d5 RDI: ffffffff8c037100
[   75.049252][    C0] RBP: ffffc90003327990 R08: ffffffff8fc3eb37 R09: 1ffffffff1f87d66
[   75.049297][    C0] R10: dffffc0000000000 R11: fffffbfff1f87d67 R12: ffff8881059d1cc0
[   75.049309][    C0] R13: dffffc0000000000 R14: ffff88801f18b980 R15: ffff88804b03ab58
[   75.049337][    C0]  ? finish_task_switch+0x266/0x950
[   75.049365][    C0]  __schedule+0x17a0/0x4cc0
[   75.049391][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   75.049417][    C0]  ? __lock_acquire+0xab9/0xd20
[   75.049437][    C0]  ? __pfx___schedule+0x10/0x10
[   75.049462][    C0]  ? schedule+0x91/0x360
[   75.049483][    C0]  schedule+0x165/0x360
[   75.049505][    C0]  do_nanosleep+0x1c7/0x600
[   75.049525][    C0]  ? do_nanosleep+0x7f/0x600
[   75.049544][    C0]  ? __pfx_do_nanosleep+0x10/0x10
[   75.049564][    C0]  ? __hrtimer_setup+0x187/0x210
[   75.049585][    C0]  ? __pfx_hrtimer_wakeup+0x10/0x10
[   75.049599][    C0]  hrtimer_nanosleep+0x169/0x360
[   75.049623][    C0]  ? __pfx_hrtimer_nanosleep+0x10/0x10
[   75.049646][    C0]  ? __pfx_hrtimer_wakeup+0x10/0x10
[   75.049661][    C0]  ? __pfx_get_timespec64+0x10/0x10
[   75.049685][    C0]  __se_sys_clock_nanosleep+0x2f1/0x380
[   75.049709][    C0]  ? __pfx___se_sys_clock_nanosleep+0x10/0x10
[   75.049731][    C0]  ? do_syscall_64+0xbe/0xfa0
[   75.049747][    C0]  do_syscall_64+0xfa/0xfa0
[   75.049758][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   75.049770][    C0]  ? asm_sysvec_call_function_single+0x1a/0x20
[   75.049786][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   75.049799][    C0] RIP: 0033:0x7efe225c14a5
[   75.049813][    C0] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8
[   75.049825][    C0] RSP: 002b:00007fff22f77830 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6
[   75.049842][    C0] RAX: ffffffffffffffda RBX: 000000000000001b RCX: 00007efe225c14a5
[   75.049854][    C0] RDX: 00007fff22f77870 RSI: 0000000000000000 RDI: 0000000000000000
[   75.049864][    C0] RBP: 00007fff22f778dc R08: 0000000000000000 R09: 0000000000000000
[   75.049874][    C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388
[   75.049884][    C0] R13: 00000000000927c0 R14: 000000000001241e R15: 00007fff22f77930
[   75.049901][    C0]  </TASK>
[   75.049906][    C0] 
[   75.228280][    C0] Allocated by task 5908:
[   75.229978][    C0]  kasan_save_track+0x3e/0x80
[   75.231845][    C0]  __kasan_kmalloc+0x93/0xb0
[   75.233679][    C0]  __kmalloc_node_track_caller_noprof+0x568/0x800
[   75.236155][    C0]  kmalloc_reserve+0x136/0x290
[   75.238048][    C0]  __alloc_skb+0x142/0x2d0
[   75.239801][    C0]  mld_newpack+0x13c/0xc40
[   75.241558][    C0]  add_grhead+0x5a/0x2a0
[   75.243281][    C0]  add_grec+0x1452/0x1740
[   75.245002][    C0]  mld_send_initial_cr+0x288/0x550
[   75.246981][    C0]  ipv6_mc_dad_complete+0x88/0x410
[   75.248967][    C0]  addrconf_dad_completed+0x6d5/0xd60
[   75.251149][    C0]  addrconf_dad_work+0xc36/0x14b0
[   75.253138][    C0]  process_scheduled_works+0xae1/0x17b0
[   75.255395][    C0]  worker_thread+0x8a0/0xda0
[   75.257316][    C0]  kthread+0x711/0x8a0
[   75.258929][    C0]  ret_from_fork+0x47f/0x820
[   75.260792][    C0]  ret_from_fork_asm+0x1a/0x30
[   75.262661][    C0] 
[   75.263601][    C0] Freed by task 5908:
[   75.265142][    C0]  kasan_save_track+0x3e/0x80
[   75.266967][    C0]  __kasan_save_free_info+0x46/0x50
[   75.269108][    C0]  __kasan_slab_free+0x5b/0x80
[   75.270994][    C0]  kfree+0x199/0x6d0
[   75.272574][    C0]  skb_release_data+0x62d/0x7c0
[   75.274517][    C0]  sk_skb_reason_drop+0x127/0x170
[   75.276507][    C0]  ip_tunnel_xmit+0xe76/0x2390
[   75.278420][    C0]  __gre_xmit+0x19a/0x240
[   75.280153][    C0]  erspan_xmit+0xa04/0x1220
[   75.281985][    C0]  dev_hard_start_xmit+0x2d7/0x830
[   75.284076][    C0]  sch_direct_xmit+0x241/0x4b0
[   75.285990][    C0]  __dev_queue_xmit+0x1857/0x3b50
[   75.288032][    C0]  ip6_finish_output2+0xf70/0x1480
[   75.290216][    C0]  ip6_output+0x340/0x550
[   75.292133][    C0]  NF_HOOK+0x9e/0x380
[   75.293684][    C0]  mld_sendpack+0x8d4/0xe60
[   75.295503][    C0]  ipv6_mc_dad_complete+0x88/0x410
[   75.297543][    C0]  addrconf_dad_completed+0x6d5/0xd60
[   75.299769][    C0]  addrconf_dad_work+0xc36/0x14b0
[   75.301768][    C0]  process_scheduled_works+0xae1/0x17b0
[   75.303901][    C0]  worker_thread+0x8a0/0xda0
[   75.305695][    C0]  kthread+0x711/0x8a0
[   75.307283][    C0]  ret_from_fork+0x47f/0x820
[   75.309137][    C0]  ret_from_fork_asm+0x1a/0x30
[   75.311087][    C0] 
[   75.312071][    C0] The buggy address belongs to the object at ffff88803115f000
[   75.312071][    C0]  which belongs to the cache kmalloc-2k of size 2048
[   75.317381][    C0] The buggy address is located 2047 bytes to the right of
[   75.317381][    C0]  allocated 2048-byte region [ffff88803115f000, ffff88803115f800)
[   75.323031][    C0] 
[   75.324020][    C0] The buggy address belongs to the physical page:
[   75.326568][    C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803115a000 pfn:0x31158
[   75.330431][    C0] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[   75.333664][    C0] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff)
[   75.336952][    C0] page_type: f5(slab)
[   75.338562][    C0] raw: 00fff00000000240 ffff88801a842000 ffffea0000c5c410 ffffea00007ff410
[   75.341790][    C0] raw: ffff88803115a000 0000000000080003 00000000f5000000 0000000000000000
[   75.345139][    C0] head: 00fff00000000240 ffff88801a842000 ffffea0000c5c410 ffffea00007ff410
[   75.348544][    C0] head: ffff88803115a000 0000000000080003 00000000f5000000 0000000000000000
[   75.351926][    C0] head: 00fff00000000003 ffffea0000c45601 00000000ffffffff 00000000ffffffff
[   75.355285][    C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[   75.358683][    C0] page dumped because: kasan: bad access detected
[   75.361340][    C0] page_owner tracks the page as allocated
[   75.363659][    C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5847, tgid 5847 (syz-executor), ts 65358012685, free_ts 0
[   75.371463][    C0]  post_alloc_hook+0x240/0x2a0
[   75.373432][    C0]  get_page_from_freelist+0x21e4/0x22c0
[   75.375480][    C0]  __alloc_frozen_pages_noprof+0x181/0x370
[   75.377870][    C0]  alloc_pages_mpol+0x232/0x4a0
[   75.379705][    C0]  allocate_slab+0x8a/0x330
[   75.381454][    C0]  ___slab_alloc+0xbd1/0x13f0
[   75.383287][    C0]  __slab_alloc+0x55/0xa0
[   75.384958][    C0]  __kmalloc_node_track_caller_noprof+0x5c7/0x800
[   75.387467][    C0]  kmalloc_reserve+0x136/0x290
[   75.389373][    C0]  pskb_expand_head+0x18e/0x1150
[   75.391310][    C0]  netlink_trim+0x1d5/0x2e0
[   75.393112][    C0]  netlink_broadcast_filtered+0xd6/0x1000
[   75.395373][    C0]  nlmsg_notify+0xf0/0x1a0
[   75.397183][    C0]  __dev_notify_flags+0xf4/0x2e0
[   75.399153][    C0]  rtnl_newlink_create+0x61c/0xb00
[   75.401198][    C0]  rtnl_newlink+0x16d6/0x1c70
[   75.403100][    C0] page_owner free stack trace missing
[   75.405180][    C0] 
[   75.406155][    C0] Memory state around the buggy address:
[   75.408389][    C0]  ffff88803115fe80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   75.411557][    C0]  ffff88803115ff00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   75.414706][    C0] >ffff88803115ff80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   75.418077][    C0]                                                                 ^
[   75.421157][    C0]  ffff888031160000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   75.424102][    C0]  ffff888031160080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   75.427172][    C0] ==================================================================
[   75.430323][    C0] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[   75.433064][    C0] CPU: 0 UID: 0 PID: 5848 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[   75.436585][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   75.440664][    C0] Call Trace:
[   75.442035][    C0]  <IRQ>
[   75.443200][    C0]  dump_stack_lvl+0x99/0x250
[   75.445011][    C0]  ? __asan_memcpy+0x40/0x70
[   75.446744][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[   75.448708][    C0]  ? __pfx__printk+0x10/0x10
[   75.450551][    C0]  vpanic+0x237/0x6d0
[   75.452116][    C0]  ? __pfx_vpanic+0x10/0x10
[   75.453855][    C0]  panic+0xb9/0xc0
[   75.455346][    C0]  ? __pfx_panic+0x10/0x10
[   75.457130][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   75.459451][    C0]  ? mcp2221_raw_event+0x106a/0x1240
[   75.461508][    C0]  check_panic_on_warn+0x89/0xb0
[   75.463487][    C0]  ? mcp2221_raw_event+0x106a/0x1240
[   75.465587][    C0]  end_report+0x78/0x160
[   75.467408][    C0]  kasan_report+0x129/0x150
[   75.469111][    C0]  ? mcp2221_raw_event+0x106a/0x1240
[   75.471343][    C0]  mcp2221_raw_event+0x106a/0x1240
[   75.473393][    C0]  ? down_trylock+0x50/0xb0
[   75.475133][    C0]  hid_input_report+0x40a/0x520
[   75.477027][    C0]  ? __pfx_mcp2221_raw_event+0x10/0x10
[   75.479105][    C0]  hid_irq_in+0x47e/0x6d0
[   75.480802][    C0]  __usb_hcd_giveback_urb+0x376/0x540
[   75.483103][    C0]  dummy_timer+0x862/0x4550
[   75.484901][    C0]  ? __pfx_dummy_timer+0x10/0x10
[   75.486892][    C0]  ? __pfx_dummy_timer+0x10/0x10
[   75.488886][    C0]  ? __pfx_dummy_timer+0x10/0x10
[   75.490728][    C0]  __hrtimer_run_queues+0x52c/0xc60
[   75.492730][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[   75.494840][    C0]  ? __pfx___local_bh_disable_ip+0x10/0x10
[   75.496862][    C0]  hrtimer_run_softirq+0x187/0x2b0
[   75.498981][    C0]  handle_softirqs+0x286/0x870
[   75.500924][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[   75.502828][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[   75.504799][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[   75.506897][    C0]  __irq_exit_rcu+0xca/0x1f0
[   75.508820][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[   75.510942][    C0]  irq_exit_rcu+0x9/0x30
[   75.512685][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[   75.514847][    C0]  </IRQ>
[   75.515999][    C0]  <TASK>
[   75.517262][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[   75.519536][    C0] RIP: 0010:finish_task_switch+0x26b/0x950
[   75.521851][    C0] Code: 0f 84 3c 01 00 00 48 85 db 0f 85 63 01 00 00 0f 1f 44 00 00 4c 8b 75 d0 4c 89 e7 e8 bf 0e ef 09 e8 aa 4f 36 00 fb 4c 8b 65 c0 <49> 8d bc 24 18 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0
[   75.529217][    C0] RSP: 0018:ffffc90003327938 EFLAGS: 00000282
[   75.531577][    C0] RAX: eb0177e690194900 RBX: 0000000000000000 RCX: eb0177e690194900
[   75.534608][    C0] RDX: 0000000000000000 RSI: ffffffff8dbbc9d5 RDI: ffffffff8c037100
[   75.537540][    C0] RBP: ffffc90003327990 R08: ffffffff8fc3eb37 R09: 1ffffffff1f87d66
[   75.540597][    C0] R10: dffffc0000000000 R11: fffffbfff1f87d67 R12: ffff8881059d1cc0
[   75.543756][    C0] R13: dffffc0000000000 R14: ffff88801f18b980 R15: ffff88804b03ab58
[   75.546991][    C0]  ? finish_task_switch+0x266/0x950
[   75.549022][    C0]  __schedule+0x17a0/0x4cc0
[   75.550804][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   75.553319][    C0]  ? __lock_acquire+0xab9/0xd20
[   75.555196][    C0]  ? __pfx___schedule+0x10/0x10
[   75.557111][    C0]  ? schedule+0x91/0x360
[   75.558777][    C0]  schedule+0x165/0x360
[   75.560456][    C0]  do_nanosleep+0x1c7/0x600
[   75.562312][    C0]  ? do_nanosleep+0x7f/0x600
[   75.564112][    C0]  ? __pfx_do_nanosleep+0x10/0x10
[   75.566118][    C0]  ? __hrtimer_setup+0x187/0x210
[   75.568071][    C0]  ? __pfx_hrtimer_wakeup+0x10/0x10
[   75.570158][    C0]  hrtimer_nanosleep+0x169/0x360
[   75.572144][    C0]  ? __pfx_hrtimer_nanosleep+0x10/0x10
[   75.574384][    C0]  ? __pfx_hrtimer_wakeup+0x10/0x10
[   75.576377][    C0]  ? __pfx_get_timespec64+0x10/0x10
[   75.578334][    C0]  __se_sys_clock_nanosleep+0x2f1/0x380
[   75.580207][    C0]  ? __pfx___se_sys_clock_nanosleep+0x10/0x10
[   75.582454][    C0]  ? do_syscall_64+0xbe/0xfa0
[   75.584362][    C0]  do_syscall_64+0xfa/0xfa0
[   75.586156][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   75.588596][    C0]  ? asm_sysvec_call_function_single+0x1a/0x20
[   75.590993][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   75.593288][    C0] RIP: 0033:0x7efe225c14a5
[   75.594962][    C0] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8
[   75.602295][    C0] RSP: 002b:00007fff22f77830 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6
[   75.605535][    C0] RAX: ffffffffffffffda RBX: 000000000000001b RCX: 00007efe225c14a5
[   75.608703][    C0] RDX: 00007fff22f77870 RSI: 0000000000000000 RDI: 0000000000000000
[   75.611803][    C0] RBP: 00007fff22f778dc R08: 0000000000000000 R09: 0000000000000000
[   75.614731][    C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388
[   75.617839][    C0] R13: 00000000000927c0 R14: 000000000001241e R15: 00007fff22f77930
[   75.621131][    C0]  </TASK>
[   75.623134][    C0] Kernel Offset: disabled
[   75.624886][    C0] Rebooting in 86400 seconds..

VM DIAGNOSIS:
09:08:10  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000064 RBX=0000000000000064 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000e9a RDI=0000000000000e9b RBP=00000000000003f8 RSP=ffffc90000007150
R8 =ffff888106210237 R9 =1ffff11020c42046 R10=dffffc0000000000 R11=ffffffff85526070
R12=dffffc0000000000 R13=ffffffff99d1b92c R14=ffffffff9a02e080 R15=0000000000000000
RIP=ffffffff855260ec RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055555ac7a500 ffffffff 00c00000
GS =0000 ffff8880b83fa000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b3241eff8 CR3=000000010e658000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffff000000 0000000000000000
XMM02=00007f0a84597498 00007f0a84597470 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=00007f0a84597478 00007f0a845974c0
XMM06=00007f0a845974b8 00007f0a845974b0 XMM07=00007f0a845974a8 00007f0a845974a0
XMM08=0000000000000000 00007f0a84412ee7 XMM09=0000000000000000 00007f0a84412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=000000000004b0b6 RCX=dffffc0000000000 RDX=0000000000000000
RSI=0000000000000004 RDI=ffff88801d0f392c RBP=ffff88801d0f38e0 RSP=ffffc90003aef350
R8 =ffff88801d0f392f R9 =1ffff11003a1e725 R10=dffffc0000000000 R11=ffffed1003a1e726
R12=0000000000000001 R13=0000000000000001 R14=0000000000000000 R15=ffff88801d0f3928
RIP=ffffffff822fdf84 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fab7559d6c0 ffffffff 00c00000
GS =0000 ffff8881a39fa000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000029000 CR3=000000010e3a2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007fab74812e53
XMM06=0000000000000000 00007fab74812e4d XMM07=0000000000000000 00007fab74812e61
XMM08=0000000000000000 00007fab74812ee7 XMM09=0000000000000000 00007fab74812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
