last executing test programs:

2m57.296019955s ago: executing program 2 (id=332):
syz_usb_connect(0x6, 0x371, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$rfkill(0xffffffffffffff9c, 0x0, 0x6ad01, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x6, &(0x7f0000000000)=[{0x1, 0x8, 0x0, 0x1}, {0x36, 0x80, 0x3, 0xb}, {0x8001, 0x40, 0x71, 0xffff}, {0x4a4a, 0x5, 0x8, 0xc}, {0x43, 0x2, 0x19, 0x8}, {0x7, 0x7, 0x8, 0x3}]})
sysfs$3(0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x842, 0x0)
ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, 0x0, 0x0, 0x4004)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x13f, 0xa}}, 0x20)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
unshare(0x20000)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e20, 0x5, @mcast2, 0x10fb5183}}, 0x3, 0xea, 0x440, 0x0, 0x10, 0x7, 0x4}, 0xa7)
socket$nl_generic(0x10, 0x3, 0x10)
bind$inet6(r1, 0x0, 0x0)
sendto$inet6(r1, &(0x7f0000000600)='X', 0x34000, 0x0, &(0x7f0000000640)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
socket$nl_generic(0x10, 0x3, 0x10)
setns(0xc9, 0x0)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10)
openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/mdstat\x00', 0x0, 0x0)
sendmsg$rds(r2, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)

2m55.109455428s ago: executing program 2 (id=335):
shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000ec0)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000f00)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000f40), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000f80), 0x2, 0x141102)
writev(r0, &(0x7f0000000fc0)=[{&(0x7f0000001000)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, 0x0, 0x181)
shmctl$IPC_RMID(0x0, 0x0)
remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003080)={0x11, 0x0, 0x0, 0x0, 0x4}, 0x94)
syz_open_dev$video(&(0x7f0000000bc0), 0xa3, 0x0)
mknod$loop(&(0x7f0000000d00)='./file0\x00', 0xfff, 0x0)
setxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000e00)='./file0\x00', &(0x7f0000000e40), 0x0, 0x0, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000e80)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000a40)='./gadget\x00', &(0x7f0000000a80)='gadgetfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000ac0)='./gadget/dummy_udc\x00', 0x2, 0x0)
write(r1, &(0x7f0000000b00)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000b40)='./gadget/ep1in-bulk\x00', 0x2, 0x0)
write(r2, 0x0, 0x0)

2m51.658228452s ago: executing program 2 (id=339):
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0)
io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
timer_create(0x0, 0x0, &(0x7f0000000200))
fcntl$lock(0xffffffffffffffff, 0x25, 0x0)
timer_create(0x5, 0x0, 0x0)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x5, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
r0 = eventfd(0x0)
ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000180)=r0)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000001c0)={0x0, 0x1, 0x0, &(0x7f0000000340)=""/68, 0x0, 0x60000})
ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f00000003c0)={0x0, r0})
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000400)={0x1, 0x1, 0x0, &(0x7f0000000440)=""/87, 0x0})
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000004c0))
ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000500)=0x1)
ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x4008af04, &(0x7f0000000540))
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000)

2m49.190950504s ago: executing program 2 (id=346):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8)
syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f00000000c0)='./file2\x00', 0x8, &(0x7f0000000100)=ANY=[], 0x1, 0x10600, &(0x7f00000015c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000011d40)='.\x00', 0x0, 0x51)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000011d80)={0x8})

2m47.686008128s ago: executing program 2 (id=350):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000b40)='./gadget/ep1in-bulk\x00', 0x2, 0x0)
write(r0, 0x0, 0x0)

2m47.463237571s ago: executing program 0 (id=352):
mremap(&(0x7f0000a29000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
syz_open_procfs$pagemap(0x0, &(0x7f0000000240))
add_key(0x0, &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
add_key(&(0x7f0000000000)='ceph\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080), 0x0, 0xfffffffffffffffe)

2m47.216399696s ago: executing program 2 (id=353):
ioctl$DVB_DEMUX_DMX_DQBUF(0xffffffffffffffff, 0xc0186f40, &(0x7f0000000000)={0x2, 0x89, 0xff, 0xb, 0x4, 0x101})
epoll_create(0x9)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000001c0)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r3, &(0x7f0000000280)=""/102392, 0x18ff8)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000193c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000019400)='./file0\x00', &(0x7f0000019440)='sysfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000019480)='./file0\x00', &(0x7f00000194c0), 0x0, &(0x7f0000019500)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})

2m46.064899424s ago: executing program 32 (id=353):
ioctl$DVB_DEMUX_DMX_DQBUF(0xffffffffffffffff, 0xc0186f40, &(0x7f0000000000)={0x2, 0x89, 0xff, 0xb, 0x4, 0x101})
epoll_create(0x9)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000001c0)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r3, &(0x7f0000000280)=""/102392, 0x18ff8)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000193c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000019400)='./file0\x00', &(0x7f0000019440)='sysfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000019480)='./file0\x00', &(0x7f00000194c0), 0x0, &(0x7f0000019500)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})

2m42.996687188s ago: executing program 0 (id=365):
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000100)={0x2, &(0x7f00000006c0)=[{0x12, '\x00', @buffer={"ab557d935f95f143d64163f3aecb9a150f7174a89317d5baa9d1cfcdef55d3b0", 0x20}, 0x4}, {0x34, '\x00', @data, 0x9}]})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = timerfd_create(0x1, 0x0)
timerfd_settime(r1, 0x3, &(0x7f00000001c0)={{}, {0x0, 0x989680}}, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7}, 0x50)
fcntl$setflags(r2, 0x2, 0x0)
ioperm(0x0, 0x7c9, 0x1)
r3 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {0xffff, 0xffff}, {0x3, 0xffe5}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x8000000000000001}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x6}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
memfd_create(&(0x7f0000000000)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\xe4\xda\xf9\xcd7el\xb7\xe6\b\x00\xd8\x8f\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x92\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xd9\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7\xf2<Y\xa1\xdeP\b\xf1kM\x02\x00\x00\x03\x00eA\xb5#>\xa0D-N\xf9\xba!L]h;F[\xe2\x1c<L\xaa\x87A\xcdN#\xfb\xb0\xf2\x1e\x0e#J\xd0hB<\xc0\x82A0)p\xe7&J\x82\x83\x83\xd14\x01\xcf\x1b\xa9\x1d\x1ef\x0f\x86(1\xd6l\xd2\x8f\xb0\xad\t\x15\xdb|\x87\xf1\xc4\xb8\xb2\x9a\xd2A\x80\xbf\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd6\x80\x00\x00\x00\x00\x00\x00\x00\x88&}\xd1\x00\x00\x00\xe6\xaf\t\x9f\x96\rN\xc9\x90\xbe\xed\x1ad\x14\xe7\x84\t\'\x8b\x00\xdd\xc9\x0f\x14v\xb6\x04\xf2U\xb4\xf6\xbe\xddT\xcb\x00\x00\x00\x00\x00\x00\xe9\x00\x00\x00\x00\x00\x00o:}\xa7jmH\xedn\x11\xfe\xe2\x0fT\x00\x94\xbc\xc6\x7f\x93eE1xp\xa3\xdc\xd7K9J<\xeb\xd2!\xf4\x19\xbd#\xb8\x83\x858\n\xdc\x12Z\x1a\x12\xfa\xcc\x04\r\xf3\xf4;\v\x15b^\xea\xa2\x04 \xe8\x99\xb3\x97\x9e\r\xb0\x05\xbb(f\xd0\x85\xc5\x15\xae#\x12Q\xacF\xfb\xc8\xbd\xcc#\v\x00\x00\x00\x00\x00\x00\x8f\x9b\x00\x03\xc8}\x11\xbc\x01\x8fi\xf5\x7f\xaf\x11\xfb\x16\x95\xdfc\xc9\x8a/&\x81w\x06]ao\\\x88\xf7\xce\xbd\xb0\xa6J~\x8d\xf1\xe9\x1c\xcfo\xb3\xdc\x04Y\x8e\r\xf5\xa0\xeft\x06G0\xe3D\xd6\xa3L\xedN\x0e\xdc@7\xd8^\xae\xea\x92\xbe\x9c\xf9~c\xc1|\xca\x8d\x93R\xe5\xceU\xa5\x0f\xbf\xd8l\x96`\x05\x00e\x8aR{\x17Y\x15m>\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00\x00\xeaq\xbb\x03&\xb4mi\xc7\xff\xca\xd8\x9f\xae\xa3\x04\xaa\x10\xe7\x98\xe48\x8d', 0x3)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a000007090001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002)
readv(r6, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/103, 0x67}], 0x1)

2m39.584347437s ago: executing program 0 (id=368):
pipe(0x0)
syz_mount_image$ext4(&(0x7f00000006c0)='ext4\x00', &(0x7f0000000700)='./bus\x00', 0x1001a, &(0x7f0000000740)={[{@test_dummy_encryption}, {@nojournal_checksum}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@test_dummy_encryption}, {@nodioread_nolock}]}, 0xff, 0x44f, &(0x7f0000002140)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000025c0)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000002600), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
fdatasync(r0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

2m35.512019313s ago: executing program 0 (id=374):
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x7)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x80000000)
connect$unix(r1, 0x0, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000240)=0x3, 0x4)
ppoll(&(0x7f0000000280)=[{r1, 0x5082}], 0x1, 0x0, 0x0, 0x1a)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
pselect6(0x40, &(0x7f0000000040)={0x2, 0x8, 0x9, 0x0, 0x7, 0x9, 0xfffffffffffffffd, 0x9dc}, &(0x7f0000000140)={0xffffffffffffff39, 0x14a8f53c, 0x6, 0x5, 0x2, 0xfffffffffffffff8, 0x5, 0x9}, &(0x7f0000000300)={0x5, 0x1, 0xf757, 0x3e, 0x80, 0x6, 0x1000, 0xa8}, &(0x7f0000000340)={0x77359400}, &(0x7f00000003c0)={&(0x7f0000000380)={[0x9]}, 0x8})
connect$unix(r2, &(0x7f0000002040)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000020c0), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000002100), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000002140)=0x6)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002340)=ANY=[], 0x48)
r4 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
write$tun(r4, &(0x7f0000000440)=ANY=[], 0xa2)
read$FUSE(r4, 0x0, 0x0)
r5 = syz_open_dev$video(&(0x7f0000000440), 0xa7, 0x0)
ioctl$VIDIOC_S_FMT(r5, 0xc0d05640, &(0x7f00000016c0)={0x1, @pix={0x0, 0x2, 0x33565348, 0x0, 0x0, 0x0, 0x3, 0xfeedcafc, 0x3, 0x2, 0x2, 0x4}})

2m34.450064992s ago: executing program 0 (id=377):
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r0 = shmget$private(0x0, 0x2000, 0x4, &(0x7f0000ffe000/0x2000)=nil)
shmctl$IPC_RMID(r0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000040), 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r3 = accept4$unix(0xffffffffffffffff, &(0x7f0000000840), &(0x7f00000009c0)=0x6e, 0x80000)
recvmsg$unix(r3, &(0x7f0000000a00)={&(0x7f0000000a40)=@abs, 0x6e, &(0x7f0000000ac0), 0x0, &(0x7f0000000c40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}, 0x200)
sched_setaffinity(0x0, 0x8, &(0x7f0000000cc0)=0x2)
readlink(&(0x7f0000000d00)='./config/usb_gadget/g1/UDC\x00', 0x0, 0x0)
listen(0xffffffffffffffff, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
mount(0x0, 0x0, &(0x7f0000000e80)='configfs\x00', 0x2208800, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000ec0)='./my_configfs\x00', 0x1ff)
mount(0x0, &(0x7f0000000f00)='./my_configfs\x00', &(0x7f0000000f40)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000f80)='./my_configfs/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff)
symlinkat(&(0x7f0000001040)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001080)='./my_configfs/usb_gadget/g1/configs/c.1/midi2.usb0\x00')
r4 = openat(0xffffffffffffff9c, &(0x7f00000010c0)='./my_configfs/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r4, &(0x7f0000001100)='dummy_udc.0', 0xb)
syz_genetlink_get_family_id$nl80211(0x0, r2)

2m33.928773085s ago: executing program 0 (id=379):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x82c03, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
close(r1)
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x8000, 0x8f, 0x0, 0x7}, 0xe3, 0x1, 0x1, 0x7, 0xff7, 0xc, 0x1, 0x10, 0x7, 0x7, {0x6, 0xfff, 0x10, 0xffff, 0x6a1, 0x8}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40004}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000003c0)={'syzkaller0\x00', @multicast})
r4 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'syzkaller0\x00', <r5=>0x0})
r6 = socket$kcm(0x11, 0x3, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x8080)
setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000580), 0x56)
sendmsg$kcm(r6, &(0x7f00000005c0)={&(0x7f0000000600)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000680)=[{&(0x7f00000006c0)="27030200dc0f14000e0040000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005)

2m18.392558904s ago: executing program 33 (id=379):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x82c03, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
close(r1)
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x8000, 0x8f, 0x0, 0x7}, 0xe3, 0x1, 0x1, 0x7, 0xff7, 0xc, 0x1, 0x10, 0x7, 0x7, {0x6, 0xfff, 0x10, 0xffff, 0x6a1, 0x8}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40004}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000003c0)={'syzkaller0\x00', @multicast})
r4 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'syzkaller0\x00', <r5=>0x0})
r6 = socket$kcm(0x11, 0x3, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x8080)
setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000580), 0x56)
sendmsg$kcm(r6, &(0x7f00000005c0)={&(0x7f0000000600)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000680)=[{&(0x7f00000006c0)="27030200dc0f14000e0040000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005)

15.761362238s ago: executing program 3 (id=666):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs/binder0\x00', 0x2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000004c0)={0x73622a85, 0xa, 0x4})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x8, 0x0, &(0x7f0000000580)=[@acquire], 0xffffffffffffff47})
dup3(r1, r0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000600)={0x73622a85, 0x10a, 0xfffffffffffffffd})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000680)=[@acquire], 0xffffffffffffff67})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x4c, 0x0, &(0x7f00000008c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x0, &(0x7f0000000780)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x2, 0x3e}, @ptr={0x70742a85, 0x20000000, &(0x7f0000000880)=[r1, 0xffffffffffffffff], 0x8, 0x1, 0x26}, @flat=@weak_handle={0x77682a85, 0x1000, 0x1, 0x1}}}, 0x1040}]})

14.651766021s ago: executing program 3 (id=671):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000180), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000001c0), 0x10106, 0x2, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000200)={0x1f, 0xffff, 0x3}, 0x6)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz1\x00', 0x1ff)
r4 = gettid()
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f00000002c0))
timer_settime(0x0, 0x0, &(0x7f0000000600)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r5 = syz_open_dev$sndpcmc(&(0x7f0000000180), 0x0, 0x2)
ioctl$SNDRV_PCM_IOCTL_PREPARE(r5, 0x4140, 0x0)
pipe2(&(0x7f0000000800)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x4000)
write$P9_RGETLOCK(r7, &(0x7f0000000840)=ANY=[], 0xffffff6a)
pipe2(&(0x7f0000000880)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x0)
tee(r6, r8, 0xfffffffffffffc01, 0x0)

10.919709713s ago: executing program 1 (id=682):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_emit_ethernet(0x42, &(0x7f0000001e00)=ANY=[], 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x34000, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000240)={0xa, 0x4e20, 0x8001, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20080058)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0xe, 0x16, &(0x7f0000001480)=ANY=[@ANYBLOB="61106400000000006113740000000000bfa00000000000000700000008ffffffd50301001774004095000000000000006916360000000000bf67000000000000350607000fff07201706000020190000160300000ee60060bf050000000000007b650000000000006507f9ff01000000070700004d83dde4c375000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f17540faf80250aa20c669a5e12814cb1cea5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369226066812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000400c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20ceddf4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10fd7ed6735154beb4000000000000000000000000004000bc00f6746a9709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c1d926a0f6a5480a55c22fe3a5ac00000000000000000000000500002000000000fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e14d90deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b06ff7f0000000000007f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a1f37302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089e0b1c23c0f3cdad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a1a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631d22bad050e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0af1cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4c6ea9604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c29984864961a57ff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee15620789c524b3baf49a09d8be0fc5beecf153236c19740be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000000000000000000000000000000000001386866b311bd144bc32e059658c9f8342c90c1ade31b78072841b8b5a943d62a44cea6b050c42e3c205fad6a23fb43c93da0f49d911877265e6ee443e37397ecf89021e7f579e8d3a74c12b52938d91e9de07fc8eeeb9505f4a9c26266bf5449484ccc1317c7476"], &(0x7f0000001ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48)

10.284458018s ago: executing program 5 (id=685):
shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000ec0)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000f00)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000f40), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000f80), 0x2, 0x141102)
writev(r0, &(0x7f0000000fc0)=[{&(0x7f0000001000)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, 0x0, 0x181)
shmctl$IPC_RMID(0x0, 0x0)
remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003080)={0x11, 0x0, 0x0, 0x0, 0x4}, 0x94)
syz_open_dev$video(&(0x7f0000000bc0), 0xa3, 0x0)
mknod$loop(&(0x7f0000000d00)='./file0\x00', 0xfff, 0x0)
setxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000e00)='./file0\x00', &(0x7f0000000e40), 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000a40)='./gadget\x00', &(0x7f0000000a80)='gadgetfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000ac0)='./gadget/dummy_udc\x00', 0x2, 0x0)
write(r1, &(0x7f0000000b00)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000b40)='./gadget/ep1in-bulk\x00', 0x2, 0x0)
write(r2, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15)
openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x101042, 0x1d8)

9.620020756s ago: executing program 1 (id=686):
socket$netlink(0x10, 0x3, 0x6)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000200), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6)
socket$nl_route(0x10, 0x3, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000400), 0x101042, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f00000002c0)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./dev/sda\x00', 0x101042, 0x5)
ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f0000000380))
r4 = socket(0x28, 0x1, 0x0)
getsockname$packet(r4, 0x0, &(0x7f0000000240))
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000500)=@nat={'nat\x00', 0x2, 0x5, 0x470, 0xf0, 0x1e0, 0xffffffff, 0x1e0, 0x1e0, 0x3a0, 0x3a0, 0xffffffff, 0x3a0, 0x3a0, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [0x0, 0x0, 0x0, 0xff], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x12, @ipv6=@local, @ipv4=@loopback, @port=0x4e21, @port=0x4e22}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x40}, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id=0x67, @icmp_id}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, [0x0, 0xffffffff, 0xffffff00, 0xff], [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 'vlan1\x00', 'wlan1\x00', {0xff}, {}, 0x84, 0xe, 0x2, 0x31}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x0, 0xffffffff], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x5, 0x5}, {0x3, 0x2, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x20, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b4080000000000007311a100000000008510000002000000"], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a}, 0x94)

9.372283031s ago: executing program 6 (id=688):
syz_usb_connect(0x6, 0x371, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$rfkill(0xffffffffffffff9c, 0x0, 0x6ad01, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x6, &(0x7f0000000000)=[{0x1, 0x8, 0x0, 0x1}, {0x36, 0x80, 0x3, 0xb}, {0x8001, 0x40, 0x71, 0xffff}, {0x4a4a, 0x5, 0x8, 0xc}, {0x43, 0x2, 0x19, 0x8}, {0x7, 0x7, 0x8, 0x3}]})
sysfs$3(0x3)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x842, 0x0)
ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, 0x0, 0x0, 0x4004)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x13f, 0xa}}, 0x20)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={0x40040, 0xd2, 0xf}, 0x18)
unshare(0x20000)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e20, 0x5, @mcast2, 0x10fb5183}}, 0x3, 0xea, 0x440, 0x0, 0x10, 0x7, 0x4}, 0xa7)
socket$nl_generic(0x10, 0x3, 0x10)
bind$inet6(r1, 0x0, 0x0)
sendto$inet6(r1, &(0x7f0000000600)='X', 0x34000, 0x0, &(0x7f0000000640)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
socket$nl_generic(0x10, 0x3, 0x10)
setns(0xc9, 0x0)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10)
openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/mdstat\x00', 0x0, 0x0)
sendmsg$rds(r2, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)

9.048355684s ago: executing program 5 (id=689):
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, 0x0)
socket$packet(0x11, 0x3, 0x300)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0)
syz_mount_image$nilfs2(&(0x7f0000000800), &(0x7f0000000840)='./dev\x00', 0x400, &(0x7f0000000880)=ANY=[], 0x1, 0xae6, &(0x7f00000008c0)="$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")
syz_mount_image$exfat(0x0, &(0x7f00000013c0)='./bus\x00', 0x20020c0, 0x0, 0x1, 0x0, &(0x7f0000001400))
open$dir(&(0x7f0000001440)='./dev\x00', 0x44040, 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000001480)={0x8, 0x100008b}, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001500)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xbc03, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0x50)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000017c0), 0x2, 0x4a102)
writev(r1, &(0x7f0000001800)=[{&(0x7f0000001840)="94", 0xf000}, {0x0}], 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000001940)={0x28, 0x0, 0x9, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x82)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000001980)=0x1007020, 0x4)
close(0xffffffffffffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x2, 0x0)
pselect6(0x40, &(0x7f0000000400)={0x68, 0x3121d874, 0x6, 0x3, 0xc35, 0x5, 0x3ff, 0x2}, &(0x7f0000000440)={0xfffffffffffffff8, 0x100000001, 0x8, 0x0, 0x40, 0x4, 0x36, 0xffffffffffffff9d}, &(0x7f0000000480)={0x2, 0x4, 0xe6a, 0x1ff, 0x8, 0x1, 0x5, 0x7449}, &(0x7f00000004c0)={0x0, 0x3938700}, &(0x7f0000000540)={&(0x7f0000000500), 0x8})
write(r3, &(0x7f0000000100)='27', 0x2)

8.162914375s ago: executing program 1 (id=690):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
creat(&(0x7f0000000200)='./file0\x00', 0xecf86c37d53049cc)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000001ac0)='./file0\x00', &(0x7f0000001b00), 0x0, &(0x7f0000001b40)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000001bc0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000003c00)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34808521, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa4001f7e}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f0000003c80)="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", 0x2000, &(0x7f0000005c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000005d40)={0x20, 0x0, 0x0, {0x0, 0x11}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000005d80)='./file0\x00', 0x24c01, 0x8)
io_setup(0x202, &(0x7f0000005dc0)=<r3=>0x0)
io_submit(r3, 0x2, &(0x7f0000005e00)=[&(0x7f0000005e40)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r2, &(0x7f0000005e80)='!', 0xffffff49, 0x3000000000000500}])
dup3(r2, r0, 0x0)

6.661034518s ago: executing program 4 (id=691):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
openat$ppp(0xffffffffffffff9c, 0x0, 0x40082, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000540)='./sys\x00', &(0x7f0000000580)='sysfs\x00', 0x0, 0x0)
r0 = socket$inet(0xa, 0x801, 0x84)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000680), 0x80200, 0x0)
syz_open_dev$sndmidi(&(0x7f00000006c0), 0x2, 0x141102)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000780)={0xaa, 0x1a5})
ioctl$UFFDIO_COPY(r1, 0xc028aa05, 0x0)
connect$inet(r0, &(0x7f0000000800)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x8)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x14, 0x23, 0x409, 0x70bd25, 0x25dfd3ff, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x24040811}, 0x8410)

6.038668972s ago: executing program 6 (id=692):
bpf$MAP_CREATE(0x0, &(0x7f0000001480)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0xfffffffd, @empty, 0x7}, 0x1c)
listen(r1, 0xfffffffc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r6, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x28, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f00000002c0)={0x0, 0x20, &(0x7f0000000300)={&(0x7f0000000340)={0x30, r3, 0x1, 0x70bd2c, 0x9000000, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000)

5.993783687s ago: executing program 3 (id=693):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0x0)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000180)=r1)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000003c0)={0x0, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000400)={0x1, 0x1, 0x0, &(0x7f0000000440)=""/87, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0))
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000500)=0x1)
ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x4008af04, &(0x7f0000000540))
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000)

5.980318858s ago: executing program 1 (id=694):
syz_usb_connect(0x6, 0x371, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$rfkill(0xffffffffffffff9c, 0x0, 0x6ad01, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x6, &(0x7f0000000000)=[{0x1, 0x8, 0x0, 0x1}, {0x36, 0x80, 0x3, 0xb}, {0x8001, 0x40, 0x71, 0xffff}, {0x4a4a, 0x5, 0x8, 0xc}, {0x43, 0x2, 0x19, 0x8}, {0x7, 0x7, 0x8, 0x3}]})
sysfs$3(0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x842, 0x0)
ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, 0x0, 0x0, 0x4004)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x13f, 0xa}}, 0x20)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={0x40040, 0xd2, 0xf}, 0x18)
unshare(0x20000)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e20, 0x5, @mcast2, 0x10fb5183}}, 0x3, 0xea, 0x440, 0x0, 0x10, 0x7, 0x4}, 0xa7)
socket$nl_generic(0x10, 0x3, 0x10)
bind$inet6(r1, 0x0, 0x0)
sendto$inet6(r1, &(0x7f0000000600)='X', 0x34000, 0x0, &(0x7f0000000640)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
socket$nl_generic(0x10, 0x3, 0x10)
setns(0xc9, 0x0)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10)
openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/mdstat\x00', 0x0, 0x0)
sendmsg$rds(r2, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)

5.96498924s ago: executing program 4 (id=695):
socket$inet(0x2, 0x1, 0x6)
mount(0x0, &(0x7f0000006e80)='./nfsd\x00', &(0x7f0000006ec0)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000006f00)='./nfsd/versions\x00', 0x1, 0x0)
write(r0, &(0x7f0000006f40)='-2 -3\n', 0x6)
r1 = openat(0xffffffffffffff9c, &(0x7f0000006f80)='./nfsd/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f0000006fc0)='3', 0x1)

5.937682033s ago: executing program 5 (id=696):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_emit_ethernet(0x42, &(0x7f0000001e00)=ANY=[], 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x34000, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000240)={0xa, 0x4e20, 0x8001, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20080058)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0xe, 0x16, &(0x7f0000001480)=ANY=[@ANYBLOB="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"], &(0x7f0000001ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48)

5.875559819s ago: executing program 6 (id=697):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x814}}]})
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)

5.725465994s ago: executing program 3 (id=698):
mknod$loop(&(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xcc48, 0x0)
syz_mount_image$vfat(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x400, &(0x7f0000000680)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54dabaa5206d4a2a060b5ccc774b3ec4c81a1a9852327ff871d16d0d9344e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9aeb8576d329be6e4bb168f1434000000", @ANYRESHEX=0x0], 0xfd, 0x296, &(0x7f0000000780)="$eJzs3M1qE1EUwPFj0o80tU0WIiiIB92oi6GNL2CQFsSAUhtRF8LUTjRkTMrMWImI7c6tz1FcuhPUF+jGnQt30k0XCm66UCOdjzatQ6u2yYTm/4Myp3Pvydz5CmcGctfvvHpcq7hGxfQklVFJiSzLhkh+MwodC5cpPx6SdstycfT7pzO37t67XiyVpmZUp4uzlwuqOn723dPnr8998EZvvxl/Oyyr+fvr3wpfVk+unlr/NRt9esNTU+caDc+csy2dr7o1Q/WmbZmupdW6azk72it2Y2GhqWZ9fiy74Fiuq2a9qTWrqV5DPaep5kOzWlfDMHQsK/0m/c8Z5ZWZGbPYkcEgCSNxKx2naKZjG8sr3RgUAADoLUnV/4+qrlZdre9X/6eE+r9zqP+PkuNrEvsUuFn/Z8P7d8uln10cGQAAAAAAAAAAAAAAAAAAAAAAOIiNVivXarVy0TL6GxaRjIhE/yc9TnTGQc7/cPeHi0PW9sO9jIj9crG8WA6WQXuxIlWxxZKJQZEf/vUQCuLpa6WpCfXl5b29FOYvLZbT/vXh50fy8fmTQb7uzB+UbPv2C5KTE/I5Lr8Qmz8kF8635RuSk48PpCG2zPvX9Xb+i0nVqzdKu/JH/H4AAAAAABwFhm754/ndbzc0mjZkV3uwcvv9gOT2eT+w6/l6QE4PJLffAAAAAAD0E7f5rGbatuUQ7AiuiMiefZI+dCM9cqA6GKQ2z0HXt/41ujV64yAcarD2JNi1v+mc4JcSAAAAgI7YLvqTHgkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP1rj2nAMmEXf03U/3/mHmvbXLr7ewgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0jt8BAAD//ysQG/U=")
r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000a40)='./mnt\x00', 0x1ff)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000a80)={0x7, 0x100}, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000b00)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000b40)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000c00)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000c40)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000d00), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000000d40), 0x10106, 0x2, 0x0)
semget$private(0x0, 0x4, 0x29b)
sched_setscheduler(0x0, 0x2, &(0x7f0000000d80)=0x6)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r4, &(0x7f0000000d40)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000001180)={{{@in6=@private2, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xffffffffffffbff9, 0x0, 0x0, 0x2, 0x23, 0x3, 0x401}, {0x5, 0xb}, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x640100fd}, 0xfffffffd, 0x32}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x0, 0x0, 0x0, 0xf9, 0x3, 0x0, 0xffffffff}}, 0xe8)
sendmmsg(r4, &(0x7f0000001280), 0x21, 0x810)

5.621766275s ago: executing program 4 (id=699):
shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000ec0)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000f00)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000f40), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000f80), 0x2, 0x141102)
writev(r0, &(0x7f0000000fc0)=[{&(0x7f0000001000)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, 0x0, 0x181)
shmctl$IPC_RMID(0x0, 0x0)
remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003080)={0x11, 0x0, 0x0, 0x0, 0x4}, 0x94)
syz_open_dev$video(&(0x7f0000000bc0), 0xa3, 0x0)
mknod$loop(&(0x7f0000000d00)='./file0\x00', 0xfff, 0x0)
setxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000e80)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000a40)='./gadget\x00', &(0x7f0000000a80)='gadgetfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000ac0)='./gadget/dummy_udc\x00', 0x2, 0x0)
write(r1, &(0x7f0000000b00)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000b40)='./gadget/ep1in-bulk\x00', 0x2, 0x0)
write(r2, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15)
openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x101042, 0x1d8)

4.566182373s ago: executing program 5 (id=700):
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7}, 0x50)
fcntl$setflags(r0, 0x2, 0x0)

4.564529343s ago: executing program 1 (id=701):
syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@usrjquota}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000a80)="$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")
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
keyctl$join(0x1, &(0x7f0000000f00)={'syz', 0x1})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$sock_buf(r0, 0x1, 0xc, 0x0, &(0x7f0000000f80))
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r1 = gettid()
prlimit64(r1, 0xe, &(0x7f0000001000)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000001040)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000001080)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
setuid(0xee01)
r3 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc)
connect$unix(0xffffffffffffffff, &(0x7f0000001100)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001180), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000011c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000001280)=0x6)
r4 = openat(0xffffffffffffff9c, &(0x7f00000012c0)='./file1\x00', 0x64042, 0x49)
write$P9_RREADLINK(r4, &(0x7f0000001300)={0x6549bfc8e202b0dd, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab)

4.255825374s ago: executing program 5 (id=702):
syz_usb_connect(0x6, 0x371, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$rfkill(0xffffffffffffff9c, 0x0, 0x6ad01, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x6, &(0x7f0000000000)=[{0x1, 0x8, 0x0, 0x1}, {0x36, 0x80, 0x3, 0xb}, {0x8001, 0x40, 0x71, 0xffff}, {0x4a4a, 0x5, 0x8, 0xc}, {0x43, 0x2, 0x19, 0x8}, {0x7, 0x7, 0x8, 0x3}]})
sysfs$3(0x3)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x842, 0x0)
ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, 0x0, 0x0, 0x4004)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x13f, 0xa}}, 0x20)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
unshare(0x20000)
socket$nl_generic(0x10, 0x3, 0x10)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000600)='X', 0x34000, 0x0, &(0x7f0000000640)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
socket$nl_generic(0x10, 0x3, 0x10)
setns(0xc9, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10)
openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/mdstat\x00', 0x0, 0x0)
sendmsg$rds(r1, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)

4.195511461s ago: executing program 4 (id=703):
syz_usb_connect(0x6, 0x371, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$rfkill(0xffffffffffffff9c, 0x0, 0x6ad01, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x6, &(0x7f0000000000)=[{0x1, 0x8, 0x0, 0x1}, {0x36, 0x80, 0x3, 0xb}, {0x8001, 0x40, 0x71, 0xffff}, {0x4a4a, 0x5, 0x8, 0xc}, {0x43, 0x2, 0x19, 0x8}, {0x7, 0x7, 0x8, 0x3}]})
sysfs$3(0x3)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x842, 0x0)
ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, 0x0, 0x0, 0x4004)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x13f, 0xa}}, 0x20)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={0x40040, 0xd2, 0xf}, 0x18)
unshare(0x20000)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e20, 0x5, @mcast2, 0x10fb5183}}, 0x3, 0xea, 0x440, 0x0, 0x10, 0x7, 0x4}, 0xa7)
socket$nl_generic(0x10, 0x3, 0x10)
bind$inet6(r1, 0x0, 0x0)
sendto$inet6(r1, &(0x7f0000000600)='X', 0x34000, 0x0, &(0x7f0000000640)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
socket$nl_generic(0x10, 0x3, 0x10)
setns(0xc9, 0x0)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10)
openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/mdstat\x00', 0x0, 0x0)
sendmsg$rds(r2, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)

1.083550069s ago: executing program 6 (id=704):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
creat(&(0x7f0000000200)='./file0\x00', 0xecf86c37d53049cc)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000001ac0)='./file0\x00', &(0x7f0000001b00), 0x0, &(0x7f0000001b40)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000001bc0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000003c00)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34808521, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa4001f7e}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f0000003c80)="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", 0x2000, &(0x7f0000005c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000005d40)={0x20, 0x0, 0x0, {0x0, 0x11}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000005d80)='./file0\x00', 0x24c01, 0x8)
io_setup(0x202, &(0x7f0000005dc0)=<r3=>0x0)
io_submit(r3, 0x2, &(0x7f0000005e00)=[&(0x7f0000005e40)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r2, &(0x7f0000005e80)='!', 0xffffff49, 0x3000000000000500}])
dup3(r2, r0, 0x0)

1.031849204s ago: executing program 5 (id=705):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000180), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000001c0), 0x10106, 0x2, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000200)={0x1f, 0xffff, 0x3}, 0x6)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz1\x00', 0x1ff)
r4 = gettid()
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f00000002c0))
timer_settime(0x0, 0x0, &(0x7f0000000600)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r5 = syz_open_dev$sndpcmc(&(0x7f0000000180), 0x0, 0x2)
ioctl$SNDRV_PCM_IOCTL_PREPARE(r5, 0x4140, 0x0)
pipe2(&(0x7f0000000800)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x4000)
write$P9_RGETLOCK(r7, &(0x7f0000000840)=ANY=[], 0xffffff6a)
pipe2(&(0x7f0000000880)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x0)
tee(r6, r8, 0xfffffffffffffc01, 0x0)

995.301168ms ago: executing program 1 (id=706):
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, 0x0)
socket$packet(0x11, 0x3, 0x300)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0)
syz_mount_image$nilfs2(&(0x7f0000000800), &(0x7f0000000840)='./dev\x00', 0x400, &(0x7f0000000880)=ANY=[], 0x1, 0xae6, &(0x7f00000008c0)="$eJzs3V2IXFcdAPBzd3c2u2lrJjWxaxrbpNW2fnTTbNb4ETQpCYKhKeJLofgS0rQGYwQrqKXQJE++2VJS8MkPfOpLqSJYEAl98qVgA0XoUxX0oSFiwYcaTUZ255yZOyczmZnN7tz9+P3g7pl7z7nzP3f2zp37de4JwIY1tvh3fn6mCOHCGy8fef+Bf0wvTDnYKlFf/DtRGquFEIo4PpG933vjzfTaB8+f6JYWYW7xbxoPj19pzXtbCOFs2BUuhnrYceHSS2/NPXbs3NHzu99+9cDllVl6AADYWL5x8cD89r/++e6tV1+751DY1Jqe9s/racJUc7//UNzxT/v/Y6FzvCgNZZNZuYk4jE13lhvvUq4cp5aVm+gRfzKLX+tRblO4efzx0rRuyw1rWVqP66EYmw0hbG6Nj43NzjaPycPicf1kMXvm1Omnn62oosCy+/e9IYRdpeHw+c7x1TYcXAV1WOLQWNJ8ReX1rnw4NLpYVxtNlS/ziIbGlqq3QABN+fXCG5zNzyzcmta7TQwW/8qjY93nh2Uw6vV/qPiTFccP4v/6nC0Oy2e9rk1pudL36PY4nl9HyO9feuUPnfO15Vc6Oqfm1yNqA9az13WEtXJ9oVc9x0dcj6XqVf98vVivvhLT9Dl8tSP33o7vT/4/XSv/Y6C7D/Pz/waDYXUPoWO8divv1ah4+wOsXvl9c410fTTK7+vL8zf1yZ/qkz/dJ39zn/zb+uTDRvbbH/w0vFi0z3flx/TDng9P59nuiOlHhqxPfj5y2Pj5fb/DutX4+f3EsJr9/vgTJ7/41JOXmvf/F631/3pc39PhRj1+ty7GAul8YX5evXXvf70zzliPcndm9bmjS/nF19s6yxXb2u8TStuZG+ox0znfll7ldnaWq2flpuMwldU33z/ZnM2X9j/SdjV9XhPZ8tay5ZjM6pG2K1tjmtcDliKtj+n+/3Z7gOb9/2n9nAm14ulTp08+EsfTevqn8dqmhel7R1xvYPn0+v6n36+Z0Nn+5/bW9NpYebuwpT29aG4XXo/v1zl9rhWnNL30o5Z+5749Pr1YfvbE904/tQLLDRvZsz9+7jvHT58++X0vlvzia6ujGsO8SIctq6U+Xgz3YuFndoVDVLxhAlbcnheaOwEPn/ru8WdOPnPyzL79+/fNze3/0r75PYv79XvKe/dlZyuoLbCc2j/6VdcEAAAAAAAAAAAAGNQPjx659M6bX3i32f6/3f4vtf9Pd/6m9v8/ydr/5+3kUzv41A5wa5f8xTLZA1Yns3K1OHw0q296DEDxQjPdns33sZi2+vGL7f9TuPy5rqk+d2XTaz1Gs8cJ3PC8lMnsGSR5f4H3xfR8TH8VoELFdPfJMb3J862LD0vreno+RakJb8PzgdeO9H/Ln1+U2n93fa5Tl/barC2jaLFY9TIC3f1zQz3/+1/tBa+8Lobew8Ro4/1s464TjZ576YP2YAOwPKru//PvoRk3nf8888evTy0MqdiVRzu3l/nzS2EYf3mnc3y19z+50vHzfvtGHb/q5e8dv3mmdbn7/2z1fxe3f2m713v7l/WYV19a3P/8/PK7pbBhx6Dx8+VPz4HeNlz8qzF+WpoHw2DxG7/M4ucXhAb03yz+5gHj37D8O5cW/38xfvrYHrp/0PjNGhdjnfWYzpYjXf/Lzxsn17LlT8/2vEn8bz7XbfmX2FHj9RgfNrK10s/ssLL9iNZOe7/+f4f9/b/V/n9blc02a/l9GJ+P42lDnO5zyPs7Gbz+RUfE9DuwPXv/os/vm/5/17Yvx7Tf9yH1/5vWx3r8yS+NL36WabzW5bNdr9saWKve21DX/0Y1XG4eBi1t/qnq628YYmiML2G+1n1WFde/0Wis7AmtPioNTuWff9VXn6s+Trmv4vj95P3/5vvwef+/eX7e/2+en/f/m+dPx//Q+z3y8/5/8/U57/83z78re9+8f+CZPvkf75JfhHb+ju7ztw7b7+7z/jv75H+iT/7uVv7BjhIp/56bzt8u1+v97+yTf3+f/E/2yf9Un/wH+uQ/VMov9wGd8j+dzV9k+etd2v70+vyA9Stvn+f7DxtHal/b6/u/rZ0/WS4y2loCK+GV1/YefvI336o32/9Pts6HpOt4h+J4LR4b/SiO59e9Q2l8Ie/NOP63LL/q801AW/78jPz3/8E++cDale7z8v2GDaiY6j45pv2eW9VrP5+15TMx/WxMPxfTh2M6G9M9Md0b07kR1Y+Vcfj13x14sWgf72/J8ge9nzxvD9TxnKgQwr4B65OfHxj2fvz8OX7DutX4S2wOBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUJmxxb/z8zNFCBfeePnIE8dO7VmYcrBVor74d6I0VmvNF8IjMR2P6S/ii2sfPH+inF6PaRHmQhGK1vTw+JVWpNtCCGfDrnAx1MOOC5deemvusWPnjp7f/farBy6v3CcAAAAA69//AwAA//9MJAXa")
syz_mount_image$exfat(0x0, &(0x7f00000013c0)='./bus\x00', 0x20020c0, 0x0, 0x1, 0x0, &(0x7f0000001400))
open$dir(&(0x7f0000001440)='./dev\x00', 0x44040, 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000001480)={0x8, 0x100008b}, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001500)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xbc03, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0x50)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000017c0), 0x2, 0x4a102)
writev(r1, &(0x7f0000001800)=[{&(0x7f0000001840)="94", 0xf000}, {0x0}], 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000001940)={0x28, 0x0, 0x9, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x82)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000001980)=0x1007020, 0x4)
close(0xffffffffffffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x2, 0x0)
pselect6(0x40, &(0x7f0000000400)={0x68, 0x3121d874, 0x6, 0x3, 0xc35, 0x5, 0x3ff, 0x2}, &(0x7f0000000440)={0xfffffffffffffff8, 0x100000001, 0x8, 0x0, 0x40, 0x4, 0x36, 0xffffffffffffff9d}, &(0x7f0000000480)={0x2, 0x4, 0xe6a, 0x1ff, 0x8, 0x1, 0x5, 0x7449}, &(0x7f00000004c0)={0x0, 0x3938700}, &(0x7f0000000540)={&(0x7f0000000500), 0x8})
write(r3, &(0x7f0000000100)='27', 0x2)

806.539667ms ago: executing program 3 (id=707):
bpf$MAP_CREATE(0x0, &(0x7f0000001480)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0xfffffffd, @empty, 0x7}, 0x1c)
listen(r1, 0xfffffffc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r6, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x28, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f00000002c0)={0x0, 0x20, &(0x7f0000000300)={&(0x7f0000000340)={0x30, r3, 0x1, 0x70bd2c, 0x9000000, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000)

647.655504ms ago: executing program 6 (id=708):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
openat$ppp(0xffffffffffffff9c, 0x0, 0x40082, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000540)='./sys\x00', &(0x7f0000000580)='sysfs\x00', 0x0, 0x0)
r0 = socket$inet(0xa, 0x801, 0x84)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000680), 0x80200, 0x0)
syz_open_dev$sndmidi(&(0x7f00000006c0), 0x2, 0x141102)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000780)={0xaa, 0x1a5})
ioctl$UFFDIO_COPY(r1, 0xc028aa05, 0x0)
connect$inet(r0, &(0x7f0000000800)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x8)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x14, 0x23, 0x409, 0x70bd25, 0x25dfd3ff, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x24040811}, 0x8410)

554.771163ms ago: executing program 3 (id=709):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0x0)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000180)=r1)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000003c0)={0x0, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000400)={0x1, 0x1, 0x0, &(0x7f0000000440)=""/87, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0))
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000500)=0x1)
ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x4008af04, &(0x7f0000000540))
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000)

435.931325ms ago: executing program 6 (id=710):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_emit_ethernet(0x42, &(0x7f0000001e00)=ANY=[], 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x34000, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000240)={0xa, 0x4e20, 0x8001, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20080058)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0xe, 0x16, &(0x7f0000001480)=ANY=[@ANYBLOB="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"], &(0x7f0000001ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48)

279.319821ms ago: executing program 4 (id=711):
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000006e80)='./nfsd\x00', &(0x7f0000006ec0)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000006f00)='./nfsd/versions\x00', 0x1, 0x0)
write(r0, &(0x7f0000006f40)='-2 -3\n', 0x6)
r1 = openat(0xffffffffffffff9c, &(0x7f0000006f80)='./nfsd/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f0000006fc0)='3', 0x1)

0s ago: executing program 4 (id=712):
syz_usb_connect(0x6, 0x371, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$rfkill(0xffffffffffffff9c, 0x0, 0x6ad01, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x6, &(0x7f0000000000)=[{0x1, 0x8, 0x0, 0x1}, {0x36, 0x80, 0x3, 0xb}, {0x8001, 0x40, 0x71, 0xffff}, {0x4a4a, 0x5, 0x8, 0xc}, {0x43, 0x2, 0x19, 0x8}, {0x7, 0x7, 0x8, 0x3}]})
sysfs$3(0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x842, 0x0)
ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, 0x0, 0x0, 0x4004)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x13f, 0xa}}, 0x20)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={0x40040, 0xd2, 0xf}, 0x18)
unshare(0x20000)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e20, 0x5, @mcast2, 0x10fb5183}}, 0x3, 0xea, 0x440, 0x0, 0x10, 0x7, 0x4}, 0xa7)
socket$nl_generic(0x10, 0x3, 0x10)
bind$inet6(r1, 0x0, 0x0)
sendto$inet6(r1, &(0x7f0000000600)='X', 0x34000, 0x0, &(0x7f0000000640)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
socket$nl_generic(0x10, 0x3, 0x10)
setns(0xc9, 0x0)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10)
openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/mdstat\x00', 0x0, 0x0)
sendmsg$rds(r2, &(0x7f00000000c0)={&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)

kernel console output (not intermixed with test programs):

091][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.508647][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   73.520508][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.530798][ T4282] Bluetooth: hci4: command 0x0419 tx timeout
[   73.537406][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   73.548599][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.559938][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   73.570765][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.583026][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.593215][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   73.603960][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.614884][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   73.625506][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.636178][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   73.657238][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.677561][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   73.688243][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.705234][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.725934][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   73.756453][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   73.785200][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   73.811253][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   73.829482][ T4275] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.861245][ T4275] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.880221][ T4275] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.896356][ T4275] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.088001][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.111710][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.146331][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   74.206293][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.231698][ T4406] loop1: detected capacity change from 0 to 256
[   74.239537][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.329408][ T4406] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d)
[   74.369234][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   74.500032][    T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!!
[   74.520033][    T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!!
[   74.530029][    T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!!
[   74.540029][    T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!!
[   74.550026][    T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!!
[   74.560028][    T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!!
[   74.570027][    T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!!
[   74.580032][    T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!!
[   74.590025][    T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!!
[   74.600029][    T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!!
[   74.626277][ T4409] loop2: detected capacity change from 0 to 32768
[   74.633253][ T4409] =======================================================
[   74.633253][ T4409] WARNING: The mand mount option has been deprecated and
[   74.633253][ T4409]          and is ignored by this kernel. Remove the mand
[   74.633253][ T4409]          option from the mount to silence this warning.
[   74.633253][ T4409] =======================================================
[   74.717332][ T4409] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.10 (4409)
[   74.760324][ T4409] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[   74.770907][ T4409] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[   74.779855][ T4409] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[   74.789921][ T4409] BTRFS info (device loop2): use zstd compression, level 3
[   74.797326][ T4409] BTRFS info (device loop2): force clearing of disk cache
[   74.804627][ T4409] BTRFS info (device loop2): enabling disk space caching
[   74.812714][ T4409] BTRFS info (device loop2): disk space caching is enabled
[   75.451683][ T4437] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20002
[   76.184850][ T4409] BTRFS info (device loop2): enabling ssd optimizations
[   76.194887][ T4409] BTRFS info (device loop2): rebuilding free space tree
[   76.216172][ T4409] BTRFS info (device loop2): disabling free space tree
[   76.223266][ T4409] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   76.233041][ T4409] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   78.065411][ T4464] Cannot find del_set index 0 as target
[   78.115137][ T4281] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[   78.163421][ T4468] 0x0000000000ec-0x0000000000f2 : ""
[   78.223309][ T4468] ftl_cs: FTL header corrupt!
[   78.507152][ T4484] loop0: detected capacity change from 0 to 128
[   78.565882][ T4488] netlink: 28 bytes leftover after parsing attributes in process `syz.3.19'.
[   78.575647][ T4488] netlink: 28 bytes leftover after parsing attributes in process `syz.3.19'.
[   78.687350][ T4267] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 12 /dev/loop2 scanned by udevd (4267)
[   78.955910][ T4495] FAULT_INJECTION: forcing a failure.
[   78.955910][ T4495] name failslab, interval 1, probability 0, space 0, times 1
[   79.048682][ T4495] CPU: 1 PID: 4495 Comm: syz.2.21 Not tainted syzkaller #0
[   79.055933][ T4495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[   79.065991][ T4495] Call Trace:
[   79.069259][ T4495]  <TASK>
[   79.072177][ T4495]  dump_stack_lvl+0x188/0x24e
[   79.076858][ T4495]  ? show_regs_print_info+0x12/0x12
[   79.082064][ T4495]  ? load_image+0x410/0x410
[   79.086583][ T4495]  ? __might_sleep+0xd0/0xd0
[   79.091162][ T4495]  ? __lock_acquire+0x7ea0/0x7ea0
[   79.096178][ T4495]  ? rcu_is_watching+0x11/0xa0
[   79.100951][ T4495]  should_fail_ex+0x390/0x4c0
[   79.105617][ T4495]  should_failslab+0x5/0x20
[   79.110106][ T4495]  slab_pre_alloc_hook+0x59/0x300
[   79.115115][ T4495]  ? misc_open+0x55/0x390
[   79.119449][ T4495]  ? raw_open+0x86/0x510
[   79.123700][ T4495]  __kmem_cache_alloc_node+0x4f/0x270
[   79.129068][ T4495]  ? raw_open+0x86/0x510
[   79.133310][ T4495]  kmalloc_trace+0x26/0xe0
[   79.137729][ T4495]  raw_open+0x86/0x510
[   79.142067][ T4495]  ? raw_ioctl+0x3cd0/0x3cd0
[   79.146675][ T4495]  misc_open+0x31f/0x390
[   79.150928][ T4495]  chrdev_open+0x585/0x5f0
[   79.155348][ T4495]  ? cd_forget+0x160/0x160
[   79.159765][ T4495]  ? fsnotify_perm+0x39b/0x550
[   79.164534][ T4495]  ? cd_forget+0x160/0x160
[   79.168945][ T4495]  do_dentry_open+0x7dd/0x10b0
[   79.173718][ T4495]  path_openat+0x2674/0x2f10
[   79.178315][ T4495]  ? kasan_set_track+0x60/0x70
[   79.183075][ T4495]  ? verify_lock_unused+0x140/0x140
[   79.188267][ T4495]  ? do_sys_openat2+0xdd/0x4f0
[   79.193052][ T4495]  ? do_filp_open+0x420/0x420
[   79.197734][ T4495]  do_filp_open+0x1ee/0x420
[   79.202235][ T4495]  ? vfs_tmpfile+0x490/0x490
[   79.206839][ T4495]  ? _raw_spin_unlock+0x24/0x40
[   79.211689][ T4495]  ? alloc_fd+0x590/0x640
[   79.216051][ T4495]  do_sys_openat2+0x14b/0x4f0
[   79.220727][ T4495]  ? do_sys_open+0xe0/0xe0
[   79.225141][ T4495]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[   79.231121][ T4495]  ? lock_chain_count+0x20/0x20
[   79.235973][ T4495]  __x64_sys_openat+0x135/0x160
[   79.240867][ T4495]  do_syscall_64+0x4c/0xa0
[   79.245281][ T4495]  ? clear_bhb_loop+0x60/0xb0
[   79.249954][ T4495]  ? clear_bhb_loop+0x60/0xb0
[   79.254632][ T4495]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   79.260524][ T4495] RIP: 0033:0x7fe2c876034e
[   79.264958][ T4495] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   79.284563][ T4495] RSP: 002b:00007fe2c96c2ea8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[   79.292993][ T4495] RAX: ffffffffffffffda RBX: 00007fe2c96c56c0 RCX: 00007fe2c876034e
[   79.300961][ T4495] RDX: 0000000000000002 RSI: 00007fe2c8836f02 RDI: ffffffffffffff9c
[   79.308925][ T4495] RBP: 00007fe2c8837b70 R08: 0000000000000000 R09: 0000000000000000
[   79.316890][ T4495] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000002d
[   79.324852][ T4495] R13: 0000200000010380 R14: 0000000000000003 R15: 00007ffda25d1718
[   79.332830][ T4495]  </TASK>
[   79.358503][ T4501] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   79.598258][ T4505] FAULT_INJECTION: forcing a failure.
[   79.598258][ T4505] name failslab, interval 1, probability 0, space 0, times 0
[   79.618920][ T4497] block device autoloading is deprecated and will be removed.
[   79.626759][ T4505] CPU: 1 PID: 4505 Comm: syz.0.23 Not tainted syzkaller #0
[   79.633986][ T4505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[   79.644053][ T4505] Call Trace:
[   79.647322][ T4505]  <TASK>
[   79.650245][ T4505]  dump_stack_lvl+0x188/0x24e
[   79.654933][ T4505]  ? show_regs_print_info+0x12/0x12
[   79.660139][ T4505]  ? load_image+0x410/0x410
[   79.664664][ T4505]  ? __lock_acquire+0x7ea0/0x7ea0
[   79.669711][ T4505]  should_fail_ex+0x390/0x4c0
[   79.674415][ T4505]  should_failslab+0x5/0x20
[   79.678945][ T4505]  slab_pre_alloc_hook+0x59/0x300
[   79.683964][ T4505]  ? br_netlink_fini+0x30/0x30
[   79.688729][ T4505]  kmem_cache_alloc_node+0x5a/0x310
[   79.693925][ T4505]  ? if_nlmsg_size+0x659/0x960
[   79.698679][ T4505]  ? __alloc_skb+0xf9/0x7d0
[   79.703181][ T4505]  __alloc_skb+0xf9/0x7d0
[   79.707509][ T4505]  rtmsg_ifinfo_build_skb+0x80/0x190
[   79.712789][ T4505]  rtmsg_ifinfo+0xc4/0x200
[   79.717200][ T4505]  dev_close_many+0x278/0x400
[   79.721888][ T4505]  ? __dev_open+0x430/0x430
[   79.726503][ T4505]  ? do_ip_setsockopt+0x4df/0x2f00
[   79.731646][ T4505]  ? ip_setsockopt+0x5d/0x100
[   79.736344][ T4505]  ? __sys_setsockopt+0x2bf/0x3d0
[   79.741450][ T4505]  ? __x64_sys_setsockopt+0xb1/0xc0
[   79.746647][ T4505]  ? do_syscall_64+0x4c/0xa0
[   79.751244][ T4505]  unregister_netdevice_many_notify+0x497/0x1990
[   79.757575][ T4505]  ? unregister_netdevice_many+0x20/0x20
[   79.763203][ T4505]  ? vif_add+0x1370/0x1370
[   79.767622][ T4505]  mroute_clean_tables+0x3d4/0xaf0
[   79.772744][ T4505]  ? __lock_acquire+0x7ea0/0x7ea0
[   79.777772][ T4505]  ? ipmr_mfc_add+0x2ee0/0x2ee0
[   79.782631][ T4505]  ? __might_fault+0xa6/0x120
[   79.787296][ T4505]  ? __might_fault+0xc2/0x120
[   79.791965][ T4505]  ? __might_fault+0xa6/0x120
[   79.796640][ T4505]  ip_mroute_setsockopt+0x9c4/0xf50
[   79.801841][ T4505]  ? ipmr_rule_default+0x70/0x70
[   79.806786][ T4505]  do_ip_setsockopt+0x4df/0x2f00
[   79.811732][ T4505]  ? ip_sock_set_pktinfo+0x60/0x60
[   79.816834][ T4505]  ? do_futex+0x310/0x320
[   79.821155][ T4505]  ? aa_sk_perm+0x795/0x8c0
[   79.825653][ T4505]  ? __ia32_sys_get_robust_list+0x100/0x100
[   79.831541][ T4505]  ? aa_af_perm+0x340/0x340
[   79.836036][ T4505]  ? __fget_files+0x3fc/0x460
[   79.840710][ T4505]  ? aa_sock_opt_perm+0x74/0x100
[   79.845643][ T4505]  ip_setsockopt+0x5d/0x100
[   79.850159][ T4505]  ? sock_common_recvmsg+0x190/0x190
[   79.855439][ T4505]  __sys_setsockopt+0x2bf/0x3d0
[   79.860285][ T4505]  __x64_sys_setsockopt+0xb1/0xc0
[   79.865309][ T4505]  do_syscall_64+0x4c/0xa0
[   79.869717][ T4505]  ? clear_bhb_loop+0x60/0xb0
[   79.874395][ T4505]  ? clear_bhb_loop+0x60/0xb0
[   79.879081][ T4505]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   79.884965][ T4505] RIP: 0033:0x7f9310d9fb19
[   79.889364][ T4505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   79.908962][ T4505] RSP: 002b:00007f9311bc1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   79.917370][ T4505] RAX: ffffffffffffffda RBX: 00007f9311026090 RCX: 00007f9310d9fb19
[   79.925332][ T4505] RDX: 00000000000000d4 RSI: 0000000000000000 RDI: 0000000000000003
[   79.933293][ T4505] RBP: 00007f9310e37b70 R08: 0000000000000004 R09: 0000000000000000
[   79.941260][ T4505] R10: 0000200000000b40 R11: 0000000000000246 R12: 0000000000000000
[   79.949215][ T4505] R13: 00007f9311026128 R14: 00007f9311026090 R15: 00007ffe7413ba88
[   79.957184][ T4505]  </TASK>
[   80.036124][ T4480] rxe_eth0 speed is unknown, defaulting to 1000
[   82.102342][ T4526] syz.0.28 (4526) used greatest stack depth: 20816 bytes left
[   82.128896][ T4535] loop1: detected capacity change from 0 to 128
[   82.140706][ T4527] sctp: failed to load transform for md5: -4
[   82.160744][ T4537] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0
[   82.232225][ T4535] EXT4-fs (loop1): Test dummy encryption mode enabled
[   82.313221][ T4535] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   82.388353][ T4535] ext4 filesystem being mounted at /8/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   82.427551][ T4553] device-mapper: ioctl: Unable to rename non-existent device,  to syza1
[   82.449717][ T4542] loop3: detected capacity change from 0 to 512
[   82.488590][ T4542] FAT-fs (loop3): Unrecognized mount option "ÿÿÿÿÿR	ç	ïäÐV©�[4èØ¡)ñ}ê³»Wz#¸" or missing value
[   82.690908][ T4267] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   83.307654][ T4561] loop4: detected capacity change from 0 to 512
[   83.346848][ T4562] loop0: detected capacity change from 0 to 1024
[   83.425751][ T4279] EXT4-fs (loop1): unmounting filesystem.
[   83.462074][ T4562] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only.
[   83.507276][ T4561] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   83.543360][ T4561] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   83.631757][ T4561] EXT4-fs error (device loop4): ext4_get_first_dir_block:3585: inode #12: comm syz.4.37: Attempting to read directory block (0) that is past i_size (3)
[   83.761469][ T4352] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   83.775933][ T4574] mmap: syz.1.39 (4574) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   83.826714][ T4574] gadgetfs: bound to dummy_udc driver
[   84.086073][ T4352] usb 3-1: unable to get BOS descriptor or descriptor too short
[   84.304371][ T4352] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   84.500987][ T4352] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[   84.620105][ T4352] usb 3-1: config 1 interface 0 has no altsetting 0
[   84.708079][ T4352] usb 3-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00
[   84.738217][ T4578] loop3: detected capacity change from 0 to 1024
[   84.738368][ T4352] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   84.864396][ T4352] usb 3-1: Found UVC 0.00 device <unnamed> (8086:0ad2)
[   84.906039][ T4352] usb 3-1: No valid video chain found.
[   84.933113][ T4578] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 2: comm syz.3.42: lblock 2 mapped to illegal pblock 2 (length 1)
[   85.687172][ T4578] Quota error (device loop3): qtree_write_dquot: dquota write failed
[   85.901439][ T4275] EXT4-fs (loop4): unmounting filesystem.
[   85.980840][ T4564] loop2: detected capacity change from 0 to 256
[   85.991241][ T4578] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 48: comm syz.3.42: lblock 0 mapped to illegal pblock 48 (length 1)
[   86.255664][ T4578] Quota error (device loop3): v2_write_file_info: Can't write info structure
[   86.276799][ T4564] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   86.338838][ T4578] EXT4-fs error (device loop3): ext4_acquire_dquot:6848: comm syz.3.42: Failed to acquire dquot type 0
[   86.350220][ T4564] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[   86.393861][ T4564] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0x84a6b859, utbl_chksum : 0xe619d30d)
[   86.406257][ T4578] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5985: Corrupt filesystem
[   86.550453][ T4564] exFAT-fs (loop2): failed to load alloc-bitmap
[   86.556805][ T4564] exFAT-fs (loop2): failed to recognize exfat type
[   86.563936][ T4578] EXT4-fs error (device loop3): ext4_evict_inode:281: inode #11: comm syz.3.42: mark_inode_dirty error
[   86.617171][   T41] cfg80211: failed to load regulatory.db
[   86.644622][ T4578] EXT4-fs warning (device loop3): ext4_evict_inode:284: couldn't mark inode dirty (err -117)
[   86.657822][ T4578] EXT4-fs (loop3): 1 orphan inode deleted
[   86.664859][ T4578] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   86.683978][ T4450] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:9: lblock 1 mapped to illegal pblock 1 (length 1)
[   86.790303][ T4596] loop4: detected capacity change from 0 to 164
[   86.823223][ T4596] rock: directory entry would overflow storage
[   86.829648][ T4596] rock: sig=0x5252, size=5, remaining=3
[   86.835362][ T4596] isofs_fill_super: root inode is not a directory. Corrupted media?
[   87.291760][ T4450] Quota error (device loop3): remove_tree: Can't read quota data block 1
[   87.396560][ T4450] EXT4-fs error (device loop3): ext4_release_dquot:6884: comm kworker/u4:9: Failed to release dquot type 0
[   87.549940][ T4287] EXT4-fs (loop3): unmounting filesystem.
[   87.551175][ T4564] loop2: detected capacity change from 0 to 16
[   87.571961][ T4287] EXT4-fs error (device loop3): __ext4_get_inode_loc:4523: comm syz-executor: Invalid inode table block 1 in block_group 0
[   87.651167][ T4287] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5985: Corrupt filesystem
[   87.793305][ T4287] EXT4-fs error (device loop3): ext4_quota_off:7142: inode #3: comm syz-executor: mark_inode_dirty error
[   87.883889][ T4564] erofs: (device loop2): mounted with root inode @ nid 36.
[   87.949809][ T4606] loop1: detected capacity change from 0 to 128
[   88.550579][ T4606] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[   88.630113][ T4606] hpfs: filesystem error: improperly stopped
[   88.645774][ T4606] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[   88.677699][ T4614] loop3: detected capacity change from 0 to 16
[   88.697558][ T4586] usb 3-1: USB disconnect, device number 2
[   88.719849][ T4606] hpfs: You really don't want any checks? You are crazy...
[   88.756967][ T4614] erofs: (device loop3): mounted with root inode @ nid 36.
[   88.775721][ T4606] hpfs: Code page index out of array
[   88.802951][ T4606] hpfs: code page support is disabled
[   88.843355][ T4606] hpfs: hpfs_map_4sectors(): unaligned read
[   88.849608][ T4606] hpfs: hpfs_map_4sectors(): unaligned read
[   88.904022][ T4606] hpfs: filesystem error: unable to find root dir
[   89.939275][ T4625] syz.2.52 uses obsolete (PF_INET,SOCK_PACKET)
[   89.990233][ T4621] netlink: 8 bytes leftover after parsing attributes in process `syz.4.49'.
[   90.228697][ T4621] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   90.229562][ T4630] loop3: detected capacity change from 0 to 2048
[   90.292093][ T4621] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   90.310790][ T4621] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   90.344910][ T4636] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   90.436373][ T4638] loop1: detected capacity change from 0 to 512
[   90.502442][   T26] audit: type=1800 audit(1793750938.071:2): pid=4630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.53" name="dev" dev="loop3" ino=19 res=0 errno=0
[   90.520596][ T4640] loop0: detected capacity change from 0 to 2048
[   90.532943][ T4638] EXT4-fs error (device loop1): ext4_orphan_get:1409: inode #15: comm syz.1.55: iget: bad i_size value: 38620345925642
[   90.611570][ T4638] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.55: couldn't read orphan inode 15 (err -117)
[   90.672741][ T4640] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   90.772872][ T4638] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   90.788741][ T4640] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   91.085721][ T4645] syz.3.53 (4645) used greatest stack depth: 19376 bytes left
[   91.146676][ T4636] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[   91.158149][ T4636] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4)
[   91.165627][   T26] audit: type=1800 audit(1793750938.741:3): pid=4640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.56" name="file0" dev="loop0" ino=13 res=0 errno=0
[   91.249501][ T4636] Remounting filesystem read-only
[   91.260127][ T4287] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer
[   91.384135][ T4650] loop2: detected capacity change from 0 to 512
[   91.433093][ T4650] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[   91.441570][ T4274] EXT4-fs (loop0): unmounting filesystem.
[   91.679747][ T4650] EXT4-fs (loop2): 1 truncate cleaned up
[   91.994951][ T4650] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   92.100762][ T4642] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[   92.262371][ T4451] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 40 with error 28
[   92.290587][ T4451] EXT4-fs (loop1): This should not happen!! Data will be lost
[   92.290587][ T4451] 
[   92.332661][ T4663] loop4: detected capacity change from 0 to 256
[   92.351229][ T4451] EXT4-fs (loop1): Total free blocks count 0
[   92.480159][ T4451] EXT4-fs (loop1): Free/Dirty block details
[   93.125010][ T4451] EXT4-fs (loop1): free_blocks=0
[   93.139276][   T26] audit: type=1800 audit(1793750940.241:4): pid=4670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.57" name="file1" dev="loop2" ino=15 res=0 errno=0
[   93.202029][ T4451] EXT4-fs (loop1): dirty_blocks=40
[   93.207210][ T4451] EXT4-fs (loop1): Block reservation details
[   93.225346][ T4281] EXT4-fs (loop2): unmounting filesystem.
[   93.303767][ T4451] EXT4-fs (loop1): i_reserved_data_blocks=40
[   93.338646][ T4279] EXT4-fs (loop1): unmounting filesystem.
[   93.587603][ T4680] Zero length message leads to an empty skb
[   93.794131][ T4691] loop0: detected capacity change from 0 to 512
[   93.939261][ T4691] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[   93.941298][ T4696] loop3: detected capacity change from 0 to 8
[   93.961849][ T4691] System zones: 1-12
[   94.680443][ T4691] EXT4-fs error (device loop0): ext4_quota_enable:7056: comm syz.0.73: inode #100663296: comm syz.0.73: iget: illegal inode #
[   94.743369][ T4691] EXT4-fs error (device loop0): ext4_quota_enable:7059: comm syz.0.73: Bad quota inode: 100663296, type: 2
[   95.611066][ T4691] EXT4-fs warning (device loop0): ext4_enable_quotas:7100: Failed to enable quota tracking (type=2, err=-117, ino=100663296). Please run e2fsck to fix.
[   95.663386][ T4691] EXT4-fs (loop0): mount failed
[   95.907774][ T4707] SQUASHFS error: Unable to read directory block [631:26]
[   95.920558][ T4707] SQUASHFS error: Unable to read directory block [631:26]
[   95.937338][ T4707] SQUASHFS error: Failed to read block 0x4de: -5
[   95.946891][ T4707] SQUASHFS error: Failed to read block 0x4de: -5
[   95.960495][ T4707] SQUASHFS error: Failed to read block 0x4de: -5
[   95.967299][ T4707] SQUASHFS error: Failed to read block 0x4de: -5
[   95.973974][ T4707] SQUASHFS error: Failed to read block 0x4de: -5
[   95.981208][ T4707] SQUASHFS error: Failed to read block 0x4de: -5
[   95.987867][ T4707] SQUASHFS error: Failed to read block 0x4de: -5
[   95.994539][ T4707] SQUASHFS error: Failed to read block 0x4de: -5
[   96.001282][ T4707] SQUASHFS error: Failed to read block 0x4de: -5
[   96.007995][ T4707] SQUASHFS error: Failed to read block 0x4de: -5
[   96.014726][ T4707] SQUASHFS error: Failed to read block 0x4de: -5
[   96.023688][ T4707] SQUASHFS error: Failed to read block 0x4de: -5
[   96.030409][ T4707] SQUASHFS error: Failed to read block 0x4de: -5
[   96.037142][ T4707] SQUASHFS error: Failed to read block 0x4de: -5
[   96.044045][ T4707] SQUASHFS error: Failed to read block 0x4de: -5
[   96.050758][ T4707] SQUASHFS error: Failed to read block 0x4de: -5
[   96.057572][ T4707] SQUASHFS error: Failed to read block 0x4de: -5
[   96.064269][ T4707] SQUASHFS error: Failed to read block 0x4de: -5
[   96.071115][ T4707] SQUASHFS error: Failed to read block 0x4de: -5
[   96.077809][ T4707] SQUASHFS error: Failed to read block 0x4de: -5
[   96.084646][ T4707] SQUASHFS error: Failed to read block 0x4de: -5
[   96.091377][ T4707] SQUASHFS error: Failed to read block 0x4de: -5
[   96.098175][ T4707] SQUASHFS error: Failed to read block 0x4de: -5
[   96.104905][ T4707] SQUASHFS error: Failed to read block 0x4de: -5
[   96.128232][ T4707] SQUASHFS error: Failed to read block 0x4de: -5
[   96.134731][ T4707] SQUASHFS error: Failed to read block 0x4de: -5
[   96.141185][ T4707] SQUASHFS error: Failed to read block 0x4de: -5
[   96.147575][ T4707] SQUASHFS error: Failed to read block 0x4de: -5
[   96.154025][ T4707] SQUASHFS error: Failed to read block 0x4de: -5
[   96.160446][ T4707] SQUASHFS error: Failed to read block 0x4de: -5
[   96.167979][   T26] audit: type=1800 audit(1793750943.541:5): pid=4707 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.74" name="file1" dev="loop3" ino=5 res=0 errno=0
[   96.436241][ T4709] loop1: detected capacity change from 0 to 164
[   96.728225][ T4725] loop2: detected capacity change from 0 to 256
[   96.799829][ T4725] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[   96.889462][ T4729] loop0: detected capacity change from 0 to 1024
[   96.922091][ T4731] binder: 4730:4731 ioctl c0306201 200000000640 returned -14
[   96.939768][ T4733] loop4: detected capacity change from 0 to 2048
[   97.097967][ T4733] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   97.130561][ T4733] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   97.165143][ T4448] hfsplus: b-tree write err: -5, ino 25
[   97.207045][ T4448] hfsplus: b-tree write err: -5, ino 4
[   97.238285][ T4448] hfsplus: b-tree write err: -5, ino 2
[   97.291667][ T4448] hfsplus: b-tree write err: -5, ino 17
[   98.232774][ T4275] EXT4-fs (loop4): unmounting filesystem.
[  102.892849][ T4774] binder: 4771:4774 ioctl c0306201 200000000640 returned -14
[  102.964585][ T4779] loop1: detected capacity change from 0 to 128
[  103.041320][ T4781] loop0: detected capacity change from 0 to 2048
[  103.986423][ T4781] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  105.984605][ T4781] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  106.129769][ T4797] FAULT_INJECTION: forcing a failure.
[  106.129769][ T4797] name failslab, interval 1, probability 0, space 0, times 0
[  106.160638][ T4797] CPU: 1 PID: 4797 Comm: syz.2.108 Not tainted syzkaller #0
[  106.167978][ T4797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  106.178036][ T4797] Call Trace:
[  106.181306][ T4797]  <TASK>
[  106.184224][ T4797]  dump_stack_lvl+0x188/0x24e
[  106.188891][ T4797]  ? show_regs_print_info+0x12/0x12
[  106.194090][ T4797]  ? load_image+0x410/0x410
[  106.198605][ T4797]  ? __might_sleep+0xd0/0xd0
[  106.203186][ T4797]  ? __lock_acquire+0x7ea0/0x7ea0
[  106.208202][ T4797]  ? lock_chain_count+0x20/0x20
[  106.213067][ T4797]  should_fail_ex+0x390/0x4c0
[  106.217770][ T4797]  should_failslab+0x5/0x20
[  106.222280][ T4797]  slab_pre_alloc_hook+0x59/0x300
[  106.227299][ T4797]  ? request_key_and_link+0xcb4/0x1420
[  106.232745][ T4797]  ? request_key_auth_new+0xfa/0xa10
[  106.238014][ T4797]  __kmem_cache_alloc_node+0x4f/0x270
[  106.243399][ T4797]  ? request_key_auth_new+0xfa/0xa10
[  106.248704][ T4797]  kmalloc_trace+0x26/0xe0
[  106.253115][ T4797]  request_key_auth_new+0xfa/0xa10
[  106.258213][ T4797]  ? refcount_dec_if_one+0xf0/0xf0
[  106.263323][ T4797]  ? request_key_auth_rcu_disposal+0x20/0x20
[  106.269295][ T4797]  ? up_write+0x1b6/0x410
[  106.273647][ T4797]  request_key_and_link+0xd8d/0x1420
[  106.278939][ T4797]  ? request_key_and_link+0x2c9/0x1420
[  106.284400][ T4797]  ? complete_request_key+0xa0/0xa0
[  106.289593][ T4797]  ? restrict_link_reject+0x10/0x10
[  106.294783][ T4797]  ? keyring_search_rcu+0x280/0x280
[  106.299980][ T4797]  ? __might_fault+0xa6/0x120
[  106.304670][ T4797]  ? down_read+0x1a8/0x2d0
[  106.309079][ T4797]  __se_sys_request_key+0x293/0x350
[  106.314277][ T4797]  ? __x64_sys_request_key+0xa0/0xa0
[  106.319566][ T4797]  ? lockdep_hardirqs_on+0x94/0x140
[  106.324767][ T4797]  do_syscall_64+0x4c/0xa0
[  106.329195][ T4797]  ? clear_bhb_loop+0x60/0xb0
[  106.333862][ T4797]  ? clear_bhb_loop+0x60/0xb0
[  106.338531][ T4797]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  106.344417][ T4797] RIP: 0033:0x7fe2c879fb19
[  106.348819][ T4797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  106.368428][ T4797] RSP: 002b:00007fe2c96c5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9
[  106.376831][ T4797] RAX: ffffffffffffffda RBX: 00007fe2c8a25fa0 RCX: 00007fe2c879fb19
[  106.384794][ T4797] RDX: 0000200000000180 RSI: 0000200000001ffb RDI: 0000200000000040
[  106.392755][ T4797] RBP: 00007fe2c8837b70 R08: 0000000000000000 R09: 0000000000000000
[  106.400720][ T4797] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000000
[  106.408681][ T4797] R13: 00007fe2c8a26038 R14: 00007fe2c8a25fa0 R15: 00007ffda25d1718
[  106.416685][ T4797]  </TASK>
[  107.540285][ T4274] EXT4-fs (loop0): unmounting filesystem.
[  108.427677][ T4811] loop4: detected capacity change from 0 to 2048
[  108.504686][ T4816] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  109.901781][   T26] audit: type=1800 audit(1793750957.481:6): pid=4811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.112" name="dev" dev="loop4" ino=19 res=0 errno=0
[  113.500332][ T4816] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  113.520567][ T4816] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4)
[  113.708577][ T4816] Remounting filesystem read-only
[  113.787653][ T4275] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer
[  117.450340][   T41] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[  117.704804][   T41] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  117.772080][   T41] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2
[  117.851882][   T41] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  117.874032][   T41] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  117.918587][   T41] usb 5-1: config 0 descriptor??
[  117.969005][   T41] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  118.039786][   T41] dvb-usb: bulk message failed: -22 (3/0)
[  118.107759][   T41] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  118.136423][   T41] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  118.165115][ T4849] dvb-usb: bulk message failed: -22 (2/0)
[  118.208483][   T41] usb 5-1: media controller created
[  118.228331][   T41] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  118.281206][   T41] dvb-usb: bulk message failed: -22 (6/0)
[  118.297967][   T41] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  118.309128][ T4861] binder: BINDER_SET_CONTEXT_MGR already set
[  118.356962][ T4861] binder: 4860:4861 ioctl 4018620d 200000000600 returned -16
[  118.369776][   T41] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input5
[  118.403029][ T4865] binder: 4860:4865 ioctl c0306201 200000000640 returned -14
[  118.446647][   T41] dvb-usb: schedule remote query interval to 150 msecs.
[  118.470297][   T41] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  118.530929][   T41] usb 5-1: USB disconnect, device number 2
[  118.686109][   T41] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  118.833875][ T4873] loop3: detected capacity change from 0 to 2048
[  119.000575][ T4878] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  119.536918][   T26] audit: type=1800 audit(1793750967.111:7): pid=4873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.132" name="dev" dev="loop3" ino=19 res=0 errno=0
[  122.044215][   T26] audit: type=1800 audit(1793750969.601:8): pid=4883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.132" name="file1" dev="loop3" ino=15 res=0 errno=0
[  123.048422][ T4878] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  123.069758][ T4878] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4)
[  123.087876][ T4896] binder: 4895:4896 ioctl c0306201 200000000540 returned -14
[  123.097180][ T4896] binder: 4895:4896 ioctl c0306201 200000000640 returned -14
[  123.110427][ T4878] Remounting filesystem read-only
[  123.117221][ T4287] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer
[  123.368308][ T4905] loop2: detected capacity change from 0 to 164
[  123.625177][ T4917] loop1: detected capacity change from 0 to 8
[  123.854738][ T4923] loop1: detected capacity change from 0 to 2048
[  124.185452][ T4928] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  124.359232][   T26] audit: type=1800 audit(1793750971.911:9): pid=4923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.151" name="dev" dev="loop1" ino=19 res=0 errno=0
[  124.390209][ T4927] binder: 4926:4927 ioctl c0306201 200000000540 returned -14
[  125.594509][ T4927] binder: 4926:4927 ioctl c0306201 200000000640 returned -14
[  125.982073][ T4928] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  126.067205][ T4928] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4)
[  126.135376][ T4928] Remounting filesystem read-only
[  126.163894][ T4279] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer
[  126.783799][ T4953] loop1: detected capacity change from 0 to 2048
[  126.815755][ T4953] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  126.824979][ T4953] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  126.897532][ T4279] EXT4-fs (loop1): unmounting filesystem.
[  126.900203][ T4263] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  127.011727][    T7] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  127.156070][ T4263] usb 4-1: Using ep0 maxpacket: 32
[  127.393660][    T7] usb 3-1: unable to get BOS descriptor or descriptor too short
[  127.446272][    T7] usb 3-1: config 189 has an invalid interface number: 127 but max is 0
[  127.508239][    T7] usb 3-1: config 189 has no interface number 0
[  127.553597][    T7] usb 3-1: config 189 interface 127 has no altsetting 0
[  127.652901][    T7] usb 3-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=61.9f
[  127.732339][    T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.784898][    T7] usb 3-1: Product: syz
[  127.821968][    T7] usb 3-1: Manufacturer: syz
[  127.937233][    T7] usb 3-1: SerialNumber: syz
[  128.286675][    T7] usbserial_generic 3-1:189.127: The "generic" usb-serial driver is only for testing and one-off prototypes.
[  128.400873][    T7] usbserial_generic 3-1:189.127: Tell linux-usb@vger.kernel.org to add your device to a proper driver.
[  128.519777][    T7] usbserial_generic 3-1:189.127: device has no bulk endpoints
[  128.590177][    T7] safe_serial 3-1:189.127: safe_serial converter detected
[  128.655386][ T4263] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  128.667786][    T7] safe_serial: probe of 3-1:189.127 failed with error -22
[  128.687833][ T4966] loop0: detected capacity change from 0 to 512
[  128.959396][    T7] usb 3-1: USB disconnect, device number 3
[  130.015390][ T4263] usb 4-1: string descriptor 0 read error: -71
[  130.023458][ T4263] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  130.036068][ T4263] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.052937][ T4263] usb 4-1: config 0 descriptor??
[  130.061103][ T4263] usb 4-1: can't set config #0, error -71
[  130.076304][ T4263] usb 4-1: USB disconnect, device number 2
[  130.173628][ T4970] binder: 4969:4970 ioctl c0306201 200000000540 returned -14
[  130.210890][ T4970] binder: 4969:4970 ioctl c0306201 200000000640 returned -14
[  130.232148][ T4966] EXT4-fs: test_dummy_encryption requires encrypt feature
[  130.268983][ T4976] loop3: detected capacity change from 0 to 2048
[  130.956782][ T4981] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  130.975683][   T26] audit: type=1800 audit(1793750978.551:10): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.167" name="dev" dev="loop3" ino=19 res=0 errno=0
[  131.334844][ T4981] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  131.345927][ T4981] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4)
[  131.356927][ T4981] Remounting filesystem read-only
[  131.364138][ T4287] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer
[  131.525048][ T4991] loop3: detected capacity change from 0 to 2048
[  131.619335][ T4991] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  131.672871][ T4991] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  132.654956][ T1283] ieee802154 phy0 wpan0: encryption failed: -22
[  132.661831][ T1283] ieee802154 phy1 wpan1: encryption failed: -22
[  133.311302][ T4287] EXT4-fs (loop3): unmounting filesystem.
[  134.662324][ T5010] loop3: detected capacity change from 0 to 512
[  134.669450][ T5010] EXT4-fs: Ignoring removed nobh option
[  134.683498][ T5010] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  134.696642][ T5010] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  134.705631][ T5012] loop4: detected capacity change from 0 to 512
[  134.707149][ T5010] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (33925!=0)
[  134.722861][ T5010] EXT4-fs (loop3): group descriptors corrupted!
[  134.730605][ T5012] EXT4-fs: test_dummy_encryption requires encrypt feature
[  134.772427][ T4267] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  134.815806][ T4266] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  137.820695][ T5026] loop3: detected capacity change from 0 to 512
[  137.895617][ T5030] loop1: detected capacity change from 0 to 2048
[  137.924984][ T5026] EXT4-fs error (device loop3): ext4_iget_extra_inode:4766: inode #15: comm syz.3.183: corrupted in-inode xattr
[  137.940668][ T5026] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.183: couldn't read orphan inode 15 (err -117)
[  137.988892][ T5026] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  138.042544][ T5034] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  138.060954][   T26] audit: type=1800 audit(1793750985.641:11): pid=5030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.184" name="dev" dev="loop1" ino=19 res=0 errno=0
[  138.141967][ T5034] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  138.173282][ T5034] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4)
[  138.293934][ T4287] EXT4-fs (loop3): unmounting filesystem.
[  138.304183][ T5034] Remounting filesystem read-only
[  138.315062][ T4279] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer
[  138.820199][ T5047] loop1: detected capacity change from 0 to 512
[  138.883808][ T5047] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[  138.965032][ T5047] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.189: invalid indirect mapped block 256 (level 1)
[  139.001556][ T5050] loop3: detected capacity change from 0 to 512
[  139.029701][ T5050] EXT4-fs: test_dummy_encryption requires encrypt feature
[  139.064799][ T5047] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.189: invalid indirect mapped block 2683928664 (level 1)
[  139.092188][ T4266] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  139.649439][ T5047] EXT4-fs (loop1): 1 truncate cleaned up
[  139.660961][ T5047] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  140.450766][ T4279] EXT4-fs (loop1): unmounting filesystem.
[  144.219966][ T5070] loop3: detected capacity change from 0 to 4096
[  144.583259][ T5070] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512)
[  145.467290][ T5070] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  145.720125][ T5070] ntfs3: loop3: ntfs_sync_fs r=1a failed, -22.
[  147.508090][ T5070] ntfs3: loop3: ntfs_evict_inode r=1a failed, -22.
[  147.980943][ T5089] loop4: detected capacity change from 0 to 1024
[  148.048412][   T26] audit: type=1800 audit(1793750995.621:12): pid=5089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.201" name="file1" dev="loop4" ino=20 res=0 errno=0
[  148.203475][ T5092] loop3: detected capacity change from 0 to 512
[  148.229005][ T5092] EXT4-fs: test_dummy_encryption requires encrypt feature
[  148.254042][ T4750] hfsplus: b-tree write err: -5, ino 25
[  148.780265][ T4750] hfsplus: b-tree write err: -5, ino 4
[  148.785860][ T4750] hfsplus: b-tree write err: -5, ino 2
[  148.812282][ T4750] hfsplus: b-tree write err: -5, ino 26
[  151.576190][ T5112] binder: 5111:5112 ioctl c0306201 200000000540 returned -14
[  151.672061][ T5112] binder: 5111:5112 ioctl c0306201 0 returned -14
[  152.947428][ T5132] null_blk: disk nullb1 created
[  153.009465][ T5132] netlink: 8 bytes leftover after parsing attributes in process `syz.2.216'.
[  153.034711][ T5132] device macsec0 entered promiscuous mode
[  153.677206][ T5137] loop3: detected capacity change from 0 to 512
[  153.685104][ T5137] EXT4-fs: test_dummy_encryption requires encrypt feature
[  153.712710][ T5136] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  154.338063][ T5141] loop2: detected capacity change from 0 to 2048
[  154.471360][ T5144] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  156.066280][   T26] audit: type=1800 audit(1793751003.631:13): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.219" name="dev" dev="loop2" ino=19 res=0 errno=0
[  156.567309][ T5144] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  156.688332][ T5144] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4)
[  156.700337][ T5144] Remounting filesystem read-only
[  156.737903][ T4281] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer
[  157.340272][ T4480] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  157.548939][ T4480] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  157.580203][ T4480] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  157.614171][ T4480] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  157.654393][ T4480] usb 1-1: New USB device found, idVendor=045e, idProduct=0003, bcdDevice= 0.00
[  157.686382][ T4480] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.723505][ T4480] usb 1-1: config 0 descriptor??
[  157.972115][ T5172] binder: 5171:5172 ioctl c0306201 200000000540 returned -14
[  157.986188][ T5172] binder: 5171:5172 ioctl c0306201 0 returned -14
[  158.070321][   T14] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[  158.375118][ T4480] hid-generic 0003:045E:0003.0001: unknown main item tag 0x2
[  158.416072][ T4480] hid-generic 0003:045E:0003.0001: unknown main item tag 0x2
[  158.587111][ T4480] hid-generic 0003:045E:0003.0001: unbalanced collection at end of report description
[  158.705054][ T4480] hid-generic: probe of 0003:045E:0003.0001 failed with error -22
[  158.866826][ T4480] usb 1-1: USB disconnect, device number 2
[  159.538014][   T14] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  159.554317][   T14] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[  159.617570][ T5186] loop1: detected capacity change from 0 to 512
[  159.625478][ T5186] EXT4-fs: test_dummy_encryption requires encrypt feature
[  159.666561][   T14] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  159.805012][   T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  159.994983][   T14] usb 4-1: config 0 descriptor??
[  160.150119][   T14] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  160.245781][   T14] dvb-usb: bulk message failed: -22 (3/0)
[  160.458716][   T14] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  160.585425][   T14] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  160.676013][   T14] usb 4-1: media controller created
[  160.917739][   T14] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  161.972322][ T5191] loop0: detected capacity change from 0 to 512
[  161.987692][   T14] dvb-usb: bulk message failed: -22 (6/0)
[  162.013248][ T5191] EXT4-fs: Ignoring removed bh option
[  162.039073][   T14] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  162.086411][ T5191] EXT4-fs error (device loop0): ext4_iget_extra_inode:4766: inode #15: comm syz.0.232: corrupted in-inode xattr
[  162.108945][   T14] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input6
[  162.181261][ T5191] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.232: couldn't read orphan inode 15 (err -117)
[  162.199468][   T14] dvb-usb: schedule remote query interval to 150 msecs.
[  162.227046][ T5191] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  162.350080][   T14] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  162.390246][   T14] usb 4-1: USB disconnect, device number 3
[  162.426083][   T14] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  162.452019][ T5191] EXT4-fs warning (device loop0): dx_probe:833: inode #2: comm syz.0.232: Unrecognised inode hash code 4
[  162.484036][ T5191] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.232: Corrupt directory, running e2fsck is recommended
[  162.498355][ T5191] EXT4-fs warning (device loop0): dx_probe:833: inode #2: comm syz.0.232: Unrecognised inode hash code 4
[  162.541988][ T5191] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.232: Corrupt directory, running e2fsck is recommended
[  162.656067][ T4274] EXT4-fs (loop0): unmounting filesystem.
[  163.039588][ T5213] loop1: detected capacity change from 0 to 1024
[  164.175781][ T5227] loop0: detected capacity change from 0 to 512
[  164.194101][ T5227] EXT4-fs: test_dummy_encryption requires encrypt feature
[  164.730147][ T4477] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  164.990011][    C0] sched: RT throttling activated
[  165.604743][ T4477] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  165.679829][ T4477] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  165.852155][ T4477] usb 5-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00
[  165.993268][ T4477] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.122579][ T4477] usb 5-1: Product: syz
[  166.184713][ T4477] usb 5-1: Manufacturer: syz
[  166.250980][ T4477] usb 5-1: SerialNumber: syz
[  166.446939][ T4477] ums-sddr09 5-1:1.0: USB Mass Storage device detected
[  166.664851][ T4477] ums-sddr09 5-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller)
[  166.664851][ T4477]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[  167.445652][ T4477] ums-sddr09: probe of 5-1:1.0 failed with error -5
[  167.513518][ T4477] usb 5-1: USB disconnect, device number 3
[  170.006746][ T5250] binder: 5247:5250 ioctl c0306201 200000000540 returned -14
[  176.976827][ T5319] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem
[  178.595286][ T5082] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  178.790229][ T5082] usb 2-1: Using ep0 maxpacket: 32
[  180.254983][ T5082] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  180.387863][ T5082] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  180.501582][ T5082] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  180.551789][ T5082] usb 2-1: Product: syz
[  180.567116][ T5082] usb 2-1: Manufacturer: syz
[  180.596584][ T5082] usb 2-1: SerialNumber: syz
[  180.647629][ T5082] usb 2-1: config 0 descriptor??
[  180.671588][ T5082] cdc_ether 2-1:0.0: skipping garbage
[  180.697926][ T5082] usb 2-1: bad CDC descriptors
[  180.723453][ T5082] usb 2-1: unsupported MDLM descriptors
[  180.881245][ T5082] usb 2-1: USB disconnect, device number 2
[  182.769577][ T5366] binder: 5365:5366 ioctl c0306201 200000000540 returned -14
[  189.213929][ T5404] binder: 5403:5404 ioctl c0306201 200000000540 returned -14
[  189.262588][ T5406] loop0: detected capacity change from 0 to 1024
[  191.050430][ T4276] Bluetooth: hci3: command 0x0406 tx timeout
[  191.050453][ T4284] Bluetooth: hci2: command 0x0406 tx timeout
[  191.051508][ T4282] Bluetooth: hci0: command 0x0406 tx timeout
[  191.069622][ T4288] Bluetooth: hci1: command 0x0406 tx timeout
[  193.266356][ T5450] loop3: detected capacity change from 0 to 512
[  193.320933][ T5450] EXT4-fs: Ignoring removed orlov option
[  193.419378][ T5450] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  193.451231][ T5457] loop1: detected capacity change from 0 to 2048
[  193.491908][ T5450] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  193.492064][ T5457] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  194.103195][ T1283] ieee802154 phy0 wpan0: encryption failed: -22
[  194.109524][ T1283] ieee802154 phy1 wpan1: encryption failed: -22
[  194.335479][ T4287] EXT4-fs (loop3): unmounting filesystem.
[  196.584347][ T5485] gadgetfs: bound to dummy_udc driver
[  196.860141][ T4480] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[  197.345045][ T5481] gadgetfs: suspended from state 2
[  197.481304][ T5490] fuse: Bad value for 'fd'
[  199.266129][ T5518] gadgetfs: bound to dummy_udc driver
[  199.660184][ T4480] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[  199.983590][ T5513] gadgetfs: suspended from state 2
[  200.071180][ T5514] loop3: detected capacity change from 0 to 4096
[  200.130499][ T5514] EXT4-fs: Ignoring removed nobh option
[  200.174717][ T5514] EXT4-fs: Ignoring removed bh option
[  200.271207][ T5514] EXT4-fs (loop3): Test dummy encryption mode enabled
[  200.423188][ T5514] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  203.956303][ T5514] fscrypt (loop3): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))")
[  204.677758][ T5538] fuse: Bad value for 'fd'
[  204.703041][ T4287] EXT4-fs (loop3): unmounting filesystem.
[  207.271414][ T5558] netlink: 24 bytes leftover after parsing attributes in process `syz.1.345'.
[  207.366377][ T5561] md: md4 stopped.
[  209.021913][ T5574] fuse: Bad value for 'fd'
[  209.832540][ T4585] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  210.115068][ T4585] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  210.451885][ T4585] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  210.666599][ T4585] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  210.726432][ T5592] loop1: detected capacity change from 0 to 16
[  210.749854][ T5589] loop4: detected capacity change from 0 to 2048
[  210.779311][ T5592] erofs: (device loop1): mounted with root inode @ nid 36.
[  213.281933][ T5611] fuse: Bad value for 'fd'
[  213.302767][ T4282] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  213.313665][ T4282] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  213.322571][ T4282] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  213.342783][ T4282] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  213.351660][ T4282] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  213.359062][ T4282] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  213.548563][ T5609] rxe_eth0 speed is unknown, defaulting to 1000
[  213.762663][ T5619] netlink: 12 bytes leftover after parsing attributes in process `syz.0.365'.
[  215.450136][ T4282] Bluetooth: hci3: command 0x0409 tx timeout
[  217.028041][ T5636] loop0: detected capacity change from 0 to 512
[  217.094545][ T5636] EXT4-fs (loop0): Test dummy encryption mode enabled
[  217.156288][ T5636] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  217.242443][ T5636] EXT4-fs (loop0): 1 truncate cleaned up
[  217.255896][ T5636] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  217.534912][ T4282] Bluetooth: hci3: command 0x041b tx timeout
[  218.187274][ T5609] chnl_net:caif_netlink_parms(): no params data found
[  219.610099][ T4282] Bluetooth: hci3: command 0x040f tx timeout
[  219.832919][ T5636] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[  220.858374][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state
[  220.910139][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state
[  220.944876][ T5609] device bridge_slave_0 entered promiscuous mode
[  220.948915][ T4274] EXT4-fs (loop0): unmounting filesystem.
[  221.034818][ T4585] device hsr_slave_0 left promiscuous mode
[  221.077391][ T4585] device hsr_slave_1 left promiscuous mode
[  221.117041][ T4585] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  221.143924][ T4585] batman_adv: batadv0: Removing interface: batadv_slave_0
[  221.249363][ T4585] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  221.346455][ T5680] fuse: Bad value for 'fd'
[  221.387263][ T4585] batman_adv: batadv0: Removing interface: batadv_slave_1
[  221.531978][ T4585] device bridge_slave_1 left promiscuous mode
[  221.630437][ T4585] bridge0: port 2(bridge_slave_1) entered disabled state
[  221.700405][ T4282] Bluetooth: hci3: command 0x0419 tx timeout
[  221.834159][ T4585] device bridge_slave_0 left promiscuous mode
[  221.870220][ T4585] bridge0: port 1(bridge_slave_0) entered disabled state
[  222.055200][ T4585] device veth1_macvtap left promiscuous mode
[  222.087094][ T4585] device veth0_macvtap left promiscuous mode
[  222.120399][ T4585] device veth1_vlan left promiscuous mode
[  222.127679][ T4585] device veth0_vlan left promiscuous mode
[  222.195369][ T5692] Need at least one configuration in g1.
[  222.240680][ T5692] udc dummy_udc.0: failed to start g1: -22
[  222.268147][ T5692] configfs-gadget.g1: probe of gadget.0 failed with error -22
[  222.350557][ T5692] UDC core: g1: couldn't find an available UDC or it's busy
[  226.294451][ T5732] gadgetfs: bound to dummy_udc driver
[  226.570414][ T5082] usb 1-1: new full-speed USB device number 5 using dummy_hcd
[  226.593499][    C0] gadgetfs: connected
[  226.604209][ T5082] gadgetfs: disconnected
[  226.840631][    C0] gadgetfs: connected
[  226.847371][ T5082] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  226.869461][ T5082] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00
[  226.958950][ T5082] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  227.015469][ T5728] gadgetfs: suspended from state 3
[  227.020952][ T5728] gadgetfs: disconnected
[  227.055026][ T5736] fuse: Bad value for 'fd'
[  227.067302][ T5082] usb 1-1: can't set config #1, error -71
[  227.118785][ T5082] usb 1-1: USB disconnect, device number 5
[  229.135140][ T4585] team0 (unregistering): Port device team_slave_1 removed
[  229.555637][ T4585] team0 (unregistering): Port device team_slave_0 removed
[  229.997336][ T4585] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  230.311093][ T4585] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  230.431874][ T5748] loop4: detected capacity change from 0 to 512
[  230.477083][ T5748] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  230.584660][ T5748] EXT4-fs (loop4): 1 truncate cleaned up
[  230.594541][ T5748] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  230.636185][   T26] audit: type=1800 audit(1793751078.211:14): pid=5748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.390" name="file1" dev="loop4" ino=15 res=0 errno=0
[  230.788160][ T4275] EXT4-fs (loop4): unmounting filesystem.
[  231.005285][ T4585] bond0 (unregistering): Released all slaves
[  231.100434][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state
[  231.107543][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state
[  231.115746][ T5609] device bridge_slave_1 entered promiscuous mode
[  231.191883][ T5719] device syzkaller0 entered promiscuous mode
[  232.092072][   T26] audit: type=1800 audit(1793751079.671:15): pid=5771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.395" name="bus" dev="sda1" ino=2048 res=0 errno=0
[  234.480626][ T5774] FAULT_INJECTION: forcing a failure.
[  234.480626][ T5774] name failslab, interval 1, probability 0, space 0, times 0
[  234.494289][ T5774] CPU: 0 PID: 5774 Comm: syz.1.396 Not tainted syzkaller #0
[  234.501646][ T5774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  234.511719][ T5774] Call Trace:
[  234.514996][ T5774]  <TASK>
[  234.517922][ T5774]  dump_stack_lvl+0x188/0x24e
[  234.522610][ T5774]  ? show_regs_print_info+0x12/0x12
[  234.527815][ T5774]  ? load_image+0x410/0x410
[  234.532341][ T5774]  ? __might_sleep+0xd0/0xd0
[  234.536929][ T5774]  ? __lock_acquire+0x7ea0/0x7ea0
[  234.541980][ T5774]  should_fail_ex+0x390/0x4c0
[  234.546661][ T5774]  should_failslab+0x5/0x20
[  234.551160][ T5774]  slab_pre_alloc_hook+0x59/0x300
[  234.556181][ T5774]  ? ops_init+0x8a/0x5e0
[  234.560418][ T5774]  __kmem_cache_alloc_node+0x4f/0x270
[  234.565789][ T5774]  ? ops_init+0x8a/0x5e0
[  234.570026][ T5774]  __kmalloc+0xa3/0x240
[  234.574183][ T5774]  ? sample_init_net+0x156/0x190
[  234.579120][ T5774]  ops_init+0x8a/0x5e0
[  234.583195][ T5774]  setup_net+0x4f2/0xbd0
[  234.587438][ T5774]  ? copy_net_ns+0x5b0/0x5b0
[  234.592024][ T5774]  ? copy_net_ns+0x324/0x5b0
[  234.596611][ T5774]  ? down_read_killable+0x1cc/0x340
[  234.601805][ T5774]  copy_net_ns+0x33e/0x5b0
[  234.606217][ T5774]  create_new_namespaces+0x3ce/0x700
[  234.611514][ T5774]  unshare_nsproxy_namespaces+0x116/0x160
[  234.617231][ T5774]  ksys_unshare+0x4f6/0x8e0
[  234.621738][ T5774]  ? sighand_ctor+0x40/0x40
[  234.626235][ T5774]  ? lock_chain_count+0x20/0x20
[  234.631088][ T5774]  ? syscall_enter_from_user_mode+0x21/0x80
[  234.636985][ T5774]  __x64_sys_unshare+0x34/0x40
[  234.641743][ T5774]  do_syscall_64+0x4c/0xa0
[  234.646159][ T5774]  ? clear_bhb_loop+0x60/0xb0
[  234.650831][ T5774]  ? clear_bhb_loop+0x60/0xb0
[  234.655523][ T5774]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  234.661441][ T5774] RIP: 0033:0x7f79db79fb19
[  234.665858][ T5774] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  234.685494][ T5774] RSP: 002b:00007f79dc586028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  234.693905][ T5774] RAX: ffffffffffffffda RBX: 00007f79dba25fa0 RCX: 00007f79db79fb19
[  234.701872][ T5774] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
[  234.709838][ T5774] RBP: 00007f79db837b70 R08: 0000000000000000 R09: 0000000000000000
[  234.717806][ T5774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  234.725832][ T5774] R13: 00007f79dba26038 R14: 00007f79dba25fa0 R15: 00007ffcd5988368
[  234.733823][ T5774]  </TASK>
[  235.639970][ T5782] loop4: detected capacity change from 0 to 164
[  235.664546][ T5782] rock: directory entry would overflow storage
[  235.670845][ T5782] rock: sig=0x5252, size=5, remaining=3
[  235.676456][ T5782] isofs_fill_super: root inode is not a directory. Corrupted media?
[  236.435662][ T5787] FAULT_INJECTION: forcing a failure.
[  236.435662][ T5787] name failslab, interval 1, probability 0, space 0, times 0
[  236.468830][ T5787] CPU: 1 PID: 5787 Comm: syz.4.399 Not tainted syzkaller #0
[  236.476170][ T5787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  236.486263][ T5787] Call Trace:
[  236.489550][ T5787]  <TASK>
[  236.492494][ T5787]  dump_stack_lvl+0x188/0x24e
[  236.497196][ T5787]  ? show_regs_print_info+0x12/0x12
[  236.502408][ T5787]  ? load_image+0x410/0x410
[  236.506926][ T5787]  ? __lock_acquire+0x7ea0/0x7ea0
[  236.511991][ T5787]  should_fail_ex+0x390/0x4c0
[  236.516695][ T5787]  should_failslab+0x5/0x20
[  236.521210][ T5787]  slab_pre_alloc_hook+0x59/0x300
[  236.526261][ T5787]  ? alloc_file_pseudo+0x1aa/0x200
[  236.531391][ T5787]  ? dma_buf_export+0x419/0x990
[  236.536261][ T5787]  __kmem_cache_alloc_node+0x4f/0x270
[  236.541670][ T5787]  ? dma_buf_export+0x419/0x990
[  236.546538][ T5787]  __kmalloc+0xa3/0x240
[  236.550710][ T5787]  dma_buf_export+0x419/0x990
[  236.555403][ T5787]  system_heap_allocate+0xd84/0x13a0
[  236.560710][ T5787]  ? system_heap_create+0x100/0x100
[  236.565929][ T5787]  ? __might_fault+0xa6/0x120
[  236.570619][ T5787]  ? __might_fault+0xa6/0x120
[  236.575316][ T5787]  dma_heap_ioctl+0x46e/0x630
[  236.580024][ T5787]  ? dma_heap_init+0xb0/0xb0
[  236.584652][ T5787]  ? bpf_lsm_file_ioctl+0x5/0x10
[  236.589610][ T5787]  ? security_file_ioctl+0x7c/0xa0
[  236.594745][ T5787]  ? dma_heap_init+0xb0/0xb0
[  236.599354][ T5787]  __se_sys_ioctl+0xfa/0x170
[  236.603969][ T5787]  do_syscall_64+0x4c/0xa0
[  236.608412][ T5787]  ? clear_bhb_loop+0x60/0xb0
[  236.613107][ T5787]  ? clear_bhb_loop+0x60/0xb0
[  236.617801][ T5787]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  236.623710][ T5787] RIP: 0033:0x7fa1d6d9fb19
[  236.628138][ T5787] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  236.647757][ T5787] RSP: 002b:00007fa1d7d27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  236.656190][ T5787] RAX: ffffffffffffffda RBX: 00007fa1d7025fa0 RCX: 00007fa1d6d9fb19
[  236.664191][ T5787] RDX: 0000200000010340 RSI: 000000004008af00 RDI: 0000000000000005
[  236.672186][ T5787] RBP: 00007fa1d6e37b70 R08: 0000000000000000 R09: 0000000000000000
[  236.680177][ T5787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  236.688168][ T5787] R13: 00007fa1d7026038 R14: 00007fa1d7025fa0 R15: 00007ffe2f995dc8
[  236.696174][ T5787]  </TASK>
[  236.887735][ T5790] loop3: detected capacity change from 0 to 512
[  236.934917][ T5790] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  237.014720][ T5790] EXT4-fs (loop3): 1 truncate cleaned up
[  237.027446][ T5790] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  237.054273][   T26] audit: type=1800 audit(1793751084.631:16): pid=5790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.401" name="file1" dev="loop3" ino=15 res=0 errno=0
[  237.296298][ T4287] EXT4-fs (loop3): unmounting filesystem.
[  238.372365][ T5809] gadgetfs: bound to dummy_udc driver
[  238.650212][    T7] usb 1-1: new full-speed USB device number 6 using dummy_hcd
[  238.667651][    C0] gadgetfs: connected
[  238.676705][    T7] gadgetfs: disconnected
[  238.910608][    C0] gadgetfs: connected
[  238.916915][    T7] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  238.931972][    T7] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00
[  239.000454][    T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  239.035874][ T5811] loop4: detected capacity change from 0 to 256
[  239.069563][ T5807] gadgetfs: suspended from state 3
[  239.074906][ T5807] gadgetfs: disconnected
[  239.112081][    T7] usb 1-1: can't set config #1, error -71
[  239.168760][ T4284] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  239.178317][ T4284] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  239.188021][ T4284] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  239.198887][ T4284] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  239.209928][   T50] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  239.218800][   T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  239.227246][    T7] usb 1-1: USB disconnect, device number 6
[  240.552969][ T5840] loop3: detected capacity change from 0 to 512
[  240.587898][ T5840] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  240.671747][ T5840] EXT4-fs (loop3): 1 truncate cleaned up
[  240.678257][ T5840] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  240.684038][ T5831] device syzkaller0 entered promiscuous mode
[  240.712086][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  240.756504][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  240.871033][ T5812] rxe_eth0 speed is unknown, defaulting to 1000
[  240.965177][ T5609] team0: Port device team_slave_0 added
[  241.119104][ T5609] team0: Port device team_slave_1 added
[  241.291447][   T50] Bluetooth: hci5: command 0x0409 tx timeout
[  241.568607][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0
[  241.595106][ T4287] EXT4-fs (loop3): unmounting filesystem.
[  241.609162][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  241.636126][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  241.680999][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1
[  241.688269][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  241.835716][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  241.930230][ T4479] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  241.945026][ T5858] netlink: 36 bytes leftover after parsing attributes in process `syz.3.418'.
[  242.009367][ T5609] device hsr_slave_0 entered promiscuous mode
[  242.032066][ T5609] device hsr_slave_1 entered promiscuous mode
[  242.087266][ T5609] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  242.119917][ T5609] Cannot create hsr debugfs directory
[  242.125835][ T4479] usb 2-1: Using ep0 maxpacket: 8
[  242.145420][ T4479] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  242.163944][ T4479] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  242.191559][ T4479] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  242.202106][ T4479] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  242.212618][ T4479] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  242.236264][ T4479] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  242.260110][ T4479] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  242.490738][ T4479] usb 2-1: GET_CAPABILITIES returned 0
[  242.496275][ T4479] usbtmc 2-1:16.0: can't read capabilities
[  242.568678][ T5812] chnl_net:caif_netlink_parms(): no params data found
[  242.635259][ T5005] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.691109][ T5879] 8021q: adding VLAN 0 to HW filter on device bond1
[  242.755297][ T5886] loop3: detected capacity change from 0 to 512
[  242.774627][ T5886] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  242.775798][ T5883] device bond_slave_0 entered promiscuous mode
[  242.789509][ T5883] device bond_slave_1 entered promiscuous mode
[  242.794497][ T4422] usb 2-1: USB disconnect, device number 3
[  242.797291][ T5883] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  242.816151][ T5883] bond1: (slave macvlan2): Enslaving as a backup interface with an up link
[  242.836695][ T5886] EXT4-fs (loop3): 1 truncate cleaned up
[  242.847518][ T5886] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  242.922047][ T5005] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  243.091255][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  243.148950][ T5005] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  243.370222][ T4284] Bluetooth: hci5: command 0x041b tx timeout
[  243.736089][ T5005] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  243.782505][ T4287] EXT4-fs (loop3): unmounting filesystem.
[  243.785071][ T5609] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  243.823385][ T5609] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  243.920749][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state
[  243.927869][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state
[  243.971344][ T5812] device bridge_slave_0 entered promiscuous mode
[  244.001862][ T5609] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  244.025876][ T5609] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  244.110052][ T5909] gadgetfs: bound to dummy_udc driver
[  244.171407][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state
[  244.195580][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state
[  244.272882][ T5812] device bridge_slave_1 entered promiscuous mode
[  244.400882][ T4422] usb 1-1: new full-speed USB device number 7 using dummy_hcd
[  244.809133][    C0] gadgetfs: connected
[  244.848954][ T4422] gadgetfs: disconnected
[  245.450060][ T4284] Bluetooth: hci5: command 0x040f tx timeout
[  246.904297][ T5916] vivid-007: =================  START STATUS  =================
[  246.918741][ T5916] vivid-007: Generate PTS: true
[  246.925850][ T5916] vivid-007: Generate SCR: true
[  246.931444][ T5916] tpg source WxH: 640x360 (Y'CbCr)
[  246.936582][ T5916] tpg field: 1
[  246.943176][ T5916] tpg crop: 640x360@0x0
[  246.947402][ T5916] tpg compose: 640x360@0x0
[  246.952289][ T5916] tpg colorspace: 8
[  246.957216][ T5812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  246.962224][ T5916] tpg transfer function: 0/0
[  246.980088][ T5916] tpg Y'CbCr encoding: 0/0
[  246.990945][ T5916] tpg quantization: 0/0
[  247.005376][ T5916] tpg RGB range: 0/2
[  247.009313][ T5916] vivid-007: ==================  END STATUS  ==================
[  247.034265][ T5812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  247.243009][ T5812] team0: Port device team_slave_0 added
[  247.259736][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0
[  247.305133][ T5812] team0: Port device team_slave_1 added
[  247.344889][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  247.366744][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  247.447479][ T5935] loop4: detected capacity change from 0 to 512
[  247.475145][ T5609] 8021q: adding VLAN 0 to HW filter on device team0
[  247.504693][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_0
[  247.527663][ T5935] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  247.530203][ T4284] Bluetooth: hci5: command 0x0419 tx timeout
[  247.537261][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  247.578048][ T5812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  247.595253][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  247.608697][ T5935] EXT4-fs (loop4): 1 truncate cleaned up
[  247.627621][ T5935] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  247.645147][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  247.657308][ T4448] bridge0: port 1(bridge_slave_0) entered blocking state
[  247.664483][ T4448] bridge0: port 1(bridge_slave_0) entered forwarding state
[  247.677559][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  247.694406][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  247.711895][ T4448] bridge0: port 2(bridge_slave_1) entered blocking state
[  247.719061][ T4448] bridge0: port 2(bridge_slave_1) entered forwarding state
[  247.729972][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_1
[  247.737266][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  247.765372][ T5812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  247.887041][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  247.905172][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  247.919689][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  248.420582][ T4275] EXT4-fs (loop4): unmounting filesystem.
[  248.624871][ T5957] gadgetfs: bound to dummy_udc driver
[  248.910118][ T4350] usb 1-1: new full-speed USB device number 8 using dummy_hcd
[  249.347641][ T5951] gadgetfs: suspended from state 2
[  249.382321][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  249.414711][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  249.516129][ T5812] device hsr_slave_0 entered promiscuous mode
[  249.551755][ T5812] device hsr_slave_1 entered promiscuous mode
[  249.573103][ T5812] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  249.591214][ T5812] Cannot create hsr debugfs directory
[  249.597447][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  249.605649][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  249.615106][ T5963] overlayfs: './bus' not a directory
[  249.616906][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  249.631631][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  249.646798][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  249.656433][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  249.674964][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  249.746720][ T5609] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  253.058651][ T5990] loop3: detected capacity change from 0 to 128
[  253.248662][ T5812] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  253.326334][ T5005] device hsr_slave_0 left promiscuous mode
[  253.371624][ T5005] device hsr_slave_1 left promiscuous mode
[  253.512244][ T5005] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  253.746420][ T5005] batman_adv: batadv0: Removing interface: batadv_slave_0
[  253.924489][ T5005] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  253.958224][ T5005] batman_adv: batadv0: Removing interface: batadv_slave_1
[  254.017584][ T5005] device bridge_slave_1 left promiscuous mode
[  254.046641][ T5005] bridge0: port 2(bridge_slave_1) entered disabled state
[  254.115069][ T5005] device bridge_slave_0 left promiscuous mode
[  254.144272][ T5005] bridge0: port 1(bridge_slave_0) entered disabled state
[  254.426029][ T5005] device veth1_macvtap left promiscuous mode
[  254.494050][ T5005] device veth0_macvtap left promiscuous mode
[  254.562595][ T5005] device veth1_vlan left promiscuous mode
[  254.631464][ T5005] device veth0_vlan left promiscuous mode
[  255.539923][ T1283] ieee802154 phy0 wpan0: encryption failed: -22
[  255.548760][ T1283] ieee802154 phy1 wpan1: encryption failed: -22
[  256.164749][ T6014] fuse: Bad value for 'rootmode'
[  257.003577][ T6020] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  257.036755][ T6021] gadgetfs: bound to dummy_udc driver
[  257.179614][ T6020] CIFS: Attempting to mount \\127.0.0.1\share
[  257.306305][ T6020] CIFS: VFS: Error connecting to socket. Aborting operation.
[  257.314141][ T4353] usb 1-1: new full-speed USB device number 9 using dummy_hcd
[  257.340764][    C1] gadgetfs: connected
[  257.345242][ T4353] gadgetfs: disconnected
[  257.368114][ T6020] CIFS: VFS: cifs_mount failed w/return code = -111
[  257.530524][    C1] gadgetfs: connected
[  257.537029][ T4353] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  257.560954][ T4353] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00
[  257.593811][ T4353] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  257.610093][ T4284] Bluetooth: hci4: command 0x0406 tx timeout
[  257.671959][    C1] gadgetfs: configuration #1
[  257.735042][ T6017] gadgetfs: suspended from state 3
[  257.740480][ T6017] gadgetfs: disconnected
[  257.765454][ T4353] usb 1-1: USB disconnect, device number 9
[  258.770230][ T6032] loop3: detected capacity change from 0 to 4096
[  258.782399][ T6032] EXT4-fs: Ignoring removed nobh option
[  258.788188][ T6032] EXT4-fs: Ignoring removed bh option
[  258.808193][ T6032] EXT4-fs (loop3): Test dummy encryption mode enabled
[  258.843141][ T5005] team0 (unregistering): Port device team_slave_1 removed
[  258.847906][ T6032] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  258.945321][ T5005] team0 (unregistering): Port device team_slave_0 removed
[  259.060856][ T5005] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  259.161250][ T5005] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  259.173906][ T6032] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  259.272138][ T4287] EXT4-fs (loop3): unmounting filesystem.
[  259.529897][ T6049] fuse: Bad value for 'rootmode'
[  259.666233][ T5005] bond0 (unregistering): Released all slaves
[  259.775951][ T5812] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  259.794486][ T5812] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  259.840248][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  259.850307][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  259.870331][ T6009] netlink: 16 bytes leftover after parsing attributes in process `syz.1.452'.
[  259.889064][ T6009] netlink: 8 bytes leftover after parsing attributes in process `syz.1.452'.
[  259.913305][ T5812] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  259.965928][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0
[  261.260195][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0
[  261.713006][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  261.781784][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  261.939233][ T5812] 8021q: adding VLAN 0 to HW filter on device team0
[  262.238422][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  262.326008][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  262.598448][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  262.605572][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  262.906606][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  263.041165][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  263.096815][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  263.105429][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  263.112652][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  263.189935][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  263.224001][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  263.267483][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  263.317079][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  263.429341][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  263.570214][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  263.734630][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  263.906193][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  264.067281][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  264.231754][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  264.378277][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  264.529871][ T5812] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  265.646457][ T6072] gadgetfs: bound to dummy_udc driver
[  266.776849][ T6077] gadgetfs: bound to dummy_udc driver
[  267.268633][ T6071] gadgetfs: suspended from state 2
[  267.274188][ T4263] usb 1-1: new full-speed USB device number 10 using dummy_hcd
[  267.691887][ T6094] fuse: Bad value for 'rootmode'
[  267.786837][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  267.878092][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  268.182883][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  268.229420][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  268.349763][ T5609] device veth0_vlan entered promiscuous mode
[  268.406147][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  268.498879][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  268.570864][ T5609] device veth1_vlan entered promiscuous mode
[  268.624046][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  268.657910][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  268.728026][ T6103] gadgetfs: bound to dummy_udc driver
[  268.829967][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  269.475487][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0
[  269.507673][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  269.516763][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  269.527842][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  269.670651][ T6102] netlink: 16 bytes leftover after parsing attributes in process `syz.1.473'.
[  269.679597][ T6102] netlink: 8 bytes leftover after parsing attributes in process `syz.1.473'.
[  269.691454][ T5609] device veth0_macvtap entered promiscuous mode
[  269.779884][ T6111] loop3: detected capacity change from 0 to 164
[  269.798638][ T6111] rock: directory entry would overflow storage
[  269.804979][ T6111] rock: sig=0x5252, size=5, remaining=3
[  269.810761][ T6111] isofs_fill_super: root inode is not a directory. Corrupted media?
[  270.312969][ T5609] device veth1_macvtap entered promiscuous mode
[  270.373903][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  274.018804][   T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  274.035171][   T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  274.046302][   T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  274.065106][   T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  274.080491][   T50] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  274.093367][   T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  275.333046][ T6142] rxe_eth0 speed is unknown, defaulting to 1000
[  275.867445][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  275.886699][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  275.983021][ T6149] gadgetfs: bound to dummy_udc driver
[  276.170473][ T4284] Bluetooth: hci0: command 0x0409 tx timeout
[  276.270937][    T7] usb 1-1: new full-speed USB device number 11 using dummy_hcd
[  276.302629][    C0] gadgetfs: connected
[  276.312512][    T7] gadgetfs: disconnected
[  276.337932][ T6151] fuse: Unknown parameter 'use00000000000000000000'
[  276.533931][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  276.561341][    C0] gadgetfs: connected
[  276.568333][    T7] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  276.608473][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  276.616952][    T7] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00
[  276.653333][ T6146] gadgetfs: suspended from state 3
[  276.658651][ T6146] gadgetfs: disconnected
[  276.676525][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  276.684620][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  276.769056][ T5812] device veth0_vlan entered promiscuous mode
[  276.779197][    T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  276.823219][ T6155] loop3: detected capacity change from 0 to 128
[  276.852553][ T6155] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  276.854849][ T5812] device veth1_vlan entered promiscuous mode
[  276.884938][    T7] usb 1-1: can't set config #1, error -71
[  276.913694][    T7] usb 1-1: USB disconnect, device number 11
[  276.923427][ T6155] hpfs: filesystem error: improperly stopped
[  276.929470][ T6155] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  276.947938][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  276.989867][ T6155] hpfs: You really don't want any checks? You are crazy...
[  277.022374][ T6155] hpfs: Code page index out of array
[  277.027748][ T6155] hpfs: code page support is disabled
[  277.046658][ T6157] loop1: detected capacity change from 0 to 2048
[  277.053401][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  277.078784][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  277.092486][ T6155] hpfs: hpfs_map_4sectors(): unaligned read
[  277.105293][ T6155] hpfs: hpfs_map_4sectors(): unaligned read
[  277.121869][ T5812] device veth0_macvtap entered promiscuous mode
[  277.147599][ T6155] hpfs: filesystem error: unable to find root dir
[  277.155118][ T6160] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  277.183664][   T26] audit: type=1800 audit(1793751124.761:17): pid=6157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.483" name="dev" dev="loop1" ino=19 res=0 errno=0
[  277.277852][ T5812] device veth1_macvtap entered promiscuous mode
[  277.395216][ T6160] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  277.433038][ T6160] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4)
[  277.503047][ T6166] gadgetfs: bound to dummy_udc driver
[  277.616799][ T6160] Remounting filesystem read-only
[  277.672747][ T4279] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer
[  277.780171][ T4422] usb 1-1: new full-speed USB device number 12 using dummy_hcd
[  277.812353][    C0] gadgetfs: connected
[  277.823230][ T4422] gadgetfs: disconnected
[  278.010640][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  278.068964][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  278.080604][    C0] gadgetfs: connected
[  278.087097][ T4422] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  278.111251][ T4422] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00
[  278.243243][ T6163] gadgetfs: suspended from state 3
[  278.248587][ T6163] gadgetfs: disconnected
[  278.260085][ T4284] Bluetooth: hci0: command 0x041b tx timeout
[  278.290087][ T4422] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  278.340194][ T4422] usb 1-1: can't set config #1, error -71
[  278.389657][ T4422] usb 1-1: USB disconnect, device number 12
[  278.650446][ T5812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  278.725649][ T5812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  278.852706][ T5812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  278.978047][ T5812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  279.082014][ T5812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  279.206319][ T5812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  279.284475][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0
[  279.304424][ T6142] chnl_net:caif_netlink_parms(): no params data found
[  280.349175][ T4284] Bluetooth: hci0: command 0x040f tx timeout
[  281.659360][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  281.672689][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  281.692423][ T5812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  281.928870][ T6196] fuse: Unknown parameter 'use00000000000000000000'
[  282.346782][ T5812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  282.359218][ T5812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  282.390423][ T5812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  282.411108][ T4284] Bluetooth: hci0: command 0x0419 tx timeout
[  282.431768][ T5812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  282.456710][ T5812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  282.512153][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1
[  282.755998][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  282.772008][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  282.785347][ T6202] loop4: detected capacity change from 0 to 128
[  282.789007][ T5812] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  282.810206][ T5812] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  282.819118][ T5812] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  282.827887][ T5812] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  282.905653][ T6202] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  283.003888][ T6205] gadgetfs: bound to dummy_udc driver
[  283.280207][ T4352] usb 1-1: new full-speed USB device number 13 using dummy_hcd
[  283.760996][ T6203] gadgetfs: suspended from state 2
[  283.777503][ T6202] hpfs: filesystem error: improperly stopped
[  283.787795][ T6202] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  283.795706][ T6202] hpfs: You really don't want any checks? You are crazy...
[  283.808258][ T6202] hpfs: Code page index out of array
[  283.832975][ T6202] hpfs: code page support is disabled
[  283.843124][ T6202] hpfs: hpfs_map_4sectors(): unaligned read
[  283.849293][ T6202] hpfs: hpfs_map_4sectors(): unaligned read
[  283.856184][ T6202] hpfs: filesystem error: unable to find root dir
[  284.151812][ T6142] bridge0: port 1(bridge_slave_0) entered blocking state
[  284.159958][ T6142] bridge0: port 1(bridge_slave_0) entered disabled state
[  284.183620][ T6142] device bridge_slave_0 entered promiscuous mode
[  284.352818][ T6142] bridge0: port 2(bridge_slave_1) entered blocking state
[  284.359946][ T6142] bridge0: port 2(bridge_slave_1) entered disabled state
[  284.369831][ T6142] device bridge_slave_1 entered promiscuous mode
[  284.386750][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  284.765006][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  285.282889][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  285.348398][ T6142] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  285.553031][ T6142] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  285.673821][ T4450] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  285.762195][ T4450] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  286.636906][ T6235] fuse: Unknown parameter 'use00000000000000000000'
[  286.704245][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  286.726199][ T6237] loop3: detected capacity change from 0 to 128
[  286.771905][ T6142] team0: Port device team_slave_0 added
[  286.803086][ T4452] device hsr_slave_0 left promiscuous mode
[  286.826773][ T4452] device hsr_slave_1 left promiscuous mode
[  286.858355][ T4452] batman_adv: batadv0: Removing interface: batadv_slave_0
[  286.872783][ T4452] batman_adv: batadv0: Removing interface: batadv_slave_1
[  286.884947][ T4452] device bridge_slave_1 left promiscuous mode
[  286.895294][ T4452] bridge0: port 2(bridge_slave_1) entered disabled state
[  286.907690][ T4452] device bridge_slave_0 left promiscuous mode
[  286.919613][ T4452] bridge0: port 1(bridge_slave_0) entered disabled state
[  287.676263][ T6245] gadgetfs: bound to dummy_udc driver
[  287.893704][ T4452] device veth1_macvtap left promiscuous mode
[  287.899801][ T4452] device veth0_macvtap left promiscuous mode
[  287.931633][ T4452] device veth1_vlan left promiscuous mode
[  287.937579][ T4452] device veth0_vlan left promiscuous mode
[  287.995511][ T6247] loop3: detected capacity change from 0 to 2048
[  288.110361][ T6250] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  288.129480][   T26] audit: type=1800 audit(1793751135.701:18): pid=6247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.504" name="dev" dev="loop3" ino=19 res=0 errno=0
[  289.165483][ T6250] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  289.181185][ T6250] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4)
[  289.200279][ T6250] Remounting filesystem read-only
[  289.212897][ T4287] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer
[  290.739448][ T6278] fuse: Unknown parameter 'user_i00000000000000000000'
[  290.984954][ T6281] loop3: detected capacity change from 0 to 512
[  291.041574][ T6281] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  291.183570][ T6281] EXT4-fs (loop3): 1 truncate cleaned up
[  291.255389][ T6281] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  291.627585][ T6287] gadgetfs: bound to dummy_udc driver
[  292.019302][ T4452] team0 (unregistering): Port device team_slave_1 removed
[  292.096960][ T4287] EXT4-fs (loop3): unmounting filesystem.
[  292.625513][ T4452] team0 (unregistering): Port device team_slave_0 removed
[  293.520644][ T4452] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  293.712418][ T4452] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  294.464388][ T4452] bond0 (unregistering): Released all slaves
[  294.626884][ T6142] team0: Port device team_slave_1 added
[  294.752145][ T6142] batman_adv: batadv0: Adding interface: batadv_slave_0
[  294.770954][ T6142] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  294.832099][   T26] audit: type=1800 audit(1793751142.401:19): pid=6307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.405" name=08 dev="sda1" ino=2052 res=0 errno=0
[  294.835867][ T6142] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  294.876403][ T6142] batman_adv: batadv0: Adding interface: batadv_slave_1
[  294.890857][ T6142] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  294.923224][ T6309] loop3: detected capacity change from 0 to 2048
[  294.931255][ T6142] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  295.019174][ T6312] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  295.052944][   T26] audit: type=1800 audit(1793751142.631:20): pid=6309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.520" name="dev" dev="loop3" ino=19 res=0 errno=0
[  295.091516][ T6142] device hsr_slave_0 entered promiscuous mode
[  295.159382][ T6142] device hsr_slave_1 entered promiscuous mode
[  295.182917][ T6142] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  295.203870][ T6142] Cannot create hsr debugfs directory
[  295.210616][ T6312] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  295.258276][ T6312] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4)
[  295.318902][ T6312] Remounting filesystem read-only
[  295.326491][ T4287] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer
[  295.454771][ T6315] fuse: Unknown parameter 'user_i00000000000000000000'
[  296.378506][ T6323] loop3: detected capacity change from 0 to 128
[  296.474041][ T6323] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  296.505250][ T6323] hpfs: filesystem error: improperly stopped
[  296.554362][ T6323] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  296.590232][ T6323] hpfs: You really don't want any checks? You are crazy...
[  297.335831][ T6323] hpfs: Code page index out of array
[  297.422840][ T6323] hpfs: code page support is disabled
[  297.428319][ T6323] hpfs: hpfs_map_4sectors(): unaligned read
[  297.487131][ T6323] hpfs: hpfs_map_4sectors(): unaligned read
[  297.515247][ T6323] hpfs: filesystem error: unable to find root dir
[  298.594066][ T6142] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  298.649139][ T6142] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  298.675653][ T6343] binder: 6342:6343 ioctl c0306201 200000000540 returned -14
[  298.686009][ T6343] binder: 6342:6343 ioctl c0306201 200000000640 returned -14
[  299.247283][ T6142] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  299.557072][ T6142] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  299.640606][ T6350] fuse: Unknown parameter 'user_i00000000000000000000'
[  299.785113][ T6142] 8021q: adding VLAN 0 to HW filter on device bond0
[  299.818941][ T5108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  299.842824][ T5108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  300.699873][ T6142] 8021q: adding VLAN 0 to HW filter on device team0
[  300.900459][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  300.917014][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  300.956321][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[  300.963497][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[  300.971588][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  300.983458][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  300.992719][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[  300.999821][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[  301.007717][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  301.017361][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  301.024206][ T6365] loop3: detected capacity change from 0 to 128
[  301.195978][ T6365] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  301.241475][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  301.328109][ T6365] hpfs: filesystem error: improperly stopped
[  301.463844][ T6365] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  301.597463][ T6365] hpfs: You really don't want any checks? You are crazy...
[  301.695324][ T6365] hpfs: Code page index out of array
[  301.759666][ T6365] hpfs: code page support is disabled
[  301.820972][ T6365] hpfs: hpfs_map_4sectors(): unaligned read
[  301.870268][ T5108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  301.879064][ T6365] hpfs: hpfs_map_4sectors(): unaligned read
[  301.885509][ T6365] hpfs: filesystem error: unable to find root dir
[  301.927066][ T5108] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  301.979641][ T5108] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  302.030978][ T5108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  302.039809][ T5108] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  302.069820][ T5108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  302.088480][ T5108] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  302.114225][ T5108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  302.135027][ T5108] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  302.151067][ T6142] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  302.386928][ T6384] binder: 6383:6384 ioctl c0306201 200000000540 returned -14
[  302.432700][ T6384] binder: 6383:6384 ioctl c0306201 200000000640 returned -14
[  303.818904][ T6401] fuse: Unknown parameter 'user_id00000000000000000000'
[  303.923905][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  303.954784][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  303.981423][ T6142] 8021q: adding VLAN 0 to HW filter on device batadv0
[  306.191592][ T6425] loop4: detected capacity change from 0 to 128
[  306.226027][ T6425] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  306.260347][ T6425] hpfs: filesystem error: improperly stopped
[  306.266392][ T6425] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  306.340748][ T6425] hpfs: You really don't want any checks? You are crazy...
[  306.369542][ T6425] hpfs: Code page index out of array
[  306.449114][ T6425] hpfs: code page support is disabled
[  306.561794][ T6425] hpfs: hpfs_map_4sectors(): unaligned read
[  306.668075][ T6425] hpfs: hpfs_map_4sectors(): unaligned read
[  306.788374][ T6425] hpfs: filesystem error: unable to find root dir
[  306.949162][ T6433] binder: 6430:6433 ioctl c0306201 200000000540 returned -14
[  307.318332][ T6433] binder: 6430:6433 ioctl c0306201 200000000640 returned -14
[  309.266336][ T6439] fuse: Unknown parameter 'user_id00000000000000000000'
[  311.103820][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  311.176194][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  312.111110][ T6142] device veth0_vlan entered promiscuous mode
[  312.140295][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  312.148847][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  312.161629][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  312.169530][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  312.206162][ T6142] device veth1_vlan entered promiscuous mode
[  312.591795][ T4750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  312.667370][ T4750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  312.836093][ T6142] device veth0_macvtap entered promiscuous mode
[  313.002928][ T6142] device veth1_macvtap entered promiscuous mode
[  314.011185][ T6232] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  314.074438][ T6232] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  314.943719][ T6142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  315.015331][ T6479] loop1: detected capacity change from 0 to 2048
[  315.015652][ T6142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  315.080174][ T6482] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  315.099174][   T26] audit: type=1800 audit(1793751162.671:21): pid=6479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.562" name="dev" dev="loop1" ino=19 res=0 errno=0
[  315.113183][ T6484] binder: 6483:6484 ioctl c0306201 200000000540 returned -14
[  315.135419][ T6142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  315.249705][ T6142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  315.366553][ T6142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  315.512619][ T6142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  315.540465][ T6484] binder: 6483:6484 ioctl c0306201 200000000640 returned -14
[  316.594110][ T6142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  316.740285][ T6142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  316.905507][ T6487] syz.1.562 (6487) used greatest stack depth: 19312 bytes left
[  316.961620][ T6142] batman_adv: batadv0: Interface activated: batadv_slave_0
[  316.972225][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  316.974233][ T1283] ieee802154 phy0 wpan0: encryption failed: -22
[  316.986541][ T1283] ieee802154 phy1 wpan1: encryption failed: -22
[  316.996366][ T6482] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  317.014289][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  317.046086][ T6482] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4)
[  317.146388][ T6142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  317.197119][ T6482] Remounting filesystem read-only
[  317.269576][ T6142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  317.295639][ T4279] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer
[  317.427399][ T6142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  317.561970][ T6142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  317.710276][ T6142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  317.761815][ T6494] fuse: Unknown parameter 'user_id00000000000000000000'
[  317.815753][ T6142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  317.840067][ T6142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  317.860022][ T6142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  317.881342][ T6142] batman_adv: batadv0: Interface activated: batadv_slave_1
[  317.888696][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  317.942247][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  317.957583][ T6142] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  318.008956][ T6142] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  318.080031][ T6142] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  318.088792][ T6142] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  318.260238][ T6505] loop3: detected capacity change from 0 to 512
[  318.388212][ T6505] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  319.142417][ T5005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  319.142474][ T6505] EXT4-fs (loop3): 1 truncate cleaned up
[  319.162528][ T6505] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  319.178228][ T5005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  319.197047][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  319.402507][ T5005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  319.415046][ T5005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  319.435441][ T5005] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  319.589870][ T4287] EXT4-fs (loop3): unmounting filesystem.
[  320.573350][ T6523] loop3: detected capacity change from 0 to 128
[  321.551571][ T6537] binder: 6535:6537 ioctl c0306201 200000000540 returned -14
[  321.595437][ T6537] binder: 6535:6537 ioctl c0306201 200000000640 returned -14
[  322.751634][ T6540] loop3: detected capacity change from 0 to 2048
[  323.365001][ T6545] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  323.667102][   T26] audit: type=1800 audit(1793751171.241:22): pid=6540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.575" name="dev" dev="loop3" ino=19 res=0 errno=0
[  326.425324][ T6545] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  326.605997][ T6553] fuse: Bad value for 'fd'
[  326.611025][ T6545] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4)
[  326.646079][ T6559] loop5: detected capacity change from 0 to 128
[  326.675594][ T6545] Remounting filesystem read-only
[  326.689614][ T6559] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  326.714109][ T4287] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer
[  326.790325][ T6559] hpfs: filesystem error: improperly stopped
[  326.800252][ T6559] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  326.816950][ T6559] hpfs: You really don't want any checks? You are crazy...
[  326.868230][ T6559] hpfs: Code page index out of array
[  326.904417][ T6559] hpfs: code page support is disabled
[  326.909955][ T6559] hpfs: hpfs_map_4sectors(): unaligned read
[  327.010195][ T6559] hpfs: hpfs_map_4sectors(): unaligned read
[  327.016232][ T6559] hpfs: filesystem error: unable to find root dir
[  328.217934][ T6581] gadgetfs: bound to dummy_udc driver
[  329.242859][ T6592] binder: 6589:6592 ioctl c0306201 200000000540 returned -14
[  329.295198][ T6592] binder: 6589:6592 ioctl c0306201 200000000640 returned -14
[  329.666972][ T6598] netlink: 12 bytes leftover after parsing attributes in process `syz.5.585'.
[  330.470446][ T6602] loop1: detected capacity change from 0 to 2048
[  331.997916][ T6614] fuse: Bad value for 'fd'
[  332.095996][ T6615] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  332.373940][   T26] audit: type=1800 audit(1793751179.941:23): pid=6602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.589" name="dev" dev="loop1" ino=19 res=0 errno=0
[  334.315648][ T6615] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  334.345022][ T6615] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4)
[  334.395434][ T6615] Remounting filesystem read-only
[  334.402180][ T4279] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer
[  334.503260][ T6628] netlink: 8 bytes leftover after parsing attributes in process `syz.3.596'.
[  334.526365][ T6628] device macsec0 entered promiscuous mode
[  336.486023][ T6643] binder: 6637:6643 ioctl c0306201 200000000540 returned -14
[  336.503546][ T6643] binder: 6637:6643 ioctl c0306201 200000000640 returned -14
[  338.223410][ T6651] loop3: detected capacity change from 0 to 512
[  338.260966][ T6651] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  338.375376][ T6651] EXT4-fs (loop3): 1 truncate cleaned up
[  338.415678][ T6651] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  338.694946][ T6666] fuse: Bad value for 'fd'
[  338.898406][ T4287] EXT4-fs (loop3): unmounting filesystem.
[  339.848601][ T6677] loop3: detected capacity change from 0 to 2048
[  339.963600][ T6681] netlink: 8 bytes leftover after parsing attributes in process `syz.5.609'.
[  339.991700][ T6681] device macsec0 entered promiscuous mode
[  340.211939][ T6682] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  340.492302][   T26] audit: type=1800 audit(1793751188.061:24): pid=6677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.607" name="dev" dev="loop3" ino=19 res=0 errno=0
[  341.107323][   T26] audit: type=1800 audit(1793751188.681:25): pid=6685 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.607" name="file1" dev="loop3" ino=15 res=0 errno=0
[  341.719947][ T6682] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  341.743799][ T6682] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4)
[  341.744373][ T6693] binder: 6692:6693 ioctl c0306201 200000000540 returned -14
[  341.796692][ T6693] binder: 6692:6693 ioctl c0306201 200000000640 returned -14
[  341.800431][ T6682] Remounting filesystem read-only
[  341.847985][ T4287] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer
[  342.738763][ T6709] loop1: detected capacity change from 0 to 128
[  343.848587][ T6714] loop3: detected capacity change from 0 to 512
[  343.863117][ T6714] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  343.930876][ T6714] EXT4-fs (loop3): 1 truncate cleaned up
[  343.937709][ T6714] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  344.369901][   T26] audit: type=1800 audit(1793751191.771:26): pid=6722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.618" name="file1" dev="loop3" ino=15 res=0 errno=0
[  344.374911][ T6724] fuse: Unknown parameter '0x0000000000000004'
[  345.395888][ T4287] EXT4-fs (loop3): unmounting filesystem.
[  345.704541][ T6746] netlink: 8 bytes leftover after parsing attributes in process `syz.6.623'.
[  345.725977][ T6746] device macsec0 entered promiscuous mode
[  346.542060][ T6743] loop5: detected capacity change from 0 to 2048
[  346.588997][ T6752] binder: 6751:6752 ioctl c0306201 200000000540 returned -14
[  346.597770][ T6753] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  346.617719][   T26] audit: type=1800 audit(1793751194.191:27): pid=6743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.624" name="dev" dev="loop5" ino=19 res=0 errno=0
[  346.752102][ T6752] binder: 6751:6752 ioctl c0306201 200000000640 returned -14
[  346.857399][ T6747] syz.5.624 (6747) used greatest stack depth: 19216 bytes left
[  347.059190][ T6753] NILFS (loop5): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  347.181619][ T6753] NILFS error (device loop5): nilfs_bmap_propagate: broken bmap (inode number=4)
[  347.328641][ T6753] Remounting filesystem read-only
[  347.396449][ T6142] NILFS (loop5): disposed unprocessed dirty file(s) when stopping log writer
[  349.872500][ T6786] netlink: 12 bytes leftover after parsing attributes in process `syz.4.632'.
[  349.915971][ T6788] fuse: Unknown parameter '0x0000000000000004'
[  351.098791][ T6806] netlink: 8 bytes leftover after parsing attributes in process `syz.3.638'.
[  351.743043][ T6804] loop4: detected capacity change from 0 to 128
[  351.760292][ T6804] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  351.812162][ T6804] hpfs: filesystem error: improperly stopped
[  351.820850][ T6804] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  351.838696][ T6809] binder: 6808:6809 ioctl c0306201 200000000540 returned -14
[  351.879918][ T6804] hpfs: You really don't want any checks? You are crazy...
[  351.908279][ T6809] binder: 6808:6809 ioctl c0306201 200000000640 returned -14
[  351.919363][ T6804] hpfs: Code page index out of array
[  351.946981][ T6804] hpfs: code page support is disabled
[  351.963406][ T6804] hpfs: hpfs_map_4sectors(): unaligned read
[  351.992725][ T6804] hpfs: hpfs_map_4sectors(): unaligned read
[  352.017437][ T6804] hpfs: filesystem error: unable to find root dir
[  352.167987][ T6813] loop3: detected capacity change from 0 to 2048
[  352.845559][ T6822] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  352.864147][   T26] audit: type=1800 audit(1793751200.441:28): pid=6813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.641" name="dev" dev="loop3" ino=19 res=0 errno=0
[  355.053719][ T6822] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  355.093288][ T6822] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4)
[  355.157951][ T6822] Remounting filesystem read-only
[  355.225373][ T4287] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer
[  355.997265][ T6847] loop4: detected capacity change from 0 to 128
[  356.266311][ T6853] fuse: Unknown parameter '0x0000000000000004'
[  357.024580][ T6860] MPTCP: addr_signal error, rm_addr=2
[  357.071177][ T6862] binder: 6861:6862 ioctl c0306201 200000000540 returned -14
[  357.125033][ T6864] loop4: detected capacity change from 0 to 128
[  357.176870][ T6862] binder: 6861:6862 ioctl c0306201 200000000640 returned -14
[  357.200561][ T6864] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  357.260142][ T6864] hpfs: filesystem error: improperly stopped
[  357.296645][ T6864] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  357.436950][ T6864] hpfs: You really don't want any checks? You are crazy...
[  357.454600][ T6864] hpfs: Code page index out of array
[  357.500229][ T6864] hpfs: code page support is disabled
[  357.505781][ T6864] hpfs: hpfs_map_4sectors(): unaligned read
[  357.518991][ T6864] hpfs: hpfs_map_4sectors(): unaligned read
[  358.130398][ T6864] hpfs: filesystem error: unable to find root dir
[  359.489689][ T6888] loop4: detected capacity change from 0 to 512
[  359.588381][ T6888] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  359.658871][ T6888] EXT4-fs (loop4): 1 truncate cleaned up
[  359.669365][ T6888] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  360.317709][   T26] audit: type=1800 audit(1793751207.841:29): pid=6900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.659" name="file1" dev="loop4" ino=15 res=0 errno=0
[  360.501002][ T6903] fuse: Unknown parameter '0x0000000000000004'
[  360.526573][ T4275] EXT4-fs (loop4): unmounting filesystem.
[  360.787949][ T6912] loop1: detected capacity change from 0 to 128
[  360.833367][ T6913] binder: 6909:6913 ioctl c0306201 200000000540 returned -14
[  360.902452][ T6915] netlink: 12 bytes leftover after parsing attributes in process `syz.5.667'.
[  360.902688][ T6913] binder: 6909:6913 ioctl c0306201 200000000640 returned -14
[  363.542845][ T6931] loop5: detected capacity change from 0 to 4096
[  363.676865][ T6931] EXT4-fs: Ignoring removed nobh option
[  363.692206][ T6931] EXT4-fs: Ignoring removed bh option
[  363.755535][ T6931] EXT4-fs (loop5): Test dummy encryption mode enabled
[  363.844781][ T6944] netlink: 8 bytes leftover after parsing attributes in process `syz.4.675'.
[  363.910486][ T6931] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  364.755053][ T6958] fuse: Unknown parameter '0x0000000000000004'
[  365.028904][ T6142] EXT4-fs (loop5): unmounting filesystem.
[  365.130162][ T4284] Bluetooth: hci5: command 0x0406 tx timeout
[  365.543038][ T6975] binder: 6974:6975 ioctl c0306201 200000000540 returned -14
[  365.582656][ T6975] binder: 6974:6975 ioctl c0306201 200000000640 returned -14
[  365.990813][ T6983] loop4: detected capacity change from 0 to 128
[  366.976493][ T6990] gadgetfs: bound to dummy_udc driver
[  368.068182][ T7002] netlink: 8 bytes leftover after parsing attributes in process `syz.4.687'.
[  368.093369][ T7002] device macsec0 entered promiscuous mode
[  369.733097][ T7005] loop5: detected capacity change from 0 to 2048
[  369.822991][ T7009] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  369.844600][   T26] audit: type=1800 audit(1793751217.421:30): pid=7005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.689" name="dev" dev="loop5" ino=19 res=0 errno=0
[  369.930794][ T7008] fuse: Unknown parameter '0x0000000000000004'
[  370.486994][ T7009] NILFS (loop5): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  370.523456][ T7009] NILFS error (device loop5): nilfs_bmap_propagate: broken bmap (inode number=4)
[  370.602947][ T7009] Remounting filesystem read-only
[  370.617178][ T6142] NILFS (loop5): disposed unprocessed dirty file(s) when stopping log writer
[  370.906513][ T7029] loop3: detected capacity change from 0 to 128
[  371.017221][ T4353] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  371.156363][ T7036] gadgetfs: bound to dummy_udc driver
[  371.260861][ T4353] usb 7-1: Using ep0 maxpacket: 8
[  371.275235][ T4353] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  371.414205][ T4353] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  371.731197][ T4353] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  371.750789][ T4353] usb 7-1: config 0 descriptor??
[  372.163199][ T4353] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  372.250625][ T7046] loop1: detected capacity change from 0 to 512
[  372.318523][ T7046] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  372.386821][ T4353] usb 7-1: USB disconnect, device number 2
[  372.445557][ T7046] EXT4-fs (loop1): 1 truncate cleaned up
[  372.477055][ T7046] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  375.278869][   T26] audit: type=1800 audit(1793751222.851:31): pid=7046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.701" name="file1" dev="loop1" ino=15 res=0 errno=0
[  375.435513][ T4279] EXT4-fs (loop1): unmounting filesystem.
[  375.537686][ T7062] fuse: Unknown parameter 'fd0x0000000000000004'
[  375.767768][ T7067] loop1: detected capacity change from 0 to 2048
[  375.829344][ T7073] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  375.863969][   T26] audit: type=1800 audit(1793751223.441:32): pid=7067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.706" name="dev" dev="loop1" ino=19 res=0 errno=0
[  376.521088][ T4275] ==================================================================
[  376.529216][ T4275] BUG: KASAN: use-after-free in nfsd_shutdown_threads+0x89/0x1a0
[  376.536935][ T4275] Write of size 4 at addr ffff88805763ec50 by task syz-executor/4275
[  376.545006][ T4275] 
[  376.547321][ T4275] CPU: 0 PID: 4275 Comm: syz-executor Not tainted syzkaller #0
[  376.554857][ T4275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  376.564899][ T4275] Call Trace:
[  376.568171][ T4275]  <TASK>
[  376.571089][ T4275]  dump_stack_lvl+0x188/0x24e
[  376.575763][ T4275]  ? __lock_acquire+0x7ea0/0x7ea0
[  376.580785][ T4275]  ? show_regs_print_info+0x12/0x12
[  376.585978][ T4275]  ? load_image+0x410/0x410
[  376.590472][ T4275]  ? __virt_addr_valid+0x467/0x540
[  376.595605][ T4275]  ? nfsd_shutdown_threads+0x89/0x1a0
[  376.600971][ T4275]  print_report+0xa8/0x210
[  376.605376][ T4275]  kasan_report+0x10b/0x140
[  376.609870][ T4275]  ? nfsd_shutdown_threads+0x89/0x1a0
[  376.615234][ T4275]  kasan_check_range+0x235/0x290
[  376.620163][ T4275]  nfsd_shutdown_threads+0x89/0x1a0
[  376.625373][ T4275]  nfsd_umount+0x3e/0xc0
[  376.629607][ T4275]  deactivate_locked_super+0x93/0xf0
[  376.634879][ T4275]  cleanup_mnt+0x471/0x4f0
[  376.639284][ T4275]  task_work_run+0x1d0/0x260
[  376.643866][ T4275]  ? task_work_cancel+0x220/0x220
[  376.648902][ T4275]  ? exit_to_user_mode_loop+0x3b/0x110
[  376.654356][ T4275]  exit_to_user_mode_loop+0xe6/0x110
[  376.659640][ T4275]  exit_to_user_mode_prepare+0xee/0x180
[  376.665190][ T4275]  syscall_exit_to_user_mode+0x16/0x40
[  376.670639][ T4275]  do_syscall_64+0x58/0xa0
[  376.675049][ T4275]  ? clear_bhb_loop+0x60/0xb0
[  376.679715][ T4275]  ? clear_bhb_loop+0x60/0xb0
[  376.684382][ T4275]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  376.690267][ T4275] RIP: 0033:0x7fa1d6da0d57
[  376.694691][ T4275] Code: a2 c7 05 9c a9 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  376.714303][ T4275] RSP: 002b:00007ffe2f995038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  376.722708][ T4275] RAX: 0000000000000000 RBX: 00007fa1d6e36fb3 RCX: 00007fa1d6da0d57
[  376.730681][ T4275] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe2f9950f0
[  376.738638][ T4275] RBP: 00007ffe2f9950f0 R08: 00007ffe2f9960f0 R09: 00000000ffffffff
[  376.746595][ T4275] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe2f996180
[  376.754552][ T4275] R13: 00007fa1d6e36fb3 R14: 000000000005bde9 R15: 00007ffe2f9961c0
[  376.762519][ T4275]  </TASK>
[  376.765524][ T4275] 
[  376.767833][ T4275] Allocated by task 7087:
[  376.772140][ T4275]  kasan_set_track+0x4b/0x70
[  376.776722][ T4275]  __kasan_kmalloc+0x8e/0xa0
[  376.781305][ T4275]  __svc_create+0x60/0x9d0
[  376.785726][ T4275]  svc_create_pooled+0x71f/0x8c0
[  376.790673][ T4275]  nfsd_create_serv+0x2f9/0x700
[  376.795528][ T4275]  write_ports+0x526/0xb80
[  376.799938][ T4275]  nfsctl_transaction_write+0x105/0x150
[  376.805501][ T4275]  vfs_write+0x2dc/0x9a0
[  376.809728][ T4275]  ksys_write+0x14d/0x260
[  376.814040][ T4275]  do_syscall_64+0x4c/0xa0
[  376.818451][ T4275]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  376.824336][ T4275] 
[  376.826644][ T4275] Freed by task 7087:
[  376.830629][ T4275]  kasan_set_track+0x4b/0x70
[  376.835211][ T4275]  kasan_save_free_info+0x27/0x40
[  376.840243][ T4275]  ____kasan_slab_free+0x126/0x1f0
[  376.845347][ T4275]  slab_free_freelist_hook+0x133/0x1b0
[  376.850819][ T4275]  __kmem_cache_free+0xb6/0x200
[  376.855656][ T4275]  write_ports+0x9ac/0xb80
[  376.860060][ T4275]  nfsctl_transaction_write+0x105/0x150
[  376.865591][ T4275]  vfs_write+0x2dc/0x9a0
[  376.869820][ T4275]  ksys_write+0x14d/0x260
[  376.874152][ T4275]  do_syscall_64+0x4c/0xa0
[  376.878580][ T4275]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  376.884462][ T4275] 
[  376.886770][ T4275] The buggy address belongs to the object at ffff88805763ec00
[  376.886770][ T4275]  which belongs to the cache kmalloc-512 of size 512
[  376.900826][ T4275] The buggy address is located 80 bytes inside of
[  376.900826][ T4275]  512-byte region [ffff88805763ec00, ffff88805763ee00)
[  376.914017][ T4275] 
[  376.916327][ T4275] The buggy address belongs to the physical page:
[  376.922735][ T4275] page:ffffea00015d8f00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5763c
[  376.932870][ T4275] head:ffffea00015d8f00 order:2 compound_mapcount:0 compound_pincount:0
[  376.941178][ T4275] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  376.949155][ T4275] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888018441c80
[  376.957723][ T4275] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[  376.966286][ T4275] page dumped because: kasan: bad access detected
[  376.972685][ T4275] page_owner tracks the page as allocated
[  376.978381][ T4275] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4279, tgid 4279 (syz-executor), ts 67701493308, free_ts 21677023236
[  376.999721][ T4275]  post_alloc_hook+0x173/0x1a0
[  377.004479][ T4275]  get_page_from_freelist+0x206b/0x2180
[  377.010015][ T4275]  __alloc_pages+0x1ec/0x4f0
[  377.014592][ T4275]  alloc_slab_page+0x5d/0x180
[  377.019255][ T4275]  new_slab+0x87/0x2d0
[  377.023309][ T4275]  ___slab_alloc+0xbc5/0x1240
[  377.027971][ T4275]  __kmem_cache_alloc_node+0x126/0x270
[  377.033415][ T4275]  __kmalloc_node_track_caller+0xa0/0x240
[  377.039142][ T4275]  __alloc_skb+0x226/0x7d0
[  377.043547][ T4275]  alloc_uevent_skb+0x7d/0x230
[  377.048298][ T4275]  kobject_uevent_net_broadcast+0x17e/0x530
[  377.054177][ T4275]  kobject_uevent_env+0x555/0x890
[  377.059186][ T4275]  net_rx_queue_update_kobjects+0x244/0x4d0
[  377.065066][ T4275]  netdev_register_kobject+0x231/0x320
[  377.070509][ T4275]  register_netdevice+0x133a/0x1b80
[  377.075711][ T4275]  ipvlan_link_new+0x389/0xae0
[  377.080461][ T4275] page last free stack trace:
[  377.085114][ T4275]  free_unref_page_prepare+0x8e5/0x9e0
[  377.090566][ T4275]  free_unref_page+0x2e/0x3f0
[  377.095232][ T4275]  free_contig_range+0x9d/0x150
[  377.100086][ T4275]  destroy_args+0xef/0xa0e
[  377.104489][ T4275]  debug_vm_pgtable+0x33c/0x38e
[  377.109324][ T4275]  do_one_initcall+0x257/0x800
[  377.114074][ T4275]  do_initcall_level+0x13d/0x1ed
[  377.118997][ T4275]  do_initcalls+0x4b/0x8a
[  377.123308][ T4275]  kernel_init_freeable+0x401/0x5ab
[  377.128488][ T4275]  kernel_init+0x19/0x1b0
[  377.132805][ T4275]  ret_from_fork+0x1f/0x30
[  377.137211][ T4275] 
[  377.139518][ T4275] Memory state around the buggy address:
[  377.145129][ T4275]  ffff88805763eb00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  377.153172][ T4275]  ffff88805763eb80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  377.161215][ T4275] >ffff88805763ec00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  377.169257][ T4275]                                                  ^
[  377.175908][ T4275]  ffff88805763ec80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  377.183970][ T4275]  ffff88805763ed00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  377.192009][ T4275] ==================================================================
[  377.220492][ T4275] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  377.227720][ T4275] CPU: 1 PID: 4275 Comm: syz-executor Not tainted syzkaller #0
[  377.235289][ T4275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  377.245357][ T4275] Call Trace:
[  377.248622][ T4275]  <TASK>
[  377.251561][ T4275]  dump_stack_lvl+0x188/0x24e
[  377.256228][ T4275]  ? memcpy+0x3c/0x60
[  377.260199][ T4275]  ? show_regs_print_info+0x12/0x12
[  377.265383][ T4275]  ? load_image+0x410/0x410
[  377.269871][ T4275]  panic+0x2d3/0x710
[  377.273749][ T4275]  ? bpf_jit_dump+0xd0/0xd0
[  377.278255][ T4275]  ? _raw_spin_unlock_irqrestore+0x10d/0x120
[  377.284224][ T4275]  ? _raw_spin_unlock+0x40/0x40
[  377.289057][ T4275]  ? print_memory_metadata+0x314/0x400
[  377.294591][ T4275]  check_panic_on_warn+0x80/0xa0
[  377.299517][ T4275]  ? nfsd_shutdown_threads+0x89/0x1a0
[  377.304872][ T4275]  end_report+0x66/0x110
[  377.309101][ T4275]  kasan_report+0x118/0x140
[  377.313592][ T4275]  ? nfsd_shutdown_threads+0x89/0x1a0
[  377.318966][ T4275]  kasan_check_range+0x235/0x290
[  377.323892][ T4275]  nfsd_shutdown_threads+0x89/0x1a0
[  377.329074][ T4275]  nfsd_umount+0x3e/0xc0
[  377.333298][ T4275]  deactivate_locked_super+0x93/0xf0
[  377.338563][ T4275]  cleanup_mnt+0x471/0x4f0
[  377.342966][ T4275]  task_work_run+0x1d0/0x260
[  377.347540][ T4275]  ? task_work_cancel+0x220/0x220
[  377.352549][ T4275]  ? exit_to_user_mode_loop+0x3b/0x110
[  377.357989][ T4275]  exit_to_user_mode_loop+0xe6/0x110
[  377.363256][ T4275]  exit_to_user_mode_prepare+0xee/0x180
[  377.368783][ T4275]  syscall_exit_to_user_mode+0x16/0x40
[  377.374247][ T4275]  do_syscall_64+0x58/0xa0
[  377.378672][ T4275]  ? clear_bhb_loop+0x60/0xb0
[  377.383343][ T4275]  ? clear_bhb_loop+0x60/0xb0
[  377.388049][ T4275]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  377.393941][ T4275] RIP: 0033:0x7fa1d6da0d57
[  377.398341][ T4275] Code: a2 c7 05 9c a9 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  377.417933][ T4275] RSP: 002b:00007ffe2f995038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  377.426349][ T4275] RAX: 0000000000000000 RBX: 00007fa1d6e36fb3 RCX: 00007fa1d6da0d57
[  377.434305][ T4275] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe2f9950f0
[  377.442267][ T4275] RBP: 00007ffe2f9950f0 R08: 00007ffe2f9960f0 R09: 00000000ffffffff
[  377.450227][ T4275] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe2f996180
[  377.458202][ T4275] R13: 00007fa1d6e36fb3 R14: 000000000005bde9 R15: 00007ffe2f9961c0
[  377.466161][ T4275]  </TASK>
[  377.469437][ T4275] Kernel Offset: disabled
[  377.473747][ T4275] Rebooting in 86400 seconds..