last executing test programs:

1m22.165390373s ago: executing program 1 (id=59):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7)
add_key$fscrypt_v1(0x0, 0x0, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff)
socket$inet6(0xa, 0x3, 0x8000000003c)
write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f)

1m18.610839741s ago: executing program 1 (id=61):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25fe880000000000000000000000000101ffffffff000000000000000000000000000000004e2400000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000021000001000080000000000000000000000000000000000000000000000000000000000200000000000000fdffffffffffffff000000000000000000000000000000000500000000000000000000000020000000000000000000000000000000000000010002020000000044000500e0000001000000000000000000000000000004d632"], 0xfc}, 0x1, 0x0, 0x0, 0x20080004}, 0x0)
socket$inet(0x2, 0x3, 0x1)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x64eb2000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
getdents64(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreq(r6, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000740)={0x1, 0x0, 0x0, 0x5, @vifc_lcl_addr=@remote, @empty}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @info_reply={0x10, 0x0, 0x0, 0x401, 0x7}}}}}, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10)

1m12.018240802s ago: executing program 1 (id=65):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25fe880000000000000000000000000101ffffffff000000000000000000000000000000004e2400000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000021000001000080000000000000000000000000000000000000000000000000000000000200000000000000fdffffffffffffff000000000000000000000000000000000500000000000000000000000020000000000000000000000000000000000000010002020000000044000500e0000001000000000000000000000000000004d632"], 0xfc}, 0x1, 0x0, 0x0, 0x20080004}, 0x0)
socket$inet(0x2, 0x3, 0x1)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x64eb2000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
getdents64(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreq(r6, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @info_reply={0x10, 0x0, 0x0, 0x401, 0x7}}}}}, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c)
r7 = socket(0x28, 0x801, 0x0)
connect$vsock_stream(r7, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10)

1m4.078249957s ago: executing program 1 (id=69):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7)
add_key$fscrypt_v1(0x0, 0x0, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff)
socket$inet6(0xa, 0x3, 0x8000000003c)
write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f)

51.025722892s ago: executing program 1 (id=80):
openat$cuse(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0)
mount(0x0, &(0x7f0000000100)='./mytrace\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(0x0, r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, 0x0, 0x20000080)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
syz_mount_image$jfs(&(0x7f0000005d00), &(0x7f0000005d40)='./file0\x00', 0x4000000, &(0x7f0000001040)=ANY=[@ANYBLOB="696f636861727365743d6d6163677265656b2c0075b26038ff1837c965f9b83e349c9ce965cdec5a1dfcf07fa09e1d6da48000b8"], 0x1, 0x5d88, &(0x7f0000005d80)="$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")
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000df3000/0x3000)=nil, 0x3000, 0x9)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101041, 0xf0)
r2 = openat$nullb(0xffffffffffffff9c, 0x0, 0x6200, 0x0)
sendfile(0xffffffffffffffff, r2, 0x0, 0x20fffe82)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000180)={[{@nodiscard}]}, 0x0, 0x236, &(0x7f0000000b40)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0)
unshare(0x20000400)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x81, 0xfffffffb})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)

49.16737415s ago: executing program 1 (id=81):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25fe880000000000000000000000000101ffffffff000000000000000000000000000000004e2400000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000021000001000080000000000000000000000000000000000000000000000000000000000200000000000000fdffffffffffffff000000000000000000000000000000000500000000000000000000000020000000000000000000000000000000000000010002020000000044000500e0000001000000000000000000000000000004d632"], 0xfc}, 0x1, 0x0, 0x0, 0x20080004}, 0x0)
socket$inet(0x2, 0x3, 0x1)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x64eb2000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
getdents64(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket$igmp(0x2, 0x3, 0x2)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreq(r6, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000740)={0x1, 0x0, 0x0, 0x5, @vifc_lcl_addr=@remote, @empty}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @info_reply={0x10, 0x0, 0x0, 0x401, 0x7}}}}}, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c)
r7 = socket(0x28, 0x801, 0x0)
connect$vsock_stream(r7, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10)

45.902424734s ago: executing program 32 (id=81):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25fe880000000000000000000000000101ffffffff000000000000000000000000000000004e2400000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000021000001000080000000000000000000000000000000000000000000000000000000000200000000000000fdffffffffffffff000000000000000000000000000000000500000000000000000000000020000000000000000000000000000000000000010002020000000044000500e0000001000000000000000000000000000004d632"], 0xfc}, 0x1, 0x0, 0x0, 0x20080004}, 0x0)
socket$inet(0x2, 0x3, 0x1)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x64eb2000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
getdents64(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket$igmp(0x2, 0x3, 0x2)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreq(r6, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000740)={0x1, 0x0, 0x0, 0x5, @vifc_lcl_addr=@remote, @empty}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @info_reply={0x10, 0x0, 0x0, 0x401, 0x7}}}}}, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c)
r7 = socket(0x28, 0x801, 0x0)
connect$vsock_stream(r7, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10)

37.626214205s ago: executing program 0 (id=95):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000)
sched_setaffinity(r1, 0x8, &(0x7f0000000200)=0x40003)
r3 = socket$nl_route(0x10, 0x3, 0x0)
unshare(0x2a020400)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2, 0x0, 0xffffffff}, 0x7, 0x0, &(0x7f0000000040), 0x5, 0x0}})
openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000140)='memory.pressure\x00', 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})

34.002729316s ago: executing program 0 (id=97):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x7, &(0x7f0000000380)=@new_dev={0x3, 0x32c, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x191}}}, &(0x7f0000000200)=<r3=>0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup(r4)
syz_ublk_setup_queues(r5, r3, &(0x7f0000000180)={0x0, 0x2, 0x1000, 0xffffefee, 0x23e}, 0x0, 0x1, 0x0, 0x0)

32.056966487s ago: executing program 0 (id=100):
r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0)
getdents64(r0, 0x0, 0x0)

26.881005152s ago: executing program 3 (id=104):
syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=<r0=>0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58)
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYBLOB="2c736d61636b6673726f6f743d2d5c7f402d832c66736d616769633d3078303030303030303030303030303030302c00"], 0xfa, 0x6b6, &(0x7f0000000840)="$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")
sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, 0x0, 0x80c0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYBLOB], 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x2, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f0000000080), 0x1)
sendto$inet6(r4, &(0x7f0000000040), 0x27, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x100000, @loopback}, 0x1c)
ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f00000003c0)={0x0, 0x230, 0x0, [0x2, 0x40, 0x0, 0x2, 0xa36b], [0x1, 0x7, 0x8, 0x7ff, 0x0, 0xc, 0x3b, 0x3, 0x2, 0x7, 0x4, 0x2, 0x4, 0x6, 0xffffffffffffffc0, 0x80000001, 0x0, 0x6, 0x5, 0xd34855a, 0x100000000, 0x4, 0x6, 0x8000, 0x5, 0x80000001, 0x83f, 0xee73, 0x1, 0x4, 0xfffffffffffffffa, 0x7, 0x6, 0x9, 0x7fff, 0x8, 0x4, 0x6, 0xffffffff, 0x4, 0x2, 0x0, 0xfffffffffffffffa, 0x698c, 0x0, 0xd51, 0x8, 0x3, 0x30000000000, 0x0, 0x100000000, 0x2203, 0x2, 0xdc16, 0xa75, 0xb0, 0x6, 0x5, 0x4, 0x10001, 0x6, 0x6, 0xd78e, 0xa6, 0x7ac, 0x4, 0x1, 0x1, 0x5, 0x667, 0x7, 0x5, 0x2, 0x7, 0xf2, 0x7, 0x7, 0x400, 0x1, 0x7bb, 0xe, 0x9, 0x3, 0x5, 0x6, 0x0, 0x3, 0x1, 0x8000000000000001, 0x9, 0x8, 0x7, 0x8, 0x3, 0x81, 0xb, 0x7, 0x6, 0x3, 0x6, 0x2, 0x5, 0x5, 0x8, 0x400, 0x5d8e, 0x800, 0xffffffffffffffff, 0x1000, 0x6, 0x5, 0x1, 0x7fffffffffffffff, 0x101, 0xfff, 0x5, 0x7, 0x400, 0x0, 0x4, 0x3]})
syz_open_dev$usbmon(&(0x7f0000000b40), 0xffff, 0x100)
wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0)
r5 = socket(0x18, 0x6, 0x90)
recvmmsg(r5, &(0x7f0000001400)=[{{&(0x7f0000000180)=@ieee802154, 0x80, &(0x7f0000001300)=[{&(0x7f0000000f00)=""/246, 0xf6}, {&(0x7f0000001240)=""/35, 0x23}, {&(0x7f0000001280)=""/79, 0x4f}], 0x3, &(0x7f0000001340)=""/161, 0xa1}, 0x6}], 0x1, 0x0, &(0x7f0000001440)={0x77359400})

25.672036839s ago: executing program 3 (id=105):
r0 = socket$netlink(0x10, 0x3, 0xc)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = getpgrp(0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendto$packet(0xffffffffffffffff, &(0x7f0000000000)="01154e0001", 0x5, 0x4044015, 0x0, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f00000000c0)=0x10000000005)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_emit_ethernet(0x0, 0x0, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000200)=0x40003)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
recvmsg(r1, &(0x7f0000002440)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x66, 0x0, 0x0, 0x11, 0x0, @private=0xa010101, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000000101012e8d5dfb"], 0x2c}, 0x1, 0x0, 0x0, 0x4008816}, 0x20008000)

25.670860699s ago: executing program 2 (id=112):
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet(0x2, 0x3, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x64eb2000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
getdents64(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000740)={0x1, 0x0, 0x0, 0x5, @vifc_lcl_addr=@remote, @empty}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @info_reply={0x10, 0x0, 0x0, 0x401, 0x7}}}}}, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c)
r6 = socket(0x28, 0x801, 0x0)
connect$vsock_stream(r6, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10)

22.599351764s ago: executing program 3 (id=106):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000)
sched_setaffinity(r1, 0x8, &(0x7f0000000200)=0x40003)
r3 = socket$nl_route(0x10, 0x3, 0x0)
unshare(0x2a020400)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2, 0x0, 0xffffffff}, 0x7, 0x0, &(0x7f0000000040), 0x5, 0x0}})
openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000140)='memory.pressure\x00', 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})

22.588214054s ago: executing program 0 (id=114):
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet(0x2, 0x3, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x64eb2000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
getdents64(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000740)={0x1, 0x0, 0x0, 0x5, @vifc_lcl_addr=@remote, @empty}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @info_reply={0x10, 0x0, 0x0, 0x401, 0x7}}}}}, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c)
r6 = socket(0x28, 0x801, 0x0)
connect$vsock_stream(r6, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10)

19.217311293s ago: executing program 0 (id=107):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7)
add_key$fscrypt_v1(0x0, 0x0, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff)
socket$inet6(0xa, 0x3, 0x8000000003c)
write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f)

19.215953803s ago: executing program 2 (id=108):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25fe880000000000000000000000000101ffffffff000000000000000000000000000000004e2400000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000021000001000080000000000000000000000000000000000000000000000000000000000200000000000000fdffffffffffffff000000000000000000000000000000000500000000000000000000000020000000000000000000000000000000000000010002020000000044000500e0000001000000000000000000000000000004d632"], 0xfc}, 0x1, 0x0, 0x0, 0x20080004}, 0x0)
socket$inet(0x2, 0x3, 0x1)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
getpgrp(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x64eb2000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
getdents64(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000740)={0x1, 0x0, 0x0, 0x5, @vifc_lcl_addr=@remote, @empty}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @info_reply={0x10, 0x0, 0x0, 0x401, 0x7}}}}}, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c)
r6 = socket(0x28, 0x801, 0x0)
connect$vsock_stream(r6, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10)

15.425196092s ago: executing program 2 (id=109):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x7, &(0x7f0000000380)=@new_dev={0x3, 0x32c, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x191}}}, &(0x7f0000000200)=<r3=>0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup(r4)
syz_ublk_setup_queues(r5, r3, &(0x7f0000000180)={0x0, 0x2, 0x1000, 0xffffefee, 0x23e}, 0x0, 0x1, 0x0, 0x0)

15.424922662s ago: executing program 3 (id=110):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000)
sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x40003)
r4 = socket$nl_route(0x10, 0x3, 0x0)
unshare(0x2a020400)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r5, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2, 0x0, 0xffffffff}, 0x7, 0x0, &(0x7f0000000040), 0x5, 0x0}})
openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})

13.300785172s ago: executing program 3 (id=111):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x10000000005)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_emit_ethernet(0x0, 0x0, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000200)=0x40003)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
recvmsg(r0, &(0x7f0000002440)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x66, 0x0, 0x0, 0x11, 0x0, @private=0xa010101, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000000101012e8d5dfb"], 0x2c}, 0x1, 0x0, 0x0, 0x4008816}, 0x20008000)

11.096796096s ago: executing program 0 (id=113):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'syz_tun\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r1, {0x9}, {}, {0xfff3}}}, 0x24}}, 0x0)

9.457966304s ago: executing program 2 (id=115):
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet(0x2, 0x3, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x64eb2000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
getdents64(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000740)={0x1, 0x0, 0x0, 0x5, @vifc_lcl_addr=@remote, @empty}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @info_reply={0x10, 0x0, 0x0, 0x401, 0x7}}}}}, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c)
r6 = socket(0x28, 0x801, 0x0)
connect$vsock_stream(r6, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10)

7.455241978s ago: executing program 2 (id=116):
syz_mount_image$nilfs2(&(0x7f0000000b80), &(0x7f0000000040)='./file2\x00', 0x3200400, &(0x7f0000003140)=ANY=[], 0x3, 0xa76, &(0x7f00000000c0)="$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")
truncate(0x0, 0x5)

4.747102966s ago: executing program 4 (id=83):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000)
sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x40003)
r4 = socket$nl_route(0x10, 0x3, 0x0)
unshare(0x2a020400)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r5, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2, 0x0, 0xffffffff}, 0x7, 0x0, &(0x7f0000000040), 0x5, 0x0}})
openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000140)='memory.pressure\x00', 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})

648.38µs ago: executing program 4 (id=117):
r0 = socket$netlink(0x10, 0x3, 0xc)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = getpgrp(0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendto$packet(0xffffffffffffffff, &(0x7f0000000000)="01154e0001", 0x5, 0x4044015, 0x0, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f00000000c0)=0x10000000005)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_emit_ethernet(0x0, 0x0, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000200)=0x40003)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
recvmsg(r1, &(0x7f0000002440)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x66, 0x0, 0x0, 0x11, 0x0, @private=0xa010101, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000000101012e8d5dfb"], 0x2c}, 0x1, 0x0, 0x0, 0x4008816}, 0x20008000)

317.18µs ago: executing program 2 (id=118):
syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=<r0=>0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58)
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYBLOB="2c736d61636b6673726f6f743d2d5c7f402d832c66736d616769633d3078303030303030303030303030303030302c00"], 0xfa, 0x6b6, &(0x7f0000000840)="$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")
sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, 0x0, 0x80c0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYBLOB], 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r4, 0x84, 0x81, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f0000000080), 0x1)
sendto$inet6(r4, &(0x7f0000000040), 0x27, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x100000, @loopback}, 0x1c)
ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f00000003c0)={0x0, 0x230, 0x0, [0x2, 0x40, 0x0, 0x2, 0xa36b], [0x1, 0x7, 0x8, 0x7ff, 0x0, 0xc, 0x3b, 0x3, 0x2, 0x7, 0x4, 0x2, 0x4, 0x6, 0xffffffffffffffc0, 0x80000001, 0x0, 0x6, 0x5, 0xd34855a, 0x100000000, 0x4, 0x6, 0x8000, 0x5, 0x80000001, 0x83f, 0xee73, 0x1, 0x4, 0xfffffffffffffffa, 0x7, 0x6, 0x9, 0x7fff, 0x8, 0x4, 0x6, 0xffffffff, 0x4, 0x2, 0x0, 0xfffffffffffffffa, 0x698c, 0x0, 0xd51, 0x8, 0x3, 0x30000000000, 0x0, 0x100000000, 0x2203, 0x2, 0xdc16, 0xa75, 0xb0, 0x6, 0x5, 0x4, 0x10001, 0x6, 0x6, 0xd78e, 0xa6, 0x7ac, 0x4, 0x1, 0x1, 0x5, 0x667, 0x7, 0x5, 0x2, 0x7, 0xf2, 0x7, 0x7, 0x400, 0x1, 0x7bb, 0xe, 0x9, 0x3, 0x5, 0x6, 0x0, 0x3, 0x1, 0x8000000000000001, 0x9, 0x8, 0x7, 0x8, 0x3, 0x81, 0xb, 0x7, 0x6, 0x3, 0x6, 0x2, 0x5, 0x5, 0x8, 0x400, 0x5d8e, 0x800, 0xffffffffffffffff, 0x1000, 0x6, 0x5, 0x1, 0x7fffffffffffffff, 0x101, 0xfff, 0x5, 0x7, 0x400, 0x0, 0x4, 0x3]})
syz_open_dev$usbmon(&(0x7f0000000b40), 0xffff, 0x100)
wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0)
r5 = socket(0x18, 0x6, 0x90)
recvmmsg(r5, &(0x7f0000001400)=[{{&(0x7f0000000180)=@ieee802154, 0x80, &(0x7f0000001300)=[{&(0x7f0000000f00)=""/246, 0xf6}, {&(0x7f0000001240)=""/35, 0x23}, {&(0x7f0000001280)=""/79, 0x4f}], 0x3, &(0x7f0000001340)=""/161, 0xa1}, 0x6}], 0x1, 0x0, &(0x7f0000001440)={0x77359400})

0s ago: executing program 3 (id=119):
openat$cuse(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0)
mount(0x0, &(0x7f0000000100)='./mytrace\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, 0x0, 0x20000080)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
syz_mount_image$jfs(&(0x7f0000005d00), &(0x7f0000005d40)='./file0\x00', 0x4000000, &(0x7f0000001040)=ANY=[@ANYBLOB="696f636861727365743d6d6163677265656b2c0075b26038ff1837c965f9b83e349c9ce965cdec5a1dfcf07fa09e1d6da48000b8"], 0x1, 0x5d88, &(0x7f0000005d80)="$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")
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000df3000/0x3000)=nil, 0x3000, 0x9)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101041, 0xf0)
r2 = openat$nullb(0xffffffffffffff9c, 0x0, 0x6200, 0x0)
sendfile(0xffffffffffffffff, r2, 0x0, 0x20fffe82)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000180)={[{@nodiscard}]}, 0x0, 0x236, &(0x7f0000000b40)="$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")
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
unshare(0x20000400)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x81, 0xfffffffb})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.126' (ED25519) to the list of known hosts.
[   84.450655][ T5763] cgroup: Unknown subsys name 'net'
[   84.622073][ T5763] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   86.373033][ T5763] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   88.738825][ T5777] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   88.748376][ T5777] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   88.756381][ T5777] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   88.768603][ T5777] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   88.777052][ T5777] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   88.785002][ T5777] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   88.792553][ T5777] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   88.827803][ T5785] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   88.840855][ T5785] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   88.849977][ T5785] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   88.858300][ T5785] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   88.865965][ T5785] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   88.888129][ T5785] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   88.896897][ T5785] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   88.905718][ T5085] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   88.906382][ T5785] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   88.924444][ T5085] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   88.934073][ T5085] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   88.941568][ T5085] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   88.950311][ T5085] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   88.958290][ T5085] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   88.966266][ T5085] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   88.974863][ T5085] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   88.984160][   T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   89.471231][ T5774] chnl_net:caif_netlink_parms(): no params data found
[   89.514731][ T5783] chnl_net:caif_netlink_parms(): no params data found
[   89.548536][ T5779] chnl_net:caif_netlink_parms(): no params data found
[   89.645092][ T5782] chnl_net:caif_netlink_parms(): no params data found
[   89.773919][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.781173][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.789060][ T5774] bridge_slave_0: entered allmulticast mode
[   89.796819][ T5774] bridge_slave_0: entered promiscuous mode
[   89.806302][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.813837][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.821120][ T5783] bridge_slave_0: entered allmulticast mode
[   89.830730][ T5783] bridge_slave_0: entered promiscuous mode
[   89.852524][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.860084][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.867454][ T5774] bridge_slave_1: entered allmulticast mode
[   89.875127][ T5774] bridge_slave_1: entered promiscuous mode
[   89.882581][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.889944][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.897422][ T5783] bridge_slave_1: entered allmulticast mode
[   89.905157][ T5783] bridge_slave_1: entered promiscuous mode
[   89.972395][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.979799][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.987601][ T5779] bridge_slave_0: entered allmulticast mode
[   89.995239][ T5779] bridge_slave_0: entered promiscuous mode
[   90.036387][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.049529][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.057190][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.064736][ T5779] bridge_slave_1: entered allmulticast mode
[   90.072305][ T5779] bridge_slave_1: entered promiscuous mode
[   90.081981][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.095655][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.118493][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.170375][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.177666][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.185207][ T5782] bridge_slave_0: entered allmulticast mode
[   90.192402][ T5782] bridge_slave_0: entered promiscuous mode
[   90.225737][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.237925][ T5774] team0: Port device team_slave_0 added
[   90.246875][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.254203][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.261400][ T5782] bridge_slave_1: entered allmulticast mode
[   90.269352][ T5782] bridge_slave_1: entered promiscuous mode
[   90.278448][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.295358][ T5783] team0: Port device team_slave_0 added
[   90.306966][ T5774] team0: Port device team_slave_1 added
[   90.359277][ T5783] team0: Port device team_slave_1 added
[   90.401895][ T5779] team0: Port device team_slave_0 added
[   90.422837][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0
[   90.430165][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.456568][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   90.472182][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.494090][ T5779] team0: Port device team_slave_1 added
[   90.500651][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0
[   90.507976][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.534038][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   90.548232][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1
[   90.556053][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.582091][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   90.597052][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1
[   90.604181][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.633430][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   90.658422][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.738031][ T5782] team0: Port device team_slave_0 added
[   90.747484][ T5782] team0: Port device team_slave_1 added
[   90.754190][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0
[   90.761187][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.787354][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   90.831013][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1
[   90.838313][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.864344][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   90.884618][ T5085] Bluetooth: hci0: command tx timeout
[   90.907837][ T5783] hsr_slave_0: entered promiscuous mode
[   90.915003][ T5783] hsr_slave_1: entered promiscuous mode
[   90.953544][ T5085] Bluetooth: hci1: command tx timeout
[   90.969030][ T5774] hsr_slave_0: entered promiscuous mode
[   90.975886][ T5774] hsr_slave_1: entered promiscuous mode
[   90.982374][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   90.991225][ T5774] Cannot create hsr debugfs directory
[   90.998751][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0
[   91.006284][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.032409][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   91.043733][ T5085] Bluetooth: hci2: command tx timeout
[   91.050140][ T5777] Bluetooth: hci3: command tx timeout
[   91.060773][ T5779] hsr_slave_0: entered promiscuous mode
[   91.067418][ T5779] hsr_slave_1: entered promiscuous mode
[   91.074037][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   91.081632][ T5779] Cannot create hsr debugfs directory
[   91.100188][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1
[   91.108237][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.134813][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   91.305127][ T5782] hsr_slave_0: entered promiscuous mode
[   91.311880][ T5782] hsr_slave_1: entered promiscuous mode
[   91.318569][ T5782] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   91.326499][ T5782] Cannot create hsr debugfs directory
[   91.712048][ T5783] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   91.724775][ T5783] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   91.736302][ T5783] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   91.755226][ T5783] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   91.840766][ T5774] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   91.867290][ T5774] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   91.878332][ T5774] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   91.893088][ T5774] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   92.030372][ T5779] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   92.055024][ T5779] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   92.065140][ T5779] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   92.079679][ T5779] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   92.094755][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.177975][ T5782] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   92.192602][ T5782] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   92.211548][ T5783] 8021q: adding VLAN 0 to HW filter on device team0
[   92.221259][ T5782] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   92.250623][ T5782] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   92.268852][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.276224][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.326099][ T1324] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.333405][ T1324] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.411206][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.500579][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.531820][ T5774] 8021q: adding VLAN 0 to HW filter on device team0
[   92.585259][ T1318] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.592504][ T1318] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.628521][ T1324] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.635814][ T1324] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.658616][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.696315][ T5779] 8021q: adding VLAN 0 to HW filter on device team0
[   92.757310][ T3456] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.764580][ T3456] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.824771][ T5782] 8021q: adding VLAN 0 to HW filter on device team0
[   92.840722][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.848079][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.887077][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.894317][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.946001][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.953216][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.964442][ T5085] Bluetooth: hci0: command tx timeout
[   93.031924][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0
[   93.043988][ T5085] Bluetooth: hci1: command tx timeout
[   93.114162][ T5085] Bluetooth: hci2: command tx timeout
[   93.114742][ T5777] Bluetooth: hci3: command tx timeout
[   93.246120][ T5783] veth0_vlan: entered promiscuous mode
[   93.301316][ T5783] veth1_vlan: entered promiscuous mode
[   93.440962][ T5783] veth0_macvtap: entered promiscuous mode
[   93.469962][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0
[   93.489457][ T5783] veth1_macvtap: entered promiscuous mode
[   93.538667][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.570794][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1
[   93.607239][ T5783] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.625471][ T5783] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.638976][ T5783] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.648239][ T5783] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.728758][ T5774] veth0_vlan: entered promiscuous mode
[   93.749426][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0
[   93.837780][ T5774] veth1_vlan: entered promiscuous mode
[   93.858291][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.878625][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.901697][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0
[   93.950359][ T1324] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.961333][ T1324] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.025425][ T5774] veth0_macvtap: entered promiscuous mode
[   94.088529][ T5779] veth0_vlan: entered promiscuous mode
[   94.105028][ T5774] veth1_macvtap: entered promiscuous mode
[   94.168894][ T5779] veth1_vlan: entered promiscuous mode
[   94.203576][ T5782] veth0_vlan: entered promiscuous mode
[   94.223739][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   94.236109][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.250007][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0
[   94.282007][ T5782] veth1_vlan: entered promiscuous mode
[   94.297821][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   94.309072][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.321466][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1
[   96.273328][    C0] sched: RT throttling activated
[   96.274288][ T5777] Bluetooth: hci0: command tx timeout
[   96.285335][ T5085] Bluetooth: hci1: command tx timeout
[   96.291299][   T51] Bluetooth: hci3: command tx timeout
[   96.291332][ T5785] Bluetooth: hci2: command tx timeout
[   96.324744][ T5774] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   96.343462][ T5774] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   96.352264][ T5774] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   96.361804][ T5774] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   96.387431][ T5841] syz_tun: entered allmulticast mode
[   96.396255][ T5844] lo: entered allmulticast mode
[   96.547542][ T5779] veth0_macvtap: entered promiscuous mode
[   96.591780][ T5782] veth0_macvtap: entered promiscuous mode
[   96.620951][ T5779] veth1_macvtap: entered promiscuous mode
[   96.665824][ T5782] veth1_macvtap: entered promiscuous mode
[   96.703261][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   96.719431][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.729852][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   96.740404][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.756012][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0
[   96.788252][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   96.800218][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.812659][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   96.824047][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.836739][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1
[   96.861238][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.886858][ T5779] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   96.903430][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.912657][ T5779] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   96.922058][ T5779] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   96.931128][ T5779] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   96.948616][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   96.959984][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.976489][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   96.989992][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.003409][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   97.017949][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.030956][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0
[   97.071304][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   97.088672][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.100126][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   97.115659][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.128855][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   97.139594][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   97.155873][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1
[   97.175126][ T5782] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   97.187709][ T5782] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.199358][ T5782] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.212907][ T5782] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.355232][ T1318] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.363121][ T1318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.436797][   T23] cfg80211: failed to load regulatory.db
[   97.585409][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.608059][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.650610][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.333067][ T5785] Bluetooth: hci2: command tx timeout
[   99.333112][ T5777] Bluetooth: hci0: command tx timeout
[   99.338568][ T5785] Bluetooth: hci3: command tx timeout
[   99.344326][ T5777] Bluetooth: hci1: command tx timeout
[   99.380182][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.388850][ T5848] syz_tun: entered allmulticast mode
[   99.395203][ T5851] lo: entered allmulticast mode
[   99.578593][ T3456] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.612369][ T3456] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.655311][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.674893][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.700139][ T5861] syz.0.1[5861]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[  101.818467][ T5861] loop0: detected capacity change from 0 to 24
[  101.845819][ T5861] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  101.981751][ T5861] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  102.784426][ T5867] loop0: detected capacity change from 0 to 32768
[  103.083403][ T5868] capability: warning: `syz.0.9' uses deprecated v2 capabilities in a way that may be insecure
[  104.101655][ T5874] loop0: detected capacity change from 0 to 1024
[  104.468934][ T5875] loop3: detected capacity change from 0 to 32768
[  107.707757][ T5885] loop1: detected capacity change from 0 to 2048
[  107.811676][ T5886] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  108.003440][   T28] audit: type=1800 audit(1789384764.122:2): pid=5885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.8" name="file1" dev="loop1" ino=15 res=0 errno=0
[  108.068453][ T5885] NILFS error (device loop1): nilfs_lookup: deleted inode referenced: 12
[  109.901425][ T5885] Remounting filesystem read-only
[  109.921784][ T5892] NILFS error (device loop1): nilfs_lookup: deleted inode referenced: 12
[  109.976488][ T5894] loop2: detected capacity change from 0 to 2048
[  110.089102][ T5895] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  110.115191][ T5779] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer
[  110.200140][ T5779] NILFS (loop1): discard dirty page: offset=0, ino=2097152
[  110.223251][   T28] audit: type=1800 audit(1789384766.352:3): pid=5894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.16" name="file1" dev="loop2" ino=15 res=0 errno=0
[  110.255684][ T5779] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  110.263025][ T5779] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  110.313918][ T5779] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  110.333419][ T5779] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  110.343079][ T5779] NILFS (loop1): discard dirty page: offset=0, ino=2
[  110.373422][ T5779] NILFS (loop1): discard dirty block: blocknr=18, size=1024
[  110.380811][ T5779] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  110.453404][ T5779] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  110.462366][ T5779] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  110.524351][ T5779] NILFS (loop1): discard dirty page: offset=0, ino=6
[  110.532742][ T5779] NILFS (loop1): discard dirty block: blocknr=3, size=1024
[  110.573457][ T5779] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  110.604971][ T5779] NILFS (loop1): discard dirty block: blocknr=37, size=1024
[  110.633399][ T5779] NILFS (loop1): discard dirty block: blocknr=38, size=1024
[  110.640812][ T5779] NILFS (loop1): discard dirty page: offset=268697600, ino=6
[  110.663937][ T5779] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  110.683755][ T5779] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  110.691052][ T5779] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  110.713425][ T5779] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  110.764373][ T5779] NILFS (loop1): discard dirty page: offset=0, ino=3
[  110.771142][ T5779] NILFS (loop1): discard dirty block: blocknr=42, size=1024
[  110.817020][ T5779] NILFS (loop1): discard dirty block: blocknr=43, size=1024
[  110.853413][ T5779] NILFS (loop1): discard dirty block: blocknr=44, size=1024
[  110.864829][ T5779] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  110.893627][ T5896] NILFS error (device loop2): nilfs_lookup: deleted inode referenced: 12
[  110.913779][ T5779] NILFS (loop1): discard dirty page: offset=196608, ino=3
[  110.921001][ T5779] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  110.982305][ T5896] Remounting filesystem read-only
[  111.033192][ T5779] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  111.036931][ T5898] NILFS error (device loop2): nilfs_lookup: deleted inode referenced: 12
[  111.050452][ T5894] NILFS (loop2): discard dirty page: offset=36864, ino=15
[  111.077169][ T5779] NILFS (loop1): discard dirty block: blocknr=49, size=1024
[  111.094986][ T5779] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  111.104458][ T5894] NILFS (loop2): discard dirty block: blocknr=0, size=1024
[  111.123397][ T5779] NILFS (loop1): discard dirty page: offset=67371008, ino=3
[  111.130794][ T5779] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  111.144912][ T5894] NILFS (loop2): discard dirty block: blocknr=0, size=1024
[  111.152245][ T5894] NILFS (loop2): discard dirty block: blocknr=0, size=1024
[  111.170061][ T5779] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  111.184562][ T5894] NILFS (loop2): discard dirty block: blocknr=0, size=1024
[  111.195306][ T5779] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  111.238808][ T5779] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  111.423789][ T5774] NILFS (loop2): discard dirty page: offset=0, ino=6
[  111.430578][ T5774] NILFS (loop2): discard dirty block: blocknr=3, size=1024
[  111.473442][ T5774] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  111.492692][ T5774] NILFS (loop2): discard dirty block: blocknr=37, size=1024
[  111.512982][ T5774] NILFS (loop2): discard dirty block: blocknr=38, size=1024
[  111.544303][ T5774] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer
[  111.572874][ T5774] NILFS (loop2): discard dirty page: offset=0, ino=3
[  111.591066][ T5774] NILFS (loop2): discard dirty block: blocknr=42, size=1024
[  111.599087][ T5774] NILFS (loop2): discard dirty block: blocknr=43, size=1024
[  111.613340][ T5774] NILFS (loop2): discard dirty block: blocknr=44, size=1024
[  111.624059][ T5774] NILFS (loop2): discard dirty block: blocknr=0, size=1024
[  111.633404][ T5774] NILFS (loop2): discard dirty page: offset=229376, ino=3
[  111.640578][ T5774] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  111.670014][ T5774] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  111.690756][ T5774] NILFS (loop2): discard dirty block: blocknr=50, size=1024
[  111.717042][ T5774] NILFS (loop2): discard dirty block: blocknr=0, size=1024
[  112.042662][ T5899] loop0: detected capacity change from 0 to 32768
[  112.100363][ T5899] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop0 scanned by syz.0.15 (5899)
[  112.181338][ T5899] BTRFS info (device loop0): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b
[  112.211886][ T5899] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm
[  112.236869][ T5899] BTRFS info (device loop0): using free space tree
[  112.448850][ T5901] loop1: detected capacity change from 0 to 32768
[  112.480052][ T5899] BTRFS info (device loop0): enabling ssd optimizations
[  112.489125][ T5899] BTRFS info (device loop0): auto enabling async discard
[  112.910299][ T5903] loop2: detected capacity change from 0 to 32768
[  112.918974][ T5782] BTRFS info (device loop0): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b
[  112.997133][ T5921] loop1: detected capacity change from 0 to 2048
[  113.056311][ T5923] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  113.254327][   T28] audit: type=1800 audit(1789384769.392:4): pid=5921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.20" name="file1" dev="loop1" ino=15 res=0 errno=0
[  113.885497][   T28] audit: type=1804 audit(1789384770.022:5): pid=5921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.20" name="/newroot/3/file2/file1" dev="loop1" ino=15 res=1 errno=0
[  114.462894][ T5929] loop2: detected capacity change from 0 to 2048
[  114.517877][ T5927] NILFS error (device loop1): nilfs_lookup: deleted inode referenced: 12
[  114.576107][ T5927] Remounting filesystem read-only
[  114.577977][ T5930] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  114.617414][ T5931] NILFS error (device loop1): nilfs_lookup: deleted inode referenced: 12
[  114.663113][   T28] audit: type=1800 audit(1789384770.792:6): pid=5929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.22" name="file1" dev="loop2" ino=15 res=0 errno=0
[  114.719977][ T5921] NILFS (loop1): discard dirty page: offset=86016, ino=15
[  114.753488][ T5921] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  114.771477][ T5921] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  114.791503][ T5921] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  114.811793][ T5921] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  114.970641][ T5921] syz.1.20 (5921) used greatest stack depth: 20088 bytes left
[  115.060100][ T5924] loop3: detected capacity change from 0 to 32768
[  115.066602][ T5926] loop0: detected capacity change from 0 to 32768
[  115.074370][ T5926] =======================================================
[  115.074370][ T5926] WARNING: The mand mount option has been deprecated and
[  115.074370][ T5926]          and is ignored by this kernel. Remove the mand
[  115.074370][ T5926]          option from the mount to silence this warning.
[  115.074370][ T5926] =======================================================
[  115.134177][ T5779] NILFS (loop1): discard dirty page: offset=0, ino=6
[  115.154271][ T5779] NILFS (loop1): discard dirty block: blocknr=3, size=1024
[  115.161569][ T5779] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  115.232258][ T5779] NILFS (loop1): discard dirty block: blocknr=37, size=1024
[  115.276857][ T5779] NILFS (loop1): discard dirty block: blocknr=38, size=1024
[  115.294118][ T5779] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer
[  115.307529][   T28] audit: type=1804 audit(1789384771.442:7): pid=5929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.22" name="/newroot/5/file2/file1" dev="loop2" ino=15 res=1 errno=0
[  115.321480][ T5779] NILFS (loop1): discard dirty page: offset=0, ino=3
[  115.341554][ T5779] NILFS (loop1): discard dirty block: blocknr=42, size=1024
[  115.349138][ T5779] NILFS (loop1): discard dirty block: blocknr=43, size=1024
[  115.362291][ T5779] NILFS (loop1): discard dirty block: blocknr=44, size=1024
[  115.369777][ T5779] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  115.377211][ T5779] NILFS (loop1): discard dirty page: offset=233472, ino=3
[  115.384478][ T5779] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  115.391765][ T5779] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  115.433406][ T5779] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  115.442370][ T5779] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  115.498191][ T5926] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  115.503894][ T5924] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present!
[  115.728470][   T28] audit: type=1800 audit(1789384771.862:8): pid=5926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.21" name="file1" dev="loop0" ino=17058 res=0 errno=0
[  115.749252][ T5924] JBD2: Ignoring recovery information on journal
[  115.810717][ T5940] loop1: detected capacity change from 0 to 64
[  116.069353][ T5924] JBD2: journal reset failed
[  116.080918][ T5929] NILFS error (device loop2): nilfs_lookup: deleted inode referenced: 12
[  116.091428][ T5782] ocfs2: Unmounting device (7,0) on (node local)
[  116.099635][ T5924] (syz.3.17,5924,1):ocfs2_journal_load:1168 ERROR: Failed to load journal!
[  116.138603][ T5924] (syz.3.17,5924,0):ocfs2_check_volume:2430 ERROR: ocfs2 journal load failed! -4
[  116.153802][ T5929] Remounting filesystem read-only
[  116.160902][ T5934] NILFS (loop2): discard dirty page: offset=73728, ino=15
[  116.200735][ T5934] NILFS (loop2): discard dirty block: blocknr=0, size=1024
[  116.244205][ T5934] NILFS (loop2): discard dirty block: blocknr=0, size=1024
[  116.251551][ T5934] NILFS (loop2): discard dirty block: blocknr=0, size=1024
[  116.329291][ T5934] NILFS (loop2): discard dirty block: blocknr=0, size=1024
[  116.389780][ T5929] syz.2.22 (5929) used greatest stack depth: 19344 bytes left
[  116.523861][ T5774] NILFS (loop2): discard dirty page: offset=0, ino=6
[  116.544357][ T5774] NILFS (loop2): discard dirty block: blocknr=3, size=1024
[  116.561970][ T5774] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  116.580549][ T5774] NILFS (loop2): discard dirty block: blocknr=37, size=1024
[  116.613599][ T5774] NILFS (loop2): discard dirty block: blocknr=38, size=1024
[  116.639856][ T5774] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer
[  116.685201][ T5774] NILFS (loop2): discard dirty page: offset=0, ino=3
[  116.717567][ T5774] NILFS (loop2): discard dirty block: blocknr=42, size=1024
[  116.730131][ T5774] NILFS (loop2): discard dirty block: blocknr=43, size=1024
[  116.743359][ T5774] NILFS (loop2): discard dirty block: blocknr=44, size=1024
[  116.750723][ T5774] NILFS (loop2): discard dirty block: blocknr=0, size=1024
[  116.777261][ T5774] NILFS (loop2): discard dirty page: offset=233472, ino=3
[  116.813737][ T5774] NILFS (loop2): discard dirty block: blocknr=0, size=1024
[  116.821036][ T5774] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  116.843380][ T5774] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  116.852347][ T5774] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  116.893873][ T5945] loop0: detected capacity change from 0 to 2048
[  116.963384][ T5946] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  117.272237][   T28] audit: type=1800 audit(1789384773.402:9): pid=5945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.24" name="file1" dev="loop0" ino=15 res=0 errno=0
[  118.806056][ T5943] loop1: detected capacity change from 0 to 32768
[  118.832139][ T5951] loop3: detected capacity change from 0 to 2048
[  118.862064][   T28] audit: type=1804 audit(1789384774.992:10): pid=5945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.24" name="/newroot/6/file2/file1" dev="loop0" ino=15 res=1 errno=0
[  118.929281][   T28] audit: type=1800 audit(1789384775.052:11): pid=5943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.25" name="file1" dev="loop1" ino=4 res=0 errno=0
[  119.009845][ T5953] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  119.194242][   T28] audit: type=1800 audit(1789384775.332:12): pid=5951 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.27" name="file1" dev="loop3" ino=15 res=0 errno=0
[  119.274745][ T5951] NILFS error (device loop3): nilfs_lookup: deleted inode referenced: 12
[  119.314982][ T5951] Remounting filesystem read-only
[  119.323876][ T5956] NILFS error (device loop3): nilfs_lookup: deleted inode referenced: 12
[  119.514685][ T5783] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer
[  119.547818][ T5783] NILFS (loop3): discard dirty page: offset=0, ino=2097152
[  119.565783][ T5952] NILFS error (device loop0): nilfs_lookup: deleted inode referenced: 12
[  119.577002][ T5783] NILFS (loop3): discard dirty block: blocknr=0, size=1024
[  119.601547][ T5952] Remounting filesystem read-only
[  119.609208][ T5783] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  119.623826][ T5952] NILFS error (device loop0): nilfs_lookup: deleted inode referenced: 12
[  119.645082][ T5783] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  119.658453][ T5945] NILFS (loop0): discard dirty page: offset=73728, ino=15
[  119.673713][ T5783] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  119.682975][ T5945] NILFS (loop0): discard dirty block: blocknr=0, size=1024
[  119.695551][ T5945] NILFS (loop0): discard dirty block: blocknr=0, size=1024
[  119.703651][ T5783] NILFS (loop3): discard dirty page: offset=0, ino=2
[  119.710423][ T5783] NILFS (loop3): discard dirty block: blocknr=18, size=1024
[  119.728948][ T5945] NILFS (loop0): discard dirty block: blocknr=0, size=1024
[  119.739860][ T5783] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  119.749543][ T5945] NILFS (loop0): discard dirty block: blocknr=0, size=1024
[  119.791550][ T5783] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  119.824840][ T5783] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  119.853853][ T5783] NILFS (loop3): discard dirty page: offset=0, ino=6
[  119.860854][ T5783] NILFS (loop3): discard dirty block: blocknr=3, size=1024
[  119.902924][ T5783] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  119.922109][ T5783] NILFS (loop3): discard dirty block: blocknr=37, size=1024
[  119.945116][ T5783] NILFS (loop3): discard dirty block: blocknr=38, size=1024
[  119.953110][ T5783] NILFS (loop3): discard dirty page: offset=268697600, ino=6
[  119.978660][ T5782] NILFS (loop0): discard dirty page: offset=0, ino=6
[  119.983958][ T5783] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  120.000593][ T5782] NILFS (loop0): discard dirty block: blocknr=3, size=1024
[  120.009691][ T5782] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  120.023541][ T5783] NILFS (loop3): discard dirty block: blocknr=0, size=1024
[  120.025457][ T5782] NILFS (loop0): discard dirty block: blocknr=37, size=1024
[  120.030790][ T5783] NILFS (loop3): discard dirty block: blocknr=0, size=1024
[  120.030810][ T5783] NILFS (loop3): discard dirty block: blocknr=0, size=1024
[  120.055151][ T5783] NILFS (loop3): discard dirty page: offset=0, ino=3
[  120.061915][ T5783] NILFS (loop3): discard dirty block: blocknr=42, size=1024
[  120.071436][ T5782] NILFS (loop0): discard dirty block: blocknr=38, size=1024
[  120.081549][ T5782] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer
[  120.090094][ T5783] NILFS (loop3): discard dirty block: blocknr=43, size=1024
[  120.107120][ T5782] NILFS (loop0): discard dirty page: offset=0, ino=3
[  120.115702][ T5783] NILFS (loop3): discard dirty block: blocknr=44, size=1024
[  120.123055][ T5783] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  120.123796][ T5782] NILFS (loop0): discard dirty block: blocknr=42, size=1024
[  120.144899][ T5782] NILFS (loop0): discard dirty block: blocknr=43, size=1024
[  120.152379][ T5782] NILFS (loop0): discard dirty block: blocknr=44, size=1024
[  120.165584][ T5783] NILFS (loop3): discard dirty page: offset=196608, ino=3
[  120.172785][ T5783] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  120.176995][ T5782] NILFS (loop0): discard dirty block: blocknr=0, size=1024
[  120.193155][ T5782] NILFS (loop0): discard dirty page: offset=233472, ino=3
[  120.201950][ T5782] NILFS (loop0): discard dirty block: blocknr=0, size=1024
[  120.216393][ T5782] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  120.218116][ T5783] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  120.232585][ T5782] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  120.253559][ T5783] NILFS (loop3): discard dirty block: blocknr=49, size=1024
[  120.261458][ T5783] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  120.283373][ T5783] NILFS (loop3): discard dirty page: offset=67371008, ino=3
[  120.290029][ T5782] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  120.311774][ T5783] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  120.332798][ T5783] NILFS (loop3): discard dirty block: blocknr=0, size=1024
[  120.347798][ T5783] NILFS (loop3): discard dirty block: blocknr=0, size=1024
[  120.363755][ T5783] NILFS (loop3): discard dirty block: blocknr=0, size=1024
[  120.551816][ T5960] loop0: detected capacity change from 0 to 24
[  120.566279][ T5960] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  120.593822][ T5960] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  120.841170][ T5968] loop3: detected capacity change from 0 to 2048
[  120.916418][ T5971] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  120.967663][   T28] audit: type=1800 audit(1789384777.102:13): pid=5968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.35" name="file1" dev="loop3" ino=15 res=0 errno=0
[  121.193961][    T8] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  121.311255][   T28] audit: type=1804 audit(1789384777.442:14): pid=5968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.35" name="/newroot/8/file2/file1" dev="loop3" ino=15 res=1 errno=0
[  121.373553][    T8] usb 1-1: device descriptor read/64, error -71
[  121.474227][ T5964] loop2: detected capacity change from 0 to 32768
[  121.576988][ T5966] loop1: detected capacity change from 0 to 32768
[  121.649529][    T8] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  121.659769][ T5966] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  121.821205][   T28] audit: type=1800 audit(1789384777.942:15): pid=5966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.33" name="file1" dev="loop1" ino=17058 res=0 errno=0
[  121.844023][    T8] usb 1-1: device descriptor read/64, error -71
[  121.947529][ T5972] NILFS error (device loop3): nilfs_lookup: deleted inode referenced: 12
[  121.973911][    T8] usb usb1-port1: attempt power cycle
[  121.988425][ T5972] Remounting filesystem read-only
[  122.008727][ T5968] NILFS (loop3): discard dirty page: offset=94208, ino=15
[  122.042948][ T5977] loop2: detected capacity change from 0 to 2048
[  122.054721][ T5779] ocfs2: Unmounting device (7,1) on (node local)
[  122.067155][ T5968] NILFS (loop3): discard dirty block: blocknr=0, size=1024
[  122.074626][ T5968] NILFS (loop3): discard dirty block: blocknr=0, size=1024
[  122.100705][ T5968] NILFS (loop3): discard dirty block: blocknr=0, size=1024
[  122.108177][ T5968] NILFS (loop3): discard dirty block: blocknr=0, size=1024
[  122.174249][ T5979] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  122.791233][ T5981] syz_tun: entered allmulticast mode
[  122.831726][ T5981] lo: entered allmulticast mode
[  123.533566][    T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!!
[  124.004268][ T5977] NILFS error (device loop2): nilfs_lookup: deleted inode referenced: 12
[  124.015553][    T8] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  124.054417][ T5977] Remounting filesystem read-only
[  124.170283][ T5783] NILFS (loop3): discard dirty page: offset=0, ino=6
[  124.194991][ T5783] NILFS (loop3): discard dirty block: blocknr=3, size=1024
[  124.202660][ T5783] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  124.215483][ T5774] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer
[  124.233937][ T5783] NILFS (loop3): discard dirty block: blocknr=37, size=1024
[  124.242098][ T5774] NILFS (loop2): discard dirty page: offset=0, ino=2097152
[  124.261456][ T5783] NILFS (loop3): discard dirty block: blocknr=38, size=1024
[  124.269102][ T5774] NILFS (loop2): discard dirty block: blocknr=0, size=1024
[  124.276666][    T8] usb 1-1: device not accepting address 4, error -71
[  124.301961][ T5783] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer
[  124.311650][ T5774] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  124.337799][ T5774] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  124.364285][ T5783] NILFS (loop3): discard dirty page: offset=0, ino=3
[  124.371060][ T5783] NILFS (loop3): discard dirty block: blocknr=42, size=1024
[  124.378513][ T5774] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  124.405915][ T5774] NILFS (loop2): discard dirty page: offset=0, ino=2
[  124.412686][ T5774] NILFS (loop2): discard dirty block: blocknr=18, size=1024
[  124.413876][ T5783] NILFS (loop3): discard dirty block: blocknr=43, size=1024
[  124.443336][ T5774] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  124.455343][ T5783] NILFS (loop3): discard dirty block: blocknr=44, size=1024
[  124.462724][ T5783] NILFS (loop3): discard dirty block: blocknr=0, size=1024
[  124.480381][ T5774] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  124.502385][ T5783] NILFS (loop3): discard dirty page: offset=233472, ino=3
[  124.527580][ T5774] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  124.538863][ T5783] NILFS (loop3): discard dirty block: blocknr=0, size=1024
[  124.561490][ T5774] NILFS (loop2): discard dirty page: offset=0, ino=6
[  124.575178][ T5783] NILFS (loop3): discard dirty block: blocknr=0, size=1024
[  124.605889][ T5783] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  124.606839][ T5774] NILFS (loop2): discard dirty block: blocknr=3, size=1024
[  124.633540][ T5783] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  124.644865][ T5774] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  124.677001][ T5774] NILFS (loop2): discard dirty block: blocknr=37, size=1024
[  124.688533][ T5774] NILFS (loop2): discard dirty block: blocknr=38, size=1024
[  124.714909][ T5774] NILFS (loop2): discard dirty page: offset=268697600, ino=6
[  124.722384][ T5774] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  124.759408][ T5774] NILFS (loop2): discard dirty block: blocknr=0, size=1024
[  124.772397][ T5774] NILFS (loop2): discard dirty block: blocknr=0, size=1024
[  124.790907][ T5774] NILFS (loop2): discard dirty block: blocknr=0, size=1024
[  124.819096][ T5774] NILFS (loop2): discard dirty page: offset=0, ino=3
[  124.836096][ T5774] NILFS (loop2): discard dirty block: blocknr=42, size=1024
[  124.864498][ T5774] NILFS (loop2): discard dirty block: blocknr=43, size=1024
[  124.871903][ T5774] NILFS (loop2): discard dirty block: blocknr=44, size=1024
[  124.905711][ T5774] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  124.926242][ T5774] NILFS (loop2): discard dirty page: offset=196608, ino=3
[  124.963458][ T5774] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  124.972940][ T5774] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  126.093377][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[  126.738977][ T5774] NILFS (loop2): discard dirty block: blocknr=49, size=1024
[  126.753348][ T5774] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  126.762379][ T5774] NILFS (loop2): discard dirty page: offset=67371008, ino=3
[  126.773373][ T5774] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  126.782392][ T5774] NILFS (loop2): discard dirty block: blocknr=0, size=1024
[  126.840515][ T5774] NILFS (loop2): discard dirty block: blocknr=0, size=1024
[  126.867855][ T5774] NILFS (loop2): discard dirty block: blocknr=0, size=1024
[  127.109427][ T5995] loop2: detected capacity change from 0 to 2048
[  127.185977][ T5996] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  127.365325][   T28] audit: type=1800 audit(1789384783.502:16): pid=5995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.39" name="file1" dev="loop2" ino=15 res=0 errno=0
[  127.447545][ T5995] NILFS error (device loop2): nilfs_lookup: deleted inode referenced: 12
[  127.468787][ T5995] Remounting filesystem read-only
[  127.495081][ T5995] NILFS error (device loop2): nilfs_lookup: deleted inode referenced: 12
[  127.623482][ T5774] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer
[  127.644452][ T5774] NILFS (loop2): discard dirty page: offset=0, ino=2097152
[  127.651793][ T5774] NILFS (loop2): discard dirty block: blocknr=0, size=1024
[  127.676846][ T5774] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  127.695745][ T5774] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  127.719119][ T5774] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  127.743645][ T5774] NILFS (loop2): discard dirty page: offset=0, ino=2
[  127.750415][ T5774] NILFS (loop2): discard dirty block: blocknr=18, size=1024
[  127.791211][ T5774] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  127.813368][ T5774] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  127.822312][ T5774] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  127.856954][ T5774] NILFS (loop2): discard dirty page: offset=0, ino=6
[  127.873491][ T5774] NILFS (loop2): discard dirty block: blocknr=3, size=1024
[  127.880857][ T5774] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  127.913401][ T5774] NILFS (loop2): discard dirty block: blocknr=37, size=1024
[  127.913763][    T8] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  127.920756][ T5774] NILFS (loop2): discard dirty block: blocknr=38, size=1024
[  127.954474][ T5774] NILFS (loop2): discard dirty page: offset=268697600, ino=6
[  127.961965][ T5774] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  128.004540][ T5774] NILFS (loop2): discard dirty block: blocknr=0, size=1024
[  128.011837][ T5774] NILFS (loop2): discard dirty block: blocknr=0, size=1024
[  128.028588][ T5774] NILFS (loop2): discard dirty block: blocknr=0, size=1024
[  128.040017][ T5774] NILFS (loop2): discard dirty page: offset=0, ino=3
[  128.068009][ T5774] NILFS (loop2): discard dirty block: blocknr=42, size=1024
[  128.085069][ T5774] NILFS (loop2): discard dirty block: blocknr=43, size=1024
[  128.092588][ T5774] NILFS (loop2): discard dirty block: blocknr=44, size=1024
[  128.101006][ T5774] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  128.111292][    T8] usb 2-1: device descriptor read/64, error -71
[  128.118085][ T5774] NILFS (loop2): discard dirty page: offset=196608, ino=3
[  128.126691][ T5774] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  128.136008][ T5774] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  128.146393][ T5774] NILFS (loop2): discard dirty block: blocknr=49, size=1024
[  128.156534][ T5774] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  128.169144][ T5774] NILFS (loop2): discard dirty page: offset=67371008, ino=3
[  128.176919][ T5774] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  128.186728][ T5774] NILFS (loop2): discard dirty block: blocknr=0, size=1024
[  128.194495][ T5774] NILFS (loop2): discard dirty block: blocknr=0, size=1024
[  128.201845][ T5774] NILFS (loop2): discard dirty block: blocknr=0, size=1024
[  129.063351][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  129.933839][    T8] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  130.018608][ T6008] loop2: detected capacity change from 0 to 24
[  130.035615][ T6008] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  130.049978][ T6008] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  130.102873][ T6006] loop3: detected capacity change from 0 to 2048
[  130.113415][    T8] usb 2-1: device descriptor read/64, error -71
[  130.184259][ T6009] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  130.236278][    T8] usb usb2-port1: attempt power cycle
[  130.279421][   T28] audit: type=1800 audit(1789384786.412:17): pid=6006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.41" name="file1" dev="loop3" ino=15 res=0 errno=0
[  130.650804][   T28] audit: type=1804 audit(1789384786.782:18): pid=6006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.41" name="/newroot/10/file2/file1" dev="loop3" ino=15 res=1 errno=0
[  130.702883][    T8] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  132.532880][    T8] usb 2-1: device not accepting address 4, error -71
[  132.873694][ T6012] NILFS error (device loop3): nilfs_lookup: deleted inode referenced: 12
[  132.910616][ T6012] Remounting filesystem read-only
[  132.925489][ T6012] NILFS error (device loop3): nilfs_lookup: deleted inode referenced: 12
[  132.928773][ T6006] NILFS (loop3): discard dirty page: offset=77824, ino=15
[  132.952177][ T6011] loop2: detected capacity change from 0 to 32768
[  132.956928][ T6006] NILFS (loop3): discard dirty block: blocknr=0, size=1024
[  134.538184][ T6006] NILFS (loop3): discard dirty block: blocknr=0, size=1024
[  134.548989][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  134.557564][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  134.638217][ T6006] NILFS (loop3): discard dirty block: blocknr=0, size=1024
[  134.658384][ T6006] NILFS (loop3): discard dirty block: blocknr=0, size=1024
[  134.892762][ T5783] NILFS (loop3): discard dirty page: offset=0, ino=6
[  134.908014][ T5783] NILFS (loop3): discard dirty block: blocknr=3, size=1024
[  134.928303][ T5783] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  134.957032][ T5783] NILFS (loop3): discard dirty block: blocknr=37, size=1024
[  136.333435][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[  136.724403][ T5783] NILFS (loop3): discard dirty block: blocknr=38, size=1024
[  136.732661][ T5783] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer
[  136.800568][ T5783] NILFS (loop3): discard dirty page: offset=0, ino=3
[  136.843365][ T5783] NILFS (loop3): discard dirty block: blocknr=42, size=1024
[  136.873792][ T5783] NILFS (loop3): discard dirty block: blocknr=43, size=1024
[  136.881173][ T5783] NILFS (loop3): discard dirty block: blocknr=44, size=1024
[  136.932096][ T5783] NILFS (loop3): discard dirty block: blocknr=0, size=1024
[  136.963924][ T5783] NILFS (loop3): discard dirty page: offset=233472, ino=3
[  136.971137][ T5783] NILFS (loop3): discard dirty block: blocknr=0, size=1024
[  137.003543][ T5783] NILFS (loop3): discard dirty block: blocknr=0, size=1024
[  137.010832][ T5783] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  137.053373][ T5783] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  138.483750][    T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!!
[  138.893387][    T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!!
[  139.336895][ T6033] loop1: detected capacity change from 0 to 2048
[  139.347404][ T6031] loop0: detected capacity change from 0 to 2048
[  139.390450][ T6034] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  139.445342][ T6035] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  139.503661][ T6031] NILFS error (device loop0): nilfs_lookup: deleted inode referenced: 12
[  139.539266][ T6031] Remounting filesystem read-only
[  139.551618][   T28] audit: type=1800 audit(1789384795.682:19): pid=6033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.48" name="file1" dev="loop1" ino=15 res=0 errno=0
[  139.835780][ T6037] loop0: detected capacity change from 0 to 24
[  139.843141][ T6037] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  139.915291][ T6037] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  140.058691][   T28] audit: type=1804 audit(1789384796.192:20): pid=6033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.48" name="/newroot/12/file2/file1" dev="loop1" ino=15 res=1 errno=0
[  140.369097][ T6044] mmap: syz.2.52 (6044) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  140.396834][ T6044] loop2: detected capacity change from 0 to 64
[  140.410568][ T6044] hfs: unable to parse mount options
[  140.553398][   T27] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  143.143385][   T27] usb 1-1: device descriptor read/64, error -71
[  143.603647][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[  146.163743][    T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!!
[  146.573367][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[  153.843760][    T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!!
[  154.252375][ T6073] netlink: 24 bytes leftover after parsing attributes in process `syz.3.62'.
[  155.837859][ T6076] syz_tun: entered allmulticast mode
[  155.891599][ T6076] lo: entered allmulticast mode
[  157.838184][ T6079] loop2: detected capacity change from 0 to 24
[  157.859892][ T6079] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  157.905898][ T6079] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  161.322081][ T6089] loop3: detected capacity change from 0 to 164
[  161.716633][ T6092] loop0: detected capacity change from 0 to 32768
[  163.146767][ T6098] loop0: detected capacity change from 0 to 32768
[  170.053193][ T6114] gadgetfs: bound to dummy_udc driver
[  170.413653][  T180] usb 1-1: new full-speed USB device number 8 using dummy_hcd
[  170.421472][    C0] gadgetfs: connected
[  172.093744][  T180] gadgetfs: disconnected
[  172.300476][    C0] gadgetfs: connected
[  172.310904][  T180] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  172.330013][ T6121] loop2: detected capacity change from 0 to 24
[  172.348876][ T6121] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  172.373353][  T180] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00
[  172.382910][  T180] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  172.396312][ T6121] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  173.336970][ T6126] netlink: 24 bytes leftover after parsing attributes in process `syz.0.75'.
[  174.255354][    C0] gadgetfs: configuration #1
[  174.477777][ T6129] loop2: detected capacity change from 0 to 64
[  174.489609][ T6129] hfs: unable to parse mount options
[  175.443994][ T6115] gadgetfs: suspended from state 3
[  175.451308][    T9] usb 1-1: USB disconnect, device number 8
[  175.463983][ T6115] gadgetfs: disconnected
[  175.995286][ T5779] syz_tun (unregistering): left allmulticast mode
[  176.228375][   T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.077077][   T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.431857][   T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.486144][ T6142] netlink: 24 bytes leftover after parsing attributes in process `syz.3.77'.
[  181.126445][   T49] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  181.488132][ T6148] loop0: detected capacity change from 0 to 32768
[  182.565922][   T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  182.585891][   T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  182.603742][   T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  182.622210][   T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  182.643455][   T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  182.650958][   T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  182.878348][ T6158] loop0: detected capacity change from 0 to 64
[  182.890812][ T6158] hfs: unable to parse mount options
[  184.345169][ T6164] loop0: detected capacity change from 0 to 32768
[  184.757815][   T51] Bluetooth: hci1: command tx timeout
[  185.945751][ T6178] loop2: detected capacity change from 0 to 32768
[  186.804336][   T51] Bluetooth: hci1: command tx timeout
[  186.834136][ T6152] chnl_net:caif_netlink_parms(): no params data found
[  187.072138][ T6187] loop0: detected capacity change from 0 to 2048
[  187.151825][ T6189] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  188.941892][   T51] Bluetooth: hci1: command tx timeout
[  189.069751][ T6194] gadgetfs: bound to dummy_udc driver
[  189.312741][ T6208] netlink: 24 bytes leftover after parsing attributes in process `syz.2.93'.
[  189.582133][    T9] usb 1-1: new full-speed USB device number 9 using dummy_hcd
[  189.599864][    C0] gadgetfs: connected
[  189.610018][    T9] gadgetfs: disconnected
[  189.641217][ T6152] bridge0: port 1(bridge_slave_0) entered blocking state
[  189.663664][ T6152] bridge0: port 1(bridge_slave_0) entered disabled state
[  189.670977][ T6152] bridge_slave_0: entered allmulticast mode
[  189.775117][ T6152] bridge_slave_0: entered promiscuous mode
[  189.842149][ T6152] bridge0: port 2(bridge_slave_1) entered blocking state
[  189.869337][ T6152] bridge0: port 2(bridge_slave_1) entered disabled state
[  189.893986][    C0] gadgetfs: connected
[  189.899510][    T9] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  189.913715][ T6152] bridge_slave_1: entered allmulticast mode
[  189.941156][    T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00
[  189.964575][ T6152] bridge_slave_1: entered promiscuous mode
[  190.006553][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  190.073467][    C0] gadgetfs: configuration #1
[  190.496893][   T49] hsr_slave_0: left promiscuous mode
[  190.509733][   T49] hsr_slave_1: left promiscuous mode
[  190.522603][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  190.530581][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[  190.546853][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  190.554562][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[  190.566994][   T49] bridge_slave_1: left allmulticast mode
[  190.572837][   T49] bridge_slave_1: left promiscuous mode
[  190.581660][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  190.811499][   T49] bridge_slave_0: left allmulticast mode
[  190.817424][   T49] bridge_slave_0: left promiscuous mode
[  190.823160][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  190.963885][   T51] Bluetooth: hci1: command tx timeout
[  191.008074][   T49] veth1_macvtap: left promiscuous mode
[  191.063960][   T49] veth0_macvtap: left promiscuous mode
[  191.069730][   T49] veth1_vlan: left promiscuous mode
[  191.089869][   T49] veth0_vlan: left promiscuous mode
[  191.150856][ T6197] gadgetfs: suspended from state 3
[  191.207505][ T6197] gadgetfs: disconnected
[  191.214548][ T5156] usb 1-1: USB disconnect, device number 9
[  193.972176][ T6226] loop3: detected capacity change from 0 to 32768
[  194.582298][ T6227] read_mapping_page failed!
[  194.653598][ T6227] ialloc: diAlloc returned -5!
[  194.729783][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  194.737356][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  195.229802][ T6229] loop3: detected capacity change from 0 to 32768
[  195.918754][ T6230] read_mapping_page failed!
[  196.174538][ T6230] ialloc: diAlloc returned -5!
[  197.688432][ T6236] netlink: 24 bytes leftover after parsing attributes in process `syz.2.96'.
[  197.775535][ T6235] loop3: detected capacity change from 0 to 2048
[  197.873512][ T6237] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  198.663177][ T6242] loop3: detected capacity change from 0 to 164
[  199.375102][   T49] team0 (unregistering): Port device team_slave_1 removed
[  199.601384][   T49] team0 (unregistering): Port device team_slave_0 removed
[  200.014632][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  200.174886][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  201.971964][ T6257] netlink: 24 bytes leftover after parsing attributes in process `syz.3.105'.
[  204.890818][   T49] bond0 (unregistering): Released all slaves
[  205.154307][   T49] lo (unregistering): left allmulticast mode
[  205.837250][ T6152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  206.090105][ T6152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  206.380762][ T6152] team0: Port device team_slave_0 added
[  206.434829][ T6152] team0: Port device team_slave_1 added
[  206.543594][ T6152] batman_adv: batadv0: Adding interface: batadv_slave_0
[  206.550666][ T6152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  206.682445][ T6152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  206.717020][ T6152] batman_adv: batadv0: Adding interface: batadv_slave_1
[  206.757878][ T6152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  206.833438][ T6152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  207.187580][ T6152] hsr_slave_0: entered promiscuous mode
[  207.304068][ T6152] hsr_slave_1: entered promiscuous mode
[  207.410032][ T6152] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  207.456577][ T6152] Cannot create hsr debugfs directory
[  210.132648][ T6152] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  211.807692][ T6152] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  212.144990][ T6152] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  212.170513][ T5781] Bluetooth: hci2: command 0x0406 tx timeout
[  212.176696][ T5781] Bluetooth: hci0: command 0x0406 tx timeout
[  212.182738][ T5781] Bluetooth: hci3: command 0x0406 tx timeout
[  212.237470][ T6152] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  213.019293][ T6152] 8021q: adding VLAN 0 to HW filter on device bond0
[  213.137660][ T6152] 8021q: adding VLAN 0 to HW filter on device team0
[  213.217297][ T1324] bridge0: port 1(bridge_slave_0) entered blocking state
[  213.224486][ T1324] bridge0: port 1(bridge_slave_0) entered forwarding state
[  213.274597][ T1324] bridge0: port 2(bridge_slave_1) entered blocking state
[  213.281836][ T1324] bridge0: port 2(bridge_slave_1) entered forwarding state
[  213.323084][ T6309] gadgetfs: bound to dummy_udc driver
[  213.476516][ T6152] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  213.503624][ T6152] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  213.673420][ T2180] usb 1-1: new full-speed USB device number 10 using dummy_hcd
[  213.681278][    C0] gadgetfs: connected
[  213.723456][ T2180] gadgetfs: disconnected
[  213.943637][    C0] gadgetfs: connected
[  213.949824][ T2180] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  213.993556][ T2180] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00
[  214.002711][ T2180] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  214.245245][    C0] gadgetfs: configuration #1
[  214.572395][ T6152] 8021q: adding VLAN 0 to HW filter on device batadv0
[  218.122786][ T6152] veth0_vlan: entered promiscuous mode
[  218.216339][ T6152] veth1_vlan: entered promiscuous mode
[  218.349923][ T6152] veth0_macvtap: entered promiscuous mode
[  218.427866][ T6152] veth1_macvtap: entered promiscuous mode
[  218.556691][ T6152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  218.595295][ T6152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  218.629574][ T6152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  218.702590][ T6152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  218.733794][ T6152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  218.753584][ T6152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  218.765976][ T6152] batman_adv: batadv0: Interface activated: batadv_slave_0
[  218.795549][ T6152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  218.833479][ T6152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  218.853379][ T6152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  218.903376][ T6152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  218.943356][ T6152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  218.984321][ T6152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  219.016421][ T6152] batman_adv: batadv0: Interface activated: batadv_slave_1
[  219.079411][ T6152] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  219.114991][ T6152] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  219.183376][ T6152] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  219.192162][ T6152] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  219.844233][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  219.852134][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  220.036562][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  220.067534][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  223.746120][ T6377] loop2: detected capacity change from 0 to 2048
[  223.985216][ T6381] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  225.539478][ T6310] gadgetfs: suspended from state 3
[  225.603469][ T6310] gadgetfs: disconnected
[  225.611411][ T5816] usb 1-1: USB disconnect, device number 10
[  225.629709][ T5782] ==================================================================
[  225.637856][ T5782] BUG: KASAN: slab-use-after-free in __mutex_lock+0xfc/0xc80
[  225.645286][ T5782] Read of size 8 at addr ffff888023f51060 by task syz-executor/5782
[  225.653402][ T5782] 
[  225.655775][ T5782] CPU: 1 PID: 5782 Comm: syz-executor Not tainted syzkaller #0
[  225.663344][ T5782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026
[  225.673456][ T5782] Call Trace:
[  225.676767][ T5782]  <TASK>
[  225.679746][ T5782]  dump_stack_lvl+0x18c/0x250
[  225.684448][ T5782]  ? __lock_acquire+0x7d80/0x7d80
[  225.689490][ T5782]  ? show_regs_print_info+0x20/0x20
[  225.694705][ T5782]  ? load_image+0x420/0x420
[  225.699221][ T5782]  ? __virt_addr_valid+0x10c/0x380
[  225.704351][ T5782]  ? __virt_addr_valid+0x10c/0x380
[  225.709483][ T5782]  ? __virt_addr_valid+0x10c/0x380
[  225.714614][ T5782]  print_report+0xa8/0x210
[  225.719091][ T5782]  ? __mutex_lock+0xfc/0xc80
[  225.723726][ T5782]  kasan_report+0x117/0x150
[  225.728261][ T5782]  ? tomoyo_check_open_permission+0x384/0x460
[  225.734389][ T5782]  ? __mutex_lock+0xfc/0xc80
[  225.739022][ T5782]  __mutex_lock+0xfc/0xc80
[  225.743471][ T5782]  ? end_current_label_crit_section+0x170/0x170
[  225.749734][ T5782]  ? ep_open+0x4e/0x270
[  225.753908][ T5782]  ? mutex_lock_nested+0x20/0x20
[  225.758871][ T5782]  ? apparmor_file_open+0x5ab/0x760
[  225.764117][ T5782]  ? apparmor_inode_getattr+0x2c0/0x2c0
[  225.769749][ T5782]  ? __rwlock_init+0x150/0x150
[  225.774589][ T5782]  ep_open+0x4e/0x270
[  225.778626][ T5782]  ? do_dentry_open+0x86f/0x14b0
[  225.783623][ T5782]  do_dentry_open+0x880/0x14b0
[  225.788434][ T5782]  ? ep_ioctl+0x1c0/0x1c0
[  225.792803][ T5782]  path_openat+0x284f/0x3270
[  225.797443][ T5782]  ? do_sys_openat2+0xda/0x1d0
[  225.802245][ T5782]  ? __x64_sys_openat+0x139/0x160
[  225.807360][ T5782]  ? verify_lock_unused+0x140/0x140
[  225.812601][ T5782]  ? do_filp_open+0x430/0x430
[  225.817313][ T5782]  do_filp_open+0x1f2/0x430
[  225.821859][ T5782]  ? vfs_tmpfile+0x620/0x620
[  225.826486][ T5782]  ? _raw_spin_unlock+0x28/0x40
[  225.831377][ T5782]  ? alloc_fd+0x590/0x640
[  225.835760][ T5782]  do_sys_openat2+0x134/0x1d0
[  225.840478][ T5782]  ? do_sys_open+0xe0/0xe0
[  225.844939][ T5782]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  225.850960][ T5782]  ? fsnotify_link_count+0xf0/0xf0
[  225.856101][ T5782]  ? lock_chain_count+0x20/0x20
[  225.860988][ T5782]  __x64_sys_openat+0x139/0x160
[  225.865881][ T5782]  do_syscall_64+0x55/0xb0
[  225.870328][ T5782]  ? clear_bhb_loop+0x40/0x90
[  225.875037][ T5782]  ? clear_bhb_loop+0x40/0x90
[  225.879751][ T5782]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  225.885692][ T5782] RIP: 0033:0x7fe0e2b5e98e
[  225.890144][ T5782] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  225.909957][ T5782] RSP: 002b:00007ffe2c637398 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  225.918412][ T5782] RAX: ffffffffffffffda RBX: 0000555579f05500 RCX: 00007fe0e2b5e98e
[  225.926511][ T5782] RDX: 0000000000000000 RSI: 00007ffe2c637500 RDI: ffffffffffffff9c
[  225.934522][ T5782] RBP: 00007ffe2c637500 R08: 0000000000000000 R09: 0000000000000000
[  225.942532][ T5782] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe2c6385f0
[  225.950537][ T5782] R13: 00007fe0e2c3448b R14: 0000555579f054e8 R15: 0000000000000006
[  225.958572][ T5782]  </TASK>
[  225.961626][ T5782] 
[  225.963971][ T5782] Allocated by task 6309:
[  225.968319][ T5782]  kasan_set_track+0x4e/0x70
[  225.972955][ T5782]  __kasan_kmalloc+0x8f/0xa0
[  225.977580][ T5782]  gadgetfs_bind+0x25f/0x830
[  225.982198][ T5782]  gadget_bind_driver+0x2b3/0x770
[  225.987258][ T5782]  really_probe+0x247/0xae0
[  225.991801][ T5782]  __driver_probe_device+0x1f5/0x390
[  225.997126][ T5782]  driver_probe_device+0x4f/0x420
[  226.002175][ T5782]  __driver_attach+0x444/0x6d0
[  226.006975][ T5782]  bus_for_each_dev+0x235/0x2b0
[  226.011851][ T5782]  bus_add_driver+0x340/0x630
[  226.016561][ T5782]  driver_register+0x23a/0x310
[  226.021356][ T5782]  usb_gadget_register_driver_owner+0xf9/0x270
[  226.027552][ T5782]  dev_config+0xe49/0x1260
[  226.031996][ T5782]  vfs_write+0x299/0x9a0
[  226.036275][ T5782]  ksys_write+0x151/0x260
[  226.040641][ T5782]  do_syscall_64+0x55/0xb0
[  226.045090][ T5782]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  226.051011][ T5782] 
[  226.053362][ T5782] Freed by task 6310:
[  226.057371][ T5782]  kasan_set_track+0x4e/0x70
[  226.061999][ T5782]  kasan_save_free_info+0x28/0x40
[  226.067055][ T5782]  ____kasan_slab_free+0x126/0x1f0
[  226.072200][ T5782]  slab_free_freelist_hook+0x130/0x1a0
[  226.077696][ T5782]  __kmem_cache_free+0xba/0x1f0
[  226.082595][ T5782]  destroy_ep_files+0x280/0x340
[  226.087482][ T5782]  gadgetfs_unbind+0x109/0x2b0
[  226.092286][ T5782]  gadget_unbind_driver+0x1bf/0x3e0
[  226.097526][ T5782]  device_release_driver_internal+0x408/0x6f0
[  226.103649][ T5782]  driver_detach+0x1f3/0x2d0
[  226.108262][ T5782]  bus_remove_driver+0x221/0x2f0
[  226.113236][ T5782]  usb_gadget_unregister_driver+0x4e/0x70
[  226.118990][ T5782]  dev_release+0x86/0x200
[  226.123353][ T5782]  __fput+0x221/0x940
[  226.127382][ T5782]  task_work_run+0x1d4/0x260
[  226.132016][ T5782]  do_exit+0x986/0x2530
[  226.136225][ T5782]  do_group_exit+0x22d/0x2f0
[  226.140857][ T5782]  get_signal+0x12a6/0x1390
[  226.145388][ T5782]  arch_do_signal_or_restart+0xc2/0x7b0
[  226.151408][ T5782]  exit_to_user_mode_loop+0x70/0x110
[  226.156728][ T5782]  exit_to_user_mode_prepare+0xee/0x180
[  226.162314][ T5782]  irqentry_exit_to_user_mode+0x9/0x30
[  226.167845][ T5782]  exc_page_fault+0x8c/0x100
[  226.172498][ T5782]  asm_exc_page_fault+0x26/0x30
[  226.177378][ T5782] 
[  226.179726][ T5782] The buggy address belongs to the object at ffff888023f51000
[  226.179726][ T5782]  which belongs to the cache kmalloc-512 of size 512
[  226.193807][ T5782] The buggy address is located 96 bytes inside of
[  226.193807][ T5782]  freed 512-byte region [ffff888023f51000, ffff888023f51200)
[  226.207548][ T5782] 
[  226.209893][ T5782] The buggy address belongs to the physical page:
[  226.216337][ T5782] page:ffffea00008fd400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x23f50
[  226.226543][ T5782] head:ffffea00008fd400 order:2 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  226.235552][ T5782] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  226.243577][ T5782] page_type: 0xffffffff()
[  226.247959][ T5782] raw: 00fff00000000840 ffff888017c41c80 dead000000000122 0000000000000000
[  226.256571][ T5782] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[  226.265183][ T5782] page dumped because: kasan: bad access detected
[  226.271631][ T5782] page_owner tracks the page as allocated
[  226.277404][ T5782] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 6309, tgid 6303 (syz.0.107), ts 213322692698, free_ts 207764016395
[  226.300103][ T5782]  post_alloc_hook+0x1c1/0x200
[  226.304943][ T5782]  get_page_from_freelist+0x2181/0x22a0
[  226.310528][ T5782]  __alloc_pages+0x1f0/0x460
[  226.315173][ T5782]  alloc_slab_page+0x5d/0x180
[  226.319879][ T5782]  new_slab+0x87/0x2d0
[  226.323979][ T5782]  ___slab_alloc+0xc5c/0x12f0
[  226.328681][ T5782]  __kmem_cache_alloc_node+0x11f/0x250
[  226.334179][ T5782]  kmalloc_trace+0x2a/0xe0
[  226.338925][ T5782]  gadgetfs_bind+0x25f/0x830
[  226.343553][ T5782]  gadget_bind_driver+0x2b3/0x770
[  226.348618][ T5782]  really_probe+0x247/0xae0
[  226.353145][ T5782]  __driver_probe_device+0x1f5/0x390
[  226.358471][ T5782]  driver_probe_device+0x4f/0x420
[  226.363556][ T5782]  __driver_attach+0x444/0x6d0
[  226.368372][ T5782]  bus_for_each_dev+0x235/0x2b0
[  226.373254][ T5782]  bus_add_driver+0x340/0x630
[  226.377996][ T5782] page last free stack trace:
[  226.382694][ T5782]  free_unref_page_prepare+0x7d7/0x8f0
[  226.388179][ T5782]  free_unref_page+0x32/0x2e0
[  226.392884][ T5782]  __slab_free+0x35a/0x400
[  226.397331][ T5782]  qlist_free_all+0x75/0xd0
[  226.401867][ T5782]  kasan_quarantine_reduce+0x143/0x160
[  226.407365][ T5782]  __kasan_slab_alloc+0x22/0x80
[  226.412244][ T5782]  slab_post_alloc_hook+0x6a/0x4d0
[  226.417391][ T5782]  kmem_cache_alloc_node+0x1af/0x310
[  226.422718][ T5782]  __alloc_skb+0x103/0x2c0
[  226.427193][ T5782]  netlink_ack+0x377/0x1160
[  226.431724][ T5782]  netlink_rcv_skb+0x2b3/0x4c0
[  226.436518][ T5782]  netlink_unicast+0x7b1/0x930
[  226.441316][ T5782]  netlink_sendmsg+0x8d0/0xbf0
[  226.446312][ T5782]  __sys_sendto+0x4a9/0x6b0
[  226.450851][ T5782]  __x64_sys_sendto+0xde/0xf0
[  226.455648][ T5782]  do_syscall_64+0x55/0xb0
[  226.460099][ T5782] 
[  226.462482][ T5782] Memory state around the buggy address:
[  226.468140][ T5782]  ffff888023f50f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  226.476400][ T5782]  ffff888023f50f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  226.484491][ T5782] >ffff888023f51000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  226.492580][ T5782]                                                        ^
[  226.499799][ T5782]  ffff888023f51080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  226.507894][ T5782]  ffff888023f51100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  226.515979][ T5782] ==================================================================
[  226.567342][ T6397] loop2: detected capacity change from 0 to 164
[  226.961862][ T5782] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  226.969157][ T5782] CPU: 0 PID: 5782 Comm: syz-executor Not tainted syzkaller #0
[  226.976717][ T5782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026
[  226.986787][ T5782] Call Trace:
[  226.990083][ T5782]  <TASK>
[  226.993032][ T5782]  dump_stack_lvl+0x18c/0x250
[  226.997733][ T5782]  ? show_regs_print_info+0x20/0x20
[  227.002970][ T5782]  ? load_image+0x420/0x420
[  227.007601][ T5782]  panic+0x2ca/0x720
[  227.011573][ T5782]  ? bpf_jit_dump+0xd0/0xd0
[  227.016158][ T5782]  ? _raw_spin_unlock_irqrestore+0x111/0x120
[  227.022196][ T5782]  ? _raw_spin_unlock+0x40/0x40
[  227.027107][ T5782]  ? print_memory_metadata+0x314/0x400
[  227.032662][ T5782]  ? __mutex_lock+0xfc/0xc80
[  227.037319][ T5782]  check_panic_on_warn+0x84/0xa0
[  227.042325][ T5782]  ? __mutex_lock+0xfc/0xc80
[  227.050195][ T5782]  end_report+0x6f/0x130
[  227.054498][ T5782]  kasan_report+0x128/0x150
[  227.059058][ T5782]  ? tomoyo_check_open_permission+0x384/0x460
[  227.065188][ T5782]  ? __mutex_lock+0xfc/0xc80
[  227.069851][ T5782]  __mutex_lock+0xfc/0xc80
[  227.074323][ T5782]  ? end_current_label_crit_section+0x170/0x170
[  227.080587][ T5782]  ? ep_open+0x4e/0x270
[  227.084765][ T5782]  ? mutex_lock_nested+0x20/0x20
[  227.089730][ T5782]  ? apparmor_file_open+0x5ab/0x760
[  227.094955][ T5782]  ? apparmor_inode_getattr+0x2c0/0x2c0
[  227.100528][ T5782]  ? __rwlock_init+0x150/0x150
[  227.105349][ T5782]  ep_open+0x4e/0x270
[  227.109368][ T5782]  ? do_dentry_open+0x86f/0x14b0
[  227.114331][ T5782]  do_dentry_open+0x880/0x14b0
[  227.119113][ T5782]  ? ep_ioctl+0x1c0/0x1c0
[  227.123466][ T5782]  path_openat+0x284f/0x3270
[  227.128078][ T5782]  ? do_sys_openat2+0xda/0x1d0
[  227.132905][ T5782]  ? __x64_sys_openat+0x139/0x160
[  227.137959][ T5782]  ? verify_lock_unused+0x140/0x140
[  227.143174][ T5782]  ? do_filp_open+0x430/0x430
[  227.147873][ T5782]  do_filp_open+0x1f2/0x430
[  227.152395][ T5782]  ? vfs_tmpfile+0x620/0x620
[  227.157006][ T5782]  ? _raw_spin_unlock+0x28/0x40
[  227.161919][ T5782]  ? alloc_fd+0x590/0x640
[  227.166296][ T5782]  do_sys_openat2+0x134/0x1d0
[  227.171000][ T5782]  ? do_sys_open+0xe0/0xe0
[  227.175434][ T5782]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  227.181433][ T5782]  ? fsnotify_link_count+0xf0/0xf0
[  227.186558][ T5782]  ? lock_chain_count+0x20/0x20
[  227.191421][ T5782]  __x64_sys_openat+0x139/0x160
[  227.196294][ T5782]  do_syscall_64+0x55/0xb0
[  227.200728][ T5782]  ? clear_bhb_loop+0x40/0x90
[  227.205448][ T5782]  ? clear_bhb_loop+0x40/0x90
[  227.210144][ T5782]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  227.216145][ T5782] RIP: 0033:0x7fe0e2b5e98e
[  227.220577][ T5782] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  227.240195][ T5782] RSP: 002b:00007ffe2c637398 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  227.248642][ T5782] RAX: ffffffffffffffda RBX: 0000555579f05500 RCX: 00007fe0e2b5e98e
[  227.256673][ T5782] RDX: 0000000000000000 RSI: 00007ffe2c637500 RDI: ffffffffffffff9c
[  227.264671][ T5782] RBP: 00007ffe2c637500 R08: 0000000000000000 R09: 0000000000000000
[  227.272676][ T5782] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe2c6385f0
[  227.280670][ T5782] R13: 00007fe0e2c3448b R14: 0000555579f054e8 R15: 0000000000000006
[  227.288668][ T5782]  </TASK>
[  227.292310][ T5782] Kernel Offset: disabled
[  227.296649][ T5782] Rebooting in 86400 seconds..