last executing test programs:

3m55.977564429s ago: executing program 3 (id=48):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'})
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x0, 0x80, 0x3, {0x0, 0xea60}, {0x0, 0x2710}, {0x3, 0x1, 0x0, 0x1}, 0x1, @can={{0x3, 0x1, 0x1, 0x1}, 0x2, 0x0, 0x0, 0x0, "fd53a9075c52f353"}}, 0x48}, 0x1, 0x0, 0x0, 0x24008080}, 0x20000040)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000180)={0x9, 0x400, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x0, 0x76a})
socket$kcm(0x10, 0x2, 0x0)
r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000080)=0x3ff)
write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)

3m41.792086274s ago: executing program 3 (id=73):
socket$netlink(0x10, 0x3, 0x0)
r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00')
openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000010c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}})
read$FUSE(r1, &(0x7f0000002100)={0x2020, 0x0, <r2=>0x0}, 0x2020)
syz_fuse_handle_req(r1, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r1, &(0x7f0000000180)={0x50, 0x0, r2, {0x7, 0x2b, 0x4, 0x19401804, 0x2, 0x1a, 0x6, 0xcccb, 0x0, 0x0, 0x1, 0x8001}}, 0x50)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
close(r1)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x20842, 0x110)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000020, 0x11, r3, 0xa64c000)
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000)

3m40.211657024s ago: executing program 3 (id=75):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x180, 0x0)
close(r1)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x7fffe, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {0xb, 0xb}, {0x0, 0x8}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x404c800}, 0x400c000)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r5=>0x0})
sendto$packet(r0, &(0x7f00000002c0)="05031620d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14)

3m36.628269854s ago: executing program 3 (id=80):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
writev(r0, &(0x7f0000001b00)=[{&(0x7f0000000140)="85cb7c0b3684a226c394c9c6b3d9f384192f756b8d2ae9270d5a503bc49aa28222848db24a64", 0x26}, {&(0x7f0000000200)="c59c80232a839af3136dbd9b6239272ef3d1c48a3597e8be14d55890d4e392e5feb6630aafeb7b4d49066dd8a340bd27b29fcbe92c341cb64da72004b1060e481aa7587c978fcdd97f4a429aeb4369580149bb4cf5f7dfca887018961b4642af525663069c4ae6708fb83751109c19f16a80ec71b07a5cfa549a6651242a157d1e2d487841a35b59edbcb233", 0x8c}, {&(0x7f0000000340)="7560762b28700de3f6f724c5a55830535dd9540f20e0d2d76025ef1886a33a218d44587ccfd369b6d9f12505ab3b74e950573391cb3f7e08450b8edbeeeaf9ce308c621256462cc358ee6e66ed978e0cccabbdbeb3d3930c2677827e1e5920d7673be5330d777e3b7ea9a772d7eea8a63e74c4dbfd95698043aeb9bf1f", 0x7d}, {&(0x7f00000005c0)="269cd01a67c01be96ac222af4dcc4a6b843f30453b3da7294b614c19c7da7743415a4c3c2da1969e3ba5e66aa09c811ba0902553cb6926ad0432254b68f6ca2680517517ab89586a2de0978ecf48c7357063f714572f2fd09d97662add29eca47bcc54806253db0b3b7eb030729d772bb2c847e7d301c3dab50d70c0c093001e5e38d15f9cfb07d8b690e38672670b446faa087b93c35cf6b0037c7cae36d1b6acb2db3654b7bec839d2770aad4bddc10241221a231890e56fbf4573c178aa12c9455d70c9a445680b8e684184abd7110240ca7516f6dfe02f251bce879ad149334e40eb9bc5fb3de7abc865626cdd129b8e395b221d4c605e240f61f6a0a7bff4dd2a3db77b3fe78cd7c510671f5095fb8888c24e68996997db24299d690237cd6ee967507e632cf5c76d829d69003bd80b20ff162025b0cdb01074948ac38e76f0cbeaee6deb483291e56fb0fd4f56ec1cd199412e244c7d9b9d32f1096ff52842288149ee18ede572eff7ffc1bcd2a232305f2f4ecf285441ec88d4b25a9ede52943014081e79285d2d7571c6a2483905914df62cc9e05800d37e71b5d16345b96654718aa2267f211b1398f47880080315e2d39f9d2f58f20ac81a4a65ce2b832e94cb9d748a3a09269698eb8d2830f68ed6b26c009e55c8409c98f8284c72786cf2e524d9d5d754eac127b8ee2f23885d61cb6d9c5b62d7c34e099d8e6a57f30b092e8bd426518329ba9c6b89f816286ff67c358385f21bb2b3fa60ed81225e9bdf087a2cf258054112c02b75cee28a2d9c3be38a8aa377468bdcbd416776bd3f2e76945ca4597523e7623d3101033acbc97f58ee2ff6eb5104e8d32675f2bd36395a5d188f0f9f4bebfe3b74f435598864bff118634f318cb7d27704fd2dee6e5d00c5ec0ace3bab8c2556cefa2f03a55f9a3ab623ab4ea8956b3bed229aaf1c3dd74f96f7c1ef8ea3c639eb41c73dcdbe84a15a40bde54cf83c8598f34c5c837835aeaad9ad09237c6592751897736b01958e782a98abcae62a980aeb6001562ad1b945b62f394eb303a33d98f77af4ffb6421a8ad853d198f7f86e9be2ffbeb1188a36d62ed9e27199e65e91ab790e2e21be7143e697f7eb33477d533e7498389ac19e8f135b5d375ed172f0c1ecd3b1d5e75a5b1774d4c8ad9275a91d2276c862362072356bdda8f8bad0dcf6b018614bc3f5bac868d61a870afd26df2e778344bf3f7a06bbfcb824396921fd7b7f84a2f3c7af6a33c9e954017242621ec1d8e2221e0d2bbcb42920d2b2dd094eee847e2675babbdeaf4017e8e545ebfbed94cd8683e8b591bd5993bb92da3e6c485e6cfc9b14925e227fad362e1383efbe17ad9c8f3fb3addd4bb9f8583a257dbbb2c604d7ff1b9992f82fc031536a2ba47f09b408a187c6203cadcde143f1f24f4c579b9a9db703b7c069d40682515ecf668a586899abf367698c6f78779ef8e19250b6b98fc939a2fcbbffb58a14d90dd9cc9649ac4d0c2d90d7c16fae4acc4a4ba59b5ff35754f7f530861ee4692edfb9d5afbc32b00235fb809bc199317a834136ff928249f9bae645862427cf01b947ed20e9473ef22373851102134e4e24f3b8c8443296b96ef71911ba8b80985a87ffcee620b5ab468914cad054cc8fbbfcbb6dacc185714891e7623a299a497c6418dacace2fdec6117e48eae97fb6c56dedbbb579d30695a52cb930859775a5a2bb848baab4de4a20bb222a636d0c537d08c500de713f64afc2bef6852994dabc77b30fa53ac726b74efeba6057108b3ebabfd8b4ef305b8c789bef7bf20e2f269bee925b8d46a67ef95416cec01e1c5408e598267ff7eca3ee2462c5d421701741fb8f6799ecb5088f31174cfe7fdaa36845c1e15718f35829e1add0afa0f71b05eb518f2da608fb996d1e165f5e2d95fcf0399585819b2cf3ef37a499f02b9ccb6cd6c15c2b6b54cda417d0a1dd30db055f64cfde35de57ba03644087e786bfb55657588df3f0cdc98b027c77544a306f5a2afe948974f31b8a73ed7743581d33dbdfe22d6319404bb83e31d9b3abc8280e94933706f94e1b7b6fc917f7390a2d2c36bb35d0beb9de96db2e0017fa48968333f5de7dc79e222d648c822ee436a026d32b9a26688582749b00d3171858e2ed6dca84ea083ea03343a65b45a458c43ea78d45ac8aef470a752ee73b6d9b22370325baafc654b428689abd7e36caf197244bd45c42a69c465f884290d4371c18fbab012be4e5c8c0848178a3ffe45871e748a77854a1250a259ec2feec4eb69f880992e46671d0a0f06f742fc5b7ee6589e589edeb289b6c66d59c7b827c5285fb9ffafe282653822e2ca9afb7fd724f0cb2dc0bc6b6182ab1ae0dd1322c5a154aafad84e92053e86f6baa570e20df2c8cdb01c984f58fdd24a567fb858e1dc65e29dce74a5fc76fe00e3393fa99e81255d2855b797f601e8fbd173ceaf2d2725fcd75a4c7d8cb99215bc75b9efa177da3e8a12407dc69f282311c3d2b9fa34de8599ce2b750e8bd9d3649507c3133acbc9da94afc86878a1cc35c20b391147ab77b93db52b7a878900da48dde2820ade1b70304d08176de8cd5a611fc3f90f176968b390b056493cc881c1d4c4bea2bbd367228e333e48320dc9203e1b9a43025d6790304cc3c148617adf125883d49fb164f396360c5e66eb08e9183cd9c878b08dc7591da4cfe313af70d92c478e2ec948cb006b7586bcf2dab84532043333163cacf64ef97c5fa614f04ed3717aca47755b57f828d72fecfc9d7ed0a1019c1125d9cf577e4c681bd95939751faf387ba55473c1704df3f81eb646f00f84de1330864b23482c45f17a49efba0492acaecc065719063cd1599af118c0e54417c377215182366dcdffa74745a5f7b832f16bcb623030826ee77eaf518a43fc740f4a3a2991802f65434ba962ae0be4b36ed4b5295314d83a691249ed575ab54a3c035caa3f2afda6b0e048b489c66631c10bdf3be8d7a0094a09f35752e3958f541207a66836627297c21365ca6f84cbd6b8303f24bd7b1436e531a8d48c0406eb5c5158d17892e812c2fc55c7464c1d360641f1b2e21ac8774cacb44aedc738dedc07096cf77dced47d0ab69ab912a7cd9db1e7089fabd63bc5f3c53a4d7a0b5375cbc264f227de273fe8e8fdb6f9afe4aff48c491e34a9c1d381810ead6f69382b87d6e909a330be931a362e15005ffbe3fce1aca5e33736ce8d7cb56b593da7771aa85c578d339bff1bd316b3ae01d7d01f60aa7008b8147f5f9037825d9ac0bfe0616ea73e835220be58e01b6959ac54f1c21fa3692b36b70a589fd521d18ab91132a60ca6fdf6dedc398edf24f3d44e43ca60ce4320b884b302aebea4fbcb8f37444a64a1836def01c66a9dbf5f59e8c1d01ed0e83ea869dd4c87021afc75146d6ba9bc367bfe7fb3142aef6a1f871ba959703f61504283d2b04ec66da585e99702580c1ee35a39116172fda99aa0015a3a37a5398b97f4ab2650ddcb701f5dcdfeaad9e80d510ae85c590edd2b60570c01dec36902e7105825c2b63fba2dbbf9023118f1585942acbdc89ccc28b1f33bf35c6fb6960b76e84c3a5158168c98ea3beb28f5994c371d60fe2025a0b2f2df12c133877a20396dec74285fcf37a19f66eef6e824917da8d4afe6bad9401533a1e1ac9b36a21867ae6874e98c8a22a0251a3be96a9580a6c45d2271d0ad91002a38d2edf088e7f79d1ed2e6e86af5afc5f0de9c42c7ffda68fa66f1965796f16784ccd399021d309c0a6701be99941263504e462b8a41dc8b587bb579d13a3dc07071f6af8e386d1a6ee0299612d3c5e8847dd612409b385c86b4f82eb155258fe9f80568ed5d806455187cfdbca7b7b270aa27d15dab5a6595d59992384f8cf2bc25fe1ee282a3ccd85d15c887c1afdd7a61ab8bc5d3661f7c1ed365b07fbdbbe44bd16894f5f6f79b8fc5aaf4c8fc98fada2e8b13062d73055cf915a44e7ff2db86ff316f4ffc47be683b79168ec53414f911aeaa19125ba37dc8446f2c3dd8752390a9f812feb7720f4fe304d7fc1cab94dd49c9bc4e85c368c4d56087144ccafd73202922fd5c2fa6601957c8396c81c60679efa4cb1e50cce4ceb88a665a460996a0b2279001eb5801b2564808500eb34025b9b06620b763b0be139b662206c9697ce294aa6c607a5d4022e26cd3cd177fed8e5a61fbe983e40de4669e36b6c79e8ea6f39de71b2ba0c3bde8a96ff48b7b7347ef13faf21477d6e67e77c69358e8c03b2af7e177a0c21ea6a5ab36bee291ec9e9596deac426c9ce4311b201cebb1ee0fa883b4d5d9c4594f478205b8032f2ba1a66779e5352a65bc5ef3343e2465c67fce3c7e40c0cd0863723d2accb384504c47ac45569b93abc0128094077dfbf8bf023ee511d327f5f0682e6ee1768bf9fca4c0c7443e3801d630cb587c622ad8c0b1f888e72b8f417e4ac30f75c096cf674683fb8c4547231c26db0a90093036a35d814f36a08c1c6057e145412e2e281e6afc3fe8a62141d799e9e9fca9e9e23e116ece9590f04ae0b3b0706df023ff0d8958f78ed24afad1231ca5b6bb17f8d575e770ced07c5ef3943c9f15430a668e716c984e0cc2086aaf502e2cc8248d80888b1e6203c3017af8d1d814d974631217b6505d3d1a9348e4662bb8a5922014fbb005ced5e88f70aa199f9df30df28948051a69ddf875ae64c76c0dbd6c1c89321abc826232d71d640163de55f5b361da33c243ea630557f074f940bac276d2e01484927c542b6d7ff00b05a309c1cc2511aaf3e538d865ae1412bac2df10efe39c6c5709e93ccad2c9b632aaed4deeee24fdd5e031339fee3d9e866501f60f538e3263c7ce6da1e16aeff3a1a7da5fc5b924bd0ee4eb389e206678e1d8163b1d126e4f38992619d3a6957ec9e3b3ae8ca732375a7650c205008b7dd1205d220ae578adfefba2c30a8f9e6bcd2507ad9094484da39f34d959ee7298abf3cc8e1e7357e04fcf2840630f5ee17cfdde3df6a932821", 0xde4}], 0x4)
ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0)

3m34.681021048s ago: executing program 3 (id=83):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x734}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sched_getaffinity(r1, 0x0, 0x0)
connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/15], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r6 = openat$qrtrtun(0xffffff9c, 0x0, 0x400002)
read$qrtrtun(r6, 0x0, 0x0)

3m29.855852256s ago: executing program 3 (id=88):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sched_setscheduler(0x0, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYRES16=r0, @ANYRES32, @ANYBLOB, @ANYRES32=r0, @ANYRES32, @ANYBLOB="0000000000000000030000000000000000efff000000000000000000"], 0x50)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000000)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x7ff}, 0x3c)
setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
ptrace$pokeuser(0x6, r2, 0x358, 0x4)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8)
prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0)
timer_create(0x7, 0x0, &(0x7f0000000180)=<r4=>0x0)
timer_settime(r4, 0x1, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_settime(r4, 0x0, 0x0, &(0x7f0000000200))
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a000000d80000000400000001"], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r5, &(0x7f00000001c0), &(0x7f0000000000), 0x2}, 0x20)

3m13.693471316s ago: executing program 32 (id=88):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sched_setscheduler(0x0, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYRES16=r0, @ANYRES32, @ANYBLOB, @ANYRES32=r0, @ANYRES32, @ANYBLOB="0000000000000000030000000000000000efff000000000000000000"], 0x50)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000000)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x7ff}, 0x3c)
setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
ptrace$pokeuser(0x6, r2, 0x358, 0x4)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8)
prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0)
timer_create(0x7, 0x0, &(0x7f0000000180)=<r4=>0x0)
timer_settime(r4, 0x1, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_settime(r4, 0x0, 0x0, &(0x7f0000000200))
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a000000d80000000400000001"], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r5, &(0x7f00000001c0), &(0x7f0000000000), 0x2}, 0x20)

2m15.598149274s ago: executing program 0 (id=230):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed)
mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/11/smp_affinity\x00', 0x1, 0x0)
write$cgroup_pid(r0, &(0x7f0000000400), 0x12)

2m13.763842199s ago: executing program 0 (id=232):
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x311000, 0x1000, 0x40000, 0x1}, 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
keyctl$update(0x2, 0x0, 0x0, 0x40)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x5, 0x7, 0xc1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r4}, 0x38)

2m8.69442608s ago: executing program 0 (id=236):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x8, &(0x7f0000000100)=0x3)
r4 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff)
mkdir(&(0x7f0000000800)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x1, 0x0)
write(r5, &(0x7f0000000c00)='1', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
openat$pidfd(0xffffffffffffff9c, 0x0, 0x100, 0x0)
fchdir(0xffffffffffffffff)
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0)

2m5.805296136s ago: executing program 0 (id=245):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x80, &(0x7f00000002c0)=ANY=[])
read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, r3, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50)
openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18)
prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
read$msr(r4, &(0x7f0000000d40)=""/43, 0x2b)

2m3.155441133s ago: executing program 0 (id=250):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
dup3(r1, r0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)
madvise(&(0x7f00003c1000/0x1000)=nil, 0xdfc3efff, 0x14)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r3 = getpgrp(0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000300))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

1m58.360710003s ago: executing program 0 (id=253):
r0 = getpid()
prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r4 = socket$inet6(0xa, 0x2, 0x3a)
sendto$inet6(r4, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0)
recvmmsg(r3, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x8}], 0x2, 0x10170, 0x0)

1m41.81353277s ago: executing program 33 (id=253):
r0 = getpid()
prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r4 = socket$inet6(0xa, 0x2, 0x3a)
sendto$inet6(r4, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0)
recvmmsg(r3, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x8}], 0x2, 0x10170, 0x0)

44.779971539s ago: executing program 7 (id=462):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/lvs/new_id\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='1d6b 0003 0\x00', 0xc)
close(r0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/hub/unbind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='2-0:1.0\x00', 0x7)

44.435847958s ago: executing program 7 (id=466):
pipe2(&(0x7f0000000040)={<r0=>0xffffffffffffffff}, 0x80000)
r1 = getpid()
kcmp(r1, r1, 0x5, 0xffffffffffffffff, 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0))
r2 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000040)={0x2, 'veth0_vlan\x00', {0x2}, 0xa})
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r6)
openat$pfkey(0xffffffffffffff9c, 0x0, 0x100, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
getpriority(0x2, r6)
ptrace$pokeuser(0x6, r6, 0x388, 0x41d9fda7)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@remote, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4000}]}]}, 0xfc}}, 0x0)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r8, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10)
setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_1\x00', 0x10)
sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x810)

41.892808946s ago: executing program 7 (id=471):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x20000023896)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000380)={'filter\x00', 0x7, 0x4, 0x3c8, 0xe8, 0xe8, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, &(0x7f0000000080), {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@random="1e026bd068ef", @multicast2, @multicast1, 0xf, 0xffffffff}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x7, 0x6, 0x3}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418)
sendmsg$nl_xfrm(r2, 0x0, 0x40084)
syz_emit_ethernet(0x3e, &(0x7f0000000800)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3d86dd6c168bc700fffffffffffffffa0000a842160bfd3ffe6b777cc6000000fefffffffeff000000c1000000000000000000"], 0x0)
timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0xf, 0x40, 0x6, 0x3, 0x4, "a0e1c6beeb439eff56c42676bae174bc012837"})

40.218599207s ago: executing program 7 (id=476):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a})
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes256, 0x0, '\x00', @a})
chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00')
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x139)
ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae5c70f20ff8ee09e737ff0edf1139c2eb4b68c660e677df7019051caafa00afaaf755a314a10400", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a323ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000522100000001", [0x8, 0x100]})
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r1, 0xc0406619, &(0x7f0000000080)={@id={0x2, 0x0, @a}})

38.732734212s ago: executing program 7 (id=480):
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
connect$rds(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10)
getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2)
socket$inet6(0xa, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x20000810}, 0x20000000)
mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB])
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000080)=0x60, 0x2)

33.38710825s ago: executing program 7 (id=496):
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x1}, 0x1c)
splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x6)
sendto$inet6(r1, 0x0, 0x0, 0x24004041, 0x0, 0x0)

31.398950221s ago: executing program 34 (id=496):
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x1}, 0x1c)
splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x6)
sendto$inet6(r1, 0x0, 0x0, 0x24004041, 0x0, 0x0)

19.279369157s ago: executing program 2 (id=518):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xe9, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x240440d0)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r3, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10)
r4 = socket$inet(0x2, 0x801, 0x0)
bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r4, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
shutdown(r4, 0x1)

18.659928739s ago: executing program 2 (id=520):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x734}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sched_getaffinity(r1, 0x0, 0x0)
connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1b000000000000000000000000000400000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/15], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r6 = openat$qrtrtun(0xffffff9c, 0x0, 0x400002)
read$qrtrtun(r6, 0x0, 0x0)

14.557977429s ago: executing program 1 (id=524):
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x8, &(0x7f0000000000)=ANY=[], 0x0, 0x8341, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7f, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x9, 0x1, 0x8, 0x40, 0x42, 0x1}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d40)=ANY=[], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xd, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b9", 0x0, 0x81ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)
syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score\x00')
pread64(r6, &(0x7f0000000f80)=""/212, 0xd4, 0xffffffff)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=ANY=[@ANYBLOB="780000001600000426bd7000fddbdf250a801500", @ANYRES32=0x0, @ANYBLOB="14000200fc0000000000000000000000000000010000010000000000000000000000ffffac1e0001140006000800000004000000ad1e00000800000014000600d828e973000100000800000003000000f0ff09000000008008000a0000000000a079f6c37cdcc1308ab9fa6ff5f8c73a6d876b3c04f742d03be89c4eb6f72ad11a24075bc5cbe69002b44fcf5a5d5288216794a4c77241a10918f64dbfe6d7a4539915f3b9f5"], 0x78}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0)
syz_usb_connect(0x3, 0x4a, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r7=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x403, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x5e801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x48}}, 0x440088c4)
ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000340))

13.407188261s ago: executing program 5 (id=527):
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0])
read$FUSE(0xffffffffffffffff, &(0x7f0000002980)={0x2020}, 0x2020)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x101})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000)
r0 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24058041)
r1 = io_uring_setup(0x7, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)
read$FUSE(r0, &(0x7f00000008c0)={0x2020}, 0xfffffef0)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x12)

13.094645007s ago: executing program 2 (id=529):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)

13.091813778s ago: executing program 6 (id=530):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/lvs/new_id\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='1d6b 0003 0\x00', 0xc)
close(r0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/hub/unbind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='2-0:1.0\x00', 0x7)
close(r1)
write(0xffffffffffffffff, &(0x7f0000000200)='2-0:1.0\x00', 0x7)

10.687728662s ago: executing program 5 (id=532):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0x1ff)
symlinkat(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1/phonet.usb0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r0, &(0x7f0000000280)='dummy_udc.0', 0xb)
write(r0, &(0x7f00000002c0)='\n', 0x1)

10.198473638s ago: executing program 4 (id=534):
r0 = socket$inet6(0xa, 0x802, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x1c)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000100)=ANY=[], 0x28)
sendmmsg$inet6(r0, &(0x7f0000002940), 0x40000000000017d, 0x888)

10.029242239s ago: executing program 2 (id=535):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="280300", @ANYRES32=0x0, @ANYBLOB="0004000091f90000140003006272696467655f736c6176655f310000880018800400018080000180070002002cf4000008000100000000000800010004000000140004006938bfe7c3b8ae42240b16c0ed6b8768140004000c9b73b021b79fd2025f27082114a6d0140004009feccbb316587f1fafb7dbd8e9ed8d8d14000400f33646b47b166d68a8a26e25f05ece0a130002006272696467655f736c6176655f31000005002700060000000a000100c28360e46eb900000a0002"], 0x328}, 0x1, 0x0, 0x0, 0x4040010}, 0x400c010)
r2 = socket$inet6(0xa, 0x80002, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$eJzs3cFvG1kZAPBvnLhJs+mmC3sABGxZFgqq6iTubrTqhfYCQlUlRMWJQxsSN4pi11Hsiib0kB65V6ISJ+A/4MYBqScO3LjBjUs5IBWoQA0SB6MZT1I3sZNAnbiJfz9pMvPeTP29F/e953mR5wUwtC5ExGZEnImIOxExlecn+RbX2lt63csXDxe2XjxcSKLVuvX3JDuf5kXHv0m9k7/meER8/zsRP0r2xm2sb6zMV6uVtTw93aytTjfWNy4vF/Kc8tzs3MynVz4p962uH9R+/fzbyzd+8NvffOnZHza/+ZO0WJM/PZed66xHP7WrXozJjrzRiLhxFMEGZDT//8PJk7a2z0TEh1n7n4qR7N0EAE6zVmsqWlOdaQDgtEvv/ycjKZTyuYDJKBRKpfYc3vsxUajWG81LU/X79xYjm8M6H8XC3eVqZSafKzwfxSRNz2bHr9Ll19KPK1ci4r2IeDx2NjtfWqhXFwf5wQcAhtg7u8b/f421x/9OxUEVDgA4OuODLgAAcOyM/wAwfIz/ADB8/ofx37cDAeCUcP8PAMPH+A8Aw+fA8f/R8ZQDADgW37t5M91aW+3nX28/qfvyYqWxUqrdXygt1NdWS0v1+lK1UlpotQ56vWq9vjr78U6ysb5xu1a/f695e7k2v1S5XfEsAQAYvPc+ePqndNDfvHo226JjLQdjNZxuhUEXABiYkUEXABgY3+eB4XWIe3zTAHDKdVmity2fIEh6XfDE4q9wUl38vPl/GFZvMv9v7gBOtv9v/v9bfS8HcPyM4TC8Wq3Emv8AMGTM8QM9//6f6/mIkCf9LwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcFJPZlhRK2Vrgm+nPQqkUcS4izkcxubtcrcxExLsR8cex4lianh10oQGAN1T4a5Kv/3Vx6qPJ3WfPJP8ey/YR8eOf3/rZg/lmc202zf/HTn7zSZp/trlWPjOICgAAna7tzcrG73K+77iRf/ni4cL2dpxFfH69vbhoGncr39pnRmM0249HMSIm/pnk6bb088pIH+JvPoqIz23XfzwedESYzOZA2iuf7o6fxj7X9/idv//d8Quv1beQnUv3xex38dnYVTjgQE+vt/vJvO2lTTxvf4W4kO27t//xrId6c2n/lzbXrT39X2Gn/xvZEz/J2vyFnfT+JXn+8e++uyezNdU+9yjiC6Pd4ic78ZPu/W/xo0PW8c9f/PKHvc61fhFxsWv9t1ekrmXd7HSztjrdWN+4vFybX6osVe6Vy3OzczOfXvmkPJ3NUbd//r5bjL9dvfRur/hp/Sd6xB/fv/7xtUPW/5f/ufPDr+wT/xtf7f7+v79P/HRM/Poh489PXOu5fHcaf7FH/Q94/+PSIeM/+8vG4iEvBQCOQWN9Y2W+Wq2sHXCQftY86BoHhz9I7+3fgmJkB7EZ0a8XzCYlIqLrNekn6rejykd1kAws+q/6/YKD7pmAo/aq0Q+6JAAAAAAAAAAAAAAAQC+N9Y2Vse7f1urbwaDrCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOn13wAAAP//KHnENg==")
add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
splice(r3, 0x0, r3, 0x0, 0x2, 0x8)
r4 = getpid()
sched_setaffinity(0x0, 0x4f, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x1, &(0x7f0000000240)=0x7)
sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0}, 0x100)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, 0x0)
sendmmsg$inet6(r2, 0x0, 0x0, 0x4001c00)
r7 = open(&(0x7f0000000100)='./file1\x00', 0x147842, 0x88)
preadv2(r7, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x7)

9.995032524s ago: executing program 4 (id=536):
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
connect$rds(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10)
getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2)
socket$inet6(0xa, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x20000810}, 0x20000000)
mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB])
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000080)=0x60, 0x2)

9.781432072s ago: executing program 4 (id=537):
syz_emit_ethernet(0x14, &(0x7f0000000040)={@local, @dev, @void, {@generic={0x8863, "d0a70ca9c1aa"}}}, 0x0)
syz_io_uring_setup(0x2, &(0x7f0000000580)={0x0, 0x8b2, 0x13500, 0x0, 0x304}, &(0x7f0000000240), &(0x7f0000001880), &(0x7f0000000000))
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000085000000070000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, &(0x7f0000000080), &(0x7f0000000200)=r0}, 0x20)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000e4c5ad101d0620c0159c010203010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000340)=ANY=[@ANYBLOB="000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$uac3(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000140)={0x0, 0x7, 0x37, "f958ef608b3274b11ce60c549ce3fa80fabf3d12b89cc63d015688866f23ee79770103757a42e05e5f12c94df8f002c1bff9d402281643"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xe0}, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="a6ca047d544ae7ec42b4997c94250a3fcc261d15276014a0837fb9feccd75738a12c4b8a0ee8029580de6f"], &(0x7f00000002c0)={0x20, 0x83, 0x2, "b171"}, &(0x7f0000000300)={0x20, 0x84, 0x3, 'AB\f'}, &(0x7f0000000380)={0x20, 0x85, 0x3, "fad4c0"}})

9.646501547s ago: executing program 6 (id=538):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r0, 0x6, 0x7ff, 0x4, 0x5})
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, 0x0)
read(r0, &(0x7f0000000840)=""/40, 0x28)
r1 = openat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x280, 0x100, 0x14}, 0x18)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x4048012)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil)
r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$FS_IOC_SETFLAGS(r4, 0x40186f40, &(0x7f0000000440)=0x20000)

8.211932753s ago: executing program 5 (id=539):
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r3, &(0x7f0000000000)="b8", 0x1, 0x2400a044, 0x0, 0x0)
r4 = socket$inet6(0x10, 0x2, 0x4)
sendto$inet6(r4, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x810, 0x0, 0x0)

7.929062383s ago: executing program 1 (id=540):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x734}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sched_getaffinity(r1, 0x0, 0x0)
connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1b000000000000000000000000000400000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/15], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r6 = openat$qrtrtun(0xffffff9c, 0x0, 0x400002)
read$qrtrtun(r6, 0x0, 0x0)

7.040102746s ago: executing program 2 (id=541):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r2, 0x16, 0x0, @void}, 0x10)
socket$igmp(0x2, 0x3, 0x2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000004c0)={0x0, 0xff08, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="4000000001010101000000000000000002001c002000018006000340000000001400018008c301007f000001080002007f0000010c00198008000100", @ANYRES64=r3], 0x40}, 0x1, 0x0, 0x0, 0x4004410}, 0x0)

4.89685587s ago: executing program 1 (id=542):
sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[], 0x88}}, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x4000000, 0x0, 0x0}, 0x0)

4.84661186s ago: executing program 5 (id=543):
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0])
read$FUSE(0xffffffffffffffff, &(0x7f0000002980)={0x2020}, 0x2020)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x101})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000)
r0 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24058041)
r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)
read$FUSE(r0, &(0x7f00000008c0)={0x2020}, 0xfffffef0)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x12)

4.735185517s ago: executing program 4 (id=544):
unshare(0x20000)
mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='nodev\x00', &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x1, 0x0)
write(r0, &(0x7f0000000500)='oom_score_adj & 100\x00', 0x13)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='my_tracefs/events/task/task_rename/enable\x00', 0x1, 0x0)
write(r1, &(0x7f0000000700)='1\x00', 0x1)
close(r1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000800)='new_name\x00')

4.684393964s ago: executing program 6 (id=545):
r0 = gettid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0xffffffffffffffff)
fcntl$setsig(r1, 0xa, 0x12)
ppoll(&(0x7f0000000100)=[{r2}], 0x1, 0x0, 0x0, 0x0)
dup2(r1, r2)
fcntl$setown(r2, 0x8, r0)
r3 = gettid()
tkill(r3, 0x13)

4.494315255s ago: executing program 1 (id=546):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)

4.370236741s ago: executing program 2 (id=547):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r1=>0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r1, 0x1, 0x0, 0x0)
r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
read$watch_queue(r2, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0xc0000)
rt_sigprocmask(0x0, 0x0, 0x0, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
socket$packet(0x11, 0x3, 0x300)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0xc30e3000, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder1\x00', 0x800, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)

4.361244166s ago: executing program 4 (id=548):
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
connect$rds(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10)
getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet6(0xa, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x20000000)
mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB])
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000080)=0x60, 0x2)

4.132863306s ago: executing program 6 (id=549):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/lvs/new_id\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='1d6b 0003 0\x00', 0xc)
close(r0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/hub/unbind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='2-0:1.0\x00', 0x7)
close(r1)
write(0xffffffffffffffff, &(0x7f0000000200)='2-0:1.0\x00', 0x7)

3.081390869s ago: executing program 6 (id=550):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmmsg$inet(r0, &(0x7f00000027c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000003ac0)="bb", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="0000585195c18b846c30882ada03476b025b0800000000000000fa6303d4808d2b4955ec", 0x24}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000480)="e73bc4d48202baeab155a2ae016656a5700b28e14b271fac", 0x18}, {&(0x7f0000001140)="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", 0x12d}, {&(0x7f00000001c0)}], 0x3}}], 0x3, 0x60cd094)

3.02411454s ago: executing program 4 (id=551):
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x8, &(0x7f0000000000)=ANY=[], 0x0, 0x8341, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7f, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x9, 0x1, 0x8, 0x40, 0x42, 0x1}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d40)=ANY=[], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xd, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b9", 0x0, 0x81ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)
syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score\x00')
pread64(r6, &(0x7f0000000f80)=""/212, 0xd4, 0xffffffff)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=ANY=[@ANYBLOB="780000001600000426bd7000fddbdf250a801500", @ANYRES32=0x0, @ANYBLOB="14000200fc0000000000000000000000000000010000010000000000000000000000ffffac1e0001140006000800000004000000ad1e00000800000014000600d828e973000100000800000003000000f0ff09000000008008000a0000000000a079f6c37cdcc1308ab9fa6ff5f8c73a6d876b3c04f742d03be89c4eb6f72ad11a24075bc5cbe69002b44fcf5a5d5288216794a4c77241a10918f64dbfe6d7a4539915f3b9f5"], 0x78}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0)
syz_usb_connect(0x3, 0x4a, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r7=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x403, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x5e801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x48}}, 0x440088c4)
ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000340))

2.720649731s ago: executing program 6 (id=552):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ed)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ed)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/rndis.rn0\x00', 0x1ed)
symlinkat(&(0x7f0000000180)='./config/usb_gadget/g1/functions/rndis.rn0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1/rndis.rn0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r0, &(0x7f00000002c0)='dummy_udc.0\n\x00', 0xc)
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ed)
mount(0x0, &(0x7f0000000340)='./proc\x00', &(0x7f0000000380)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/driver/rndis-000\x00', 0x0, 0x0)
read(r1, &(0x7f0000000400)=""/100, 0x64)

2.463121725s ago: executing program 1 (id=553):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x734}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sched_getaffinity(r1, 0x0, 0x0)
connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1b000000000000000000000000000400000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/15], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r6 = openat$qrtrtun(0xffffff9c, 0x0, 0x400002)
read$qrtrtun(r6, 0x0, 0x0)

2.375073882s ago: executing program 5 (id=554):
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r0 = userfaultfd(0x80001)
io_setup(0x8, 0x0)
io_submit(0x0, 0x1, &(0x7f0000004540)=[0x0])
ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r4, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYRES32=r5, @ANYBLOB='\a'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r4}, 0x20)
sendmmsg$inet6(r4, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}, 0x18020000}, {{0x0, 0x0, &(0x7f0000000480)}}], 0x56, 0x10)
r6 = syz_open_dev$swradio(&(0x7f0000000140), 0x1, 0x2)
r7 = dup(r6)
read(r7, &(0x7f0000000040), 0x0)
ioctl$VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000000)={0xf0f046})
poll(&(0x7f0000000180)=[{r6, 0x3}], 0x1, 0x9)

1.1699206s ago: executing program 5 (id=555):
syz_emit_ethernet(0x14, &(0x7f0000000040)={@local, @dev, @void, {@generic={0x8863, "d0a70ca9c1aa"}}}, 0x0)
syz_io_uring_setup(0x2, &(0x7f0000000580)={0x0, 0x8b2, 0x13500, 0x0, 0x304}, &(0x7f0000000240), &(0x7f0000001880), &(0x7f0000000000))
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000085000000070000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, &(0x7f0000000080), &(0x7f0000000200)=r0}, 0x20)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000e4c5ad101d0620c0159c010203010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000340)=ANY=[@ANYBLOB="000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$uac3(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000140)={0x0, 0x7, 0x37, "f958ef608b3274b11ce60c549ce3fa80fabf3d12b89cc63d015688866f23ee79770103757a42e05e5f12c94df8f002c1bff9d402281643"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xe0}, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="a6ca047d544ae7ec42b4997c94250a3fcc261d15276014a0837fb9feccd75738a12c4b8a0ee8029580de6f"], &(0x7f00000002c0)={0x20, 0x83, 0x2, "b171"}, &(0x7f0000000300)={0x20, 0x84, 0x3, 'AB\f'}, &(0x7f0000000380)={0x20, 0x85, 0x3, "fad4c0"}})

0s ago: executing program 1 (id=556):
syz_usb_connect$uac1(0x0, 0x93, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x3, 0x1, 0xd, 0x10, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x1c}, [@feature_unit={0x9, 0x24, 0x6, 0x4, 0x4, 0x1, [0x9]}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x1ff, 0x6, 0x4, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x4, 0xff, 0x1002}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x5, 0x1, 0x4, 0xa}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x2, 0x4, 0x1, {0x7, 0x25, 0x1, 0x4, 0x3, 0x81}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x53, 0x6, 0xfd, {0x7, 0x25, 0x1, 0x8, 0x3, 0x8}}}}}}}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0})

kernel console output (not intermixed with test programs):

0
[  105.575415][ T5630] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  105.586534][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  105.610200][ T5630] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  105.621502][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  105.629786][ T5630] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  105.640384][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  105.737157][ T5632] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  105.755431][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  105.768538][ T5632] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  105.780903][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  105.801485][ T5632] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  105.813908][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  105.836232][ T5632] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  105.842050][ T4938] Bluetooth: hci4: command tx timeout
[  105.851835][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  105.912205][ T5651] Bluetooth: hci1: command tx timeout
[  105.912570][   T51] Bluetooth: hci5: command tx timeout
[  105.917798][ T4938] Bluetooth: hci0: command tx timeout
[  105.926493][   T51] Bluetooth: hci3: command tx timeout
[  105.928754][ T5651] Bluetooth: hci2: command tx timeout
[  105.950046][ T5633] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  105.967325][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  105.977047][ T5633] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  105.987866][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  105.996172][ T5633] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  106.005951][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  106.015674][ T5633] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  106.025955][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  106.144571][ T5629] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  106.156863][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  106.176690][ T5629] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  106.187318][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  106.209581][ T5629] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  106.220926][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  106.245764][ T5629] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  106.258017][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  106.272980][ T5630] 8021q: adding VLAN 0 to HW filter on device bond0
[  106.403363][ T5630] 8021q: adding VLAN 0 to HW filter on device team0
[  106.410483][ T5631] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  106.421692][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  106.430599][ T5631] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  106.442946][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  106.451127][ T5631] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  106.462406][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  106.470865][ T5631] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  106.482799][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  106.509708][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.517412][ T3316] bridge0: port 1(bridge_slave_0) entered forwarding state
[  106.561833][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.569048][ T3316] bridge0: port 2(bridge_slave_1) entered forwarding state
[  106.686896][ T5634] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  106.698403][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  106.727256][ T5634] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  106.739275][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  106.761840][ T5634] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  106.772390][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  106.785405][ T5632] 8021q: adding VLAN 0 to HW filter on device bond0
[  106.802725][ T5634] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  106.814533][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  106.888014][ T5633] 8021q: adding VLAN 0 to HW filter on device bond0
[  106.907588][ T5632] 8021q: adding VLAN 0 to HW filter on device team0
[  106.937082][  T142] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.944275][  T142] bridge0: port 1(bridge_slave_0) entered forwarding state
[  106.998504][  T142] bridge0: port 2(bridge_slave_1) entered blocking state
[  107.005739][  T142] bridge0: port 2(bridge_slave_1) entered forwarding state
[  107.026385][ T5633] 8021q: adding VLAN 0 to HW filter on device team0
[  107.098806][  T146] bridge0: port 1(bridge_slave_0) entered blocking state
[  107.106080][  T146] bridge0: port 1(bridge_slave_0) entered forwarding state
[  107.158855][ T5629] 8021q: adding VLAN 0 to HW filter on device bond0
[  107.181354][  T146] bridge0: port 2(bridge_slave_1) entered blocking state
[  107.188618][  T146] bridge0: port 2(bridge_slave_1) entered forwarding state
[  107.311337][ T5631] 8021q: adding VLAN 0 to HW filter on device bond0
[  107.332948][ T5629] 8021q: adding VLAN 0 to HW filter on device team0
[  107.367079][ T1344] bridge0: port 1(bridge_slave_0) entered blocking state
[  107.374252][ T1344] bridge0: port 1(bridge_slave_0) entered forwarding state
[  107.424033][ T1344] bridge0: port 2(bridge_slave_1) entered blocking state
[  107.431263][ T1344] bridge0: port 2(bridge_slave_1) entered forwarding state
[  107.499625][ T5631] 8021q: adding VLAN 0 to HW filter on device team0
[  107.567044][ T1344] bridge0: port 1(bridge_slave_0) entered blocking state
[  107.574313][ T1344] bridge0: port 1(bridge_slave_0) entered forwarding state
[  107.707287][ T1344] bridge0: port 2(bridge_slave_1) entered blocking state
[  107.714533][ T1344] bridge0: port 2(bridge_slave_1) entered forwarding state
[  107.857135][ T5634] 8021q: adding VLAN 0 to HW filter on device bond0
[  107.912695][ T5651] Bluetooth: hci4: command tx timeout
[  107.993022][ T5651] Bluetooth: hci2: command tx timeout
[  107.999250][ T4938] Bluetooth: hci0: command tx timeout
[  107.999303][ T5641] Bluetooth: hci3: command tx timeout
[  108.005320][ T5651] Bluetooth: hci5: command tx timeout
[  108.010962][   T51] Bluetooth: hci1: command tx timeout
[  108.070913][ T5634] 8021q: adding VLAN 0 to HW filter on device team0
[  108.166581][ T5630] 8021q: adding VLAN 0 to HW filter on device batadv0
[  108.204223][  T146] bridge0: port 1(bridge_slave_0) entered blocking state
[  108.211455][  T146] bridge0: port 1(bridge_slave_0) entered forwarding state
[  108.258018][  T142] bridge0: port 2(bridge_slave_1) entered blocking state
[  108.265285][  T142] bridge0: port 2(bridge_slave_1) entered forwarding state
[  108.680755][ T5630] veth0_vlan: entered promiscuous mode
[  108.789201][ T5630] veth1_vlan: entered promiscuous mode
[  108.990437][ T5632] 8021q: adding VLAN 0 to HW filter on device batadv0
[  109.038037][ T5630] veth0_macvtap: entered promiscuous mode
[  109.087360][ T5630] veth1_macvtap: entered promiscuous mode
[  109.200312][ T5633] 8021q: adding VLAN 0 to HW filter on device batadv0
[  109.268504][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_0
[  109.340857][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_1
[  109.427478][ T5629] 8021q: adding VLAN 0 to HW filter on device batadv0
[  109.444002][ T3380] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  109.456275][ T3380] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  109.486715][ T3380] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  109.546132][ T3380] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  109.578207][ T5632] veth0_vlan: entered promiscuous mode
[  109.692724][ T5632] veth1_vlan: entered promiscuous mode
[  109.807688][ T5631] 8021q: adding VLAN 0 to HW filter on device batadv0
[  109.957659][  T142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.017279][  T142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.056513][ T5629] veth0_vlan: entered promiscuous mode
[  110.111787][ T5632] veth0_macvtap: entered promiscuous mode
[  110.153761][ T5629] veth1_vlan: entered promiscuous mode
[  110.160211][ T1344] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.177405][ T5632] veth1_macvtap: entered promiscuous mode
[  110.183686][ T1344] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.297919][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_0
[  110.345336][ T5634] 8021q: adding VLAN 0 to HW filter on device batadv0
[  110.348646][ T5630] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  110.375149][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_1
[  110.449668][ T1344] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  110.482253][ T1344] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  110.540165][ T1344] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  110.574714][ T1344] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  110.576690][ T5859] loop3: detected capacity change from 0 to 256
[  110.605175][ T5633] veth0_vlan: entered promiscuous mode
[  110.616215][ T5859] exfat: Deprecated parameter 'utf8'
[  110.627153][ T5859] exfat: Deprecated parameter 'namecase'
[  110.642495][ T5859] exfat: Deprecated parameter 'namecase'
[  110.658950][ T5859] exfat: Bad value for 'umask'
[  110.740336][ T5629] veth0_macvtap: entered promiscuous mode
[  111.533752][ T5634] veth0_vlan: entered promiscuous mode
[  111.548158][ T5629] veth1_macvtap: entered promiscuous mode
[  111.585750][ T5633] veth1_vlan: entered promiscuous mode
[  111.711342][ T5631] veth0_vlan: entered promiscuous mode
[  111.765753][  T142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  111.776995][ T5634] veth1_vlan: entered promiscuous mode
[  111.782932][  T142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  111.805081][ T5631] veth1_vlan: entered promiscuous mode
[  111.866790][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_0
[  111.911602][ T3316] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  111.926424][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_1
[  111.935589][ T3316] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  112.011266][ T3316] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  112.030283][ T3316] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  112.058678][ T5633] veth0_macvtap: entered promiscuous mode
[  112.087200][ T3316] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  112.104868][ T3316] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  112.202265][ T5633] veth1_macvtap: entered promiscuous mode
[  112.220500][ T5634] veth0_macvtap: entered promiscuous mode
[  112.259125][ T5634] veth1_macvtap: entered promiscuous mode
[  112.281055][ T5631] veth0_macvtap: entered promiscuous mode
[  112.367707][ T5631] veth1_macvtap: entered promiscuous mode
[  112.423973][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_0
[  112.541137][ T5873] loop1: detected capacity change from 0 to 16
[  112.592017][ T5873] erofs (device loop1): mounted with root inode @ nid 36.
[  113.393891][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_0
[  113.441710][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_1
[  113.559841][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_1
[  113.609846][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0
[  113.644274][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  113.653059][   T37] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  113.673279][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  113.680801][   T37] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  113.707941][   T37] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  113.745564][   T37] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  113.768001][   T37] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  113.812318][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1
[  113.821630][   T37] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  113.841555][   T37] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  113.889756][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  113.929370][ T3380] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  113.939338][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  113.954034][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  113.975347][   T30] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  113.996297][ T3380] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  114.007425][ T3380] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  114.063473][ T3380] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  114.134205][   T30] usb 2-1: Using ep0 maxpacket: 16
[  114.298893][ T3316] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.344643][ T3316] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  114.529403][ T3380] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.545765][   T30] usb 2-1: unable to get BOS descriptor or descriptor too short
[  114.556940][ T3380] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  114.595792][   T30] usb 2-1: unable to read config index 0 descriptor/start: -71
[  114.617808][ T3380] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.621227][   T30] usb 2-1: can't read configurations, error -71
[  114.637324][ T3380] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  114.740545][   T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.760057][   T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  114.939908][ T3380] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.955392][ T3316] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.965045][ T3380] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  114.974281][ T3316] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.389660][ T5892] NILFS (nullb0): couldn't find nilfs on the device
[  116.830538][ T5912] loop2: detected capacity change from 0 to 512
[  117.576542][ T5912] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  117.589751][ T5912] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  118.194180][ T5912] EXT4-fs (loop2): 1 truncate cleaned up
[  118.238766][ T5912] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  119.691611][ T5629] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.071341][ T5923] tipc: Failed to remove unknown binding: 66,0,0/0:684707088/684707089
[  122.329036][ T5927] netlink: 'syz.0.20': attribute type 1 has an invalid length.
[  122.413824][ T5926] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  122.632379][ T5927] 8021q: VLANs not supported on sit0
[  124.091632][ T5941] afs: Unknown parameter ''
[  124.655822][ T5950] Zero length message leads to an empty skb
[  126.302340][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  129.365277][ T5983] tipc: Failed to remove unknown binding: 66,0,0/0:1685142106/1685142107
[  129.548863][ T5985] tipc: Failed to remove unknown binding: 66,0,0/0:3167150233/3167150235
[  132.229409][ T6007] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  132.327667][ T1309] ieee802154 phy0 wpan0: encryption failed: -22
[  132.361751][ T1309] ieee802154 phy1 wpan1: encryption failed: -22
[  136.132370][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  137.647021][ T6043] vivid-001: kernel_thread() failed
[  138.586277][ T5758] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  139.491952][ T5758] usb 1-1: Using ep0 maxpacket: 16
[  139.527254][ T5758] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  139.550820][ T5758] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.580182][ T5758] usb 1-1: Product: syz
[  139.596699][ T5758] usb 1-1: Manufacturer: syz
[  139.622343][ T5758] usb 1-1: SerialNumber: syz
[  140.707434][ T5758] usb 1-1: config 0 descriptor??
[  141.194803][ T5758] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  141.238397][ T6068] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  141.752609][ T5758] ssu100 1-1:0.0: probe with driver ssu100 failed with error -71
[  142.477879][ T5758] usb 1-1: USB disconnect, device number 2
[  143.812244][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  149.980843][ T6117] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  150.422136][ T5785] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  150.594790][ T5785] usb 2-1: Using ep0 maxpacket: 16
[  150.663988][ T5785] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  150.711649][ T5785] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  150.758123][ T5785] usb 2-1: Product: syz
[  150.778327][ T5785] usb 2-1: Manufacturer: syz
[  150.800509][ T5785] usb 2-1: SerialNumber: syz
[  151.677773][ T5785] usb 2-1: config 0 descriptor??
[  151.689987][ T5785] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  152.251912][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  152.312656][    T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!!
[  152.361919][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  154.052243][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  154.657240][ T5785] ssu100 2-1:0.0: probe with driver ssu100 failed with error -71
[  154.730500][ T5785] usb 2-1: USB disconnect, device number 4
[  154.915865][ T6147] 9p: Bad value for 'rfdno'
[  154.972231][   T51] Bluetooth: hci2: Malformed HCI Event
[  155.189420][ T6147] loop5: detected capacity change from 0 to 512
[  155.327781][ T6147] EXT4-fs: Mount option(s) incompatible with ext2
[  155.417845][ T6147] Bluetooth: MGMT ver 1.23
[  156.459488][ T6167] blktrace: Concurrent blktraces are not allowed on loop10
[  162.622920][ T5785] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[  163.208964][ T5785] usb 1-1: unable to get BOS descriptor or descriptor too short
[  163.357670][ T5785] usb 1-1: not running at top speed; connect to a high speed hub
[  163.385536][ T5785] usb 1-1: New USB device found, idVendor=04b4, idProduct=0384, bcdDevice= 0.40
[  163.395020][ T5785] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.403774][ T5785] usb 1-1: Product: syz
[  163.410294][ T5785] usb 1-1: Manufacturer: syz
[  163.416911][ T5785] usb 1-1: SerialNumber: syz
[  163.422035][ T5355] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  163.458917][ T5785] usb 1-1: Audio class v2/v3 interfaces need an interface association
[  163.622123][ T5355] usb 5-1: Using ep0 maxpacket: 32
[  163.683297][ T5785] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22
[  163.712056][ T5355] usb 5-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  163.741148][ T5355] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.772036][ T5355] usb 5-1: Product: syz
[  163.784475][ T5785] snd-usb-hiface 1-1:1.0: probe with driver snd-usb-hiface failed with error -22
[  163.792288][ T5355] usb 5-1: Manufacturer: syz
[  163.826511][ T5355] usb 5-1: SerialNumber: syz
[  163.873006][ T5355] usb 5-1: config 0 descriptor??
[  163.875286][ T6206] 9p: Bad value for 'rfdno'
[  163.923128][ T5355] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[  163.956100][ T5785] usb 1-1: can't set first interface for hiFace device.
[  163.957023][ T5355] dvb-usb: bulk message failed: -22 (4/0)
[  163.971169][   T51] Bluetooth: hci1: Malformed HCI Event
[  163.975336][ T5785] snd-usb-hiface 1-1:1.1: probe with driver snd-usb-hiface failed with error -5
[  164.035885][ T5355] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  164.046855][ T5355] dvb-usb: bulk message failed: -22 (5/0)
[  164.052754][ T5355] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  164.090328][ T5785] usb 1-1: can't set first interface for hiFace device.
[  164.115395][ T5785] snd-usb-hiface 1-1:1.2: probe with driver snd-usb-hiface failed with error -5
[  164.170278][ T5785] usb 1-1: USB disconnect, device number 3
[  164.192941][ T6194] dvb-usb: bulk message failed: -22 (7/0)
[  164.206152][ T6206] loop1: detected capacity change from 0 to 512
[  164.216095][ T5355] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  164.236641][ T6194] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0)
[  164.264327][ T6206] EXT4-fs: Mount option(s) incompatible with ext2
[  164.272716][ T5355] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[  164.288836][ T6194] ttusb2: i2c transfer failed.
[  164.296256][ T5355] usb 5-1: media controller created
[  164.460349][ T5884] udevd[5884]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  164.521612][ T5355] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  164.693529][ T5355] usb 5-1: selecting invalid altsetting 3
[  164.710511][ T5355] ttusb2: set interface to alts=3 failed
[  164.929807][ T5355] DVB: Unable to find symbol tda10086_attach()
[  164.980252][ T5355] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[  165.040431][ T5355] dvb-usb: bulk message failed: -22 (4/0)
[  165.074380][ T5355] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  166.152768][ T5355] dvb-usb: bulk message failed: -22 (5/0)
[  166.173508][ T5355] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  166.227800][ T5355] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[  166.277841][ T5355] usb 5-1: USB disconnect, device number 2
[  168.501426][ T5355] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[  170.450543][ T6256] binder: 6254:6256 ioctl c0306201 0 returned -14
[  171.972392][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  174.297704][ T6267] loop5: detected capacity change from 0 to 256
[  174.904449][ T6267] exFAT-fs (loop5): bogus data start sector
[  174.904509][ T6267] exFAT-fs (loop5): failed to read boot sector
[  174.904526][ T6267] exFAT-fs (loop5): failed to recognize exfat type
[  178.680798][ T6273] 9p: Bad value for 'wfdno'
[  178.732024][   T51] Bluetooth: hci1: Malformed HCI Event
[  178.871667][ T6273] loop1: detected capacity change from 0 to 512
[  178.925284][ T6273] EXT4-fs: Mount option(s) incompatible with ext2
[  179.317177][ T5641] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  179.329100][ T5641] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  179.341287][ T5641] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  179.356943][ T5641] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  179.370845][ T5641] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  179.452609][ T6287] blktrace: Concurrent blktraces are not allowed on loop0
[  181.042550][ T6301] loop1: detected capacity change from 0 to 2048
[  181.080062][ T6301] =======================================================
[  181.080062][ T6301] WARNING: The mand mount option has been deprecated and
[  181.080062][ T6301]          and is ignored by this kernel. Remove the mand
[  181.080062][ T6301]          option from the mount to silence this warning.
[  181.080062][ T6301] =======================================================
[  181.316509][ T6301] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  181.432428][ T5641] Bluetooth: hci6: command tx timeout
[  181.454331][ T6307] loop5: detected capacity change from 0 to 16
[  181.625233][ T6307] erofs (device loop5): mounted with root inode @ nid 36.
[  181.724945][ T6307] 9pnet_virtio: no channels available for device syz
[  181.779778][ T6310] erofs (device loop5): invalid h_shared_count 83 @ nid 46
[  181.850378][ T5632] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  182.108627][   T49] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.445127][ T6320] loop5: detected capacity change from 0 to 4096
[  182.493475][ T6320] EXT4-fs: inline encryption not supported
[  182.527325][ T6320] EXT4-fs: Ignoring removed oldalloc option
[  182.540966][   T49] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.606508][ T6320] EXT4-fs (loop5): Test dummy encryption mode enabled
[  182.692992][ T6320] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=2802c0a9, mo2=0002]
[  182.746914][ T6320] System zones: 0-5
[  183.540965][ T5641] Bluetooth: hci6: command tx timeout
[  183.546537][ T6320] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  183.626699][ T6320] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni"
[  185.602644][ T5641] Bluetooth: hci6: command tx timeout
[  186.224098][ T5633] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  186.293881][   T49] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.412084][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  187.332216][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  188.171018][ T5641] Bluetooth: hci6: command tx timeout
[  188.520515][ T6354] 9p: Bad value for 'wfdno'
[  188.592005][ T5641] Bluetooth: hci2: Malformed HCI Event
[  188.701176][   T49] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.742902][ T6354] loop5: detected capacity change from 0 to 512
[  188.808001][ T6354] EXT4-fs: Mount option(s) incompatible with ext2
[  188.936724][ T6364] loop1: detected capacity change from 0 to 1024
[  188.977125][ T6364] EXT4-fs: Ignoring removed orlov option
[  188.982707][ T6365] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  189.118586][ T6364] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  191.753464][ T6383] loop0: detected capacity change from 0 to 128
[  191.916135][ T6383] EXT4-fs (loop0): Test dummy encryption mode enabled
[  191.949383][ T6383] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806e018, mo2=0002]
[  191.981368][ T6383] System zones: 1-3, 19-19, 35-36
[  192.002557][ T5632] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  192.099399][ T6383] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  192.127871][ T6383] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  192.303444][ T6383] fscrypt: AES-256-XTS using implementation "xts-aes-vaes-avx2"
[  192.314338][   T49] bridge_slave_1: left allmulticast mode
[  192.343820][   T49] bridge_slave_1: left promiscuous mode
[  192.381359][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  192.435733][   T49] bridge_slave_0: left allmulticast mode
[  192.458320][   T49] bridge_slave_0: left promiscuous mode
[  192.471642][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  192.567717][ T6383] loop0: detected capacity change from 128 to 126
[  192.603732][ T6390] EXT4-fs error (device loop0): ext4_dx_csum_verify:470: inode #2: comm syz.0.127: dir seems corrupt?  Run e2fsck -D.
[  192.727821][ T6390] EXT4-fs error (device loop0): dx_probe:791: inode #2: comm syz.0.127: Directory index failed checksum
[  193.268286][ T5634] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  193.377817][ T6402] blktrace: Concurrent blktraces are not allowed on loop2
[  195.487650][ T1309] ieee802154 phy0 wpan0: encryption failed: -22
[  195.502867][ T1309] ieee802154 phy1 wpan1: encryption failed: -22
[  195.658367][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  195.686731][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  195.716080][   T49] bond0 (unregistering): Released all slaves
[  196.561585][ T6421] 9p: Bad value for 'wfdno'
[  196.604670][ T5641] Bluetooth: hci2: Malformed HCI Event
[  196.629723][ T6283] bridge0: port 1(bridge_slave_0) entered blocking state
[  196.638502][ T6283] bridge0: port 1(bridge_slave_0) entered disabled state
[  196.646142][ T6283] bridge_slave_0: entered allmulticast mode
[  196.659526][ T6283] bridge_slave_0: entered promiscuous mode
[  196.669823][ T6283] bridge0: port 2(bridge_slave_1) entered blocking state
[  196.677890][ T6283] bridge0: port 2(bridge_slave_1) entered disabled state
[  196.685354][ T6283] bridge_slave_1: entered allmulticast mode
[  196.695180][ T6283] bridge_slave_1: entered promiscuous mode
[  196.769035][ T6421] loop5: detected capacity change from 0 to 512
[  196.817316][ T6421] EXT4-fs: Mount option(s) incompatible with ext2
[  196.953621][ T6283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  197.249719][ T6430] loop4: detected capacity change from 0 to 256
[  197.274857][ T6283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  197.328734][ T6430] exFAT-fs (loop4): bogus data start sector
[  197.373352][ T6430] exFAT-fs (loop4): failed to read boot sector
[  197.401465][ T6430] exFAT-fs (loop4): failed to recognize exfat type
[  197.577874][ T6283] team0: Port device team_slave_0 added
[  197.653061][   T49] hsr_slave_0: left promiscuous mode
[  197.686154][   T49] hsr_slave_1: left promiscuous mode
[  197.704921][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  197.723106][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[  197.740536][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  197.766079][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[  197.835651][   T49] veth1_macvtap: left promiscuous mode
[  197.855419][   T49] veth0_macvtap: left promiscuous mode
[  197.883624][   T49] veth1_vlan: left promiscuous mode
[  197.898222][   T49] veth0_vlan: left promiscuous mode
[  198.755241][ T6452] NILFS (nullb0): couldn't find nilfs on the device
[  199.154322][ T6456] loop2: detected capacity change from 0 to 512
[  199.184629][ T6456] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  200.209368][ T6456] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2859: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  200.240347][ T6456] EXT4-fs (loop2): 1 truncate cleaned up
[  200.299268][ T6456] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  200.625523][ T6471] input: syz0 as /devices/virtual/input/input5
[  200.810556][   T49] team0 (unregistering): Port device team_slave_1 removed
[  200.886413][   T49] team0 (unregistering): Port device team_slave_0 removed
[  201.270059][ T6481] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  201.350287][ T6283] team0: Port device team_slave_1 added
[  201.414530][ T5284] 8021q: adding VLAN 0 to HW filter on device eth1
[  201.421996][ T6483] loop1: detected capacity change from 0 to 128
[  201.628186][ T6483] FAT-fs (loop1): bogus number of reserved sectors
[  201.665238][ T6483] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  201.738776][ T6483] FAT-fs (loop1): Can't find a valid FAT filesystem
[  201.857039][ T6283] batman_adv: batadv0: Adding interface: batadv_slave_0
[  201.864865][ T6488] loop0: detected capacity change from 0 to 512
[  201.879970][ T6283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  201.916807][ T6283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  201.949244][ T6488] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  202.004961][ T6283] batman_adv: batadv0: Adding interface: batadv_slave_1
[  202.040343][ T6283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  202.080021][ T6488] ext4 filesystem being mounted at /28/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  202.156501][ T6283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  202.344748][ T5629] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.151502][   T31] audit: type=1800 audit(1785195110.084:2): pid=6499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.153" name="file1" dev="loop0" ino=15 res=0 errno=0
[  203.430390][ T6283] hsr_slave_0: entered promiscuous mode
[  203.437239][ T6283] hsr_slave_1: entered promiscuous mode
[  204.447936][ T5634] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  205.212611][ T6511] NILFS (nullb0): couldn't find nilfs on the device
[  205.612697][ T6518] loop1: detected capacity change from 0 to 128
[  205.655455][ T6518] udf: Unknown parameter 'shOrtBœ'
[  205.990910][ T6526] loop1: detected capacity change from 0 to 16
[  206.020903][ T6526] erofs: Unknown parameter 'ÿÿOrtBœ'
[  206.084479][ T5884] udevd[5884]: incorrect erofs checksum on /dev/loop1
[  206.203875][ T6528] input: syz0 as /devices/virtual/input/input6
[  207.982764][ T6549] loop0: detected capacity change from 0 to 16
[  208.126217][ T6283] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  208.155203][ T6549] erofs (device loop0): mounted with root inode @ nid 36.
[  208.216878][ T6283] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  208.285016][ T6283] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  208.338129][ T6283] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  208.367171][ T6283] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  208.423771][ T6283] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  208.466845][ T6283] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  208.553041][ T6283] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  209.841472][ T6283] 8021q: adding VLAN 0 to HW filter on device bond0
[  210.111399][ T5284] 8021q: adding VLAN 0 to HW filter on device eth2
[  210.172202][ T6572] NILFS (nullb0): couldn't find nilfs on the device
[  210.400224][ T6283] 8021q: adding VLAN 0 to HW filter on device team0
[  211.205502][  T146] bridge0: port 1(bridge_slave_0) entered blocking state
[  211.213106][  T146] bridge0: port 1(bridge_slave_0) entered forwarding state
[  211.288647][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[  211.295910][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[  211.415073][ T6589] loop5: detected capacity change from 0 to 128
[  211.456103][ T6589] udf: Unknown parameter 'shOrtBœ'
[  211.563865][ T5635] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  211.766831][ T5635] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  211.810900][ T5635] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  211.850291][ T5635] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  211.884954][ T5635] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  211.931582][ T5635] usb 5-1: config 0 descriptor??
[  212.047134][ T6604] loop5: detected capacity change from 0 to 1024
[  212.171758][ T6604] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0
[  212.197231][ T6604] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0
[  212.277265][ T6604] EXT4-fs error (device loop5): ext4_acquire_dquot:7039: comm syz.5.179: Failed to acquire dquot type 0
[  212.349498][ T6604] loop5: lost filesystem error report for type 5 error -5
[  212.352007][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  212.366383][    C1] EXT4-fs (loop5): initial error at time 1785195119: ext4_acquire_dquot:7039
[  212.375231][    C1] EXT4-fs (loop5): last error at time 1785195119: ext4_acquire_dquot:7039
[  212.451410][ T6604] EXT4-fs (loop5): 1 truncate cleaned up
[  212.483083][ T6604] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  212.580944][    C0] raw-gadget.0 gadget.4: ignoring, device is not running
[  212.604358][    C0] raw-gadget.0 gadget.4: ignoring, device is not running
[  212.622225][ T5635] usbhid 5-1:0.0: can't add hid device: -32
[  212.653082][ T5635] usbhid 5-1:0.0: probe with driver usbhid failed with error -32
[  212.781204][ T5635] usb 5-1: USB disconnect, device number 3
[  212.909922][ T5633] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  214.185547][ T6635] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  214.409008][ T6646] loop4: detected capacity change from 0 to 512
[  214.465471][ T6646] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  214.618397][ T6646] EXT4-fs (loop4): 1 truncate cleaned up
[  214.626961][ T6646] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  214.928821][ T6283] 8021q: adding VLAN 0 to HW filter on device batadv0
[  216.243102][ T5284] 8021q: adding VLAN 0 to HW filter on device eth3
[  218.354746][ T6667] loop5: detected capacity change from 0 to 128
[  218.418660][ T6667] udf: Unknown parameter 'shOrtBœ'
[  218.448163][ T5631] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  219.398732][ T6692] loop4: detected capacity change from 0 to 16
[  219.533819][ T6692] erofs (device loop4): mounted with root inode @ nid 36.
[  219.849631][ T6283] veth0_vlan: entered promiscuous mode
[  219.925510][ T6283] veth1_vlan: entered promiscuous mode
[  220.188179][ T6283] veth0_macvtap: entered promiscuous mode
[  220.245097][ T6283] veth1_macvtap: entered promiscuous mode
[  220.375839][ T6283] batman_adv: batadv0: Interface activated: batadv_slave_0
[  220.387504][ T6708] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  220.549193][ T6283] batman_adv: batadv0: Interface activated: batadv_slave_1
[  220.671638][   T49] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  220.721635][   T49] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  220.763177][   T49] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  220.808067][   T49] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  222.138171][ T5284] 8021q: adding VLAN 0 to HW filter on device eth4
[  222.204087][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  222.244755][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  222.342509][ T5777] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  222.437049][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  222.470823][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  222.514553][ T5777] usb 1-1: Using ep0 maxpacket: 32
[  222.546496][ T5777] usb 1-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  222.622019][ T5777] usb 1-1: config 0 interface 0 has no altsetting 0
[  222.667541][ T5777] usb 1-1: New USB device found, idVendor=06a3, idProduct=0cd0, bcdDevice= 0.00
[  222.715751][ T5777] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  222.760759][ T5777] usb 1-1: config 0 descriptor??
[  223.492631][ T6731] ubi0: attaching mtd0
[  223.500270][ T6731] ubi0: scanning is finished
[  223.504936][ T6731] ubi0: empty MTD device detected
[  223.792057][ T5777] saitek 0003:06A3:0CD0.0001: unknown main item tag 0x1
[  223.816752][ T5777] saitek 0003:06A3:0CD0.0001: unknown main item tag 0x6
[  223.855807][ T5777] saitek 0003:06A3:0CD0.0001: collection stack underflow
[  223.876714][ T5777] saitek 0003:06A3:0CD0.0001: item 0 1 0 12 parsing failed
[  223.899765][ T6731] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4
[  224.032308][ T5777] saitek 0003:06A3:0CD0.0001: parse failed
[  224.062825][ T5777] saitek 0003:06A3:0CD0.0001: probe with driver saitek failed with error -22
[  224.101073][ T5777] usb 1-1: USB disconnect, device number 4
[  226.716014][ T6744] loop2: detected capacity change from 0 to 512
[  226.762627][ T6744] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  226.821307][ T6747] loop1: detected capacity change from 0 to 256
[  226.832931][ T6744] EXT4-fs (loop2): 1 truncate cleaned up
[  226.883617][ T6747] exfat: Deprecated parameter 'utf8'
[  226.891437][ T6744] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  226.930377][ T6747] exfat: Deprecated parameter 'namecase'
[  226.982802][ T6747] exfat: Deprecated parameter 'namecase'
[  226.999989][ T6747] exfat: Bad value for 'umask'
[  227.912364][ T5649] Bluetooth: hci0: command 0x0406 tx timeout
[  227.922563][ T5647] Bluetooth: hci5: command 0x0406 tx timeout
[  227.930039][ T5640] Bluetooth: hci4: command 0x0406 tx timeout
[  227.932193][ T5650] Bluetooth: hci2: command 0x0406 tx timeout
[  227.936264][ T5647] Bluetooth: hci1: command 0x0406 tx timeout
[  227.956216][ T5629] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  228.224897][ T6768] loop0: detected capacity change from 0 to 512
[  228.315557][ T6768] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  228.443149][ T6768] EXT4-fs (loop0): 1 truncate cleaned up
[  228.456199][ T6772] veth1_to_bond: entered allmulticast mode
[  228.528830][ T6772] netlink: 4 bytes leftover after parsing attributes in process `syz.4.211'.
[  228.556855][ T6768] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  228.685630][ T6772] veth1_to_bond (unregistering): left allmulticast mode
[  228.767835][ T6772] bond0: (slave bond_slave_1): Releasing backup interface
[  230.546479][ T6790] vivid-003: kernel_thread() failed
[  232.659856][ T6802] binder: 6798:6802 ioctl c0306201 0 returned -14
[  234.309279][ T6808] ubi0: attaching mtd0
[  234.315944][ T6808] ubi0: scanning is finished
[  234.893612][ T6808] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4
[  235.084270][ T5634] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  235.543434][ T6826] loop0: detected capacity change from 0 to 16
[  236.346983][ T6826] erofs (device loop0): mounted with root inode @ nid 36.
[  236.642678][ T6830] loop5: detected capacity change from 0 to 256
[  236.702948][ T6830] exfat: Deprecated parameter 'utf8'
[  236.746898][ T6830] exfat: Deprecated parameter 'namecase'
[  236.790284][ T6830] exfat: Deprecated parameter 'namecase'
[  236.850630][ T6830] exfat: Bad value for 'umask'
[  242.440242][ T6868] binder: 6856:6868 ioctl c0306201 0 returned -14
[  243.832503][ T6870] bridge0: port 1(bridge_slave_0) entered listening state
[  243.947001][ T6870] bridge0: port 1(bridge_slave_0) entered disabled state
[  248.468079][ T6921] loop2: detected capacity change from 0 to 128
[  249.317933][ T6921] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  249.414408][ T6921] ext4 filesystem being mounted at /35/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  252.830540][ T6937] binder: 6935:6937 ioctl c0306201 0 returned -14
[  254.210556][ T5629] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  254.618737][ T6948] IPv6: NLM_F_CREATE should be specified when creating new route
[  254.658021][ T6948] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  254.667112][ T6948] IPv6: NLM_F_CREATE should be set when creating new route
[  254.674467][ T6948] IPv6: NLM_F_CREATE should be set when creating new route
[  255.227643][ T1309] ieee802154 phy0 wpan0: encryption failed: -22
[  255.234151][ T1309] ieee802154 phy1 wpan1: encryption failed: -22
[  255.271670][ T6956] bridge0: port 3(syz_tun) entered blocking state
[  255.348154][ T6962] ubi0: attaching mtd0
[  255.354920][ T6962] ubi0: scanning is finished
[  255.945470][ T6956] bridge0: port 3(syz_tun) entered disabled state
[  255.981655][ T6956] syz_tun: entered allmulticast mode
[  256.013131][ T6956] syz_tun: entered promiscuous mode
[  256.082621][ T6956] bridge0: port 3(syz_tun) entered blocking state
[  256.090508][ T6956] bridge0: port 3(syz_tun) entered forwarding state
[  256.149984][ T6962] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4
[  256.517409][ T6976] binder: 6974:6976 ioctl c0306201 0 returned -14
[  259.858776][ T6993] binder: 6980:6993 ioctl c0306201 0 returned -14
[  261.520838][ T7001] loop2: detected capacity change from 0 to 16
[  261.574842][ T7001] erofs (device loop2): mounted with root inode @ nid 36.
[  263.662013][ T5644] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  263.882042][ T5644] usb 6-1: Using ep0 maxpacket: 16
[  263.916089][ T5644] usb 6-1: config 0 has an invalid interface number: 105 but max is 0
[  263.964328][ T7022] loop4: detected capacity change from 0 to 2048
[  263.964870][ T5644] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  264.042653][ T5644] usb 6-1: config 0 has no interface number 0
[  264.088539][ T5644] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  264.105002][ T7022] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 9)
[  264.124289][ T5644] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  264.161334][ T5644] usb 6-1: Product: syz
[  264.178470][ T5644] usb 6-1: Manufacturer: syz
[  264.193430][ T5644] usb 6-1: SerialNumber: syz
[  264.218239][ T5644] usb 6-1: config 0 descriptor??
[  264.421980][ T5644] uvcvideo 6-1:0.105: Found UVC 0.00 device syz (046d:08f3)
[  264.498377][ T7030] ubi0: attaching mtd0
[  264.505086][ T7030] ubi0: scanning is finished
[  265.121747][ T5644] uvcvideo 6-1:0.105: No valid video chain found.
[  265.193371][ T7030] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4
[  265.347117][ T5644] usb 6-1: USB disconnect, device number 2
[  265.569527][ T6228] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 9)
[  268.721036][ T7049] binder: 7046:7049 ioctl c0306201 0 returned -14
[  270.514350][    T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  270.728758][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  270.782566][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  270.837102][    T9] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  270.885415][ T7063] loop5: detected capacity change from 0 to 128
[  270.887859][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  270.931150][ T7063] udf: Unknown parameter 'shOrtBœ'
[  271.014729][    T9] usb 5-1: config 0 descriptor??
[  271.289398][    T9] usbhid 5-1:0.0: can't add hid device: -71
[  271.323639][    T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  271.390236][ T4938] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  271.413051][    T9] usb 5-1: USB disconnect, device number 4
[  271.421687][ T4938] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  271.449601][ T4938] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  271.467492][ T4938] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  271.478075][ T4938] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  271.883774][ T7076] blktrace: Concurrent blktraces are not allowed on loop4
[  273.293617][ T7092] ubi0: attaching mtd0
[  273.321576][ T7092] ubi0: scanning is finished
[  273.726116][ T4938] Bluetooth: hci3: command tx timeout
[  274.732546][ T7092] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4
[  275.137490][ T7105] loop1: detected capacity change from 0 to 256
[  275.212473][ T7108] bridge0: port 3(syz_tun) entered blocking state
[  275.271242][ T7108] bridge0: port 3(syz_tun) entered disabled state
[  275.280130][ T7105] exFAT-fs (loop1): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d)
[  275.360003][ T7108] syz_tun: entered allmulticast mode
[  275.365290][ T7105] exFAT-fs (loop1): failed to load alloc-bitmap
[  275.438776][ T7105] exFAT-fs (loop1): failed to recognize exfat type
[  275.550221][ T7108] syz_tun: entered promiscuous mode
[  275.615582][ T7108] bridge0: port 3(syz_tun) entered blocking state
[  275.622228][ T7108] bridge0: port 3(syz_tun) entered forwarding state
[  275.912008][ T4938] Bluetooth: hci3: command tx timeout
[  276.047745][ T7123] loop1: detected capacity change from 0 to 256
[  276.076042][ T7124] loop6: detected capacity change from 0 to 128
[  276.144158][ T7123] exfat: Deprecated parameter 'utf8'
[  276.158224][ T7124] udf: Unknown parameter 'shOrtBœ'
[  276.174702][ T7123] exfat: Deprecated parameter 'namecase'
[  276.215550][ T7123] exfat: Deprecated parameter 'namecase'
[  276.248368][ T7123] exfat: Bad value for 'umask'
[  276.579508][ T7136] blktrace: Concurrent blktraces are not allowed on loop10
[  277.362553][    T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  277.934219][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  278.069079][ T4938] Bluetooth: hci3: command tx timeout
[  278.237882][ T7145] loop5: detected capacity change from 0 to 512
[  278.255184][ T7145] EXT4-fs: Ignoring removed nomblk_io_submit option
[  278.318233][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  278.328793][    T9] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  278.339183][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  278.362237][ T7145] EXT4-fs: Ignoring removed i_version option
[  278.373212][    T9] usb 3-1: config 0 descriptor??
[  278.466464][ T7156] ubi0: attaching mtd0
[  278.491943][ T7156] ubi0: scanning is finished
[  279.115049][ T7145] EXT4-fs (loop5): 1 orphan inode deleted
[  279.128447][ T7145] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  279.219107][    T9] usb 3-1: can't set config #0, error -71
[  279.263180][ T7156] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4
[  279.422107][    T9] usb 3-1: USB disconnect, device number 2
[  279.656607][ T5633] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  280.022261][ T7169] loop1: detected capacity change from 0 to 256
[  280.155923][ T4938] Bluetooth: hci3: command tx timeout
[  280.713481][    T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  280.767065][ T7169] FAT-fs (loop1): data area starts beyond volume (274 > 64)
[  280.789205][ T7169] FAT-fs (loop1): Can't find a valid FAT filesystem
[  280.862887][    T9] usb 3-1: device descriptor read/64, error -71
[  281.270369][ T7182] NILFS (nullb0): couldn't find nilfs on the device
[  282.022190][    T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  282.216125][    T9] usb 3-1: device descriptor read/64, error -71
[  282.566276][    T9] usb usb3-port1: attempt power cycle
[  282.669357][ T7191] blktrace: Concurrent blktraces are not allowed on loop10
[  283.631087][ T7193] loop6: detected capacity change from 0 to 128
[  283.677293][ T7193] udf: Unknown parameter 'shOrtBœ'
[  284.132718][    T9] usb usb3-port1: Cannot enable. Maybe the USB cable is bad?
[  284.212573][ T7066] bridge0: port 1(bridge_slave_0) entered blocking state
[  284.237752][ T7066] bridge0: port 1(bridge_slave_0) entered disabled state
[  284.264909][ T7066] bridge_slave_0: entered allmulticast mode
[  284.297192][ T7208] loop6: detected capacity change from 0 to 256
[  284.471294][    T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  284.501719][ T7208] exfat: Deprecated parameter 'utf8'
[  284.504782][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  284.522678][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  284.531047][ T7066] bridge_slave_0: entered promiscuous mode
[  284.532752][    T9] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  284.621805][ T7211] ubi0: attaching mtd0
[  284.645256][ T7211] ubi0: scanning is finished
[  285.138790][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  285.158837][    T9] usb 3-1: config 0 descriptor??
[  285.189743][ T7208] exfat: Deprecated parameter 'namecase'
[  285.254667][ T7208] exfat: Deprecated parameter 'namecase'
[  285.266073][ T7066] bridge0: port 2(bridge_slave_1) entered blocking state
[  285.296982][ T7211] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4
[  285.310547][ T7208] exfat: Bad value for 'umask'
[  285.494080][ T7066] bridge0: port 2(bridge_slave_1) entered disabled state
[  286.032050][ T7066] bridge_slave_1: entered allmulticast mode
[  286.050811][    T9] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0
[  286.062980][    T9] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0
[  286.070975][    T9] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0
[  286.081333][    T9] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0
[  286.083558][ T7066] bridge_slave_1: entered promiscuous mode
[  286.088612][    T9] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0
[  286.102293][    T9] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0
[  286.109141][    T9] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0
[  286.126862][    T9] pyra 0003:1E7D:2CF6.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0
[  286.141410][    T9] pyra 0003:1E7D:2CF6.0002: couldn't init struct pyra_device
[  286.157464][    T9] pyra 0003:1E7D:2CF6.0002: couldn't install mouse
[  286.158464][ T7223] binder: BINDER_SET_CONTEXT_MGR already set
[  286.171300][    T9] pyra 0003:1E7D:2CF6.0002: probe with driver pyra failed with error -32
[  286.202133][ T7223] binder: 7222:7223 ioctl 4018620d 200000000040 returned -16
[  286.231198][    T9] usb 3-1: USB disconnect, device number 6
[  286.533835][ T7066] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  286.612124][   T30] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  286.741043][ T7066] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  286.861980][ T7230] NILFS (nullb0): couldn't find nilfs on the device
[  287.608706][   T30] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  287.821790][   T30] usb 6-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  287.838507][   T30] usb 6-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00
[  287.849824][   T30] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  287.858817][   T30] usb 6-1: Product: syz
[  287.864312][   T30] usb 6-1: Manufacturer: syz
[  287.868963][   T30] usb 6-1: SerialNumber: syz
[  287.875231][ T7066] team0: Port device team_slave_0 added
[  287.967702][ T7236] blktrace: Concurrent blktraces are not allowed on loop8
[  288.734966][ T7066] team0: Port device team_slave_1 added
[  288.792639][   T30] usb-storage 6-1:1.0: USB Mass Storage device detected
[  288.902818][   T30] usb-storage 6-1:1.0: Quirks match for vid 174c pid 55aa: 400000
[  288.961739][   T30] scsi host1: usb-storage 6-1:1.0
[  289.019614][ T7066] batman_adv: batadv0: Adding interface: batadv_slave_0
[  289.032395][ T7246] loop6: detected capacity change from 0 to 128
[  289.051860][ T7229] fido_id[7229]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  289.070630][ T7066] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  289.101123][ T7246] udf: Unknown parameter 'shOrtBœ'
[  289.109328][   T30] usb 6-1: USB disconnect, device number 3
[  289.250996][ T7066] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  289.267076][ T7066] batman_adv: batadv0: Adding interface: batadv_slave_1
[  289.274112][ T7066] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  289.300151][ T7066] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  289.310797][ T5776] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  289.582434][ T5776] usb 2-1: device descriptor read/64, error -71
[  289.993788][ T5776] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  290.178180][ T5776] usb 2-1: device descriptor read/64, error -71
[  290.777027][ T7261] ubi0: attaching mtd0
[  291.220038][ T5776] usb usb2-port1: attempt power cycle
[  291.355839][ T7261] ubi0: scanning is finished
[  291.656129][ T7066] hsr_slave_0: entered promiscuous mode
[  291.686913][ T7261] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4
[  291.829906][ T7066] hsr_slave_1: entered promiscuous mode
[  291.884302][ T7066] debugfs: 'hsr0' already exists in 'hsr'
[  291.905101][ T5776] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  291.910341][ T7066] Cannot create hsr debugfs directory
[  292.008944][ T5776] usb 2-1: device descriptor read/8, error -71
[  292.265213][ T7276] loop2: detected capacity change from 0 to 16
[  292.351842][ T7276] erofs (device loop2): mounted with root inode @ nid 36.
[  293.012315][ T7278] loop5: detected capacity change from 0 to 256
[  293.057805][ T7278] exfat: Deprecated parameter 'utf8'
[  293.063420][ T7278] exfat: Deprecated parameter 'namecase'
[  293.069145][ T7278] exfat: Deprecated parameter 'namecase'
[  293.077558][ T7278] exfat: Bad value for 'umask'
[  293.768485][ T7287] loop6: detected capacity change from 0 to 128
[  293.810161][ T7287] udf: Unknown parameter 'shOrtBœ'
[  295.442093][ T7298] loop1: detected capacity change from 0 to 40427
[  295.461708][ T7298] F2FS-fs (loop1): invalid crc value
[  295.561320][ T7298] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  295.574799][ T7298] F2FS-fs (loop1): f2fs_disable_checkpoint starts, unusable: 0
[  295.582447][ T7298] F2FS-fs (loop1): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[  295.593518][ T7298] F2FS-fs (loop1): Start checkpoint disabled!
[  295.611800][ T7298] F2FS-fs (loop1): f2fs_disable_checkpoint finishes, err:0
[  295.628874][ T7298] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  296.295957][ T7066] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  296.403851][ T7066] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  296.452230][ T7066] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  296.504411][ T7066] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  296.560767][ T7066] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  296.580626][ T3380] kworker/u8:12: attempt to access beyond end of device
[  296.580626][ T3380] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  296.610008][ T7066] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  296.631301][ T3380] CPU: 0 UID: 0 PID: 3380 Comm: kworker/u8:12 Not tainted syzkaller #0 PREEMPT(full) 
[  296.631348][ T3380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  296.631372][ T3380] Workqueue: writeback wb_workfn (flush-7:1)
[  296.631434][ T3380] Call Trace:
[  296.631445][ T3380]  <TASK>
[  296.631458][ T3380]  dump_stack_lvl+0x100/0x190
[  296.631501][ T3380]  f2fs_stop_checkpoint+0x5e6/0xb30
[  296.631564][ T3380]  ? srso_alias_return_thunk+0x5/0xfbef5
[  296.631608][ T3380]  ? errseq_set+0xe3/0x150
[  296.631664][ T3380]  ? srso_alias_return_thunk+0x5/0xfbef5
[  296.631716][ T3380]  f2fs_write_end_bio+0xf53/0x1340
[  296.631760][ T3380]  ? __pfx_f2fs_write_end_bio+0x10/0x10
[  296.631805][ T3380]  ? srso_alias_return_thunk+0x5/0xfbef5
[  296.631859][ T3380]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  296.631900][ T3380]  bio_endio+0x778/0x8e0
[  296.631947][ T3380]  submit_bio_noacct+0x64c/0x1ff0
[  296.632023][ T3380]  f2fs_submit_write_bio+0x133/0x330
[  296.632085][ T3380]  __submit_merged_bio+0x330/0x7b0
[  296.632122][ T3380]  ? rcu_is_watching+0x12/0xc0
[  296.632182][ T3380]  __submit_merged_write_cond+0x3fe/0x510
[  296.632231][ T3380]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  296.632283][ T3380]  ? __pfx___might_resched+0x10/0x10
[  296.632322][ T3380]  ? srso_alias_return_thunk+0x5/0xfbef5
[  296.632366][ T3380]  ? folio_clear_dirty_for_io+0x178/0x960
[  296.632433][ T3380]  f2fs_write_cache_pages+0x20e9/0x2630
[  296.632501][ T3380]  ? srso_alias_return_thunk+0x5/0xfbef5
[  296.632547][ T3380]  ? __pfx_f2fs_write_cache_pages+0x10/0x10
[  296.632595][ T3380]  ? srso_alias_return_thunk+0x5/0xfbef5
[  296.632649][ T3380]  ? unwind_next_frame+0x3c8/0x2090
[  296.632708][ T3380]  ? ret_from_fork_asm+0x1a/0x30
[  296.632766][ T3380]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  296.632905][ T3380]  ? srso_alias_return_thunk+0x5/0xfbef5
[  296.632949][ T3380]  ? lock_acquire+0x1b9/0x370
[  296.632991][ T3380]  ? srso_alias_return_thunk+0x5/0xfbef5
[  296.633041][ T3380]  ? find_held_lock+0x2b/0x80
[  296.633097][ T3380]  ? srso_alias_return_thunk+0x5/0xfbef5
[  296.633141][ T3380]  ? rcu_is_watching+0x12/0xc0
[  296.633200][ T3380]  f2fs_write_data_pages+0x799/0x16d0
[  296.633246][ T3380]  ? srso_alias_return_thunk+0x5/0xfbef5
[  296.633302][ T3380]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  296.633366][ T3380]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  296.633416][ T3380]  do_writepages+0x278/0x600
[  296.633480][ T3380]  ? __pfx_do_writepages+0x10/0x10
[  296.633542][ T3380]  ? srso_alias_return_thunk+0x5/0xfbef5
[  296.633587][ T3380]  __writeback_single_inode+0x164/0x1300
[  296.633632][ T3380]  ? find_held_lock+0x2b/0x80
[  296.633689][ T3380]  ? srso_alias_return_thunk+0x5/0xfbef5
[  296.633740][ T3380]  ? __pfx___writeback_single_inode+0x10/0x10
[  296.633788][ T3380]  ? srso_alias_return_thunk+0x5/0xfbef5
[  296.633831][ T3380]  ? do_raw_spin_unlock+0x145/0x1e0
[  296.633881][ T3380]  ? srso_alias_return_thunk+0x5/0xfbef5
[  296.633931][ T3380]  writeback_sb_inodes+0x766/0x1c50
[  296.634009][ T3380]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  296.634057][ T3380]  ? srso_alias_return_thunk+0x5/0xfbef5
[  296.634157][ T3380]  ? srso_alias_return_thunk+0x5/0xfbef5
[  296.634200][ T3380]  ? rcu_is_watching+0x12/0xc0
[  296.634251][ T3380]  ? srso_alias_return_thunk+0x5/0xfbef5
[  296.634294][ T3380]  ? queue_io+0x287/0x530
[  296.634339][ T3380]  wb_writeback+0x1c0/0xb50
[  296.634401][ T3380]  ? __pfx_wb_writeback+0x10/0x10
[  296.634462][ T3380]  ? srso_alias_return_thunk+0x5/0xfbef5
[  296.634505][ T3380]  ? mark_held_locks+0x40/0x70
[  296.634546][ T3380]  ? _raw_spin_unlock_irq+0x23/0x50
[  296.634591][ T3380]  wb_workfn+0x143/0xc80
[  296.634642][ T3380]  ? srso_alias_return_thunk+0x5/0xfbef5
[  296.634684][ T3380]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  296.634725][ T3380]  ? __pfx_wb_workfn+0x10/0x10
[  296.634778][ T3380]  ? srso_alias_return_thunk+0x5/0xfbef5
[  296.634825][ T3380]  ? srso_alias_return_thunk+0x5/0xfbef5
[  296.634874][ T3380]  ? srso_alias_return_thunk+0x5/0xfbef5
[  296.634918][ T3380]  ? rcu_is_watching+0x12/0xc0
[  296.634978][ T3380]  process_one_work+0xa23/0x1940
[  296.635045][ T3380]  ? __pfx_process_one_work+0x10/0x10
[  296.635079][ T3380]  ? srso_alias_return_thunk+0x5/0xfbef5
[  296.635139][ T3380]  ? srso_alias_return_thunk+0x5/0xfbef5
[  296.635191][ T3380]  worker_thread+0x5ef/0xe50
[  296.635240][ T3380]  ? __pfx_worker_thread+0x10/0x10
[  296.635279][ T3380]  ? kthread+0x13a/0x450
[  296.635335][ T3380]  ? __pfx_worker_thread+0x10/0x10
[  296.635369][ T3380]  kthread+0x370/0x450
[  296.635425][ T3380]  ? __pfx_kthread+0x10/0x10
[  296.635487][ T3380]  ret_from_fork+0x72b/0xd50
[  296.635538][ T3380]  ? __pfx_ret_from_fork+0x10/0x10
[  296.635588][ T3380]  ? srso_alias_return_thunk+0x5/0xfbef5
[  296.635632][ T3380]  ? __switch_to+0x800/0x10f0
[  296.635690][ T3380]  ? __switch_to_asm+0x39/0x70
[  296.635739][ T3380]  ? __pfx_kthread+0x10/0x10
[  296.635800][ T3380]  ret_from_fork_asm+0x1a/0x30
[  296.635875][ T3380]  </TASK>
[  296.636836][ T7066] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  296.783081][ T3380] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  297.142498][ T5785] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  297.148381][ T7066] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  297.153225][ T3380] CPU: 0 UID: 0 PID: 3380 Comm: kworker/u8:12 Not tainted syzkaller #0 PREEMPT(full) 
[  297.153269][ T3380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  297.153292][ T3380] Workqueue: writeback wb_workfn (flush-7:1)
[  297.153352][ T3380] Call Trace:
[  297.153363][ T3380]  <TASK>
[  297.153376][ T3380]  dump_stack_lvl+0x100/0x190
[  297.153421][ T3380]  f2fs_stop_checkpoint+0x5e6/0xb30
[  297.153482][ T3380]  ? __filemap_set_wb_err+0x1a4/0x200
[  297.153539][ T3380]  ? __filemap_set_wb_err+0x84/0x200
[  297.153596][ T3380]  ? srso_alias_return_thunk+0x5/0xfbef5
[  297.153650][ T3380]  f2fs_write_end_bio+0xf53/0x1340
[  297.153698][ T3380]  ? __pfx_f2fs_write_end_bio+0x10/0x10
[  297.153744][ T3380]  ? srso_alias_return_thunk+0x5/0xfbef5
[  297.153800][ T3380]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  297.153842][ T3380]  bio_endio+0x778/0x8e0
[  297.153892][ T3380]  submit_bio_noacct+0x64c/0x1ff0
[  297.153963][ T3380]  f2fs_submit_write_bio+0x133/0x330
[  297.154030][ T3380]  __submit_merged_bio+0x330/0x7b0
[  297.154067][ T3380]  ? rcu_is_watching+0x12/0xc0
[  297.154127][ T3380]  __submit_merged_write_cond+0x3fe/0x510
[  297.154178][ T3380]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  297.154231][ T3380]  ? __pfx___might_resched+0x10/0x10
[  297.154270][ T3380]  ? srso_alias_return_thunk+0x5/0xfbef5
[  297.154313][ T3380]  ? folio_clear_dirty_for_io+0x178/0x960
[  297.154386][ T3380]  f2fs_write_cache_pages+0x20e9/0x2630
[  297.154458][ T3380]  ? srso_alias_return_thunk+0x5/0xfbef5
[  297.154504][ T3380]  ? __pfx_f2fs_write_cache_pages+0x10/0x10
[  297.154551][ T3380]  ? srso_alias_return_thunk+0x5/0xfbef5
[  297.154606][ T3380]  ? unwind_next_frame+0x3c8/0x2090
[  297.154664][ T3380]  ? ret_from_fork_asm+0x1a/0x30
[  297.154722][ T3380]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  297.154876][ T3380]  ? srso_alias_return_thunk+0x5/0xfbef5
[  297.154919][ T3380]  ? lock_acquire+0x1b9/0x370
[  297.154961][ T3380]  ? srso_alias_return_thunk+0x5/0xfbef5
[  297.155013][ T3380]  ? find_held_lock+0x2b/0x80
[  297.155067][ T3380]  ? srso_alias_return_thunk+0x5/0xfbef5
[  297.155110][ T3380]  ? rcu_is_watching+0x12/0xc0
[  297.155169][ T3380]  f2fs_write_data_pages+0x799/0x16d0
[  297.155214][ T3380]  ? srso_alias_return_thunk+0x5/0xfbef5
[  297.155274][ T3380]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  297.155341][ T3380]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  297.155392][ T3380]  do_writepages+0x278/0x600
[  297.155458][ T3380]  ? __pfx_do_writepages+0x10/0x10
[  297.155519][ T3380]  ? srso_alias_return_thunk+0x5/0xfbef5
[  297.155570][ T3380]  __writeback_single_inode+0x164/0x1300
[  297.155618][ T3380]  ? find_held_lock+0x2b/0x80
[  297.155675][ T3380]  ? srso_alias_return_thunk+0x5/0xfbef5
[  297.155721][ T3380]  ? __pfx___writeback_single_inode+0x10/0x10
[  297.155769][ T3380]  ? srso_alias_return_thunk+0x5/0xfbef5
[  297.155812][ T3380]  ? do_raw_spin_unlock+0x145/0x1e0
[  297.155862][ T3380]  ? srso_alias_return_thunk+0x5/0xfbef5
[  297.155913][ T3380]  writeback_sb_inodes+0x766/0x1c50
[  297.155989][ T3380]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  297.156042][ T3380]  ? srso_alias_return_thunk+0x5/0xfbef5
[  297.156161][ T3380]  ? srso_alias_return_thunk+0x5/0xfbef5
[  297.156207][ T3380]  ? rcu_is_watching+0x12/0xc0
[  297.156258][ T3380]  ? srso_alias_return_thunk+0x5/0xfbef5
[  297.156301][ T3380]  ? queue_io+0x287/0x530
[  297.156351][ T3380]  wb_writeback+0x1c0/0xb50
[  297.156417][ T3380]  ? __pfx_wb_writeback+0x10/0x10
[  297.156480][ T3380]  ? srso_alias_return_thunk+0x5/0xfbef5
[  297.156519][ T3380]  ? mark_held_locks+0x40/0x70
[  297.156553][ T3380]  ? _raw_spin_unlock_irq+0x23/0x50
[  297.156600][ T3380]  wb_workfn+0x143/0xc80
[  297.156654][ T3380]  ? srso_alias_return_thunk+0x5/0xfbef5
[  297.156697][ T3380]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  297.156740][ T3380]  ? __pfx_wb_workfn+0x10/0x10
[  297.156793][ T3380]  ? srso_alias_return_thunk+0x5/0xfbef5
[  297.156842][ T3380]  ? srso_alias_return_thunk+0x5/0xfbef5
[  297.156890][ T3380]  ? srso_alias_return_thunk+0x5/0xfbef5
[  297.156933][ T3380]  ? rcu_is_watching+0x12/0xc0
[  297.156994][ T3380]  process_one_work+0xa23/0x1940
[  297.157062][ T3380]  ? __pfx_process_one_work+0x10/0x10
[  297.157097][ T3380]  ? srso_alias_return_thunk+0x5/0xfbef5
[  297.157160][ T3380]  ? srso_alias_return_thunk+0x5/0xfbef5
[  297.157215][ T3380]  worker_thread+0x5ef/0xe50
[  297.157267][ T3380]  ? __pfx_worker_thread+0x10/0x10
[  297.157306][ T3380]  ? kthread+0x13a/0x450
[  297.157360][ T3380]  ? __pfx_worker_thread+0x10/0x10
[  297.157394][ T3380]  kthread+0x370/0x450
[  297.157450][ T3380]  ? __pfx_kthread+0x10/0x10
[  297.157512][ T3380]  ret_from_fork+0x72b/0xd50
[  297.157564][ T3380]  ? __pfx_ret_from_fork+0x10/0x10
[  297.157616][ T3380]  ? srso_alias_return_thunk+0x5/0xfbef5
[  297.157660][ T3380]  ? __switch_to+0x800/0x10f0
[  297.157717][ T3380]  ? __switch_to_asm+0x39/0x70
[  297.157766][ T3380]  ? __pfx_kthread+0x10/0x10
[  297.157827][ T3380]  ret_from_fork_asm+0x1a/0x30
[  297.157906][ T3380]  </TASK>
[  297.158313][ T3380] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  297.761792][ T5785] usb 7-1: device descriptor read/64, error -71
[  297.962838][ T5644] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  297.982117][    C1] raw-gadget.1 gadget.5: ignoring, device is not running
[  298.137425][ T5644] usb 6-1: device descriptor read/64, error -32
[  298.402565][ T5644] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  298.430855][    C1] raw-gadget.1 gadget.5: ignoring, device is not running
[  298.468575][ T7331] loop4: detected capacity change from 0 to 16
[  298.473617][ T7066] 8021q: adding VLAN 0 to HW filter on device bond0
[  298.490325][ T7331] erofs (device loop4): mounted with root inode @ nid 36.
[  298.531260][ T7066] 8021q: adding VLAN 0 to HW filter on device team0
[  298.594548][  T146] bridge0: port 1(bridge_slave_0) entered blocking state
[  298.601827][  T146] bridge0: port 1(bridge_slave_0) entered forwarding state
[  298.602008][ T5785] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  298.679526][ T5644] usb 6-1: device descriptor read/64, error -32
[  298.747021][ T6228] bridge0: port 2(bridge_slave_1) entered blocking state
[  298.754264][ T6228] bridge0: port 2(bridge_slave_1) entered forwarding state
[  298.779623][ T7333] loop2: detected capacity change from 0 to 256
[  298.783279][ T5785] usb 7-1: device descriptor read/64, error -71
[  298.812328][ T5644] usb usb6-port1: attempt power cycle
[  298.904234][ T5785] usb usb7-port1: attempt power cycle
[  298.937428][ T7333] FAT-fs (loop2): error, allocated dir entry found after end-of-directory marker (i_pos 1)
[  298.954775][ T7333] FAT-fs (loop2): Filesystem has been set read-only
[  299.141523][ T7338] loop4: detected capacity change from 0 to 128
[  299.163301][ T5644] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  299.166180][ T7338] udf: Unknown parameter 'shOrtBœ'
[  299.217298][ T5644] usb 6-1: Using ep0 maxpacket: 8
[  299.236492][ T5644] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  299.236534][ T5644] usb 6-1: config 0 has no interface number 0
[  299.236589][ T5644] usb 6-1: config 0 interface 1 altsetting 0 has an endpoint descriptor with address 0xFE, changing to 0x8E
[  299.236635][ T5644] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7
[  299.236699][ T5644] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  299.236740][ T5644] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  299.252903][ T5644] usb 6-1: config 0 descriptor??
[  299.272588][ T5785] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  299.293743][ T5785] usb 7-1: device descriptor read/8, error -71
[  299.341772][ T5644] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  299.382674][ T7341] loop2: detected capacity change from 0 to 256
[  299.432448][ T7341] exfat: Deprecated parameter 'utf8'
[  299.499724][ T7341] exfat: Deprecated parameter 'namecase'
[  299.533768][ T5785] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  299.547549][ T7341] exfat: Deprecated parameter 'namecase'
[  299.588305][ T7341] exfat: Bad value for 'umask'
[  299.689547][ T5785] usb 7-1: device descriptor read/8, error -71
[  300.188050][ T5785] usb usb7-port1: unable to enumerate USB device
[  300.574858][ T5644] usb 6-1: USB disconnect, device number 6
[  302.680125][ T7379] loop6: detected capacity change from 0 to 256
[  303.215900][ T7391] loop2: detected capacity change from 0 to 256
[  303.234193][ T7392] loop6: detected capacity change from 0 to 128
[  303.258613][ T7392] udf: Unknown parameter 'shOrtBœ'
[  303.306387][ T7391] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  303.354195][ T4938] Bluetooth: hci6: command 0x0406 tx timeout
[  303.355132][ T5644] usb 2-1: new full-speed USB device number 9 using dummy_hcd
[  303.427128][ T7066] 8021q: adding VLAN 0 to HW filter on device batadv0
[  303.516366][ T5644] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  303.579006][ T5644] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  303.626750][ T5644] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  303.661826][ T5644] usb 2-1: New USB device found, idVendor=17cc, idProduct=1021, bcdDevice= 0.40
[  303.673721][ T5644] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  303.687739][ T5644] usb 2-1: Product: syz
[  303.702614][ T5644] usb 2-1: Manufacturer: syz
[  303.715718][ T5644] usb 2-1: SerialNumber: syz
[  303.979525][ T5644] usb 2-1: unknown interface protocol 0x26, assuming v1
[  304.005799][ T5644] usb 2-1: skipping empty audio interface (v1)
[  304.216765][ T5644] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22
[  304.278368][ T5644] usb 2-1: USB disconnect, device number 9
[  304.329570][ T5884] udevd[5884]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  304.496399][ T7066] veth0_vlan: entered promiscuous mode
[  304.531451][ T7066] veth1_vlan: entered promiscuous mode
[  304.656634][ T7066] veth0_macvtap: entered promiscuous mode
[  304.710611][ T7066] veth1_macvtap: entered promiscuous mode
[  304.826025][ T7066] batman_adv: batadv0: Interface activated: batadv_slave_0
[  304.893948][ T7066] batman_adv: batadv0: Interface activated: batadv_slave_1
[  305.174732][ T3275] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  305.203087][ T3275] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  306.090429][ T3275] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  306.151501][ T3275] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  306.213028][ T7408] loop2: detected capacity change from 0 to 8192
[  306.360217][ T7408] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  306.454797][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  306.487834][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  306.805855][ T7434] loop6: detected capacity change from 0 to 128
[  306.868328][ T7434] udf: Unknown parameter 'shOrtBœ'
[  306.965053][ T3275] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  307.079352][ T7438] loop4: detected capacity change from 0 to 512
[  307.109217][ T7438] EXT4-fs: Ignoring removed orlov option
[  307.139298][ T7438] EXT4-fs: Mount option(s) incompatible with ext3
[  307.352410][ T3275] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  307.493981][ T7446] loop2: detected capacity change from 0 to 512
[  307.502448][ T7446] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  307.520876][ T7446] EXT4-fs (loop2): 1 truncate cleaned up
[  307.537806][ T7446] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  307.701053][  T146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  307.762194][  T146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  308.468111][ T3275] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  308.494032][ T7453] loop5: detected capacity change from 0 to 1024
[  308.537247][ T7453] EXT4-fs: Ignoring removed orlov option
[  308.651630][ T5629] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  308.669128][ T7453] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  308.739532][ T7453] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  308.753042][ T7456] netlink: 'syz.4.385': attribute type 4 has an invalid length.
[  308.756057][ T3275] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  308.760762][ T7456] netlink: 'syz.4.385': attribute type 5 has an invalid length.
[  308.781247][ T7456] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.385'.
[  308.818691][   T31] audit: type=1800 audit(1785195216.304:3): pid=7453 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.390" name="file1" dev="loop5" ino=15 res=0 errno=0
[  308.869520][ T7453] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #15: comm syz.5.390: lblock 0 mapped to illegal pblock 0 (length 1)
[  308.887594][   T31] audit: type=1800 audit(1785195216.304:4): pid=7453 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.390" name="file1" dev="loop5" ino=15 res=0 errno=0
[  308.921621][ T7461] loop4: detected capacity change from 0 to 4096
[  308.935737][ T7461] EXT4-fs (loop4): Test dummy encryption mode enabled
[  308.937774][ T7453] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  308.979526][ T7453] EXT4-fs (loop5): This should not happen!! Data will be lost
[  308.979526][ T7453] 
[  308.998369][ T7453] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #15: comm syz.5.390: lblock 0 mapped to illegal pblock 0 (length 1)
[  309.016594][ T7461] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  309.075293][ T7453] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  309.118097][ T7453] EXT4-fs (loop5): This should not happen!! Data will be lost
[  309.118097][ T7453] 
[  310.796175][ T5633] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[  310.830885][ T5633] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  310.912203][ T3275] bridge_slave_1: left allmulticast mode
[  310.942784][ T3275] bridge_slave_1: left promiscuous mode
[  310.952459][ T5644] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  310.962222][ T3275] bridge0: port 2(bridge_slave_1) entered disabled state
[  311.027036][ T7482] loop7: detected capacity change from 0 to 128
[  311.056319][ T7482] udf: Unknown parameter 'shOrtBœ'
[  311.068863][ T3275] bridge_slave_0: left allmulticast mode
[  311.102785][ T3275] bridge_slave_0: left promiscuous mode
[  311.122030][ T5644] usb 3-1: device descriptor read/64, error -71
[  311.131499][ T3275] bridge0: port 1(bridge_slave_0) entered disabled state
[  311.258115][ T5631] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  311.412041][ T5644] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  311.514500][ T7493] loop6: detected capacity change from 0 to 512
[  311.525713][ T7493] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  311.549978][ T7493] EXT4-fs (loop6): 1 truncate cleaned up
[  311.563634][ T7493] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  311.582057][ T5644] usb 3-1: device descriptor read/64, error -71
[  311.635426][   T29] kernel read not supported for file /rfkill (pid: 29 comm: kworker/1:1)
[  311.692850][ T5644] usb usb3-port1: attempt power cycle
[  311.717717][ T7503] netlink: 20 bytes leftover after parsing attributes in process `syz.1.405'.
[  312.082317][ T5644] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  312.269300][ T5644] usb 3-1: device descriptor read/8, error -71
[  312.745436][ T6283] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  312.882674][ T5644] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  312.944616][ T5644] usb 3-1: device descriptor read/8, error -71
[  313.297918][ T5644] usb usb3-port1: unable to enumerate USB device
[  314.351474][ T3275] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  314.424020][ T7537] netlink: 104 bytes leftover after parsing attributes in process `syz.5.414'.
[  314.515480][ T3275] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  314.567248][ T3275] bond0 (unregistering): Released all slaves
[  314.731743][ T7545] loop6: detected capacity change from 0 to 128
[  314.756860][ T7545] udf: Unknown parameter 'shOrtBœ'
[  314.887009][ T7548] loop5: detected capacity change from 0 to 512
[  314.896824][ T7548] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  314.936710][ T7548] EXT4-fs (loop5): 1 truncate cleaned up
[  314.944774][ T7548] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  315.296905][ T7557] loop1: detected capacity change from 0 to 256
[  315.306396][   T29] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  315.666561][   T29] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  315.766637][   T29] usb 3-1: config 1 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  315.887180][   T29] usb 3-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  316.017005][   T29] usb 3-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  316.111064][ T5633] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  316.117849][   T29] usb 3-1: config 1 interface 0 has no altsetting 0
[  316.171997][   T29] usb 3-1: string descriptor 0 read error: -22
[  316.208640][   T29] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  316.251084][   T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  316.327310][ T7553] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  316.639776][ T1309] ieee802154 phy0 wpan0: encryption failed: -22
[  316.668456][ T1309] ieee802154 phy1 wpan1: encryption failed: -22
[  317.231393][   T29] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor
[  317.472301][ T5758] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  317.512606][   T29] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/0003:0926:3333.0003/input/input7
[  317.634181][ T5758] usb 8-1: device descriptor read/64, error -71
[  317.801802][ T3275] hsr_slave_0: left promiscuous mode
[  317.847362][ T3275] hsr_slave_1: left promiscuous mode
[  317.876777][ T3275] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  317.898202][   T29] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.05 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0
[  317.916335][ T5758] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  317.931034][ T3275] batman_adv: batadv0: Removing interface: batadv_slave_0
[  318.004926][ T3275] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  318.015833][   T29] usb 3-1: USB disconnect, device number 11
[  318.046389][ T3275] batman_adv: batadv0: Removing interface: batadv_slave_1
[  318.093170][ T5758] usb 8-1: device descriptor read/64, error -71
[  318.224496][ T3275] veth1_macvtap: left promiscuous mode
[  318.250594][ T5758] usb usb8-port1: attempt power cycle
[  318.282089][ T3275] veth0_macvtap: left promiscuous mode
[  318.299613][ T3275] veth1_vlan: left promiscuous mode
[  318.323370][ T3275] veth0_vlan: left promiscuous mode
[  320.309187][ T7607] fido_id[7607]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory
[  320.343994][ T5758] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  320.563163][ T5758] usb 8-1: device descriptor read/8, error -71
[  320.714425][ T7619] loop5: detected capacity change from 0 to 512
[  320.723303][ T7619] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  320.751801][ T7619] EXT4-fs (loop5): 1 truncate cleaned up
[  320.766047][ T7619] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  322.016736][ T5633] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  323.332151][ T7646] loop4: detected capacity change from 0 to 512
[  323.391577][ T7646] EXT4-fs (loop4): orphan cleanup on readonly fs
[  323.425737][ T7646] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13
[  323.484045][ T7646] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  323.511935][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  323.518443][    C1] EXT4-fs (loop4): initial error at time 1785195231: ext4_mb_generate_buddy:1314
[  323.527660][    C1] EXT4-fs (loop4): last error at time 1785195231: ext4_mb_generate_buddy:1314
[  323.586345][ T7646] EXT4-fs error (device loop4): ext4_clear_blocks:874: inode #13: comm syz.4.445: attempt to clear invalid blocks 2 len 1
[  323.636342][ T3275] team0 (unregistering): Port device team_slave_1 removed
[  323.659928][ T7646] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  323.666735][ T7646] EXT4-fs error (device loop4): ext4_free_branches:1020: inode #13: comm syz.4.445: invalid indirect mapped block 1819239214 (level 0)
[  323.769001][ T7646] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  323.771628][ T7646] EXT4-fs error (device loop4): ext4_free_branches:1020: inode #13: comm syz.4.445: invalid indirect mapped block 1819239214 (level 1)
[  323.813976][ T7646] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  323.819302][ T7646] EXT4-fs (loop4): 1 truncate cleaned up
[  323.840369][ T3275] team0 (unregistering): Port device team_slave_0 removed
[  323.884280][ T7646] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  323.950709][ T7646] EXT4-fs error (device loop4): ext4_lookup:1781: inode #2: comm syz.4.445: 'file1' linked to parent dir
[  324.130121][ T5631] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  324.336427][   T31] audit: type=1800 audit(1785195231.844:5): pid=7666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.437" name="UDC" dev="configfs" ino=15530 res=0 errno=0
[  324.613823][   T30] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  324.660209][ T5284] 8021q: adding VLAN 0 to HW filter on device eth5
[  324.861031][ T7677] loop1: detected capacity change from 0 to 512
[  324.907937][ T7677] EXT4-fs: Ignoring removed mblk_io_submit option
[  325.825593][   T30] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  325.863818][ T7677] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  325.898516][   T30] usb 7-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  325.934127][   T30] usb 7-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00
[  325.957025][ T7677] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002]
[  325.987424][   T30] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  326.019611][ T7677] EXT4-fs error (device loop1): ext4_iget_extra_inode:5179: inode #15: comm syz.1.454: corrupted in-inode xattr: e_value size too large
[  326.030615][   T30] usb 7-1: Product: syz
[  326.055002][ T7677] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  326.061913][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  326.077703][    C1] EXT4-fs (loop1): initial error at time 1785195233: ext4_iget_extra_inode:5179: inode 15
[  326.087699][    C1] EXT4-fs (loop1): last error at time 1785195233: ext4_iget_extra_inode:5179: inode 15
[  326.108767][   T30] usb 7-1: Manufacturer: syz
[  326.117237][   T30] usb 7-1: SerialNumber: syz
[  326.129595][ T7677] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.454: couldn't read orphan inode 15 (err -117)
[  326.196348][ T7677] loop1: lost filesystem error report for type 5 error -117
[  326.586019][ T7694] NILFS (nullb0): couldn't find nilfs on the device
[  327.344475][   T30] usb-storage 7-1:1.0: USB Mass Storage device detected
[  327.361308][ T7677] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  327.419222][   T30] usb-storage 7-1:1.0: Quirks match for vid 174c pid 55aa: 400000
[  327.462462][   T30] scsi host1: usb-storage 7-1:1.0
[  327.555150][   T30] usb 7-1: USB disconnect, device number 6
[  328.337571][ T7724] blktrace: Concurrent blktraces are not allowed on loop4
[  330.488194][ T7736] file system registered
[  331.456280][ T7751] NILFS (nullb0): couldn't find nilfs on the device
[  332.306521][ T7761] loop4: detected capacity change from 0 to 512
[  332.353067][ T7761] EXT4-fs: Ignoring removed nomblk_io_submit option
[  332.417916][ T7761] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  332.429949][ T7765] loop7: detected capacity change from 0 to 128
[  332.463563][ T5758] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  332.533842][ T7761] EXT4-fs (loop4): 1 truncate cleaned up
[  332.583080][ T7765] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  332.631614][ T7761] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  332.699960][ T7765] ext4 filesystem being mounted at /15/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  332.730230][ T5758] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  332.795004][ T5758] usb 7-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  332.886103][ T5758] usb 7-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00
[  332.910880][   T31] audit: type=1800 audit(1785195240.424:6): pid=7761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.475" name="file1" dev="loop4" ino=15 res=0 errno=0
[  332.932085][ T5284] 8021q: adding VLAN 0 to HW filter on device eth6
[  332.949408][ T5758] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  332.999785][ T5758] usb 7-1: Product: syz
[  333.013266][ T5758] usb 7-1: Manufacturer: syz
[  333.033263][ T5758] usb 7-1: SerialNumber: syz
[  333.035015][ T7765] loop7: detected capacity change from 128 to 0
[  333.103443][   T64] EXT4-fs error (device loop7): __ext4_get_inode_loc_noinmem:5008: inode #12: block 36: comm kworker/u8:4: unable to read itable block
[  333.123086][ T5758] usb-storage 7-1:1.0: USB Mass Storage device detected
[  333.187328][ T5758] usb-storage 7-1:1.0: Quirks match for vid 174c pid 55aa: 400000
[  333.217511][ T5758] scsi host1: usb-storage 7-1:1.0
[  333.225543][   T64] Buffer I/O error on dev loop7, logical block 1, lost sync page write
[  333.302879][   T30] usb 7-1: USB disconnect, device number 7
[  333.312901][   T64] EXT4-fs (loop7): I/O error while writing superblock
[  333.352412][   T64] EXT4-fs error (device loop7): __ext4_get_inode_loc_noinmem:5008: inode #13: block 36: comm kworker/u8:4: unable to read itable block
[  333.401712][   T64] Buffer I/O error on dev loop7, logical block 1, lost sync page write
[  333.436637][ T5631] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  333.446210][   T64] EXT4-fs (loop7): I/O error while writing superblock
[  333.506074][ T7774] fscrypt: loop7: 2 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 13
[  333.705439][ T7066] EXT4-fs warning (device loop7): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -EIO reading directory block
[  333.775332][ T7066] EXT4-fs error (device loop7): ext4_get_inode_loc:5023: inode #2: block 35: comm syz-executor: unable to read itable block
[  333.817664][ T5632] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  333.827733][ T7786] loop2: detected capacity change from 0 to 512
[  333.836315][ T7786] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  333.859287][ T7066] Buffer I/O error on dev loop7, logical block 1, lost sync page write
[  333.879737][ T7786] EXT4-fs (loop2): 1 truncate cleaned up
[  333.887897][ T7786] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  333.920686][ T7066] EXT4-fs (loop7): I/O error while writing superblock
[  333.927826][ T7066] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6435: IO failure
[  333.936860][ T7066] Buffer I/O error on dev loop7, logical block 1, lost sync page write
[  333.945600][ T7066] EXT4-fs (loop7): I/O error while writing superblock
[  333.976347][ T7066] EXT4-fs error (device loop7): ext4_dirty_inode:6639: inode #2: comm syz-executor: mark_inode_dirty error
[  334.085526][ T7066] Buffer I/O error on dev loop7, logical block 1, lost sync page write
[  334.144973][ T7066] EXT4-fs (loop7): I/O error while writing superblock
[  334.837272][ T3286] EXT4-fs error (device loop7): __ext4_get_inode_loc_noinmem:5008: inode #2: block 35: comm kworker/u8:10: unable to read itable block
[  334.884487][ T3286] Buffer I/O error on dev loop7, logical block 1, lost sync page write
[  334.954121][ T3286] EXT4-fs (loop7): I/O error while writing superblock
[  336.010444][ T5629] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  336.023886][ T7066] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  336.341586][ T7066] Buffer I/O error on dev loop7, logical block 1, lost sync page write
[  336.414763][ T7066] EXT4-fs (loop7): I/O error while writing superblock
[  336.795512][ T7822] loop2: detected capacity change from 0 to 256
[  336.804754][ T7814] NILFS (nullb0): couldn't find nilfs on the device
[  336.816647][ T7822] exfat: Invalid uid '0x00000000ffffffff'
[  339.409598][ T6231] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  339.594919][ T7835] loop4: detected capacity change from 0 to 40427
[  339.616193][ T7835] F2FS-fs (loop4): invalid crc value
[  339.749412][ T7835] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  339.762499][ T7835] F2FS-fs (loop4): f2fs_disable_checkpoint starts, unusable: 0
[  339.770116][ T7835] F2FS-fs (loop4): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[  339.780979][ T7835] F2FS-fs (loop4): Start checkpoint disabled!
[  339.798897][ T7835] F2FS-fs (loop4): f2fs_disable_checkpoint finishes, err:0
[  339.811742][ T7835] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  340.056908][ T6231] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  340.106025][ T1026] kworker/u8:7: attempt to access beyond end of device
[  340.106025][ T1026] loop4: rw=1, sector=45096, nr_sectors = 128 limit=40427
[  340.194072][ T6232] kworker/u8:15: attempt to access beyond end of device
[  340.194072][ T6232] loop4: rw=2049, sector=45224, nr_sectors = 16 limit=40427
[  340.213057][ T5284] 8021q: adding VLAN 0 to HW filter on device eth7
[  340.268580][ T6232] CPU: 0 UID: 0 PID: 6232 Comm: kworker/u8:15 Not tainted syzkaller #0 PREEMPT(full) 
[  340.268626][ T6232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  340.268650][ T6232] Workqueue: writeback wb_workfn (flush-7:4)
[  340.268711][ T6232] Call Trace:
[  340.268722][ T6232]  <TASK>
[  340.268735][ T6232]  dump_stack_lvl+0x100/0x190
[  340.268779][ T6232]  f2fs_stop_checkpoint+0x5e6/0xb30
[  340.268840][ T6232]  ? srso_alias_return_thunk+0x5/0xfbef5
[  340.268884][ T6232]  ? errseq_set+0xe3/0x150
[  340.268939][ T6232]  ? srso_alias_return_thunk+0x5/0xfbef5
[  340.268990][ T6232]  f2fs_write_end_bio+0xf53/0x1340
[  340.269032][ T6232]  ? __pfx_f2fs_write_end_bio+0x10/0x10
[  340.269077][ T6232]  ? srso_alias_return_thunk+0x5/0xfbef5
[  340.269130][ T6232]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  340.269167][ T6232]  bio_endio+0x778/0x8e0
[  340.269213][ T6232]  submit_bio_noacct+0x64c/0x1ff0
[  340.269281][ T6232]  f2fs_submit_write_bio+0x133/0x330
[  340.269342][ T6232]  __submit_merged_bio+0x330/0x7b0
[  340.269378][ T6232]  ? rcu_is_watching+0x12/0xc0
[  340.269443][ T6232]  __submit_merged_write_cond+0x3fe/0x510
[  340.269492][ T6232]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  340.269542][ T6232]  ? __pfx___might_resched+0x10/0x10
[  340.269581][ T6232]  ? srso_alias_return_thunk+0x5/0xfbef5
[  340.269625][ T6232]  ? folio_clear_dirty_for_io+0x178/0x960
[  340.269691][ T6232]  f2fs_write_cache_pages+0x20e9/0x2630
[  340.269761][ T6232]  ? __pfx_f2fs_write_cache_pages+0x10/0x10
[  340.269851][ T6232]  ? srso_alias_return_thunk+0x5/0xfbef5
[  340.269961][ T6232]  ? srso_alias_return_thunk+0x5/0xfbef5
[  340.270007][ T6232]  ? srso_alias_return_thunk+0x5/0xfbef5
[  340.270051][ T6232]  ? rcu_is_watching+0x12/0xc0
[  340.270111][ T6232]  f2fs_write_data_pages+0x799/0x16d0
[  340.270172][ T6232]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  340.270229][ T6232]  ? do_raw_spin_unlock+0x145/0x1e0
[  340.270287][ T6232]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  340.270339][ T6232]  do_writepages+0x278/0x600
[  340.270405][ T6232]  ? __pfx_do_writepages+0x10/0x10
[  340.270473][ T6232]  ? srso_alias_return_thunk+0x5/0xfbef5
[  340.270524][ T6232]  __writeback_single_inode+0x164/0x1300
[  340.270573][ T6232]  ? find_held_lock+0x2b/0x80
[  340.270632][ T6232]  ? srso_alias_return_thunk+0x5/0xfbef5
[  340.270680][ T6232]  ? __pfx___writeback_single_inode+0x10/0x10
[  340.270730][ T6232]  ? srso_alias_return_thunk+0x5/0xfbef5
[  340.270774][ T6232]  ? do_raw_spin_unlock+0x145/0x1e0
[  340.270824][ T6232]  ? srso_alias_return_thunk+0x5/0xfbef5
[  340.270874][ T6232]  writeback_sb_inodes+0x766/0x1c50
[  340.270946][ T6232]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  340.271058][ T6232]  ? srso_alias_return_thunk+0x5/0xfbef5
[  340.271100][ T6232]  ? rcu_is_watching+0x12/0xc0
[  340.271151][ T6232]  ? srso_alias_return_thunk+0x5/0xfbef5
[  340.271195][ T6232]  ? queue_io+0x287/0x530
[  340.271240][ T6232]  wb_writeback+0x1c0/0xb50
[  340.271300][ T6232]  ? __pfx_wb_writeback+0x10/0x10
[  340.271361][ T6232]  ? srso_alias_return_thunk+0x5/0xfbef5
[  340.271404][ T6232]  ? mark_held_locks+0x40/0x70
[  340.271451][ T6232]  ? _raw_spin_unlock_irq+0x23/0x50
[  340.271496][ T6232]  wb_workfn+0x143/0xc80
[  340.271549][ T6232]  ? srso_alias_return_thunk+0x5/0xfbef5
[  340.271593][ T6232]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  340.271635][ T6232]  ? __pfx_wb_workfn+0x10/0x10
[  340.271687][ T6232]  ? srso_alias_return_thunk+0x5/0xfbef5
[  340.271736][ T6232]  ? srso_alias_return_thunk+0x5/0xfbef5
[  340.271784][ T6232]  ? srso_alias_return_thunk+0x5/0xfbef5
[  340.271827][ T6232]  ? rcu_is_watching+0x12/0xc0
[  340.271887][ T6232]  process_one_work+0xa23/0x1940
[  340.271945][ T6232]  ? __pfx_process_one_work+0x10/0x10
[  340.271979][ T6232]  ? srso_alias_return_thunk+0x5/0xfbef5
[  340.272036][ T6232]  ? srso_alias_return_thunk+0x5/0xfbef5
[  340.272087][ T6232]  worker_thread+0x5ef/0xe50
[  340.272135][ T6232]  ? __pfx_worker_thread+0x10/0x10
[  340.272173][ T6232]  ? kthread+0x13a/0x450
[  340.272228][ T6232]  ? __pfx_worker_thread+0x10/0x10
[  340.272261][ T6232]  kthread+0x370/0x450
[  340.272317][ T6232]  ? __pfx_kthread+0x10/0x10
[  340.272377][ T6232]  ret_from_fork+0x72b/0xd50
[  340.272432][ T6232]  ? __pfx_ret_from_fork+0x10/0x10
[  340.272483][ T6232]  ? srso_alias_return_thunk+0x5/0xfbef5
[  340.272526][ T6232]  ? __switch_to+0x800/0x10f0
[  340.272584][ T6232]  ? __switch_to_asm+0x39/0x70
[  340.272634][ T6232]  ? __pfx_kthread+0x10/0x10
[  340.272694][ T6232]  ret_from_fork_asm+0x1a/0x30
[  340.272769][ T6232]  </TASK>
[  340.876599][ T7831] loop6: detected capacity change from 0 to 40427
[  340.885709][ T7831] F2FS-fs: heap/no_heap options were deprecated
[  340.901434][ T6232] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  340.908429][ T7831] F2FS-fs (loop6): build fault injection rate: 19
[  340.915047][ T7831] F2FS-fs (loop6): build fault injection type: 0x3bfe8c
[  340.928033][ T7831] F2FS-fs (loop6): invalid crc value
[  340.946634][ T7831] F2FS-fs (loop6): inject page alloc in f2fs_grab_cache_folio of __f2fs_build_free_nids+0x1fe/0x10a0
[  340.958049][ T6231] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  341.002258][ T6232] CPU: 1 UID: 0 PID: 6232 Comm: kworker/u8:15 Not tainted syzkaller #0 PREEMPT(full) 
[  341.002306][ T6232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  341.002330][ T6232] Workqueue: writeback wb_workfn (flush-7:4)
[  341.002391][ T6232] Call Trace:
[  341.002403][ T6232]  <TASK>
[  341.002416][ T6232]  dump_stack_lvl+0x100/0x190
[  341.002461][ T6232]  f2fs_stop_checkpoint+0x5e6/0xb30
[  341.002523][ T6232]  ? srso_alias_return_thunk+0x5/0xfbef5
[  341.002568][ T6232]  ? errseq_set+0xe3/0x150
[  341.002625][ T6232]  ? srso_alias_return_thunk+0x5/0xfbef5
[  341.002677][ T6232]  f2fs_write_end_bio+0xf53/0x1340
[  341.002720][ T6232]  ? __pfx_f2fs_write_end_bio+0x10/0x10
[  341.002764][ T6232]  ? srso_alias_return_thunk+0x5/0xfbef5
[  341.002819][ T6232]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  341.002856][ T6232]  bio_endio+0x778/0x8e0
[  341.002904][ T6232]  submit_bio_noacct+0x64c/0x1ff0
[  341.002981][ T6232]  f2fs_submit_write_bio+0x133/0x330
[  341.003043][ T6232]  __submit_merged_bio+0x330/0x7b0
[  341.003079][ T6232]  ? rcu_is_watching+0x12/0xc0
[  341.003139][ T6232]  __submit_merged_write_cond+0x3fe/0x510
[  341.003189][ T6232]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  341.003239][ T6232]  ? __pfx___might_resched+0x10/0x10
[  341.003279][ T6232]  ? srso_alias_return_thunk+0x5/0xfbef5
[  341.003323][ T6232]  ? folio_clear_dirty_for_io+0x178/0x960
[  341.003390][ T6232]  f2fs_write_cache_pages+0x20e9/0x2630
[  341.003462][ T6232]  ? __pfx_f2fs_write_cache_pages+0x10/0x10
[  341.003550][ T6232]  ? srso_alias_return_thunk+0x5/0xfbef5
[  341.003661][ T6232]  ? srso_alias_return_thunk+0x5/0xfbef5
[  341.003707][ T6232]  ? srso_alias_return_thunk+0x5/0xfbef5
[  341.003751][ T6232]  ? rcu_is_watching+0x12/0xc0
[  341.003809][ T6232]  f2fs_write_data_pages+0x799/0x16d0
[  341.003870][ T6232]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  341.003931][ T6232]  ? do_raw_spin_unlock+0x145/0x1e0
[  341.003988][ T6232]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  341.004039][ T6232]  do_writepages+0x278/0x600
[  341.004104][ T6232]  ? __pfx_do_writepages+0x10/0x10
[  341.004166][ T6232]  ? srso_alias_return_thunk+0x5/0xfbef5
[  341.004217][ T6232]  __writeback_single_inode+0x164/0x1300
[  341.004267][ T6232]  ? find_held_lock+0x2b/0x80
[  341.004343][ T6232]  ? srso_alias_return_thunk+0x5/0xfbef5
[  341.004391][ T6232]  ? __pfx___writeback_single_inode+0x10/0x10
[  341.004439][ T6232]  ? srso_alias_return_thunk+0x5/0xfbef5
[  341.004483][ T6232]  ? do_raw_spin_unlock+0x145/0x1e0
[  341.004534][ T6232]  ? srso_alias_return_thunk+0x5/0xfbef5
[  341.004584][ T6232]  writeback_sb_inodes+0x766/0x1c50
[  341.004657][ T6232]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  341.004770][ T6232]  ? srso_alias_return_thunk+0x5/0xfbef5
[  341.004814][ T6232]  ? rcu_is_watching+0x12/0xc0
[  341.004866][ T6232]  ? srso_alias_return_thunk+0x5/0xfbef5
[  341.004910][ T6232]  ? queue_io+0x287/0x530
[  341.004959][ T6232]  wb_writeback+0x1c0/0xb50
[  341.005020][ T6232]  ? __pfx_wb_writeback+0x10/0x10
[  341.005081][ T6232]  ? srso_alias_return_thunk+0x5/0xfbef5
[  341.005125][ T6232]  ? mark_held_locks+0x40/0x70
[  341.005166][ T6232]  ? _raw_spin_unlock_irq+0x23/0x50
[  341.005211][ T6232]  wb_workfn+0x143/0xc80
[  341.005265][ T6232]  ? srso_alias_return_thunk+0x5/0xfbef5
[  341.005309][ T6232]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  341.005352][ T6232]  ? __pfx_wb_workfn+0x10/0x10
[  341.005405][ T6232]  ? srso_alias_return_thunk+0x5/0xfbef5
[  341.005453][ T6232]  ? srso_alias_return_thunk+0x5/0xfbef5
[  341.005501][ T6232]  ? srso_alias_return_thunk+0x5/0xfbef5
[  341.005545][ T6232]  ? rcu_is_watching+0x12/0xc0
[  341.005606][ T6232]  process_one_work+0xa23/0x1940
[  341.005663][ T6232]  ? __pfx_process_one_work+0x10/0x10
[  341.005698][ T6232]  ? srso_alias_return_thunk+0x5/0xfbef5
[  341.005757][ T6232]  ? srso_alias_return_thunk+0x5/0xfbef5
[  341.005810][ T6232]  worker_thread+0x5ef/0xe50
[  341.005859][ T6232]  ? __pfx_worker_thread+0x10/0x10
[  341.005898][ T6232]  ? kthread+0x13a/0x450
[  341.005957][ T6232]  ? __pfx_worker_thread+0x10/0x10
[  341.005990][ T6232]  kthread+0x370/0x450
[  341.006046][ T6232]  ? __pfx_kthread+0x10/0x10
[  341.006107][ T6232]  ret_from_fork+0x72b/0xd50
[  341.006159][ T6232]  ? __pfx_ret_from_fork+0x10/0x10
[  341.006210][ T6232]  ? srso_alias_return_thunk+0x5/0xfbef5
[  341.006254][ T6232]  ? __switch_to+0x800/0x10f0
[  341.006312][ T6232]  ? __switch_to_asm+0x39/0x70
[  341.006363][ T6232]  ? __pfx_kthread+0x10/0x10
[  341.006424][ T6232]  ret_from_fork_asm+0x1a/0x30
[  341.006499][ T6232]  </TASK>
[  341.019940][ T7831] F2FS-fs (loop6): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_get_node_info+0xe15/0x1710
[  341.056262][ T6232] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  341.193175][ T7831] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  341.224877][ T7831] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  341.654647][ T6231] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  341.838994][ T4938] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  341.868680][ T4938] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  341.879067][ T4938] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  341.895995][ T4938] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  341.900270][ T7855] F2FS-fs (loop6): inject page alloc in f2fs_grab_cache_folio of f2fs_get_dnode_of_data+0x114c/0x3020
[  341.924747][ T4938] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  342.032155][   T30] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  342.072760][ T7831] ip6gre1: entered promiscuous mode
[  342.109609][ T7831] ip6gre1: entered allmulticast mode
[  343.310495][   T30] usb 3-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00
[  343.333500][   T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  343.355978][   T30] usb 3-1: Product: syz
[  343.708716][    C0] F2FS-fs (loop6): inject write IO error in f2fs_write_end_bio of bio_endio+0x778/0x8e0
[  343.718901][    C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) 
[  343.718949][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  343.718972][    C0] Call Trace:
[  343.718984][    C0]  <TASK>
[  343.718998][    C0]  dump_stack_lvl+0x100/0x190
[  343.719046][    C0]  f2fs_stop_checkpoint+0x5e6/0xb30
[  343.719111][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  343.719158][    C0]  ? errseq_set+0xe3/0x150
[  343.719217][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  343.719271][    C0]  f2fs_write_end_bio+0xf53/0x1340
[  343.719315][    C0]  ? __pfx_f2fs_write_end_bio+0x10/0x10
[  343.719361][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  343.719425][    C0]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  343.719466][    C0]  bio_endio+0x778/0x8e0
[  343.719515][    C0]  blk_update_request+0x741/0x1380
[  343.719587][    C0]  blk_mq_end_request+0x57/0x420
[  343.719648][    C0]  blk_flush_complete_seq+0x5e9/0x1050
[  343.719709][    C0]  ? __pfx_blk_flush_complete_seq+0x10/0x10
[  343.719764][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  343.719811][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  343.719859][    C0]  ? ktime_get+0x1a4/0x320
[  343.719907][    C0]  flush_end_io+0x83d/0x10f0
[  343.719971][    C0]  blk_mq_end_request+0x214/0x420
[  343.720032][    C0]  lo_complete_rq+0x165/0x220
[  343.720075][    C0]  blk_complete_reqs+0xb1/0xf0
[  343.720124][    C0]  handle_softirqs+0x1ea/0x9b0
[  343.720179][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  343.720227][    C0]  ? run_ksoftirqd+0x5b/0x60
[  343.720272][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  343.720319][    C0]  ? rcu_is_watching+0x12/0xc0
[  343.720379][    C0]  ? __pfx_run_ksoftirqd+0x10/0x10
[  343.720432][    C0]  run_ksoftirqd+0x38/0x60
[  343.720476][    C0]  smpboot_thread_fn+0x3d3/0xaa0
[  343.720542][    C0]  ? kthread+0x13a/0x450
[  343.720600][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  343.720656][    C0]  kthread+0x370/0x450
[  343.720716][    C0]  ? __pfx_kthread+0x10/0x10
[  343.720780][    C0]  ret_from_fork+0x72b/0xd50
[  343.720835][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  343.720889][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  343.720936][    C0]  ? __switch_to+0x800/0x10f0
[  343.720997][    C0]  ? __switch_to_asm+0x39/0x70
[  343.721051][    C0]  ? __pfx_kthread+0x10/0x10
[  343.721116][    C0]  ret_from_fork_asm+0x1a/0x30
[  343.721193][    C0]  </TASK>
[  343.721207][    C0] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  343.973595][ T6283] F2FS-fs (loop6): do_checkpoint failed err:-5, stop checkpoint
[  344.097025][ T4938] Bluetooth: hci3: command tx timeout
[  344.279783][   T30] usb 3-1: Manufacturer: syz
[  344.284939][   T30] usb 3-1: SerialNumber: syz
[  344.323524][ T7877] loop1: detected capacity change from 0 to 256
[  344.356807][ T6231] bridge_slave_1: left allmulticast mode
[  344.362733][ T6231] bridge_slave_1: left promiscuous mode
[  344.368639][ T6231] bridge0: port 2(bridge_slave_1) entered disabled state
[  344.380788][ T6231] bridge_slave_0: left allmulticast mode
[  344.409815][ T6231] bridge_slave_0: left promiscuous mode
[  344.458351][ T7877] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  344.472762][ T6231] bridge0: port 1(bridge_slave_0) entered disabled state
[  344.664228][ T7877] exFAT-fs (loop1): valid_size(150994954) is greater than size(10)
[  344.715594][ T7885] loop4: detected capacity change from 0 to 512
[  344.729402][ T7885] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  344.759026][ T7885] EXT4-fs (loop4): 1 truncate cleaned up
[  344.766982][ T7885] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  345.573739][   T30] usb 3-1: usb_control_msg returned -71
[  345.630160][   T30] usbtmc 3-1:1.0: can't read capabilities
[  345.647728][ T7894] loop5: detected capacity change from 0 to 256
[  345.787110][ T7894] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d)
[  345.918049][ T5631] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  345.939499][ T7894] exFAT-fs (loop5): valid_size(150994954) is greater than size(10)
[  345.981782][   T30] usb 3-1: USB disconnect, device number 12
[  346.172050][ T4938] Bluetooth: hci3: command tx timeout
[  346.533706][ T7904] loop1: detected capacity change from 0 to 1024
[  346.667776][ T7904] loop1: detected capacity change from 0 to 512
[  346.685419][ T7904] EXT4-fs: Ignoring removed nomblk_io_submit option
[  347.396475][ T7904] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  348.398721][ T4938] Bluetooth: hci3: command tx timeout
[  348.430253][ T7904] EXT4-fs (loop1): 1 truncate cleaned up
[  348.450304][ T7904] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  348.814575][ T7904] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  350.482035][ T4938] Bluetooth: hci3: command tx timeout
[  351.508808][ T6231] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  351.646222][ T6231] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  351.917352][ T6231] bond0 (unregistering): Released all slaves
[  352.796269][ T5284] 8021q: adding VLAN 0 to HW filter on device eth8
[  352.908150][ T7934] loop5: detected capacity change from 0 to 2048
[  352.990759][ T7934] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  353.302100][ T5777] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  353.480542][ T7951] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  353.522007][ T5777] usb 7-1: Using ep0 maxpacket: 16
[  353.569688][ T5777] usb 7-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  353.633878][ T5777] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  353.680479][ T5777] usb 7-1: Product: syz
[  353.708906][ T5777] usb 7-1: Manufacturer: syz
[  353.730179][ T5777] usb 7-1: SerialNumber: syz
[  353.784215][ T5777] usb 7-1: config 0 descriptor??
[  353.884580][ T5777] ssu100 7-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  354.160275][ T7957] loop4: detected capacity change from 0 to 512
[  354.171663][ T7957] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  354.199563][ T7957] EXT4-fs (loop4): 1 truncate cleaned up
[  354.208090][ T7957] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  354.562148][ T5777] ssu100 7-1:0.0: probe with driver ssu100 failed with error -110
[  354.929236][ T7940] EXT4-fs error (device loop5): ext4_validate_block_bitmap:431: comm ext4lazyinit: bg 0: block 2: invalid block bitmap
[  355.107445][   T31] audit: type=1800 audit(1785195262.614:7): pid=7963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.519" name="file1" dev="loop4" ino=15 res=0 errno=0
[  355.220745][ T5633] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  355.320136][   T31] audit: type=1800 audit(1785195262.614:8): pid=7962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.519" name="file1" dev="loop4" ino=15 res=0 errno=0
[  355.373867][ T5631] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  357.264905][ T7983] ubi0: attaching mtd0
[  357.958588][ T7983] ubi0: scanning is finished
[  358.034704][ T5777] usb 7-1: USB disconnect, device number 8
[  358.405705][ T7991] NILFS (nullb0): couldn't find nilfs on the device
[  358.789724][ T7987] netlink: 12 bytes leftover after parsing attributes in process `syz.1.524'.
[  358.801055][ T7990] loop6: detected capacity change from 0 to 40427
[  358.808941][ T7983] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4
[  358.849787][ T7990] F2FS-fs (loop6): invalid crc value
[  359.095940][ T6231] hsr_slave_0: left promiscuous mode
[  359.120490][ T7990] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  359.133911][ T7990] F2FS-fs (loop6): f2fs_disable_checkpoint starts, unusable: 0
[  359.141516][ T7990] F2FS-fs (loop6): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[  359.157228][ T7990] F2FS-fs (loop6): Start checkpoint disabled!
[  359.178735][ T7990] F2FS-fs (loop6): f2fs_disable_checkpoint finishes, err:0
[  359.180253][ T6231] hsr_slave_1: left promiscuous mode
[  359.205118][ T7990] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[  359.275555][ T6231] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  359.307085][ T6231] batman_adv: batadv0: Removing interface: batadv_slave_0
[  359.399983][ T6231] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  359.405652][ T1026] kworker/u8:7: attempt to access beyond end of device
[  359.405652][ T1026] loop6: rw=1, sector=45096, nr_sectors = 128 limit=40427
[  359.458922][ T6231] batman_adv: batadv0: Removing interface: batadv_slave_1
[  359.497258][ T1026] kworker/u8:7: attempt to access beyond end of device
[  359.497258][ T1026] loop6: rw=2049, sector=45224, nr_sectors = 8 limit=40427
[  359.543019][ T1026] CPU: 0 UID: 0 PID: 1026 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) 
[  359.543068][ T1026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  359.543093][ T1026] Workqueue: writeback wb_workfn (flush-7:6)
[  359.543154][ T1026] Call Trace:
[  359.543166][ T1026]  <TASK>
[  359.543179][ T1026]  dump_stack_lvl+0x100/0x190
[  359.543226][ T1026]  f2fs_stop_checkpoint+0x5e6/0xb30
[  359.543288][ T1026]  ? srso_alias_return_thunk+0x5/0xfbef5
[  359.543333][ T1026]  ? errseq_set+0xe3/0x150
[  359.543390][ T1026]  ? srso_alias_return_thunk+0x5/0xfbef5
[  359.543437][ T1026]  f2fs_write_end_bio+0xf53/0x1340
[  359.543474][ T1026]  ? __pfx_f2fs_write_end_bio+0x10/0x10
[  359.543512][ T1026]  ? srso_alias_return_thunk+0x5/0xfbef5
[  359.543557][ T1026]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  359.543588][ T1026]  bio_endio+0x778/0x8e0
[  359.543627][ T1026]  submit_bio_noacct+0x64c/0x1ff0
[  359.543685][ T1026]  f2fs_submit_write_bio+0x133/0x330
[  359.543735][ T1026]  __submit_merged_bio+0x330/0x7b0
[  359.543770][ T1026]  ? rcu_is_watching+0x12/0xc0
[  359.543820][ T1026]  __submit_merged_write_cond+0x3fe/0x510
[  359.543862][ T1026]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  359.543912][ T1026]  ? __pfx___might_resched+0x10/0x10
[  359.543945][ T1026]  ? srso_alias_return_thunk+0x5/0xfbef5
[  359.543981][ T1026]  ? folio_clear_dirty_for_io+0x178/0x960
[  359.544039][ T1026]  f2fs_write_cache_pages+0x20e9/0x2630
[  359.544104][ T1026]  ? __pfx_f2fs_write_cache_pages+0x10/0x10
[  359.544153][ T1026]  ? srso_alias_return_thunk+0x5/0xfbef5
[  359.544192][ T1026]  ? srso_alias_return_thunk+0x5/0xfbef5
[  359.544228][ T1026]  ? find_held_lock+0x2b/0x80
[  359.544273][ T1026]  ? nr_blockdev_pages+0xde/0x120
[  359.544340][ T1026]  ? nr_blockdev_pages+0xde/0x120
[  359.544387][ T1026]  ? srso_alias_return_thunk+0x5/0xfbef5
[  359.544447][ T1026]  ? si_meminfo+0x118/0x230
[  359.544485][ T1026]  ? srso_alias_return_thunk+0x5/0xfbef5
[  359.544525][ T1026]  ? srso_alias_return_thunk+0x5/0xfbef5
[  359.544626][ T1026]  ? srso_alias_return_thunk+0x5/0xfbef5
[  359.544664][ T1026]  ? rcu_is_watching+0x12/0xc0
[  359.544720][ T1026]  f2fs_write_data_pages+0x799/0x16d0
[  359.544764][ T1026]  ? srso_alias_return_thunk+0x5/0xfbef5
[  359.544825][ T1026]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  359.544898][ T1026]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  359.544951][ T1026]  do_writepages+0x278/0x600
[  359.545018][ T1026]  ? __pfx_do_writepages+0x10/0x10
[  359.545079][ T1026]  ? srso_alias_return_thunk+0x5/0xfbef5
[  359.545125][ T1026]  __writeback_single_inode+0x164/0x1300
[  359.545162][ T1026]  ? find_held_lock+0x2b/0x80
[  359.545206][ T1026]  ? srso_alias_return_thunk+0x5/0xfbef5
[  359.545242][ T1026]  ? __pfx___writeback_single_inode+0x10/0x10
[  359.545279][ T1026]  ? srso_alias_return_thunk+0x5/0xfbef5
[  359.545311][ T1026]  ? do_raw_spin_unlock+0x145/0x1e0
[  359.545350][ T1026]  ? srso_alias_return_thunk+0x5/0xfbef5
[  359.545390][ T1026]  writeback_sb_inodes+0x766/0x1c50
[  359.545448][ T1026]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  359.545484][ T1026]  ? do_raw_spin_lock+0x128/0x260
[  359.545522][ T1026]  ? srso_alias_return_thunk+0x5/0xfbef5
[  359.545608][ T1026]  ? srso_alias_return_thunk+0x5/0xfbef5
[  359.545641][ T1026]  ? rcu_is_watching+0x12/0xc0
[  359.545680][ T1026]  ? srso_alias_return_thunk+0x5/0xfbef5
[  359.545713][ T1026]  ? queue_io+0x287/0x530
[  359.545747][ T1026]  wb_writeback+0x1c0/0xb50
[  359.545796][ T1026]  ? __pfx_wb_writeback+0x10/0x10
[  359.545844][ T1026]  ? srso_alias_return_thunk+0x5/0xfbef5
[  359.545881][ T1026]  ? mark_held_locks+0x40/0x70
[  359.545913][ T1026]  ? _raw_spin_unlock_irq+0x23/0x50
[  359.545948][ T1026]  wb_workfn+0x143/0xc80
[  359.545990][ T1026]  ? srso_alias_return_thunk+0x5/0xfbef5
[  359.546022][ T1026]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  359.546056][ T1026]  ? __pfx_wb_workfn+0x10/0x10
[  359.546096][ T1026]  ? srso_alias_return_thunk+0x5/0xfbef5
[  359.546134][ T1026]  ? srso_alias_return_thunk+0x5/0xfbef5
[  359.546171][ T1026]  ? srso_alias_return_thunk+0x5/0xfbef5
[  359.546204][ T1026]  ? rcu_is_watching+0x12/0xc0
[  359.546251][ T1026]  process_one_work+0xa23/0x1940
[  359.546298][ T1026]  ? __pfx_process_one_work+0x10/0x10
[  359.546324][ T1026]  ? srso_alias_return_thunk+0x5/0xfbef5
[  359.546373][ T1026]  ? srso_alias_return_thunk+0x5/0xfbef5
[  359.546413][ T1026]  worker_thread+0x5ef/0xe50
[  359.546458][ T1026]  ? kthread+0x13a/0x450
[  359.546499][ T1026]  ? __pfx_worker_thread+0x10/0x10
[  359.546525][ T1026]  kthread+0x370/0x450
[  359.546567][ T1026]  ? __pfx_kthread+0x10/0x10
[  359.546614][ T1026]  ret_from_fork+0x72b/0xd50
[  359.546654][ T1026]  ? __pfx_ret_from_fork+0x10/0x10
[  359.546693][ T1026]  ? srso_alias_return_thunk+0x5/0xfbef5
[  359.546726][ T1026]  ? __switch_to+0x800/0x10f0
[  359.546770][ T1026]  ? __switch_to_asm+0x39/0x70
[  359.546808][ T1026]  ? __pfx_kthread+0x10/0x10
[  359.546855][ T1026]  ret_from_fork_asm+0x1a/0x30
[  359.546919][ T1026]  </TASK>
[  360.028955][ T1026] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  360.191591][ T6231] veth1_macvtap: left promiscuous mode
[  360.197755][ T6231] veth0_macvtap: left promiscuous mode
[  360.203493][ T6231] veth1_vlan: left promiscuous mode
[  360.208790][ T6231] veth0_vlan: left promiscuous mode
[  360.414360][ T8013] loop4: detected capacity change from 0 to 16
[  360.986174][ T8013] erofs (device loop4): mounted with root inode @ nid 36.
[  362.719457][ T8028] loop2: detected capacity change from 0 to 512
[  362.771726][ T8028] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  362.844850][ T8028] ext4 filesystem being mounted at /82/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  362.901302][ T6231] team0 (unregistering): Port device team_slave_1 removed
[  362.922820][ T6231] team0 (unregistering): Port device team_slave_0 removed
[  363.800699][ T8038] ubi0: attaching mtd0
[  363.833093][ T8038] ubi0: scanning is finished
[  363.870761][   T31] audit: type=1800 audit(1785195270.784:9): pid=8039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.535" name="file1" dev="loop2" ino=15 res=0 errno=0
[  364.072536][ T8016] udc dummy_udc.0: failed to start g1: -4
[  364.089240][ T8016] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -4
[  364.111555][ T8016] UDC core: g1: couldn't find an available UDC or it's busy
[  364.411087][ T7987] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR
[  364.662706][ T5284] 8021q: adding VLAN 0 to HW filter on device eth9
[  365.416910][ T5629] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  366.441656][ T8038] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4
[  367.578654][ T8052] netlink: 16 bytes leftover after parsing attributes in process `syz.2.541'.
[  369.665618][ T8089] netlink: 12 bytes leftover after parsing attributes in process `syz.4.551'.
[  371.071319][ T8105] vivid-001: kernel_thread() failed
[  371.354862][ T7852] bridge0: port 1(bridge_slave_0) entered blocking state
[  371.569069][ T7852] bridge0: port 1(bridge_slave_0) entered disabled state
[  371.582245][ T7852] bridge_slave_0: entered allmulticast mode
[  372.416731][ T7852] bridge_slave_0: entered promiscuous mode
[  372.432425][ T7852] bridge0: port 2(bridge_slave_1) entered blocking state
[  372.452079][ T7852] bridge0: port 2(bridge_slave_1) entered disabled state
[  372.461595][ T7852] bridge_slave_1: entered allmulticast mode
[  372.464075][ T8094] ==================================================================
[  372.475568][ T8094] BUG: KASAN: slab-use-after-free in pn_bind+0x550/0x5b0
[  372.482612][ T8094] Write of size 8 at addr ffff888076998800 by task syz.6.552/8094
[  372.490416][ T8094] 
[  372.492737][ T8094] CPU: 1 UID: 0 PID: 8094 Comm: syz.6.552 Not tainted syzkaller #0 PREEMPT(full) 
[  372.492778][ T8094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  372.492798][ T8094] Call Trace:
[  372.492810][ T8094]  <TASK>
[  372.492824][ T8094]  dump_stack_lvl+0x100/0x190
[  372.492865][ T8094]  print_report+0x13d/0x4b0
[  372.492915][ T8094]  ? srso_alias_return_thunk+0x5/0xfbef5
[  372.492957][ T8094]  ? __virt_addr_valid+0x239/0x430
[  372.492999][ T8094]  ? pn_bind+0x550/0x5b0
[  372.493032][ T8094]  kasan_report+0xdf/0x1c0
[  372.493069][ T8094]  ? pn_bind+0x550/0x5b0
[  372.493107][ T8094]  pn_bind+0x550/0x5b0
[  372.493141][ T8094]  ? obex_bind+0x329/0x570
[  372.493177][ T8094]  ? srso_alias_return_thunk+0x5/0xfbef5
[  372.493219][ T8094]  ? __pfx_pn_bind+0x10/0x10
[  372.493253][ T8094]  usb_add_function+0x219/0x890
[  372.493306][ T8094]  configfs_composite_bind+0xd83/0x1960
[  372.493372][ T8094]  gadget_bind_driver+0x28c/0xbf0
[  372.493407][ T8094]  ? __pfx_dummy_udc_set_speed+0x10/0x10
[  372.493458][ T8094]  ? srso_alias_return_thunk+0x5/0xfbef5
[  372.493499][ T8094]  ? __pfx_gadget_bind_driver+0x10/0x10
[  372.493536][ T8094]  really_probe+0x241/0xa60
[  372.493584][ T8094]  __driver_probe_device+0x20e/0x450
[  372.493632][ T8094]  driver_probe_device+0x4a/0x140
[  372.493679][ T8094]  __driver_attach+0x21f/0x5b0
[  372.493724][ T8094]  ? __pfx___driver_attach+0x10/0x10
[  372.493769][ T8094]  bus_for_each_dev+0x13e/0x1d0
[  372.493804][ T8094]  ? __pfx_bus_for_each_dev+0x10/0x10
[  372.493838][ T8094]  ? bus_add_driver+0x2b5/0x5b0
[  372.493877][ T8094]  ? srso_alias_return_thunk+0x5/0xfbef5
[  372.493924][ T8094]  bus_add_driver+0x305/0x5b0
[  372.493965][ T8094]  driver_register+0x1e2/0x360
[  372.494014][ T8094]  ? srso_alias_return_thunk+0x5/0xfbef5
[  372.494057][ T8094]  usb_gadget_register_driver_owner+0x132/0x210
[  372.494096][ T8094]  gadget_dev_desc_UDC_store+0x1b0/0x2e0
[  372.494145][ T8094]  configfs_write_iter+0x302/0x4e0
[  372.494202][ T8094]  vfs_write+0x6ac/0x1050
[  372.494244][ T8094]  ? __pfx_configfs_write_iter+0x10/0x10
[  372.494298][ T8094]  ? __pfx_vfs_write+0x10/0x10
[  372.494360][ T8094]  ksys_write+0x12a/0x250
[  372.494401][ T8094]  ? __pfx_ksys_write+0x10/0x10
[  372.494446][ T8094]  ? srso_alias_return_thunk+0x5/0xfbef5
[  372.494491][ T8094]  do_syscall_64+0x115/0x870
[  372.494536][ T8094]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  372.494571][ T8094] RIP: 0033:0x7f45af59de99
[  372.494598][ T8094] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  372.494631][ T8094] RSP: 002b:00007f45b0461028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  372.494663][ T8094] RAX: ffffffffffffffda RBX: 00007f45af825fa0 RCX: 00007f45af59de99
[  372.494686][ T8094] RDX: 000000000000000c RSI: 00002000000002c0 RDI: 0000000000000003
[  372.494707][ T8094] RBP: 00007f45af633eaf R08: 0000000000000000 R09: 0000000000000000
[  372.494728][ T8094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  372.494749][ T8094] R13: 00007f45af826038 R14: 00007f45af825fa0 R15: 00007ffe7571ccb8
[  372.494784][ T8094]  </TASK>
[  372.494796][ T8094] 
[  372.798182][ T8094] Allocated by task 8016:
[  372.802505][ T8094]  kasan_save_stack+0x30/0x50
[  372.807209][ T8094]  kasan_save_track+0x14/0x30
[  372.811911][ T8094]  __kasan_kmalloc+0xaa/0xb0
[  372.816529][ T8094]  __kvmalloc_node_noprof+0x34f/0x970
[  372.821924][ T8094]  alloc_netdev_mqs+0xd7/0x15c0
[  372.826795][ T8094]  gphonet_setup_default+0x37/0x80
[  372.831952][ T8094]  phonet_alloc_inst+0x83/0x130
[  372.836812][ T8094]  try_get_usb_function_instance+0x136/0x1f0
[  372.842822][ T8094]  usb_get_function_instance+0x16/0x70
[  372.848410][ T8094]  function_make+0x18c/0x3f0
[  372.853016][ T8094]  configfs_mkdir+0x51e/0xb70
[  372.857706][ T8094]  vfs_mkdir+0x361/0x850
[  372.861961][ T8094]  filename_mkdirat+0x48b/0x5e0
[  372.866837][ T8094]  __x64_sys_mkdirat+0x89/0xc0
[  372.871619][ T8094]  do_syscall_64+0x115/0x870
[  372.876221][ T8094]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  372.882128][ T8094] 
[  372.884448][ T8094] Freed by task 8016:
[  372.888419][ T8094]  kasan_save_stack+0x30/0x50
[  372.893120][ T8094]  kasan_save_track+0x14/0x30
[  372.897819][ T8094]  kasan_save_free_info+0x3b/0x70
[  372.902859][ T8094]  __kasan_slab_free+0x5f/0x80
[  372.907625][ T8094]  kfree+0x22b/0x6c0
[  372.911527][ T8094]  free_netdev+0x6a0/0x8c0
[  372.915959][ T8094]  pn_bind+0x3a7/0x5b0
[  372.920036][ T8094]  usb_add_function+0x219/0x890
[  372.924906][ T8094]  configfs_composite_bind+0xd83/0x1960
[  372.930478][ T8094]  gadget_bind_driver+0x28c/0xbf0
[  372.935507][ T8094]  really_probe+0x241/0xa60
[  372.940024][ T8094]  __driver_probe_device+0x20e/0x450
[  372.945323][ T8094]  driver_probe_device+0x4a/0x140
[  372.950373][ T8094]  __driver_attach+0x21f/0x5b0
[  372.955259][ T8094]  bus_for_each_dev+0x13e/0x1d0
[  372.960117][ T8094]  bus_add_driver+0x305/0x5b0
[  372.964808][ T8094]  driver_register+0x1e2/0x360
[  372.969700][ T8094]  usb_gadget_register_driver_owner+0x132/0x210
[  372.975957][ T8094]  gadget_dev_desc_UDC_store+0x1b0/0x2e0
[  372.981619][ T8094]  configfs_write_iter+0x302/0x4e0
[  372.986758][ T8094]  vfs_write+0x6ac/0x1050
[  372.991150][ T8094]  ksys_write+0x12a/0x250
[  372.995508][ T8094]  do_syscall_64+0x115/0x870
[  373.000113][ T8094]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  373.006046][ T8094] 
[  373.008359][ T8094] The buggy address belongs to the object at ffff888076998000
[  373.008359][ T8094]  which belongs to the cache kmalloc-cg-4k of size 4096
[  373.022676][ T8094] The buggy address is located 2048 bytes inside of
[  373.022676][ T8094]  freed 4096-byte region [ffff888076998000, ffff888076999000)
[  373.036826][ T8094] 
[  373.039139][ T8094] The buggy address belongs to the physical page:
[  373.045539][ T8094] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x76998
[  373.054300][ T8094] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  373.062801][ T8094] memcg:ffff88802bcd7681
[  373.067031][ T8094] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  373.074578][ T8094] page_type: f5(slab)
[  373.078822][ T8094] raw: 00fff00000000040 ffff88813fe2b500 dead000000000100 dead000000000122
[  373.087449][ T8094] raw: 0000000000000000 0000000800040004 00000000f5000000 ffff88802bcd7681
[  373.096044][ T8094] head: 00fff00000000040 ffff88813fe2b500 dead000000000100 dead000000000122
[  373.104724][ T8094] head: 0000000000000000 0000000800040004 00000000f5000000 ffff88802bcd7681
[  373.113434][ T8094] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[  373.122111][ T8094] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  373.130779][ T8094] page dumped because: kasan: bad access detected
[  373.137182][ T8094] page_owner tracks the page as allocated
[  373.142885][ T8094] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5629, tgid 5629 (syz-executor), ts 101309185107, free_ts 97431853958
[  373.164369][ T8094]  post_alloc_hook+0xfd/0x120
[  373.169066][ T8094]  get_page_from_freelist+0xf48/0x3530
[  373.174545][ T8094]  __alloc_frozen_pages_noprof+0x299/0x2dc0
[  373.180462][ T8094]  new_slab+0xa2/0x640
[  373.184550][ T8094]  refill_objects+0xe3/0x410
[  373.189159][ T8094]  __pcs_replace_empty_main+0x376/0x680
[  373.194723][ T8094]  __kmalloc_noprof+0x66d/0x820
[  373.199596][ T8094]  __register_sysctl_table+0xac/0x1650
[  373.205080][ T8094]  __addrconf_sysctl_register+0x1a2/0x360
[  373.210850][ T8094]  addrconf_sysctl_register+0x163/0x200
[  373.216528][ T8094]  ipv6_add_dev+0xaf2/0x1520
[  373.221123][ T8094]  addrconf_notify+0x5db/0x1ba0
[  373.225990][ T8094]  notifier_call_chain+0x99/0x3f0
[  373.231036][ T8094]  call_netdevice_notifiers_info+0xbe/0x110
[  373.236954][ T8094]  register_netdevice+0x1998/0x25a0
[  373.242172][ T8094]  register_netdev+0x34/0x50
[  373.246780][ T8094] page last free pid 5609 tgid 5609 stack trace:
[  373.253099][ T8094]  __free_frozen_pages+0x79f/0x1090
[  373.258308][ T8094]  __folio_put+0x3b4/0x5f0
[  373.262745][ T8094]  skb_release_data+0x649/0x8e0
[  373.267612][ T8094]  __kfree_skb+0x4f/0x70
[  373.272650][ T8094]  tcp_ack+0x2079/0x7650
[  373.276907][ T8094]  tcp_rcv_established+0x116d/0x3990
[  373.282211][ T8094]  tcp_v4_do_rcv+0xbb6/0x1260
[  373.286906][ T8094]  __release_sock+0x35a/0x440
[  373.291597][ T8094]  __sk_flush_backlog+0x27/0xc0
[  373.296496][ T8094]  tcp_sendmsg_locked+0x3ad2/0x44d0
[  373.301717][ T8094]  tcp_sendmsg+0x2e/0x50
[  373.305976][ T8094]  inet_sendmsg+0xb9/0x140
[  373.310439][ T8094]  sock_write_iter+0x4ea/0x5b0
[  373.315206][ T8094]  vfs_write+0x6ac/0x1050
[  373.319548][ T8094]  ksys_write+0x1f8/0x250
[  373.323888][ T8094]  do_syscall_64+0x115/0x870
[  373.328491][ T8094] 
[  373.330827][ T8094] Memory state around the buggy address:
[  373.336451][ T8094]  ffff888076998700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  373.344513][ T8094]  ffff888076998780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  373.352574][ T8094] >ffff888076998800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  373.360625][ T8094]                    ^
[  373.364774][ T8094]  ffff888076998880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  373.372834][ T8094]  ffff888076998900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  373.380893][ T8094] ==================================================================
[  373.411253][ T7852] bridge_slave_1: entered promiscuous mode
[  373.488035][ T7852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  373.514445][ T7852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  373.546918][ T8094] Kernel panic - not syncing: kasan.fault=panic_on_write set ...
[  373.554683][ T8094] CPU: 0 UID: 0 PID: 8094 Comm: syz.6.552 Not tainted syzkaller #0 PREEMPT(full) 
[  373.564169][ T8094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  373.574250][ T8094] Call Trace:
[  373.577563][ T8094]  <TASK>
[  373.580504][ T8094]  dump_stack_lvl+0x100/0x190
[  373.585209][ T8094]  vpanic+0x552/0x970
[  373.589215][ T8094]  ? __pfx_vpanic+0x10/0x10
[  373.593742][ T8094]  ? __pfx___schedule+0x10/0x10
[  373.598647][ T8094]  ? pn_bind+0x550/0x5b0
[  373.602917][ T8094]  panic+0xd1/0xe0
[  373.606639][ T8094]  ? __pfx_panic+0x10/0x10
[  373.611061][ T8094]  ? preempt_schedule_common+0x42/0xc0
[  373.616542][ T8094]  ? srso_alias_return_thunk+0x5/0xfbef5
[  373.622198][ T8094]  ? preempt_schedule_thunk+0x16/0x40
[  373.627612][ T8094]  end_report.part.0+0x68/0x90
[  373.632429][ T8094]  kasan_report.cold+0xe/0x18
[  373.637134][ T8094]  ? pn_bind+0x550/0x5b0
[  373.641391][ T8094]  pn_bind+0x550/0x5b0
[  373.645476][ T8094]  ? obex_bind+0x329/0x570
[  373.649910][ T8094]  ? srso_alias_return_thunk+0x5/0xfbef5
[  373.655560][ T8094]  ? __pfx_pn_bind+0x10/0x10
[  373.660161][ T8094]  usb_add_function+0x219/0x890
[  373.665045][ T8094]  configfs_composite_bind+0xd83/0x1960
[  373.670657][ T8094]  gadget_bind_driver+0x28c/0xbf0
[  373.675722][ T8094]  ? __pfx_dummy_udc_set_speed+0x10/0x10
[  373.681386][ T8094]  ? srso_alias_return_thunk+0x5/0xfbef5
[  373.687040][ T8094]  ? __pfx_gadget_bind_driver+0x10/0x10
[  373.692612][ T8094]  really_probe+0x241/0xa60
[  373.697275][ T8094]  __driver_probe_device+0x20e/0x450
[  373.702859][ T8094]  driver_probe_device+0x4a/0x140
[  373.708052][ T8094]  __driver_attach+0x21f/0x5b0
[  373.712858][ T8094]  ? __pfx___driver_attach+0x10/0x10
[  373.718172][ T8094]  bus_for_each_dev+0x13e/0x1d0
[  373.723034][ T8094]  ? __pfx_bus_for_each_dev+0x10/0x10
[  373.728424][ T8094]  ? bus_add_driver+0x2b5/0x5b0
[  373.733289][ T8094]  ? srso_alias_return_thunk+0x5/0xfbef5
[  373.738947][ T8094]  bus_add_driver+0x305/0x5b0
[  373.743643][ T8094]  driver_register+0x1e2/0x360
[  373.748431][ T8094]  ? srso_alias_return_thunk+0x5/0xfbef5
[  373.754081][ T8094]  usb_gadget_register_driver_owner+0x132/0x210
[  373.760333][ T8094]  gadget_dev_desc_UDC_store+0x1b0/0x2e0
[  373.765989][ T8094]  configfs_write_iter+0x302/0x4e0
[  373.771136][ T8094]  vfs_write+0x6ac/0x1050
[  373.775487][ T8094]  ? __pfx_configfs_write_iter+0x10/0x10
[  373.781150][ T8094]  ? __pfx_vfs_write+0x10/0x10
[  373.785948][ T8094]  ksys_write+0x12a/0x250
[  373.790498][ T8094]  ? __pfx_ksys_write+0x10/0x10
[  373.795368][ T8094]  ? srso_alias_return_thunk+0x5/0xfbef5
[  373.801024][ T8094]  do_syscall_64+0x115/0x870
[  373.805636][ T8094]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  373.811540][ T8094] RIP: 0033:0x7f45af59de99
[  373.815958][ T8094] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  373.835581][ T8094] RSP: 002b:00007f45b0461028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  373.844014][ T8094] RAX: ffffffffffffffda RBX: 00007f45af825fa0 RCX: 00007f45af59de99
[  373.851991][ T8094] RDX: 000000000000000c RSI: 00002000000002c0 RDI: 0000000000000003
[  373.859968][ T8094] RBP: 00007f45af633eaf R08: 0000000000000000 R09: 0000000000000000
[  373.867944][ T8094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  373.875918][ T8094] R13: 00007f45af826038 R14: 00007f45af825fa0 R15: 00007ffe7571ccb8
[  373.883909][ T8094]  </TASK>
[  373.887129][ T8094] Kernel Offset: disabled
[  373.891517][ T8094] Rebooting in 86400 seconds..