last executing test programs:

4m34.291507979s ago: executing program 2 (id=168):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='oom_adj\x00')
read$dsp(r1, 0x0, 0x0)
ioctl$VHOST_VDPA_SET_GROUP_ASID(r1, 0x4008af7c, &(0x7f0000000180)={0x0, 0x8001})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000000f08000140000000140900010073797a30000000000900020073797a3200000000140000"], 0x78}}, 0x0)
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000000c0)=@userptr={0x7, 0x8, 0x4, 0x70000, 0xac33, {}, {0x5, 0xc, 0x1, 0x66, 0x1d, 0x6, "beb5d4da"}, 0x40, 0x2, {0x0}, 0x10000})
r5 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c)

4m32.958414686s ago: executing program 2 (id=172):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe)
connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
shutdown(r0, 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000b04000/0x1000)=nil, 0x1000, 0x16)
write$proc_mixer(r1, 0x0, 0x34)

4m31.628706566s ago: executing program 2 (id=179):
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441700322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6de6269613800"}, 0x48, 0xfffffffffffffffd)
gettid()
timer_settime(0x0, 0x5, 0x0, 0x0)
keyctl$KEYCTL_MOVE(0x4, r2, 0x0, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x5, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = socket$inet_icmp(0x2, 0x2, 0x1)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='rdma.current\x00', 0x275a, 0x0)
ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000001840)={0x0, 0x7d6a})
connect$unix(r4, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000))
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x401, 0x70bd25, 0x0, {}, [@IFLA_PHYS_PORT_ID={0x1c, 0x22, "201a7b024ef8bf02b098d4059bccc9cae593ce57cbb2077e"}, @IFLA_MTU={0x8, 0x4, 0x3ff}]}, 0x44}}, 0x0)

4m30.357555321s ago: executing program 2 (id=184):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000950000ef000ef800"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0)
r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
ioctl$VIDIOC_DQEVENT(r1, 0x80885659, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, 0x0)
ioctl$VIDIOC_QUERYMENU(r1, 0xc008561c, &(0x7f0000000400)={0x980901, 0x4003, @name="b6ae8e0f0376fa7d4eac0abd15418b9c7d97029e735ede962403968545b1c117"})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)={@ifindex, r0, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20)
fchmodat(r2, &(0x7f0000000400)='./file2\x00', 0x108)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000640)='./file2\x00', 0x10050, &(0x7f00000000c0)={[{@errors_remount}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7}}]}, 0x3, 0x51e, &(0x7f0000000680)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x20000, 0x45)
r3 = socket(0x2, 0x4, 0x9)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x28, 0x0, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x2b}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x10008084}, 0x4044034)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'})
socket$netlink(0x10, 0x3, 0x0)
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xc00, &(0x7f0000000300)=ANY=[@ANYBLOB="2c756d61736b3d300004000000000000000000", @ANYRES8, @ANYRES32, @ANYBLOB="30a38e0e5b82f591596ae8b1f0320bff1e7adcec26b17942841c33f6a67731a8c62bfd47d61f0ba39a753d30927a4b12050b9d3d46fe2b48a309762fc31d2d77d22bce58cd7c99be2c5d1a6e4a6b349ef3c299f32916cd0e84c23dee16d05625dafb69caf41d0a21e297059c0cf779cac091fbe7c141f273dec4193650be448fef485d6545f3f31218e03cffb4f0ae15d01dcf8c6f365966", @ANYRESHEX, @ANYRES8=0x0, @ANYRES32=0x0, @ANYRESOCT, @ANYRES16=0x0, @ANYRES8=0x0, @ANYRESDEC=0x0], 0x21, 0x6190, &(0x7f0000001b00)="$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")
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'team_slave_0\x00'})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000040)={'team0\x00', <r9=>0x0})
r10 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x60, r10, 0x8, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r9}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}]}}]}, 0x60}, 0x1, 0xf000, 0x0, 0x8040}, 0x0)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r11, &(0x7f0000000040)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r11, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)

4m28.784048767s ago: executing program 2 (id=189):
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0)
ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000000280)=""/134)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0)
ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
syz_emit_vhci(&(0x7f00000013c0)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts={{0x13, 0x5}, {0x1, [{0xc9, 0x7}]}}}, 0x8)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000000, 0x42013, 0xffffffffffffffff, 0x0)
syz_open_dev$video(&(0x7f0000001400), 0x2, 0x800)

4m27.564965157s ago: executing program 2 (id=197):
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)=@newtfilter={0x2c, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x0, 0x4}, {}, {0x2, 0xe}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x1}}]}, 0x2c}}, 0x0)
sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x1c, 0x0, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x44, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000040}, 0x8000000)
r2 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000380)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x80000000}, [@call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond_slave={{0xf}, {0xc, 0x5, 0x0, 0x1, @IFLA_BOND_SLAVE_QUEUE_ID={0x6, 0x5, 0x6}}}}, @IFLA_IFNAME={0x14, 0x3, 'bond_slave_1\x00'}]}, 0x54}}, 0x0)
setresgid(0xee00, 0xee01, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r7, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000001100)={{}, {0x1, 0x6}, [], {0x4, 0x5}, [{0x8, 0x3}], {0x10, 0x3}, {0x20, 0x7}}, 0x2c, 0x1)
setgroups(0x0, 0x0)
setreuid(0xffffffffffffffff, 0xee01)
r8 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
unlinkat(r8, &(0x7f0000000280)='./file0\x00', 0x200)
sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)

4m27.400887237s ago: executing program 32 (id=197):
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)=@newtfilter={0x2c, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x0, 0x4}, {}, {0x2, 0xe}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x1}}]}, 0x2c}}, 0x0)
sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x1c, 0x0, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x44, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000040}, 0x8000000)
r2 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000380)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x80000000}, [@call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond_slave={{0xf}, {0xc, 0x5, 0x0, 0x1, @IFLA_BOND_SLAVE_QUEUE_ID={0x6, 0x5, 0x6}}}}, @IFLA_IFNAME={0x14, 0x3, 'bond_slave_1\x00'}]}, 0x54}}, 0x0)
setresgid(0xee00, 0xee01, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r7, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000001100)={{}, {0x1, 0x6}, [], {0x4, 0x5}, [{0x8, 0x3}], {0x10, 0x3}, {0x20, 0x7}}, 0x2c, 0x1)
setgroups(0x0, 0x0)
setreuid(0xffffffffffffffff, 0xee01)
r8 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
unlinkat(r8, &(0x7f0000000280)='./file0\x00', 0x200)
sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)

2m19.358129536s ago: executing program 4 (id=620):
unshare(0x68040200)
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)

2m18.860931832s ago: executing program 4 (id=629):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
r3 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014)

2m18.513384859s ago: executing program 4 (id=630):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x8000, @local, 0x8}]}, &(0x7f0000000180)=0x10)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8)

2m17.620338462s ago: executing program 4 (id=642):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f00000003c0)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xb, 0x0, 0x0, 0x0, 0x0, {[@mss, @sack_perm={0x4, 0x2}, @generic={0x0, 0xfffffffffffffc7e, "a2898405704bcf372ce6"}]}}}}}}}, 0x0)

2m17.307958756s ago: executing program 4 (id=644):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
r2 = socket$inet_dccp(0x2, 0x6, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x28, r1, 0x1, 0x0, 0x0, {{0x38}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x600d0}, 0x0)

2m17.191875509s ago: executing program 4 (id=646):
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48850}, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0)
write$FUSE_GETXATTR(r2, &(0x7f0000000480)={0x18}, 0x18)
write$FUSE_INIT(r2, &(0x7f0000000600)={0x50, 0x0, 0x0, {0x7, 0x29, 0x3, 0x0, 0x4, 0x772, 0x7, 0x0, 0x0, 0x0, 0xa0, 0x200}}, 0x50)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}]}})
r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)='usrquota')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x12, r3, 0x75e7f000)
write$P9_RVERSION(r2, &(0x7f0000000180)={0x13, 0x65, 0xffff, 0xffffff77, 0x6, '9P2000'}, 0x13)

2m2.016480004s ago: executing program 33 (id=646):
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48850}, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0)
write$FUSE_GETXATTR(r2, &(0x7f0000000480)={0x18}, 0x18)
write$FUSE_INIT(r2, &(0x7f0000000600)={0x50, 0x0, 0x0, {0x7, 0x29, 0x3, 0x0, 0x4, 0x772, 0x7, 0x0, 0x0, 0x0, 0xa0, 0x200}}, 0x50)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}]}})
r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)='usrquota')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x12, r3, 0x75e7f000)
write$P9_RVERSION(r2, &(0x7f0000000180)={0x13, 0x65, 0xffff, 0xffffff77, 0x6, '9P2000'}, 0x13)

30.561790815s ago: executing program 1 (id=1027):
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x4, 0x4, 0x4, 0xbf22, 0x800, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x48)

27.513189503s ago: executing program 5 (id=1043):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x5)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040f0404011104"], 0x7)

27.496154276s ago: executing program 5 (id=1044):
r0 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x41, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0)
writev(r0, &(0x7f0000005500)=[{&(0x7f0000003440)="0600000000000000839dda8b05257a6d6136e19271de93a120d8af19df66cf6039f1f64c7b9f823dfcd870324392314a3c965f000b25fd7da27c50794c07ca8a4809c5b5ba2f2b5c2a399a164cbe8323c843c21f05bef0f6daffa4bac0373c194da474fa0b72473e", 0x68}], 0x1)

27.385709471s ago: executing program 5 (id=1047):
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})

27.293782212s ago: executing program 5 (id=1051):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$restrict_keyring(0xa, r2, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:cb2e')

27.292882789s ago: executing program 6 (id=1052):
socket$kcm(0xf, 0x3, 0x2)
memfd_create(0x0, 0x3)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
r3 = timerfd_create(0x0, 0x0)
read(r3, 0x0, 0x0)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000003ec0)={{{@in6=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@broadcast}, 0x0, @in6=@private0}}, 0x0)
r6 = socket$qrtr(0x2a, 0x2, 0x0)
setsockopt$sock_timeval(r6, 0x1, 0x48, &(0x7f0000000000), 0x10)
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r7, 0x107, 0x12, &(0x7f0000000140), 0x4)
r8 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r8, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
sendmmsg$inet6(r8, &(0x7f0000003d40)=[{{&(0x7f0000000380)={0xa, 0x4e20, 0x7, @remote, 0x9}, 0x1c, &(0x7f0000002740)=[{&(0x7f00000003c0)="8e8cb2100d32c3c458992f89c6a20d4b115e33adb8330e70d83acac23d2e136047e3b58e3b4213a575fc090890810d863cc0b66ee4314a889d255f8bad33e04c9fc7b8cdb10f625ff75c2238407afcf95a65dc0f1832efa7cf5c11792dd4405d93160482a4ffc35c9bd09c305db0f859d233b7ef80abbf88c1fe090ed9a85011bcbbdd8c6d0a377cb032cd403df97ac161a6c3ab03d0304f3291a46b309e82c9eb217c49c0c18866b37753d255bc032294ef2c66bb23c2007796be3b04347f9947bcf2d330322f92798895feb90683036d1416e4b57ddee10b9a11b384ddca2f4707f41311dbd9", 0xe7}, {&(0x7f00000004c0)="1bcf06ffdc6b4e73a6fde67cc475c69192c0014ef6b1a9614751ae13081ceb8528907e6b58e09e6d1bea820cee899d5d5f1d2c057f647ce9b87c04c1c7622c8c3e06b8f0febc7fd72fb9dbd4e30458f287c1a51eb50f4c680af31ed5beb3d9dc", 0x60}, {0x0}, {&(0x7f0000000540)="a933e07e9e84cbf86661c04d60674ade234760208888978bd1d7b98c24fa071e5de5cab6", 0x24}, {&(0x7f0000000580)="e599a3a1dbcdbb5da576c4fd676e57bcf3bfb4ad51280f316b1641f4bd79deb895037dafc373be5f789cb2fca5c031c18b39e5f073b8fc51d22cba2268b46123d8bc9332c8a784e1aec9b6fc70a27810091b16f59a5ffcc027c5d5111b41c2f7c787151ec292fd6489d9b734c97917299a82ea26f6d128467126a4e2cdce837a64c2a372b6b990d640a5aa9e235e915b61ca0190aeff08e57037bab37a64698d6a0781d1920f31682b82a6430a276df5fe", 0xb1}, {&(0x7f00000016c0)="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", 0x1000}, {&(0x7f00000026c0)="3c6913b38a67eba9a779d8329ad3f917ef3727eb3d9c45a8a710a44ae37eec0465936244ad3de2844d53f617fc209cf7ce4165ccec67160cfd25fad715917146e05d0019", 0x44}], 0x7}}, {{&(0x7f00000027c0)={0xa, 0x4e24, 0x6c2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x81}, 0x1c, 0x0, 0x0, &(0x7f0000003fc0)=ANY=[@ANYBLOB="2800000000000000290000003600000087010000000000007804cdf54a67c2040000000400000000200000000000000029000000040000000000000000000000000100050200080024000000000000002900000032000000ff020000000000000000000000000001", @ANYRES32=r5, @ANYBLOB="000000001400000000000000290000000b000000000000020000000058000000000000002900000039000000000800f500000000fc01000000000000000000000000000000000000000000000000000000000001fc0000000000000000000000000000012001000000000000000000000000000028"], 0x148}}], 0x2, 0x4001c00)

26.72484136s ago: executing program 1 (id=1055):
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40)
r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
dup3(r0, r0, 0x80000)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0)
r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
r5 = syz_open_dev$vim2m(&(0x7f0000000440), 0x8, 0x2)
ioctl$vim2m_VIDIOC_EXPBUF(r5, 0xc0405668, &(0x7f00000004c0)={0x3, 0x2, 0x2})
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x59, 0x0, 'syz1\x00', 0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000000000000000000611200"/32], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e07002d0c"], 0xa)

26.25613947s ago: executing program 6 (id=1058):
r0 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x41, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0)
writev(r0, &(0x7f0000005500)=[{&(0x7f0000003440)="0600000000000000839dda8b05257a6d6136e19271de93a120d8af19df66cf6039f1f64c7b9f823dfcd870324392314a3c965f000b25fd7da27c50794c07ca8a4809c5b5ba2f2b5c2a399a164cbe8323c843c21f05bef0f6daffa4bac0373c194da474fa0b72473e", 0x68}], 0x1)

26.199539259s ago: executing program 6 (id=1059):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
syz_io_uring_setup(0x5169, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2e, 0x93}, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c)
shutdown(r0, 0x1)

24.847811399s ago: executing program 1 (id=1064):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206c1801d82b68d04f3048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1bfd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9daebb6fc40b5d175e86ac0b7a9fd7f1748af98902340eb", 0x9c}, {&(0x7f0000002880)="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", 0x11a}, {&(0x7f0000000f00)="397d5f2edc82d0337ae5ab9ee47dc3e798cf69cfebf169e77257f308227094d569a4326954e50ea185bc6fff0507c5dfd26676de9ddac4fe6db927cd4d03965f42d9c7513eff160f374f6d76b8fcf2bc3eca29ce7538f85aa34b2bdcc17ecd080f0850377f771a4e8693703da4e347e0165f00872a21845e17030d070047bc869de32ee24ca05e6f805ec0a1d0257e0e6f900e6cfb68e827b515d05bf2", 0x9d}, {&(0x7f0000000480)="4068745fc217775e9fca3477d3c929c1231d710ed7bb68bf2f127cb83703392703f53051ec7ebd4d519a9db1973eaeda928822aaa8d3a9677374a5", 0x3b}, {&(0x7f0000000180)="df2966f83be61be11a9831c2e62c48d200e5ef6d8633d6649f81483cbc10718f59d4d3dc25fb782b4fdc860f55724dd87c32431d89b0308d4b485cd6e33677f9a435b540f044c23f51305edb2a14923925ef64a400ea0d6ea8c9a927449c6b8a8785fd6c9624e876a2572a2b668b940f38c4eaad93ee27d3812039fcf848aa49525c57d6a5", 0x85}], 0x5}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000740)="acc841985992b79554acfc02163bb0fb2bb293e68702bb40b6b870bde5700d368744361ae9fce3a4ff6bb332e33b6e0df4f0158b26c4e40129ee086a975e31fe6f3efdcb3cbe854b9744e05c052b222753064cb6d4cb4389c5922e40976a5546e8474066070f075c1634163d7952a8efea44b3e3a593fd00e59ae93a5ff42896ed56473baf984a067b1b8773017042c903de1c421991e68995f58d3465ec4e7d734b375c04d5ba90d06cf30a05e802b63ce2ff861f27d6ded13918f0c33169c6bca92fa8b8cccc944946434358e5a0193a91a73794fc724911f4b5", 0xdb}, {&(0x7f0000002700)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635af71dc487553859348d48e6fc49d81c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35", 0x49}], 0x2}}], 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27)

24.790909438s ago: executing program 6 (id=1065):
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1900}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010102}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x8000)

24.677059467s ago: executing program 1 (id=1068):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x10\x00'}]}, 0x1c}}, 0x0)

24.455678621s ago: executing program 1 (id=1071):
unshare(0x2040400)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)

24.270885468s ago: executing program 1 (id=1073):
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})

24.269035436s ago: executing program 6 (id=1074):
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40)
r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
dup3(r0, r0, 0x80000)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0)
r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
r5 = syz_open_dev$vim2m(&(0x7f0000000440), 0x8, 0x2)
ioctl$vim2m_VIDIOC_EXPBUF(r5, 0xc0405668, &(0x7f00000004c0)={0x3, 0x2, 0x2})
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x59, 0x0, 'syz1\x00', 0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000000000000000000611200"/32], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e07002d0c"], 0xa)

23.429643032s ago: executing program 6 (id=1077):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r3 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, 0x0, 0x2008c014)

23.372996627s ago: executing program 5 (id=1078):
r0 = openat$smackfs_netlabel(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
write$smackfs_netlabel(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='-0000000000000062410.00000000000000000003.00000000000800028916.'], 0x6f)

23.371123629s ago: executing program 5 (id=1079):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
gettid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_buf(r3, 0x0, 0x20, &(0x7f0000000680)=""/207, &(0x7f0000000280)=0xcf)
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x2d4}}, 0x4048010)
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
r6 = dup(r5)
write$UHID_INPUT(r6, &(0x7f00000029c0)={0x2, {"a2e3ad214fc752f91b450a0787f70e06d038e7ff7fc6e5539b326d078b089b0708385d090890e0878f0e1ac6e70a9b334a959b689a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31320d095d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4040d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85824056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f5d6d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9ef6d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ca4d24ad92f243941ed274f12a29ff962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9b97474a5966a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741258c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a941f0000005f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39e3313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb9957697c9ede7885d94ffb0759be0daf60a842b09eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f49013a3a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000210000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006)

8.977651998s ago: executing program 34 (id=1073):
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})

7.951895526s ago: executing program 35 (id=1079):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
gettid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_buf(r3, 0x0, 0x20, &(0x7f0000000680)=""/207, &(0x7f0000000280)=0xcf)
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x2d4}}, 0x4048010)
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
r6 = dup(r5)
write$UHID_INPUT(r6, &(0x7f00000029c0)={0x2, {"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", 0x1000}}, 0x1006)

7.915333744s ago: executing program 36 (id=1077):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r3 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, 0x0, 0x2008c014)

5.872898069s ago: executing program 3 (id=1104):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_int(r0, 0x29, 0x48, 0x0, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r6, 0x0)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r7, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, 0x0)
ioctl$IOMMU_HWPT_ALLOC$TEST(r7, 0x3b89, &(0x7f00000002c0)={0x18, 0x3, r8, 0x0, <r9=>0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)})
ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r7, 0x3b8c, &(0x7f0000000100)={0x30, r9, 0x1, 0x0, 0x0, 0x0, 0x1000, 0x0})
r10 = syz_open_dev$video4linux(&(0x7f0000000040), 0x20000000003, 0x88000)
ioctl$VIDIOC_G_EXT_CTRLS(r10, 0xc040564a, &(0x7f0000000340)={0x0, 0x1, 0x100c, 0xffffffffffffffff, 0x0, 0x0})
r11 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmmsg$sock(r11, &(0x7f0000000600)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000340)}], 0x1}}], 0x2, 0x48094)

5.022037522s ago: executing program 3 (id=1105):
r0 = syz_usb_connect(0x4, 0x24, &(0x7f0000000400)=ANY=[@ANYRES16], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000000)={0x20, 0x9, 0x1, "ce"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
timerfd_create(0x8, 0x80000)
r1 = fsopen(&(0x7f0000000000)='proc\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
unshare(0x22020400)
r2 = fsmount(r1, 0x0, 0x3)
r3 = openat(r2, &(0x7f0000000680)='./file0\x00', 0x105c80, 0x22)
fchown(r3, 0x0, 0x0)
inotify_init1(0x0)
syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)={0x140, 0x2a, 0xb, 0x0, 0x0, {0x8}, [@typed={0x4, 0x3}, @nested={0x128, 0x1, 0x0, 0x1, [@nested={0x121, 0xde, 0x0, 0x1, [@generic="73ee77f0d238ca193b38ca9fb61bf462c99d3013eb1aae24d54da25652b5d9eb3bcb3571", @generic="74ffb07acc07ce9d46da81076dafb795bc56adcad69006f7e7fbe79a7d220fb7f3a139c913e130599d22e7a1e3e559d872c6aa31c7d73497242e7e9db7e23727e05aad83e9fa958f670ac1c70a4e2aee21b7634e672c308384ebc466cf1f4c0c8f1df75450943c166aebf2e8a3260700654545de822e41bca6e9ba4a0bafda69e19de9327ef50400d37a0e37a24e7e0aa6516b4b78653b60053a41b7e8220f0d61b7cc70cac9812ad9c4cd71e1c62519d8e4b389f3017817a425d643bc37b8f057aef0591cfc434a689c791943e5e0087d9c17c59939702d90fae5593a1e3c3ba8a45c17a51f14c58104e63559b70391d1ce93ab22", @nested={0x4, 0x51}]}]}]}, 0x140}}, 0x0)
r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x8, 0x1, 0x8, 0x4, 0x20810, 0xffffffffffffffff, 0xa2, '\x00', 0x0, r5, 0x5, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x50)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10)
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r8 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, 0x0, &(0x7f00000000c0))
sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002d0001000000000000000000040100800c0000000000000000000000140001"], 0x114}], 0x1}, 0x0)
r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r9)
ptrace$cont(0x18, r9, 0x9, 0x400010000)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000600010000000800090001000000050002"], 0x44}}, 0x0)

4.798885918s ago: executing program 0 (id=1106):
getpid()
r0 = memfd_secret(0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
prctl$PR_GET_THP_DISABLE(0x2a)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000139209f422ca2f1d3568c599f830b1f821bc25fa46eaf53917fbae01ac86e06a0af31a9167ac93666cbfce317f4d89438ada20492c7e787769ae367b057e255f9fc7fcd3678acf258357e1e5a90d17a85ed2bb685014e05fe9dd53656818b650ff910557ae37262d1202049fd3e46740a84e730119514262213ed7"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a3000000100090003007379"], 0x7c}}, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x45, 0x2, 0x2}, {0x60}, {}, {0x6}]})
socket$inet_udp(0x2, 0x2, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x10\x00'}]}, 0x1c}}, 0x0)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_GET(r6, 0x4b72, &(0x7f0000001080)={0x1, 0x0, 0x20, 0x20, 0x0, 0x0})
fcntl$setlease(r0, 0x400, 0x0)
fremovexattr(r0, &(0x7f00000000c0)=@known='com.apple.system.Security\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x18)

3.688924362s ago: executing program 0 (id=1107):
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40)
r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
dup3(r0, r0, 0x80000)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0)
r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
r5 = syz_open_dev$vim2m(&(0x7f0000000440), 0x8, 0x2)
ioctl$vim2m_VIDIOC_EXPBUF(r5, 0xc0405668, &(0x7f00000004c0)={0x3, 0x2, 0x2})
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0x40405515, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]})
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e07002d0c"], 0xa)

3.57864531s ago: executing program 0 (id=1108):
r0 = openat$smackfs_netlabel(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
write$smackfs_netlabel(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='-0000000000000062410.00000000000000000003.00000000000800028916.00'], 0x6f)

3.577695405s ago: executing program 0 (id=1109):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0)
syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, 0x0, 0x0)
sendmmsg$unix(r3, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = memfd_create(&(0x7f0000000300)='/dev/loop#\x00\xee\b\xce\xde\xe9\x8d\xd3\xd4\xfb?\xd1\x88\xa6-\xe5\xe5l\xa1s\b\xa5\xd2\xd59\xc8\xda\b\xd6\xb2\x15\xf6)\xb8\xb4{r.\xd2\xea\x16\x82\xe8=\xa3\x88sN\x83N`\xf9\xec\xe1\xbb\x05vH\xdd\x01?k\x97\xa5\xbf\xba\x89#=2G<r\xf8\xd56\xaf~Nh\x0e8\xe3\xde\xb9r\xd9\xe0rR\x17\xf6:\x964\x82u\xa3c\x9ez7\x88\x15\xdbz\xd1&\xd1\xca\xcb\xc5C\xa6,\xc7~\x86\xee=\xae}\xeb\xe8N\x11\xed\xee\xd7x6}-y #\x17\x8d[~\xe2\xab\xe6\xe3\x17\xd2?&\xfb\x13\xf3\xd9\xf4O\xf2\xdb\x9b\x03)\xae^\xef\x06\x03W\xb5;\xa6\xb4\'\'\xc2C\x85\xe4\xaa\xe8\x81\xc0\x85\xd2\xfe\xcf\x9bn\xee*\x15\x97#\'\xc4\x06h\x1f@\a\n=7\xeb2\xaa\x0e\xee\x03\xd10\x06=\xe7R\x85\x02\xf3\x15\x99o@u\xfd\np)\xa9\xc4a\xa8\x9aE\x9ez0]\xc4\x04\xb0\xeaZ\xd9\x1e\xbf\xb6\xe9\x8a\xfe\xd9G\x82\x93\xbf,J}\xed\xfa\x1b\x01\xc0\x8c', 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000000)=0x2)
ioctl$PPPIOCSDEBUG(r6, 0x40047440, &(0x7f00000000c0)=0xfff)
write$ppp(r6, 0x0, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[], 0xcc}, 0x1, 0x0, 0x0, 0x44850}, 0xc0)
fallocate(r4, 0x0, 0x0, 0x200401)
fallocate(r4, 0x0, 0x0, 0x200401)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
close(0xffffffffffffffff)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa7", 0xc}], 0x1}, 0x0)

3.176729051s ago: executing program 3 (id=1110):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d240f0100000000000000000006241a0000000c241b4800050000050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

2.589033069s ago: executing program 3 (id=1111):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
bind$bt_l2cap(r1, 0x0, 0x0)

2.583711072s ago: executing program 3 (id=1112):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x7, @vifc_lcl_addr=@local, @multicast1}, 0x10)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e002700100000000280000012", 0x2d}], 0x1}, 0x0)

451.118025ms ago: executing program 3 (id=1113):
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd)

333.062858ms ago: executing program 0 (id=1114):
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x4, 0x4, 0x4, 0xbf22, 0x800, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x48)

0s ago: executing program 0 (id=1115):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4000)

kernel console output (not intermixed with test programs):

rface batadv_slave_0 (retrying later): interface not active
[   39.207780][ T6451] batman_adv: batadv0: Adding interface: batadv_slave_1
[   39.209620][ T6451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   39.217061][ T6451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   39.248015][ T6450] hsr_slave_0: entered promiscuous mode
[   39.250023][ T6450] hsr_slave_1: entered promiscuous mode
[   39.252456][ T6450] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   39.254412][ T6450] Cannot create hsr debugfs directory
[   39.330193][ T6443] hsr_slave_0: entered promiscuous mode
[   39.332844][ T6443] hsr_slave_1: entered promiscuous mode
[   39.334628][ T6443] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   39.336602][ T6443] Cannot create hsr debugfs directory
[   39.339980][ T6451] hsr_slave_0: entered promiscuous mode
[   39.343294][ T6451] hsr_slave_1: entered promiscuous mode
[   39.344968][ T6451] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   39.346903][ T6451] Cannot create hsr debugfs directory
[   39.457876][ T6446] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   39.464982][ T6446] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   39.481427][ T6446] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   39.499507][ T6446] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   39.562904][ T6454] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   39.566761][ T6454] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   39.580931][ T6454] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   39.584577][ T6454] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   39.600587][ T6450] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   39.610382][ T6450] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   39.625006][ T6450] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   39.632863][ T6450] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   39.670308][ T6443] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   39.673967][ T6443] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   39.679571][ T6443] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   39.698803][ T6443] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   39.722640][ T6451] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   39.726177][ T6451] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   39.730647][ T6451] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   39.734958][ T6451] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   39.750273][ T6446] 8021q: adding VLAN 0 to HW filter on device bond0
[   39.796817][ T6446] 8021q: adding VLAN 0 to HW filter on device team0
[   39.817113][   T61] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.819261][   T61] bridge0: port 1(bridge_slave_0) entered forwarding state
[   39.824351][   T61] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.826263][   T61] bridge0: port 2(bridge_slave_1) entered forwarding state
[   39.856835][ T6454] 8021q: adding VLAN 0 to HW filter on device bond0
[   39.881336][ T6454] 8021q: adding VLAN 0 to HW filter on device team0
[   39.887185][ T6450] 8021q: adding VLAN 0 to HW filter on device bond0
[   39.901792][ T6443] 8021q: adding VLAN 0 to HW filter on device bond0
[   39.919335][ T6443] 8021q: adding VLAN 0 to HW filter on device team0
[   39.928727][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.930569][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   39.934658][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.936649][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   39.960206][ T6450] 8021q: adding VLAN 0 to HW filter on device team0
[   39.970962][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.972838][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   39.977553][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.979399][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   39.990096][ T6451] 8021q: adding VLAN 0 to HW filter on device bond0
[   39.998624][ T6451] 8021q: adding VLAN 0 to HW filter on device team0
[   40.011111][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   40.013144][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   40.016554][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   40.018396][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   40.021152][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   40.023113][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   40.026954][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   40.028889][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   40.091525][ T6450] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   40.099072][ T6450] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   40.183808][ T6449] Bluetooth: hci1: command tx timeout
[   40.185469][ T6449] Bluetooth: hci0: command tx timeout
[   40.186971][ T6449] Bluetooth: hci2: command tx timeout
[   40.214937][ T6454] 8021q: adding VLAN 0 to HW filter on device batadv0
[   40.231291][ T6454] veth0_vlan: entered promiscuous mode
[   40.236899][ T6454] veth1_vlan: entered promiscuous mode
[   40.250816][ T6454] veth0_macvtap: entered promiscuous mode
[   40.252632][ T6449] Bluetooth: hci4: command tx timeout
[   40.256654][ T6454] veth1_macvtap: entered promiscuous mode
[   40.262147][ T6449] Bluetooth: hci3: command tx timeout
[   40.266813][ T6454] batman_adv: batadv0: Interface activated: batadv_slave_0
[   40.272977][ T6454] batman_adv: batadv0: Interface activated: batadv_slave_1
[   40.296554][ T6454] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   40.299076][ T6454] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   40.301441][ T6454] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   40.306406][ T6454] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   40.331249][ T6446] 8021q: adding VLAN 0 to HW filter on device batadv0
[   40.344379][ T6443] 8021q: adding VLAN 0 to HW filter on device batadv0
[   40.388845][ T6451] 8021q: adding VLAN 0 to HW filter on device batadv0
[   40.408738][   T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   40.410862][   T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   40.433632][ T6446] veth0_vlan: entered promiscuous mode
[   40.446874][   T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   40.448901][   T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   40.456152][ T6446] veth1_vlan: entered promiscuous mode
[   40.469248][ T6450] 8021q: adding VLAN 0 to HW filter on device batadv0
[   40.475715][ T6443] veth0_vlan: entered promiscuous mode
[   40.519751][ T6443] veth1_vlan: entered promiscuous mode
[   40.525282][ T6446] veth0_macvtap: entered promiscuous mode
[   40.528510][ T6446] veth1_macvtap: entered promiscuous mode
[   40.547561][ T6443] veth0_macvtap: entered promiscuous mode
[   40.551009][ T6443] veth1_macvtap: entered promiscuous mode
[   40.556810][ T6451] veth0_vlan: entered promiscuous mode
[   40.560938][ T6451] veth1_vlan: entered promiscuous mode
[   40.588409][ T6454] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   40.610299][ T6451] veth0_macvtap: entered promiscuous mode
[   40.619117][ T6443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   40.623279][ T6443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   40.626603][ T6443] batman_adv: batadv0: Interface activated: batadv_slave_0
[   40.629678][ T6443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   40.646390][ T6443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   40.653665][ T6443] batman_adv: batadv0: Interface activated: batadv_slave_1
[   40.655911][ T6446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   40.658895][ T6446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   40.661319][ T6446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   40.666575][ T6446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   40.670242][ T6446] batman_adv: batadv0: Interface activated: batadv_slave_0
[   40.676679][ T6446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   40.679365][ T6446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   40.681787][ T6446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   40.687450][ T6446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   40.690654][ T6446] batman_adv: batadv0: Interface activated: batadv_slave_1
[   40.697454][ T6446] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   40.699642][ T6446] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   40.701788][ T6446] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   40.706553][ T6446] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   40.746960][ T6451] veth1_macvtap: entered promiscuous mode
[   40.765867][ T6443] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   40.769225][ T6443] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   40.771347][ T6443] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   40.776966][ T6443] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   40.830300][ T6451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   40.834454][ T6451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   40.836890][ T6451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   40.840161][ T6451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   40.843196][ T6451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   40.846103][ T6451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   40.850739][ T6451] batman_adv: batadv0: Interface activated: batadv_slave_0
[   40.859466][ T6451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   40.863107][ T6451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   40.865472][ T6451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   40.868244][ T6451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   40.870934][ T6451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   40.882739][ T6451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   40.917408][ T6451] batman_adv: batadv0: Interface activated: batadv_slave_1
[   41.221620][ T6530] Zero length message leads to an empty skb
[   41.331177][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   41.336973][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   41.550149][ T6450] veth0_vlan: entered promiscuous mode
[   41.568846][ T6451] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   41.571189][ T6451] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   41.578376][ T6451] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   41.580669][ T6451] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   41.600351][ T4422] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   41.607023][ T4422] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   41.665015][ T6450] veth1_vlan: entered promiscuous mode
[   41.676971][ T6450] veth0_macvtap: entered promiscuous mode
[   41.680117][ T6450] veth1_macvtap: entered promiscuous mode
[   41.688346][ T6450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   41.691670][ T6450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.694703][ T6450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   41.697518][ T6450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.699991][ T6450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   41.703084][ T6450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.705547][ T6450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   41.708127][ T6450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.711355][ T6450] batman_adv: batadv0: Interface activated: batadv_slave_0
[   41.715082][ T6450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   41.717771][ T6450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.720199][ T6450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   41.723215][ T6450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.725723][ T6450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   41.728367][ T6450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.730928][ T6450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   41.735771][ T6450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   41.738913][ T6450] batman_adv: batadv0: Interface activated: batadv_slave_1
[   41.795402][ T6450] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   41.797730][ T6450] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   41.799847][ T6450] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   41.803404][ T6450] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   41.820951][  T626] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   41.823478][  T626] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   41.836612][ T4422] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   41.840568][ T4422] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   42.292695][ T6449] Bluetooth: hci0: command tx timeout
[   42.294512][ T6452] Bluetooth: hci2: command tx timeout
[   42.296561][ T6449] Bluetooth: hci1: command tx timeout
[   42.332612][ T6449] Bluetooth: hci4: command tx timeout
[   42.335576][ T6444] Bluetooth: hci3: command tx timeout
[   42.558377][   T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   42.560333][   T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   42.582032][  T626] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   42.584097][  T626] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   42.589704][ T6538] loop3: detected capacity change from 0 to 2048
[   42.634509][ T6538] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   42.679067][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   42.681179][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   42.690111][ T6540] loop2: detected capacity change from 0 to 2048
[   42.717111][ T6540] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   42.764993][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   43.092880][ T6545] hub 2-0:1.0: USB hub found
[   43.096313][ T6545] hub 2-0:1.0: 8 ports detected
[   43.734742][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   44.745292][ T6444] Bluetooth: hci1: command tx timeout
[   44.746809][ T6444] Bluetooth: hci2: command tx timeout
[   44.748191][ T6444] Bluetooth: hci0: command tx timeout
[   44.749676][ T6444] Bluetooth: hci3: command tx timeout
[   44.750975][ T6444] Bluetooth: hci4: command tx timeout
[   45.340750][ T6560] loop1: detected capacity change from 0 to 512
[   46.423153][ T6560] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   47.147878][ T6444] Bluetooth: hci3: command tx timeout
[   47.148192][ T6452] Bluetooth: hci0: command tx timeout
[   47.150563][ T6444] Bluetooth: hci2: command tx timeout
[   47.150773][ T6452] Bluetooth: hci1: command tx timeout
[   47.152265][ T6449] Bluetooth: hci4: command tx timeout
[   47.259603][ T6574] capability: warning: `syz.0.1' uses deprecated v2 capabilities in a way that may be insecure
[   47.283262][ T6574] loop0: detected capacity change from 0 to 4096
[   47.882154][ T6574] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   47.887980][ T6574] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.900446][ T6451] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.964030][ T6554] loop3: detected capacity change from 0 to 32768
[   47.968206][ T6554] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.9 (6554)
[   48.841675][ T6554] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   48.861965][ T6554] BTRFS info (device loop3): using crc32c (crc32c-arm64) checksum algorithm
[   48.864201][ T6554] BTRFS info (device loop3): using free-space-tree
[   48.876325][ T6554] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR
[   48.877010][ T6554] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR
[   48.879560][ T6554] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR
[   48.888070][ T6554] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR
[   48.890782][ T6554] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR
[   48.897822][ T6554] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR
[   48.901075][ T6554] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR
[   48.904603][ T6554] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR
[   48.907760][ T6554] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR
[   48.911034][ T6554] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[   48.944322][ T6588] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14'.
[   48.982394][ T6588] netlink: 36 bytes leftover after parsing attributes in process `syz.2.14'.
[   49.008315][ T6554] BTRFS error (device loop3): open_ctree failed: -12
[   49.023207][ T6588] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14'.
[   49.025510][ T6588] netlink: 36 bytes leftover after parsing attributes in process `syz.2.14'.
[   49.047799][ T6601] netlink: 'syz.1.11': attribute type 2 has an invalid length.
[   49.861219][ T6610] loop4: detected capacity change from 0 to 2048
[   49.882093][ T6607] loop1: detected capacity change from 0 to 512
[   49.884450][ T6610] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   49.892286][ T6607] EXT4-fs: inline encryption not supported
[   49.923253][ T6613] loop3: detected capacity change from 0 to 1024
[   50.044796][ T6618] loop0: detected capacity change from 0 to 2048
[   50.047078][ T6607] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   50.077108][ T6618] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   50.234847][ T6621] loop2: detected capacity change from 0 to 4096
[   50.944759][ T6624] hub 2-0:1.0: USB hub found
[   50.946467][ T6624] hub 2-0:1.0: 8 ports detected
[   51.083056][ T6601] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #2: comm syz.1.11: corrupted inode contents
[   51.098976][ T6601] EXT4-fs error (device loop1): ext4_dirty_inode:6042: inode #2: comm syz.1.11: mark_inode_dirty error
[   51.357329][ T6621] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   51.361792][ T6621] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.385938][ T6601] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #2: comm syz.1.11: corrupted inode contents
[   51.389348][ T6601] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #2: comm syz.1.11: mark_inode_dirty error
[   51.571436][ T2078] hfsplus: b-tree write err: -5, ino 4
[   52.002084][ T6631] hub 2-0:1.0: USB hub found
[   52.008117][ T6631] hub 2-0:1.0: 8 ports detected
[   52.604194][ T6638] loop3: detected capacity change from 0 to 2048
[   52.609184][ T6638] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   52.615873][ T6451] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.563644][ T6650] loop4: detected capacity change from 0 to 2048
[   55.802285][ T6650]  loop4: unable to read partition table
[   55.804159][ T6650] loop_reread_partitions: partition scan of loop4 () failed (rc=-5)
[   57.586059][ T6661] loop0: detected capacity change from 0 to 2048
[   57.642373][ T6661] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   59.080919][ T6672] hub 2-0:1.0: USB hub found
[   59.082347][ T6672] hub 2-0:1.0: 8 ports detected
[   59.807072][ T6678] loop2: detected capacity change from 0 to 4096
[   60.937734][ T6681] loop3: detected capacity change from 0 to 4096
[   61.083081][ T6681] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   61.103133][ T6678] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   61.110136][ T6681] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   61.113363][ T6678] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   64.546401][ T2367] ieee802154 phy0 wpan0: encryption failed: -22
[   64.548219][ T2367] ieee802154 phy1 wpan1: encryption failed: -22
[   64.730231][ T6709] loop2: detected capacity change from 0 to 2048
[   64.758065][ T6713] loop0: detected capacity change from 0 to 2048
[   64.762074][ T6709] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   64.763781][ T6711] loop1: detected capacity change from 0 to 2048
[   64.774273][ T6713] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   64.947839][ T6715] loop4: detected capacity change from 0 to 2048
[   64.966510][ T6711] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   64.974421][ T6717] loop3: detected capacity change from 0 to 2048
[   64.983072][ T6715] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   65.857647][ T6723] hub 2-0:1.0: USB hub found
[   65.859447][ T6723] hub 2-0:1.0: 8 ports detected
[   65.978371][ T6717] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   66.520102][ T6726] netlink: 'syz.3.40': attribute type 1 has an invalid length.
[   67.492759][ T6731] hub 2-0:1.0: USB hub found
[   67.612003][ T6731] hub 2-0:1.0: 8 ports detected
[   68.528462][ T6454] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.614606][ T6735] loop2: detected capacity change from 0 to 2048
[   68.651739][ T6735] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   68.707021][ T6737] loop0: detected capacity change from 0 to 1024
[   68.822044][ T6737] hfsplus: inconsistency in B*Tree (128,1,255,1,0)
[   68.844102][ T6737] hfsplus: inconsistency in B*Tree (128,1,255,1,0)
[   68.846240][ T6737] hfsplus: xattr search failed
[   68.857294][ T6741] loop1: detected capacity change from 0 to 2048
[   69.032437][ T6743] hub 2-0:1.0: USB hub found
[   69.034226][ T6743] hub 2-0:1.0: 8 ports detected
[   69.589523][ T6741] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   69.609810][ T6745] loop3: detected capacity change from 0 to 256
[   69.622881][ T1778] cfg80211: failed to load regulatory.db
[   69.736356][ T6747] loop2: detected capacity change from 0 to 2048
[   69.776108][ T6747] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   70.108645][ T6751] hub 2-0:1.0: USB hub found
[   70.111292][ T6751] hub 2-0:1.0: 8 ports detected
[   70.195158][ T6753] hub 2-0:1.0: USB hub found
[   70.196717][ T6753] hub 2-0:1.0: 8 ports detected
[   72.320694][ T6765] mmap: syz.1.48 (6765) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   72.703304][ T6767] loop1: detected capacity change from 0 to 32768
[   72.705471][ T6767] =======================================================
[   72.705471][ T6767] WARNING: The mand mount option has been deprecated and
[   72.705471][ T6767]          and is ignored by this kernel. Remove the mand
[   72.705471][ T6767]          option from the mount to silence this warning.
[   72.705471][ T6767] =======================================================
[   72.714711][ T6767] ocfs2: Unknown parameter 'barrier500000000000000026115'
[   73.345221][ T6770] loop0: detected capacity change from 0 to 128
[   73.347399][ T6770] hpfs: Bad value for 'uid'
[   73.348514][ T6770] hpfs: Bad value for 'uid'
[   74.332521][ T6778] loop2: detected capacity change from 0 to 256
[   74.334739][ T6778] exfat: Unknown parameter 'uid�u�6KZ�'
[   74.463907][ T6770] loop0: detected capacity change from 0 to 32768
[   74.532187][ T6770] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.51 (6770)
[   75.281601][ T6770] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[   75.317387][ T6770] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[   75.329598][ T6770] BTRFS info (device loop0): using free-space-tree
[   76.003072][ T6770] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR
[   76.003215][ T6770] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR
[   76.021021][ T6770] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR
[   76.032934][ T6770] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR
[   76.055264][ T6770] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[   76.072187][ T6770] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[   76.112327][ T6770] BTRFS error (device loop0): open_ctree failed: -12
[   79.091579][ T6850] loop3: detected capacity change from 0 to 4096
[   79.975178][ T6850] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   79.979604][ T6850] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.098908][ T6858] loop4: detected capacity change from 0 to 4096
[   80.376224][ T6858] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   80.380827][ T6858] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.434546][ T6839] loop1: detected capacity change from 0 to 32768
[   81.437434][ T6839] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.61 (6839)
[   81.447362][ T6839] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   81.450170][ T6839] BTRFS info (device loop1): using crc32c (crc32c-arm64) checksum algorithm
[   81.457696][ T6839] BTRFS info (device loop1): using free-space-tree
[   82.141515][ T6839] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR
[   82.141656][ T6839] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR
[   82.160656][ T6839] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR
[   82.229668][ T6839] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR
[   82.232625][ T6839] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR
[   82.235672][ T6839] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[   82.238316][ T6839] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[   83.252094][ T6884] loop2: detected capacity change from 0 to 2048
[   83.262872][ T6839] BTRFS error (device loop1): open_ctree failed: -12
[   83.863858][ T6884] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   84.274260][ T6903] hub 2-0:1.0: USB hub found
[   84.276157][ T6903] hub 2-0:1.0: 8 ports detected
[   85.577272][ T6913] loop3: detected capacity change from 0 to 32768
[   85.579468][ T6913] ocfs2: Unknown parameter 'barrier500000000000000026115'
[   86.578250][ T6929] loop1: detected capacity change from 0 to 2048
[   86.605151][ T6929] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   86.637464][ T6926] loop4: detected capacity change from 0 to 4096
[   86.978194][ T6934] hub 2-0:1.0: USB hub found
[   86.980176][ T6934] hub 2-0:1.0: 8 ports detected
[   87.187095][ T6926] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   87.534984][ T6926] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   87.646355][ T6931] loop3: detected capacity change from 0 to 4096
[   87.686394][ T6910] loop0: detected capacity change from 0 to 32768
[   87.697253][ T6910] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.74 (6910)
[   87.711289][ T6931] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   87.726982][ T6910] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   87.765839][ T6910] BTRFS info (device loop0): using crc32c (crc32c-arm64) checksum algorithm
[   87.768204][ T6910] BTRFS info (device loop0): using free-space-tree
[   87.776508][ T6931] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   87.845352][ T6947] ax25_connect(): syz.1.81 uses autobind, please contact jreuter@yaina.de
[   89.335287][ T6443] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   90.342607][ T6966] loop0: detected capacity change from 0 to 2048
[   90.370932][ T6966] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   91.774756][ T6978] hub 2-0:1.0: USB hub found
[   91.776426][ T6978] hub 2-0:1.0: 8 ports detected
[   93.011701][ T6986] loop2: detected capacity change from 0 to 2048
[   93.077333][ T6986] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   93.717561][ T6994] hub 2-0:1.0: USB hub found
[   93.719988][ T6994] hub 2-0:1.0: 8 ports detected
[  100.917048][ T7040] loop0: detected capacity change from 0 to 2048
[  101.415245][ T7040] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  101.971088][ T7038] loop4: detected capacity change from 0 to 2048
[  102.006732][ T7038] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  103.132654][ T7056] hub 2-0:1.0: USB hub found
[  103.134221][ T7056] hub 2-0:1.0: 8 ports detected
[  104.725856][ T7069] hub 2-0:1.0: USB hub found
[  104.727668][ T7069] hub 2-0:1.0: 8 ports detected
[  108.703613][ T7111] [U] �
[  108.704539][ T7111] [U] 
[  108.705197][ T7111] [U] 
[  108.705870][ T7111] [U] 
[  108.706570][ T7111] [U] 
[  108.707188][ T7111] [U] 
[  108.707859][ T7111] [U] 
[  108.708471][ T7111] [U] 
[  108.737917][ T7111] [U] 
[  108.738738][ T7111] [U] 
[  108.739398][ T7111] [U] 
[  108.740033][ T7111] [U] 
[  108.740697][ T7111] [U] 
[  108.741334][ T7111] [U] 
[  108.741950][ T7111] [U] 
[  108.742563][ T7111] [U] 
[  108.750861][ T7111] [U] 
[  108.751686][ T7111] [U] 
[  108.752345][ T7111] [U] 
[  108.753066][ T7111] [U] 
[  108.753733][ T7111] [U] 
[  108.754329][ T7111] [U] 
[  108.754944][ T7111] [U] 
[  108.755582][ T7111] [U] 
[  108.772082][ T7111] [U] 
[  108.772896][ T7111] [U] 
[  108.773537][ T7111] [U] 
[  108.774231][ T7111] [U] 
[  108.774862][ T7111] [U] 
[  108.775443][ T7111] [U] 
[  108.776047][ T7111] [U] 
[  108.776651][ T7111] [U] 
[  108.792087][ T7111] [U] 
[  108.792849][ T7111] [U] 
[  108.793531][ T7111] [U] 
[  108.794196][ T7111] [U] 
[  108.794831][ T7111] [U] 
[  108.795436][ T7111] [U] 
[  108.796158][ T7111] [U] 
[  108.796839][ T7111] [U] 
[  108.809092][ T7111] [U] 
[  108.809801][ T7111] [U] 
[  108.810467][ T7111] [U] 
[  108.811226][ T7111] [U] 
[  108.811891][ T7111] [U] 
[  108.812586][ T7111] [U] 
[  108.813223][ T7111] [U] 
[  108.813901][ T7111] [U] 
[  108.820039][ T7111] [U] 
[  108.820768][ T7111] [U] 
[  108.821439][ T7111] [U] 
[  108.822141][ T7111] [U] 
[  108.822783][ T7111] [U] 
[  108.823446][ T7111] [U] 
[  108.824072][ T7111] [U] 
[  108.824696][ T7111] [U] 
[  108.972388][ T7111] [U] 
[  108.973094][ T7111] [U] 
[  108.973815][ T7111] [U] 
[  108.974476][ T7111] [U] 
[  108.975173][ T7111] [U] 
[  108.975810][ T7111] [U] 
[  108.976393][ T7111] [U] 
[  108.977009][ T7111] [U] 
[  108.977786][ T7111] [U] 
[  108.978412][ T7111] [U] 
[  108.979023][ T7111] [U] 
[  108.979692][ T7111] [U] 
[  108.980285][ T7111] [U] 
[  108.980908][ T7111] [U] 
[  108.981543][ T7111] [U] 
[  108.982225][ T7111] [U] 
[  108.984339][ T7111] [U] 
[  108.985051][ T7111] [U] 
[  108.985723][ T7111] [U] 
[  108.986389][ T7111] [U] 
[  108.987091][ T7111] [U] 
[  108.987734][ T7111] [U] 
[  108.988362][ T7111] [U] 
[  108.988978][ T7111] [U] 
[  108.989702][ T7111] [U] 
[  108.990330][ T7111] [U] 
[  108.990984][ T7111] [U] 
[  108.991649][ T7111] [U] 
[  108.992378][ T7111] [U] 
[  108.993018][ T7111] [U] 
[  108.993679][ T7111] [U] 
[  108.994374][ T7111] [U] 
[  108.997640][ T7111] [U] 
[  108.998256][ T7111] [U] 
[  108.998841][ T7111] [U] 
[  108.999484][ T7111] [U] 
[  109.000146][ T7111] [U] 
[  109.000799][ T7111] [U] 
[  109.001475][ T7111] [U] 
[  109.002142][ T7111] [U] 
[  109.003350][ T7111] [U] 
[  109.004070][ T7111] [U] 
[  109.004749][ T7111] [U] 
[  109.005372][ T7111] [U] 
[  109.006013][ T7111] [U] 
[  109.006636][ T7111] [U] 
[  109.007269][ T7111] [U] 
[  109.007946][ T7111] [U] 
[  109.009790][ T7111] [U] 
[  109.010513][ T7111] [U] 
[  109.011180][ T7111] [U] 
[  109.011838][ T7111] [U] 
[  109.012502][ T7111] [U] 
[  109.013259][ T7111] [U] 
[  109.013982][ T7111] [U] 
[  109.014627][ T7111] [U] 
[  109.017242][ T7111] [U] 
[  109.017960][ T7111] [U] 
[  109.018604][ T7111] [U] 
[  109.019286][ T7111] [U] 
[  109.019916][ T7111] [U] 
[  109.020529][ T7111] [U] 
[  109.021249][ T7111] [U] 
[  109.022134][ T7111] [U] 
[  109.193512][ T7111] [U] 
[  109.194236][ T7111] [U] 
[  109.194976][ T7111] [U] 
[  109.195632][ T7111] [U] 
[  109.196327][ T7111] [U] 
[  109.196985][ T7111] [U] 
[  109.197605][ T7111] [U] 
[  109.312608][ T7110] [U] 
[  109.906952][ T7125] loop4: detected capacity change from 0 to 512
[  109.911070][ T7124] loop2: detected capacity change from 0 to 512
[  109.916201][ T7124] EXT4-fs: Ignoring removed orlov option
[  109.918694][ T7125] EXT4-fs: Ignoring removed orlov option
[  109.936855][ T7124] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  109.946648][ T7125] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  110.643541][ T7125] FAULT_INJECTION: forcing a failure.
[  110.643541][ T7125] name failslab, interval 1, probability 0, space 0, times 0
[  110.646698][ T7125] CPU: 1 UID: 0 PID: 7125 Comm: syz.4.125 Not tainted 6.14.0-rc5-syzkaller-g14d05f12084d #0
[  110.646714][ T7125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  110.646721][ T7125] Call trace:
[  110.646724][ T7125]  show_stack+0x2c/0x3c (C)
[  110.646744][ T7125]  dump_stack_lvl+0xe4/0x150
[  110.646758][ T7125]  dump_stack+0x1c/0x28
[  110.646771][ T7125]  should_fail_ex+0x418/0x590
[  110.646782][ T7125]  should_failslab+0xc8/0x130
[  110.646793][ T7125]  __kmalloc_noprof+0xf4/0x54c
[  110.646807][ T7125]  tomoyo_realpath_from_path+0xc8/0x4cc
[  110.646822][ T7125]  tomoyo_path_number_perm+0x1ec/0x5e4
[  110.646834][ T7125]  tomoyo_path_chown+0x68/0xf0
[  110.646847][ T7125]  security_path_chown+0x130/0x378
[  110.646859][ T7125]  chown_common+0x3f8/0x708
[  110.646870][ T7125]  ksys_fchown+0xe0/0x158
[  110.646880][ T7125]  __arm64_sys_fchown+0x7c/0x94
[  110.646891][ T7125]  invoke_syscall+0x98/0x2b8
[  110.646905][ T7125]  el0_svc_common+0x130/0x23c
[  110.646919][ T7125]  do_el0_svc+0x48/0x58
[  110.646932][ T7125]  el0_svc+0x54/0x168
[  110.646944][ T7125]  el0t_64_sync_handler+0x84/0x108
[  110.646955][ T7125]  el0t_64_sync+0x198/0x19c
[  110.646970][ T7125] ERROR: Out of memory at tomoyo_realpath_from_path.
[  110.884741][ T6446] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.890127][ T6450] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  111.627433][ T7147] FAULT_INJECTION: forcing a failure.
[  111.627433][ T7147] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  111.653366][ T7147] CPU: 1 UID: 0 PID: 7147 Comm: syz.0.133 Not tainted 6.14.0-rc5-syzkaller-g14d05f12084d #0
[  111.653386][ T7147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  111.653393][ T7147] Call trace:
[  111.653396][ T7147]  show_stack+0x2c/0x3c (C)
[  111.653417][ T7147]  dump_stack_lvl+0xe4/0x150
[  111.653431][ T7147]  dump_stack+0x1c/0x28
[  111.653444][ T7147]  should_fail_ex+0x418/0x590
[  111.653455][ T7147]  should_fail+0x14/0x24
[  111.653464][ T7147]  should_fail_usercopy+0x20/0x30
[  111.653475][ T7147]  _copy_from_iter+0x1a0/0x170c
[  111.653487][ T7147]  netlink_sendmsg+0x5a8/0xa9c
[  111.653511][ T7147]  ____sys_sendmsg+0x570/0x87c
[  111.653525][ T7147]  __sys_sendmsg+0x238/0x304
[  111.653537][ T7147]  __arm64_sys_sendmsg+0x80/0x94
[  111.653549][ T7147]  invoke_syscall+0x98/0x2b8
[  111.653562][ T7147]  el0_svc_common+0x130/0x23c
[  111.653575][ T7147]  do_el0_svc+0x48/0x58
[  111.653591][ T7147]  el0_svc+0x54/0x168
[  111.653602][ T7147]  el0t_64_sync_handler+0x84/0x108
[  111.653613][ T7147]  el0t_64_sync+0x198/0x19c
[  111.880672][ T7156] loop3: detected capacity change from 0 to 4096
[  111.908235][ T7156] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  111.913064][ T7156] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.158799][ T7143] loop1: detected capacity change from 0 to 32768
[  112.285003][ T7143] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode.
[  113.146136][ T6434] libceph: connect (1)[c::]:6789 error -101
[  113.147943][ T6434] libceph: mon0 (1)[c::]:6789 connect error
[  113.170327][ T6434] libceph: connect (1)[c::]:6789 error -101
[  113.176482][ T6434] libceph: mon0 (1)[c::]:6789 connect error
[  113.297686][ T7143] ceph: No mds server is up or the cluster is laggy
[  113.336834][ T7176] loop2: detected capacity change from 0 to 2048
[  113.387746][ T7176] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  113.428696][ T6451] ocfs2: Unmounting device (7,1) on (node local)
[  113.628537][ T7163] loop4: detected capacity change from 0 to 32768
[  113.824844][ T7178] hub 2-0:1.0: USB hub found
[  113.826611][ T7178] hub 2-0:1.0: 8 ports detected
[  114.446820][ T7163] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  114.458366][ T7163] bcachefs (loop4): initializing new filesystem
[  114.465883][ T7163] bcachefs (loop4): going read-write
[  114.522281][ T7163] bcachefs (loop4): marking superblocks
[  114.543099][ T7193] netlink: 'syz.1.142': attribute type 2 has an invalid length.
[  114.572925][ T7163] bcachefs (loop4): initializing freespace
[  114.576923][ T7163] bcachefs (loop4): done initializing freespace
[  114.587531][ T7163] bcachefs (loop4): reading snapshots table
[  114.591757][ T7163] bcachefs (loop4): reading snapshots done
[  114.651198][ T7163] bcachefs (loop4): done starting filesystem
[  114.707393][ T7163] netlink: 'syz.4.136': attribute type 1 has an invalid length.
[  114.747470][ T7163] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  114.843628][ T6450] bcachefs (loop4): shutting down
[  114.845021][ T6450] bcachefs (loop4): going read-only
[  114.846507][ T6450] bcachefs (loop4): finished waiting for writes to stop
[  114.902560][ T6450] bcachefs (loop4): flushing journal and stopping allocators, journal seq 2
[  114.967483][ T7189] loop2: detected capacity change from 0 to 32768
[  114.971659][ T7189] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.141 (7189)
[  115.072169][ T7189] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  115.074907][ T7189] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm
[  115.098777][ T6450] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 3
[  115.467915][ T6450] bcachefs (loop4): clean shutdown complete, journal seq 4
[  115.615544][ T6450] bcachefs (loop4): marking filesystem clean
[  115.741693][ T7189] BTRFS info (device loop2): rebuilding free space tree
[  115.849511][ T6450] bcachefs (loop4): shutdown complete
[  115.862540][ T7189] BTRFS info (device loop2): disabling free space tree
[  115.864335][ T7189] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  115.866714][ T7189] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  116.045108][ T7201] loop0: detected capacity change from 0 to 32768
[  116.154790][ T7201] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode.
[  116.347037][ T6494] libceph: connect (1)[c::]:6789 error -101
[  116.348818][ T6494] libceph: mon0 (1)[c::]:6789 connect error
[  116.355027][ T6494] libceph: connect (1)[c::]:6789 error -101
[  116.356656][ T6494] libceph: mon0 (1)[c::]:6789 connect error
[  116.357419][ T6446] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  116.790966][ T7200] ceph: No mds server is up or the cluster is laggy
[  116.993916][   T27] libceph: connect (1)[c::]:6789 error -101
[  116.995520][   T27] libceph: mon0 (1)[c::]:6789 connect error
[  117.127582][ T7239] FAULT_INJECTION: forcing a failure.
[  117.127582][ T7239] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  117.130787][ T7239] CPU: 0 UID: 0 PID: 7239 Comm: syz.2.149 Not tainted 6.14.0-rc5-syzkaller-g14d05f12084d #0
[  117.130803][ T7239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  117.130810][ T7239] Call trace:
[  117.130813][ T7239]  show_stack+0x2c/0x3c (C)
[  117.130833][ T7239]  dump_stack_lvl+0xe4/0x150
[  117.130848][ T7239]  dump_stack+0x1c/0x28
[  117.130860][ T7239]  should_fail_ex+0x418/0x590
[  117.130872][ T7239]  should_fail+0x14/0x24
[  117.130881][ T7239]  should_fail_usercopy+0x20/0x30
[  117.130891][ T7239]  _copy_from_iter+0x1a0/0x170c
[  117.130903][ T7239]  netlink_sendmsg+0x5a8/0xa9c
[  117.130917][ T7239]  ____sys_sendmsg+0x570/0x87c
[  117.130930][ T7239]  __sys_sendmsg+0x238/0x304
[  117.130942][ T7239]  __arm64_sys_sendmsg+0x80/0x94
[  117.130954][ T7239]  invoke_syscall+0x98/0x2b8
[  117.130967][ T7239]  el0_svc_common+0x130/0x23c
[  117.130980][ T7239]  do_el0_svc+0x48/0x58
[  117.130992][ T7239]  el0_svc+0x54/0x168
[  117.131003][ T7239]  el0t_64_sync_handler+0x84/0x108
[  117.131013][ T7239]  el0t_64_sync+0x198/0x19c
[  117.239744][ T7242] loop3: detected capacity change from 0 to 2048
[  117.245093][ T6443] ocfs2: Unmounting device (7,0) on (node local)
[  118.524330][ T7242]  loop3: unable to read partition table
[  118.525879][ T7242] loop_reread_partitions: partition scan of loop3 () failed (rc=-5)
[  118.557489][ T6060] Alternate GPT is invalid, using primary GPT.
[  118.559186][ T6060]  loop3: p2 p3 p7
[  118.649450][ T7254] loop0: detected capacity change from 0 to 256
[  118.651490][ T7254] exfat: Unknown parameter 'uid�u�6KZ�'
[  120.739206][ T7283] loop2: detected capacity change from 0 to 512
[  120.774092][ T7283] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  120.842463][ T6446] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  120.907310][ T7288] netlink: 12 bytes leftover after parsing attributes in process `syz.2.167'.
[  120.990576][ T7279] loop3: detected capacity change from 0 to 32768
[  121.023037][ T7279] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode.
[  121.160205][ T6434] libceph: connect (1)[c::]:6789 error -101
[  121.174983][ T6434] libceph: mon0 (1)[c::]:6789 connect error
[  121.417379][ T7301] FAULT_INJECTION: forcing a failure.
[  121.417379][ T7301] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  121.420739][ T7301] CPU: 1 UID: 0 PID: 7301 Comm: syz.4.144 Not tainted 6.14.0-rc5-syzkaller-g14d05f12084d #0
[  121.420756][ T7301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  121.420763][ T7301] Call trace:
[  121.420766][ T7301]  show_stack+0x2c/0x3c (C)
[  121.420786][ T7301]  dump_stack_lvl+0xe4/0x150
[  121.420801][ T7301]  dump_stack+0x1c/0x28
[  121.420814][ T7301]  should_fail_ex+0x418/0x590
[  121.420825][ T7301]  should_fail+0x14/0x24
[  121.420834][ T7301]  should_fail_usercopy+0x20/0x30
[  121.420845][ T7301]  lo_ioctl+0x488/0x24f0
[  121.420857][ T7301]  blkdev_ioctl+0x3a8/0xac4
[  121.420872][ T7301]  __arm64_sys_ioctl+0x14c/0x1cc
[  121.420884][ T7301]  invoke_syscall+0x98/0x2b8
[  121.420897][ T7301]  el0_svc_common+0x130/0x23c
[  121.420909][ T7301]  do_el0_svc+0x48/0x58
[  121.420921][ T7301]  el0_svc+0x54/0x168
[  121.420932][ T7301]  el0t_64_sync_handler+0x84/0x108
[  121.420943][ T7301]  el0t_64_sync+0x198/0x19c
[  121.443166][ T7279] ceph: No mds server is up or the cluster is laggy
[  121.455356][ T6434] libceph: connect (1)[c::]:6789 error -101
[  121.462027][ T6434] libceph: mon0 (1)[c::]:6789 connect error
[  121.551523][ T6454] ocfs2: Unmounting device (7,3) on (node local)
[  121.658240][ T7306] FAULT_INJECTION: forcing a failure.
[  121.658240][ T7306] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  121.661790][ T7306] CPU: 1 UID: 0 PID: 7306 Comm: syz.3.171 Not tainted 6.14.0-rc5-syzkaller-g14d05f12084d #0
[  121.661806][ T7306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  121.661817][ T7306] Call trace:
[  121.661821][ T7306]  show_stack+0x2c/0x3c (C)
[  121.661842][ T7306]  dump_stack_lvl+0xe4/0x150
[  121.661857][ T7306]  dump_stack+0x1c/0x28
[  121.661871][ T7306]  should_fail_ex+0x418/0x590
[  121.661883][ T7306]  should_fail+0x14/0x24
[  121.661893][ T7306]  should_fail_usercopy+0x20/0x30
[  121.661905][ T7306]  _copy_from_iter+0x1a0/0x170c
[  121.661917][ T7306]  netlink_sendmsg+0x5a8/0xa9c
[  121.661936][ T7306]  ____sys_sendmsg+0x570/0x87c
[  121.661949][ T7306]  __sys_sendmsg+0x238/0x304
[  121.661961][ T7306]  __arm64_sys_sendmsg+0x80/0x94
[  121.661973][ T7306]  invoke_syscall+0x98/0x2b8
[  121.661986][ T7306]  el0_svc_common+0x130/0x23c
[  121.662000][ T7306]  do_el0_svc+0x48/0x58
[  121.662013][ T7306]  el0_svc+0x54/0x168
[  121.662024][ T7306]  el0t_64_sync_handler+0x84/0x108
[  121.662035][ T7306]  el0t_64_sync+0x198/0x19c
[  123.501371][ T7324] loop1: detected capacity change from 0 to 512
[  123.669168][ T7324] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  123.715922][ T7329] loop4: detected capacity change from 0 to 1024
[  123.718066][ T7329] EXT4-fs: Ignoring removed oldalloc option
[  123.719609][ T7329] EXT4-fs: Ignoring removed i_version option
[  123.721105][ T7329] EXT4-fs: Ignoring removed orlov option
[  123.735053][ T6451] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.759685][ T7329] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  123.767617][ T7329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  123.770152][ T7329] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  123.782171][   T53] Bluetooth: hci3: unknown advertising packet type: 0x07
[  123.782211][   T53] Bluetooth: hci3: unknown advertising packet type: 0x08
[  123.784196][   T53] Bluetooth: hci3: unknown advertising packet type: 0xff
[  123.786953][   T53] Bluetooth: hci3: unknown advertising packet type: 0x39
[  123.876481][ T7338] FAULT_INJECTION: forcing a failure.
[  123.876481][ T7338] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  123.897276][ T7338] CPU: 0 UID: 0 PID: 7338 Comm: syz.1.180 Not tainted 6.14.0-rc5-syzkaller-g14d05f12084d #0
[  123.897297][ T7338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  123.897317][ T7338] Call trace:
[  123.897321][ T7338]  show_stack+0x2c/0x3c (C)
[  123.897341][ T7338]  dump_stack_lvl+0xe4/0x150
[  123.897356][ T7338]  dump_stack+0x1c/0x28
[  123.897369][ T7338]  should_fail_ex+0x418/0x590
[  123.897380][ T7338]  should_fail+0x14/0x24
[  123.897390][ T7338]  should_fail_usercopy+0x20/0x30
[  123.897401][ T7338]  _copy_from_iter+0x1a0/0x170c
[  123.897413][ T7338]  netlink_sendmsg+0x5a8/0xa9c
[  123.897427][ T7338]  ____sys_sendmsg+0x570/0x87c
[  123.897440][ T7338]  __sys_sendmsg+0x238/0x304
[  123.897453][ T7338]  __arm64_sys_sendmsg+0x80/0x94
[  123.897465][ T7338]  invoke_syscall+0x98/0x2b8
[  123.897478][ T7338]  el0_svc_common+0x130/0x23c
[  123.897490][ T7338]  do_el0_svc+0x48/0x58
[  123.897513][ T7338]  el0_svc+0x54/0x168
[  123.897523][ T7338]  el0t_64_sync_handler+0x84/0x108
[  123.897534][ T7338]  el0t_64_sync+0x198/0x19c
[  124.044876][ T7342] block nbd1: shutting down sockets
[  124.754230][ T7351] loop3: detected capacity change from 0 to 4096
[  124.982479][ T7351] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  125.033168][ T7351] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  125.040197][ T7355] loop2: detected capacity change from 0 to 512
[  125.064397][ T7355] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  125.071911][ T7355] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e028, mo2=0002]
[  125.081540][ T7355] System zones: 0-1, 15-15, 18-18, 34-34
[  125.085625][ T7355] EXT4-fs (loop2): orphan cleanup on readonly fs
[  125.089331][ T7355] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0
[  125.109067][ T7355] EXT4-fs warning (device loop2): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  125.123666][ T7355] EXT4-fs (loop2): Cannot turn on quotas: error -22
[  125.133852][ T7355] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.184: bad orphan inode 16
[  125.150307][ T7355] EXT4-fs (loop2): Remounting filesystem read-only
[  125.156552][ T7355] ext4_test_bit(bit=15, block=18) = 1
[  125.158653][ T7355] is_bad_inode(inode)=0
[  125.162225][ T7355] NEXT_ORPHAN(inode)=0
[  125.165824][ T7355] max_ino=32
[  125.167682][ T7355] i_nlink=2
[  125.170891][ T7355] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  125.976406][ T2367] ieee802154 phy0 wpan0: encryption failed: -22
[  125.978974][ T2367] ieee802154 phy1 wpan1: encryption failed: -22
[  126.406721][ T7369] syz.1.187 uses obsolete (PF_INET,SOCK_PACKET)
[  126.571326][ T6450] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  126.575355][ T7378] loop1: detected capacity change from 0 to 512
[  126.627308][ T7378] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  126.637485][ T7382] loop4: detected capacity change from 0 to 16
[  126.660731][ T7382] netlink: 20 bytes leftover after parsing attributes in process `syz.4.191'.
[  126.682528][ T7384] loop3: detected capacity change from 0 to 8
[  126.696812][ T6451] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  126.723017][ T7384] netlink: 56 bytes leftover after parsing attributes in process `syz.3.192'.
[  126.891981][ T7384] netlink: 32 bytes leftover after parsing attributes in process `syz.3.192'.
[  126.894743][ T7389] netlink: 32 bytes leftover after parsing attributes in process `syz.3.192'.
[  127.695704][ T6446] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.790086][ T7388] loop4: detected capacity change from 0 to 32768
[  127.792565][   T30] audit: type=1326 audit(127.760:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7396 comm="syz.1.196" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8555ad28 code=0x0
[  127.806944][ T7388] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.194 (7388)
[  127.831722][ T7388] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  127.882054][ T7388] BTRFS info (device loop4): using crc32c (crc32c-arm64) checksum algorithm
[  127.904028][ T7388] BTRFS info (device loop4): using free-space-tree
[  128.110122][ T7399] loop1: detected capacity change from 0 to 32768
[  128.112455][ T7399] XFS: noikeep mount option is deprecated.
[  128.172389][  T691] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.230474][ T6449] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  128.234744][ T6449] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  128.237939][ T6449] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  128.239189][ T7399] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  128.241019][ T6449] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  128.256239][ T6449] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  128.258372][ T6449] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  128.858793][  T691] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.940059][ T7399] XFS (loop1): Ending clean mount
[  128.980918][ T6450] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  128.996901][ T7399] XFS (loop1): Quotacheck needed: Please wait.
[  129.046150][ T7399] XFS (loop1): Quotacheck: Done.
[  129.055928][  T691] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.170146][ T7446] ip6t_srh: unknown srh invflags 7D00
[  129.180705][ T7447] FAULT_INJECTION: forcing a failure.
[  129.180705][ T7447] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  129.200326][ T7447] CPU: 1 UID: 0 PID: 7447 Comm: syz.0.204 Not tainted 6.14.0-rc5-syzkaller-g14d05f12084d #0
[  129.200346][ T7447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  129.200353][ T7447] Call trace:
[  129.200356][ T7447]  show_stack+0x2c/0x3c (C)
[  129.200377][ T7447]  dump_stack_lvl+0xe4/0x150
[  129.200391][ T7447]  dump_stack+0x1c/0x28
[  129.200404][ T7447]  should_fail_ex+0x418/0x590
[  129.200415][ T7447]  should_fail+0x14/0x24
[  129.200425][ T7447]  should_fail_usercopy+0x20/0x30
[  129.200435][ T7447]  ____sys_sendmsg+0x260/0x87c
[  129.200449][ T7447]  __sys_sendmmsg+0x2fc/0x76c
[  129.200460][ T7447]  __arm64_sys_sendmmsg+0xa0/0xbc
[  129.200473][ T7447]  invoke_syscall+0x98/0x2b8
[  129.200486][ T7447]  el0_svc_common+0x130/0x23c
[  129.200509][ T7447]  do_el0_svc+0x48/0x58
[  129.200522][ T7447]  el0_svc+0x54/0x168
[  129.200533][ T7447]  el0t_64_sync_handler+0x84/0x108
[  129.200543][ T7447]  el0t_64_sync+0x198/0x19c
[  129.246237][  T691] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.329617][ T6451] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  129.426237][ T7459] loop4: detected capacity change from 0 to 512
[  129.510291][ T7424] chnl_net:caif_netlink_parms(): no params data found
[  129.516876][ T7459] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  130.682057][ T6449] Bluetooth: hci1: command tx timeout
[  130.827892][ T7473] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #2: comm syz.4.209: corrupted inode contents
[  130.978480][ T7473] EXT4-fs error (device loop4): ext4_dirty_inode:6042: inode #2: comm syz.4.209: mark_inode_dirty error
[  130.987267][ T7473] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #2: comm syz.4.209: corrupted inode contents
[  131.010422][ T7473] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.209: mark_inode_dirty error
[  131.575916][ T7451] loop0: detected capacity change from 0 to 32768
[  131.615234][ T7451] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.206 (7451)
[  131.748508][ T7451] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  131.751225][ T7451] BTRFS info (device loop0): using crc32c (crc32c-arm64) checksum algorithm
[  131.767954][ T6450] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.781474][ T7451] BTRFS info (device loop0): using free-space-tree
[  131.788226][ T7424] bridge0: port 1(bridge_slave_0) entered blocking state
[  131.790124][ T7424] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.815781][ T7424] bridge_slave_0: entered allmulticast mode
[  131.822768][ T7424] bridge_slave_0: entered promiscuous mode
[  131.834426][ T7424] bridge0: port 2(bridge_slave_1) entered blocking state
[  131.836308][ T7424] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.838212][ T7424] bridge_slave_1: entered allmulticast mode
[  131.840305][ T7424] bridge_slave_1: entered promiscuous mode
[  131.913633][  T691] bridge_slave_1: left allmulticast mode
[  131.915427][  T691] bridge_slave_1: left promiscuous mode
[  131.932226][  T691] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.956103][   T30] audit: type=1326 audit(131.940:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7504 comm="syz.4.212" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ff5ad28 code=0x0
[  131.974851][ T7486] loop1: detected capacity change from 0 to 2048
[  131.986630][  T691] bridge_slave_0: left allmulticast mode
[  131.988042][  T691] bridge_slave_0: left promiscuous mode
[  131.989518][  T691] bridge0: port 1(bridge_slave_0) entered disabled state
[  132.752347][ T6449] Bluetooth: hci1: command tx timeout
[  132.936332][ T6443] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  133.247053][ T7507] loop3: detected capacity change from 0 to 32768
[  133.249266][ T7507] ocfs2: Bad value for 'resv_level'
[  133.339369][ T7486] loop1: detected capacity change from 0 to 32768
[  133.411184][ T7486] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  133.531036][ T7519] loop4: detected capacity change from 0 to 32768
[  133.561615][ T7536] FAULT_INJECTION: forcing a failure.
[  133.561615][ T7536] name failslab, interval 1, probability 0, space 0, times 0
[  133.575264][ T7536] CPU: 0 UID: 0 PID: 7536 Comm: syz.3.217 Not tainted 6.14.0-rc5-syzkaller-g14d05f12084d #0
[  133.575283][ T7536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  133.575290][ T7536] Call trace:
[  133.575294][ T7536]  show_stack+0x2c/0x3c (C)
[  133.575314][ T7536]  dump_stack_lvl+0xe4/0x150
[  133.575329][ T7536]  dump_stack+0x1c/0x28
[  133.575341][ T7536]  should_fail_ex+0x418/0x590
[  133.575352][ T7536]  should_failslab+0xc8/0x130
[  133.575363][ T7536]  __kmalloc_noprof+0xf4/0x54c
[  133.575377][ T7536]  io_cache_alloc_new+0x58/0x114
[  133.575389][ T7536]  io_prep_rw+0x490/0xcb0
[  133.575402][ T7536]  io_prep_rwv+0xc4/0x578
[  133.575413][ T7536]  io_prep_readv+0x2c/0x3c
[  133.575425][ T7536]  io_submit_sqes+0x710/0x199c
[  133.575435][ T7536]  __arm64_sys_io_uring_enter+0x2f0/0x14b0
[  133.575446][ T7536]  invoke_syscall+0x98/0x2b8
[  133.575459][ T7536]  el0_svc_common+0x1e0/0x23c
[  133.575472][ T7536]  do_el0_svc+0x48/0x58
[  133.575484][ T7536]  el0_svc+0x54/0x168
[  133.575505][ T7536]  el0t_64_sync_handler+0x84/0x108
[  133.575516][ T7536]  el0t_64_sync+0x198/0x19c
[  133.721556][ T7543] loop0: detected capacity change from 0 to 512
[  133.759197][ T7543] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  133.791719][ T7543] FAULT_INJECTION: forcing a failure.
[  133.791719][ T7543] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  133.798752][ T7543] CPU: 1 UID: 0 PID: 7543 Comm: syz.0.220 Not tainted 6.14.0-rc5-syzkaller-g14d05f12084d #0
[  133.798772][ T7543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  133.798779][ T7543] Call trace:
[  133.798783][ T7543]  show_stack+0x2c/0x3c (C)
[  133.798803][ T7543]  dump_stack_lvl+0xe4/0x150
[  133.798818][ T7543]  dump_stack+0x1c/0x28
[  133.798831][ T7543]  should_fail_ex+0x418/0x590
[  133.798842][ T7543]  should_fail+0x14/0x24
[  133.798851][ T7543]  should_fail_usercopy+0x20/0x30
[  133.798862][ T7543]  simple_read_from_buffer+0xd4/0x248
[  133.798876][ T7543]  proc_fail_nth_read+0x134/0x1a0
[  133.798888][ T7543]  vfs_read+0x22c/0x974
[  133.798901][ T7543]  ksys_read+0x15c/0x26c
[  133.798912][ T7543]  __arm64_sys_read+0x7c/0x90
[  133.798923][ T7543]  invoke_syscall+0x98/0x2b8
[  133.798936][ T7543]  el0_svc_common+0x130/0x23c
[  133.798949][ T7543]  do_el0_svc+0x48/0x58
[  133.798961][ T7543]  el0_svc+0x54/0x168
[  133.798972][ T7543]  el0t_64_sync_handler+0x84/0x108
[  133.798982][ T7543]  el0t_64_sync+0x198/0x19c
[  133.856478][ T6443] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.709431][ T7486] overlayfs: failed to resolve './file2': -2
[  134.811950][ T6449] Bluetooth: hci1: command tx timeout
[  134.828786][ T6451] ocfs2: Unmounting device (7,1) on (node local)
[  135.529400][ T7561] FAULT_INJECTION: forcing a failure.
[  135.529400][ T7561] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  135.538395][ T7561] CPU: 1 UID: 0 PID: 7561 Comm: syz.0.224 Not tainted 6.14.0-rc5-syzkaller-g14d05f12084d #0
[  135.538424][ T7561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  135.538432][ T7561] Call trace:
[  135.538435][ T7561]  show_stack+0x2c/0x3c (C)
[  135.538456][ T7561]  dump_stack_lvl+0xe4/0x150
[  135.538471][ T7561]  dump_stack+0x1c/0x28
[  135.538508][ T7561]  should_fail_ex+0x418/0x590
[  135.538521][ T7561]  should_fail+0x14/0x24
[  135.538530][ T7561]  should_fail_usercopy+0x20/0x30
[  135.538541][ T7561]  memdup_user+0x8c/0x258
[  135.538553][ T7561]  strndup_user+0x78/0xe0
[  135.538564][ T7561]  __arm64_sys_fsconfig+0x630/0xc88
[  135.538576][ T7561]  invoke_syscall+0x98/0x2b8
[  135.538589][ T7561]  el0_svc_common+0x130/0x23c
[  135.538601][ T7561]  do_el0_svc+0x48/0x58
[  135.538614][ T7561]  el0_svc+0x54/0x168
[  135.538625][ T7561]  el0t_64_sync_handler+0x84/0x108
[  135.538638][ T7561]  el0t_64_sync+0x198/0x19c
[  135.646645][ T7566] loop0: detected capacity change from 0 to 2048
[  135.651432][ T7566] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  136.026899][ T7568] hub 2-0:1.0: USB hub found
[  136.028647][ T7568] hub 2-0:1.0: 8 ports detected
[  136.632745][ T7570] loop0: detected capacity change from 0 to 2048
[  136.640166][ T7570] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  136.893082][ T6449] Bluetooth: hci1: command tx timeout
[  137.321519][  T691] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  137.507528][  T691] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  137.590420][  T691] bond0 (unregistering): Released all slaves
[  137.638491][ T7424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  137.640895][ T7519] bond0: Unable to set down delay as MII monitoring is disabled
[  137.709180][ T7424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  137.865904][ T7593] netlink: 4 bytes leftover after parsing attributes in process `syz.0.231'.
[  138.053381][ T7424] team0: Port device team_slave_0 added
[  138.945902][ T7424] team0: Port device team_slave_1 added
[  139.074679][ T7606] netlink: 80 bytes leftover after parsing attributes in process `syz.4.229'.
[  139.083402][ T7591] loop3: detected capacity change from 0 to 32768
[  139.087693][ T7424] batman_adv: batadv0: Adding interface: batadv_slave_0
[  139.097081][ T7424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  139.106122][ T7591] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.232 (7591)
[  139.115374][ T7424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  139.124923][ T7598] loop0: detected capacity change from 0 to 32768
[  139.127284][ T7591] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  139.129814][ T7591] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[  139.132593][ T7591] BTRFS info (device loop3): disk space caching is enabled
[  139.135431][ T7591] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  139.159820][ T7607] loop1: detected capacity change from 0 to 32768
[  139.175813][ T7607] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.234 (7607)
[  139.206573][ T7607] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  139.211135][ T7607] BTRFS info (device loop1): using crc32c (crc32c-arm64) checksum algorithm
[  139.218360][ T7607] BTRFS info (device loop1): using free-space-tree
[  139.275093][ T7591] BTRFS info (device loop3): rebuilding free space tree
[  139.354061][ T7645] FAULT_INJECTION: forcing a failure.
[  139.354061][ T7645] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  139.357363][ T7645] CPU: 1 UID: 0 PID: 7645 Comm: syz.0.235 Not tainted 6.14.0-rc5-syzkaller-g14d05f12084d #0
[  139.357379][ T7645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  139.357397][ T7645] Call trace:
[  139.357401][ T7645]  show_stack+0x2c/0x3c (C)
[  139.357421][ T7645]  dump_stack_lvl+0xe4/0x150
[  139.357435][ T7645]  dump_stack+0x1c/0x28
[  139.357448][ T7645]  should_fail_ex+0x418/0x590
[  139.357460][ T7645]  should_fail+0x14/0x24
[  139.357469][ T7645]  should_fail_usercopy+0x20/0x30
[  139.357480][ T7645]  _copy_from_iter+0x1a0/0x170c
[  139.357492][ T7645]  netlink_sendmsg+0x5a8/0xa9c
[  139.357515][ T7645]  ____sys_sendmsg+0x570/0x87c
[  139.357529][ T7645]  __sys_sendmsg+0x238/0x304
[  139.357541][ T7645]  __arm64_sys_sendmsg+0x80/0x94
[  139.357553][ T7645]  invoke_syscall+0x98/0x2b8
[  139.357566][ T7645]  el0_svc_common+0x130/0x23c
[  139.357578][ T7645]  do_el0_svc+0x48/0x58
[  139.357591][ T7645]  el0_svc+0x54/0x168
[  139.357601][ T7645]  el0t_64_sync_handler+0x84/0x108
[  139.357612][ T7645]  el0t_64_sync+0x198/0x19c
[  139.388303][    C1] vkms_vblank_simulate: vblank timer overrun
[  139.421998][ T7424] batman_adv: batadv0: Adding interface: batadv_slave_1
[  139.433776][ T7424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  139.433829][ T7424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  139.477760][ T7591] BTRFS info (device loop3): disabling free space tree
[  139.479530][ T7591] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  139.489881][ T7591] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  139.490836][ T7424] hsr_slave_0: entered promiscuous mode
[  139.503419][ T7424] hsr_slave_1: entered promiscuous mode
[  139.505435][ T7424] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  139.508342][ T7424] Cannot create hsr debugfs directory
[  140.865234][ T6451] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  140.905598][ T7591] BTRFS info (device loop3): balance: start -susage=1,drange=8796093022215..8,vrange=18446744073709551614..33554432,limit=10376293541461622786,limit=2..2415919104
[  140.982539][ T7591] BTRFS info (device loop3): balance: ended with status: 0
[  141.052282][  T691] hsr_slave_0: left promiscuous mode
[  141.078299][ T6454] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  141.143614][  T691] hsr_slave_1: left promiscuous mode
[  141.145463][  T691] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  141.147321][  T691] batman_adv: batadv0: Removing interface: batadv_slave_0
[  141.152772][  T691] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  141.154658][  T691] batman_adv: batadv0: Removing interface: batadv_slave_1
[  141.176708][  T691] veth1_macvtap: left promiscuous mode
[  141.179426][  T691] veth0_macvtap: left promiscuous mode
[  142.136726][  T691] veth1_vlan: left promiscuous mode
[  142.138415][  T691] veth0_vlan: left promiscuous mode
[  143.188633][ T7679] loop1: detected capacity change from 0 to 4096
[  143.220135][ T7679] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  143.850308][ T6451] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  143.888414][ T7686] loop1: detected capacity change from 0 to 128
[  144.876458][  T691] team0 (unregistering): Port device team_slave_1 removed
[  145.109990][  T691] team0 (unregistering): Port device team_slave_0 removed
[  148.175537][ T7711] FAULT_INJECTION: forcing a failure.
[  148.175537][ T7711] name failslab, interval 1, probability 0, space 0, times 0
[  148.178676][ T7711] CPU: 0 UID: 0 PID: 7711 Comm: syz.1.249 Not tainted 6.14.0-rc5-syzkaller-g14d05f12084d #0
[  148.178692][ T7711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  148.178700][ T7711] Call trace:
[  148.178703][ T7711]  show_stack+0x2c/0x3c (C)
[  148.178723][ T7711]  dump_stack_lvl+0xe4/0x150
[  148.178737][ T7711]  dump_stack+0x1c/0x28
[  148.178750][ T7711]  should_fail_ex+0x418/0x590
[  148.178761][ T7711]  should_failslab+0xc8/0x130
[  148.178772][ T7711]  kmem_cache_alloc_noprof+0x84/0x410
[  148.178786][ T7711]  skb_clone+0x1c8/0x330
[  148.178800][ T7711]  __netlink_deliver_tap+0x36c/0x700
[  148.178813][ T7711]  netlink_deliver_tap+0x1ac/0x1b0
[  148.178826][ T7711]  netlink_unicast+0x64c/0x8a4
[  148.178837][ T7711]  netlink_sendmsg+0x7b4/0xa9c
[  148.178850][ T7711]  sock_write_iter+0x2d8/0x448
[  148.178863][ T7711]  do_iter_readv_writev+0x558/0x7d8
[  148.178876][ T7711]  vfs_writev+0x2dc/0x92c
[  148.178888][ T7711]  do_writev+0x178/0x304
[  148.178900][ T7711]  __arm64_sys_writev+0x80/0x94
[  148.178912][ T7711]  invoke_syscall+0x98/0x2b8
[  148.178925][ T7711]  el0_svc_common+0x130/0x23c
[  148.178938][ T7711]  do_el0_svc+0x48/0x58
[  148.178950][ T7711]  el0_svc+0x54/0x168
[  148.178961][ T7711]  el0t_64_sync_handler+0x84/0x108
[  148.178971][ T7711]  el0t_64_sync+0x198/0x19c
[  148.327797][ T7718] loop4: detected capacity change from 0 to 256
[  149.074255][ T7424] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  149.256632][ T7732] loop0: detected capacity change from 0 to 4096
[  149.256901][ T7424] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  149.270197][ T7732] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512).
[  149.289964][ T7424] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  149.297064][ T7735] loop1: detected capacity change from 0 to 4096
[  149.310327][ T7424] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  149.334711][ T7735] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  149.508505][ T7750] netlink: 596 bytes leftover after parsing attributes in process `syz.3.258'.
[  149.542790][ T7750] netlink: 596 bytes leftover after parsing attributes in process `syz.3.258'.
[  149.542815][ T7752] tmpfs: Bad value for 'size'
[  149.555890][ T7750] netlink: 'syz.3.258': attribute type 10 has an invalid length.
[  149.566465][ T7752] input: syz0 as /devices/virtual/input/input2
[  149.601324][ T7754] netlink: 16 bytes leftover after parsing attributes in process `syz.0.260'.
[  149.604078][ T7750] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  149.609573][ T7754] netlink: 16 bytes leftover after parsing attributes in process `syz.0.260'.
[  149.659382][ T7424] 8021q: adding VLAN 0 to HW filter on device bond0
[  149.695293][ T7424] 8021q: adding VLAN 0 to HW filter on device team0
[  149.751512][  T662] bridge0: port 1(bridge_slave_0) entered blocking state
[  149.753429][  T662] bridge0: port 1(bridge_slave_0) entered forwarding state
[  149.762555][  T662] bridge0: port 2(bridge_slave_1) entered blocking state
[  149.764396][  T662] bridge0: port 2(bridge_slave_1) entered forwarding state
[  149.770255][ T7759] netlink: 36 bytes leftover after parsing attributes in process `syz.3.261'.
[  149.795810][ T7424] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  149.809884][ T7424] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  149.880803][ T7770] loop0: detected capacity change from 0 to 1024
[  149.952217][ T6451] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.985418][ T7775] loop3: detected capacity change from 0 to 2048
[  150.044903][ T7770] EXT4-fs (loop0): Test dummy encryption mode enabled
[  150.053971][ T7770] EXT4-fs (loop0): stripe (7) is not aligned with cluster size (16), stripe is disabled
[  150.071119][ T7770] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  150.073723][ T7775] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  150.088977][ T7424] 8021q: adding VLAN 0 to HW filter on device batadv0
[  150.136175][ T7770] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce"
[  150.171031][ T7770] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.265: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[  150.187922][ T7770] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.265: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[  150.199231][ T7770] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.265: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[  150.213616][ T7790] FAULT_INJECTION: forcing a failure.
[  150.213616][ T7790] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  150.227451][ T7790] CPU: 0 UID: 0 PID: 7790 Comm: syz.1.266 Not tainted 6.14.0-rc5-syzkaller-g14d05f12084d #0
[  150.227473][ T7790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  150.227481][ T7790] Call trace:
[  150.227484][ T7790]  show_stack+0x2c/0x3c (C)
[  150.227514][ T7790]  dump_stack_lvl+0xe4/0x150
[  150.227529][ T7790]  dump_stack+0x1c/0x28
[  150.227542][ T7790]  should_fail_ex+0x418/0x590
[  150.227553][ T7790]  should_fail+0x14/0x24
[  150.227563][ T7790]  should_fail_usercopy+0x20/0x30
[  150.227573][ T7790]  _copy_from_iter+0x1a0/0x170c
[  150.227586][ T7790]  netlink_sendmsg+0x5a8/0xa9c
[  150.227600][ T7790]  ____sys_sendmsg+0x570/0x87c
[  150.227614][ T7790]  __sys_sendmsg+0x238/0x304
[  150.227626][ T7790]  __arm64_sys_sendmsg+0x80/0x94
[  150.227638][ T7790]  invoke_syscall+0x98/0x2b8
[  150.227656][ T7790]  el0_svc_common+0x130/0x23c
[  150.227669][ T7790]  do_el0_svc+0x48/0x58
[  150.227681][ T7790]  el0_svc+0x54/0x168
[  150.227692][ T7790]  el0t_64_sync_handler+0x84/0x108
[  150.227703][ T7790]  el0t_64_sync+0x198/0x19c
[  150.321759][ T7799] FAULT_INJECTION: forcing a failure.
[  150.321759][ T7799] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  150.326157][ T7799] CPU: 0 UID: 0 PID: 7799 Comm: syz.1.269 Not tainted 6.14.0-rc5-syzkaller-g14d05f12084d #0
[  150.326177][ T7799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  150.326184][ T7799] Call trace:
[  150.326187][ T7799]  show_stack+0x2c/0x3c (C)
[  150.326208][ T7799]  dump_stack_lvl+0xe4/0x150
[  150.326223][ T7799]  dump_stack+0x1c/0x28
[  150.326236][ T7799]  should_fail_ex+0x418/0x590
[  150.326247][ T7799]  should_fail+0x14/0x24
[  150.326257][ T7799]  should_fail_usercopy+0x20/0x30
[  150.326267][ T7799]  _copy_from_iter+0x1a0/0x170c
[  150.326280][ T7799]  netlink_sendmsg+0x5a8/0xa9c
[  150.326294][ T7799]  ____sys_sendmsg+0x570/0x87c
[  150.326308][ T7799]  __sys_sendmmsg+0x2fc/0x76c
[  150.326320][ T7799]  __arm64_sys_sendmmsg+0xa0/0xbc
[  150.326332][ T7799]  invoke_syscall+0x98/0x2b8
[  150.326346][ T7799]  el0_svc_common+0x130/0x23c
[  150.326358][ T7799]  do_el0_svc+0x48/0x58
[  150.326371][ T7799]  el0_svc+0x54/0x168
[  150.326381][ T7799]  el0t_64_sync_handler+0x84/0x108
[  150.326392][ T7799]  el0t_64_sync+0x198/0x19c
[  150.326916][ T6443] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.494721][ T7802] hub 2-0:1.0: USB hub found
[  150.496361][ T7802] hub 2-0:1.0: 8 ports detected
[  151.189629][ T7424] veth0_vlan: entered promiscuous mode
[  151.235736][ T7424] veth1_vlan: entered promiscuous mode
[  151.252589][ T7424] veth0_macvtap: entered promiscuous mode
[  151.266112][ T7815] netlink: 48 bytes leftover after parsing attributes in process `syz.3.272'.
[  151.330995][ T7816] FAULT_INJECTION: forcing a failure.
[  151.330995][ T7816] name failslab, interval 1, probability 0, space 0, times 0
[  151.334361][ T7816] CPU: 1 UID: 0 PID: 7816 Comm: syz.4.271 Not tainted 6.14.0-rc5-syzkaller-g14d05f12084d #0
[  151.334382][ T7816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  151.334389][ T7816] Call trace:
[  151.334392][ T7816]  show_stack+0x2c/0x3c (C)
[  151.334412][ T7816]  dump_stack_lvl+0xe4/0x150
[  151.334427][ T7816]  dump_stack+0x1c/0x28
[  151.334440][ T7816]  should_fail_ex+0x418/0x590
[  151.334451][ T7816]  should_failslab+0xc8/0x130
[  151.334463][ T7816]  kmem_cache_alloc_noprof+0x84/0x410
[  151.334477][ T7816]  security_file_alloc+0x30/0x328
[  151.334490][ T7816]  init_file+0x94/0x2a0
[  151.334510][ T7816]  alloc_empty_file+0xc0/0x1d4
[  151.334523][ T7816]  path_openat+0xd4/0x2b1c
[  151.334536][ T7816]  do_filp_open+0x1e8/0x404
[  151.334548][ T7816]  do_open_execat+0x148/0x430
[  151.334559][ T7816]  alloc_bprm+0x44/0xa74
[  151.334570][ T7816]  do_execveat_common+0x164/0x880
[  151.334582][ T7816]  __arm64_sys_execveat+0xd0/0xec
[  151.334593][ T7816]  invoke_syscall+0x98/0x2b8
[  151.334606][ T7816]  el0_svc_common+0x130/0x23c
[  151.334619][ T7816]  do_el0_svc+0x48/0x58
[  151.334631][ T7816]  el0_svc+0x54/0x168
[  151.334642][ T7816]  el0t_64_sync_handler+0x84/0x108
[  151.334652][ T7816]  el0t_64_sync+0x198/0x19c
[  151.852965][ T7424] veth1_macvtap: entered promiscuous mode
[  151.952523][ T7424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  151.955821][ T7424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.958516][ T7424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  151.965840][ T7424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.968366][ T7424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  151.970950][ T7424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.974417][ T7424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  151.977174][ T7424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.980471][ T7424] batman_adv: batadv0: Interface activated: batadv_slave_0
[  152.015111][ T7424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  152.021656][ T7424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  152.042369][ T7424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  152.044988][ T7424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  152.047720][ T7424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  152.050309][ T7424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  152.066874][ T7424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  152.072360][ T7424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  152.152748][ T7424] batman_adv: batadv0: Interface activated: batadv_slave_1
[  152.291445][ T7828] loop3: detected capacity change from 0 to 4096
[  152.314473][ T7424] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  152.316748][ T7424] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  152.318932][ T7424] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  152.321087][ T7424] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  152.326686][ T7828] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  152.488697][  T528] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  152.496275][  T528] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  152.526954][  T691] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  152.528942][  T691] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  152.606879][ T7847] netlink: 'syz.0.280': attribute type 10 has an invalid length.
[  152.721742][ T7834] loop1: detected capacity change from 0 to 32768
[  152.724977][ T7847] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  152.731727][ T7834] btrfs: Deprecated parameter 'usebackuproot'
[  152.741966][ T7834] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  152.755655][ T7834] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.277 (7834)
[  152.795181][ T7834] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  152.802338][ T7834] BTRFS info (device loop1): using crc32c (crc32c-arm64) checksum algorithm
[  152.807017][ T7834] BTRFS info (device loop1): using free-space-tree
[  152.986347][ T6454] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  153.708171][ T7836] loop4: detected capacity change from 0 to 32768
[  153.776021][ T7836] BTRFS: device /dev/loop4 (7:4) using temp-fsid 18bb4433-00a7-464a-8c59-f6ae8314e171
[  153.795369][ T7836] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.278 (7836)
[  153.810707][ T7834] BTRFS info (device loop1): rebuilding free space tree
[  154.892374][ T7836] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  154.894968][ T7836] BTRFS info (device loop4): using crc32c (crc32c-arm64) checksum algorithm
[  154.897125][ T7836] BTRFS info (device loop4): using free-space-tree
[  155.459781][ T7836] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR
[  155.752398][ T7836] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR
[  155.752567][ T7836] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR
[  155.752683][ T7836] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR
[  155.752792][ T7836] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR
[  155.752890][ T7836] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR
[  155.752996][ T7836] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR
[  155.753109][ T7836] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR
[  155.753212][ T7836] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR
[  155.753325][ T7836] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR
[  155.753433][ T7836] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[  155.753547][ T7836] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[  156.019551][ T7836] BTRFS error (device loop4): open_ctree failed: -12
[  156.088767][ T6451] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  159.309055][ T7948] loop3: detected capacity change from 0 to 4096
[  159.455964][ T7948] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  159.545350][ T7963] loop0: detected capacity change from 0 to 1024
[  160.172120][ T7963] EXT4-fs: Ignoring removed bh option
[  160.173623][ T7963] EXT4-fs: inline encryption not supported
[  160.220957][ T6454] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.223461][ T7963] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  160.247612][ T7963] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  160.287582][ T7969] loop5: detected capacity change from 0 to 2048
[  160.321514][ T7969] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  160.430981][ T7963] EXT4-fs error (device loop0): ext4_map_blocks:671: inode #3: block 2: comm syz.0.294: lblock 2 mapped to illegal pblock 2 (length 1)
[  161.003566][ T7981] hub 2-0:1.0: USB hub found
[  161.005999][ T7981] hub 2-0:1.0: 8 ports detected
[  161.414729][ T7983] loop1: detected capacity change from 0 to 256
[  161.419101][ T7963] Quota error (device loop0): qtree_write_dquot: dquota write failed
[  161.421282][ T7963] EXT4-fs error (device loop0): ext4_map_blocks:671: inode #3: block 48: comm syz.0.294: lblock 0 mapped to illegal pblock 48 (length 1)
[  161.427710][ T7963] Quota error (device loop0): v2_write_file_info: Can't write info structure
[  161.431271][ T7963] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.294: Failed to acquire dquot type 0
[  161.925536][ T7963] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5838: Corrupt filesystem
[  162.201613][ T7963] EXT4-fs error (device loop0): ext4_evict_inode:256: inode #11: comm syz.0.294: mark_inode_dirty error
[  162.234078][ T7963] EXT4-fs warning (device loop0): ext4_evict_inode:259: couldn't mark inode dirty (err -117)
[  162.236804][ T7963] EXT4-fs (loop0): 1 orphan inode deleted
[  162.238621][ T7963] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  162.253472][   T11] EXT4-fs error (device loop0): ext4_map_blocks:671: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1)
[  162.460947][ T7992] warning: `syz.4.301' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  162.524728][ T7992] FAULT_INJECTION: forcing a failure.
[  162.524728][ T7992] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  162.542483][ T7992] CPU: 1 UID: 0 PID: 7992 Comm: syz.4.301 Not tainted 6.14.0-rc5-syzkaller-g14d05f12084d #0
[  162.542512][ T7992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  162.542519][ T7992] Call trace:
[  162.542522][ T7992]  show_stack+0x2c/0x3c (C)
[  162.542542][ T7992]  dump_stack_lvl+0xe4/0x150
[  162.542558][ T7992]  dump_stack+0x1c/0x28
[  162.542571][ T7992]  should_fail_ex+0x418/0x590
[  162.542587][ T7992]  should_fail+0x14/0x24
[  162.542596][ T7992]  should_fail_usercopy+0x20/0x30
[  162.542606][ T7992]  simple_read_from_buffer+0xd4/0x248
[  162.542621][ T7992]  proc_fail_nth_read+0x134/0x1a0
[  162.542634][ T7992]  vfs_read+0x22c/0x974
[  162.542645][ T7992]  ksys_read+0x15c/0x26c
[  162.542657][ T7992]  __arm64_sys_read+0x7c/0x90
[  162.542668][ T7992]  invoke_syscall+0x98/0x2b8
[  162.542681][ T7992]  el0_svc_common+0x130/0x23c
[  162.542693][ T7992]  do_el0_svc+0x48/0x58
[  162.542706][ T7992]  el0_svc+0x54/0x168
[  162.542717][ T7992]  el0t_64_sync_handler+0x84/0x108
[  162.542727][ T7992]  el0t_64_sync+0x198/0x19c
[  162.639261][   T11] Quota error (device loop0): remove_tree: Can't read quota data block 1
[  162.641490][   T11] EXT4-fs error (device loop0): ext4_release_dquot:6950: comm kworker/u8:0: Failed to release dquot type 0
[  162.657820][ T7963] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  162.689485][ T7963] EXT4-fs error (device loop0): __ext4_get_inode_loc:4435: comm syz.0.294: Invalid inode table block 1 in block_group 0
[  162.759248][ T7963] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5838: Corrupt filesystem
[  162.767851][ T7963] EXT4-fs error (device loop0): ext4_quota_off:7194: inode #3: comm syz.0.294: mark_inode_dirty error
[  163.110537][ T8033] netlink: 24 bytes leftover after parsing attributes in process `syz.1.310'.
[  163.152113][ T8032] syz_tun: entered allmulticast mode
[  163.207346][ T8027] syz_tun: left allmulticast mode
[  163.284339][ T8042] trusted_key: syz.5.315 sent an empty control message without MSG_MORE.
[  163.402740][ T8052] sctp: [Deprecated]: syz.5.319 (pid 8052) Use of struct sctp_assoc_value in delayed_ack socket option.
[  163.402740][ T8052] Use struct sctp_sack_info instead
[  163.575281][ T8067] tipc: Started in network mode
[  163.576521][ T8067] tipc: Node identity 00000000000040000000000000000001, cluster identity 4711
[  163.578718][ T8067] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  163.826739][ T8087] netlink: 24 bytes leftover after parsing attributes in process `syz.0.329'.
[  164.012078][ T6448] Bluetooth: hci2: command 0x0406 tx timeout
[  164.013863][ T6448] Bluetooth: hci3: command 0x0406 tx timeout
[  164.015384][ T6448] Bluetooth: hci0: command 0x0406 tx timeout
[  164.016884][ T6448] Bluetooth: hci4: command 0x0406 tx timeout
[  174.989037][ T8074] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  175.000140][ T8074] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  175.205667][ T8123] siw: device registration error -23
[  175.258875][ T8126] netlink: 12 bytes leftover after parsing attributes in process `syz.3.338'.
[  175.289533][ T8130] syz_tun: entered allmulticast mode
[  175.294105][ T8130] netlink: 'syz.5.340': attribute type 39 has an invalid length.
[  175.383076][ T8130] syz_tun (unregistering): left allmulticast mode
[  175.423699][ T8137] netlink: 4 bytes leftover after parsing attributes in process `syz.0.344'.
[  175.440984][ T8137] bond_slave_0: entered promiscuous mode
[  175.442769][ T8137] bond_slave_1: entered promiscuous mode
[  175.444290][ T8137] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode
[  175.471310][ T8137] macvtap1: entered promiscuous mode
[  175.477600][ T8137] bond0: entered promiscuous mode
[  175.482576][ T8137] macvtap1: entered allmulticast mode
[  175.486934][ T8137] bond0: entered allmulticast mode
[  175.488322][ T8137] bond_slave_0: entered allmulticast mode
[  175.489677][ T8137] bond_slave_1: entered allmulticast mode
[  175.494735][ T8137] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode
[  175.510486][ T8137] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  175.559071][ T8145] bond0: left allmulticast mode
[  175.560441][ T8145] bond_slave_0: left allmulticast mode
[  175.563847][ T8145] bond_slave_1: left allmulticast mode
[  175.567029][ T8145] mac80211_hwsim hwsim8 wlan1: left allmulticast mode
[  175.570967][ T8145] bond0: left promiscuous mode
[  175.575948][ T8145] bond_slave_0: left promiscuous mode
[  175.577593][ T8145] bond_slave_1: left promiscuous mode
[  175.578981][ T8145] mac80211_hwsim hwsim8 wlan1: left promiscuous mode
[  175.790423][ T8155] netlink: 8 bytes leftover after parsing attributes in process `syz.0.349'.
[  175.791267][ T8158] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  175.885689][ T8162] netlink: 8 bytes leftover after parsing attributes in process `syz.0.350'.
[  175.897164][ T8164] netlink: 24 bytes leftover after parsing attributes in process `syz.3.351'.
[  176.148217][ T8171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  176.151549][ T8171] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  176.155168][ T6444] Bluetooth: hci0: unexpected event for opcode 0x0c26
[  176.214232][ T8173] xt_hashlimit: overflow, try lower: 1125899906842624/8
[  177.018955][ T8181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  177.045590][ T8181] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  177.067795][ T8186] netlink: 4 bytes leftover after parsing attributes in process `syz.1.358'.
[  177.906532][ T8199] netlink: 36 bytes leftover after parsing attributes in process `syz.3.360'.
[  180.052102][ T8234] netlink: 'syz.0.367': attribute type 1 has an invalid length.
[  180.090893][ T8234] 8021q: adding VLAN 0 to HW filter on device bond1
[  180.113769][ T8234] gretap1: entered promiscuous mode
[  180.117345][ T8234] bond1: (slave gretap1): making interface the new active one
[  180.119940][ T8234] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  180.136015][ T8234] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  180.216294][   T10] hid-multitouch 0005:0457:0009.0001: unknown main item tag 0x0
[  180.229408][   T10] hid-multitouch 0005:0457:0009.0001: unknown main item tag 0x0
[  180.265037][   T10] hid-multitouch 0005:0457:0009.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz0] on aa:aa:aa:aa:aa:aa
[  180.998538][ T8250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  181.000887][ T8250] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  181.026874][ T8235] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  181.053225][ T8255] netlink: 4 bytes leftover after parsing attributes in process `syz.5.374'.
[  181.602888][ T8262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  181.605223][ T8262] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  181.724070][ T8264] xt_CT: You must specify a L4 protocol and not use inversions on it
[  182.436250][ T8272] netlink: 36 bytes leftover after parsing attributes in process `syz.3.380'.
[  182.447960][ T8273] netlink: 36 bytes leftover after parsing attributes in process `syz.1.379'.
[  183.752157][ T8317] Invalid/unusable pipe
[  183.759347][ T8317] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  183.836745][ T8323] netlink: 12 bytes leftover after parsing attributes in process `syz.5.395'.
[  183.854411][ T8323] 8021q: adding VLAN 0 to HW filter on device bond1
[  187.448203][ T2367] ieee802154 phy0 wpan0: encryption failed: -22
[  187.449937][ T2367] ieee802154 phy1 wpan1: encryption failed: -22
[  187.906829][ T8367] netlink: 20 bytes leftover after parsing attributes in process `syz.0.405'.
[  189.424912][ T8374] ceph: No mds server is up or the cluster is laggy
[  189.518266][ T8386] netlink: 32 bytes leftover after parsing attributes in process `syz.5.412'.
[  189.597748][ T8389] xt_CT: You must specify a L4 protocol and not use inversions on it
[  189.710820][ T6434] libceph: connect (1)[c::]:6789 error -101
[  189.714646][ T6434] libceph: mon0 (1)[c::]:6789 connect error
[  191.279875][ T8417] netlink: 'syz.3.422': attribute type 1 has an invalid length.
[  191.324718][ T8417] 8021q: adding VLAN 0 to HW filter on device bond1
[  191.357110][ T8425] gretap1: entered promiscuous mode
[  191.360386][ T8425] bond1: (slave gretap1): making interface the new active one
[  191.368158][ T8425] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  191.401090][ T8428] netlink: 'syz.0.424': attribute type 39 has an invalid length.
[  191.521198][ T8438] xt_CT: You must specify a L4 protocol and not use inversions on it
[  191.808892][ T8458] netlink: 4 bytes leftover after parsing attributes in process `syz.1.427'.
[  193.576934][ T8476] netlink: 'syz.3.437': attribute type 1 has an invalid length.
[  204.212335][ T8476] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  204.326800][ T8489] xt_CT: You must specify a L4 protocol and not use inversions on it
[  207.609759][ T8548] xt_hashlimit: overflow, try lower: 1125899906842624/8
[  207.846311][ T8549] netlink: 8 bytes leftover after parsing attributes in process `syz.4.449'.
[  208.325765][ T8555] netlink: 'syz.4.451': attribute type 1 has an invalid length.
[  208.370675][ T8555] 8021q: adding VLAN 0 to HW filter on device bond1
[  208.373953][ T8562] netlink: 'syz.0.453': attribute type 39 has an invalid length.
[  208.550592][ T8563] gretap1: entered promiscuous mode
[  208.584232][ T8563] bond1: (slave gretap1): making interface the new active one
[  209.554346][ T8563] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  210.202610][ T8577] netlink: 8 bytes leftover after parsing attributes in process `syz.3.457'.
[  210.274949][ T8583] input: syz0 as /devices/virtual/input/input3
[  210.555267][ T8601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  210.558187][ T8601] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  210.563411][   T30] audit: type=1400 audit(210.540:4): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=8594 comm="syz.3.462" saddr=172.30.0.4 daddr=172.20.20.170 netif=wpan0
[  211.301463][ T8592] delete_channel: no stack
[  211.438776][ T8624] lo: entered allmulticast mode
[  211.524595][ T8629] syzkaller1: entered promiscuous mode
[  211.526195][ T8629] syzkaller1: entered allmulticast mode
[  211.626169][ T8642] netlink: 'syz.0.474': attribute type 1 has an invalid length.
[  211.646732][ T8642] 8021q: adding VLAN 0 to HW filter on device bond2
[  224.814985][ T8697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  224.818586][ T8697] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  227.209090][ T8730] netlink: 124 bytes leftover after parsing attributes in process `syz.1.494'.
[  243.010685][ T8804] xt_CT: You must specify a L4 protocol and not use inversions on it
[  243.799716][ T8824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  243.811032][ T8824] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  244.045130][ T8830] netlink: 8 bytes leftover after parsing attributes in process `syz.5.524'.
[  244.047455][ T8830] netlink: 100 bytes leftover after parsing attributes in process `syz.5.524'.
[  244.049772][ T8830] netlink: 8 bytes leftover after parsing attributes in process `syz.5.524'.
[  244.247556][ T8833] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  245.178862][ T8832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  245.182227][ T8832] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  245.726351][ T8850] xt_CT: You must specify a L4 protocol and not use inversions on it
[  248.616366][ T8892] xt_CT: You must specify a L4 protocol and not use inversions on it
[  248.843094][ T2367] ieee802154 phy0 wpan0: encryption failed: -22
[  248.848414][ T2367] ieee802154 phy1 wpan1: encryption failed: -22
[  250.662853][ T8925] xt_CT: You must specify a L4 protocol and not use inversions on it
[  251.916653][ T8965] xt_CT: You must specify a L4 protocol and not use inversions on it
[  252.085728][ T8962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  252.160042][ T8962] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  252.240276][ T8966] netlink: 4 bytes leftover after parsing attributes in process `syz.5.576'.
[  252.626236][ T8978] gretap1: entered promiscuous mode
[  252.722960][ T6444] Bluetooth: hci3: unexpected event for opcode 0x0411
[  252.995958][ T8999] xt_CT: You must specify a L4 protocol and not use inversions on it
[  253.204023][ T9010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  253.217085][ T9010] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  254.641403][ T9041] xt_CT: You must specify a L4 protocol and not use inversions on it
[  254.813114][ T9045] netlink: 40 bytes leftover after parsing attributes in process `syz.4.612'.
[  254.974536][ T9047] netlink: 'syz.4.613': attribute type 10 has an invalid length.
[  254.992647][ T9047] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  256.108190][ T6516] kernel write not supported for file /dsp1 (pid: 6516 comm: kworker/1:5)
[  256.428222][ T6452] Bluetooth: hci1: command 0x0405 tx timeout
[  256.474252][ T9089] xt_CT: You must specify a L4 protocol and not use inversions on it
[  257.068180][ T9103] netlink: 96 bytes leftover after parsing attributes in process `syz.5.631'.
[  257.110390][ T9105] netlink: 'syz.5.632': attribute type 1 has an invalid length.
[  257.130741][ T9105] 8021q: adding VLAN 0 to HW filter on device bond2
[  257.140848][ T9105] gretap1: entered promiscuous mode
[  257.146299][ T9105] bond2: (slave gretap1): making interface the new active one
[  257.149166][ T9105] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  257.157104][ T9105] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  258.005521][ T9138] xt_CT: You must specify a L4 protocol and not use inversions on it
[  258.428710][ T9158] netlink: 4 bytes leftover after parsing attributes in process `syz.1.653'.
[  258.720975][ T9178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  258.732072][ T9178] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  259.826940][ T9203] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  260.485995][ T9201] netlink: 4 bytes leftover after parsing attributes in process `syz.5.665'.
[  260.748306][ T9224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  260.750949][ T9224] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  263.288915][ T9249] netlink: 4 bytes leftover after parsing attributes in process `syz.5.680'.
[  263.341797][ T9255] tipc: Started in network mode
[  263.347459][ T9255] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711
[  263.353341][ T9255] tipc: Enabled bearer <udp:syz0>, priority 10
[  264.663678][    T8] tipc: Node number set to 4269801491
[  266.364861][ T9330] netlink: 16 bytes leftover after parsing attributes in process `syz.0.709'.
[  271.342784][ T6444] Bluetooth: hci0: unexpected event for opcode 0x0411
[  272.647340][ T9468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  272.649691][ T9468] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  273.461699][ T6452] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  273.465702][ T6452] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  273.469668][ T6452] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  273.534593][ T6452] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  273.537659][ T6452] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  273.539932][ T6452] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  274.628815][ T9474] chnl_net:caif_netlink_parms(): no params data found
[  274.756122][ T9474] bridge0: port 1(bridge_slave_0) entered blocking state
[  274.765218][ T9474] bridge0: port 1(bridge_slave_0) entered disabled state
[  274.767239][ T9474] bridge_slave_0: entered allmulticast mode
[  274.769356][ T9474] bridge_slave_0: entered promiscuous mode
[  274.799212][ T9474] bridge0: port 2(bridge_slave_1) entered blocking state
[  274.801030][ T9474] bridge0: port 2(bridge_slave_1) entered disabled state
[  274.812299][ T9474] bridge_slave_1: entered allmulticast mode
[  274.814590][ T9474] bridge_slave_1: entered promiscuous mode
[  274.899401][ T9474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  274.917791][ T9474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  274.985598][ T9474] team0: Port device team_slave_0 added
[  274.993883][ T9474] team0: Port device team_slave_1 added
[  275.042836][ T9474] batman_adv: batadv0: Adding interface: batadv_slave_0
[  275.044679][ T9474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  275.064802][ T9474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  275.075701][ T9474] batman_adv: batadv0: Adding interface: batadv_slave_1
[  275.077802][ T9474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  275.108593][ T9474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  275.198785][ T9474] hsr_slave_0: entered promiscuous mode
[  275.200696][ T9474] hsr_slave_1: entered promiscuous mode
[  275.663569][ T6444] Bluetooth: hci5: command tx timeout
[  276.793140][ T9474] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  276.814207][ T9474] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  276.859940][ T9474] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  276.902223][ T9474] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  277.050771][ T9474] 8021q: adding VLAN 0 to HW filter on device bond0
[  277.080262][ T9474] 8021q: adding VLAN 0 to HW filter on device team0
[  277.090095][ T8193] bridge0: port 1(bridge_slave_0) entered blocking state
[  277.092829][ T8193] bridge0: port 1(bridge_slave_0) entered forwarding state
[  277.104581][ T8193] bridge0: port 2(bridge_slave_1) entered blocking state
[  277.106473][ T8193] bridge0: port 2(bridge_slave_1) entered forwarding state
[  277.178201][ T9474] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  277.336427][ T9474] 8021q: adding VLAN 0 to HW filter on device batadv0
[  277.692046][ T6444] Bluetooth: hci5: command tx timeout
[  278.322595][ T9474] veth0_vlan: entered promiscuous mode
[  278.346396][ T9474] veth1_vlan: entered promiscuous mode
[  278.407224][ T9474] veth0_macvtap: entered promiscuous mode
[  278.421216][ T9474] veth1_macvtap: entered promiscuous mode
[  278.539237][ T9474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  278.551950][ T9474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  278.554851][ T9474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  278.557442][ T9474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  278.564663][ T9474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  278.567595][ T9474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  278.574044][ T9474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  278.580283][ T9474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  278.587256][ T9474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  278.589831][ T9474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  278.593706][ T9474] batman_adv: batadv0: Interface activated: batadv_slave_0
[  278.638254][ T9474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  278.640856][ T9474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  278.649203][ T9474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  278.657125][ T9474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  278.659651][ T9474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  278.668666][ T9474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  278.671122][ T9474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  278.675223][ T9474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  278.677553][ T9474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  278.680549][ T9474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  278.684777][ T9474] batman_adv: batadv0: Interface activated: batadv_slave_1
[  278.702603][ T9474] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  278.705202][ T9474] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  278.707264][ T9474] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  278.709398][ T9474] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  278.859822][ T6444] Bluetooth: hci0: unexpected event for opcode 0x0411
[  278.899918][   T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  278.906428][   T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  278.917808][   T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  278.920184][   T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  279.249241][ T9653] netlink: 'syz.6.764': attribute type 21 has an invalid length.
[  279.285026][ T9653] netlink: 'syz.6.764': attribute type 20 has an invalid length.
[  279.286887][ T9653] IPv6: NLM_F_CREATE should be specified when creating new route
[  279.771943][ T6444] Bluetooth: hci5: command tx timeout
[  280.431731][ T9674] netlink: 36 bytes leftover after parsing attributes in process `syz.1.839'.
[  281.852459][ T6444] Bluetooth: hci5: command tx timeout
[  281.872375][ T9716] netlink: 36 bytes leftover after parsing attributes in process `syz.5.855'.
[  283.409271][ T9746] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  283.952038][ T6444] Bluetooth: hci1: unexpected event for opcode 0x0411
[  285.897988][ T9790] netlink: 4 bytes leftover after parsing attributes in process `syz.6.877'.
[  297.331636][ T6452] Bluetooth: hci1: unexpected event for opcode 0x0411
[  297.686070][ T9818] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  300.829701][ T9865] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  310.259113][ T2367] ieee802154 phy0 wpan0: encryption failed: -22
[  310.260717][ T2367] ieee802154 phy1 wpan1: encryption failed: -22
[  311.877366][ T9849] tipc: Started in network mode
[  311.878573][ T9849] tipc: Node identity 4, cluster identity 4711
[  311.880047][ T9849] tipc: Node number set to 4
[  311.881440][ T9849] tipc: Cannot configure node identity twice
[  311.973471][ T9877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  311.975730][ T9877] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  312.197777][   T30] audit: type=1326 audit(312.180:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9891 comm="syz.0.912" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad95ad28 code=0x7ffc0000
[  312.221537][   T30] audit: type=1326 audit(312.180:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9891 comm="syz.0.912" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad95ad28 code=0x7ffc0000
[  312.244122][   T30] audit: type=1326 audit(312.190:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9891 comm="syz.0.912" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=5 compat=0 ip=0xffffad95ad28 code=0x7ffc0000
[  312.269043][   T30] audit: type=1326 audit(312.190:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9891 comm="syz.0.912" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad95ad28 code=0x7ffc0000
[  312.410270][   T30] audit: type=1326 audit(312.190:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9891 comm="syz.0.912" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad95ad28 code=0x7ffc0000
[  312.416144][   T30] audit: type=1326 audit(312.200:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9891 comm="syz.0.912" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=286 compat=0 ip=0xffffad95ad28 code=0x7ffc0000
[  312.421416][   T30] audit: type=1326 audit(312.200:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9891 comm="syz.0.912" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad95ad28 code=0x7ffc0000
[  315.262615][ T9939] netlink: 4 bytes leftover after parsing attributes in process `syz.6.926'.
[  327.368070][ T9939] team0 (unregistering): Port device team_slave_0 removed
[  327.374265][ T9939] team0 (unregistering): Port device team_slave_1 removed
[  327.446389][ T9941] syz_tun: entered allmulticast mode
[  328.851380][ T9997] netlink: 'syz.3.942': attribute type 1 has an invalid length.
[  342.652980][T10061] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  346.037177][ T6452] Bluetooth: hci4: unexpected event for opcode 0x0c2d
[  346.208359][T10120] lo: entered allmulticast mode
[  346.210484][T10120] lo: left allmulticast mode
[  347.216079][T10140] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  350.105968][ T6452] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  350.108281][ T6452] Bluetooth: hci4: Injecting HCI hardware error event
[  350.112320][ T6452] Bluetooth: hci4: hardware error 0x00
[  351.143204][   T30] audit: type=1326 audit(351.120:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10175 comm="syz.0.984" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffad95ad28 code=0x0
[  352.252438][ T6452] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  353.063005][ T6452] Bluetooth: hci0: unexpected event 0x07 length: 4 < 255
[  355.766910][T10229] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  357.531685][   T30] audit: type=1326 audit(357.510:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10239 comm="syz.6.1001" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8675ad28 code=0x0
[  358.522677][   T30] audit: type=1326 audit(358.490:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10245 comm="syz.5.1003" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbcb5ad28 code=0x0
[  358.678175][ T6452] Bluetooth: hci0: unexpected event for opcode 0x0411
[  359.367689][T10286] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  360.666124][ T6452] Bluetooth: hci1: unexpected event for opcode 0x0411
[  362.819207][   T30] audit: type=1326 audit(362.160:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10298 comm="syz.6.1016" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8675ad28 code=0x0
[  362.824298][   T30] audit: type=1326 audit(362.320:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10307 comm="syz.1.1020" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8555ad28 code=0x0
[  363.040229][T10332] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1022'.
[  363.042678][T10332] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1022'.
[  363.044911][T10332] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1022'.
[  363.915352][T10334] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  367.002681][T10379] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  367.459206][   T30] audit: type=1326 audit(367.350:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10367 comm="syz.6.1035" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8675ad28 code=0x0
[  367.655635][T10388] netlink: 'syz.0.1042': attribute type 11 has an invalid length.
[  367.774805][ T6452] Bluetooth: hci1: unexpected event for opcode 0x0411
[  369.205495][T10431] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  369.209924][ T6452] Bluetooth: hci2: unexpected event for opcode 0x0c2d
[  370.516762][T10445] netlink: 'syz.6.1065': attribute type 1 has an invalid length.
[  370.573616][T10445] 8021q: adding VLAN 0 to HW filter on device bond1
[  370.590130][T10452] gretap1: entered promiscuous mode
[  370.595084][T10452] bond1: (slave gretap1): making interface the new active one
[  370.597930][T10452] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  370.618981][T10445] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  371.692911][ T2367] ieee802154 phy0 wpan0: encryption failed: -22
[  371.694543][ T2367] ieee802154 phy1 wpan1: encryption failed: -22
[  371.806822][T10474] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  373.059283][T10489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1076'.
[  373.114064][T10477] netlink: 'syz.3.1075': attribute type 4 has an invalid length.
[  373.255582][ T6452] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  373.257909][ T6452] Bluetooth: hci2: Injecting HCI hardware error event
[  373.262621][ T6452] Bluetooth: hci2: hardware error 0x00
[  374.217582][   T30] audit: type=1326 audit(374.200:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10508 comm="syz.3.1084" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9915ad28 code=0x0
[  375.542037][ T6452] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  375.853428][ T6452] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0
[  375.856514][ T6452] Bluetooth: hci5: Injecting HCI hardware error event
[  375.868394][ T6444] Bluetooth: hci5: hardware error 0x00
[  378.092137][ T6444] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  379.472745][T10538] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1093'.
[  386.417845][ T6444] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  386.422988][ T6444] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  386.425855][ T6444] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  386.429152][ T6444] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  386.431466][ T6444] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  386.433701][ T6444] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  387.437794][ T6452] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  387.447881][ T6452] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  387.450816][ T6452] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  387.454253][ T6452] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  387.457573][ T6452] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  387.460489][ T6452] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  387.525307][ T6452] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  387.529754][ T6452] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  387.533795][ T6452] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  387.541082][ T6452] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  387.543401][ T6452] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[  387.545493][ T6452] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  387.749905][T10538] bond_slave_0: entered promiscuous mode
[  387.751389][T10538] bond_slave_1: entered promiscuous mode
[  387.752933][T10538] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  387.759900][T10538] macvtap1: entered promiscuous mode
[  387.761281][T10538] bond0: entered promiscuous mode
[  387.770236][T10538] macvtap1: entered allmulticast mode
[  387.771620][T10538] bond0: entered allmulticast mode
[  387.779000][T10538] bond_slave_0: entered allmulticast mode
[  387.780586][T10538] bond_slave_1: entered allmulticast mode
[  387.792009][T10538] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  387.794451][T10538] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  387.837611][T10539] bond0: left allmulticast mode
[  387.838882][T10539] bond_slave_0: left allmulticast mode
[  387.842573][T10539] bond_slave_1: left allmulticast mode
[  387.844194][T10539] netdevsim netdevsim3 netdevsim0: left allmulticast mode
[  387.846023][T10539] bond0: left promiscuous mode
[  387.847526][T10539] bond_slave_0: left promiscuous mode
[  387.848966][T10539] bond_slave_1: left promiscuous mode
[  387.850277][T10539] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[  388.492009][ T6452] Bluetooth: hci6: command tx timeout
[  389.435006][ T8193] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  389.512830][T10589] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  389.568296][ T6452] Bluetooth: hci7: command tx timeout
[  389.611949][ T6452] Bluetooth: hci8: command tx timeout
[  390.085077][ T8193] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  390.223120][ T8193] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  390.324086][T10595] netlink: 'syz.3.1105': attribute type 1 has an invalid length.
[  390.328478][T10595] netlink: 'syz.3.1105': attribute type 1 has an invalid length.
[  390.330323][T10595] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1105'.
[  390.387816][ T8193] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  390.574981][ T6452] Bluetooth: hci6: command tx timeout
[  390.690136][T10548] chnl_net:caif_netlink_parms(): no params data found
[  390.854279][   T30] audit: type=1326 audit(390.820:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10599 comm="syz.0.1106" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffad95ad28 code=0x0
[  391.610126][ T8193] bridge_slave_1: left allmulticast mode
[  391.611562][ T8193] bridge_slave_1: left promiscuous mode
[  391.617968][ T6452] Bluetooth: hci7: command tx timeout
[  391.621620][ T8193] bridge0: port 2(bridge_slave_1) entered disabled state
[  391.648545][ T8193] bridge_slave_0: left allmulticast mode
[  391.650086][ T8193] bridge_slave_0: left promiscuous mode
[  391.651543][ T8193] bridge0: port 1(bridge_slave_0) entered disabled state
[  391.676063][ T6452] Bluetooth: hci0: unexpected event for opcode 0x0c2d
[  391.693485][ T6452] Bluetooth: hci8: command tx timeout
[  392.141646][T10626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  392.146824][T10626] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  392.273421][ T8193] bond2 (unregistering): (slave gretap1): Releasing active interface
[  392.651981][ T6452] Bluetooth: hci6: command tx timeout
[  393.346724][ T8193] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  393.384634][ T8193] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  393.424311][ T8193] bond0 (unregistering): Released all slaves
[  393.691963][ T6452] Bluetooth: hci7: command tx timeout
[  393.772935][ T6452] Bluetooth: hci8: command tx timeout
[  394.084795][ T8193] bond1 (unregistering): Released all slaves
[  394.731971][ T6452] Bluetooth: hci6: command tx timeout
[  394.763244][ T8193] bond2 (unregistering): Released all slaves
[  394.771678][T10541] chnl_net:caif_netlink_parms(): no params data found
[  394.840485][ T8193] tipc: Disabling bearer <udp:syz0>
[  394.850352][ T8193] tipc: Left network mode
[  394.868247][T10548] bridge0: port 1(bridge_slave_0) entered blocking state
[  394.892135][T10548] bridge0: port 1(bridge_slave_0) entered disabled state
[  394.894141][T10548] bridge_slave_0: entered allmulticast mode
[  394.896179][T10548] bridge_slave_0: entered promiscuous mode
[  394.914020][T10552] chnl_net:caif_netlink_parms(): no params data found
[  394.917918][T10548] bridge0: port 2(bridge_slave_1) entered blocking state
[  394.919712][T10548] bridge0: port 2(bridge_slave_1) entered disabled state
[  394.921550][T10548] bridge_slave_1: entered allmulticast mode
[  394.943108][T10548] bridge_slave_1: entered promiscuous mode
[  395.149291][T10548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  395.362013][T10548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  395.719995][ T6452] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  395.722603][ T6452] Bluetooth: hci0: Injecting HCI hardware error event
[  395.728889][ T6452] Bluetooth: hci0: hardware error 0x00
[  395.772047][ T6444] Bluetooth: hci7: command tx timeout
[  395.852906][ T6444] Bluetooth: hci8: command tx timeout
[  397.852134][ T6452] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  404.972102][   T31] INFO: task kworker/1:5:6516 blocked for more than 143 seconds.
[  404.974009][   T31]       Not tainted 6.14.0-rc5-syzkaller-g14d05f12084d #0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  404.977446][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  404.979689][   T31] task:kworker/1:5     state:D stack:0     pid:6516  tgid:6516  ppid:2      task_flags:0x4208060 flags:0x00000008
[  405.000318][   T31] Workqueue: events p9_write_work
[  405.001633][   T31] Call trace:
[  405.021120][   T31]  __switch_to+0x414/0x788 (T)
[  405.022385][   T31]  __schedule+0x1360/0x257c
[  405.023440][   T31]  schedule+0xbc/0x238
[  405.024456][   T31]  schedule_preempt_disabled+0x18/0x2c
[  405.025782][   T31]  __mutex_lock_common+0xd30/0x24b8
[  405.026944][   T31]  mutex_lock_nested+0x2c/0x38
[  405.028004][   T31]  pipe_write+0x184/0x1880
[  405.029008][   T31]  __kernel_write_iter+0x340/0x7a0
[  405.030142][   T31]  kernel_write+0x1cc/0x2d0
[  405.031379][   T31]  p9_write_work+0x45c/0xc1c
[  405.036786][   T31]  process_one_work+0x810/0x1638
[  405.038102][   T31]  worker_thread+0x97c/0xeec
[  405.039200][   T31]  kthread+0x65c/0x7b0
[  405.040198][   T31]  ret_from_fork+0x10/0x20
[  405.041279][   T31] 
[  405.041279][   T31] Showing all locks held in the system:
[  405.051460][   T31] 1 lock held by khungtaskd/31:
[  405.052826][   T31]  #0: ffff80008fda22a0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire+0xc/0x44
[  405.055189][   T31] 3 locks held by kworker/u8:3/44:
[  405.056418][   T31]  #0: ffff0000c32ea948 ((wq_completion)cfg80211){+.+.}-{0:0}, at: process_one_work+0x674/0x1638
[  405.058765][   T31]  #1: ffff8000993b7ba0 ((work_completion)(&(&rdev->dfs_update_channels_wk)->work)){+.+.}-{0:0}, at: process_one_work+0x708/0x1638
[  405.072038][   T31]  #2: ffff800092b71f28 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c
[  405.074256][   T31] 3 locks held by kworker/u8:5/528:
[  405.075488][   T31]  #0: ffff0000d2e1b948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x674/0x1638
[  405.077994][   T31]  #1: ffff80009cb17ba0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x708/0x1638
[  405.080787][   T31]  #2: ffff800092b71f28 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c
[  405.083182][   T31] 1 lock held by dhcpcd/6114:
[  405.084374][   T31]  #0: ffff800092b71f28 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c
[  405.086464][   T31] 2 locks held by getty/6207:
[  405.087460][   T31]  #0: ffff0000d317f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c
[  405.089528][   T31]  #1: ffff80009bcae2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41c/0x1228
[  405.091782][   T31] 3 locks held by kworker/1:5/6516:
[  405.093340][   T31]  #0: ffff0000c0028d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x674/0x1638
[  405.096051][   T31]  #1: ffff8000b2d67ba0 ((work_completion)(&m->wq)){+.+.}-{0:0}, at: process_one_work+0x708/0x1638
[  405.098348][   T31]  #2: ffff0000d52c8c68 (&pipe->mutex){+.+.}-{4:4}, at: pipe_write+0x184/0x1880
[  405.100459][   T31] 3 locks held by kworker/u8:12/6549:
[  405.101917][   T31]  #0: ffff0000c0031148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x674/0x1638
[  405.104751][   T31]  #1: ffff8000a3fa7ba0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x708/0x1638
[  405.107328][   T31]  #2: ffff800092b71f28 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c
[  405.109270][   T31] 4 locks held by kworker/u8:13/8193:
[  405.110639][   T31]  #0: ffff0000c1899948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x674/0x1638
[  405.113405][   T31]  #1: ffff80009f5a7ba0 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x708/0x1638
[  405.115685][   T31]  #2: ffff800092b65790 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x148/0xa48
[  405.117766][   T31]  #3: ffff800092b71f28 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c
[  405.119784][   T31] 2 locks held by syz.4.646/9146:
[  405.120980][   T31]  #0: ffff0000d52c8c68 (&pipe->mutex){+.+.}-{4:4}, at: pipe_write+0x184/0x1880
[  405.123457][   T31]  #1: ffff0000f3c902e8 (mapping.invalidate_lock#4){.+.+}-{4:4}, at: page_cache_ra_unbounded+0x100/0x758
[  405.126118][   T31] 2 locks held by syz-executor/10541:
[  405.127282][   T31]  #0: ffff800091aaa560 (&ops->srcu#2){.+.+}-{0:0}, at: srcu_lock_acquire+0x18/0x54
[  405.129641][   T31]  #1: ffff800092b71f28 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xaf8/0x1844
[  405.132262][   T31] 2 locks held by syz-executor/10548:
[  405.133549][   T31]  #0: ffff800091aaa560 (&ops->srcu#2){.+.+}-{0:0}, at: srcu_lock_acquire+0x18/0x54
[  405.135849][   T31]  #1: ffff800092b71f28 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xaf8/0x1844
[  405.138216][   T31] 2 locks held by syz-executor/10552:
[  405.139614][   T31]  #0: ffff80008fbc1630 (&ops->srcu#2){.+.+}-{0:0}, at: srcu_lock_acquire+0x18/0x54
[  405.142093][   T31]  #1: ffff800092b71f28 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xaf8/0x1844
[  405.144140][   T31] 1 lock held by syz.3.1113/10634:
[  405.145226][   T31]  #0: ffff800092b71f28 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c
[  405.147279][   T31] 1 lock held by syz.0.1115/10660:
[  405.148473][   T31]  #0: ffff800092b71f28 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x5e8/0xa9c
[  405.150918][   T31] 
[  405.151423][   T31] =============================================
[  405.151423][   T31] 
[  405.154624][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  405.156368][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-rc5-syzkaller-g14d05f12084d #0
[  405.158940][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  405.161292][   T31] Call trace:
[  405.162015][   T31]  show_stack+0x2c/0x3c (C)
[  405.163048][   T31]  dump_stack_lvl+0xe4/0x150
[  405.164146][   T31]  dump_stack+0x1c/0x28
[  405.165178][   T31]  panic+0x300/0x8a0
[  405.166160][   T31]  hung_task_panic+0x0/0x2c
[  405.167314][   T31]  kthread+0x65c/0x7b0
[  405.168376][   T31]  ret_from_fork+0x10/0x20
[  405.169536][   T31] SMP: stopping secondary CPUs
[  405.170675][   T31] Kernel Offset: disabled
[  405.171616][   T31] CPU features: 0x200,00002070,00800250,82017203
[  405.173082][   T31] Memory Limit: none
[  405.776546][   T31] Rebooting in 86400 seconds..