last executing test programs:

3m6.663613982s ago: executing program 4 (id=580):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001d40)="bf", 0x1}], 0x1}}], 0x2, 0x2095)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000b00)=""/4096, 0x1000, 0x1, 0x0}, &(0x7f0000000180)=0x40)

3m5.739042727s ago: executing program 4 (id=586):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040))
chdir(&(0x7f0000000080)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x2c)
mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x10, 0x0)

3m5.699161329s ago: executing program 4 (id=587):
r0 = syz_usbip_server_init(0x5)
write$usbip_server(r0, &(0x7f00000001c0)=@ret_unlink={{0x4, 0x1, 0x0, 0x0, 0x6}, {0xce}}, 0x30)

3m4.83338785s ago: executing program 4 (id=605):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
getsockname$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f00000000c0)=0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48)

3m3.924519403s ago: executing program 4 (id=618):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0])
mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040))
chdir(&(0x7f0000000080)='./file0\x00')
setpgid(r0, r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a1)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='mqueue\x00', 0x200011, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x2c)

3m3.880287136s ago: executing program 4 (id=619):
socket$nl_xfrm(0x10, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0xfffc, @multicast2}}}, 0x88)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}}, 0x0)

2m52.070745636s ago: executing program 3 (id=717):
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=@deltclass={0x24, 0x29, 0x800, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x2}, {0xfff2, 0x5}, {0xfff8, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x805}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}]}}]}]}]}}]}, 0x50}}, 0x1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

2m52.053603587s ago: executing program 3 (id=718):
socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000080), 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[], 0x48}}, 0x80)
sendmsg$can_bcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="0500000000e0ffffffffffff", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000008001"], 0x48}}, 0x40000)
sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r0], 0x48}}, 0x0)

2m51.958098402s ago: executing program 3 (id=720):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0)
write$tun(r0, &(0x7f0000000380)={@val={0x8, 0x800}, @val={0x2, 0x3, 0x9, 0x68, 0x8000, 0x8}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x7e, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010100, @multicast1}, {0x4e22, 0x4e22, 0x6a, 0x0, @opaque="cf137d46a753ef8928a0b32350216890bf2f2a43e449a6815686f6acfd38d0f7314da2813189092f4738bb7756b35daf2656e53110dc61610877449646ebe97e7e27b7e5f45ab28ea53624b194bf433a854dc4c5bd88c4f23ff722009bbc2afbdec7"}}}, 0x8c)

2m51.898050506s ago: executing program 3 (id=721):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmmsg$inet(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0x1, 0x0)

2m51.82958515s ago: executing program 3 (id=724):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0])
mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040))
chdir(&(0x7f0000000080)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a1)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='mqueue\x00', 0x200011, 0x0)
setpgid(0x0, r0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x2c)

2m51.816600991s ago: executing program 0 (id=726):
openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xac5)
syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=<r0=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_setup(0x8, &(0x7f0000000600)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}])

2m51.780997033s ago: executing program 3 (id=727):
r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xcf)
ioctl$SIOCAX25ADDFWD(r0, 0x89ea, 0x0)

2m51.718660017s ago: executing program 0 (id=728):
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=@deltclass={0x24, 0x29, 0x800, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x2}, {0xfff2, 0x5}, {0xfff8, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x805}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x10, 0x2, [@TCA_CGROUP_EMATCHES={0xc, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x40}}, 0x1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

2m51.691113458s ago: executing program 0 (id=730):
socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000080), 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[], 0x48}}, 0x80)
sendmsg$can_bcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="0500000000e0ffffffffffff", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000008001"], 0x48}}, 0x40000)
sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r0], 0x48}}, 0x0)

2m51.577686985s ago: executing program 0 (id=731):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48)

2m50.698558207s ago: executing program 0 (id=738):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0])
mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040))
chdir(&(0x7f0000000080)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a1)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='mqueue\x00', 0x200011, 0x0)
setpgid(0x0, r0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x2c)

2m50.675768398s ago: executing program 0 (id=739):
openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(0x0, 0x0)
io_setup(0x8, &(0x7f0000000600)=<r0=>0x0)
io_submit(r0, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, 0xffffffffffffffff, 0x0}])

2m48.834453216s ago: executing program 32 (id=619):
socket$nl_xfrm(0x10, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0xfffc, @multicast2}}}, 0x88)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}}, 0x0)

2m36.713220304s ago: executing program 33 (id=727):
r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xcf)
ioctl$SIOCAX25ADDFWD(r0, 0x89ea, 0x0)

2m35.652252597s ago: executing program 34 (id=739):
openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(0x0, 0x0)
io_setup(0x8, &(0x7f0000000600)=<r0=>0x0)
io_submit(r0, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, 0xffffffffffffffff, 0x0}])

1.758464437s ago: executing program 6 (id=2440):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210040, &(0x7f00000004c0), 0xfc, 0x59d, &(0x7f00000022c0)="$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")
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32)
getdents64(r0, &(0x7f0000001280)=""/4089, 0xff9)

1.622299766s ago: executing program 6 (id=2447):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x64, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x6, 0x8}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xfffffffffffffd9e, 0x1, 0x0, 0x0, {{0x8, 0x9, 0x40}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x2408c0d4)

1.446671616s ago: executing program 5 (id=2454):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf47, 0x4cc, 0xffff, 0xff, 0xff, "8003e3ffff072000"})
write$binfmt_aout(r0, &(0x7f00000006c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, 0x0)
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xff)

1.411284748s ago: executing program 6 (id=2456):
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74)
sendmmsg$unix(r0, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0xfdef}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0xfdef}], 0x1}}], 0x3, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x5, 0x5, 0xffffffff, 0xe661, 0x8004, 0x7, 0x5, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x3, 0x17, 0x1, 0x407, 0x5, 0x9, 0x8f, 0x4006, 0x6, 0x0, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x5, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x4005a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x80000004, 0xb, 0x4, 0x9, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x9, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x2, 0x408, 0x8004, 0x5, 0x9, 0x100, 0x8d2, 0x9, 0x0, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1ff, 0x80, 0x3, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0xa, 0xac8, 0xbf, 0x2, 0x4, 0x7ff, 0x12b, 0x4, 0x1, 0xfffffffa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb30, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0xb, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x1, 0x16, 0xffffffff, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x9, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x20000d7, 0x200, 0xffff3441, 0xfff]}, 0x45c)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)

819.665482ms ago: executing program 2 (id=2475):
socket$kcm(0xa, 0x3, 0x87)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x1)
fchdir(r2)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0)
getdents64(r3, &(0x7f0000000040)=""/53, 0x2457a0be381e3a04)
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120011000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef)

771.661355ms ago: executing program 7 (id=2476):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002500)=@newtaction={0x48, 0x1e, 0x109, 0x100, 0x40000, {}, [{0x34, 0x1, [@m_police={0x30, 0xd, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x48}, 0x1, 0x2b1e}, 0x0)

727.830488ms ago: executing program 7 (id=2477):
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff2424852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff0e0b5a293e3877adc1660edbc9a0307a25720a70e419dc44febf7ddc73fd4a5a0b6c28667f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"})
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e000000000000000000140000001100"], 0x80}}, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000001080)=ANY=[@ANYBLOB="c92752ede134aaaaaaaaaaaa81004704080045"], 0x0)

663.435292ms ago: executing program 2 (id=2479):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
fchdir(r0)
newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0)

630.934734ms ago: executing program 2 (id=2480):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_MSG_GETRULE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x20, 0x7, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008080}, 0x48000)

617.115404ms ago: executing program 7 (id=2481):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40200000005000061114c0000000000850000001c0000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x5, 0xc3, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000001a0001002cbd7000fbdbdf251c1480000000fd000001000008000100"], 0x30}}, 0x0)

580.327786ms ago: executing program 2 (id=2483):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, 0x0, 0x2408c0d4)

548.613489ms ago: executing program 5 (id=2484):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0)
sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4040811}, 0x20046840)

547.238859ms ago: executing program 7 (id=2485):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x579, &(0x7f0000000a40)="$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")
setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f00000002c0), 0x0, 0x1)
lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f0000000000)=ANY=[], 0x361, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000000)=ANY=[], 0xfe37, 0x0)

502.464111ms ago: executing program 6 (id=2486):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000044, &(0x7f0000000240)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@nodioread_nolock}, {@bh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@nouid32}, {@nobh}, {@user_xattr}, {@nouid32}, {@dioread_nolock}]}, 0x1, 0x55e, &(0x7f0000001bc0)="$eJzs3d9rW+UbAPDnpM1+f7/rYAwVkcIunMyla+uPCV7MS9HhQO9naM/KaLqMJh1rHbhduBtvZAgiDsR7vfdKhv+Af8VAB0NG0QtvKic9abs1adIuWzrz+cDZ3jfnJO95cs7z9n1zTkgAA2s0+6cQ8WJEfJVEHI6IJF83HPnK0dXtlh9en8qWJFZWPv4zaWyX1Zuv1XzewbzyQkT8+kXEycLmdmuLS7PlSiWdz+tj9bkrY7XFpVOX5soz6Ux6eWJy8sybkxPvvP1Wz2J97fzf33509/0zXx5f/uan+0duJ3E2DuXrNsbxBG5srIzGaP6eFOPsYxuOr/7XizZ3haTfO8CODOV5XoysDzgcQ3nWA/99n0fECjCgEvkPA6o5DmjO7Xs0D35uPHhvdQK0Of7h1c9GYl9jbnRgOXlkZpTNd0d60H7Wxs9/3LmdLdG7zyEAOrpxMyJODw9v7v+SvP/budNdbPN4G/o/eHbuZuOf11uNfwpr459oMf452CJ3d6Jz/hfu96CZtrLx37stx79rF61GhvLa/xpjvmJy8VIlzfq2/0fEiSjuzerjW7RxZvneSrt1G8d/2ZK13xwL5vtxf3jvo8+ZLtfLTxLzRg9uRrzUcvybrB3/pMXxz96P8122cSy980q7dZ3jf7pWfoh4teXxX7+ilWx9fXKscT6MNc+Kzf66dey3du33O/7s+B/YOv6RZOP12tr22/h+3z9pu3WPxB/dn/97kk8a5T35Y9fK9fr8eMSe5MPNj0+sP7dZb26fxX/i+Nb93/r5/8va6+yPiE+7jP/W0R9f3tdN/H06/tPbOv7bL9z74LPv2rXfXf/3RqN0In+km/6vw34VY8dnMwAAAAAAAOxehYg4FEmhtFYuFEql1fs7jsaBQqVaq5+8WF24PB2N78qORLHQvNJ9eMP9EOP5/bDN+sRj9cmIOBIRXw/tb9RLU9XKdL+DBwAAAAAAAAAAAAAAAAAAgF3iYJvv/2d+H+r33gFPnZ/8hsHVMf978UtPwK7k7z8MLvkPg0v+w+CS/zC45D8MLvkPg0v+w+CS/wAAAAAAAAAAAAAAAAAAAAAAAAAAANBT58+dy5aV5YfXp7L69NXFhdnq1VPTaW22NLcwVZqqzl8pzVSrM5W0NFWd6/R6lWr1yvhELFwbq6e1+lhtcenCXHXhcv3CpbnyTHohLT6TqAAAAAAAAAAAAAAAAAAAAOD5Ultcmi1XKum8gsKOCsO7YzcUelzod88EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOv+DQAA//8Kozfs")
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="09000000080000000080000001"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, <r1=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc)

449.982934ms ago: executing program 5 (id=2488):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@deltaction={0x24, 0x31, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffd}}]}]}, 0x24}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000240), 0x3af4701e)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)

415.055446ms ago: executing program 6 (id=2489):
socket$kcm(0xa, 0x3, 0x87)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x1)
fchdir(r2)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0)
getdents64(r3, &(0x7f0000000040)=""/53, 0x2457a0be381e3a04)
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120011000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef)

393.390127ms ago: executing program 7 (id=2491):
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff2424852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff0e0b5a293e3877adc1660edbc9a0307a25720a70e419dc44febf7ddc73fd4a5a0b6c28667f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"})
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e000000000000000000140000001100"], 0x80}}, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000001080)=ANY=[@ANYBLOB="c92752ede134aaaaaaaaaaaa81004704080045"], 0x0)

377.642398ms ago: executing program 2 (id=2492):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1102})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
close(r0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000580)="8902ef2878dad9c4a40300c988ca", 0xe}, {&(0x7f00000004c0)="92200a70e2979e67c607f6325c9b5ac5d1a00634e9eb37e0ff", 0x19}], 0x2)

344.07434ms ago: executing program 1 (id=2493):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

292.055163ms ago: executing program 2 (id=2494):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf47, 0x4cc, 0xffff, 0xff, 0xff, "8003e3ffff072000"})
write$binfmt_aout(r0, &(0x7f00000006c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, 0x0)
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xff)

290.076734ms ago: executing program 1 (id=2495):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_MSG_GETRULE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x20, 0x7, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008080}, 0x48000)

266.916705ms ago: executing program 7 (id=2496):
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74)
sendmmsg$unix(r0, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0xfdef}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0xfdef}], 0x1}}], 0x3, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x5, 0x5, 0xffffffff, 0xe661, 0x8004, 0x7, 0x5, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x3, 0x17, 0x1, 0x407, 0x5, 0x9, 0x8f, 0x4006, 0x6, 0x0, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x5, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x4005a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x80000004, 0xb, 0x4, 0x9, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x9, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x2, 0x408, 0x8004, 0x5, 0x9, 0x100, 0x8d2, 0x9, 0x0, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1ff, 0x80, 0x3, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0xa, 0xac8, 0xbf, 0x2, 0x4, 0x7ff, 0x12b, 0x4, 0x1, 0xfffffffa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb30, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0xb, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x1, 0x16, 0xffffffff, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x9, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x20000d7, 0x200, 0xffff3441, 0xfff]}, 0x45c)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)

263.095215ms ago: executing program 1 (id=2497):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40200000005000061114c0000000000850000001c0000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x5, 0xc3, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000001a0001002cbd7000fbdbdf251c1480000000fd000001000008000100"], 0x30}}, 0x0)

216.881898ms ago: executing program 1 (id=2498):
chdir(&(0x7f0000000240)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32)
getdents64(r0, &(0x7f0000001280)=""/4089, 0xff9)

195.597369ms ago: executing program 1 (id=2499):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000044, &(0x7f0000000240)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@nodioread_nolock}, {@bh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@nouid32}, {@nobh}, {@user_xattr}, {@nouid32}, {@dioread_nolock}]}, 0x1, 0x55e, &(0x7f0000001bc0)="$eJzs3d9rW+UbAPDnpM1+f7/rYAwVkcIunMyla+uPCV7MS9HhQO9naM/KaLqMJh1rHbhduBtvZAgiDsR7vfdKhv+Af8VAB0NG0QtvKic9abs1adIuWzrz+cDZ3jfnJO95cs7z9n1zTkgAA2s0+6cQ8WJEfJVEHI6IJF83HPnK0dXtlh9en8qWJFZWPv4zaWyX1Zuv1XzewbzyQkT8+kXEycLmdmuLS7PlSiWdz+tj9bkrY7XFpVOX5soz6Ux6eWJy8sybkxPvvP1Wz2J97fzf33509/0zXx5f/uan+0duJ3E2DuXrNsbxBG5srIzGaP6eFOPsYxuOr/7XizZ3haTfO8CODOV5XoysDzgcQ3nWA/99n0fECjCgEvkPA6o5DmjO7Xs0D35uPHhvdQK0Of7h1c9GYl9jbnRgOXlkZpTNd0d60H7Wxs9/3LmdLdG7zyEAOrpxMyJODw9v7v+SvP/budNdbPN4G/o/eHbuZuOf11uNfwpr459oMf452CJ3d6Jz/hfu96CZtrLx37stx79rF61GhvLa/xpjvmJy8VIlzfq2/0fEiSjuzerjW7RxZvneSrt1G8d/2ZK13xwL5vtxf3jvo8+ZLtfLTxLzRg9uRrzUcvybrB3/pMXxz96P8122cSy980q7dZ3jf7pWfoh4teXxX7+ilWx9fXKscT6MNc+Kzf66dey3du33O/7s+B/YOv6RZOP12tr22/h+3z9pu3WPxB/dn/97kk8a5T35Y9fK9fr8eMSe5MPNj0+sP7dZb26fxX/i+Nb93/r5/8va6+yPiE+7jP/W0R9f3tdN/H06/tPbOv7bL9z74LPv2rXfXf/3RqN0In+km/6vw34VY8dnMwAAAAAAAOxehYg4FEmhtFYuFEql1fs7jsaBQqVaq5+8WF24PB2N78qORLHQvNJ9eMP9EOP5/bDN+sRj9cmIOBIRXw/tb9RLU9XKdL+DBwAAAAAAAAAAAAAAAAAAgF3iYJvv/2d+H+r33gFPnZ/8hsHVMf978UtPwK7k7z8MLvkPg0v+w+CS/zC45D8MLvkPg0v+w+CS/wAAAAAAAAAAAAAAAAAAAAAAAAAAANBT58+dy5aV5YfXp7L69NXFhdnq1VPTaW22NLcwVZqqzl8pzVSrM5W0NFWd6/R6lWr1yvhELFwbq6e1+lhtcenCXHXhcv3CpbnyTHohLT6TqAAAAAAAAAAAAAAAAAAAAOD5Ultcmi1XKum8gsKOCsO7YzcUelzod88EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOv+DQAA//8Kozfs")
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="09000000080000000080000001"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, <r1=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc)

141.129152ms ago: executing program 5 (id=2500):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1001, 0x1})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000c00)={0x88, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0xfffffffffffffc85, 0x0, 0x0}}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

140.262072ms ago: executing program 6 (id=2501):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r4, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004)
write$nci(r0, &(0x7f0000000140)=ANY=[@ANYRES32=r2], 0x4)

77.925586ms ago: executing program 1 (id=2502):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)})
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000001c0)=0xf)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$TCFLSH(r3, 0x400455c8, 0x4)
bind$bt_hci(r1, &(0x7f0000002640)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
syz_usb_connect$uac1(0x0, 0x71, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

48.690358ms ago: executing program 5 (id=2503):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x3008000, &(0x7f0000000140)={[{@quota}, {@resgid={'resgid', 0x3d, 0xee00}}, {@bh}, {@noload}, {@data_err_ignore}, {@abort}]}, 0xfe, 0x452, &(0x7f0000000980)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000880)={'#! ', '', [], 0xa, "06b3e6e4f1"}, 0x9)
fadvise64(r0, 0x2, 0x7, 0x4)

0s ago: executing program 5 (id=2504):
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
request_key(&(0x7f0000001000)='dns_resolver\x00', &(0x7f0000001040)={'syz', 0x2}, 0x0, 0x0)
request_key(0x0, &(0x7f0000001100)={'syz', 0x2}, 0x0, 0x0)
r3 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x541b, 0x0)
futex(&(0x7f000000cffc)=0xfffffff2, 0x800000000006, 0x0, 0x0, 0x0, 0x0)
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r4, &(0x7f0000000300)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48)
r5 = io_uring_setup(0xfc6, &(0x7f0000000180))
mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', 0x0, 0x418, &(0x7f0000000100)='barrier')
close_range(r5, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

ore: USB Raw Gadget: couldn't find an available UDC or it's busy
[   83.245587][ T6125] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   83.409467][ T4384] usb 1-1: Using ep0 maxpacket: 32
[   83.411657][ T4384] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   83.413479][ T4384] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   83.414910][ T4384] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   83.416183][ T4384] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   83.418306][ T4384] usb 1-1: config 0 descriptor??
[   83.424264][ T4384] hub 1-1:0.0: USB hub found
[   83.626039][ T4384] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19)
[   83.783270][ T6155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   83.784747][ T6155] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   84.087429][ T4384] usbhid 1-1:0.0: can't add hid device: -71
[   84.088454][ T4384] usbhid: probe of 1-1:0.0 failed with error -71
[   84.120082][ T4384] usb 1-1: USB disconnect, device number 6
[   85.261267][ T6195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   85.262841][ T6195] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   87.858010][ T6250] Bluetooth: hci0: invalid length 0, exp 2 for type 8
[   88.289532][ T4384] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   88.619849][ T4384] usb 1-1: Using ep0 maxpacket: 32
[   88.625053][ T4384] usb 1-1: unable to get BOS descriptor or descriptor too short
[   88.627260][ T4384] usb 1-1: config 4 has an invalid interface number: 240 but max is 2
[   88.628588][ T4384] usb 1-1: config 4 has an invalid interface number: 61 but max is 2
[   88.630773][ T4384] usb 1-1: config 4 has an invalid interface number: 202 but max is 2
[   88.632247][ T4384] usb 1-1: config 4 has no interface number 0
[   88.634388][ T4384] usb 1-1: config 4 has no interface number 1
[   88.636503][ T4384] usb 1-1: config 4 has no interface number 2
[   88.641460][ T4384] usb 1-1: config 4 interface 240 has no altsetting 0
[   88.642664][ T4384] usb 1-1: config 4 interface 202 has no altsetting 0
[   88.648934][ T4384] usb 1-1: New USB device found, idVendor=1410, idProduct=a011, bcdDevice=7e.17
[   88.652818][ T4384] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   88.656208][ T4384] usb 1-1: Product: syz
[   88.656986][ T4384] usb 1-1: Manufacturer: syz
[   88.658900][ T4384] usb 1-1: SerialNumber: syz
[   89.005993][ T4384] usb 1-1: selecting invalid altsetting 0
[   89.007009][ T4384] usb 1-1: Could not set interface, error -22
[   89.009778][ T4384] usb 1-1: USB disconnect, device number 7
[   89.998114][ T4371] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[   90.366787][ T4371] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   90.368377][ T4371] usb 1-1: New USB device found, idVendor=0471, idProduct=0308, bcdDevice=e4.df
[   90.371385][ T4371] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   90.374280][ T4371] usb 1-1: config 0 descriptor??
[   90.376641][ T4371] pwc: Philips PCVC680K (Vesta Pro) USB webcam detected.
[   90.417979][ T6303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   90.421399][ T6303] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   91.107545][ T4371] pwc: recv_control_msg error -71 req 02 val 2b00
[   91.108953][ T4371] pwc: recv_control_msg error -71 req 02 val 2700
[   91.110182][ T4371] pwc: recv_control_msg error -71 req 04 val 1700
[   91.111437][ T4371] pwc: recv_control_msg error -71 req 02 val 2c00
[   91.112675][ T4371] pwc: recv_control_msg error -71 req 04 val 1000
[   91.113877][ T4371] pwc: recv_control_msg error -71 req 04 val 1300
[   91.115039][ T4371] pwc: recv_control_msg error -71 req 04 val 1400
[   91.116301][ T4371] pwc: recv_control_msg error -71 req 02 val 2000
[   91.117442][ T4371] pwc: recv_control_msg error -71 req 02 val 2100
[   91.118598][ T4371] pwc: recv_control_msg error -71 req 02 val 2200
[   91.119896][ T4371] pwc: recv_control_msg error -71 req 06 val 0600
[   91.121115][ T4371] pwc: recv_control_msg error -71 req 04 val 1500
[   91.122274][ T4371] pwc: recv_control_msg error -71 req 02 val 2500
[   91.123494][ T4371] pwc: recv_control_msg error -71 req 02 val 2400
[   91.124779][ T4371] pwc: recv_control_msg error -71 req 02 val 2600
[   91.125872][ T4371] pwc: recv_control_msg error -71 req 02 val 2900
[   91.126959][ T4371] pwc: recv_control_msg error -71 req 02 val 2800
[   91.128083][ T4371] pwc: recv_control_msg error -71 req 04 val 1100
[   91.129208][ T4371] pwc: recv_control_msg error -71 req 04 val 1200
[   91.132051][ T4371] pwc: Registered as video11.
[   91.133469][ T4371] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input2
[   91.138149][ T4371] usb 1-1: USB disconnect, device number 8
[   91.909442][ T6331] use of bytesused == 0 is deprecated and will be removed in the future,
[   91.911566][ T6331] use the actual size instead.
[   92.480521][ T6342] Bluetooth: hci0: unsupported parameter 255
[   92.481687][ T6342] Bluetooth: hci0: unsupported parameter 255
[   92.732701][ T6361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   92.735979][ T6361] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   93.492985][ T6375] Bluetooth: hci0: unsupported parameter 255
[   93.494183][ T6375] Bluetooth: hci0: unsupported parameter 255
[   93.786880][ T6397] syz.1.712 uses obsolete (PF_INET,SOCK_PACKET)
[   93.788560][ T6397] device syzkaller1 entered promiscuous mode
[   94.007819][ T3898] usb 1-1: new full-speed USB device number 9 using dummy_hcd
[   94.190487][ T3898] usb 1-1: config 0 has an invalid interface number: 172 but max is 0
[   94.191726][ T3898] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   94.193236][ T3898] usb 1-1: config 0 has no interface number 0
[   94.195941][ T3898] usb 1-1: New USB device found, idVendor=16d5, idProduct=650a, bcdDevice=83.b1
[   94.197385][ T3898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.198606][ T3898] usb 1-1: Product: syz
[   94.199234][ T3898] usb 1-1: Manufacturer: syz
[   94.202200][ T3898] usb 1-1: SerialNumber: syz
[   94.204421][ T3898] usb 1-1: config 0 descriptor??
[   94.207308][ T3898] qmi_wwan 1-1:0.172: skipping garbage
[   94.208436][ T3898] qmi_wwan: probe of 1-1:0.172 failed with error -22
[   94.410555][   T14] usb 1-1: USB disconnect, device number 9
[   94.886153][ T6426] ieee802154 phy0 wpan0: encryption failed: -22
[   95.817276][ T6457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   95.818903][ T6457] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   95.905486][ T6459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   95.909172][ T6459] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   96.040284][ T6457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   96.041696][ T6457] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   97.487796][ T6488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   97.490466][ T6488] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   97.954011][ T4324] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   97.956022][ T4324] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   97.957560][ T4324] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   97.959277][ T4324] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   97.964808][ T4324] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   97.966261][ T4324] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   98.057087][ T6492] chnl_net:caif_netlink_parms(): no params data found
[   98.073605][ T6492] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.074719][ T6492] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.076174][ T6492] device bridge_slave_0 entered promiscuous mode
[   98.078275][ T6492] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.079354][ T6492] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.081606][ T6492] device bridge_slave_1 entered promiscuous mode
[   98.088330][ T6492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   98.090997][ T6492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   98.098199][ T6492] team0: Port device team_slave_0 added
[   98.100022][ T6492] team0: Port device team_slave_1 added
[   98.105699][ T6492] batman_adv: batadv0: Adding interface: batadv_slave_0
[   98.114952][ T6492] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   98.119077][ T6492] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   98.140331][ T6504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   98.142231][ T6504] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   98.162856][ T6492] batman_adv: batadv0: Adding interface: batadv_slave_1
[   98.164135][ T6492] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   98.168380][ T6492] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   98.222434][ T6492] device hsr_slave_0 entered promiscuous mode
[   98.259806][ T6492] device hsr_slave_1 entered promiscuous mode
[   98.299481][ T6492] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   98.301427][ T6492] Cannot create hsr debugfs directory
[   98.600780][ T6506] device syzkaller1 entered promiscuous mode
[   98.660990][   T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.759248][   T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.793344][ T6492] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   98.830814][ T6492] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   98.901122][   T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.903972][ T6492] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   98.951099][ T6492] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   99.003875][   T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.028532][ T6492] 8021q: adding VLAN 0 to HW filter on device bond0
[   99.032721][ T6157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   99.034329][ T6157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   99.037092][ T6492] 8021q: adding VLAN 0 to HW filter on device team0
[   99.041898][ T5258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   99.043376][ T5258] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   99.045791][ T5258] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.046868][ T5258] bridge0: port 1(bridge_slave_0) entered forwarding state
[   99.051505][ T5258] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   99.058093][ T5258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   99.065326][ T5258] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   99.066912][ T5258] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.067998][ T5258] bridge0: port 2(bridge_slave_1) entered forwarding state
[   99.071379][ T5258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   99.078423][ T5258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   99.085251][ T5258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   99.088365][ T5258] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   99.091101][ T5258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   99.094009][ T5258] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   99.096586][ T5258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   99.098950][ T5258] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   99.105359][ T5258] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   99.110053][ T6492] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   99.112421][ T6492] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   99.113684][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   99.115254][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   99.260506][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   99.261806][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   99.264892][ T6492] 8021q: adding VLAN 0 to HW filter on device batadv0
[   99.361312][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   99.364518][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   99.378119][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   99.384392][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   99.386998][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   99.388489][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   99.567418][ T6492] device veth0_vlan entered promiscuous mode
[   99.577428][ T6492] device veth1_vlan entered promiscuous mode
[   99.588000][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   99.590652][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   99.594391][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   99.597105][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   99.664681][ T6492] device veth0_macvtap entered promiscuous mode
[   99.667172][ T6492] device veth1_macvtap entered promiscuous mode
[   99.668871][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   99.670344][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   99.693583][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   99.695294][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   99.696817][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   99.698430][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   99.706721][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   99.708318][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   99.719531][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   99.721240][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   99.722794][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   99.724382][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   99.731316][ T6492] batman_adv: batadv0: Interface activated: batadv_slave_0
[   99.732665][ T5258] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   99.734373][ T5258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   99.741065][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   99.742711][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   99.744212][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   99.745753][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   99.747438][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   99.748982][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   99.760837][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   99.762482][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   99.776837][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   99.778504][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   99.781123][ T6492] batman_adv: batadv0: Interface activated: batadv_slave_1
[   99.782205][ T5258] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   99.787802][ T5258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   99.796594][ T6565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   99.801685][ T6565] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   99.904884][ T6492] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   99.906295][ T6492] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   99.907616][ T6492] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   99.908930][ T6492] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  100.020274][ T4324] Bluetooth: hci5: command 0x0409 tx timeout
[  100.275596][ T6200] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.281819][ T6200] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.291778][ T6200] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  100.297274][ T6200] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.298622][ T6200] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.302481][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  100.548824][ T6601] device syzkaller1 entered promiscuous mode
[  101.573168][ T6655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  101.574628][ T6655] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  101.706621][ T6667] device syzkaller1 entered promiscuous mode
[  101.919110][   T11] device hsr_slave_0 left promiscuous mode
[  102.065174][   T11] device hsr_slave_1 left promiscuous mode
[  102.089674][ T4339] Bluetooth: hci5: command 0x041b tx timeout
[  102.239700][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  102.241128][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  102.243392][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  102.244625][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  102.246905][   T11] device bridge_slave_1 left promiscuous mode
[  102.248354][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.294881][   T11] device bridge_slave_0 left promiscuous mode
[  102.295970][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.420415][   T11] device veth1_macvtap left promiscuous mode
[  102.421722][   T11] device veth0_macvtap left promiscuous mode
[  102.422731][   T11] device veth1_vlan left promiscuous mode
[  102.423721][   T11] device veth0_vlan left promiscuous mode
[  104.169603][ T4339] Bluetooth: hci5: command 0x040f tx timeout
[  104.791054][   T11] team0 (unregistering): Port device team_slave_1 removed
[  104.953288][   T11] team0 (unregistering): Port device team_slave_0 removed
[  105.109925][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  105.309962][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  106.249465][ T4324] Bluetooth: hci5: command 0x0419 tx timeout
[  106.820819][   T11] bond0 (unregistering): Released all slaves
[  107.177348][ T6711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  107.178825][ T6711] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  108.227209][ T6766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  108.228808][ T6766] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  108.581576][ T6769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  108.582965][ T6769] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  108.585182][ T6769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  108.594146][ T6769] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  108.882060][ T6780] device syzkaller1 entered promiscuous mode
[  109.864219][ T6788] syz.2.803 (6788): drop_caches: 3
[  110.013700][ T6811] device syzkaller1 entered promiscuous mode
[  110.072335][ T6814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  110.080230][ T6814] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  110.093519][ T6814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  110.096100][ T6814] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  110.106162][ T4324] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  110.108069][ T4324] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  110.110552][ T4324] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  110.112409][ T4324] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  110.113875][ T4324] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  110.115200][ T4324] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  110.143851][ T6819] device syzkaller1 entered promiscuous mode
[  110.315419][ T6815] chnl_net:caif_netlink_parms(): no params data found
[  110.341967][ T6815] bridge0: port 1(bridge_slave_0) entered blocking state
[  110.343100][ T6815] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.344927][ T6815] device bridge_slave_0 entered promiscuous mode
[  110.347303][ T6815] bridge0: port 2(bridge_slave_1) entered blocking state
[  110.348581][ T6815] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.350236][ T6815] device bridge_slave_1 entered promiscuous mode
[  110.356719][ T6815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  110.359320][ T6815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  110.366752][ T6815] team0: Port device team_slave_0 added
[  110.371032][ T6815] team0: Port device team_slave_1 added
[  110.376180][ T6815] batman_adv: batadv0: Adding interface: batadv_slave_0
[  110.377291][ T6815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  110.381977][ T6815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  110.384225][ T6815] batman_adv: batadv0: Adding interface: batadv_slave_1
[  110.385282][ T6815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  110.389436][ T6815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  110.440741][ T6815] device hsr_slave_0 entered promiscuous mode
[  110.459899][ T6815] device hsr_slave_1 entered promiscuous mode
[  110.559583][ T6815] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  110.560899][ T6815] Cannot create hsr debugfs directory
[  111.012359][   T55] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  111.014262][   T55] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.042620][ T6854] device syzkaller1 entered promiscuous mode
[  111.131323][   T55] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  111.133048][   T55] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.209045][ T6869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  111.211400][ T6869] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  111.214045][ T6869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  111.215551][ T6869] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  111.218641][ T4339] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  111.223671][ T4339] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  111.226302][ T4339] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  111.228297][ T4339] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  111.231496][   T55] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  111.233188][   T55] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.235666][ T4330] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  111.236939][ T4330] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  111.337942][   T55] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  111.348173][   T55] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.361146][ T6815] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  111.426598][ T6885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  111.428012][ T6885] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  111.453419][ T6815] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  111.480613][ T6815] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  111.526998][ T6815] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  111.681706][ T6815] 8021q: adding VLAN 0 to HW filter on device bond0
[  111.686349][ T6815] 8021q: adding VLAN 0 to HW filter on device team0
[  111.695613][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  111.697166][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  111.706806][ T6864] chnl_net:caif_netlink_parms(): no params data found
[  111.737614][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  111.739176][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  111.748059][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  111.749258][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  111.777595][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  111.953183][ T6815] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  111.955902][ T6815] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  111.964357][ T6922] device syzkaller1 entered promiscuous mode
[  112.011229][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  112.013008][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  112.014376][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  112.015525][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  112.016818][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  112.018366][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  112.020736][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  112.024420][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  112.026003][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  112.027610][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  112.029173][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  112.031286][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  112.032953][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  112.034829][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  112.133805][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  112.138864][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  112.169519][ T4330] Bluetooth: hci4: command 0x0409 tx timeout
[  112.185959][ T6864] bridge0: port 1(bridge_slave_0) entered blocking state
[  112.187138][ T6864] bridge0: port 1(bridge_slave_0) entered disabled state
[  112.192594][ T6864] device bridge_slave_0 entered promiscuous mode
[  112.465562][ T6864] bridge0: port 2(bridge_slave_1) entered blocking state
[  112.468981][ T6864] bridge0: port 2(bridge_slave_1) entered disabled state
[  112.474536][ T6864] device bridge_slave_1 entered promiscuous mode
[  112.546823][ T6864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  112.555329][ T6864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  112.664061][ T6864] team0: Port device team_slave_0 added
[  112.675120][ T5258] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  112.676316][ T5258] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  112.680046][ T6815] 8021q: adding VLAN 0 to HW filter on device batadv0
[  112.684087][ T6864] team0: Port device team_slave_1 added
[  112.751611][ T6864] batman_adv: batadv0: Adding interface: batadv_slave_0
[  112.753134][ T6864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  112.756833][ T6864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  112.760508][ T6864] batman_adv: batadv0: Adding interface: batadv_slave_1
[  112.761615][ T6864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  112.765487][ T6864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  112.890748][ T6864] device hsr_slave_0 entered promiscuous mode
[  112.939792][ T6864] device hsr_slave_1 entered promiscuous mode
[  112.949009][ T6969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  112.952284][ T6969] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  112.969056][ T6969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  112.979617][ T6864] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  112.980915][ T6864] Cannot create hsr debugfs directory
[  112.987932][ T6969] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  113.167378][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  113.169115][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  113.188991][ T5258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  113.199630][ T5258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  113.246730][ T5258] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  113.248179][ T5258] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  113.251411][ T6815] device veth0_vlan entered promiscuous mode
[  113.254769][ T6815] device veth1_vlan entered promiscuous mode
[  113.271659][ T5258] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  113.273183][ T5258] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  113.274513][ T5258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  113.276025][ T5258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  113.278912][ T6815] device veth0_macvtap entered promiscuous mode
[  113.289452][ T4330] Bluetooth: hci3: command 0x0409 tx timeout
[  113.290962][ T6815] device veth1_macvtap entered promiscuous mode
[  113.318052][ T6864] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  113.331316][ T6864] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  113.370595][ T6815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  113.372190][ T6815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  113.373607][ T6815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  113.375087][ T6815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  113.376592][ T6815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  113.378117][ T6815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  113.380592][ T6815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  113.382164][ T6815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  113.383743][ T6815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  113.385242][ T6815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  113.387491][ T6815] batman_adv: batadv0: Interface activated: batadv_slave_0
[  113.557533][ T6996] binder: 6995:6996 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  113.558834][ T6996] binder: 6995:6996 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[  113.595277][ T6998] autofs4:pid:6998:autofs_fill_super: called with bogus options
[  113.718281][ T6864] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  113.905705][ T6864] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  114.092250][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  114.093902][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  114.095452][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  114.098683][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  114.103145][ T6999] device syzkaller1 entered promiscuous mode
[  114.158223][ T6815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  114.160168][ T6815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.161730][ T6815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  114.163353][ T6815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.164776][ T6815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  114.166314][ T6815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.167987][ T6815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  114.170745][ T6815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.172286][ T6815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  114.173747][ T6815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.175982][ T6815] batman_adv: batadv0: Interface activated: batadv_slave_1
[  114.249438][ T4330] Bluetooth: hci4: command 0x041b tx timeout
[  114.355381][ T7027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  114.357462][ T7027] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  114.517720][ T7029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  114.519885][ T7029] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  114.522397][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  114.524027][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  114.529357][ T6815] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  114.530878][ T6815] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  114.532224][ T6815] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  114.533586][ T6815] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  114.552975][ T7029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  114.554438][ T7029] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  114.591489][   T55] device hsr_slave_0 left promiscuous mode
[  114.640012][   T55] device hsr_slave_1 left promiscuous mode
[  114.719459][   T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  114.720618][   T55] batman_adv: batadv0: Removing interface: batadv_slave_0
[  114.722536][   T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  114.723868][   T55] batman_adv: batadv0: Removing interface: batadv_slave_1
[  114.725257][   T55] device bridge_slave_1 left promiscuous mode
[  114.726187][   T55] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.759998][   T55] device bridge_slave_0 left promiscuous mode
[  114.761680][   T55] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.979599][   T55] device veth1_macvtap left promiscuous mode
[  114.980685][   T55] device veth0_macvtap left promiscuous mode
[  114.981756][   T55] device veth1_vlan left promiscuous mode
[  114.982694][   T55] device veth0_vlan left promiscuous mode
[  115.018925][ T7035] binder: 7034:7035 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  115.023406][ T7035] binder: 7034:7035 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[  115.069340][ T7037] autofs4:pid:7037:autofs_fill_super: called with bogus options
[  115.123192][ T7042] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed
[  115.125142][ T7042] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff)
[  115.369426][ T4330] Bluetooth: hci3: command 0x041b tx timeout
[  116.070190][ T7066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  116.071736][ T7066] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  116.088041][ T7066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  116.095295][ T7066] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  116.330288][ T4324] Bluetooth: hci4: command 0x040f tx timeout
[  116.740109][ T7077] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed
[  116.741340][ T7077] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff)
[  116.777691][ T7080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  116.781109][ T7080] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  117.449567][ T4324] Bluetooth: hci3: command 0x040f tx timeout
[  117.723508][ T7096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  117.725020][ T7096] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  118.151347][   T55] team0 (unregistering): Port device team_slave_1 removed
[  118.293838][   T55] team0 (unregistering): Port device team_slave_0 removed
[  118.409523][ T4330] Bluetooth: hci4: command 0x0419 tx timeout
[  118.430503][   T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  118.485085][ T7109] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed
[  118.486656][ T7109] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff)
[  118.515107][ T7112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  118.516689][ T7112] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  118.522826][ T7112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  118.524462][ T7112] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  118.526294][ T7112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  118.527737][ T7112] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  118.542509][ T7112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  118.545899][ T7112] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  118.670554][   T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  118.890422][ T7112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  118.894162][ T7112] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  119.549525][ T4324] Bluetooth: hci3: command 0x0419 tx timeout
[  119.734206][ T7129] fuse: Bad value for 'fd'
[  120.100567][ T7135] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed
[  120.107255][ T7135] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff)
[  121.172602][ T7156] fuse: Bad value for 'fd'
[  121.439826][ T7161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  121.443056][ T7161] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  121.810545][   T55] bond0 (unregistering): Released all slaves
[  122.287446][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  122.288762][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  122.423162][ T6864] 8021q: adding VLAN 0 to HW filter on device bond0
[  122.427095][ T6009] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  122.655087][ T4580] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  122.655291][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  122.656465][ T4580] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  122.657981][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  122.662184][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  122.709923][ T6864] 8021q: adding VLAN 0 to HW filter on device team0
[  122.715561][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  122.717341][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  122.718874][ T4534] bridge0: port 1(bridge_slave_0) entered blocking state
[  122.720046][ T4534] bridge0: port 1(bridge_slave_0) entered forwarding state
[  122.743937][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  122.747540][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  122.752409][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  122.759084][ T4534] bridge0: port 2(bridge_slave_1) entered blocking state
[  122.760309][ T4534] bridge0: port 2(bridge_slave_1) entered forwarding state
[  122.765387][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  122.769215][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  122.773220][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  122.778783][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  122.786529][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  122.795521][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  122.815198][ T6864] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  122.816860][ T6864] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  122.833987][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  122.835716][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  122.842782][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  122.844626][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  122.848360][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  122.854311][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  123.117599][ T6009] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  123.118946][ T6009] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  123.125168][ T6864] 8021q: adding VLAN 0 to HW filter on device batadv0
[  123.852390][   T55] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.855857][ T6009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  123.857617][ T6009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  123.867197][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  123.868928][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  123.871096][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  123.872910][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  123.878044][ T6864] device veth0_vlan entered promiscuous mode
[  123.887663][ T6864] device veth1_vlan entered promiscuous mode
[  123.895440][ T7240] binder: 7238:7240 IncRefs 0 refcount change on invalid ref 0 ret -22
[  123.904646][ T7240] binder: 7238:7240 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  123.907167][ T7240] binder: 7238:7240 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[  123.960486][   T55] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.974368][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  123.976262][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  123.978218][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  123.986064][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  124.054165][ T7248] netlink: 8 bytes leftover after parsing attributes in process `syz.2.916'.
[  124.071082][   T55] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.074632][ T6864] device veth0_macvtap entered promiscuous mode
[  124.082998][ T6864] device veth1_macvtap entered promiscuous mode
[  124.101604][ T6864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  124.113619][ T6864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.152822][ T6864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  124.157906][ T6864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.161285][ T6864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  124.163281][ T6864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.169660][ T6864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  124.173686][ T6864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.176417][ T6864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  124.180458][ T6864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.186501][ T6864] batman_adv: batadv0: Interface activated: batadv_slave_0
[  124.242311][ T7263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  124.243741][ T7263] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  124.271588][   T55] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.274903][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  124.276531][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  124.278018][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  124.279489][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  124.290977][ T6864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  124.293582][ T6864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.295091][ T6864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  124.296619][ T6864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.299192][ T6864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  124.304743][ T6864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.307525][ T6864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  124.310588][ T6864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.313197][ T6864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  124.315935][ T6864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.319103][ T6864] batman_adv: batadv0: Interface activated: batadv_slave_1
[  124.324809][ T6104] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  124.326543][ T6104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  124.330069][ T6864] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  124.332309][ T6864] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  124.334914][ T6864] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  124.337475][ T6864] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  124.457495][ T6104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  124.458723][ T6104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  124.462069][ T6104] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  124.487134][ T6104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  124.488445][ T6104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  124.493534][ T6104] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  124.702722][ T7285] binder: 7284:7285 IncRefs 0 refcount change on invalid ref 0 ret -22
[  125.131103][ T4330] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0
[  125.132425][ T4330] Bluetooth: hci5: Injecting HCI hardware error event
[  125.133828][ T4330] Bluetooth: hci5: hardware error 0x00
[  125.217477][ T7311] device syzkaller1 entered promiscuous mode
[  125.940634][ T2061] ieee802154 phy0 wpan0: encryption failed: -22
[  125.945039][ T2061] ieee802154 phy1 wpan1: encryption failed: -22
[  126.165146][ T7352] binder: 7351:7352 IncRefs 0 refcount change on invalid ref 0 ret -22
[  126.191391][ T7355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  126.194097][ T7355] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  126.885220][ T7410] binder: 7409:7410 IncRefs 0 refcount change on invalid ref 0 ret -22
[  126.957215][   T55] device hsr_slave_0 left promiscuous mode
[  126.980040][   T55] device hsr_slave_1 left promiscuous mode
[  127.339772][   T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  127.341016][   T55] batman_adv: batadv0: Removing interface: batadv_slave_0
[  127.343370][   T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  127.346209][   T55] batman_adv: batadv0: Removing interface: batadv_slave_1
[  127.348677][   T55] device bridge_slave_1 left promiscuous mode
[  127.350675][ T7426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  127.352158][ T7426] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  127.353645][   T55] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.369664][ T4330] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  127.391698][   T55] device bridge_slave_0 left promiscuous mode
[  127.392841][   T55] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.499569][   T55] device veth1_macvtap left promiscuous mode
[  127.500675][   T55] device veth0_macvtap left promiscuous mode
[  127.501685][   T55] device veth1_vlan left promiscuous mode
[  127.502580][   T55] device veth0_vlan left promiscuous mode
[  127.814652][ T7436] fuse: Bad value for 'fd'
[  127.902659][ T7442] binder: 7441:7442 IncRefs 0 refcount change on invalid ref 0 ret -22
[  128.809660][ T4330] Bluetooth: hci2: command 0x1003 tx timeout
[  128.811527][ T4324] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  129.440454][ T7474] fuse: Bad value for 'fd'
[  129.483490][ T7479] binder: 7478:7479 IncRefs 0 refcount change on invalid ref 0 ret -22
[  130.065207][ T7498] Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored.
[  130.261209][ T7511] fuse: Bad value for 'fd'
[  130.286787][ T7514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  130.288406][ T7514] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  130.376337][ T7516] binder: 7515:7516 IncRefs 0 refcount change on invalid ref 0 ret -22
[  130.872654][   T55] team0 (unregistering): Port device team_slave_1 removed
[  131.055566][   T55] team0 (unregistering): Port device team_slave_0 removed
[  131.221171][   T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  131.432987][   T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  133.171645][ T7555] binder: 7554:7555 ioctl 4018620d 0 returned -22
[  133.173165][ T7555] binder: 7554:7555 IncRefs 0 refcount change on invalid ref 0 ret -22
[  133.174731][ T7555] binder: 7554:7555 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  133.175870][ T7555] binder: 7554:7555 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[  133.198808][ T7557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  133.203389][ T7557] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  133.210991][   T55] bond0 (unregistering): Released all slaves
[  133.553578][ T7563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  133.555018][ T7563] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  134.213736][ T7612] autofs4:pid:7612:autofs_fill_super: called with bogus options
[  134.263764][ T7618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  134.266452][ T7618] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  134.370365][ T7627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  134.371975][ T7627] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  134.439087][ T7633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  134.441568][ T7633] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  134.640661][ T7657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  134.642269][ T7657] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  134.713214][ T7664] autofs4:pid:7664:autofs_fill_super: called with bogus options
[  134.737667][ T7670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  134.740372][ T7670] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  135.478181][ T7725] autofs4:pid:7725:autofs_fill_super: called with bogus options
[  135.518399][ T7734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  135.523678][ T7734] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  135.570137][ T7739] random: crng reseeded on system resumption
[  136.019055][ T7753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  136.022046][ T7753] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  136.159701][ T7768] autofs4:pid:7768:autofs_fill_super: called with bogus options
[  136.419975][ T7800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  136.421552][ T7800] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  137.439764][ T7873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  137.441159][ T7873] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  138.895554][ T7924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  138.899679][ T7924] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  139.108070][ T7938] fuse: Bad value for 'group_id'
[  139.642757][ T7949] tipc: Started in network mode
[  139.643673][ T7949] tipc: Node identity 8a33974e6c53, cluster identity 4711
[  139.649087][ T7949] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  139.694589][ T7931] tipc: Resetting bearer <eth:syzkaller0>
[  141.522170][ T8005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  141.524729][ T8005] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  151.204361][ T7931] tipc: Disabling bearer <eth:syzkaller0>
[  151.237667][   T22] tipc: Node number set to 3865089870
[  151.390978][ T4417] nci: nci_ntf_packet: unsupported ntf opcode 0xf00
[  151.392252][ T4417] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x6c
[  151.892665][ T8056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  151.894109][ T8056] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  152.501387][ T8087] binder: 8086:8087 BC_CLEAR_DEATH_NOTIFICATION death notification not active
[  152.623011][ T4339] Bluetooth: hci3: Malformed Event: 0x13
[  152.696727][ T8118] binder: 8117:8118 tried to acquire reference to desc 0, got 1 instead
[  152.699065][ T8118] binder_alloc: 8117: binder_alloc_buf size -888 failed, no address space
[  152.702905][ T8118] binder_alloc: allocated: 4096 (num: 1 largest: 4096), free: 8192 (num: 1 largest: 8192)
[  152.704540][ T8118] binder: cannot allocate buffer: no space left
[  152.704578][ T8118] binder: 8117:8118 transaction call to 8117:0 failed 16/29201/-28, size 0--891 line 3230
[  152.707294][ T4371] binder: undelivered TRANSACTION_COMPLETE
[  152.708309][ T4371] binder: undelivered TRANSACTION_ERROR: 29201
[  152.716618][ T4371] binder: undelivered transaction 15, process died.
[  153.155737][ T8126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  153.157077][ T8126] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  153.312843][ T8137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  153.314384][ T8137] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  153.619498][ T4339] Bluetooth: hci1: command 0x0406 tx timeout
[  153.620539][ T4339] Bluetooth: hci0: command 0x0406 tx timeout
[  153.727124][ T8186] binder: 8185:8186 tried to acquire reference to desc 0, got 1 instead
[  153.728445][ T8186] binder: 8185:8186 ioctl c0306201 200003c0 returned -14
[  153.732282][ T8186] binder: 8185:8186 got transaction with invalid offset (88, min 0 max 112) or object.
[  153.733847][ T8186] binder: 8185:8186 transaction call to 8185:0 failed 21/29201/-22, size 112-24 line 3346
[  153.735793][ T4371] binder: undelivered TRANSACTION_ERROR: 29201
[  153.769332][ T8191] binder: 8189:8191 tried to acquire reference to desc 0, got 1 instead
[  153.773719][ T8191] binder_alloc: 8189: binder_alloc_buf size -888 failed, no address space
[  153.775048][ T8191] binder_alloc: allocated: 1024 (num: 1 largest: 1024), free: 11264 (num: 1 largest: 11264)
[  153.776540][ T8191] binder: cannot allocate buffer: no space left
[  153.776578][ T8191] binder: 8189:8191 transaction call to 8189:0 failed 27/29201/-28, size 0--891 line 3230
[  153.781710][ T1515] binder: undelivered TRANSACTION_COMPLETE
[  154.892081][ T8251] binder: 8249:8251 Acquire 1 refcount change on invalid ref 1 ret -22
[  154.911350][ T8253] binder: 8252:8253 tried to acquire reference to desc 0, got 1 instead
[  154.913515][ T8253] binder_alloc: 8252: binder_alloc_buf size -888 failed, no address space
[  154.914921][ T8253] binder_alloc: allocated: 1024 (num: 1 largest: 1024), free: 11264 (num: 1 largest: 11264)
[  155.109569][ T8216] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  155.607010][ T8298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  155.608483][ T8298] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  155.689689][ T4324] Bluetooth: hci0: command 0x042c tx timeout
[  155.706585][ T4339] Bluetooth: hci1: Malformed Event: 0x13
[  156.273031][ T8336] capability: warning: `syz.2.1174' uses deprecated v2 capabilities in a way that may be insecure
[  156.303330][ T8340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  156.304916][ T8340] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  156.495094][ T4339] Bluetooth: hci3: Malformed Event: 0x13
[  156.543515][ T8358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  156.552465][ T8358] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  156.744206][ T8382] fuse: Bad value for 'fd'
[  156.948837][ T4339] Bluetooth: hci0: Malformed Event: 0x13
[  157.668398][ T8424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  157.670216][ T8424] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  158.198149][ T8437] binder: 8436:8437 got transaction to invalid handle, 1
[  158.199265][ T8437] binder_debug: 7 callbacks suppressed
[  158.199278][ T8437] binder: 8437:8436 cannot find target node
[  158.201754][ T8437] binder: 8436:8437 transaction async to 0:0 failed 39/29201/-22, size 0-0 line 3045
[  158.204071][ T4384] binder: undelivered TRANSACTION_ERROR: 29201
[  159.309795][ T8469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  159.311984][ T8469] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  159.552818][ T8477] binder: 8476:8477 got transaction to invalid handle, 1
[  159.553926][ T8477] binder: 8477:8476 cannot find target node
[  159.554822][ T8477] binder: 8476:8477 transaction async to 0:0 failed 43/29201/-22, size 0-0 line 3045
[  159.556914][ T4445] binder: undelivered TRANSACTION_ERROR: 29201
[  159.731811][ T4339] Bluetooth: hci4: Malformed Event: 0x13
[  160.541385][ T8508] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1230'.
[  160.579291][ T8508] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  160.674487][ T8526] binder: tried to use weak ref as strong ref
[  160.675892][ T8526] binder: 8525:8526 Acquire 1 refcount change on invalid ref 0 ret -22
[  160.677668][ T8526] binder: 8525:8526 got transaction to invalid handle, 1
[  160.678912][ T8526] binder: 8526:8525 cannot find target node
[  160.680124][ T8526] binder: 8525:8526 transaction async to 0:0 failed 46/29201/-22, size 0-0 line 3045
[  160.682949][ T4384] binder: undelivered TRANSACTION_ERROR: 29201
[  160.752867][ T8014] udevd[8014]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  161.354421][ T8553] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1244'.
[  161.735407][ T8553] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  161.822805][ T8566] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1248'.
[  161.849828][ T8567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  161.851393][ T8567] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  161.875104][ T8573] binder: tried to use weak ref as strong ref
[  161.876025][ T8573] binder: 8572:8573 Acquire 1 refcount change on invalid ref 0 ret -22
[  161.877470][ T8573] binder: 8572:8573 got transaction to invalid handle, 1
[  161.878536][ T8573] binder: 8573:8572 cannot find target node
[  161.885173][ T8576] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1251'.
[  161.887431][ T8576] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1251'.
[  162.078105][ T8596] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1259'.
[  162.780034][ T8596] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  162.865998][ T8615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1263'.
[  162.931014][ T8014] udevd[8014]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  162.956276][ T8628] binder: 8627:8628 tried to acquire reference to desc 0, got 1 instead
[  162.956924][ T8623] binder: tried to use weak ref as strong ref
[  162.958275][ T8628] binder: 8627:8628 ioctl c0306201 20000380 returned -14
[  163.020702][ T8639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  163.023003][ T8639] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  163.228773][ T8657] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1275'.
[  163.246148][ T8657] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  163.575855][ T8014] udevd[8014]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  164.120178][ T8678] binder_user_error: 3 callbacks suppressed
[  164.120188][ T8678] binder: 8677:8678 tried to acquire reference to desc 0, got 1 instead
[  164.122838][ T8678] binder_alloc: 8677: binder_alloc_buf, no vma
[  164.123748][ T8678] binder_debug: 9 callbacks suppressed
[  164.123761][ T8678] binder: cannot allocate buffer: vma cleared, target dead or dying
[  164.124686][ T8678] binder: 8677:8678 transaction async to 8677:0 failed 63/29189/-3, size 0-0 line 3230
[  164.134517][ T4384] binder: undelivered TRANSACTION_ERROR: 29189
[  164.155742][ T8680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  164.162861][ T8680] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  164.282637][ T8686] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1286'.
[  164.301590][ T8686] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  164.413260][ T8695] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1289'.
[  164.449120][ T8699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  164.451981][ T8699] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  164.784066][ T8706] binder: 8705:8706 tried to acquire reference to desc 0, got 1 instead
[  164.785870][ T8706] binder_alloc: 8705: binder_alloc_buf, no vma
[  164.787462][ T8708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  164.789222][ T8706] binder: cannot allocate buffer: vma cleared, target dead or dying
[  164.789273][ T8706] binder: 8705:8706 transaction async to 8705:0 failed 68/29189/-3, size 0-0 line 3230
[  164.791026][ T8708] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  164.793008][ T8604] binder: undelivered TRANSACTION_ERROR: 29189
[  164.865074][ T8712] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  165.551682][ T8734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  165.559913][ T8734] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  165.591350][ T8738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  165.592759][ T8738] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  165.751738][ T8759] __nla_validate_parse: 3 callbacks suppressed
[  165.751748][ T8759] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1308'.
[  165.771932][ T8759] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  165.992888][ T8781] IPVS: fo: FWM 3 0x00000003 - no destination available
[  166.365671][ T8795] binder: tried to use weak ref as strong ref
[  166.366719][ T8795] binder: 8794:8795 Acquire 1 refcount change on invalid ref 0 ret -22
[  166.371864][ T8795] binder: 8794:8795 got transaction to invalid handle, 1
[  166.373162][ T8795] binder: 8795:8794 cannot find target node
[  166.374090][ T8795] binder: 8794:8795 transaction async to 0:0 failed 71/29201/-22, size 0-0 line 3045
[  166.375752][ T4384] binder: undelivered TRANSACTION_ERROR: 29201
[  166.411162][ T8798] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1319'.
[  166.434806][ T8798] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  166.473280][ T8013] udevd[8013]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  166.484762][ T8014] udevd[8014]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  167.279351][ T8854] binder: tried to use weak ref as strong ref
[  167.283532][ T8854] binder: 8853:8854 Acquire 1 refcount change on invalid ref 0 ret -22
[  167.310013][ T8859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  167.312092][ T8859] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  167.446874][ T8866] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1330'.
[  167.487413][ T8866] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  167.555087][ T8014] udevd[8014]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  167.631072][ T8887] fuse: Bad value for 'fd'
[  167.845609][ T8912] fuse: Bad value for 'rootmode'
[  168.299093][ T8929] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1342'.
[  168.328123][ T8929] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  168.403992][ T8014] udevd[8014]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  168.473828][ T8949] netlink: 'syz.1.1345': attribute type 10 has an invalid length.
[  168.486470][ T8949] device veth0_vlan left promiscuous mode
[  168.489348][ T8949] device veth0_vlan entered promiscuous mode
[  168.492685][ T8949] team0: Device veth0_vlan failed to register rx_handler
[  168.564561][ T8952] fuse: Bad value for 'fd'
[  168.811829][ T8976] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1351'.
[  169.243928][ T9018] fuse: Bad value for 'fd'
[  169.343266][ T9027] device syzkaller1 entered promiscuous mode
[  169.821589][ T9038] device sit0 entered promiscuous mode
[  169.833769][ T9038] netlink: 'syz.2.1363': attribute type 1 has an invalid length.
[  169.838124][ T9038] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1363'.
[  170.354593][ T9057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  170.356615][ T9057] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  170.399231][ T9062] fuse: Bad value for 'fd'
[  170.463401][ T9076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  170.464528][ T9076] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  170.468668][ T9076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  170.469340][ T9076] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  170.482415][ T9076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  170.482937][ T9076] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  170.484477][ T9076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  170.484757][ T9076] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  170.686009][ T9076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  170.687602][ T9076] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  172.319770][ T9110] fuse: Invalid rootmode
[  173.664780][ T9149] fuse: Invalid rootmode
[  173.885485][ T9160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  173.888988][ T9160] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  174.376895][ T9182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  174.380194][ T9182] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  175.288554][ T9207] ieee802154 phy0 wpan0: encryption failed: -22
[  176.292773][ T9241] ksmbd: Unknown IPC event: 4, ignore.
[  177.561591][ T9275] binder: BINDER_SET_CONTEXT_MGR already set
[  177.562698][ T9275] binder: 9274:9275 ioctl 4018620d 20000040 returned -16
[  177.580280][ T9275] binder: 9274:9275 got transaction to invalid handle, 1
[  177.581565][ T9275] binder: 9275:9274 cannot find target node
[  177.582951][ T9275] binder: 9274:9275 transaction async to 0:0 failed 76/29201/-22, size 0-0 line 3045
[  177.585559][ T5257] binder: undelivered TRANSACTION_ERROR: 29201
[  178.758059][ T9312] binder: tried to use weak ref as strong ref
[  178.759041][ T9312] binder: 9311:9312 Acquire 1 refcount change on invalid ref 0 ret -22
[  178.761623][ T9312] binder: 9311:9312 ioctl c0306201 200003c0 returned -14
[  178.763190][ T9312] binder: 9311:9312 got transaction to invalid handle, 1
[  178.765518][ T9312] binder: 9312:9311 cannot find target node
[  178.766434][ T9312] binder: 9311:9312 transaction call to 0:0 failed 79/29201/-22, size 112-24 line 3045
[  178.784046][ T4384] binder: undelivered TRANSACTION_ERROR: 29201
[  180.388296][ T9360] loop5: detected capacity change from 0 to 512
[  180.397059][ T9360] EXT4-fs: Ignoring removed oldalloc option
[  180.420710][ T9360] EXT4-fs (loop5): 1 truncate cleaned up
[  180.421637][ T9360] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  180.497295][ T6492] EXT4-fs (loop5): unmounting filesystem.
[  181.597292][ T9392] fuse: Unknown parameter '0x0000000000000003'
[  181.632352][ T9396] ieee802154 phy0 wpan0: encryption failed: -22
[  181.693630][ T9398] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[  182.095411][ T9424] fuse: Unknown parameter '0x0000000000000003'
[  182.307958][ T9440] loop5: detected capacity change from 0 to 4096
[  182.341481][ T9440] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  182.448619][ T6492] EXT4-fs (loop5): unmounting filesystem.
[  182.987862][ T9459] loop7: detected capacity change from 0 to 1024
[  183.004047][ T9463] fuse: Unknown parameter 'fd0x0000000000000003'
[  183.025155][ T9459] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  183.066075][ T6864] EXT4-fs (loop7): unmounting filesystem.
[  183.140057][ T9474] loop7: detected capacity change from 0 to 512
[  183.146017][ T9474] =======================================================
[  183.146017][ T9474] WARNING: The mand mount option has been deprecated and
[  183.146017][ T9474]          and is ignored by this kernel. Remove the mand
[  183.146017][ T9474]          option from the mount to silence this warning.
[  183.146017][ T9474] =======================================================
[  183.148830][ T9471] loop6: detected capacity change from 0 to 8192
[  184.071282][ T9495] fuse: Unknown parameter 'fd0x0000000000000003'
[  184.688247][ T9520] fuse: Unknown parameter 'fd0x0000000000000003'
[  184.737003][ T9524] loop5: detected capacity change from 0 to 128
[  184.742813][ T9524] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  184.773675][ T6492] EXT4-fs (loop5): unmounting filesystem.
[  185.087821][ T9541] binder: 9540:9541 IncRefs 0 refcount change on invalid ref 0 ret -22
[  185.131005][ T9541] binder: 9540:9541 got transaction to invalid handle, 1
[  185.132105][ T9541] binder: 9541:9540 cannot find target node
[  185.133021][ T9541] binder: 9540:9541 transaction async to 0:0 failed 82/29201/-22, size 0-0 line 3045
[  185.134976][   T22] binder: undelivered TRANSACTION_ERROR: 29201
[  185.756547][ T9570] binder: 9569:9570 IncRefs 0 refcount change on invalid ref 0 ret -22
[  185.762068][ T9570] binder: 9569:9570 got transaction to invalid handle, 1
[  185.764230][ T9570] binder: 9570:9569 cannot find target node
[  185.765189][ T9570] binder: 9569:9570 transaction async to 0:0 failed 85/29201/-22, size 0-0 line 3045
[  186.068299][   T22] binder: undelivered TRANSACTION_ERROR: 29201
[  186.174972][ T9579] device syzkaller1 entered promiscuous mode
[  186.271306][ T9584] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  186.280431][ T9584] device syzkaller0 entered promiscuous mode
[  186.281766][ T9584] tipc: Resetting bearer <eth:syzkaller0>
[  186.308453][ T9583] tipc: Resetting bearer <eth:syzkaller0>
[  186.552568][ T9606] binder: 9605:9606 IncRefs 0 refcount change on invalid ref 0 ret -22
[  187.370560][ T2061] ieee802154 phy0 wpan0: encryption failed: -22
[  188.735056][ T9634] binder: BINDER_SET_CONTEXT_MGR already set
[  188.735982][ T9634] binder: 9633:9634 ioctl 4018620d 20000040 returned -16
[  188.737370][ T9634] binder: 9633:9634 ioctl c0306201 200003c0 returned -14
[  188.738782][ T9634] binder: 9633:9634 got transaction to invalid handle, 1
[  188.740616][ T9634] binder: 9634:9633 cannot find target node
[  188.741480][ T9634] binder: 9633:9634 transaction call to 0:0 failed 89/29201/-22, size 112-24 line 3045
[  188.743341][  T112] binder: undelivered TRANSACTION_ERROR: 29201
[  189.672966][ T9644] binder: 9643:9644 IncRefs 0 refcount change on invalid ref 0 ret -22
[  194.685049][ T9670] loop6: detected capacity change from 0 to 128
[  194.698657][ T9670] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  194.727543][ T6815] EXT4-fs (loop6): unmounting filesystem.
[  197.513920][ T9583] tipc: Disabling bearer <eth:syzkaller0>
[  197.728393][ T9703] device syzkaller0 entered promiscuous mode
[  208.962347][ T9772] netlink: 124 bytes leftover after parsing attributes in process `syz.7.1618'.
[  209.024846][ T9780] loop6: detected capacity change from 0 to 128
[  209.096823][ T9783] loop6: detected capacity change from 0 to 4096
[  209.124996][ T9783] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  209.184790][    T9] Bluetooth: hci2: Frame reassembly failed (-84)
[  209.563411][ T9797] device syzkaller1 entered promiscuous mode
[  209.856400][ T9819] device syzkaller0 entered promiscuous mode
[  210.135380][ T9831] device syzkaller1 entered promiscuous mode
[  210.695846][ T6030] Bluetooth: hci6: Frame reassembly failed (-84)
[  211.086512][ T9855] loop5: detected capacity change from 0 to 512
[  211.088487][ T9855] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  211.150195][ T9855] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  211.170084][ T9862] device syzkaller1 entered promiscuous mode
[  211.184320][ T6492] EXT4-fs (loop5): unmounting filesystem.
[  211.209448][ T4330] Bluetooth: hci3: command 0x0405 tx timeout
[  211.209468][ T4339] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  211.210515][ T4330] Bluetooth: hci2: command 0x1003 tx timeout
[  211.235170][ T6815] EXT4-fs (loop6): unmounting filesystem.
[  211.842455][ T9894] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1663'.
[  211.905626][ T9898] device syzkaller1 entered promiscuous mode
[  212.378678][ T9924] device syzkaller1 entered promiscuous mode
[  212.596676][ T9943] binder: 9942:9943 ioctl 4018620d 0 returned -22
[  212.598317][ T9943] binder: 9942:9943 IncRefs 0 refcount change on invalid ref 0 ret -22
[  212.601344][ T9943] binder: 9942:9943 got transaction to invalid handle, 1
[  212.602410][ T9943] binder: 9943:9942 cannot find target node
[  212.603321][ T9943] binder: 9942:9943 transaction async to 0:0 failed 93/29201/-22, size 0-0 line 3045
[  212.605416][ T4370] binder: undelivered TRANSACTION_ERROR: 29201
[  212.729468][ T4339] Bluetooth: hci6: command 0x1003 tx timeout
[  212.730752][ T4324] Bluetooth: hci6: Opcode 0x1003 failed: -110
[  212.864127][ T9961] device syzkaller1 entered promiscuous mode
[  213.234321][ T9973] binder: BINDER_SET_CONTEXT_MGR already set
[  213.235319][ T9973] binder: 9972:9973 ioctl 4018620d 20000040 returned -16
[  213.236773][ T9973] binder: 9972:9973 got transaction to invalid handle, 1
[  213.237879][ T9973] binder: 9973:9972 cannot find target node
[  213.238677][ T9973] binder: 9972:9973 transaction async to 0:0 failed 95/29201/-22, size 0-0 line 3045
[  213.252387][   T22] binder: undelivered TRANSACTION_ERROR: 29201
[  213.331935][ T9984] capability: warning: `syz.6.1701' uses 32-bit capabilities (legacy support in use)
[  213.354607][ T9986] device syzkaller1 entered promiscuous mode
[  213.396917][ T9990] binder: 9989:9990 IncRefs 0 refcount change on invalid ref 0 ret -22
[  213.402561][ T9990] binder: 9989:9990 ioctl c0306201 200003c0 returned -14
[  213.404046][ T9990] binder: 9989:9990 got transaction to invalid handle, 1
[  213.405275][ T9990] binder: 9990:9989 cannot find target node
[  213.406170][ T9990] binder: 9989:9990 transaction call to 0:0 failed 98/29201/-22, size 112-24 line 3045
[  213.408025][   T22] binder: undelivered TRANSACTION_ERROR: 29201
[  213.572927][    T9] Bluetooth: hci2: Frame reassembly failed (-84)
[  213.668532][T10007] binder: BINDER_SET_CONTEXT_MGR already set
[  213.669782][T10007] binder: 10006:10007 ioctl 4018620d 20000040 returned -16
[  213.671840][T10007] binder: 10006:10007 got transaction to invalid handle, 1
[  213.673259][T10007] binder: 10007:10006 cannot find target node
[  213.781050][T10018] binder: 10017:10018 IncRefs 0 refcount change on invalid ref 0 ret -22
[  213.784167][T10018] binder: 10017:10018 ioctl c0306201 200003c0 returned -14
[  213.785539][T10018] binder: 10017:10018 got transaction to invalid handle, 1
[  214.154481][T10025] device syzkaller1 entered promiscuous mode
[  214.529132][T10042] binder: BINDER_SET_CONTEXT_MGR already set
[  214.530742][T10042] binder: 10041:10042 ioctl 4018620d 20000040 returned -16
[  214.532295][T10042] binder: 10041:10042 got transaction to invalid handle, 1
[  214.571941][T10046] binder: 10045:10046 IncRefs 0 refcount change on invalid ref 0 ret -22
[  214.578782][T10046] binder: 10045:10046 ioctl c0306201 200003c0 returned -14
[  214.625255][T10052] device syzkaller1 entered promiscuous mode
[  214.689970][T10054] loop5: detected capacity change from 0 to 1024
[  214.708060][T10054] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  214.718840][T10054] EXT4-fs (loop5): shut down requested (0)
[  214.814363][ T6492] EXT4-fs (loop5): unmounting filesystem.
[  214.977075][T10067] loop5: detected capacity change from 0 to 512
[  214.980455][T10067] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  214.994447][T10067] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  215.008460][ T6492] EXT4-fs (loop5): unmounting filesystem.
[  215.035698][T10071] binder: 10070:10071 ioctl c0306201 0 returned -14
[  215.124575][T10080] binder: 10079:10080 ioctl c0306201 200003c0 returned -14
[  215.302131][T10087] device syzkaller1 entered promiscuous mode
[  215.482200][T10091] device syzkaller0 entered promiscuous mode
[  215.609700][ T4333] Bluetooth: hci2: command 0x1003 tx timeout
[  215.612264][ T4324] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  215.720956][T10110] device syzkaller1 entered promiscuous mode
[  215.889298][T10128] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1761'.
[  216.061625][T10150] binder: 10149:10150 ioctl c0306201 200003c0 returned -14
[  216.068098][T10148] device syzkaller1 entered promiscuous mode
[  216.121591][T10154] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1774'.
[  216.273095][T10171] netlink: 212 bytes leftover after parsing attributes in process `syz.6.1782'.
[  216.283107][T10173] binder: 10172:10173 ioctl c0306201 200003c0 returned -14
[  216.324091][T10179] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1786'.
[  217.188233][T10207] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1797'.
[  217.212745][T10209] binder: 10208:10209 ioctl 4018620d 0 returned -22
[  217.215719][T10209] binder: 10208:10209 ioctl c0306201 200003c0 returned -14
[  217.347977][T10223] device dummy0 entered promiscuous mode
[  217.359362][T10223] device dummy0 left promiscuous mode
[  217.452269][T10230] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1808'.
[  217.498989][T10235] binder: 10234:10235 ioctl 4018620d 0 returned -22
[  217.504067][T10235] binder: 10234:10235 ioctl c0306201 200003c0 returned -14
[  217.566982][T10242] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1814'.
[  217.605068][T10248] device syzkaller1 entered promiscuous mode
[  217.752528][T10259] loop1: detected capacity change from 0 to 1024
[  217.758790][T10259] EXT4-fs: Ignoring removed bh option
[  217.759865][T10259] EXT4-fs: Ignoring removed nobh option
[  217.761275][T10259] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  217.793184][T10268] binder: 10266:10268 ioctl 4018620d 0 returned -22
[  217.795139][T10268] binder_user_error: 14 callbacks suppressed
[  217.795145][T10268] binder: 10266:10268 IncRefs 0 refcount change on invalid ref 0 ret -22
[  217.798889][T10268] binder: 10266:10268 ioctl c0306201 200003c0 returned -14
[  217.801010][T10268] binder: 10266:10268 got transaction to invalid handle, 1
[  217.802074][T10268] binder_debug: 35 callbacks suppressed
[  217.802087][T10268] binder: 10268:10266 cannot find target node
[  217.803638][T10268] binder: 10266:10268 transaction call to 0:0 failed 138/29201/-22, size 112-24 line 3045
[  217.805297][  T112] binder: undelivered TRANSACTION_ERROR: 29201
[  217.814123][T10259] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  217.842197][ T4323] EXT4-fs (loop1): unmounting filesystem.
[  217.901961][T10274] loop1: detected capacity change from 0 to 8192
[  218.034551][T10287] device syzkaller1 entered promiscuous mode
[  218.263372][T10297] binder: BINDER_SET_CONTEXT_MGR already set
[  218.264333][T10297] binder: 10296:10297 ioctl 4018620d 20000040 returned -16
[  218.409582][ T4333] Bluetooth: hci2: command 0x1003 tx timeout
[  218.411558][ T4324] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  218.547985][T10313] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1840'.
[  218.549512][T10313] openvswitch: netlink: Port -3 exceeds max allowable 65535
[  218.594455][T10318] device syzkaller1 entered promiscuous mode
[  218.783326][T10324] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1843'.
[  218.881530][T10329] binder: BINDER_SET_CONTEXT_MGR already set
[  218.882814][T10329] binder: 10327:10329 ioctl 4018620d 20000040 returned -16
[  219.312407][T10343] loop5: detected capacity change from 0 to 256
[  219.342884][T10343] FAT-fs (loop5): Directory bread(block 64) failed
[  219.344248][T10343] FAT-fs (loop5): Directory bread(block 65) failed
[  219.352049][T10343] FAT-fs (loop5): Directory bread(block 66) failed
[  219.353241][T10343] FAT-fs (loop5): Directory bread(block 67) failed
[  219.354320][T10343] FAT-fs (loop5): Directory bread(block 68) failed
[  219.355347][T10343] FAT-fs (loop5): Directory bread(block 69) failed
[  219.356504][T10343] FAT-fs (loop5): Directory bread(block 70) failed
[  219.357579][T10343] FAT-fs (loop5): Directory bread(block 71) failed
[  219.366177][T10343] FAT-fs (loop5): Directory bread(block 72) failed
[  219.367241][T10343] FAT-fs (loop5): Directory bread(block 73) failed
[  219.417988][T10349] device syzkaller1 entered promiscuous mode
[  219.538763][T10358] binder: BINDER_SET_CONTEXT_MGR already set
[  219.539817][T10358] binder: 10357:10358 ioctl 4018620d 20000040 returned -16
[  219.590270][T10362] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1859'.
[  219.983597][T10385] binder: 10384:10385 ioctl c0306201 0 returned -14
[  219.986003][T10385] binder: 10384:10385 ioctl c0306201 200003c0 returned -14
[  219.987363][T10385] binder: 10384:10385 got transaction to invalid handle, 1
[  219.988445][T10385] binder: 10385:10384 cannot find target node
[  219.989731][T10385] binder: 10384:10385 transaction call to 0:0 failed 145/29201/-22, size 112-24 line 3045
[  219.991841][   T22] binder: undelivered TRANSACTION_ERROR: 29201
[  220.034594][T10389] device syzkaller1 entered promiscuous mode
[  220.798186][T10419] device syzkaller1 entered promiscuous mode
[  221.689506][ T4333] Bluetooth: hci2: command 0x1003 tx timeout
[  221.689529][ T4324] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  221.754472][T10445] loop6: detected capacity change from 0 to 512
[  221.758469][T10445] EXT4-fs: Ignoring removed nobh option
[  221.762823][T10445] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  221.768144][T10445] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  221.784529][T10445] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  221.789172][T10445] EXT4-fs (loop6): 1 truncate cleaned up
[  221.792519][T10445] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  221.863257][ T6815] EXT4-fs (loop6): unmounting filesystem.
[  222.020105][T10457] device syzkaller1 entered promiscuous mode
[  222.105925][   T27] audit: type=1326 audit(222.090:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10460 comm="syz.7.1899" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff86b78fa8 code=0x0
[  222.951678][T10476] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  223.143279][T10490] device syzkaller1 entered promiscuous mode
[  223.162137][ T5351] Bluetooth: hci2: Frame reassembly failed (-84)
[  223.245858][T10501] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  223.742751][T10524] __nla_validate_parse: 1 callbacks suppressed
[  223.742764][T10524] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1924'.
[  223.744930][T10524] openvswitch: netlink: Message has 8 unknown bytes.
[  223.815862][T10528] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  223.874392][T10532] device syzkaller1 entered promiscuous mode
[  224.066142][T10546] loop1: detected capacity change from 0 to 1024
[  224.067691][T10546] EXT4-fs: Ignoring removed bh option
[  224.068573][T10546] EXT4-fs: Ignoring removed nobh option
[  224.070717][T10546] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  224.095618][T10546] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  224.121352][ T4323] EXT4-fs (loop1): unmounting filesystem.
[  224.260531][T10565] device syzkaller1 entered promiscuous mode
[  224.400775][T10579] loop2: detected capacity change from 0 to 1024
[  224.402232][T10579] EXT4-fs: Ignoring removed bh option
[  224.405317][T10579] EXT4-fs: Ignoring removed nobh option
[  224.408112][T10579] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  224.428945][T10579] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  224.486993][ T4322] EXT4-fs (loop2): unmounting filesystem.
[  224.514932][T10588] loop2: detected capacity change from 0 to 2048
[  224.524099][T10588] EXT4-fs: Ignoring removed orlov option
[  224.525233][T10588] EXT4-fs: Ignoring removed oldalloc option
[  224.550678][T10588] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  224.572035][ T4322] EXT4-fs (loop2): unmounting filesystem.
[  224.737155][T10610] device syzkaller1 entered promiscuous mode
[  224.768677][T10614] device syzkaller0 entered promiscuous mode
[  224.923543][T10618] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1960'.
[  225.136991][T10642] device syzkaller1 entered promiscuous mode
[  225.209562][ T4339] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  225.209614][ T4324] Bluetooth: hci2: command 0x1003 tx timeout
[  225.329999][T10647] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1971'.
[  225.331451][T10647] openvswitch: netlink: Message has 8 unknown bytes.
[  225.356136][T10649] device syzkaller0 entered promiscuous mode
[  225.436330][T10651] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1974'.
[  225.509106][T10661] binder: 10660:10661 ioctl c0306201 0 returned -14
[  225.510947][T10661] binder: 10660:10661 got transaction to invalid handle, 1
[  225.512103][T10661] binder: 10661:10660 cannot find target node
[  225.513035][T10661] binder: 10660:10661 transaction async to 0:0 failed 149/29201/-22, size 0-0 line 3045
[  225.515119][    T7] binder: undelivered TRANSACTION_ERROR: 29201
[  225.636598][T10668] device syzkaller1 entered promiscuous mode
[  225.815054][T10684] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1987'.
[  226.013493][T10700] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  226.175462][T10722] loop2: detected capacity change from 0 to 4096
[  226.205859][T10722] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  226.239276][ T4322] EXT4-fs (loop2): unmounting filesystem.
[  226.346085][T10739] loop5: detected capacity change from 0 to 128
[  226.353235][T10737] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  226.385111][T10741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2009'.
[  226.535157][T10762] device syzkaller0 entered promiscuous mode
[  226.662274][T10768] netlink: 'syz.5.2020': attribute type 1 has an invalid length.
[  226.663438][T10768] netlink: 'syz.5.2020': attribute type 2 has an invalid length.
[  226.674736][T10773] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  226.720636][T10776] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2023'.
[  226.754772][T10778] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2024'.
[  226.828882][T10790] loop7: detected capacity change from 0 to 512
[  226.833548][T10790] EXT4-fs (loop7): external journal device major/minor numbers have changed
[  226.834958][T10790] EXT4-fs (loop7): filesystem has both journal inode and journal device!
[  226.872500][ T9868] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  226.912461][T10804] netlink: 'syz.7.2033': attribute type 11 has an invalid length.
[  226.913974][T10804] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2033'.
[  227.010635][T10810] device syzkaller0 entered promiscuous mode
[  227.685663][T10833] loop5: detected capacity change from 0 to 1024
[  227.704985][T10833] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  227.725385][ T6492] EXT4-fs (loop5): unmounting filesystem.
[  227.778395][T10840] ieee802154 phy0 wpan0: encryption failed: -22
[  228.675209][T10852] loop5: detected capacity change from 0 to 1024
[  228.679825][T10852] EXT4-fs: Ignoring removed bh option
[  228.680740][T10852] EXT4-fs: Ignoring removed nobh option
[  228.682298][T10852] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  228.695436][T10852] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  228.712096][ T6492] EXT4-fs (loop5): unmounting filesystem.
[  228.728330][T10856] loop5: detected capacity change from 0 to 128
[  229.006403][T10865] loop7: detected capacity change from 0 to 1024
[  229.034332][T10865] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  229.047178][ T6864] EXT4-fs (loop7): unmounting filesystem.
[  229.074530][T10869] device syzkaller0 entered promiscuous mode
[  229.261996][T10871] device syzkaller0 entered promiscuous mode
[  229.443185][T10879] binder: 10878:10879 ioctl 4018620d 0 returned -22
[  229.444658][T10879] binder: tried to use weak ref as strong ref
[  229.445582][T10879] binder: 10878:10879 Acquire 1 refcount change on invalid ref 0 ret -22
[  229.446962][T10879] binder: 10878:10879 ioctl c0306201 200003c0 returned -14
[  229.448182][T10879] binder: 10878:10879 got transaction to invalid handle, 1
[  229.449272][T10879] binder: 10879:10878 cannot find target node
[  229.450605][T10879] binder: 10878:10879 transaction call to 0:0 failed 152/29201/-22, size 112-24 line 3045
[  229.452725][   T22] binder: undelivered TRANSACTION_ERROR: 29201
[  229.476012][T10881] loop7: detected capacity change from 0 to 1024
[  229.477378][T10881] EXT4-fs: Ignoring removed bh option
[  229.478237][T10881] EXT4-fs: Ignoring removed nobh option
[  229.480679][T10881] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  229.503790][T10881] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  229.523401][ T6864] EXT4-fs (loop7): unmounting filesystem.
[  229.542650][T10885] loop7: detected capacity change from 0 to 128
[  229.758874][T10891] loop5: detected capacity change from 0 to 1024
[  229.777744][T10891] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  229.790181][ T6492] EXT4-fs (loop5): unmounting filesystem.
[  229.814470][T10895] device syzkaller0 entered promiscuous mode
[  230.020378][T10898] device syzkaller0 entered promiscuous mode
[  230.178494][T10906] binder: 10905:10906 ioctl 4018620d 0 returned -22
[  230.181683][T10906] binder: tried to use weak ref as strong ref
[  230.182649][T10906] binder: 10905:10906 Acquire 1 refcount change on invalid ref 0 ret -22
[  230.183963][T10906] binder: 10905:10906 ioctl c0306201 200003c0 returned -14
[  230.185409][T10906] binder: 10905:10906 got transaction to invalid handle, 1
[  230.186531][T10906] binder: 10906:10905 cannot find target node
[  230.187501][T10906] binder: 10905:10906 transaction call to 0:0 failed 155/29201/-22, size 112-24 line 3045
[  230.189505][ T4370] binder: undelivered TRANSACTION_ERROR: 29201
[  230.228072][T10813] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  230.284216][T10914] loop1: detected capacity change from 0 to 128
[  230.312055][T10918] loop7: detected capacity change from 0 to 1024
[  230.328362][T10920] device syzkaller0 entered promiscuous mode
[  230.348002][T10918] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  230.373044][ T6864] EXT4-fs (loop7): unmounting filesystem.
[  230.405157][T10927] device syzkaller0 entered promiscuous mode
[  230.490075][T10937] binder: 10936:10937 ioctl c0306201 0 returned -14
[  230.491451][T10937] binder: 10936:10937 got transaction to invalid handle, 1
[  230.492639][T10937] binder: 10937:10936 cannot find target node
[  230.684392][T10957] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  230.703474][ T6815] EXT4-fs (loop6): unmounting filesystem.
[  230.766517][T10969] binder: 10968:10969 ioctl c0306201 0 returned -14
[  230.768202][T10969] binder: 10968:10969 got transaction to invalid handle, 1
[  230.769351][T10969] binder_debug: 2 callbacks suppressed
[  230.769363][T10969] binder: 10969:10968 cannot find target node
[  230.771495][T10969] binder: 10968:10969 transaction call to 0:0 failed 163/29201/-22, size 112-24 line 3045
[  230.773542][    T7] binder: undelivered TRANSACTION_ERROR: 29201
[  230.796885][T10971] device syzkaller0 entered promiscuous mode
[  231.241450][T10989] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  231.274828][ T4322] EXT4-fs (loop2): unmounting filesystem.
[  231.323160][T10996] binder: 10995:10996 ioctl c0306201 0 returned -14
[  231.324836][T10996] binder: 10995:10996 got transaction to invalid handle, 1
[  231.326306][T10996] binder: 10996:10995 cannot find target node
[  231.327515][T10996] binder: 10995:10996 transaction call to 0:0 failed 167/29201/-22, size 112-24 line 3045
[  231.330559][    T7] binder: undelivered TRANSACTION_ERROR: 29201
[  232.248118][T11002] device syzkaller0 entered promiscuous mode
[  232.541082][T11015] set_capacity_and_notify: 2 callbacks suppressed
[  232.541092][T11015] loop2: detected capacity change from 0 to 1024
[  232.561296][T11015] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  232.584899][ T4322] EXT4-fs (loop2): unmounting filesystem.
[  233.324145][T11024] binder: 11023:11024 got transaction to invalid handle, 1
[  233.325303][T11024] binder: 11024:11023 cannot find target node
[  233.326223][T11024] binder: 11023:11024 transaction call to 0:0 failed 171/29201/-22, size 112-24 line 3045
[  233.328045][    T7] binder: undelivered TRANSACTION_ERROR: 29201
[  233.351937][T11026] netlink: 124 bytes leftover after parsing attributes in process `syz.6.2118'.
[  233.377698][T11028] device syzkaller0 entered promiscuous mode
[  233.511641][T11030] device syzkaller0 entered promiscuous mode
[  233.601125][T10950] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  233.698620][T11042] loop6: detected capacity change from 0 to 1024
[  233.726675][T11048] binder: 11047:11048 got transaction to invalid handle, 1
[  233.727883][T11048] binder: 11048:11047 cannot find target node
[  233.737180][T11042] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  233.751307][T11054] device syzkaller0 entered promiscuous mode
[  233.770731][ T6815] EXT4-fs (loop6): unmounting filesystem.
[  233.833768][T11064] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  233.903851][T11073] device syzkaller0 entered promiscuous mode
[  234.059961][T11082] binder: 11081:11082 got transaction to invalid handle, 1
[  234.067451][T11084] loop5: detected capacity change from 0 to 1024
[  234.081613][T11084] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  234.084920][T11084] EXT4-fs (loop5): shut down requested (0)
[  234.179443][ T6492] EXT4-fs (loop5): unmounting filesystem.
[  234.254807][T11098] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  234.534815][T11104] device syzkaller0 entered promiscuous mode
[  234.582478][T11108] loop2: detected capacity change from 0 to 128
[  234.615826][T11110] device syzkaller0 entered promiscuous mode
[  234.757588][T11114] binder: 11113:11114 got transaction to invalid handle, 1
[  235.530100][ T4324] Bluetooth: hci4: command 0x0406 tx timeout
[  235.982470][T11141] device syzkaller0 entered promiscuous mode
[  236.108219][T11143] binder: 11142:11143 got transaction to invalid handle, 1
[  236.109491][T11143] binder_debug: 8 callbacks suppressed
[  236.109501][T11143] binder: 11143:11142 cannot find target node
[  236.111271][T11143] binder: 11142:11143 transaction call to 0:0 failed 187/29201/-22, size 112-24 line 3045
[  236.113025][  T112] binder: undelivered TRANSACTION_ERROR: 29201
[  236.133226][T11145] loop2: detected capacity change from 0 to 128
[  236.136204][T11145] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  236.214485][ T4322] EXT4-fs (loop2): unmounting filesystem.
[  236.381104][T11153] loop2: detected capacity change from 0 to 1024
[  236.382568][T11153] EXT4-fs: Ignoring removed orlov option
[  236.392999][T11153] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  236.405153][ T4322] EXT4-fs (loop2): unmounting filesystem.
[  236.863782][T11067] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  236.995984][T11174] device syzkaller0 entered promiscuous mode
[  237.227504][T11193] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2181'.
[  238.969546][ T4324] Bluetooth: hci2: command 0x1003 tx timeout
[  238.969583][ T4339] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  240.216695][T11191] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  240.298995][T11224] binder: 11223:11224 tried to acquire reference to desc 0, got 1 instead
[  240.302722][T11224] binder: 11223:11224 ioctl c0306201 200003c0 returned -14
[  240.304064][T11224] binder: 11223:11224 ioctl c0306201 0 returned -14
[  247.995372][T11217] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2190'.
[  248.068009][T11249] loop1: detected capacity change from 0 to 512
[  248.104682][T11261] binder: 11260:11261 tried to acquire reference to desc 0, got 1 instead
[  248.106132][T11261] binder: 11260:11261 ioctl c0306201 200003c0 returned -14
[  248.107452][T11261] binder: 11260:11261 ioctl c0306201 0 returned -14
[  248.128619][T11263] loop2: detected capacity change from 0 to 1024
[  248.142090][T11249] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  248.146956][T11263] EXT4-fs: Ignoring removed oldalloc option
[  248.147908][T11263] EXT4-fs: Ignoring removed bh option
[  248.180923][T11263] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  248.181080][ T4323] EXT4-fs (loop1): unmounting filesystem.
[  248.196616][T11270] netlink: 'syz.5.2207': attribute type 13 has an invalid length.
[  248.201805][T11268] loop6: detected capacity change from 0 to 1024
[  248.203238][T11268] EXT4-fs: Ignoring removed oldalloc option
[  248.214076][T11263] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  248.219287][T11268] EXT4-fs: Ignoring removed bh option
[  248.222636][T11268] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  248.255291][T11268] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  248.283298][T11282] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2210'.
[  248.293625][ T4322] EXT4-fs (loop2): unmounting filesystem.
[  248.375280][T11291] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:3852: comm syz.6.2206: Allocating blocks 497-513 which overlap fs metadata
[  248.386638][T11285] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2208'.
[  248.387987][T11285] openvswitch: netlink: Message has 8 unknown bytes.
[  248.388622][T11291] EXT4-fs (loop6): pa 00000000d5ad7b99: logic 256, phys. 385, len 8
[  248.390307][T11291] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:4892: group 0, free 0, pa_free 1
[  248.457968][T11300] binder: 11299:11300 tried to acquire reference to desc 0, got 1 instead
[  248.466430][T11300] binder: 11299:11300 ioctl c0306201 200003c0 returned -14
[  248.603682][ T6815] EXT4-fs (loop6): unmounting filesystem.
[  248.810859][ T2061] ieee802154 phy0 wpan0: encryption failed: -22
[  250.729574][ T4339] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  250.729889][ T4333] Bluetooth: hci2: command 0x1003 tx timeout
[  251.566625][T11306] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  259.535257][T11297] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  259.553989][T11321] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2222'.
[  259.612723][T11335] binder: 11334:11335 tried to acquire reference to desc 0, got 1 instead
[  259.614128][T11335] binder: 11334:11335 ioctl c0306201 200003c0 returned -14
[  259.708746][T11350] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2227'.
[  259.710861][T11350] openvswitch: netlink: Message has 8 unknown bytes.
[  259.730580][T11353] loop6: detected capacity change from 0 to 512
[  259.752712][T11351] vhci_hcd: invalid port number 254
[  259.765986][T11353] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  259.782255][T11359] loop5: detected capacity change from 0 to 1024
[  259.785717][T11359] EXT4-fs: Ignoring removed bh option
[  259.786714][T11359] EXT4-fs: Ignoring removed nobh option
[  259.788846][T11359] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  259.886854][T11359] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  259.912855][ T6492] EXT4-fs (loop5): unmounting filesystem.
[  260.270726][T11372] tipc: Started in network mode
[  260.271677][T11372] tipc: Node identity f2938b545911, cluster identity 4711
[  260.272835][T11372] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  260.274765][T11374] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2241'.
[  260.280390][T11370] tipc: Disabling bearer <eth:syzkaller0>
[  260.337889][T11379] binder: 11378:11379 tried to acquire reference to desc 0, got 1 instead
[  260.341598][T11379] binder: 11378:11379 ioctl c0306201 200003c0 returned -14
[  260.345622][T11382] loop1: detected capacity change from 0 to 1024
[  260.358623][T11382] EXT4-fs: Ignoring removed oldalloc option
[  260.362948][T11382] EXT4-fs: Ignoring removed bh option
[  260.367456][T11382] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  260.394793][T11382] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  260.427254][ T4323] EXT4-fs (loop1): unmounting filesystem.
[  260.464356][T11385] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2246'.
[  260.466050][T11385] openvswitch: netlink: Message has 8 unknown bytes.
[  260.467969][T11396] loop1: detected capacity change from 0 to 1024
[  260.475915][T11396] EXT4-fs: Ignoring removed bh option
[  260.483209][T11396] EXT4-fs: Ignoring removed nobh option
[  260.491386][T11396] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  260.507943][T11396] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  260.540000][T11401] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2252'.
[  260.548565][ T4323] EXT4-fs (loop1): unmounting filesystem.
[  260.595215][T11408] binder: 11407:11408 tried to acquire reference to desc 0, got 1 instead
[  260.596421][T11408] binder: 11407:11408 ioctl c0306201 200003c0 returned -14
[  260.616087][ T6815] EXT4-fs (loop6): unmounting filesystem.
[  260.631245][T11406] tipc: Started in network mode
[  260.632064][T11406] tipc: Node identity 62f60d5b36cf, cluster identity 4711
[  260.633167][T11406] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  260.644434][T11405] tipc: Disabling bearer <eth:syzkaller0>
[  260.657107][T11414] loop7: detected capacity change from 0 to 1024
[  260.707737][T11414] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  260.717397][T11427] loop1: detected capacity change from 0 to 1024
[  260.718778][T11427] EXT4-fs: Ignoring removed oldalloc option
[  260.740793][T11414] EXT4-fs error (device loop7): ext4_read_inline_dir:1611: inode #12: block 7: comm syz.7.2258: path /287/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=40, inode=14, rec_len=8, size=80 fake=0
[  260.760693][T11427] EXT4-fs: Ignoring removed bh option
[  260.762519][T11427] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  260.765567][T11430] loop5: detected capacity change from 0 to 1024
[  260.766981][T11430] EXT4-fs: Ignoring removed bh option
[  260.767873][T11430] EXT4-fs: Ignoring removed nobh option
[  260.769047][T11430] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  260.817397][T11427] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  260.817417][T11430] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  260.821083][ T6864] EXT4-fs (loop7): unmounting filesystem.
[  260.863258][T11426] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2263'.
[  260.864615][T11426] openvswitch: netlink: Message has 8 unknown bytes.
[  260.865669][T11443] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2267'.
[  260.868352][ T6492] EXT4-fs (loop5): unmounting filesystem.
[  260.952533][ T4323] EXT4-fs (loop1): unmounting filesystem.
[  261.003896][T11454] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  261.006414][T11453] tipc: Disabling bearer <eth:syzkaller0>
[  261.021443][T11456] binder: 11455:11456 tried to acquire reference to desc 0, got 1 instead
[  261.022874][T11456] binder: 11455:11456 ioctl c0306201 200003c0 returned -14
[  261.077073][T11465] loop6: detected capacity change from 0 to 1024
[  261.078558][T11465] EXT4-fs: Ignoring removed bh option
[  261.081502][T11466] loop1: detected capacity change from 0 to 1024
[  261.089111][T11465] EXT4-fs: Ignoring removed nobh option
[  261.092488][T11472] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2281'.
[  261.092728][T11465] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  261.119665][T11466] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  261.142414][T11466] EXT4-fs error (device loop1): ext4_read_inline_dir:1611: inode #12: block 7: comm syz.1.2277: path /430/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=40, inode=14, rec_len=8, size=80 fake=0
[  261.148342][T11465] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  261.213629][ T6815] EXT4-fs (loop6): unmounting filesystem.
[  261.268661][T11480] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2284'.
[  261.270316][T11480] openvswitch: netlink: Message has 8 unknown bytes.
[  261.287517][ T4323] EXT4-fs (loop1): unmounting filesystem.
[  261.326068][T11486] binder: 11485:11486 tried to acquire reference to desc 0, got 1 instead
[  261.327457][T11486] binder: 11485:11486 ioctl c0306201 200003c0 returned -14
[  261.457613][T11506] loop1: detected capacity change from 0 to 1024
[  261.462424][T11506] EXT4-fs: Ignoring removed bh option
[  261.463360][T11506] EXT4-fs: Ignoring removed nobh option
[  261.465619][T11506] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  261.467942][T11502] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2294'.
[  261.469498][T11507] tipc: Started in network mode
[  261.470342][T11507] tipc: Node identity 62b136870e4a, cluster identity 4711
[  261.471475][T11507] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  261.480729][T11499] tipc: Disabling bearer <eth:syzkaller0>
[  261.487753][T11506] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  261.559962][ T4323] EXT4-fs (loop1): unmounting filesystem.
[  261.598147][T11515] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  261.603945][T11515] EXT4-fs error (device loop5): ext4_read_inline_dir:1611: inode #12: block 7: comm syz.5.2298: path /369/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=40, inode=14, rec_len=8, size=80 fake=0
[  261.647092][ T6492] EXT4-fs (loop5): unmounting filesystem.
[  261.697181][T11528] binder: 11527:11528 tried to acquire reference to desc 0, got 1 instead
[  261.709546][T11528] binder: 11527:11528 ioctl c0306201 200003c0 returned -14
[  261.711143][T11528] binder: 11527:11528 got transaction with invalid data ptr
[  261.712300][T11528] binder: 11527:11528 transaction call to 11527:0 failed 224/29201/-14, size 0-24 line 3333
[  261.722136][ T4445] binder: undelivered TRANSACTION_ERROR: 29201
[  261.759813][T11526] openvswitch: netlink: Message has 8 unknown bytes.
[  261.857243][T11543] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  261.869480][T11545] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  261.874676][T11540] tipc: Disabling bearer <eth:syzkaller0>
[  261.888695][ T6492] EXT4-fs (loop5): unmounting filesystem.
[  261.894365][T11553] EXT4-fs: Ignoring removed bh option
[  261.895165][T11553] EXT4-fs: Ignoring removed nobh option
[  261.896258][T11553] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  261.911761][T11553] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  261.934434][ T4323] EXT4-fs (loop1): unmounting filesystem.
[  262.001804][T11563] binder: 11562:11563 tried to acquire reference to desc 0, got 1 instead
[  262.003136][T11563] binder: 11562:11563 ioctl c0306201 200003c0 returned -14
[  262.013111][T11563] binder: 11562:11563 got transaction with invalid data ptr
[  262.014231][T11563] binder: 11562:11563 transaction call to 11562:0 failed 229/29201/-14, size 0-24 line 3333
[  262.020267][   T22] binder: undelivered TRANSACTION_ERROR: 29201
[  262.027277][T11570] openvswitch: netlink: Message has 8 unknown bytes.
[  262.071840][T11576] EXT4-fs: Ignoring removed oldalloc option
[  262.072801][T11576] EXT4-fs: Ignoring removed bh option
[  262.075915][T11576] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  262.133933][T11576] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  262.175231][T11581] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  262.199020][ T4322] EXT4-fs (loop2): unmounting filesystem.
[  262.246111][ T4323] EXT4-fs (loop1): unmounting filesystem.
[  262.355242][T11596] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  262.360829][T11595] tipc: Disabling bearer <eth:syzkaller0>
[  262.381449][T11603] openvswitch: netlink: Message has 8 unknown bytes.
[  262.392410][T11604] binder: 11601:11604 tried to acquire reference to desc 0, got 1 instead
[  262.396028][T11604] binder: 11601:11604 ioctl c0306201 200003c0 returned -14
[  262.397622][T11604] binder: 11601:11604 transaction call to 11601:0 failed 234/29201/-14, size 0-24 line 3333
[  262.404656][   T22] binder: undelivered TRANSACTION_ERROR: 29201
[  262.445389][T11608] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  262.446584][T11611] EXT4-fs: Ignoring removed oldalloc option
[  262.449003][T11611] EXT4-fs: Ignoring removed bh option
[  262.454418][T11611] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  262.461607][T11608] EXT4-fs error (device loop6): ext4_read_inline_dir:1611: inode #12: block 7: comm syz.6.2337: path /290/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=40, inode=14, rec_len=8, size=80 fake=0
[  262.492399][T11611] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  262.501605][ T6815] EXT4-fs (loop6): unmounting filesystem.
[  262.528593][ T4323] EXT4-fs (loop1): unmounting filesystem.
[  262.615374][T11623] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  262.646956][ T4323] EXT4-fs (loop1): unmounting filesystem.
[  262.667481][T11635] binder: 11634:11635 ioctl c0306201 200003c0 returned -14
[  262.670782][   T22] binder: release 11634:11635 transaction 239 out, still active
[  262.672153][   T22] binder: undelivered TRANSACTION_COMPLETE
[  262.688197][   T22] binder: send failed reply for transaction 239, target dead
[  262.705944][T11637] openvswitch: netlink: Message has 8 unknown bytes.
[  262.743900][T11639] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  262.756896][T11638] tipc: Disabling bearer <eth:syzkaller0>
[  262.794147][T11643] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  262.808885][ T4323] EXT4-fs (loop1): unmounting filesystem.
[  262.857479][T11648] EXT4-fs: Ignoring removed oldalloc option
[  262.861329][T11648] EXT4-fs: Ignoring removed bh option
[  262.866534][T11648] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  262.895587][T11574] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  262.896654][T11648] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  262.927891][ T4323] EXT4-fs (loop1): unmounting filesystem.
[  262.933225][T11656] EXT4-fs: Ignoring removed bh option
[  262.937563][T11656] EXT4-fs: Ignoring removed nobh option
[  262.945405][T11656] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  263.012795][T11656] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  263.049243][T11668] binder: 11667:11668 ioctl c0306201 200003c0 returned -14
[  263.055548][ T6864] EXT4-fs (loop7): unmounting filesystem.
[  263.061274][ T1514] binder: release 11667:11668 transaction 244 out, still active
[  263.105970][T11678] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  263.117274][T11677] tipc: Disabling bearer <eth:syzkaller0>
[  263.121052][T11681] EXT4-fs: Ignoring removed oldalloc option
[  263.125304][T11681] EXT4-fs: Ignoring removed bh option
[  263.126489][T11681] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  263.142184][T11682] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  263.155810][T11681] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  263.159332][ T4322] EXT4-fs (loop2): unmounting filesystem.
[  263.220834][ T6815] EXT4-fs (loop6): unmounting filesystem.
[  263.325316][T11706] binder: 11703:11706 ioctl c0306201 200003c0 returned -14
[  263.331314][T11705] EXT4-fs: Ignoring removed bh option
[  263.333422][T11705] EXT4-fs: Ignoring removed nobh option
[  263.335622][T11701] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  263.353072][T11705] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  263.397267][T11705] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  263.430825][T11714] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  263.447160][ T6815] EXT4-fs (loop6): unmounting filesystem.
[  263.448812][T11713] tipc: Disabling bearer <eth:syzkaller0>
[  263.472760][ T6864] EXT4-fs (loop7): unmounting filesystem.
[  263.492833][T11719] EXT4-fs: Ignoring removed oldalloc option
[  263.493931][T11719] EXT4-fs: Ignoring removed bh option
[  263.500174][T11719] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  263.521066][T11719] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  263.567179][ T6815] EXT4-fs (loop6): unmounting filesystem.
[  263.584440][T11722] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  263.645034][ T6864] EXT4-fs (loop7): unmounting filesystem.
[  263.740292][T11747] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  263.743123][T11745] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  263.760852][T11746] tipc: Disabling bearer <eth:syzkaller0>
[  263.792704][T11751] EXT4-fs: Ignoring removed bh option
[  263.793567][T11751] EXT4-fs: Ignoring removed nobh option
[  263.795317][T11751] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  263.797096][ T4322] EXT4-fs (loop2): unmounting filesystem.
[  263.825588][T11751] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  263.861418][ T6815] EXT4-fs (loop6): unmounting filesystem.
[  263.871320][T11761] EXT4-fs: Ignoring removed oldalloc option
[  263.887335][T11761] EXT4-fs: Ignoring removed bh option
[  263.888999][T11674] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  263.915076][T11761] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  264.040675][T11781] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  264.048698][T11780] tipc: Disabling bearer <eth:syzkaller0>
[  264.056589][T11786] EXT4-fs: Ignoring removed bh option
[  264.068225][T11786] EXT4-fs: Ignoring removed nobh option
[  264.077183][T11786] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  264.388056][T11824] EXT4-fs: Ignoring removed bh option
[  264.388897][T11824] EXT4-fs: Ignoring removed nobh option
[  264.394371][T11823] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  264.400086][T11824] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  264.405938][T11820] tipc: Disabling bearer <eth:syzkaller0>
[  264.705330][T11845] __nla_validate_parse: 16 callbacks suppressed
[  264.705343][T11845] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2431'.
[  264.747730][T11849] set_capacity_and_notify: 25 callbacks suppressed
[  264.747741][T11849] loop5: detected capacity change from 0 to 1024
[  264.755045][T11849] EXT4-fs: Ignoring removed bh option
[  264.759979][T11849] EXT4-fs: Ignoring removed nobh option
[  264.762360][T11849] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  264.882522][T11857] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  264.912858][T11865] loop1: detected capacity change from 0 to 1024
[  265.021816][T11871] loop6: detected capacity change from 0 to 1024
[  265.047697][T11804] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  265.056407][T11878] netlink: 'syz.1.2443': attribute type 1 has an invalid length.
[  265.063246][T11878] 8021q: adding VLAN 0 to HW filter on device bond1
[  265.078847][T11878] bond1: (slave geneve2): making interface the new active one
[  265.081434][T11878] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  265.082839][ T7553] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  265.121653][T11884] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2444'.
[  265.152464][T11886] loop7: detected capacity change from 0 to 1024
[  265.153909][T11886] EXT4-fs: Ignoring removed bh option
[  265.154795][T11886] EXT4-fs: Ignoring removed nobh option
[  265.160256][T11886] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  265.260643][T11898] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  265.337323][T11907] loop1: detected capacity change from 0 to 1024
[  265.408237][T11918] loop7: detected capacity change from 0 to 1024
[  265.526567][T11924] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2459'.
[  265.591122][T11930] loop1: detected capacity change from 0 to 1024
[  265.595023][T11930] EXT4-fs: Ignoring removed bh option
[  265.597545][T11930] EXT4-fs: Ignoring removed nobh option
[  265.605702][T11930] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  265.687722][T11938] netlink: 'syz.1.2464': attribute type 6 has an invalid length.
[  265.730068][T11940] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  265.795793][T11950] loop2: detected capacity change from 0 to 1024
[  265.821698][T11952] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2470'.
[  265.880288][T11959] loop2: detected capacity change from 0 to 1024
[  265.903010][T11963] loop7: detected capacity change from 0 to 1024
[  265.904977][T11963] EXT4-fs: Ignoring removed bh option
[  265.906040][T11963] EXT4-fs: Ignoring removed nobh option
[  265.908306][T11963] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  265.999956][T11974] netlink: 'syz.7.2476': attribute type 6 has an invalid length.
[  266.105718][T11980] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  266.156763][T11989] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2481'.
[  266.189498][T11910] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  266.191627][T11990] EXT4-fs error (device loop1): ext4_read_inline_dir:1611: inode #12: block 7: comm syz.1.2482: path /483/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=40, inode=14, rec_len=8, size=80 fake=0
[  266.218498][T11998] EXT4-fs: Ignoring removed bh option
[  266.219595][T11998] EXT4-fs: Ignoring removed nobh option
[  266.221261][T11998] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  266.299843][T12006] netlink: 'syz.1.2487': attribute type 6 has an invalid length.
[  266.413338][T12013] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  266.498498][T12031] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2497'.
[  266.564374][T12038] EXT4-fs: Ignoring removed bh option
[  266.565377][T12038] EXT4-fs: Ignoring removed nobh option
[  266.566673][T12038] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  266.672453][T12047] binder_user_error: 4 callbacks suppressed
[  266.672462][T12047] binder: 12046:12047 tried to acquire reference to desc 0, got 1 instead
[  266.680515][  T277] Bluetooth: hci2: Frame reassembly failed (-84)
[  266.681127][T12047] binder_alloc: 12046: binder_alloc_buf size -888 failed, no address space
[  266.683391][T12047] binder_alloc: allocated: 4096 (num: 1 largest: 4096), free: 8192 (num: 1 largest: 8192)
[  266.715335][T12052] EXT4-fs: Ignoring removed bh option
[  266.718491][T12052] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  266.725631][T12052] EXT4-fs (loop5): 1 truncate cleaned up
[  267.327071][ T6009] 
[  267.327492][ T6009] ============================================
[  267.328457][ T6009] WARNING: possible recursive locking detected
[  267.329369][ T6009] syzkaller #0 Not tainted
[  267.330041][ T6009] --------------------------------------------
[  267.330987][ T6009] kworker/u4:16/6009 is trying to acquire lock:
[  267.331872][ T6009] ffff0000dd4151e8 (rlock-AF_UNIX){+.+.}-{2:2}, at: unix_collect_skb+0x140/0x480
[  267.333188][ T6009] 
[  267.333188][ T6009] but task is already holding lock:
[  267.334235][ T6009] ffff0000dd4149e8 (rlock-AF_UNIX){+.+.}-{2:2}, at: unix_collect_skb+0xa8/0x480
[  267.335572][ T6009] 
[  267.335572][ T6009] other info that might help us debug this:
[  267.336675][ T6009]  Possible unsafe locking scenario:
[  267.336675][ T6009] 
[  267.337726][ T6009]        CPU0
[  267.338222][ T6009]        ----
[  267.338686][ T6009]   lock(rlock-AF_UNIX);
[  267.339342][ T6009]   lock(rlock-AF_UNIX);
[  267.339942][ T6009] 
[  267.339942][ T6009]  *** DEADLOCK ***
[  267.339942][ T6009] 
[  267.341320][ T6009]  May be due to missing lock nesting notation
[  267.341320][ T6009] 
[  267.342687][ T6009] 4 locks held by kworker/u4:16/6009:
[  267.343547][ T6009]  #0: ffff0000c0029138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x6b8/0x13a4
[  267.345268][ T6009]  #1: ffff800021e37c20 (unix_gc_work){+.+.}-{0:0}, at: process_one_work+0x6fc/0x13a4
[  267.346750][ T6009]  #2: ffff800017977ab8 (unix_gc_lock){+.+.}-{2:2}, at: __unix_gc+0xcc/0x1404
[  267.348054][ T6009]  #3: ffff0000dd4149e8 (rlock-AF_UNIX){+.+.}-{2:2}, at: unix_collect_skb+0xa8/0x480
[  267.349558][ T6009] 
[  267.349558][ T6009] stack backtrace:
[  267.350480][ T6009] CPU: 1 PID: 6009 Comm: kworker/u4:16 Not tainted syzkaller #0
[  267.351701][ T6009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025
[  267.353187][ T6009] Workqueue: events_unbound __unix_gc
[  267.354020][ T6009] Call trace:
[  267.354527][ T6009]  dump_backtrace+0x1c0/0x1ec
[  267.355205][ T6009]  show_stack+0x2c/0x3c
[  267.355831][ T6009]  __dump_stack+0x30/0x40
[  267.356460][ T6009]  dump_stack_lvl+0xf4/0x15c
[  267.357134][ T6009]  dump_stack+0x1c/0x5c
[  267.357758][ T6009]  __lock_acquire+0x15cc/0x6800
[  267.358476][ T6009]  lock_acquire+0x20c/0x63c
[  267.359175][ T6009]  _raw_spin_lock+0x54/0x6c
[  267.359896][ T6009]  unix_collect_skb+0x140/0x480
[  267.360589][ T6009]  __unix_gc+0xd70/0x1404
[  267.361282][ T6009]  process_one_work+0x7f8/0x13a4
[  267.362037][ T6009]  worker_thread+0x8c4/0xfec
[  267.362756][ T6009]  kthread+0x250/0x2d8
[  267.363371][ T6009]  ret_from_fork+0x10/0x20
[  267.365645][T12033] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  268.729409][ T4339] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  268.729438][ T4324] Bluetooth: hci2: command 0x1003 tx timeout
[  269.620898][T12043] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512