last executing test programs:

3m8.587783197s ago: executing program 4 (id=8):
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00')
preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000180)=""/109, 0x6d}], 0x1, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200))
writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000000)="c65a697dc193404fa0e2f58f60b4a27b59b6ba2ced2a80952f4742cd184015cfff3ea1491931aa", 0x27}], 0x1)
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100153a42908f00a71729188010203010902240001060000000904020002ffffff000905"], 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x5)
r2 = open(&(0x7f00000002c0)='./file1\x00', 0x113000, 0xb)
mkdirat(r2, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
mkdirat(r3, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r6 = fanotify_init(0xf00, 0x0)
fanotify_mark(r6, 0x1, 0x5000003a, r5, 0x0)
mkdirat(r4, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0)
r7 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
renameat2(r7, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', r7, &(0x7f00000002c0)='./file0\x00', 0x2)
renameat2(r2, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000001c0)='./file1/../file0\x00', 0x2)
lseek(0xffffffffffffffff, 0xe, 0x1)
pipe2$watch_queue(&(0x7f00000002c0), 0x80)
lseek(0xffffffffffffffff, 0x100000, 0x4)
recvmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)

3m6.57253171s ago: executing program 4 (id=11):
pipe2$watch_queue(&(0x7f0000000000), 0x80)
execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000280)={[&(0x7f0000000080)='\x00', &(0x7f00000000c0)='%\x00', &(0x7f0000000100)='\xae\x00', &(0x7f0000000140)='\x00', &(0x7f0000000180)=')$--#\x00', &(0x7f00000001c0)='}*H@..@.&\x00', &(0x7f0000000200)='/4\x00', &(0x7f0000000240)='{{\x00']}, &(0x7f0000000440)={[&(0x7f0000000300)='):\\\x00', &(0x7f0000000340)='\\*\x00', &(0x7f0000000380)='/\x00', &(0x7f00000003c0)='-&\x00', &(0x7f0000000400)='\x00']})
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0)
sendfile(r0, r0, &(0x7f0000000040)=0x20000000004, 0x3)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r1 = syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000200)='./file0\x00', 0x10, &(0x7f0000000480)=ANY=[], 0x5, 0xa5a, &(0x7f0000001b40)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0xc2800, 0x18)
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0x40186e8d, &(0x7f0000000800)={@id={0x20000000, 0x2000000, @auto="060000001a04b9435da0352cc7411e9e"}})
r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
close(r2)
socket$netlink(0x10, 0x3, 0x8)

3m5.662871628s ago: executing program 4 (id=13):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000180)={[{@check_relaxed}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@check_relaxed}, {@unhide}, {@map_off}, {@map_acorn}, {@check_strict}, {}, {@block={'block', 0x3d, 0x400}}, {@map_normal}, {@unhide}, {@overriderock}]}, 0x1, 0xa16, &(0x7f0000000240)="$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")
syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fe857108480b0730644f01020b010902120009000000000904"], 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000080)={0x4}, 0x1f)
unshare(0x22020400)
r1 = mq_open(&(0x7f0000000680)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05|\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7jo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2\x1e\xd8\xdfJ\xcc\xd7\x9b\xfa\xf0\x0f\x05\xf1\xc4 \xde@\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xec\x87\x1b\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8\x99$\xfb(\x9b5\xcbF4?O\x1d\xd7\x01*\xc9\xd6L\x86 \x1b\xab9\x1b\x12k\xf9\xec\xd8\x16E\x11-\xfd\x10\x89\x8d\xccbP\x14\x89w\xef\x90\x1d\xc9\x02\xeb\x01V\xfbm\x86\x8a\xc1.m\xd0\xa2\xa4\xc9\a;(\n\xc0\"\x1f\xe4\x1d\x85\xb3\x95\xec\xbb\x9b\x01\x85\xffx\xf2\a\f=\xd1\xcf\xec\xb8!\v\x958\xbf\x15b-\x92\xd6\xb5\xbf\xe2\x92\xc2\xa3}\xd0;\xd1\x96\x86\x8a\x1b\xe1w\xf9\xb0\xd2\xab\xc9\x8a\x19\n\xc5o\x1e\x13/\xe4\x91\x7f\xa5\xf1\xddW\xdb\x98\xcd\x94\xfc\x90\xa0\x05*', 0x6e93ebbbcc0884f2, 0x15b, &(0x7f0000000040)={0x0, 0x1, 0x5, 0x80000000})
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r2}, 0x10)
r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2808080, &(0x7f0000000680)={[{@shortname_winnt}, {@numtail}, {@uni_xlateno}, {@shortname_winnt}, {@uni_xlateno}, {@fat=@codepage={'codepage', 0x3d, '863'}}, {@rodir}, {@shortname_mixed}, {@rodir}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}, {@uni_xlate}, {@utf8no}]}, 0x81, 0x2ba, &(0x7f00000003c0)="$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")
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
chdir(0x0)
creat(&(0x7f00000003c0)='./bus\x00', 0x106)
close(r4)
setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
mq_timedreceive(r1, &(0x7f0000000080)=""/163, 0xa3, 0x5e2, &(0x7f0000000000))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, 0x0, &(0x7f00000000c0))
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d04b1082a6d000000040902120001000000000904"], 0x0)

3m1.45207908s ago: executing program 4 (id=23):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}, 'batadv_slave_1\x00'}}, 0x1e)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn'])
chdir(&(0x7f0000000340)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f00000000c0)=0x1)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn'])
stat(&(0x7f0000000080)='./file1\x00', &(0x7f0000000180))

3m0.907717622s ago: executing program 4 (id=27):
connect$tipc(0xffffffffffffffff, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x2, 0x5}}, 0x10)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15)
socket$inet6(0xa, 0x3, 0x2c)
r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x44f, 0xb654, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x80, 0x1d, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x3, 0x1, 0x3, 0x0, {0x9, 0x21, 0x4, 0xfb, 0x1, {0x22, 0x3dd}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x28, 0x4}}}}}]}}]}}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, &(0x7f00000009c0)={0x24, 0x0, &(0x7f0000000900)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42a}}, 0x0, 0x0}, 0x0)

2m58.447402192s ago: executing program 4 (id=33):
prlimit64(0x0, 0xe, 0x0, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
socket$kcm(0x2, 0xa, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0e00000004000000080000000600000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000030cedb22847ef2bdff491565f9f30e52899e8506cf69908081e5fc1f96178a387549f22e1688b4f6a6cb70d7e41d110ad0020fb34ada2386b4db3f665cee5841a057287cd255e0f710f7f3449e0b59e878c8d047cd71c5290ddd8c40ea6a32982a68da7f781830aaaa32f1424f44bacdf334a9e03beb0811cabac8138f3f4220a461912a5a8c229f652e2b6e9d3614317f32e674c588f16e9d60298fc8a176c9c5b4a0651ed4c629"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, r1, 0x25, 0x2, @val=@uprobe_multi={&(0x7f0000000440)='./file0\x00', &(0x7f0000000540), 0x0, 0x6, 0x0, 0x1}}, 0x40)
syz_emit_ethernet(0x2a, &(0x7f0000000340)={@random="6ea88d319b8c", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x43, 0x4e22, 0x8}}}}}, 0x0)

2m57.706233054s ago: executing program 32 (id=33):
prlimit64(0x0, 0xe, 0x0, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
socket$kcm(0x2, 0xa, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0e00000004000000080000000600000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000030cedb22847ef2bdff491565f9f30e52899e8506cf69908081e5fc1f96178a387549f22e1688b4f6a6cb70d7e41d110ad0020fb34ada2386b4db3f665cee5841a057287cd255e0f710f7f3449e0b59e878c8d047cd71c5290ddd8c40ea6a32982a68da7f781830aaaa32f1424f44bacdf334a9e03beb0811cabac8138f3f4220a461912a5a8c229f652e2b6e9d3614317f32e674c588f16e9d60298fc8a176c9c5b4a0651ed4c629"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, r1, 0x25, 0x2, @val=@uprobe_multi={&(0x7f0000000440)='./file0\x00', &(0x7f0000000540), 0x0, 0x6, 0x0, 0x1}}, 0x40)
syz_emit_ethernet(0x2a, &(0x7f0000000340)={@random="6ea88d319b8c", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x43, 0x4e22, 0x8}}}}}, 0x0)

2m57.492176156s ago: executing program 2 (id=39):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000640)={<r5=>0xffffffffffffffff}, 0x2, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, 0x0, 0x0)
write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @id_afonly={0x0, r5}}, 0x20) (fail_nth: 2)

2m55.319549756s ago: executing program 2 (id=41):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x38, 0x18, 0x1, 0x70bd2b, 0x0, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0xc8, 0x9, 0x1100}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0x6, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_DIR={0x5, 0x3, 0x9}}}}]}, 0x38}}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, r3, 0x1, 0x709d23, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x40804}, 0x0)
r4 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
r5 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)

2m54.701015714s ago: executing program 2 (id=44):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/cpuinfo\x00', 0x0, 0x0)
io_setup(0x5, &(0x7f0000002340)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000014c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])

2m54.1128097s ago: executing program 2 (id=47):
mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000000)=0x4, 0xe56, 0x1)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x42000, 0x0)
ioctl$TCSETSW(r3, 0x5435, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000004c0), 0x80, 0x0)
close(r4)

2m52.996258269s ago: executing program 0 (id=50):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000001080)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000000)=0x40000005, 0x4)
socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x5502000000000000}, 0x0)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_io_uring_setup(0xeec, &(0x7f0000000300)={0x0, 0x0, 0x100, 0x0, 0xfffffffd}, &(0x7f00000001c0)=<r3=>0x0, 0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x40, 0x0, @fd, 0x73b, &(0x7f00000002c0), 0x0, 0x0, 0x1})
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r4 = open(&(0x7f0000000140)='./file0\x00', 0x800, 0x70)
mknodat$loop(r4, &(0x7f0000001600)='./file1\x00', 0x0, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00')
unlinkat(r4, &(0x7f0000000000)='./file1\x00', 0x0)
open(&(0x7f00000005c0)='./bus\x00', 0x66842, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x2, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x4, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

2m51.732273767s ago: executing program 0 (id=52):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f00000000c0)={[{@jqfmt_vfsold}, {@data_err_abort}, {@debug}, {@noload}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@debug}]}, 0xfe, 0x46d, &(0x7f0000000f00)="$eJzs3M1vFOUfAPDvTF94+/FrRXwBQapoJL60tLzIwYtGEw6amOgB46m2hVQKNbQmQohWD3g0JN6N/4XxpBejXjTxqndDQgwXUC9rZmemLMtu2aXbLnQ/n2S6zzPzdJ/nOzPP7jPz7G4APWsk+5NE/C8ifo+IoTx7a4GR/OHGtYtTf1+7OJVEpfLWX0m13PVrF6fKouX/bcszlUqR39Sg3kvvRkzOzc2cK/Jji2c+GFs4f+GF2TOTp2ZOzZydOHbs8KG9g0cnjnQkziyu67s/nt+z6/g7l9+YOnH5vZ+S/sjjjro4OmUk37sNPd3pyrpse026umOX7fvlZrrRmUA39UVEdrgGqv1/KPpiy/K2oXjts642DlhTlUqlssKr8lIF2MCS6HYLgO4o3+iz699yWaehxz3h6sv5BVAW941iybf0R5on9g3UXd920khEnFj656tsiTW6DwEAUOu7bPzzfKPxXxoP54nB7M//izmU4Yh4ICJ2RMSDEbEzIh6KqJZ9JCIebbP++hmS28c/6ZW7Dq4F2fjvpWJu69bxX1oWGe4rctur8Q8kJ2fnZg4W++RADGw6OZvMjK9Qx/ev/vZFs221479syeovx4JFO670192gm55cnFxNzLWufhqxu79R/EmU0zhJROyKiN13Wcfss/1Nt905/hU0f9qWVb6OeCY//ktRF38paTo/Of7i0YkjY5tjbubgWHlW3O7nXy+92az+VcXfAdnx39rw/F+OfzjZHLFw/sLp6nztQvt1XPrj86bXNG2e/8e3F+f/YPJ2dcVgseGjycXFc+MRg8nrt6+fuPlsZb4sn8V/YH/j/r8jbu6JxyJiT0TsjYjHs4vCou1PRMSTEbF/hfh/fOWp99uPf33mSrP4p+90/KP2+Lef6Dv9w7d3jn9zRDQ7/oerqQPFmlZe/1pt4Gr2HQAAANwv0upn4JN0dDmdpqOj+Wf4d8bWdG5+YfG5k/Mfnp3OPys/HANpeadrqOZ+6Hhxb7jMT9TlDxX3jb/s21LNj07Nz013O3jocdua9P/Mn33dbh2w5jowjwbcp/R/6F36P/SmRP+Hnqb/Q+9q1P8/aVp69Js1bQywrrz/Q+9qof8v5Q/NRwXA/cn7P/Qu/R96UtPvxqer+sr/uif+LX7P8F5pz8ZPRHpPNGPjJ/pb/jGLNhKVobz/Z2s2NSzT7VcmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAzvgvAAD//w3J5b0=")
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001440)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
sendfile(r5, r0, 0x0, 0x80000000)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0)

2m50.639400325s ago: executing program 0 (id=58):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = socket$nl_generic(0x11, 0x3, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @local, @multicast1}, {0x17, 0x7c, 0x0, @local}}}}}, 0x0)
sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f08", 0xd}], 0x1, 0x0, 0x0, 0x11000000}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="020300030d00000000000000000000000300060000000000020000000000deff0000000000000000030005000000000002000000"], 0x68}, 0x1, 0x7}, 0x0)

2m49.468637065s ago: executing program 2 (id=59):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/ip6_mr_cache\x00')
read$FUSE(r0, &(0x7f000000cb80)={0x2020}, 0x206c)
r1 = getpid()
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0x20000006})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
ptrace$ARCH_GET_FS(0x1e, r1, &(0x7f0000000100), 0x1003)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_qrtr_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="5800000002060102000000000000000000002f5a97a3a08701a18136f36b7e9fffff0c00078008001240000600000500010006000000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c706f7274000000009e1539b86f2c067d7a1421e3af0346d84851d68e269d19ba902d857eed508e7849153c6d52a658eadf3894e93ee3b1dc59f4e1d502cd8d8ec03e5ec389c5d770988f5fa66d8adb5206fd3bf3da57c64d241d73a4151bb3734bac908ed3cd051247"], 0x58}}, 0x0)
kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, 0xffffffffffffffff, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r7, &(0x7f0000000100)}, 0x20)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="796100000000000000007e00000009000300", @ANYRES32=0x0, @ANYBLOB="0c0099000700000042000000"], 0x28}}, 0x4000054)
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000040))

2m48.772888722s ago: executing program 0 (id=61):
socket$inet_smc(0x2b, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x400000bce)
syz_mount_image$xfs(&(0x7f0000000040), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f00000004c0), 0xfd, 0x97ee, &(0x7f0000012f40)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0)
renameat2(0xffffffffffffff9c, 0x0, r0, &(0x7f0000001240)='./file1\x00', 0x4)
io_uring_enter(0xffffffffffffffff, 0x0, 0x2, 0x7, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_emit_ethernet(0x376, &(0x7f0000000540)={@random="1ace05159562", @broadcast, @val={@val={0x88a8, 0x7, 0x0, 0x2}, {0x8100, 0x7, 0x0, 0x3}}, {@mpls_uc={0x8847, {[{0xffff, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x8}, {0x9}, {0xffff}, {0x81}, {0x8, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x9}], @ipv6=@icmpv6={0xc, 0x6, "a2796c", 0x314, 0x3a, 0xff, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, {[@hopopts={0x88, 0x18, '\x00', [@generic={0xa0, 0xa7, "2d65a7cc50ca7d147fce79cc945b5a0a63ce182b735345cfdc9a633468aaf0fe205e82c256da7b1a3d07e241a7e61208d4a066ff3c94d05b0edc8ebd058dcafe6ebf1594419a93006d1f8d0a919fe286930bebcb16e6f461484fd7c8e567f5cf3f6cb0fd561f61d1d441a909ce2d1b736507e6746922af2b3a1b6d0d8c76cb9d216132b795a2d534e67bf24d24ef24110ef45c642cc87821b8d9405812b97970913617a6fdb9a8"}, @ra={0x5, 0x2, 0x10}, @pad1, @enc_lim={0x4, 0x1, 0xfa}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @empty}}]}, @dstopts={0x5f, 0x0, '\x00', [@pad1]}, @srh={0x0, 0x6, 0x4, 0x3, 0x4, 0x50, 0x5, [@private0={0xfc, 0x0, '\x00', 0x1}, @local, @remote]}, @fragment={0x67, 0x0, 0xd, 0x1, 0x0, 0x15, 0x65}, @fragment={0x0, 0x0, 0x2, 0x1, 0x0, 0x1e, 0x68}, @hopopts={0x84, 0x6, '\x00', [@jumbo={0xc2, 0x4, 0x9a7}, @calipso={0x7, 0x20, {0x0, 0x6, 0x40, 0x1, [0x401, 0x4, 0x7]}}, @pad1, @enc_lim={0x4, 0x1, 0x1}, @jumbo={0xc2, 0x4, 0x2}]}, @routing={0x8, 0x4, 0x1, 0x9, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1]}], @mlv2_report={0x8f, 0x0, 0x0, 0x400, 0x4, [{0x6, 0x3, 0x1, @dev={0xfe, 0x80, '\x00', 0x27}, [@private1={0xfc, 0x1, '\x00', 0x1}], [0x9, 0xfffffffb, 0x28]}, {0x2, 0x1, 0x6, @mcast1, [@empty, @dev={0xfe, 0x80, '\x00', 0x32}, @mcast2, @private0, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}], [0x3]}, {0x2, 0x9, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, [], [0x12f, 0x200, 0x3, 0xf1, 0xffffffd2, 0x66, 0x0, 0x8, 0x5]}, {0x2, 0x6, 0x7, @dev={0xfe, 0x80, '\x00', 0x36}, [@private1, @ipv4={'\x00', '\xff\xff', @remote}, @empty, @empty, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback], [0xf, 0xb, 0x2, 0x412c, 0xe1, 0xffffff81]}]}}}}}}}, &(0x7f0000000000)={0x1, 0x1, [0x396, 0x2b4, 0xf8d, 0xc97]})
r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, 0x0)
fsync(r2)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r3 = syz_open_dev$media(&(0x7f00000006c0), 0x4, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f0000000940)=<r4=>0xffffffffffffffff)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0x541b, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x4004850}, 0x48010)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r6, 0x0, 0x0)
setreuid(0x0, 0xee00)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)

2m46.63998216s ago: executing program 2 (id=65):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b34, &(0x7f0000000000)={'wlan0\x00'})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x8, 'syz1\x00', @null, 0x0, 0x200001, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]})
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = dup2(r3, r3)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000440)={'\x00', 0xffff, 0x2aaaaaaa, 0x6, 0x4, 0xffffffffffff9763, 0xffffffffffffffff})
socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x1}, 0x1c)
io_setup(0x8, &(0x7f0000000000))
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a40000002300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7ff, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0xbe26, 0x0, 0x42474752, 0x2, 0x0, [{0x2}, {0x6}, {0x0, 0x2}, {}, {}, {}, {0x0, 0x5}], 0x0, 0x20, 0x2, 0x1}})
r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f00000000c0)=0x2)
r7 = syz_open_dev$vbi(0x0, 0x0, 0x2)
ioctl$VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000080)={0xf0f03c, 0x1})
eventfd2(0x200, 0x80801)

2m46.610303469s ago: executing program 0 (id=66):
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000c40)=ANY=[@ANYBLOB="9feb01001800000000000000140000001400000006000000010000000100000604000000030000000d00000000616e615f00"], &(0x7f0000000d00)=""/181, 0x32, 0xb5, 0x1, 0x0, 0x0, @void, @value}, 0x28)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r3=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r3, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x0, [<r5=>0x0], [0x0, 0x7], [0x0, 0x0, 0x2], [0x0, 0x0, 0x1, 0x1]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r5})
writev(0xffffffffffffffff, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000040)="aa1d484e240006000000f7c08bfcd111fbdf23ea32db0e8f21d5bc27bd8063067a0689fff2a41cfb", 0x28}], 0x2)
ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000040))
r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x40202, 0x0)
ioctl$SNDCTL_DSP_STEREO(r6, 0xc0045003, &(0x7f00000000c0)=0x1)
mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000007, 0x12, r6, 0x0)
ioctl$SNDCTL_DSP_POST(r6, 0x5008, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x17, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95b, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x24, 0x9, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x7fff, 0xb, 0x3, 0x8003, 0x4c74, 0x80000000, 0x242, 0x3, 0xd, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x92a3, 0x4, 0x1, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x1000, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x8000, 0x1, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0x9, 0x2, 0x7f, 0x9, 0x3, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x7, 0x6, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x1, 0x8, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0x8, 0x4, 0x8001, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x10006, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x25], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x8000, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0xb, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

2m44.347736728s ago: executing program 0 (id=72):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b34, &(0x7f0000000000)={'wlan0\x00'})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x8, 'syz1\x00', @null, 0x0, 0x4, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]})
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = dup2(r3, r3)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000440)={'\x00', 0xffff, 0x6, 0x6, 0x4, 0xffffffffffff9763, 0xffffffffffffffff})
socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x1}, 0x1c)
io_setup(0x8, &(0x7f0000000000))
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0, 0x0, 0x7fff}]}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x5c}}, 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a40000002300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7ff, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0xbe26, 0x0, 0x42474752, 0x2, 0x0, [{0x2}, {0x6}, {0x0, 0x2}, {}, {}, {}, {0x0, 0x5}], 0x0, 0x20, 0x2, 0x1}})
r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, &(0x7f00000000c0)=0x2)
r8 = syz_open_dev$vbi(0x0, 0x0, 0x2)
ioctl$VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000080)={0xf0f03c, 0x1})

2m30.921935235s ago: executing program 33 (id=65):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b34, &(0x7f0000000000)={'wlan0\x00'})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x8, 'syz1\x00', @null, 0x0, 0x200001, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]})
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = dup2(r3, r3)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000440)={'\x00', 0xffff, 0x2aaaaaaa, 0x6, 0x4, 0xffffffffffff9763, 0xffffffffffffffff})
socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x1}, 0x1c)
io_setup(0x8, &(0x7f0000000000))
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a40000002300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7ff, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0xbe26, 0x0, 0x42474752, 0x2, 0x0, [{0x2}, {0x6}, {0x0, 0x2}, {}, {}, {}, {0x0, 0x5}], 0x0, 0x20, 0x2, 0x1}})
r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f00000000c0)=0x2)
r7 = syz_open_dev$vbi(0x0, 0x0, 0x2)
ioctl$VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000080)={0xf0f03c, 0x1})
eventfd2(0x200, 0x80801)

2m29.271251219s ago: executing program 34 (id=72):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b34, &(0x7f0000000000)={'wlan0\x00'})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x8, 'syz1\x00', @null, 0x0, 0x4, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]})
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = dup2(r3, r3)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000440)={'\x00', 0xffff, 0x6, 0x6, 0x4, 0xffffffffffff9763, 0xffffffffffffffff})
socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x1}, 0x1c)
io_setup(0x8, &(0x7f0000000000))
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0, 0x0, 0x7fff}]}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x5c}}, 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a40000002300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7ff, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0xbe26, 0x0, 0x42474752, 0x2, 0x0, [{0x2}, {0x6}, {0x0, 0x2}, {}, {}, {}, {0x0, 0x5}], 0x0, 0x20, 0x2, 0x1}})
r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, &(0x7f00000000c0)=0x2)
r8 = syz_open_dev$vbi(0x0, 0x0, 0x2)
ioctl$VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000080)={0xf0f03c, 0x1})

1m17.947869067s ago: executing program 7 (id=224):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x200000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
read$msr(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001dc0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x80)
mq_notify(0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
recvmmsg(r1, &(0x7f0000001c00), 0x0, 0x0, 0x0)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$netrom_NETROM_T1(r2, 0x103, 0x4, 0x0, 0x0)

1m16.516001287s ago: executing program 7 (id=228):
mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000000)=0x4, 0xe56, 0x1)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x42000, 0x0)
ioctl$TCSETSW(r3, 0x5435, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000004c0), 0x80, 0x0)
close(r4)

1m15.034936988s ago: executing program 7 (id=231):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/ip6_mr_cache\x00')
read$FUSE(r0, &(0x7f000000cb80)={0x2020}, 0x206c)
r1 = getpid()
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0x20000006})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
ptrace$ARCH_GET_FS(0x1e, r1, &(0x7f0000000100), 0x1003)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_qrtr_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="5800000002060102000000000000000000002f5a97a3a08701a18136f36b7e9fffff0c00078008001240000600000500010006000000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c706f7274000000009e1539b86f2c067d7a1421e3af0346d84851d68e269d19ba902d857eed508e7849153c6d52a658eadf3894e93ee3b1dc59f4e1d502cd8d8ec03e5ec389c5d770988f5fa66d8adb5206fd3bf3da57c64d241d73a4151bb3734bac908ed3cd051247"], 0x58}}, 0x0)
kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, 0xffffffffffffffff, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r8}, 0x0, &(0x7f0000000480)=r7}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r8, &(0x7f0000000100)}, 0x20)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="796100000000000000007e00000009000300", @ANYRES32=0x0, @ANYBLOB="0c0099000700000042000000"], 0x28}}, 0x4000054)
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000040))

1m8.577742754s ago: executing program 7 (id=241):
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000c40)=ANY=[@ANYBLOB="9feb01001800000000000000140000001400000006000000010000000100000604000000030000000d00000000616e615f00"], &(0x7f0000000d00)=""/181, 0x32, 0xb5, 0x1, 0x0, 0x0, @void, @value}, 0x28)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{0x0}], 0x1)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r3=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r3, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x0, [<r5=>0x0], [0x0, 0x7], [0x0, 0x0, 0x2], [0x0, 0x0, 0x1, 0x1]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r5})
writev(0xffffffffffffffff, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000040)="aa1d484e240006000000f7c08bfcd111fbdf23ea32db0e8f21d5bc27bd8063067a0689fff2a41cfb", 0x28}], 0x2)
ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000040))
r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x40202, 0x0)
ioctl$SNDCTL_DSP_STEREO(r6, 0xc0045003, &(0x7f00000000c0)=0x1)
mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000007, 0x12, r6, 0x0)
ioctl$SNDCTL_DSP_POST(r6, 0x5008, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x17, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95b, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x24, 0x9, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x7fff, 0xb, 0x3, 0x8003, 0x4c74, 0x80000000, 0x242, 0x3, 0xd, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x92a3, 0x4, 0x1, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x1000, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x8000, 0x1, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0x9, 0x2, 0x7f, 0x9, 0x3, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x7, 0x6, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x1, 0x8, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0x8, 0x4, 0x8001, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x10006, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x25], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x8000, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0xb, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

1m7.840467888s ago: executing program 7 (id=243):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0)
chdir(&(0x7f0000000340)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f00000000c0)=0x1)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn'])
stat(&(0x7f0000000080)='./file1\x00', &(0x7f0000000180))

1m7.244794328s ago: executing program 7 (id=245):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x1, 0x3, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r2 = syz_open_procfs(0x0, &(0x7f0000002040)='net/udp\x00')
lseek(r2, 0x200, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffdc5, &(0x7f00000002c0)=0x800002)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r4, 0x1)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={<r5=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000240)={r5}, &(0x7f0000000180)=0x8)
preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/110, 0x6e}], 0x1, 0x4, 0x101)
r6 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000600)={'team0\x00', <r7=>0x0})
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000009c0)=@newqdisc={0xac, 0x24, 0xf0b, 0x4, 0x1000000, {0x0, 0x0, 0x12, r7, {0x0, 0x300}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xffffffffffffffcb, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x1, [0x8, 0x4, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0xd645, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x5}]}]}]}}]}, 0xac}, 0x1, 0x7a00}, 0x0)
bind$packet(r2, &(0x7f0000000000)={0x11, 0xd, r7, 0x1, 0xc}, 0x14)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, <r9=>0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000280)}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r9, &(0x7f0000000580), &(0x7f0000000180)=""/11, 0x2}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xffff0000, 0x11, 0x0, &(0x7f0000000400)="2b206d074843b397737ea49da2ba4c5d78", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50)

51.223546833s ago: executing program 35 (id=245):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x1, 0x3, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r2 = syz_open_procfs(0x0, &(0x7f0000002040)='net/udp\x00')
lseek(r2, 0x200, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffdc5, &(0x7f00000002c0)=0x800002)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r4, 0x1)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={<r5=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000240)={r5}, &(0x7f0000000180)=0x8)
preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/110, 0x6e}], 0x1, 0x4, 0x101)
r6 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000600)={'team0\x00', <r7=>0x0})
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000009c0)=@newqdisc={0xac, 0x24, 0xf0b, 0x4, 0x1000000, {0x0, 0x0, 0x12, r7, {0x0, 0x300}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xffffffffffffffcb, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x1, [0x8, 0x4, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0xd645, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x5}]}]}]}}]}, 0xac}, 0x1, 0x7a00}, 0x0)
bind$packet(r2, &(0x7f0000000000)={0x11, 0xd, r7, 0x1, 0xc}, 0x14)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, <r9=>0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000280)}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r9, &(0x7f0000000580), &(0x7f0000000180)=""/11, 0x2}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xffff0000, 0x11, 0x0, &(0x7f0000000400)="2b206d074843b397737ea49da2ba4c5d78", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50)

18.170024158s ago: executing program 6 (id=328):
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
r0 = landlock_create_ruleset(&(0x7f0000000080)={0x8601, 0x2}, 0x18, 0x0)
landlock_restrict_self(r0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = syz_io_uring_setup(0x1237, &(0x7f0000000380)={0x0, 0x80fd, 0x80, 0x0, 0x2cc}, &(0x7f0000000040)=<r3=>0x0, &(0x7f0000000240)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r1, 0x0, 0x0})
io_uring_enter(r2, 0x47bc, 0x0, 0x2000000, 0x0, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
dup2(r5, r1)

16.055198128s ago: executing program 3 (id=331):
mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000000)=0x4, 0xe56, 0x1)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x42000, 0x0)
ioctl$TCSETSW(r3, 0x5435, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000004c0), 0x80, 0x0)
close(r4)

15.885453616s ago: executing program 6 (id=333):
mkdir(0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
pipe(&(0x7f00000001c0))
pipe(&(0x7f0000000380))
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
readv(r0, &(0x7f0000000000)=[{&(0x7f0000001300)=""/237, 0xed}], 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
io_uring_setup(0x4d40, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0xff05, 0x3, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x157f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}]}, 0x34}}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x142, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x0, 0x0)

14.808639645s ago: executing program 3 (id=334):
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x709d23, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x40804}, 0x0)

9.730441816s ago: executing program 3 (id=339):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x9, 0x0, 0x7fff0000}]})
setfsuid(0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve0\x00'})
msgsnd(0x0, &(0x7f0000000700)={0x1, "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"}, 0x79f, 0x0)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000002880)={{0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1a, 0x7}, 0x0, 0x0, 0x1, 0x1414, 0x10004, 0x4e, 0xffffffffffffffca, 0x8, 0x8580, 0x3, 0x0, 0xffffffffffffffff})
msgsnd(0x0, &(0x7f0000001040)={0x3, "eb0d7e7bf7d5f91d20feae8edee4e613ebcc02dbf5fc7546306279bd75c4b9ef1ec62615d07c45d230c8b5c8cbe8557a130dd99a7a025553f2264facbe08339e93c3fae2f31b72f95586b33cf963a91af40a309d07ce9acf74418919ed0708042e4f2bdec0cbead818740462b7afa5522221084b4d0ec8ae054c17f361546262bfa5362494599791a1063e534ca7b842b43c8b2ff2074bac6c87ff404b64e06e98c78152b999651e4bf221a72e58b6556b48958d41348bbebe582dba8f1038c475a66f70210ff6d26ec46f8c38a88372fe277f0e15343e57643126ab8c8c943623714b629680d4488056d7029bb1cdcc0f25da165c81c77b18479dbe48a93c9f948b120bfb6b24f2ad08c53756fb4a43a35eea9aa3e09277113728dd52a0aea09e51da076ea15ffce0320ae0e500a82fcec7747edee26fec4414a26491cc84e7a4d4c917da8466c2b98048260096bb7b7f3f8a4e51693128d7e11252a26e05294f931ae468b0ff619bc96762ee78c9574d3d949dda720e69127c82e1b77b6c4878b1baf7f22e34dccd83931cfa17cea08b1a135b910f31f430822c785ff628274d11ca5184d99fe8fc33cde51a6fc4a2b580977dda1af59a56e7dbf179b6031c4b60b6ea9da58f15133473abd9a766d91e6230cc5f8bcd5f2909f1c94bda5f9aae723dbb33273d2c074d2009be75e88b0719379b97d231a6d31964b0426abc5a6771080c3cb9aa96dc6e8b6675918fe7de4d41699096200a0101d57f56bbf2bdc3fefb1ece6cd488c1745b4e211abd4d5c4d83fb3c0c9a30ad68f3725b01fc934ce55877987c6059a18308e5afa618606c564a681c8535234f4397cb9e9897a689fdba81244b865227856ff0368881f0f6526f10e0def62fc41486dc26a768e71e7452641a20443e32c7444ec90cf57f56514b35f9478226031d3052242eb6626486fd06770309877be3bf26db08111d327daed2201ea9132a864cbaed2374f2f2e15e5848c5f30d0e5a4993a11e09253d53ac03f9665494612b28d4ff3c0a257e5587c425f61c6f65685c3e71031c13d63aa12fc27fd4a9b3078d6b6d9ee48052886cf034fcf17c99f4c09309f9bf28a2fdfe4940c77769ee09291a76ae55048e4ebd637986698fce718e0d27da2df1e4430c10520dc339b9e81fe7dab650e0bfa8af197c11551b86846a8f2329cd0bb926fcb5f95ff779a13f41508fec46aceb7e6146d44077e32b157beec7e8db3b0573985e62b6c297894f63c291e4281f42d059ddb23fdad661cff46cddcfd736af92f230468a0d8953d52bd61b4df49a541f6826b95f093ba74c4430e8e0a935a1eed54f70a82ce0698e356195e03261b04d6116831f7f45dc91e83b32b67ac12f867e39ca572e068a913b010e0d6781d7f84b9e322d432118f54722eccedd964091b018d457eb4df192e0bb349a2a6a24a18c25096268d0dd80eda8da31419901ea05460b2996476374e539490d150b8858e79cefcfdd8b9e61b403c1dc877367be1a1cee46e59299c03bd9e78674dc6322fe40388f39ca86daf1de5dc34157faf64347ecadb82834eb35acf9df83357cc132386ea3f5d3e72ca5b6e11fd324fa2ce8f1dcf54b79e50094d1a9baa69f39019166ca363e840ce59e84dc4e32856dc5cc96ea4d6f873f5441506ed962231c080a8baca6e3ae0c5bbbdb7d33ae60f09e8885abef82597f3e18e2c87f8732335b6ff99af6fb5465d97f6ce916d128b31f5d42f5794f4359636e0ee39b9e983582eb995a0f9661cdcfdf050e048dbdd3232d44e6b554473f49486c50a230411c3d98271cddde6730b0b9bbc445b75ce8d373ac44b37592572a3adacb4f24337a60424e0bff37a5a2ad0887585333535f355ce10243643eb6c636b43fcc0205c9ee8340130bb64bfbf5feaddc049a4a160551c1bf0c39ecd114455f7c414393e066e77743dd2a511df57e3fa6b90725327a0b7300e50de4dd10461c6437236173b790617845841aea740ebbabd7ab8be24511e3738d6ff86c2ccd793b2c2ff12d1ddf49a73f68f60ca9e464793be41b4a18bd03eaa41f85ee4eac4ac8c3e099df52e55cc523d3ad6efa2cdfcba4ba8ca5cbbad2b05d8e85a4c99b1051123613f80cfd1081cf50b0134dd04bddbad14d2b28b331236799e936f9a5fa52029ee1dd3c49e7a4f0f0fb938379304dfad8d22ff18d08d049bd48f566124e9cf6a668a949eaf6ccc3f852243f656d91461054b9f99a0da53a05c136deae1695c0d40a4baad38f0e45657d34fee923831c62429779075798fe58a7dddbb13347076ebfeca22a5b2327dd166cbebc2091bddb447ee6adf3a1da258dc6032fc84cbcc4907d1a16fa43dd70ab45921408f9ecab8b208dd47ea85ed81dda254df6411fb30fade0864a73ad58f6d25e0a2a3c7c842ae87064cbf75f689ce14156dd44fc7161dd7d502ba7e07807b194048d699ce8dac6c744c251119cb8ae03cbd5997143f38d37328408efe19a6a424d785f8397a3d9c5a3e75df1578f05549d3e2540deee5535b360d80716a544f1d5232d00628f8066c1f5d6264a6f39ac6542b0d42c0c2e9fea27ffcc9d232174d3fb646d1e5988078cdf701c0751b5924d48082fdf45d6a593f41d3b9bd39115e3bc1a227ea82e78efba44638da4c67c6a3ac5b45d7e8030a123347665895896977678ff6456935f4f6f0e99ba3441a799886fb5f156a5c134b9f2d87fc73bce8a871b7f0f23c6dafb193ea81c26727c4753d4fbf1747aa3cee8895fa9d413d9d32afbdc6ac914ffa24556ac992a0b18bd876c7f106491d0e8a7a921b185915f80fc974c22a3dbe8f05110b4c45518f8b069c58dfe5b925629bc08d62b862dbdbe77ac45fd26399f1aa61178e74ec737bb89a58f75c4c1b90e4b26c5e76439eab8177a0a5c290612389d04f88c04f3f03c9ee70e9a42e165c28718aad4b969668c30e76a60d2d7e8719b848d5141ecbd85240e9b81176685170eafc1cc1a9f86de2b03da7c0a6e8ad7b65cb624d2cc371036bfb8035be4776093aa355e202740adb7349e868d6f0d38726df2bf5bef6ae5346c1f680ea07d561c3307ebde73a6142bce8009aa503fcedaf3f79ab6a6e9e41f47f08a5ace99690a5fa42551245b9fca70363e89ee81fb66e6e10787afc50c1b326a9c576c3f5ac66d34c306e9c7394f4548c48e4a3fc38982ceaf7788c028cdb85cdd9fbef2e3332e80600ae72c00a95571191ee967d4d21ae1f405ac7ab300976054aa07c0e98d536a6fbaadd162f70529ba5e35258405ab8f62c8a68fc7fd13eb6b39a6573ee07d7c003e99f87ea63acfe8610926271498b46383bc353b25a12a5eee0a096c7a8a6628bb843a35e5a8a63f5adc0a6c75ff0751d26f3dc4046be2c8d24021eaafbe725c69c4a25a3e37214784c1a56c37b9f4a498cd8d835d8c60aab42d5a35383e0a15e0d0c3664aa28b79f0152d5dc7383a58a171c1ef1c5aaec6df50e333ec158fca2bcc8aa6ff42c698b8d3bd53ae6dec49eccd8f96657ecdb4bfb990a52fdd4c6a5f1e473b851a96c12fb6bbae685f286904ad824fa904369f6a4f7ff8b5610196ea451348444dc77fa37aba0c22db4ba7d2862f80d5a547e693c2b84f5d31c4b508de80a5afdc012a68a9a906403aec947ad26b58cf77168e4b2e1dcd2d265c15f428278c5f49358f472296a84e9441d2183649624434382b7bb733e32feac33b90407aace86b9f51988e24b07ef372b4eff23fc3da751e6b0013eb55933be76b8abd28543e0ec80bcee578bfefa84b77505a0040414cd26329e9842c84e18ead0efe59bd6ac8ed33829c9ef5bac5904c029d55e874e523a3e0752d3b0d880555f82750ecf3f7d7b9346a279a8fa33a629762dcc165b746217d303450fee3cc0d712d7b47ca04055b24ccf20212229ca75aca037ba7a483a462ad0dd7e16f4a06dcabc2ad1e290de1efa91e59ecadfcb83cd32a339034d7224e3de3c46bc6019ccb2e26f9f00be3d0d414bd1e353f384b65cdea9bd719795896a7046f7374fdf37d410cba9e173ca5d98bf2a64ffcd5d39db551f444bb26d54d3a05cad7cff44bb94537f2b7b54d5715e28c05fe10dfc9e80bf47a4348bf49585877b203e8622d61c15537c9032f7da02698f001229db0111a8425682a7901b12623583d6ba8891049d8a67b1135336d4f1198c53944126944397f5f9527db3d8c09198020ee4bd03cd33b901b247e7feae2a33a14d9d7c535ec5458d5bfaaf95654d7580200a4263abd1af987ffcae3239c6b0af28864dafeb0d8d32bafb9887e022a411d377d771d304d1d331e73ba8f0ad40f1cc8ec779e9ade08ccf0ed31d3dd0b6f7c772784c77a297556cd90f60b9092325710ee6a5bc48b78bec0a28a64b9edfc81aa9869ac086fb56edaa80f52566dcf9bdd01a0ff91b5bed4b7a6f45883a8085192bf19b1fe95420c3bca50074627a52276c7d2e9c60c98ff9be119cd32ea37c2c6e7a868b0a357457228f3025eb8edf07cddffcc1a24aedf927babbef4c6175d3892d939a6e46e9eb9c02348cf72ed7f3ec1bf5aab1cdbb33db0eaa03340838874d552e4f022eafee6bf6a623c870cf3d5dd3e0f00adb0af8625926a4076de21806494ed8a2a6220e18e8f7115437fa47a50fe277afe67cbea29b3684f214c99a0976233bb1aa0c05e31562774bcf0d1693a1bcc06a53341d6fee9e7ca175c1472c013c88b8ed5df852457586d6daeaade0f8a6189dfe1bb784bc02a5b8e75fe64811be5a28e8f7d1ae56f7c67cc0f982804626d27af1438123c551d2937dc1aa2baac63adafdfcbb5a65013b17055040acf9343e48ec9192f890734ccb1eea7bf42f5f8e2b6187bcf70f5d7ec6829700e2bb4930388bdd09e09d0f772d22ceae3f91f0c86b83ceb846b069e6443c2ec31d5472a2deb9f957407fa2912a642e2cbf807f74c62d2280b529377a6315162525ce0475f346baa483e17e115406f6f20369f9347c9b1e02c264b2a5b41997cd2927e1912f355dc2292b4b3ca53af282d8b99d7cef60f9cfe5879c401155a91ab0adb9cb21bafc79c9cbe5f41f5dcde1d3976ee0896c157bf55e9cb8a052c36ec37f6ff1ce46495897e7bac30c670ae4e0549477c8266e1855c6e5d956681fd633e7fcbbd76ba3f37a26471a7a9e94716a02293ba45e332accccb60f13953a5061a584741b57ccfb9e6792d1e21eccc2c8f960d6d59e597aa259498c6ff09fe95299db9845b75d91e5ad5afc4e8e9d30977d7bc03b9f69779ad5b2664416d0aec84f9b0c1458cf39279c389466d9555ac4b8745bf6ff7da60c40e4151b8c9b8a99de1cd03e5616d092420c561def3174afac591ebb779ded23b4176990230ec4c2003b9b7f5a9435bd8e540f1729fd10eabcb24fe81920e9d45da8325b8d2edeaede545f4a9a94d4de9f9ac05849ecf67fdefcbbe9c19968706fffbe74de8b2bc5c49769cb946477d51c02a426927ac9a8124812a7e04452319f091efb06aeaff4c2cc445e34d510a39c4be7fe2ff2295c5723be65e3618718dcad92e977b5381316d2839ed86b93195b496774e4ec5661ae2e4d6179502f4113fe79acdcbcbdbb6f01fed4e145de26a50f0263bfd6e80b00e404814d98fbe8dd73c7cd48112d86ce4ff6c17f208d4cfca855d415b10c599e7a760a1114199e28d75fa9b71a024408f6bd48989276367f8dbf33f5f88fb9e96c3831c6031defffc0d2d8a4f0242fe8ec919a98817e7a333b348c6ed14e66b2c8a71f4e12eae61764984b45fd1a756d5f9109d170615986f"}, 0x1008, 0x0)

9.727168941s ago: executing program 6 (id=340):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0)

8.383403457s ago: executing program 3 (id=341):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x12, &(0x7f0000000940)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x2}, [@map_fd, @call={0x85, 0x0, 0x0, 0xb2}, @map_fd={0x18, 0x4}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x2}, @tail_call, @btf_id={0x18, 0x0, 0x3, 0x0, 0x4}, @jmp={0x5, 0x0, 0x6, 0xa, 0x5, 0xfffffffffffffff8, 0x10}]}, &(0x7f0000000040)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000001180)=""/4096, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000a40)={0x2, 0xb, 0x7ff, 0x40}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000a80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000ac0)=[{0x7, 0x3, 0xc}, {0x2, 0x5, 0xa, 0xc}], 0x10, 0x81, @void, @value}, 0x94)
r1 = getpid()
r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0xffffffffffffffff, 0x7fffffff, 0xc}, 0xc)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
getdents(r3, &(0x7f0000000080)=""/27, 0x1b)
lseek(r3, 0x2800000, 0x1)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@bloom_filter={0x1e, 0x6, 0x7, 0x0, 0x1c0bf6612fa22e39, r2, 0xfffffff7, '\x00', 0x0, r3, 0x5, 0x4, 0x1, 0x3, @void, @value, @void, @value}, 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r4, 0x58, &(0x7f0000000640)}, 0x5)
sched_setaffinity(0x0, 0x0, 0x0)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x240)
write$cgroup_int(r5, &(0x7f0000000000)=0xfe8e, 0x12)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x0, 0x40000002, 0x0)
ioctl$sock_SIOCGIFCONF(r7, 0x8912, &(0x7f00000003c0)=@buf)
r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'macvtap0\x00'})
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000380)=ANY=[@ANYRES64=r0, @ANYRES8=r6, @ANYBLOB="ce70d4921c5dd1e6a13873f8"], 0x44}}, 0x48894)
openat$cgroup_type(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000400)=@mangle={'mangle\x00', 0x1f, 0x6, 0x460, 0x290, 0x1b0, 0x290, 0x330, 0x330, 0x3c8, 0x3c8, 0x3c8, 0x3c8, 0x3c8, 0x6, &(0x7f0000000300), {[{{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@inet=@set1={{0x28}, {{0xffffffffffffffff, 0x2, 0x7}}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}, {[0x5, 0xcb], 0x1}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x11, 0x99, 0x2}}}, {{@ip={@rand_addr=0x64010102, @broadcast, 0x0, 0xff000000, 'macvtap0\x00', '\x00', {}, {}, 0x1d, 0x2, 0x11}, 0x0, 0xb0, 0xe0, 0x0, {}, [@common=@set={{0x40}, {{0x4, [0x1, 0x7, 0x1, 0x4, 0x2, 0x7], 0x4, 0x6}}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x9, 0x7, @broadcast, 0x4e22}}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1, 0x2, @empty, 0x4e24}}}, {{@ip={@broadcast, @rand_addr=0x64010100, 0xff, 0x0, 'geneve0\x00', 'veth1_to_bond\x00', {}, {}, 0x88, 0x1, 0x1}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0)
readv(0xffffffffffffffff, &(0x7f0000002940)=[{&(0x7f00000000c0)=""/121, 0x80}, {0x0}], 0x20000000000000d6)
r10 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000140)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r10, &(0x7f0000000c40), 0x12)

7.9814933s ago: executing program 1 (id=343):
socket(0x40000000015, 0x5, 0x0)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
prlimit64(0x0, 0x7, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f0000000100)={[], [{@dont_measure}, {@context={'context', 0x3d, 'user_u'}}, {@euid_eq}]}, 0x0, 0x236, &(0x7f0000000300)="$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")
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0)
syz_open_dev$usbfs(&(0x7f0000000040), 0x80006f, 0x81501)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f00000003c0)='wg1\x00', 0x4)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}})
statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0)
read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, <r5=>0x0, <r6=>0x0, <r7=>0x0}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f0000002300)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x130, 0x0, 0x400, {0x1, 0x7, 0x0, '\x00', {0x7ff, 0x0, 0x4, 0x8000, r6, r7, 0x8000, '\x00', 0x1, 0x4, 0xf8c4, 0x2, {0x8003, 0x8}, {0xd}, {0x0, 0x40004}, {0xff, 0xa00}, 0x8000, 0x6, 0x4, 0x6}}}})
write$FUSE_INIT(r0, &(0x7f0000001200)={0x50, 0x0, r5, {0x7, 0x29, 0x0, 0x29418430}}, 0x50)
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2a1, &(0x7f0000000f40)="$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")
mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2\x00', 0x1ff)
syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
close(0x3)
syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02)
syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301)

6.312248152s ago: executing program 6 (id=344):
mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000000)=0x4, 0xe56, 0x1)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x42000, 0x0)
ioctl$TCSETSW(r3, 0x5435, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000004c0), 0x80, 0x0)
close(r4)

4.693424752s ago: executing program 6 (id=345):
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, <r0=>0xffffffffffffffff})
r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x12040, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x2, 0x7})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f0000000040)=[<r3=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000540)={0x0, 0x0, r3})
ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000001c0)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, r3})
r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="7c000000100001002cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="a821000000000000140003006e657464657673696d30000000000200140014006e657464657673696d3000000000000034001680300001802c000c80140001"], 0x7c}}, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, <r6=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000300)={0x0, &(0x7f0000000240)=[<r7=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_SETGAMMA(r6, 0xc02064a5, &(0x7f0000000280)={r7, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000040)={0x3, r7, 0x49e2, 0x8, 0x1, 0xffff, 0x7f, 0x74, 0xc})
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000080)='./bus\x00', 0x40, &(0x7f0000000100)=ANY=[], 0x7c, 0xc53, &(0x7f0000000f40)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x101)

4.512780216s ago: executing program 1 (id=346):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
iopl(0x3)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, 0x0)

4.45616643s ago: executing program 5 (id=347):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x43, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe04}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

4.048497233s ago: executing program 5 (id=348):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="7a0af8ff7525787cbfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000b2595285faa6ead0169191d54f8196217fc563e2fc91f6da4dad4fdc2eb1b5986fc4a3f611a7c80000040000000000b1a297cfddd73f30f2382f6cda4bfdd45be583823c0f092248a57d48621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000800db583620ce7243d1ae9f2cfe401dbef6619358399aa9c2acd068c03efefd8bc77edf2d34b12cd48a1b20fb7dd843267e0331759f4ec6b5b0af58e604f494eff289026d5045ef08000000000000007718a09f4800afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc70bb30d435aa8b5202db761014b1b999a12df6bee431a6681000000263b6233e1c0fe30e384c3cb07b74a72291a1a2b523dd81b6651b1ee48bb004823ebcd8c65743f31f84b263ab9b3426692f01ad194f302d7a658e90000000001000000b6b2f25ddb8c640ab321a402058c9221b6870814cf4ee23ddb79fff5eb156e0a000000000000f2bd1d4a178d86d6935eb8b75bc4eb680d10e8b6ad4c6c8674caf63ff76622939a20d4aadf85db40179c2cf83ee07e30a279d8f9f3bc282deb43a03409f8e6972f3f720d045923702cede0f3e91411f3f1b16f065624f280a7dc938db910f93c49b9e0aa390d0da6972ed719d7e0efb2bb713d1890e317c8de105c3933fd5d5bf38f6b9fc39fc829dcfe4af8ac5fbb7314a7a433e0182767d1376eda2b9c66200349e62d4d0ab1a1dc51907c98000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x33, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x1a)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'})
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/netfilter\x00')
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCDARP(r4, 0x8953, &(0x7f0000000100)={{0x2, 0x0, @multicast2}, {0x0, @remote}, 0x0, {0x2, 0x1ff, @loopback}, 'syz_tun\x00'})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
r7 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000140)={0x6, 0x3, 0x20000, 0x1}, 0x10)
write(r7, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000010000000800040001000000", 0x24)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e24, 0xffff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7defd62}}, 0x0, 0x0, 0x400, 0x0, 0xc5, 0x1, 0x8}, 0x9c)
bind$inet6(r8, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r8, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
mlockall(0x7)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x1, 0x3, 0x9, 0x18, 0xffffffffffffffff, 0x1, '\x00', 0x0, r2, 0x5, 0x4, 0x2, 0x7, @void, @value, @void, @value}, 0x50)
shutdown(r8, 0x2)
close(r8)

3.963349387s ago: executing program 1 (id=349):
mkdir(0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
pipe(&(0x7f00000001c0))
pipe(&(0x7f0000000380))
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
readv(r0, &(0x7f0000000000)=[{&(0x7f0000001300)=""/237, 0xed}], 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
io_uring_setup(0x4d40, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0xff05, 0x3, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x157f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}]}, 0x34}}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x142, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x0, 0x0)

3.836751988s ago: executing program 3 (id=350):
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x709d23, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x40804}, 0x0)

3.679489571s ago: executing program 6 (id=351):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1, 0x0, 0x3}, 0x20)
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000180)='./bus\x00', 0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='nointegrity,quota,usrquota,errors=continue,errors=continue,iocharset=cp864,errors=remount-ro\x00discard=0xfffffffffffffff6,discard=0x0000000000000009,umask=0x0000000000000006,quota,noquota,quota,grpquota,seclabel,uid>', @ANYBLOB="91436f945bcd54a57241cb9053e54b49ffcbe08f43c9d667225094d9f899e7acc1c1598eaac4b27a1a5496de0e9cb6d56613b668358e3e9cd990f7823aa432fc1f83cd6858c3efe00850bad96211a9dd79d7e6eac6a01588589f567a6a2a", @ANYRES16, @ANYRESOCT, @ANYRES8], 0x1, 0x6205, &(0x7f0000006940)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f0000000200)='./bus/file0\x00', 0x0)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@local}, &(0x7f0000000040)=0xfffffffffffffff1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x281}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
openat(0xffffffffffffffff, &(0x7f0000000780)='./file0\x00', 0x82c100, 0x32)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000080003851000000600000018000000", @ANYRES32, @ANYBLOB="000000000000000066082cf90000000018000000000000000000000000000000950000e8ffbaf726b00a020000000000180100002020782500000000002020207b1af8ff00000036a246310008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000, @void, @value}, 0x94)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000240)={0x2c, &(0x7f0000000000)={0x20, 0x22, 0xa1, {0xa1, 0x3, "f3de021b0036b84550f0aad8a897a84f093e46c5bce3d712e9b3e00a709f148ede52773a13dc0137edcf531a5f43157705c156477ecc699f82b0bd8336be4d0442007b79cc17c9df24a026ebbe790de869b6bb35a7a69f3434de346fcc3263b201195afa9123d6bdcfd2f92d64744dd34fd47a94d7ddc0b98e9c068f8e9911efbfaaae3c2694de496ee17340b053b111f8898c4ce3ca1fe2952205786a9d92"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}, &(0x7f0000000180)={0x0, 0xf, 0x44, {0x5, 0xf, 0x44, 0x3, [@ssp_cap={0x1c, 0x10, 0xa, 0x7, 0x4, 0x7, 0xff00, 0x6, [0xff0000, 0x30, 0x3f, 0x30]}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x4, 0x9, 0x663}, @ssp_cap={0x1c, 0x10, 0xa, 0xf, 0x4, 0x5, 0xf00f, 0x2, [0x3fc0, 0x0, 0xc000, 0xff0000]}]}}, &(0x7f0000000100)={0x20, 0x29, 0xf, {0xf, 0x29, 0xf9, 0x19, 0x4, 0x7, "24856255", "df9245a4"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf, 0xd0, 0x6, 0xe, 0x38, 0x7}}}, &(0x7f00000006c0)={0x84, &(0x7f0000000280)={0x40, 0x9, 0x55, "c74f3caab7f2e8a709ad264e1297afef0e4efae37d63c83df0eac4bb5e97ad7985854b8b9079723d86e5e5872e92f9db573ae188b8098c521b1c9a0c911b479421e7f3f79f8d3cec849ef635ff202da3a00b4c0134"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f00000003c0)={0x20, 0x0, 0x8, {0x140, 0x4, [0xff0f]}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x800}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000480)={0x40, 0xb, 0x2, "adf5"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}, &(0x7f0000000540)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, &(0x7f0000000580)={0x40, 0x19, 0x2, "fdcb"}, &(0x7f00000005c0)={0x40, 0x1a, 0x2, 0xd}, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000640)={0x40, 0x1e, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1}})
syz_usb_connect(0x3, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xb4, 0x20, 0x45, 0x10, 0x7c4, 0xa109, 0xdf0a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x58, 0x0, 0x0, 0x93, 0x6b, 0x6}}]}}]}}, 0x0)

3.45276687s ago: executing program 3 (id=352):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'})
io_uring_setup(0x1581, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
msgrcv(0x0, &(0x7f0000000280)={0x0, ""/55}, 0x3f, 0x0, 0x86b1b18158a7cb82)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000002000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e", @ANYRESDEC=0x0], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0xc0145b0e, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x1c3302)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0x0, 0x0, 0x0)
r2 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2)
write(r3, &(0x7f0000000280), 0x0)
ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000001c0)={0x5, @sliced={0x3ff, [0x3, 0x4670, 0xa69b, 0x1, 0xb74, 0xa2, 0x8000, 0x2, 0xb1a, 0x9, 0x5, 0xb3d, 0xc0, 0xb8d, 0x8, 0x1000, 0x5e83, 0xb3e, 0x80, 0x1fd, 0xb, 0xcba, 0x8, 0x9, 0x6, 0xf1, 0x0, 0x803, 0x9, 0x4, 0x5, 0x38c3, 0x6, 0x3, 0x6e, 0x1000, 0x1, 0x1, 0x2, 0x8000, 0x2, 0x55, 0x5ae, 0x1000, 0x4, 0x0, 0x5, 0x5], 0x10000}})
mq_notify(r2, &(0x7f00000000c0)={0x0, 0xc, 0x1})
readv(r2, &(0x7f0000000540)=[{&(0x7f00000003c0)=""/18, 0x12}], 0x1)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @any, 0x4}, 0xe)
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x20)

3.229191392s ago: executing program 1 (id=353):
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x2c)
setuid(0xee00)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f0000000400), 0x12)
r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='mm_page_pcpu_drain\x00', r6, 0x0, 0x5}, 0x18)
set_robust_list(0x0, 0x0)
r7 = open(&(0x7f0000000140)='./file1\x00', 0x64842, 0x21)
pwritev2(r7, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000001ec0), 0xffffffffffffffff)
socket$vsock_stream(0x28, 0x1, 0x0)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r8, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001f00)={0x30, r9, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x80000000, 0x1, 0x1, 0x5}}}}, 0x30}}, 0x0)
syz_usb_disconnect(0xffffffffffffffff)

2.870674833s ago: executing program 5 (id=354):
r0 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2)
setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f0000000300)='cifs\x00', 0x5)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000040)={0x1})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000011540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r3, 0x0)
madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xb)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, 0x0})
r4 = timerfd_create(0x9, 0x0)
capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040))
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x69000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}]}}}]}, 0x40}}, 0x0)
ioctl$KDGETMODE(r5, 0x4b4b, 0x0)
timerfd_settime(r4, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0)
mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000002280)='vxfs\x00', 0x8000, 0x0)
sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="25b096f681cd731c3f3a9badc4e3cf5edeae1f3b5082d7ab3a97c053df68744e7c7e24d0b59997bab4bccff8363b275de3510b0ebe4275d8d2f153395668e3d608e358fc2294263c03f8dc4f8bf194e4fde4600a2dec2f483a914e2fde0cbc344a2b9fc18dd198966045a6d4d4eb8571e8bb69e6724e37fcbaa6e4c64050b47256b9bb17f5c0aa5101e015ecdcb62fec46fc0205512535", 0x97}, {&(0x7f0000000280)="d3a88bea5916e313729a3989393caca70c74cd74e62e524bdd37be131ad827f911027e70ccf679d8e7c0cd3333095f83d6d473db345ded2ac8acaa87503de74c824317", 0x43}], 0x2}, 0x0)
readv(r0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/58, 0x3a}], 0x1)
write$tun(r0, &(0x7f0000000080)=ANY=[], 0x16e)

1.663794598s ago: executing program 5 (id=355):
mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000000)=0x4, 0xe56, 0x1)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x42000, 0x0)
ioctl$TCSETSW(r3, 0x5435, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x80, 0x0)
close(r4)

1.504222909s ago: executing program 1 (id=356):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@quota}, {@data_writeback}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=")
r0 = socket$caif_stream(0x25, 0x1, 0x0)
setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f00000001c0)=0x200, 0x4) (async)
setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f00000001c0)=0x200, 0x4)
connect$caif(r0, &(0x7f0000000340), 0x18)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x4042, 0xb2c6bb89b6f1c95d)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x2040, 0x108)
fcntl$setlease(r1, 0x400, 0x0)
link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') (async)
link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00')

386.993035ms ago: executing program 5 (id=357):
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000400), 0x12)

36.06796ms ago: executing program 1 (id=358):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/ip6_mr_cache\x00')
read$FUSE(r0, &(0x7f000000cb80)={0x2020}, 0x206c)
r1 = getpid()
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0x20000006})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
ptrace$ARCH_GET_FS(0x1e, r1, &(0x7f0000000100), 0x1003)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_qrtr_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="5800000002060102000000000000000000002f5a97a3a08701a18136f36b7e9fffff0c00078008001240000600000500010006000000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c706f7274000000009e1539b86f2c067d7a1421e3af0346d84851d68e269d19ba902d857eed508e7849153c6d52a658eadf3894e93ee3b1dc59f4e1d502cd8d8ec03e5ec389c5d770988f5fa66d8adb5206fd3bf3da57c64d241d73a4151bb3734bac908ed3cd051247"], 0x58}}, 0x0)
kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, 0xffffffffffffffff, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r7}, &(0x7f0000000440), 0x0}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r7, &(0x7f0000000100)}, 0x20)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="796100000000000000007e00000009000300", @ANYRES32=0x0, @ANYBLOB="0c0099000700000042000000"], 0x28}}, 0x4000054)
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000040))

0s ago: executing program 5 (id=359):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000fc0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000440)=0x8, 0x4)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="e9", 0x34000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000c00)="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", 0x390}, {&(0x7f0000000300)="439e9c06fc666cabc8569d63a866b31ff3ceda1e28f23f455e96a02001fc3fb089ed9e5234", 0x25}], 0x2}}], 0x2, 0x4048800)

kernel console output (not intermixed with test programs):

T5829] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.848581][ T5829] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.857537][ T5829] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.880594][ T5826] veth0_vlan: entered promiscuous mode
[   97.913754][ T5832] veth0_vlan: entered promiscuous mode
[   97.958648][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0
[   97.999437][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.011087][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.026798][ T5832] veth1_vlan: entered promiscuous mode
[   98.046738][ T5826] veth1_vlan: entered promiscuous mode
[   98.072551][   T55] Bluetooth: hci0: command tx timeout
[   98.073602][ T5840] Bluetooth: hci1: command tx timeout
[   98.154404][ T5840] Bluetooth: hci5: command tx timeout
[   98.170312][ T5833] veth0_macvtap: entered promiscuous mode
[   98.199179][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.213525][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.217433][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.229971][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.238032][ T5840] Bluetooth: hci4: command tx timeout
[   98.247517][ T5833] veth1_macvtap: entered promiscuous mode
[   98.288900][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   98.301219][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.313626][ T5840] Bluetooth: hci3: command tx timeout
[   98.313650][   T55] Bluetooth: hci2: command tx timeout
[   98.318385][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   98.335206][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.347770][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[   98.362680][ T5831] veth0_vlan: entered promiscuous mode
[   98.393002][ T5832] veth0_macvtap: entered promiscuous mode
[   98.436456][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   98.444898][ T5834] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   98.447955][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.474993][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   98.485856][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.498762][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[   98.511135][ T5826] veth0_macvtap: entered promiscuous mode
[   98.524292][ T5832] veth1_macvtap: entered promiscuous mode
[   98.539935][ T5833] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   98.551607][ T1128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.553348][ T5833] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   98.559427][ T1128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.568515][ T5833] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   98.585504][ T5833] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   98.605894][ T5826] veth1_macvtap: entered promiscuous mode
[   98.666410][ T5831] veth1_vlan: entered promiscuous mode
[   98.701122][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   98.730365][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.745322][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   98.756664][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.766964][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   98.777977][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.790605][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0
[   98.834987][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   98.851151][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.861156][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   98.873656][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.883619][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   98.894405][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.915733][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   98.928976][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.944325][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0
[   98.966739][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   98.978723][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.988745][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   99.001550][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   99.011568][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   99.023099][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   99.038713][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1
[   99.056973][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   99.068566][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   99.078924][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   99.089594][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   99.099586][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   99.110291][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   99.121660][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   99.132252][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   99.143913][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1
[   99.154652][ T5935] tipc: Started in network mode
[   99.159990][ T5935] tipc: Node identity 6, cluster identity 4711
[   99.167451][ T5935] tipc: Node number set to 6
[   99.216334][ T5826] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   99.227081][ T5826] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   99.237974][ T5826] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   99.249017][ T5826] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   99.278438][ T5832] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   99.292578][ T5832] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   99.315050][ T5832] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   99.325069][ T5832] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   99.458940][ T5831] veth0_macvtap: entered promiscuous mode
[   99.468285][   T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.476972][   T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.540564][ T5831] veth1_macvtap: entered promiscuous mode
[   99.594886][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.617078][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.635455][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   99.648439][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   99.660905][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   99.679505][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   99.695388][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   99.707821][    T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   99.708961][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   99.732795][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   99.745106][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   99.761203][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   99.778214][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   99.790446][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0
[   99.852228][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   99.879554][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   99.889506][    T9] usb 5-1: Using ep0 maxpacket: 8
[   99.895113][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   99.904490][    T9] usb 5-1: config 6 has an invalid interface number: 2 but max is 0
[   99.910670][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   99.927421][    T9] usb 5-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config
[   99.932966][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   99.938921][    T9] usb 5-1: config 6 has no interface number 0
[   99.954582][    T9] usb 5-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xAA, changing to 0x8A
[   99.956752][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   99.966675][    T9] usb 5-1: config 6 interface 2 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[   99.982931][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   99.988153][    T9] usb 5-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  100.008029][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.015575][    T9] usb 5-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[  100.020440][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  100.040246][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  100.048341][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.050077][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1
[  100.070148][    T9] usb 5-1: Product: syz
[  100.077936][    T9] usb 5-1: Manufacturer: syz
[  100.090329][    T9] usb 5-1: SerialNumber: syz
[  100.121104][    T9] hso 5-1:6.2: Failed to find INT IN ep
[  100.121550][ T5831] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  100.145657][ T5831] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.160306][ T5831] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  100.174182][ T5831] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  100.191648][ T1200] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  100.239311][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.248410][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.342197][ T1200] usb 1-1: Using ep0 maxpacket: 16
[  100.342932][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.350548][ T1200] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  100.397394][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.400273][ T1200] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C
[  100.551054][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.562086][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.569955][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.608200][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.649782][ T1200] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7
[  100.659236][ T5898] usb 5-1: USB disconnect, device number 2
[  100.661037][ T1200] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  100.685970][ T1200] usb 1-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f
[  100.746153][ T1200] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.097623][ T1200] usb 1-1: Product: syz
[  101.147781][ T1200] usb 1-1: Manufacturer: syz
[  101.208153][ T1200] usb 1-1: SerialNumber: syz
[  101.356996][ T1200] usb 1-1: config 0 descriptor??
[  101.500351][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.530922][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.551209][ T1200] rc_core: IR keymap rc-xbox-dvd not found
[  101.581000][ T1200] Registered IR keymap rc-empty
[  101.608341][ T1200] rc rc0: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  101.661615][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  101.680786][ T1200] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input5
[  101.716400][ T5955] loop4: detected capacity change from 0 to 2048
[  101.820655][ T5955] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  101.830103][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.865843][ T5843] udevd[5843]: incorrect nilfs2 checksum on /dev/loop4
[  101.887839][ T5962] capability: warning: `syz.2.3' uses 32-bit capabilities (legacy support in use)
[  102.013003][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.043963][ T1200] usb 1-1: USB disconnect, device number 2
[  102.049873][    C0] xbox_remote 1-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19
[  102.069095][ T5957] xt_CT: No such helper "pptp"
[  102.083815][ T5963] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  102.108436][ T5962] No control pipe specified
[  102.332547][    T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!!
[  102.341785][ T5968] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  102.364832][ T5968] x_tables: ip6_tables: rpfilter.0 match: invalid size 8 (kernel) != (user) 48
[  102.460212][ T5962] loop2: detected capacity change from 0 to 4096
[  102.492139][ T5962] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  102.531926][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  102.576857][    T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!!
[  102.652024][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  102.663708][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  102.678551][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  102.690699][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  102.726071][    T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!!
[  102.881155][ T5962] ntfs3(loop2): ino=19, mi_enum_attr
[  102.917520][ T5962] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  102.945426][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[  103.013548][ T5971] loop4: detected capacity change from 0 to 1764
[  103.323045][    T9] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[  103.391586][ T1200] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  103.393762][ T5982] tipc: Started in network mode
[  103.405566][ T5982] tipc: Node identity 6, cluster identity 4711
[  103.476014][ T5982] tipc: Node number set to 6
[  103.513026][    T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  103.567334][    T9] usb 5-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64
[  103.581707][ T1200] usb 1-1: Using ep0 maxpacket: 8
[  103.594188][ T1200] usb 1-1: config 6 has an invalid interface number: 2 but max is 0
[  103.606988][ T5987] loop2: detected capacity change from 0 to 256
[  103.612055][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  103.624093][ T1200] usb 1-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config
[  103.649823][    T9] usb 5-1: Product: syz
[  103.652392][ T5987] =======================================================
[  103.652392][ T5987] WARNING: The mand mount option has been deprecated and
[  103.652392][ T5987]          and is ignored by this kernel. Remove the mand
[  103.652392][ T5987]          option from the mount to silence this warning.
[  103.652392][ T5987] =======================================================
[  103.681546][    T9] usb 5-1: Manufacturer: syz
[  103.694153][ T1200] usb 1-1: config 6 has no interface number 0
[  103.723049][ T1200] usb 1-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xAA, changing to 0x8A
[  103.748985][    T9] usb 5-1: SerialNumber: syz
[  103.810913][ T1200] usb 1-1: config 6 interface 2 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  103.898406][ T1200] usb 1-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  103.913622][    T9] usb 5-1: config 0 descriptor??
[  104.346014][    T9] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state.
[  104.354604][ T5987] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  104.405602][    T9] pctv452e: pctv452e_power_ctrl: 1
[  104.405602][    T9] 
[  104.416675][ T1200] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[  104.447104][    T9] usb 5-1: selecting invalid altsetting 3
[  104.456633][ T1200] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.467350][    T9] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22
[  104.467350][    T9] 
[  104.509379][ T1200] usb 1-1: Product: syz
[  104.524544][ T1200] usb 1-1: Manufacturer: syz
[  104.544930][    T9] dvb-usb: bulk message failed: -22 (5/0)
[  104.555444][ T1200] usb 1-1: SerialNumber: syz
[  104.606125][ T5971] iso9660: Corrupted directory entry in block 2 of inode 1920
[  104.608165][    T9] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  104.624726][ T5886] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  104.644780][ T1200] hso 1-1:6.2: Failed to find INT IN ep
[  104.673769][    T9] dvb-usb: Technotrend TT Connect S2-3600 error while loading driver (-19)
[  104.951760][ T5886] usb 2-1: Using ep0 maxpacket: 8
[  104.965647][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  105.163353][ T5886] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  105.221537][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  105.267720][ T1200] usb 1-1: USB disconnect, device number 3
[  105.331752][ T5886] usb 2-1: config 0 descriptor??
[  105.482938][ T5971] iso9660: Corrupted directory entry in block 2 of inode 1920
[  105.527957][ T5971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  105.553909][ T5971] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  105.626725][ T5886] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  105.906118][    T9] usb 2-1: USB disconnect, device number 2
[  106.145845][ T6003] FAULT_INJECTION: forcing a failure.
[  106.145845][ T6003] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  106.217948][    T9] usb 5-1: USB disconnect, device number 3
[  106.252688][ T6003] CPU: 0 UID: 0 PID: 6003 Comm: syz.0.22 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(full) 
[  106.252722][ T6003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  106.252736][ T6003] Call Trace:
[  106.252745][ T6003]  <TASK>
[  106.252756][ T6003]  dump_stack_lvl+0x189/0x250
[  106.252805][ T6003]  ? __pfx_dump_stack_lvl+0x10/0x10
[  106.252840][ T6003]  ? __pfx__printk+0x10/0x10
[  106.252879][ T6003]  should_fail_ex+0x414/0x560
[  106.252924][ T6003]  _copy_to_user+0x31/0xb0
[  106.252960][ T6003]  simple_read_from_buffer+0xe1/0x170
[  106.252995][ T6003]  proc_fail_nth_read+0x1df/0x250
[  106.253033][ T6003]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  106.253070][ T6003]  ? srso_alias_return_thunk+0x5/0xfbef5
[  106.253095][ T6003]  ? rw_verify_area+0x258/0x650
[  106.253120][ T6003]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  106.253155][ T6003]  vfs_read+0x200/0x980
[  106.253187][ T6003]  ? __pfx___mutex_lock+0x10/0x10
[  106.253214][ T6003]  ? __pfx_vfs_read+0x10/0x10
[  106.253242][ T6003]  ? __fget_files+0x2a/0x420
[  106.253277][ T6003]  ? srso_alias_return_thunk+0x5/0xfbef5
[  106.253304][ T6003]  ? __fget_files+0x3a0/0x420
[  106.253333][ T6003]  ? __fget_files+0x2a/0x420
[  106.253367][ T6003]  ? srso_alias_return_thunk+0x5/0xfbef5
[  106.253400][ T6003]  ksys_read+0x145/0x250
[  106.253433][ T6003]  ? __pfx_ksys_read+0x10/0x10
[  106.253464][ T6003]  ? do_syscall_64+0xba/0x210
[  106.253496][ T6003]  do_syscall_64+0xf6/0x210
[  106.253521][ T6003]  ? srso_alias_return_thunk+0x5/0xfbef5
[  106.253548][ T6003]  ? exc_page_fault+0x91/0x110
[  106.253573][ T6003]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  106.253603][ T6003] RIP: 0033:0x7ff92898d37c
[  106.253623][ T6003] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  106.253642][ T6003] RSP: 002b:00007ff929872030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  106.253666][ T6003] RAX: ffffffffffffffda RBX: 00007ff928bb5fa0 RCX: 00007ff92898d37c
[  106.253684][ T6003] RDX: 000000000000000f RSI: 00007ff9298720a0 RDI: 0000000000000005
[  106.253699][ T6003] RBP: 00007ff929872090 R08: 0000000000000000 R09: 000000000000000b
[  106.253714][ T6003] R10: 0000000000000030 R11: 0000000000000246 R12: 0000000000000001
[  106.253729][ T6003] R13: 0000000000000000 R14: 00007ff928bb5fa0 R15: 00007ffd0350f6a8
[  106.253765][ T6003]  </TASK>
[  107.162096][ T6011] xt_CT: You must specify a L4 protocol and not use inversions on it
[  108.672647][ T6022] 9pnet_fd: Insufficient options for proto=fd
[  109.580055][ T6027] No control pipe specified
[  109.977795][ T6027] loop1: detected capacity change from 0 to 4096
[  110.017893][ T6027] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  110.060525][   T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.157066][ T6027] ntfs3(loop1): ino=19, mi_enum_attr
[  110.191827][ T6027] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  110.275150][   T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.590453][ T6040] loop0: detected capacity change from 0 to 1764
[  110.605632][ T6046] netlink: 'syz.5.37': attribute type 1 has an invalid length.
[  110.809693][   T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.767044][ T6052] FAULT_INJECTION: forcing a failure.
[  111.767044][ T6052] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  111.780275][ T6052] CPU: 1 UID: 0 PID: 6052 Comm: syz.2.39 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(full) 
[  111.780314][ T6052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  111.780328][ T6052] Call Trace:
[  111.780340][ T6052]  <TASK>
[  111.780351][ T6052]  dump_stack_lvl+0x189/0x250
[  111.780389][ T6052]  ? __lock_acquire+0xaac/0xd20
[  111.780425][ T6052]  ? __pfx_dump_stack_lvl+0x10/0x10
[  111.780460][ T6052]  ? __pfx__printk+0x10/0x10
[  111.780485][ T6052]  ? srso_alias_return_thunk+0x5/0xfbef5
[  111.780528][ T6052]  should_fail_ex+0x414/0x560
[  111.780573][ T6052]  _copy_from_user+0x2d/0xb0
[  111.780607][ T6052]  ucma_set_option+0xc1/0xa60
[  111.780641][ T6052]  ? __pfx_ucma_set_option+0x10/0x10
[  111.780677][ T6052]  ? srso_alias_return_thunk+0x5/0xfbef5
[  111.780712][ T6052]  ? srso_alias_return_thunk+0x5/0xfbef5
[  111.780738][ T6052]  ? __lock_acquire+0xaac/0xd20
[  111.780782][ T6052]  ? srso_alias_return_thunk+0x5/0xfbef5
[  111.780838][ T6052]  ucma_write+0x249/0x2e0
[  111.780862][ T6052]  ? srso_alias_return_thunk+0x5/0xfbef5
[  111.780893][ T6052]  ? __pfx_ucma_write+0x10/0x10
[  111.780927][ T6052]  ? __pfx_ucma_write+0x10/0x10
[  111.780955][ T6052]  vfs_write+0x27e/0xa90
[  111.780998][ T6052]  ? __pfx_vfs_write+0x10/0x10
[  111.781022][ T6052]  ? srso_alias_return_thunk+0x5/0xfbef5
[  111.781052][ T6052]  ? __fget_files+0x2a/0x420
[  111.781087][ T6052]  ? __fget_files+0x2a/0x420
[  111.781115][ T6052]  ? srso_alias_return_thunk+0x5/0xfbef5
[  111.781142][ T6052]  ? __fget_files+0x3a0/0x420
[  111.781182][ T6052]  ? __fget_files+0x2a/0x420
[  111.781216][ T6052]  ? srso_alias_return_thunk+0x5/0xfbef5
[  111.781249][ T6052]  ksys_write+0x145/0x250
[  111.781281][ T6052]  ? __pfx_ksys_write+0x10/0x10
[  111.781315][ T6052]  ? do_syscall_64+0xba/0x210
[  111.781347][ T6052]  do_syscall_64+0xf6/0x210
[  111.781373][ T6052]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[  111.781403][ T6052]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.781427][ T6052] RIP: 0033:0x7f0d11f8e969
[  111.781448][ T6052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  111.781466][ T6052] RSP: 002b:00007f0d0fdf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  111.781490][ T6052] RAX: ffffffffffffffda RBX: 00007f0d121b6160 RCX: 00007f0d11f8e969
[  111.781508][ T6052] RDX: 0000000000000020 RSI: 0000200000000140 RDI: 0000000000000008
[  111.781523][ T6052] RBP: 00007f0d0fdf6090 R08: 0000000000000000 R09: 0000000000000000
[  111.781538][ T6052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  111.781552][ T6052] R13: 0000000000000000 R14: 00007f0d121b6160 R15: 00007ffd8ad5c2d8
[  111.781588][ T6052]  </TASK>
[  112.044381][    C1] vkms_vblank_simulate: vblank timer overrun
[  112.191967][ T5892] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[  112.370315][ T5892] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  112.403873][ T5892] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64
[  112.464573][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  112.465999][ T6054] loop1: detected capacity change from 0 to 512
[  112.544751][ T5892] usb 1-1: Product: syz
[  112.561518][ T5892] usb 1-1: Manufacturer: syz
[  112.566151][ T5892] usb 1-1: SerialNumber: syz
[  112.608919][ T5892] usb 1-1: config 0 descriptor??
[  112.629187][ T6054] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #15: comm syz.1.38: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0)
[  112.684285][ T5892] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state.
[  112.719710][ T6048] dummy0: entered promiscuous mode
[  112.729326][ T5892] pctv452e: pctv452e_power_ctrl: 1
[  112.729326][ T5892] 
[  112.737982][ T5892] usb 1-1: selecting invalid altsetting 3
[  112.749406][ T6054] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.38: couldn't read orphan inode 15 (err -117)
[  112.768995][ T5892] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22
[  112.768995][ T5892] 
[  112.774993][ T6056] batadv1: entered promiscuous mode
[  112.787170][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  112.790179][ T6056] 8021q: adding VLAN 0 to HW filter on device batadv1
[  112.811682][ T5892] dvb-usb: bulk message failed: -22 (5/0)
[  112.828341][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  112.838559][ T5892] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  112.852889][ T5892] dvb-usb: Technotrend TT Connect S2-3600 error while loading driver (-19)
[  112.866263][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  112.901607][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  112.910641][   T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.926887][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  112.935294][ T6054] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  112.957586][ T6040] iso9660: Corrupted directory entry in block 2 of inode 1920
[  112.964024][ T6054] ext4 filesystem being mounted at /5/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  113.028564][ T6064] tipc: Started in network mode
[  113.034204][ T6054] EXT4-fs error (device loop1): ext4_add_entry:2419: inode #2: comm syz.1.38: Directory hole found for htree leaf block 0
[  113.040872][ T6040] iso9660: Corrupted directory entry in block 2 of inode 1920
[  113.054766][ T6064] tipc: Node identity 6, cluster identity 4711
[  113.072166][ T6064] tipc: Node number set to 6
[  113.125529][ T6040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  113.171827][ T6040] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  113.257722][ T6071] loop3: detected capacity change from 0 to 1024
[  113.547104][ T6071] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  113.614158][ T5831] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  113.808157][ T5898] usb 1-1: USB disconnect, device number 4
[  113.859240][   T36] bridge_slave_1: left allmulticast mode
[  113.882365][   T36] bridge_slave_1: left promiscuous mode
[  113.901147][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.955442][ T5833] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.060638][   T36] bridge_slave_0: left allmulticast mode
[  114.080861][   T36] bridge_slave_0: left promiscuous mode
[  114.097773][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.291643][ T5886] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  114.413163][ T6089] No control pipe specified
[  114.452738][ T5886] usb 2-1: Using ep0 maxpacket: 8
[  114.473017][ T5886] usb 2-1: unable to get BOS descriptor or descriptor too short
[  114.506958][ T5886] usb 2-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  114.537454][ T5886] usb 2-1: config 1 interface 0 has no altsetting 0
[  114.561823][ T5886] usb 2-1: New USB device found, idVendor=044f, idProduct=b654, bcdDevice= 0.40
[  114.579157][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.609810][ T5886] usb 2-1: Product: syz
[  114.624375][ T5886] usb 2-1: Manufacturer: syz
[  114.629790][ T6089] loop3: detected capacity change from 0 to 4096
[  114.641552][ T5886] usb 2-1: SerialNumber: syz
[  114.678048][ T6089] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  114.793711][ T6089] ntfs3(loop3): ino=19, mi_enum_attr
[  114.831510][ T6089] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  115.032265][   T55] Bluetooth: hci1: command tx timeout
[  115.094981][ T5886] usbhid 2-1:1.0: can't add hid device: -71
[  115.141124][ T5886] usbhid 2-1:1.0: probe with driver usbhid failed with error -71
[  116.181680][ T5886] usb 2-1: USB disconnect, device number 3
[  116.193353][   T30] audit: type=1800 audit(1745760608.256:2): pid=6091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.50" name="bus" dev="overlay" ino=91 res=0 errno=0
[  116.398084][ T6098] loop0: detected capacity change from 0 to 512
[  116.468522][ T6098] EXT4-fs: Ignoring removed mblk_io_submit option
[  116.505807][ T6098] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  116.555384][ T6098] EXT4-fs (loop0): can't mount with data_err=abort, fs mounted w/o journal
[  116.862792][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  116.892998][ T5886] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[  117.081494][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  117.117568][   T55] Bluetooth: hci1: command tx timeout
[  117.144274][ T5886] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  117.166217][   T36] bond0 (unregistering): Released all slaves
[  117.171362][ T5886] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64
[  117.186010][ T5886] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 10
[  117.197509][ T5886] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 2449, setting to 64
[  117.208992][ T5886] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  117.218523][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  117.614128][ T5936] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  118.443506][ T6103] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  118.451204][ T6103] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  118.466853][ T5886] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  118.809749][   T36] tipc: Left network mode
[  118.874623][ T5886] usb 2-1: USB disconnect, device number 4
[  119.192029][ T5936] usb 6-1: Using ep0 maxpacket: 8
[  119.197468][   T55] Bluetooth: hci1: command tx timeout
[  119.219776][ T5936] usb 6-1: config 6 has an invalid interface number: 2 but max is 0
[  119.261923][ T1200] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  119.276027][ T5936] usb 6-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config
[  119.289573][ T6123] netlink: 68 bytes leftover after parsing attributes in process `syz.2.59'.
[  119.315213][ T6123] netlink: 'syz.2.59': attribute type 3 has an invalid length.
[  119.347375][ T5936] usb 6-1: config 6 has no interface number 0
[  119.387327][ T5936] usb 6-1: config 6 interface 2 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  119.446544][ T5936] usb 6-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  119.562212][ T5936] usb 6-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[  119.703529][ T5936] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.901532][ T1200] usb 4-1: Using ep0 maxpacket: 8
[  119.941577][ T1200] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  120.033243][ T5827] udevd[5827]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  120.060450][ T6128] loop0: detected capacity change from 0 to 32768
[  120.081720][ T5936] usb 6-1: Product: syz
[  120.085005][ T1200] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  120.086190][ T5936] usb 6-1: Manufacturer: syz
[  120.112044][ T5936] usb 6-1: SerialNumber: syz
[  120.125379][ T5936] usb 6-1: can't set config #6, error -71
[  120.137932][ T5936] usb 6-1: USB disconnect, device number 2
[  120.178488][ T1200] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  120.211048][ T6128] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  120.229209][ T1200] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  120.253066][ T1200] usb 4-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00
[  120.310460][ T1200] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  120.330778][ T6128] XFS (loop0): Ending clean mount
[  120.542233][ T5886] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  120.599233][ T1200] usb 4-1: config 0 descriptor??
[  121.043147][ T6123] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  121.051372][ T5886] usb 2-1: Using ep0 maxpacket: 8
[  121.097964][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  121.111458][ T6123] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  121.184306][ T5886] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  121.244383][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.276792][   T55] Bluetooth: hci1: command tx timeout
[  121.332651][ T5886] usb 2-1: config 0 descriptor??
[  121.447589][ T5834] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  121.550508][ T1200] usbhid 4-1:0.0: can't add hid device: -71
[  121.563904][ T1200] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  121.585427][ T5886] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  121.635438][ T1200] usb 4-1: USB disconnect, device number 2
[  121.679727][ T6164] warning: `syz.2.65' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  121.975473][ T6061] chnl_net:caif_netlink_parms(): no params data found
[  122.486298][ T5886] usb 2-1: USB disconnect, device number 5
[  122.869377][   T36] hsr_slave_0: left promiscuous mode
[  122.940495][ T6180] openvswitch: netlink: Message has 20 unknown bytes.
[  122.949363][ T6180] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  122.959906][   T36] hsr_slave_1: left promiscuous mode
[  122.972404][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  122.980191][   T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[  122.991239][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  123.009279][   T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[  123.093363][   T36] veth1_macvtap: left promiscuous mode
[  123.143053][   T36] veth0_macvtap: left promiscuous mode
[  123.159659][   T36] veth1_vlan: left promiscuous mode
[  123.181940][   T36] veth0_vlan: left promiscuous mode
[  123.532053][ T5989] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  123.581429][ T6189] FAULT_INJECTION: forcing a failure.
[  123.581429][ T6189] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  123.632231][ T6189] CPU: 1 UID: 0 PID: 6189 Comm: syz.3.71 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(full) 
[  123.632272][ T6189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  123.632287][ T6189] Call Trace:
[  123.632297][ T6189]  <TASK>
[  123.632306][ T6189]  dump_stack_lvl+0x189/0x250
[  123.632345][ T6189]  ? __lock_acquire+0xaac/0xd20
[  123.632382][ T6189]  ? __pfx_dump_stack_lvl+0x10/0x10
[  123.632416][ T6189]  ? __pfx__printk+0x10/0x10
[  123.632438][ T6189]  ? srso_alias_return_thunk+0x5/0xfbef5
[  123.632491][ T6189]  should_fail_ex+0x414/0x560
[  123.632536][ T6189]  _copy_from_user+0x2d/0xb0
[  123.632569][ T6189]  ___sys_recvmsg+0x12e/0x510
[  123.632606][ T6189]  ? __pfx____sys_recvmsg+0x10/0x10
[  123.632667][ T6189]  ? srso_alias_return_thunk+0x5/0xfbef5
[  123.632697][ T6189]  ? __might_fault+0xb0/0x130
[  123.632732][ T6189]  do_recvmmsg+0x307/0x760
[  123.632771][ T6189]  ? __pfx_do_recvmmsg+0x10/0x10
[  123.632814][ T6189]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  123.632861][ T6189]  __x64_sys_recvmmsg+0x190/0x240
[  123.632889][ T6189]  ? rcu_is_watching+0x15/0xb0
[  123.632927][ T6189]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  123.632961][ T6189]  ? do_syscall_64+0xba/0x210
[  123.632998][ T6189]  do_syscall_64+0xf6/0x210
[  123.633027][ T6189]  ? srso_alias_return_thunk+0x5/0xfbef5
[  123.633055][ T6189]  ? exc_page_fault+0x91/0x110
[  123.633081][ T6189]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  123.633103][ T6189] RIP: 0033:0x7f7ba618e969
[  123.633124][ T6189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  123.633142][ T6189] RSP: 002b:00007f7ba7011038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  123.633167][ T6189] RAX: ffffffffffffffda RBX: 00007f7ba63b5fa0 RCX: 00007f7ba618e969
[  123.633185][ T6189] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003
[  123.633201][ T6189] RBP: 00007f7ba7011090 R08: 0000000000000000 R09: 0000000000000000
[  123.633216][ T6189] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001
[  123.633230][ T6189] R13: 0000000000000000 R14: 00007f7ba63b5fa0 R15: 00007ffe9ee734e8
[  123.633265][ T6189]  </TASK>
[  123.701473][ T5989] usb 6-1: device descriptor read/64, error -71
[  123.991628][ T6193] capability: warning: `syz.1.70' uses deprecated v2 capabilities in a way that may be insecure
[  124.853434][ T5989] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  125.021499][ T5989] usb 6-1: device descriptor read/64, error -71
[  125.153632][ T5989] usb usb6-port1: attempt power cycle
[  125.665163][ T5989] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  125.705073][ T5989] usb 6-1: device descriptor read/8, error -71
[  126.669136][ T5989] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  126.833191][ T6213] netlink: 68 bytes leftover after parsing attributes in process `syz.1.76'.
[  126.850403][ T6213] netlink: 'syz.1.76': attribute type 3 has an invalid length.
[  128.340287][   T36] team0 (unregistering): Port device team_slave_1 removed
[  128.457494][   T36] team0 (unregistering): Port device team_slave_0 removed
[  130.728349][ T6213] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  130.738588][ T6219] netlink: 124 bytes leftover after parsing attributes in process `syz.3.77'.
[  130.792430][ T6213] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  131.261146][ T6061] bridge0: port 1(bridge_slave_0) entered blocking state
[  131.467640][ T6061] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.481933][ T6061] bridge_slave_0: entered allmulticast mode
[  131.490474][ T6061] bridge_slave_0: entered promiscuous mode
[  131.523713][ T5888] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  132.152236][ T5989] usb 6-1: device descriptor read/8, error -110
[  132.159212][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  132.172404][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  132.192198][ T6061] bridge0: port 2(bridge_slave_1) entered blocking state
[  132.231435][ T6061] bridge0: port 2(bridge_slave_1) entered disabled state
[  132.251536][ T5888] usb 2-1: Using ep0 maxpacket: 8
[  132.261762][ T6061] bridge_slave_1: entered allmulticast mode
[  132.272771][ T5888] usb 2-1: config 6 has an invalid interface number: 2 but max is 0
[  132.280775][ T5888] usb 2-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config
[  132.293014][ T5989] usb usb6-port1: unable to enumerate USB device
[  132.312168][ T6061] bridge_slave_1: entered promiscuous mode
[  132.331861][ T5888] usb 2-1: config 6 has no interface number 0
[  132.361338][ T5888] usb 2-1: config 6 interface 2 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  132.413829][ T5888] usb 2-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  132.486663][ T5888] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[  132.495512][ T6061] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  132.511966][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.530335][ T5888] usb 2-1: Product: syz
[  132.535301][ T5888] usb 2-1: Manufacturer: syz
[  132.545323][ T5888] usb 2-1: SerialNumber: syz
[  132.565598][ T5888] hso 2-1:6.2: Failed to find INT IN ep
[  132.628502][ T6061] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  132.825546][ T5892] usb 2-1: USB disconnect, device number 6
[  133.020194][ T6240] tipc: Started in network mode
[  133.029330][ T6240] tipc: Node identity 6, cluster identity 4711
[  133.042464][ T6240] tipc: Node number set to 6
[  133.064385][ T6061] team0: Port device team_slave_0 added
[  133.100130][ T6061] team0: Port device team_slave_1 added
[  133.361536][ T6061] batman_adv: batadv0: Adding interface: batadv_slave_0
[  133.399331][ T6061] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  133.466230][ T6061] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  133.479501][ T6061] batman_adv: batadv0: Adding interface: batadv_slave_1
[  133.486890][ T6061] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  133.541511][ T6061] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  133.802766][ T6061] hsr_slave_0: entered promiscuous mode
[  133.809672][ T6061] hsr_slave_1: entered promiscuous mode
[  133.851648][ T6061] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  133.866610][ T6061] Cannot create hsr debugfs directory
[  133.931402][ T5898] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  134.123361][ T5898] usb 2-1: Using ep0 maxpacket: 8
[  134.146921][ T5898] usb 2-1: unable to get BOS descriptor or descriptor too short
[  134.180326][ T5898] usb 2-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  134.212146][ T5898] usb 2-1: config 1 interface 0 has no altsetting 0
[  134.247124][ T5898] usb 2-1: New USB device found, idVendor=044f, idProduct=b654, bcdDevice= 0.40
[  134.301696][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.330398][ T5898] usb 2-1: Product: syz
[  134.507785][ T5898] usb 2-1: Manufacturer: syz
[  134.513098][ T5898] usb 2-1: SerialNumber: syz
[  135.478059][ T5898] usbhid 2-1:1.0: can't add hid device: -71
[  135.524928][ T5898] usbhid 2-1:1.0: probe with driver usbhid failed with error -71
[  135.601703][ T5898] usb 2-1: USB disconnect, device number 7
[  136.132774][ T6061] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  136.900064][ T6061] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  137.093065][ T6061] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  137.195832][ T6061] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  138.512927][ T6291] netlink: 124 bytes leftover after parsing attributes in process `syz.1.90'.
[  139.287629][ T6061] 8021q: adding VLAN 0 to HW filter on device bond0
[  139.406805][ T6061] 8021q: adding VLAN 0 to HW filter on device team0
[  139.498221][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[  139.505430][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[  139.746087][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[  139.753321][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[  140.183519][ T6061] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  140.315608][ T5840] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  140.351573][ T5840] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  140.539714][ T6310] No such timeout policy "syz1"
[  140.598285][ T5840] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  140.614377][ T5840] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  140.624962][ T5840] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  141.241465][ T5898] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  141.582821][ T5898] usb 6-1: Using ep0 maxpacket: 8
[  141.710168][ T5898] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  141.762110][ T6061] 8021q: adding VLAN 0 to HW filter on device batadv0
[  141.822943][ T5898] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  141.884383][ T5898] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024
[  141.991359][ T5898] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  142.072199][ T5898] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  142.163096][ T5840] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  142.182206][ T5840] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  142.183167][ T5898] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  142.192882][ T5840] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  142.207305][ T5840] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  142.216177][ T5840] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  142.301468][ T5898] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  142.432687][ T6344] x_tables: ip6_tables: rpfilter.0 match: invalid size 8 (kernel) != (user) 48
[  142.598055][ T5898] usb 6-1: GET_CAPABILITIES returned 0
[  142.628719][ T5898] usbtmc 6-1:16.0: can't read capabilities
[  142.711463][ T5840] Bluetooth: hci6: command tx timeout
[  142.800248][    C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  143.004434][ T6312] chnl_net:caif_netlink_parms(): no params data found
[  143.862991][ T6312] bridge0: port 1(bridge_slave_0) entered blocking state
[  143.897125][ T6312] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.926579][ T6312] bridge_slave_0: entered allmulticast mode
[  143.981031][ T6312] bridge_slave_0: entered promiscuous mode
[  144.041870][ T6312] bridge0: port 2(bridge_slave_1) entered blocking state
[  144.056784][ T5989] usb 6-1: USB disconnect, device number 7
[  144.093755][ T6312] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.120103][ T6312] bridge_slave_1: entered allmulticast mode
[  144.185676][ T6312] bridge_slave_1: entered promiscuous mode
[  144.307034][ T6355] loop5: detected capacity change from 0 to 512
[  144.315795][ T5840] Bluetooth: hci7: command tx timeout
[  144.347057][ T6355] EXT4-fs: Ignoring removed mblk_io_submit option
[  144.372315][ T6355] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  144.474635][ T6355] EXT4-fs (loop5): can't mount with data_err=abort, fs mounted w/o journal
[  144.797620][ T5840] Bluetooth: hci6: command tx timeout
[  144.969466][ T6361] FAULT_INJECTION: forcing a failure.
[  144.969466][ T6361] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  145.071746][ T6361] CPU: 1 UID: 0 PID: 6361 Comm: syz.3.103 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(full) 
[  145.071779][ T6361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  145.071793][ T6361] Call Trace:
[  145.071802][ T6361]  <TASK>
[  145.071811][ T6361]  dump_stack_lvl+0x189/0x250
[  145.071850][ T6361]  ? __lock_acquire+0xaac/0xd20
[  145.071886][ T6361]  ? __pfx_dump_stack_lvl+0x10/0x10
[  145.071921][ T6361]  ? __pfx__printk+0x10/0x10
[  145.071945][ T6361]  ? srso_alias_return_thunk+0x5/0xfbef5
[  145.071988][ T6361]  should_fail_ex+0x414/0x560
[  145.072032][ T6361]  _copy_from_user+0x2d/0xb0
[  145.072066][ T6361]  memdup_user+0x5e/0xd0
[  145.072091][ T6361]  strndup_user+0x68/0xd0
[  145.072115][ T6361]  __se_sys_mount+0x9c/0x410
[  145.072155][ T6361]  ? srso_alias_return_thunk+0x5/0xfbef5
[  145.072182][ T6361]  ? ksys_write+0x1f0/0x250
[  145.072212][ T6361]  ? __pfx___se_sys_mount+0x10/0x10
[  145.072248][ T6361]  ? srso_alias_return_thunk+0x5/0xfbef5
[  145.072274][ T6361]  ? __x64_sys_mount+0x20/0xc0
[  145.072308][ T6361]  do_syscall_64+0xf6/0x210
[  145.072334][ T6361]  ? srso_alias_return_thunk+0x5/0xfbef5
[  145.072359][ T6361]  ? exc_page_fault+0x91/0x110
[  145.072384][ T6361]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.072406][ T6361] RIP: 0033:0x7f7ba618e969
[  145.072425][ T6361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  145.072444][ T6361] RSP: 002b:00007f7ba6ff0038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  145.072468][ T6361] RAX: ffffffffffffffda RBX: 00007f7ba63b6080 RCX: 00007f7ba618e969
[  145.072484][ T6361] RDX: 0000200000000040 RSI: 0000200000000100 RDI: 0000000000000000
[  145.072500][ T6361] RBP: 00007f7ba6ff0090 R08: 00002000000002c0 R09: 0000000000000000
[  145.072515][ T6361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  145.072530][ T6361] R13: 0000000000000001 R14: 00007f7ba63b6080 R15: 00007ffe9ee734e8
[  145.072564][ T6361]  </TASK>
[  145.119840][ T6312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  145.396060][ T6312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  145.512421][ T5888] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  145.672946][ T5888] usb 2-1: Using ep0 maxpacket: 8
[  145.680213][ T5888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  145.691973][ T5888] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  145.728659][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  145.802669][ T5888] usb 2-1: config 0 descriptor??
[  145.877209][ T6061] veth0_vlan: entered promiscuous mode
[  145.975478][ T6312] team0: Port device team_slave_0 added
[  146.033414][ T6312] team0: Port device team_slave_1 added
[  146.039687][ T5888] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  147.010596][ T5840] Bluetooth: hci7: command tx timeout
[  147.022142][ T5840] Bluetooth: hci6: command tx timeout
[  147.735312][ T5886] usb 2-1: USB disconnect, device number 8
[  147.854170][ T6312] batman_adv: batadv0: Adding interface: batadv_slave_0
[  147.871433][ T6312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  147.947357][ T6312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  148.017332][ T6382] netlink: 124 bytes leftover after parsing attributes in process `syz.3.108'.
[  148.074566][ T5989] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  148.109596][ T6061] veth1_vlan: entered promiscuous mode
[  148.193826][ T6312] batman_adv: batadv0: Adding interface: batadv_slave_1
[  148.241654][ T6312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  148.271557][ T5989] usb 6-1: Using ep0 maxpacket: 8
[  148.286003][ T5989] usb 6-1: config 6 has an invalid interface number: 2 but max is 0
[  148.332413][ T5989] usb 6-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config
[  148.361832][ T6312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  148.388451][ T5989] usb 6-1: config 6 has no interface number 0
[  148.585954][ T5989] usb 6-1: config 6 interface 2 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  148.872642][ T5989] usb 6-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  149.011343][ T5989] usb 6-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[  149.020426][ T5989] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.083952][ T5989] usb 6-1: Product: syz
[  149.111793][   T55] Bluetooth: hci6: command tx timeout
[  149.117264][ T5840] Bluetooth: hci7: command tx timeout
[  149.133178][ T5989] usb 6-1: Manufacturer: syz
[  149.139317][ T5989] usb 6-1: SerialNumber: syz
[  149.195652][ T5989] hso 6-1:6.2: Failed to find INT IN ep
[  149.765770][ T5936] usb 6-1: USB disconnect, device number 8
[  150.169903][ T6312] hsr_slave_0: entered promiscuous mode
[  150.184872][ T6312] hsr_slave_1: entered promiscuous mode
[  150.197194][ T6312] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  150.214618][ T6312] Cannot create hsr debugfs directory
[  150.244601][ T6337] chnl_net:caif_netlink_parms(): no params data found
[  150.280744][ T6411] batadv1: entered promiscuous mode
[  150.292190][ T6411] 8021q: adding VLAN 0 to HW filter on device batadv1
[  150.334724][ T6061] veth0_macvtap: entered promiscuous mode
[  150.523200][ T6061] veth1_macvtap: entered promiscuous mode
[  150.581725][ T6416] syz.5.115 uses obsolete (PF_INET,SOCK_PACKET)
[  150.845990][ T1200] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  151.080083][ T1200] usb 2-1: Using ep0 maxpacket: 8
[  151.088045][ T1200] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  151.104415][ T1200] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  151.126683][ T1200] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  151.136706][ T1200] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  151.150097][ T1200] usb 2-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00
[  151.172736][ T6061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  151.188818][ T1200] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  151.197724][ T5840] Bluetooth: hci7: command tx timeout
[  151.203953][ T6061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.222566][ T1200] usb 2-1: config 0 descriptor??
[  151.236991][ T6061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  151.260048][ T6061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.270209][ T6061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  151.283622][ T6061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.293568][ T6061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  151.304369][ T6061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.314749][ T6061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  151.325831][ T6061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.338873][ T6061] batman_adv: batadv0: Interface activated: batadv_slave_0
[  151.349593][ T6425] tipc: Started in network mode
[  151.360352][ T6425] tipc: Node identity 6, cluster identity 4711
[  151.367424][ T6425] tipc: Node number set to 6
[  151.376088][ T6337] bridge0: port 1(bridge_slave_0) entered blocking state
[  151.421428][ T6337] bridge0: port 1(bridge_slave_0) entered disabled state
[  151.478782][ T6337] bridge_slave_0: entered allmulticast mode
[  151.500683][ T6337] bridge_slave_0: entered promiscuous mode
[  151.528427][ T6337] bridge0: port 2(bridge_slave_1) entered blocking state
[  151.561644][ T6337] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.568996][ T6337] bridge_slave_1: entered allmulticast mode
[  151.628570][ T6337] bridge_slave_1: entered promiscuous mode
[  151.763041][ T6061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  151.824461][ T6061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.859533][ T6061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  151.877418][ T6061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.919447][ T6061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  151.968528][ T1200] usbhid 2-1:0.0: can't add hid device: -71
[  151.981432][ T6061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  152.009947][ T1200] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  152.028136][ T6061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  152.059320][ T1200] usb 2-1: USB disconnect, device number 9
[  152.078192][ T6061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  152.178022][ T6061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  152.209028][ T6061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  153.033277][ T6061] batman_adv: batadv0: Interface activated: batadv_slave_1
[  154.720172][ T6443] loop3: detected capacity change from 0 to 32768
[  154.783476][ T6443] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  154.849974][ T6450] No control pipe specified
[  154.873377][ T6337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  154.896859][ T6443] XFS (loop3): Ending clean mount
[  155.459268][ T6450] loop5: detected capacity change from 0 to 4096
[  155.473622][ T6061] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  155.495849][ T6450] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  155.505009][ T6061] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  155.516432][ T6061] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  155.529068][ T6061] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  155.589608][ T6337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  155.651036][ T6450] ntfs3(loop5): ino=19, mi_enum_attr
[  155.666947][ T6450] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  155.789974][ T5833] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  156.284532][ T6337] team0: Port device team_slave_0 added
[  156.457047][ T6463] netlink: 124 bytes leftover after parsing attributes in process `syz.1.128'.
[  157.773190][ T6337] team0: Port device team_slave_1 added
[  158.051428][ T5886] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  158.331381][ T5886] usb 6-1: Using ep0 maxpacket: 8
[  158.373194][ T5886] usb 6-1: config 6 has an invalid interface number: 2 but max is 0
[  158.707268][ T5886] usb 6-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config
[  158.765201][ T5886] usb 6-1: config 6 has no interface number 0
[  158.807332][ T5886] usb 6-1: config 6 interface 2 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  158.850765][ T6337] batman_adv: batadv0: Adding interface: batadv_slave_0
[  158.872656][ T5886] usb 6-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  158.891839][ T6337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  158.964221][ T5886] usb 6-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[  158.974885][ T5886] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  159.013790][ T5886] usb 6-1: Product: syz
[  159.018017][ T5886] usb 6-1: Manufacturer: syz
[  159.041414][ T5886] usb 6-1: SerialNumber: syz
[  159.066418][ T6337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  159.098628][ T5886] hso 6-1:6.2: Failed to find INT IN ep
[  159.134641][ T6337] batman_adv: batadv0: Adding interface: batadv_slave_1
[  159.188793][ T6337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  159.420181][ T6337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  159.531136][ T5989] usb 6-1: USB disconnect, device number 9
[  159.724976][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  159.760096][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  160.587765][ T6501] loop5: detected capacity change from 0 to 512
[  160.595909][ T6337] hsr_slave_0: entered promiscuous mode
[  160.620597][ T6337] hsr_slave_1: entered promiscuous mode
[  160.636695][ T6501] EXT4-fs: Ignoring removed mblk_io_submit option
[  160.644072][ T6337] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  160.660072][ T6337] Cannot create hsr debugfs directory
[  160.667877][ T6501] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  160.829218][ T6501] EXT4-fs (loop5): can't mount with data_err=abort, fs mounted w/o journal
[  162.024651][ T6312] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  162.067389][ T6312] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  162.735238][ T6312] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  162.749273][ T2938] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  162.806438][ T6312] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  162.828122][ T2938] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  163.020131][ T6516] serio: Serial port ptm0
[  163.129814][ T6516] batadv2: entered promiscuous mode
[  163.148007][ T6516] 8021q: adding VLAN 0 to HW filter on device batadv2
[  165.462163][ T6535] netlink: 124 bytes leftover after parsing attributes in process `syz.1.140'.
[  166.124636][ T6312] 8021q: adding VLAN 0 to HW filter on device bond0
[  166.190927][ T6337] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  166.323647][ T6337] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  166.406385][ T6337] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  166.521463][ T1200] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  167.021485][ T1200] usb 2-1: Using ep0 maxpacket: 8
[  167.164630][ T6337] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  167.202660][ T6558] loop6: detected capacity change from 0 to 512
[  167.209974][ T6558] EXT4-fs: Ignoring removed mblk_io_submit option
[  167.826664][ T1200] usb 2-1: config 6 has an invalid interface number: 2 but max is 0
[  167.841344][ T1200] usb 2-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config
[  167.852612][ T1200] usb 2-1: config 6 has no interface number 0
[  167.858760][ T1200] usb 2-1: config 6 interface 2 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  167.871048][ T1200] usb 2-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  167.888311][ T6312] 8021q: adding VLAN 0 to HW filter on device team0
[  167.913871][ T6558] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[  167.965720][ T1200] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[  167.979910][ T6558] EXT4-fs (loop6): can't mount with data_err=abort, fs mounted w/o journal
[  168.022709][ T1200] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  168.075178][ T2958] bridge0: port 1(bridge_slave_0) entered blocking state
[  168.082754][ T2958] bridge0: port 1(bridge_slave_0) entered forwarding state
[  168.141328][ T1200] usb 2-1: Product: syz
[  168.145566][ T1200] usb 2-1: Manufacturer: syz
[  168.623726][ T1200] usb 2-1: SerialNumber: syz
[  168.832867][ T6564] serio: Serial port ptm0
[  168.845815][ T1200] hso 2-1:6.2: Failed to find INT IN ep
[  169.038998][ T1128] bridge0: port 2(bridge_slave_1) entered blocking state
[  169.046310][ T1128] bridge0: port 2(bridge_slave_1) entered forwarding state
[  169.085678][ T5892] usb 2-1: USB disconnect, device number 10
[  169.348444][ T6564] batadv1: entered promiscuous mode
[  169.383220][ T6564] 8021q: adding VLAN 0 to HW filter on device batadv1
[  171.259489][ T6337] 8021q: adding VLAN 0 to HW filter on device bond0
[  171.639742][ T6337] 8021q: adding VLAN 0 to HW filter on device team0
[  171.811421][ T6598] netlink: 124 bytes leftover after parsing attributes in process `syz.3.155'.
[  172.145310][ T2958] bridge0: port 1(bridge_slave_0) entered blocking state
[  172.152601][ T2958] bridge0: port 1(bridge_slave_0) entered forwarding state
[  172.235528][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[  172.242719][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[  175.207626][ T6628] loop3: detected capacity change from 0 to 512
[  175.266643][ T6312] 8021q: adding VLAN 0 to HW filter on device batadv0
[  175.312309][ T6628] EXT4-fs: Ignoring removed mblk_io_submit option
[  175.913813][ T6628] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  176.008222][ T6628] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal
[  176.040799][    T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  176.399734][    T9] usb 2-1: Using ep0 maxpacket: 8
[  176.575353][    T9] usb 2-1: config 6 has an invalid interface number: 2 but max is 0
[  176.591349][    T9] usb 2-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config
[  176.616830][    T9] usb 2-1: config 6 has no interface number 0
[  176.626387][    T9] usb 2-1: config 6 interface 2 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  176.766774][    T9] usb 2-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  176.811501][    T9] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[  176.820607][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  176.854667][ T6647] serio: Serial port ptm0
[  176.870480][    T9] usb 2-1: Product: syz
[  176.877971][ T6337] 8021q: adding VLAN 0 to HW filter on device batadv0
[  176.920979][    T9] usb 2-1: Manufacturer: syz
[  176.971449][    T9] usb 2-1: SerialNumber: syz
[  176.979598][ T6647] batadv2: entered promiscuous mode
[  177.039444][ T6647] 8021q: adding VLAN 0 to HW filter on device batadv2
[  177.044259][    T9] hso 2-1:6.2: Failed to find INT IN ep
[  178.186452][ T5936] usb 2-1: USB disconnect, device number 11
[  178.645474][ T6669] x_tables: ip6_tables: rpfilter.0 match: invalid size 8 (kernel) != (user) 48
[  178.969602][ T6312] veth0_vlan: entered promiscuous mode
[  179.109299][ T6312] veth1_vlan: entered promiscuous mode
[  179.493701][ T6312] veth0_macvtap: entered promiscuous mode
[  179.566239][ T6683] netlink: 124 bytes leftover after parsing attributes in process `syz.3.170'.
[  180.227080][ T6312] veth1_macvtap: entered promiscuous mode
[  180.589318][ T6312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  180.671787][ T6312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  180.724855][ T6312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  180.932710][ T6312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  180.944334][ T6312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  180.955554][ T6312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  180.965975][ T6312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  180.978437][ T6312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  180.989409][ T6312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  181.000686][ T6312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.018439][ T6312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  181.029687][ T6312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.340334][ T6312] batman_adv: batadv0: Interface activated: batadv_slave_0
[  181.436278][ T6337] veth0_vlan: entered promiscuous mode
[  181.617931][ T6312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  182.826415][ T6312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  182.905075][ T6705] loop6: detected capacity change from 0 to 512
[  182.940647][ T6312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  182.941239][ T6705] EXT4-fs: Ignoring removed mblk_io_submit option
[  183.048056][ T6705] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[  183.071395][ T6312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  183.721546][ T6705] EXT4-fs (loop6): can't mount with data_err=abort, fs mounted w/o journal
[  183.731458][ T6312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  183.744338][ T6312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  183.862542][ T6312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  184.123326][ T6312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  184.333033][ T6312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  184.344207][ T6312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  184.363449][ T6312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  184.547404][ T6312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  185.513415][ T6312] batman_adv: batadv0: Interface activated: batadv_slave_1
[  185.680333][ T6337] veth1_vlan: entered promiscuous mode
[  186.175398][ T6312] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  186.229090][ T6723] serio: Serial port ptm0
[  186.311410][ T6312] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  186.320186][ T6312] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  186.424156][ T6312] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  186.481429][    T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  186.628967][ T6723] batadv3: entered promiscuous mode
[  186.672814][ T6723] 8021q: adding VLAN 0 to HW filter on device batadv3
[  186.821425][    T9] usb 2-1: Using ep0 maxpacket: 8
[  186.835822][    T9] usb 2-1: config 6 has an invalid interface number: 2 but max is 0
[  186.891392][    T9] usb 2-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config
[  186.976778][    T9] usb 2-1: config 6 has no interface number 0
[  187.006448][    T9] usb 2-1: config 6 interface 2 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  187.056353][ T6337] veth0_macvtap: entered promiscuous mode
[  187.086374][    T9] usb 2-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  187.198258][ T6337] veth1_macvtap: entered promiscuous mode
[  187.208845][    T9] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[  187.324669][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  187.347101][    T9] usb 2-1: Product: syz
[  187.390052][    T9] usb 2-1: Manufacturer: syz
[  187.406074][    T9] usb 2-1: SerialNumber: syz
[  187.429732][ T6337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  187.467694][    T9] hso 2-1:6.2: Failed to find INT IN ep
[  187.971434][ T6337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  188.014347][ T6337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  188.079101][ T1200] usb 2-1: USB disconnect, device number 12
[  188.087550][ T6337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  188.139947][ T6337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  188.177456][ T6337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  188.199131][ T6337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  188.229910][ T6337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  188.260355][ T6337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  188.292951][ T6337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  188.336266][ T6337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  188.375773][ T6337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  188.404803][ T6337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  188.431480][ T6337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  188.474406][ T6337] batman_adv: batadv0: Interface activated: batadv_slave_0
[  188.694306][ T3552] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  188.770005][ T6337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  188.781187][ T3552] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  188.808711][ T6337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  188.838466][ T6337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  188.880585][ T6337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  189.135466][ T6337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  189.192239][ T6337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  189.285322][ T6337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  189.331491][ T6337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  189.362091][ T6337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  189.395447][ T6337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  189.419638][ T6337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  189.439564][ T6337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  189.454726][ T6337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  190.481461][ T6337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.572985][ T6337] batman_adv: batadv0: Interface activated: batadv_slave_1
[  190.996780][    C0] vcan0: j1939_tp_rxtimer: 0xffff88815a1bf800: rx timeout, send abort
[  191.497413][    C0] vcan0: j1939_tp_rxtimer: 0xffff88815a1bfc00: rx timeout, send abort
[  191.506200][    C0] vcan0: j1939_tp_rxtimer: 0xffff88815a1bf800: abort rx timeout. Force session deactivation
[  192.005753][    C0] vcan0: j1939_tp_rxtimer: 0xffff88815a1bfc00: abort rx timeout. Force session deactivation
[  192.322352][ T6337] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  192.401362][ T6337] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  192.471770][ T6337] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  192.480538][ T6337] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  192.618172][   T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  192.671221][   T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  192.679807][ T6772] loop1: detected capacity change from 0 to 512
[  192.744032][ T6772] EXT4-fs: Ignoring removed mblk_io_submit option
[  192.805830][ T6772] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  192.839361][ T6775] batadv3: entered promiscuous mode
[  192.847244][ T6775] 8021q: adding VLAN 0 to HW filter on device batadv3
[  192.895365][ T6772] EXT4-fs (loop1): can't mount with data_err=abort, fs mounted w/o journal
[  193.685108][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  193.691987][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  193.699171][ T6774] netlink: 124 bytes leftover after parsing attributes in process `syz.5.191'.
[  194.721403][   T24] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  194.944068][ T6804] x_tables: ip6_tables: rpfilter.0 match: invalid size 8 (kernel) != (user) 48
[  195.000180][ T3519] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  195.047203][   T24] usb 2-1: Using ep0 maxpacket: 8
[  195.088267][   T24] usb 2-1: config 6 has an invalid interface number: 2 but max is 0
[  195.158788][ T3519] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  195.166728][   T24] usb 2-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config
[  195.276611][ T6808] netlink: 68 bytes leftover after parsing attributes in process `syz.7.89'.
[  196.035870][   T24] usb 2-1: config 6 has no interface number 0
[  196.042161][   T24] usb 2-1: config 6 interface 2 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  196.052972][   T24] usb 2-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  196.115250][   T24] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[  196.139608][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  196.303322][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  196.331925][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  196.349511][   T24] usb 2-1: Product: syz
[  196.423799][   T24] usb 2-1: Manufacturer: syz
[  196.644751][   T24] usb 2-1: SerialNumber: syz
[  196.730586][   T24] hso 2-1:6.2: Failed to find INT IN ep
[  197.876597][ T5989] usb 2-1: USB disconnect, device number 13
[  199.662380][ T6827] No such timeout policy "syz1"
[  200.723315][    C0] vcan0: j1939_tp_rxtimer: 0xffff88802a82ec00: rx timeout, send abort
[  201.223426][    C0] vcan0: j1939_tp_rxtimer: 0xffff888059d67400: rx timeout, send abort
[  201.231719][    C0] vcan0: j1939_tp_rxtimer: 0xffff88802a82ec00: abort rx timeout. Force session deactivation
[  201.295056][ T6837] batadv1: entered promiscuous mode
[  201.363868][ T6837] 8021q: adding VLAN 0 to HW filter on device batadv1
[  201.522800][ T6843] loop1: detected capacity change from 0 to 512
[  201.600078][ T6843] EXT4-fs: Ignoring removed mblk_io_submit option
[  201.690719][ T6843] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  201.732630][    C0] vcan0: j1939_tp_rxtimer: 0xffff888059d67400: abort rx timeout. Force session deactivation
[  201.783337][ T6843] EXT4-fs (loop1): can't mount with data_err=abort, fs mounted w/o journal
[  203.845625][ T6867] netlink: 68 bytes leftover after parsing attributes in process `syz.5.212'.
[  203.863319][ T6867] netlink: 'syz.5.212': attribute type 3 has an invalid length.
[  204.720694][   T55] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  204.733277][   T55] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  204.743264][   T55] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  204.752304][   T55] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  204.759901][   T55] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  204.875644][ T2958] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.068507][ T6867] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  205.123603][ T6867] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  206.394484][ T2958] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  206.725222][    C0] vcan0: j1939_tp_rxtimer: 0xffff888087bc7800: rx timeout, send abort
[  207.225346][    C0] vcan0: j1939_tp_rxtimer: 0xffff888087bc5400: rx timeout, send abort
[  207.234726][    C0] vcan0: j1939_tp_rxtimer: 0xffff888087bc7800: abort rx timeout. Force session deactivation
[  207.405810][   T55] Bluetooth: hci7: command tx timeout
[  207.512262][ T5936] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  207.734713][    C0] vcan0: j1939_tp_rxtimer: 0xffff888087bc5400: abort rx timeout. Force session deactivation
[  208.112815][ T5936] usb 2-1: Using ep0 maxpacket: 8
[  208.209926][ T5936] usb 2-1: config 6 has an invalid interface number: 2 but max is 0
[  208.256829][ T2958] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.273562][ T5936] usb 2-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config
[  208.379866][ T5936] usb 2-1: config 6 has no interface number 0
[  208.429932][ T5936] usb 2-1: config 6 interface 2 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  208.497179][ T5936] usb 2-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  208.544288][ T6893] batadv4: entered promiscuous mode
[  208.562897][ T5936] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[  208.580242][ T5936] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  208.595482][ T6893] 8021q: adding VLAN 0 to HW filter on device batadv4
[  208.625366][ T5936] usb 2-1: Product: syz
[  208.648470][ T5936] usb 2-1: Manufacturer: syz
[  208.656431][ T6901] netlink: 124 bytes leftover after parsing attributes in process `syz.3.220'.
[  208.678959][ T5936] usb 2-1: SerialNumber: syz
[  208.718356][ T5936] hso 2-1:6.2: Failed to find INT IN ep
[  208.804233][ T6905] loop6: detected capacity change from 0 to 512
[  208.820761][ T6905] EXT4-fs: Ignoring removed mblk_io_submit option
[  208.874781][ T6905] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[  208.936023][ T6905] EXT4-fs (loop6): can't mount with data_err=abort, fs mounted w/o journal
[  209.410968][   T24] usb 2-1: USB disconnect, device number 14
[  209.431429][   T55] Bluetooth: hci7: command tx timeout
[  209.449368][ T2958] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.876681][ T6911] No such timeout policy "syz1"
[  211.511817][   T55] Bluetooth: hci7: command tx timeout
[  211.599711][ T2958] bridge_slave_1: left allmulticast mode
[  211.633591][ T6933] x_tables: ip6_tables: rpfilter.0 match: invalid size 8 (kernel) != (user) 48
[  211.754862][ T2958] bridge_slave_1: left promiscuous mode
[  211.818679][ T2958] bridge0: port 2(bridge_slave_1) entered disabled state
[  212.246704][ T2958] bridge_slave_0: left allmulticast mode
[  212.286733][ T2958] bridge_slave_0: left promiscuous mode
[  212.327114][ T2958] bridge0: port 1(bridge_slave_0) entered disabled state
[  212.392961][ T6939] kAFS: No cell specified
[  213.591726][   T55] Bluetooth: hci7: command tx timeout
[  214.210528][ T6946] netlink: 68 bytes leftover after parsing attributes in process `syz.7.231'.
[  214.228763][ T6946] netlink: 'syz.7.231': attribute type 3 has an invalid length.
[  216.371866][ T5846] Bluetooth: hci4: command 0x0406 tx timeout
[  216.377930][ T5846] Bluetooth: hci5: command 0x0406 tx timeout
[  216.381500][ T5836] Bluetooth: hci2: command 0x0406 tx timeout
[  216.386535][ T5846] Bluetooth: hci0: command 0x0406 tx timeout
[  216.389903][ T5836] Bluetooth: hci3: command 0x0406 tx timeout
[  216.777713][ T6959] loop3: detected capacity change from 0 to 512
[  216.831006][ T6958] serio: Serial port ptm0
[  216.845814][ T6959] EXT4-fs: Ignoring removed mblk_io_submit option
[  216.995359][ T6959] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  217.030364][ T6959] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal
[  217.848593][ T6966] No such timeout policy "syz1"
[  218.852184][ T2958] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  218.868142][ T2958] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  218.932308][ T2958] bond0 (unregistering): Released all slaves
[  219.154128][ T6958] batadv2: entered promiscuous mode
[  219.161826][ T6946] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  219.183002][ T6958] 8021q: adding VLAN 0 to HW filter on device batadv2
[  219.224555][ T6946] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  219.475628][ T5989] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  219.571459][    T9] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  219.815702][ T5989] usb 4-1: Using ep0 maxpacket: 8
[  219.858724][ T5989] usb 4-1: config 6 has an invalid interface number: 2 but max is 0
[  219.882946][ T5989] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config
[  220.001441][    T9] usb 6-1: Using ep0 maxpacket: 8
[  220.051513][ T5989] usb 4-1: config 6 has no interface number 0
[  220.072564][    T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  220.100244][ T5989] usb 4-1: config 6 interface 2 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  220.162860][    T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  220.184059][ T5989] usb 4-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  220.244388][    T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024
[  220.285369][ T5989] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[  220.318717][    T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  220.337401][ T5989] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  220.481756][ T6986] kAFS: No cell specified
[  220.496424][    T9] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  220.510751][ T5989] usb 4-1: Product: syz
[  220.516154][ T5989] usb 4-1: Manufacturer: syz
[  220.521530][ T5989] usb 4-1: SerialNumber: syz
[  220.542512][    T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  220.592974][ T5989] hso 4-1:6.2: Failed to find INT IN ep
[  220.609027][ T6871] chnl_net:caif_netlink_parms(): no params data found
[  220.621572][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  221.006511][    T9] usb 6-1: GET_CAPABILITIES returned 0
[  221.702021][    T9] usbtmc 6-1:16.0: can't read capabilities
[  221.767736][   T24] usb 4-1: USB disconnect, device number 3
[  223.321425][   T24] usb 6-1: USB disconnect, device number 10
[  224.121469][ T2958] hsr_slave_0: left promiscuous mode
[  224.144926][ T7010] loop3: detected capacity change from 0 to 512
[  224.198375][ T7010] EXT4-fs: Ignoring removed mblk_io_submit option
[  224.215788][ T2958] hsr_slave_1: left promiscuous mode
[  224.252148][ T2958] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  224.304586][ T7010] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  224.309674][ T2958] batman_adv: batadv0: Removing interface: batadv_slave_0
[  224.425362][ T7021] x_tables: ip6_tables: rpfilter.0 match: invalid size 8 (kernel) != (user) 48
[  224.437530][ T5840] Bluetooth: hci2: unexpected event for opcode 0x0803
[  224.492100][ T7010] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal
[  224.533923][ T2958] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  224.611447][ T2958] batman_adv: batadv0: Removing interface: batadv_slave_1
[  225.187252][ T2958] veth1_macvtap: left promiscuous mode
[  225.207711][ T2958] veth0_macvtap: left promiscuous mode
[  225.227376][ T2958] veth1_vlan: left promiscuous mode
[  225.272244][ T2958] veth0_vlan: left promiscuous mode
[  225.471469][ T7029] netlink: 68 bytes leftover after parsing attributes in process `syz.5.252'.
[  225.490114][ T7029] netlink: 'syz.5.252': attribute type 3 has an invalid length.
[  226.491120][ T7033] No such timeout policy "syz1"
[  229.138938][ T7046] kAFS: No cell specified
[  229.648149][ T7048] loop1: detected capacity change from 0 to 32768
[  229.951021][ T7048] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  230.880831][ T7048] XFS (loop1): Ending clean mount
[  232.436216][ T5831] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  232.909192][ T5892] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  232.982365][ T2958] team0 (unregistering): Port device team_slave_1 removed
[  233.112034][ T5892] usb 4-1: Using ep0 maxpacket: 8
[  233.120121][ T5892] usb 4-1: config 6 has an invalid interface number: 2 but max is 0
[  233.133012][ T5892] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config
[  233.161486][ T5892] usb 4-1: config 6 has no interface number 0
[  233.167638][ T5892] usb 4-1: config 6 interface 2 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  233.199843][ T2958] team0 (unregistering): Port device team_slave_0 removed
[  233.230255][ T5892] usb 4-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  233.444594][ T5892] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[  233.454563][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  233.481408][ T5892] usb 4-1: Product: syz
[  233.485628][ T5892] usb 4-1: Manufacturer: syz
[  233.490235][ T5892] usb 4-1: SerialNumber: syz
[  233.555263][ T5892] hso 4-1:6.2: Failed to find INT IN ep
[  233.799871][ T5892] usb 4-1: USB disconnect, device number 4
[  235.783217][ T7080] loop3: detected capacity change from 0 to 512
[  235.790866][ T7080] EXT4-fs: Ignoring removed mblk_io_submit option
[  235.827201][ T7080] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  235.869378][ T7080] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal
[  236.489405][ T7003] netlink: 124 bytes leftover after parsing attributes in process `syz.7.245'.
[  236.631470][ T5839] Bluetooth: hci1: command 0x0406 tx timeout
[  236.902874][ T7029] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  236.922336][ T7029] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  237.291875][ T7092] kAFS: No cell specified
[  238.856431][ T7104] tipc: Started in network mode
[  238.882366][ T7104] tipc: Node identity 6, cluster identity 4711
[  239.110536][ T5892] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  239.902631][ T7104] tipc: Node number set to 6
[  240.167710][ T6871] bridge0: port 1(bridge_slave_0) entered blocking state
[  240.231465][ T5892] usb 6-1: Using ep0 maxpacket: 8
[  240.243108][ T5892] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  240.246875][ T6871] bridge0: port 1(bridge_slave_0) entered disabled state
[  240.269946][ T5892] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  240.431324][ T5892] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024
[  240.485809][ T6871] bridge_slave_0: entered allmulticast mode
[  240.541311][ T5892] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  240.578790][ T6871] bridge_slave_0: entered promiscuous mode
[  240.787617][ T6871] bridge0: port 2(bridge_slave_1) entered blocking state
[  240.803674][ T5892] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  240.861547][ T6871] bridge0: port 2(bridge_slave_1) entered disabled state
[  240.991370][ T5989] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  241.027933][ T6871] bridge_slave_1: entered allmulticast mode
[  241.060253][ T5892] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  241.124350][ T5892] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  241.134989][ T6871] bridge_slave_1: entered promiscuous mode
[  241.207309][ T5989] usb 4-1: Using ep0 maxpacket: 8
[  241.230841][ T5892] usb 6-1: can't set config #16, error -71
[  241.244846][ T5989] usb 4-1: config 6 has an invalid interface number: 2 but max is 0
[  241.338382][ T7114] netlink: 124 bytes leftover after parsing attributes in process `syz.1.273'.
[  241.412480][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880b1ce6c00: rx timeout, send abort
[  241.543932][ T5989] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config
[  241.624376][ T5892] usb 6-1: USB disconnect, device number 11
[  241.912579][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880b1ce4800: rx timeout, send abort
[  241.920969][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880b1ce6c00: abort rx timeout. Force session deactivation
[  241.979167][ T5989] usb 4-1: config 6 has no interface number 0
[  242.016738][ T5989] usb 4-1: config 6 interface 2 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  242.080226][ T5989] usb 4-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  242.147741][ T5989] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[  242.167331][ T5989] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  242.219475][ T5989] usb 4-1: Product: syz
[  242.242764][ T5989] usb 4-1: Manufacturer: syz
[  242.248157][ T5839] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  242.258249][ T5839] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  242.268427][ T5839] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  242.270000][ T5839] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  242.270746][ T5839] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  242.282157][ T5989] usb 4-1: SerialNumber: syz
[  242.300219][ T5989] hso 4-1:6.2: Failed to find INT IN ep
[  242.420911][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880b1ce4800: abort rx timeout. Force session deactivation
[  242.573129][ T5892] usb 4-1: USB disconnect, device number 5
[  242.668578][ T7132] loop6: detected capacity change from 0 to 512
[  243.144890][ T7134] netlink: 68 bytes leftover after parsing attributes in process `syz.1.278'.
[  243.195758][ T7134] netlink: 'syz.1.278': attribute type 3 has an invalid length.
[  243.252706][ T7132] EXT4-fs: Ignoring removed mblk_io_submit option
[  243.407717][ T6871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  243.517203][ T7132] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[  243.618892][ T7132] EXT4-fs (loop6): can't mount with data_err=abort, fs mounted w/o journal
[  244.493550][ T5840] Bluetooth: hci8: command tx timeout
[  244.517177][ T7134] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  244.561241][ T6871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  244.604544][ T7134] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  245.360705][ T6871] team0: Port device team_slave_0 added
[  246.552471][ T5840] Bluetooth: hci8: command tx timeout
[  246.925862][ T6871] team0: Port device team_slave_1 added
[  246.969633][ T7164] loop6: detected capacity change from 0 to 512
[  247.337007][ T5898] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  248.191361][ T5898] usb 2-1: Using ep0 maxpacket: 8
[  248.204101][ T5898] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  248.206915][ T7164] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  248.224378][ T5898] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  248.287545][ T5898] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024
[  248.315480][ T7164] ext4 filesystem being mounted at /36/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  248.325446][ T5898] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  248.572805][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880a2184c00: rx timeout, send abort
[  248.681370][ T5840] Bluetooth: hci8: command tx timeout
[  248.715740][ T5898] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  248.817980][ T5898] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  248.882732][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  248.907058][ T6871] batman_adv: batadv0: Adding interface: batadv_slave_0
[  248.944645][ T6871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  249.058576][ T6871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  249.072926][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880a2186800: rx timeout, send abort
[  249.081193][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880a2184c00: abort rx timeout. Force session deactivation
[  249.176467][ T6871] batman_adv: batadv0: Adding interface: batadv_slave_1
[  249.205574][ T5898] usb 2-1: GET_CAPABILITIES returned 0
[  249.211155][ T5898] usbtmc 2-1:16.0: can't read capabilities
[  249.231650][ T6871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  249.257706][    C1] vkms_vblank_simulate: vblank timer overrun
[  249.428324][ T6871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  249.504432][   T30] audit: type=1804 audit(1745760741.596:3): pid=7182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.284" name="/newroot/36/bus/file1" dev="loop6" ino=15 res=1 errno=0
[  249.581194][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880a2186800: abort rx timeout. Force session deactivation
[  249.696130][ T6061] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  249.710221][ T2958] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  250.324629][ T7188] loop6: detected capacity change from 0 to 32768
[  250.394347][ T7188] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  250.438346][ T7188] XFS (loop6): Ending clean mount
[  250.582988][ T5898] usb 2-1: USB disconnect, device number 15
[  250.815117][ T5840] Bluetooth: hci8: command tx timeout
[  251.074184][ T2958] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  251.205114][ T7206] x_tables: ip6_tables: rpfilter.0 match: invalid size 8 (kernel) != (user) 48
[  251.219708][ T5840] Bluetooth: hci0: unexpected event for opcode 0x0803
[  251.457227][ T6061] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  251.780713][ T6871] hsr_slave_0: entered promiscuous mode
[  251.907272][ T6871] hsr_slave_1: entered promiscuous mode
[  251.972713][ T6871] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  251.980333][ T6871] Cannot create hsr debugfs directory
[  252.516799][ T2958] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  252.825646][ T5989] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  252.887045][ T2958] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.151506][ T5989] usb 2-1: Using ep0 maxpacket: 8
[  253.919886][ T5989] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  253.942887][ T5989] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  253.974655][ T5989] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  254.038923][ T5989] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  254.086453][ T5989] usb 2-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00
[  254.171015][ T5989] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  254.237550][ T5989] usb 2-1: config 0 descriptor??
[  254.955281][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880ae979000: rx timeout, send abort
[  255.041482][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  255.047958][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  255.287181][ T5989] usbhid 2-1:0.0: can't add hid device: -71
[  255.304239][ T5989] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  255.397073][ T5989] usb 2-1: USB disconnect, device number 16
[  255.455408][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880ae979400: rx timeout, send abort
[  255.464061][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880ae979000: abort rx timeout. Force session deactivation
[  255.963852][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880ae979400: abort rx timeout. Force session deactivation
[  256.284772][ T7124] chnl_net:caif_netlink_parms(): no params data found
[  256.553308][ T5892] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  256.721407][ T5892] usb 2-1: Using ep0 maxpacket: 8
[  256.758817][ T5892] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  256.812140][ T5892] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  256.873292][ T5892] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024
[  256.901877][ T2958] bridge_slave_1: left allmulticast mode
[  256.907681][ T2958] bridge_slave_1: left promiscuous mode
[  256.941786][ T5892] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  256.971677][ T2958] bridge0: port 2(bridge_slave_1) entered disabled state
[  257.031722][ T5892] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  257.073523][ T2958] bridge_slave_0: left allmulticast mode
[  257.079240][ T2958] bridge_slave_0: left promiscuous mode
[  257.273775][ T5892] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  257.289272][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  258.091593][ T2958] bridge0: port 1(bridge_slave_0) entered disabled state
[  258.135812][ T5892] usb 2-1: GET_CAPABILITIES returned 0
[  258.152103][ T5892] usbtmc 2-1:16.0: can't read capabilities
[  258.259145][ T7271] serio: Serial port ptm0
[  260.742699][ T5892] usb 2-1: USB disconnect, device number 17
[  261.381390][    T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  261.581536][    T9] usb 2-1: Using ep0 maxpacket: 8
[  261.613092][    T9] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  261.710967][ T7293] netlink: 68 bytes leftover after parsing attributes in process `syz.3.312'.
[  261.734491][ T7293] netlink: 'syz.3.312': attribute type 3 has an invalid length.
[  262.325916][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  262.431390][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  262.540545][    T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  262.679886][    T9] usb 2-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00
[  262.763439][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  262.846083][    T9] usb 2-1: config 0 descriptor??
[  263.060252][ T5839] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  263.069983][ T5839] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  263.079086][ T5839] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  263.093075][ T5839] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  263.122775][ T5839] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  263.151519][    T9] usbhid 2-1:0.0: can't add hid device: -71
[  263.157604][    T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  263.168257][    T9] usb 2-1: USB disconnect, device number 18
[  263.717170][ T2958] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  263.802339][ T2958] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  263.865573][ T2958] bond0 (unregistering): Released all slaves
[  264.401673][ T7271] batadv5: entered promiscuous mode
[  264.408246][ T7271] 8021q: adding VLAN 0 to HW filter on device batadv5
[  264.459938][ T7293] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  264.481446][ T7293] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  264.772441][ T7309] FAULT_INJECTION: forcing a failure.
[  264.772441][ T7309] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  264.846071][ T7309] CPU: 0 UID: 0 PID: 7309 Comm: syz.5.318 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(full) 
[  264.846106][ T7309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  264.846119][ T7309] Call Trace:
[  264.846129][ T7309]  <TASK>
[  264.846139][ T7309]  dump_stack_lvl+0x189/0x250
[  264.846178][ T7309]  ? __lock_acquire+0xaac/0xd20
[  264.846214][ T7309]  ? __pfx_dump_stack_lvl+0x10/0x10
[  264.846249][ T7309]  ? __pfx__printk+0x10/0x10
[  264.846273][ T7309]  ? srso_alias_return_thunk+0x5/0xfbef5
[  264.846317][ T7309]  should_fail_ex+0x414/0x560
[  264.846362][ T7309]  _copy_from_user+0x2d/0xb0
[  264.846395][ T7309]  __sys_connect+0x123/0x440
[  264.846419][ T7309]  ? srso_alias_return_thunk+0x5/0xfbef5
[  264.846444][ T7309]  ? do_sys_openat2+0x154/0x1c0
[  264.846480][ T7309]  ? __pfx___sys_connect+0x10/0x10
[  264.846527][ T7309]  __x64_sys_connect+0x7a/0x90
[  264.846559][ T7309]  do_syscall_64+0xf6/0x210
[  264.846585][ T7309]  ? srso_alias_return_thunk+0x5/0xfbef5
[  264.846612][ T7309]  ? exc_page_fault+0x91/0x110
[  264.846637][ T7309]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  264.846660][ T7309] RIP: 0033:0x7f0bf138e969
[  264.846680][ T7309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  264.846701][ T7309] RSP: 002b:00007f0bf2256038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  264.846725][ T7309] RAX: ffffffffffffffda RBX: 00007f0bf15b5fa0 RCX: 00007f0bf138e969
[  264.846743][ T7309] RDX: 000000000000000c RSI: 0000200000000000 RDI: 0000000000000005
[  264.846759][ T7309] RBP: 00007f0bf2256090 R08: 0000000000000000 R09: 0000000000000000
[  264.846774][ T7309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  264.846788][ T7309] R13: 0000000000000000 R14: 00007f0bf15b5fa0 R15: 00007ffe68017338
[  264.846823][ T7309]  </TASK>
[  265.200915][ T5839] Bluetooth: hci6: command tx timeout
[  266.937072][ T7319] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  267.007233][ T7319] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  267.211520][ T7319] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  267.256788][ T7319] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  267.271534][ T5839] Bluetooth: hci6: command tx timeout
[  267.428489][ T7319] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  267.454003][ T7319] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  267.613339][ T7319] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  267.659995][ T7319] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  267.745553][ T7319] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  267.793133][ T7319] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  267.921797][ T7319] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  267.933504][ T7124] bridge0: port 1(bridge_slave_0) entered blocking state
[  267.972385][ T7124] bridge0: port 1(bridge_slave_0) entered disabled state
[  267.981621][ T7319] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  268.029635][ T7124] bridge_slave_0: entered allmulticast mode
[  268.060638][ T7319] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[  268.066471][ T7124] bridge_slave_0: entered promiscuous mode
[  268.105202][ T7319] Bluetooth: hci7: Opcode 0x0406 failed: -4
[  268.190626][ T7319] Bluetooth: hci7: Opcode 0x0406 failed: -4
[  268.303025][ T7319] Bluetooth: hci8: Opcode 0x0c1a failed: -4
[  268.324696][ T7124] bridge0: port 2(bridge_slave_1) entered blocking state
[  268.342811][ T7319] Bluetooth: hci8: Opcode 0x0406 failed: -4
[  268.352452][ T7124] bridge0: port 2(bridge_slave_1) entered disabled state
[  268.370685][ T7124] bridge_slave_1: entered allmulticast mode
[  268.397472][ T7124] bridge_slave_1: entered promiscuous mode
[  268.400346][ T7319] Bluetooth: hci8: Opcode 0x0406 failed: -4
[  268.511503][ T7319] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  268.521521][ T7319] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  268.568616][ T2958] hsr_slave_0: left promiscuous mode
[  268.635169][ T7319] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  268.641874][ T2958] hsr_slave_1: left promiscuous mode
[  268.679202][ T2958] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  268.713918][ T2958] batman_adv: batadv0: Removing interface: batadv_slave_0
[  268.808587][ T2958] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  268.848276][ T2958] batman_adv: batadv0: Removing interface: batadv_slave_1
[  268.871668][ T5839] Bluetooth: hci0: command 0x0406 tx timeout
[  268.921450][   T53] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  268.929216][ T5898] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  269.095286][ T2958] veth1_macvtap: left promiscuous mode
[  269.100896][ T2958] veth0_macvtap: left promiscuous mode
[  269.132003][   T53] usb 6-1: Using ep0 maxpacket: 8
[  269.139620][ T5898] usb 4-1: Using ep0 maxpacket: 8
[  269.173686][   T53] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  269.185178][ T2958] veth1_vlan: left promiscuous mode
[  269.190567][ T2958] veth0_vlan: left promiscuous mode
[  269.198908][ T5898] usb 4-1: device descriptor read/all, error -71
[  269.237650][   T53] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  269.285272][ T5839] Bluetooth: hci2: command 0x0406 tx timeout
[  269.331609][   T53] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  269.363529][   T53] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  269.433671][ T5839] Bluetooth: hci3: command 0x0406 tx timeout
[  269.463506][   T53] usb 6-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00
[  269.505761][   T53] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  269.543118][   T53] usb 6-1: config 0 descriptor??
[  269.675106][ T5839] Bluetooth: hci5: command 0x0406 tx timeout
[  269.751572][ T5839] Bluetooth: hci4: command 0x0406 tx timeout
[  269.991954][ T5839] Bluetooth: hci1: command 0x0406 tx timeout
[  270.071954][ T5839] Bluetooth: hci7: command 0x0c1a tx timeout
[  270.311753][ T5839] Bluetooth: hci8: command 0x0c1a tx timeout
[  270.451934][   T53] usbhid 6-1:0.0: can't add hid device: -71
[  270.484916][   T53] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  270.539310][   T53] usb 6-1: USB disconnect, device number 12
[  270.567242][ T5839] Bluetooth: hci6: command 0x0419 tx timeout
[  270.797545][ T7367] serio: Serial port ptm0
[  270.963026][ T5839] Bluetooth: hci0: command 0x0406 tx timeout
[  271.372036][ T5839] Bluetooth: hci2: command 0x0406 tx timeout
[  271.523199][ T5839] Bluetooth: hci3: command 0x0406 tx timeout
[  271.751589][ T5839] Bluetooth: hci5: command 0x0406 tx timeout
[  271.891391][ T5839] Bluetooth: hci4: command 0x0406 tx timeout
[  272.074293][ T5839] Bluetooth: hci1: command 0x0406 tx timeout
[  272.151814][ T5839] Bluetooth: hci7: command 0x0c1a tx timeout
[  272.160418][ T7376] loop5: detected capacity change from 0 to 512
[  272.190356][ T7376] EXT4-fs: Ignoring removed mblk_io_submit option
[  272.257739][ T7376] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  272.276863][ T7376] EXT4-fs (loop5): can't mount with data_err=abort, fs mounted w/o journal
[  272.412036][ T5839] Bluetooth: hci8: command 0x0c1a tx timeout
[  272.428649][ T7379] serio: Serial port ptm0
[  272.641514][ T5839] Bluetooth: hci6: command 0x0419 tx timeout
[  274.232391][ T5839] Bluetooth: hci7: command 0x0c1a tx timeout
[  274.472048][ T5839] Bluetooth: hci8: command 0x0c1a tx timeout
[  274.504342][   T30] audit: type=1326 audit(1745760766.596:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7388 comm="syz.5.336" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0bf138e969 code=0x0
[  274.525754][    C1] vkms_vblank_simulate: vblank timer overrun
[  274.711753][ T5839] Bluetooth: hci6: command 0x0419 tx timeout
[  275.423285][ T2958] team0 (unregistering): Port device team_slave_1 removed
[  275.563270][ T2958] team0 (unregistering): Port device team_slave_0 removed
[  275.578724][ T7389] loop5: detected capacity change from 0 to 32768
[  275.632299][ T7389] bcachefs (/dev/loop5): error validating superblock: Invalid option checksum_err_retry_nr: too big (max 32)
[  275.701537][ T7389] bcachefs: bch2_fs_get_tree() error: ERANGE_option_too_big
[  276.311728][ T5886] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  276.511728][ T5886] usb 6-1: Using ep0 maxpacket: 8
[  276.541754][ T5886] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  276.581545][ T5886] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  276.602667][ T5886] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024
[  276.640077][ T5886] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  276.692296][ T5886] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  276.766401][ T5886] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  276.791556][ T5839] Bluetooth: hci6: command 0x0419 tx timeout
[  276.831372][ T5886] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  277.075877][ T5886] usb 6-1: GET_CAPABILITIES returned 0
[  277.121439][ T5886] usbtmc 6-1:16.0: can't read capabilities
[  277.974105][ T7124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  278.048972][ T7367] batadv2: entered promiscuous mode
[  278.086743][ T7367] 8021q: adding VLAN 0 to HW filter on device batadv2
[  278.128837][ T7379] batadv3: entered promiscuous mode
[  278.156476][ T7379] 8021q: adding VLAN 0 to HW filter on device batadv3
[  278.224589][ T7124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  279.644027][ T7124] team0: Port device team_slave_0 added
[  279.657399][ T5898] usb 6-1: USB disconnect, device number 13
[  279.744622][ T7124] team0: Port device team_slave_1 added
[  280.343033][ T5898] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  280.488163][ T7413] loop1: detected capacity change from 0 to 128
[  280.501666][ T7413] ext4: Unknown parameter 'dont_measure'
[  280.560697][ T5898] usb 6-1: Using ep0 maxpacket: 8
[  281.134883][ T5898] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  281.160843][ T5898] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  281.172503][ T5898] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  281.182932][ T5898] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  281.271524][ T5898] usb 6-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00
[  281.325322][ T5898] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  281.397748][ T5898] usb 6-1: config 0 descriptor??
[  281.501476][ T5888] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  281.594131][ T7124] batman_adv: batadv0: Adding interface: batadv_slave_0
[  281.625661][ T7124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  281.638172][ T5898] usbhid 6-1:0.0: can't add hid device: -71
[  281.691442][ T5898] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  281.723570][ T5888] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  281.742983][ T5898] usb 6-1: USB disconnect, device number 14
[  281.748864][ T7124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  281.773854][ T5888] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  281.801154][ T5888] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  281.821648][ T7124] batman_adv: batadv0: Adding interface: batadv_slave_1
[  281.828659][ T7124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  281.859056][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  281.917040][ T7412] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  281.931102][ T5888] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  281.959624][ T7124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  283.416524][ T5898] usb 2-1: USB disconnect, device number 19
[  283.874021][ T7297] chnl_net:caif_netlink_parms(): no params data found
[  283.883655][ T7426] loop6: detected capacity change from 0 to 2048
[  283.923992][ T7426] udf: Unknown parameter '/dev/dri/card#'
[  283.979780][ T7423] netdevsim netdevsim6 netdevsim0: entered promiscuous mode
[  284.068405][ T7423] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  284.213304][ T7124] hsr_slave_0: entered promiscuous mode
[  284.258769][ T7124] hsr_slave_1: entered promiscuous mode
[  284.279965][ T7432] serio: Serial port ptm0
[  284.286222][ T7124] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  284.307075][ T7124] Cannot create hsr debugfs directory
[  284.438971][ T7432] batadv3: entered promiscuous mode
[  284.480567][ T7432] 8021q: adding VLAN 0 to HW filter on device batadv3
[  284.951537][ T5898] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  286.012066][ T5898] usb 4-1: Using ep0 maxpacket: 8
[  286.042908][ T5898] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  286.053025][ T2958] bridge_slave_1: left allmulticast mode
[  286.081459][ T2958] bridge_slave_1: left promiscuous mode
[  286.087310][ T2958] bridge0: port 2(bridge_slave_1) entered disabled state
[  286.087453][ T5898] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  286.142686][ T2958] bridge_slave_0: left allmulticast mode
[  286.148589][ T2958] bridge_slave_0: left promiscuous mode
[  286.150662][ T5898] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024
[  286.186348][ T2958] bridge0: port 1(bridge_slave_0) entered disabled state
[  286.193792][ T5898] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  286.239396][ T5898] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  286.316640][ T5898] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  286.346754][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  286.791435][ T5898] usb 4-1: GET_CAPABILITIES returned 0
[  286.801431][ T5898] usbtmc 4-1:16.0: can't read capabilities
[  287.624105][ T7456] loop1: detected capacity change from 0 to 512
[  287.658234][ T7456] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal
[  288.176878][ T2958] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  288.262341][ T7468] netlink: 68 bytes leftover after parsing attributes in process `syz.1.358'.
[  288.285058][ T7468] netlink: 'syz.1.358': attribute type 3 has an invalid length.
[  288.951533][   T31] INFO: task syz.0.72:6198 blocked for more than 164 seconds.
[  288.959090][   T31]       Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0
[  289.071345][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  289.080063][   T31] task:syz.0.72        state:D stack:26744 pid:6198  tgid:6195  ppid:5834   task_flags:0x400140 flags:0x00004004
[  289.108172][   T31] Call Trace:
[  289.115906][ T5936] usb 4-1: USB disconnect, device number 8
[  289.190278][   T31]  <TASK>
[  289.205456][   T31]  __schedule+0x16e2/0x4cd0
[  289.266663][   T31]  ? schedule+0x165/0x360
[  289.302668][   T31]  ? __pfx___schedule+0x10/0x10
[  289.343234][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  289.401520][   T31]  ? schedule+0x91/0x360
[  289.405821][   T31]  schedule+0x165/0x360
[  289.410013][   T31]  schedule_preempt_disabled+0x13/0x30
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  289.461387][   T31]  __mutex_lock+0x724/0xe80
[  289.481634][   T31]  ? __mutex_lock+0x51b/0xe80
[  289.486345][   T31]  ? relay_open+0x3b8/0x920
[  289.490859][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  289.522000][   T31]  relay_open+0x3b8/0x920
[  289.526361][   T31]  do_blk_trace_setup+0x591/0x9d0
[  289.541350][   T31]  blk_trace_setup+0x116/0x1f0
[  289.546150][   T31]  ? __pfx_blk_trace_setup+0x10/0x10
[  289.561317][   T31]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  289.567005][   T31]  blk_trace_ioctl+0x181/0x430
[  289.591774][   T31]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  289.597794][   T31]  ? __pfx_blk_trace_ioctl+0x10/0x10
[  289.611321][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  289.616979][   T31]  ? __lock_acquire+0xaac/0xd20
[  289.651338][   T31]  blkdev_ioctl+0x416/0x6d0
[  289.656078][   T31]  ? __pfx_blkdev_ioctl+0x10/0x10
[  289.681323][   T31]  ? __fget_files+0x3a0/0x420
[  289.686072][   T31]  ? __fget_files+0x2a/0x420
[  289.690727][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  289.721307][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  289.743887][   T31]  ? __pfx_blkdev_ioctl+0x10/0x10
[  289.748957][   T31]  __se_sys_ioctl+0xfc/0x170
[  289.762201][   T31]  do_syscall_64+0xf6/0x210
[  289.766799][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  289.791700][   T31]  ? exc_page_fault+0x91/0x110
[  289.806745][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  289.911316][   T31] RIP: 0033:0x7ff92898e969
[  289.923101][   T31] RSP: 002b:00007ff929830038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  289.933975][   T31] RAX: ffffffffffffffda RBX: 00007ff928bb6160 RCX: 00007ff92898e969
[  289.942462][   T31] RDX: 0000200000000440 RSI: 00000000c0481273 RDI: 0000000000000006
[  289.950461][   T31] RBP: 00007ff928a10ab1 R08: 0000000000000000 R09: 0000000000000000
[  289.972595][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  289.980609][   T31] R13: 0000000000000000 R14: 00007ff928bb6160 R15: 00007ffd0350f6a8
[  289.989969][   T31]  </TASK>
[  290.012198][   T31] 
[  290.012198][   T31] Showing all locks held in the system:
[  290.020010][   T31] 1 lock held by khungtaskd/31:
[  290.056667][   T31]  #0: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  290.171332][   T31] 3 locks held by kworker/u8:3/52:
[  290.176513][   T31]  #0: ffff888030168948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0
[  290.212543][   T31]  #1: ffffc90000be7c60 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0
[  290.261318][   T31]  #2: ffffffff8f2f37c8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x112/0x14b0
[  290.270946][   T31] 3 locks held by kworker/1:1/53:
[  290.301337][   T31]  #0: ffff88801a078d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0
[  290.341998][   T31]  #1: ffffc90000bf7c60 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0
[  290.371679][   T31]  #2: ffffffff8df41338 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f4/0x730
[  290.411363][   T31] 5 locks held by kworker/u8:7/2958:
[  290.416715][   T31]  #0: ffff88801aef6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0
[  290.471326][   T31]  #1: ffffc9000bb97c60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0
[  290.501354][   T31]  #2: ffffffff8f2e6c90 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x145/0xbd0
[  290.510875][   T31]  #3: ffffffff8f2f37c8 (rtnl_mutex){+.+.}-{4:4}, at: cleanup_net+0x611/0xbd0
[  290.571329][   T31]  #4: ffffffff8df41338 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b7/0x730
[  290.610316][   T31] 2 locks held by dhcpcd/5492:
[  290.630939][   T31]  #0: ffff888021fa66d0 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: netlink_dump+0xcd/0xe70
[  290.681381][   T31]  #1: ffffffff8f2f37c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x92/0x200
[  290.690315][   T31] 2 locks held by getty/5578:
[  290.721791][   T31]  #0: ffff8880345320a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  290.749647][   T31]  #1: ffffc900036cb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  290.791352][   T31] 3 locks held by kworker/0:4/5886:
[  290.796632][   T31]  #0: ffff88801a078d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0
[  290.821376][   T31]  #1: ffffc900042cfc60 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0
[  290.862488][   T31]  #2: ffffffff8f2f37c8 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20
[  290.901340][   T31] 3 locks held by kworker/0:6/5888:
[  290.906673][   T31] 1 lock held by syz-executor/6061:
[  290.945980][   T31] 3 locks held by syz.2.65/6164:
[  290.950982][   T31] 2 locks held by syz.0.72/6198:
[  290.991677][   T31]  #0: ffff888142f8ea98 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0xfb/0x1f0
[  291.025601][   T31]  #1: ffffffff8df8ee08 (relay_channels_mutex){+.+.}-{4:4}, at: relay_open+0x3b8/0x920
[  291.035877][   T31] 2 locks held by kworker/u8:12/6767:
[  291.051452][   T31] 2 locks held by syz-executor/7124:
[  291.091341][   T31]  #0: ffffffff8f80c610 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[  291.100982][   T31]  #1: ffffffff8f2f37c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70
[  291.141434][   T31] 2 locks held by syz-executor/7297:
[  291.161358][   T31]  #0: ffffffff8f7f01b0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[  291.170966][   T31]  #1: ffffffff8f2f37c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70
[  291.183590][   T31] 2 locks held by syz.1.358/7468:
[  291.188681][   T31]  #0: ffffffff8f357d30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  291.202970][   T31]  #1: ffffffff8f2f37c8 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x5f/0x930
[  291.221446][   T31] 1 lock held by syz.5.359/7470:
[  291.226511][   T31]  #0: ffffffff8f2f37c8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[  291.235688][   T31] 
[  291.238023][   T31] =============================================
[  291.238023][   T31] 
[  291.281424][   T31] NMI backtrace for cpu 0
[  291.281449][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(full) 
[  291.281478][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  291.281492][   T31] Call Trace:
[  291.281502][   T31]  <TASK>
[  291.281512][   T31]  dump_stack_lvl+0x189/0x250
[  291.281551][   T31]  ? __wake_up_klogd+0xd9/0x110
[  291.281578][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  291.281609][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  291.281644][   T31]  ? __pfx__printk+0x10/0x10
[  291.281689][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[  291.281728][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  291.281760][   T31]  ? _printk+0xcf/0x120
[  291.281789][   T31]  ? __pfx__printk+0x10/0x10
[  291.281815][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  291.281843][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  291.281882][   T31]  watchdog+0xfee/0x1030
[  291.281914][   T31]  ? watchdog+0x1de/0x1030
[  291.281953][   T31]  kthread+0x711/0x8a0
[  291.281985][   T31]  ? __pfx_watchdog+0x10/0x10
[  291.282014][   T31]  ? __pfx_kthread+0x10/0x10
[  291.282041][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  291.282069][   T31]  ? __pfx_kthread+0x10/0x10
[  291.282096][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  291.282133][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  291.282159][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  291.282183][   T31]  ? __pfx_kthread+0x10/0x10
[  291.282210][   T31]  ret_from_fork+0x4e/0x80
[  291.282234][   T31]  ? __pfx_kthread+0x10/0x10
[  291.282262][   T31]  ret_from_fork_asm+0x1a/0x30
[  291.282302][   T31]  </TASK>
[  291.282311][   T31] Sending NMI from CPU 0 to CPUs 1:
[  291.333938][ T2958] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  291.335621][    C1] NMI backtrace for cpu 1
[  291.335640][    C1] CPU: 1 UID: 0 PID: 2958 Comm: kworker/u8:7 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(full) 
[  291.335666][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  291.335681][    C1] Workqueue: netns cleanup_net
[  291.335705][    C1] RIP: 0010:io_serial_in+0x77/0xc0
[  291.335733][    C1] Code: e8 1e 40 82 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 ff 34 e4 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 25 c2 d2 fb cc 44 89 f9 80 e1 07
[  291.335751][    C1] RSP: 0018:ffffc9000bb96df0 EFLAGS: 00000002
[  291.335768][    C1] RAX: 1ffffffff3369700 RBX: 00000000000003fd RCX: 0000000000000000
[  291.335783][    C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020
[  291.335797][    C1] RBP: ffffffff99b4be50 R08: ffff8880243b8237 R09: 1ffff11004877046
[  291.335813][    C1] R10: dffffc0000000000 R11: ffffffff853d7e60 R12: dffffc0000000000
[  291.335829][    C1] R13: 0000000000000000 R14: ffffffff99b4bbc0 R15: 0000000000000000
[  291.335846][    C1] FS:  0000000000000000(0000) GS:ffff8881261cc000(0000) knlGS:0000000000000000
[  291.335864][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  291.335879][    C1] CR2: 00005559908df6c0 CR3: 000000003440e000 CR4: 0000000000350ef0
[  291.335896][    C1] Call Trace:
[  291.335904][    C1]  <TASK>
[  291.335916][    C1]  wait_for_lsr+0x1a1/0x2f0
[  291.335947][    C1]  serial8250_console_write+0x134c/0x1ba0
[  291.335981][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  291.336007][    C1]  ? __pfx_serial8250_console_write+0x10/0x10
[  291.336034][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  291.336061][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  291.336087][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  291.336114][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  291.336138][    C1]  ? do_raw_spin_unlock+0x122/0x240
[  291.336163][    C1]  ? console_flush_all+0x13a/0xc40
[  291.336185][    C1]  ? console_flush_all+0x13a/0xc40
[  291.336209][    C1]  console_flush_all+0x728/0xc40
[  291.336235][    C1]  ? console_flush_all+0x13a/0xc40
[  291.336263][    C1]  ? __pfx_console_flush_all+0x10/0x10
[  291.336292][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  291.336317][    C1]  ? is_printk_cpu_sync_owner+0x32/0x40
[  291.336346][    C1]  console_unlock+0xc4/0x270
[  291.336368][    C1]  ? __pfx_console_unlock+0x10/0x10
[  291.336391][    C1]  ? vprintk_emit+0x444/0x7a0
[  291.336409][    C1]  ? vprintk_emit+0x444/0x7a0
[  291.336429][    C1]  vprintk_emit+0x5b7/0x7a0
[  291.336453][    C1]  ? vprintk_emit+0x444/0x7a0
[  291.336474][    C1]  ? __pfx_vprintk_emit+0x10/0x10
[  291.336491][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  291.336523][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  291.336554][    C1]  _printk+0xcf/0x120
[  291.336580][    C1]  ? __pfx__printk+0x10/0x10
[  291.336597][    C1]  ? __netdev_upper_dev_unlink+0x652/0x7c0
[  291.336623][    C1]  ? __netdev_printk+0x1bf/0x4d0
[  291.336655][    C1]  netdev_info+0x10a/0x160
[  291.336683][    C1]  ? __pfx_netdev_info+0x10/0x10
[  291.336707][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  291.336732][    C1]  ? netdev_upper_dev_unlink+0x91/0xd0
[  291.336761][    C1]  __bond_release_one+0x50b/0x10e0
[  291.336800][    C1]  ? __pfx___bond_release_one+0x10/0x10
[  291.336834][    C1]  ? net_generic+0x1e/0x240
[  291.336861][    C1]  ? __pfx_bond_netpoll_cleanup+0x10/0x10
[  291.336891][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  291.336917][    C1]  ? __pfx_ib_device_get_by_netdev+0x10/0x10
[  291.336951][    C1]  ? hsr_netdev_notify+0x2a0/0xb60
[  291.336979][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  291.337004][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  291.337031][    C1]  bond_uninit+0x123/0x2d0
[  291.337059][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  291.337085][    C1]  ? __pfx_bond_uninit+0x10/0x10
[  291.337113][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  291.337138][    C1]  ? notifier_call_chain+0x3bf/0x3e0
[  291.337161][    C1]  ? __pfx_bond_uninit+0x10/0x10
[  291.337191][    C1]  unregister_netdevice_many_notify+0x1c29/0x2330
[  291.337231][    C1]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  291.337264][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  291.337307][    C1]  ? unregister_netdevice_queue+0x1b3/0x380
[  291.337336][    C1]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  291.337363][    C1]  ? net_generic+0x1e/0x240
[  291.337401][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  291.337425][    C1]  ? nexthop_net_exit_batch_rtnl+0x100/0x150
[  291.337454][    C1]  cleanup_net+0x6a3/0xbd0
[  291.337477][    C1]  ? __pfx_cleanup_net+0x10/0x10
[  291.337498][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  291.337526][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  291.337558][    C1]  ? process_scheduled_works+0x9ec/0x17a0
[  291.337592][    C1]  ? process_scheduled_works+0x9ec/0x17a0
[  291.337627][    C1]  process_scheduled_works+0xade/0x17a0
[  291.337680][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  291.337719][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  291.337750][    C1]  worker_thread+0x8a0/0xda0
[  291.337788][    C1]  kthread+0x711/0x8a0
[  291.337815][    C1]  ? __pfx_worker_thread+0x10/0x10
[  291.337835][    C1]  ? __pfx_kthread+0x10/0x10
[  291.337858][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  291.337884][    C1]  ? __pfx_kthread+0x10/0x10
[  291.337908][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  291.337939][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  291.337963][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  291.337985][    C1]  ? __pfx_kthread+0x10/0x10
[  291.338009][    C1]  ret_from_fork+0x4e/0x80
[  291.338030][    C1]  ? __pfx_kthread+0x10/0x10
[  291.338054][    C1]  ret_from_fork_asm+0x1a/0x30
[  291.338086][    C1]  </TASK>
[  291.961670][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  291.961694][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(full) 
[  291.961724][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  291.961739][   T31] Call Trace:
[  291.961751][   T31]  <TASK>
[  291.961763][   T31]  dump_stack_lvl+0x99/0x250
[  291.961804][   T31]  ? __asan_memcpy+0x40/0x70
[  291.961829][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  291.961865][   T31]  ? __pfx__printk+0x10/0x10
[  291.961899][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  291.961933][   T31]  panic+0x2db/0x790
[  291.961968][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  291.962003][   T31]  ? __pfx_panic+0x10/0x10
[  291.962034][   T31]  ? tick_nohz_tick_stopped+0x86/0xb0
[  291.962079][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  291.962107][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  291.962138][   T31]  ? nmi_trigger_cpumask_backtrace+0x2b6/0x300
[  291.962176][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  291.962210][   T31]  watchdog+0x102d/0x1030
[  291.962244][   T31]  ? watchdog+0x1de/0x1030
[  291.962283][   T31]  kthread+0x711/0x8a0
[  291.962317][   T31]  ? __pfx_watchdog+0x10/0x10
[  291.962347][   T31]  ? __pfx_kthread+0x10/0x10
[  291.962375][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  291.962409][   T31]  ? __pfx_kthread+0x10/0x10
[  291.962437][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  291.962474][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  291.962502][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  291.962528][   T31]  ? __pfx_kthread+0x10/0x10
[  291.962556][   T31]  ret_from_fork+0x4e/0x80
[  291.962581][   T31]  ? __pfx_kthread+0x10/0x10
[  291.962609][   T31]  ret_from_fork_asm+0x1a/0x30
[  291.962650][   T31]  </TASK>
[  291.966445][   T31] Kernel Offset: disabled