last executing test programs:

22m12.731377429s ago: executing program 32 (id=265):
syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @empty, @random="d65258256245", @multicast1}}}}, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
setresuid(0xee01, 0xee01, 0x0)
capset(0x0, &(0x7f0000000200)={0x200002, 0x200003, 0x4000801, 0x4, 0x4})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x11, 0x3, &(0x7f00000021c0)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2ab4d}, 0x94)
ioctl$TIOCGSOFTCAR(r0, 0x4b46, &(0x7f0000000080))
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mlockall(0x6)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[])
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file1\x00', 0x300001a, &(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0xfc, 0x2b6, &(0x7f0000000100)="$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")
setxattr$incfs_id(&(0x7f0000002000)='./file0\x00', &(0x7f0000002040), &(0x7f0000002080)={'0000000000000000000000000000000', 0x32}, 0x20, 0x2)
syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x800)
r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f00000020c0)={0x6, 'wlan1\x00', {}, 0x2})
read$FUSE(r1, &(0x7f0000008280)={0x2020, 0x0, 0x0, <r3=>0x0}, 0x1c)
syz_fuse_handle_req(r1, &(0x7f0000006280)="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", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002200)={0x90, 0x0, 0x80000000, {0x2, 0x1, 0x3, 0x8000009, 0x0, 0x80, {0x1, 0x80000000000, 0x0, 0xb, 0x3ff, 0x0, 0xd, 0x20000, 0x83, 0x8000, 0x2, r3}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0xe, &(0x7f0000000880)=ANY=[], 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0xa}, 0x8, 0x10, &(0x7f0000000040)={0x3, 0x4000000, 0x0, 0xffffff7e}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)

17m57.382950916s ago: executing program 33 (id=648):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ptrace$pokeuser(0x6, 0x0, 0x388, 0x41d9fda7)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000)
pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0xfffffffffffffff8, 0x0, 0x1, 0x10}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x8000000000000000, 0x0, 0x80000000000000, 0x800, 0x20000}, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)=""/80})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

17m46.506858168s ago: executing program 34 (id=666):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x800)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341)
ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)
bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r1, &(0x7f0000000340)="4700000001003f", 0x7)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x0, 0x0, &(0x7f0000000480)='syzkaller\x00'}, 0x94)

3m18.474418762s ago: executing program 6 (id=2561):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000000)={{0x80, 0x6}, 'port1\x00', 0x54, 0x1b100b, 0x7ffc, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x1, 0x2})

3m17.407076218s ago: executing program 6 (id=2563):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x44080}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x4)
write(r0, &(0x7f0000000000)='3', 0x4e)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10)

3m17.290670721s ago: executing program 6 (id=2564):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
syz_open_dev$evdev(&(0x7f0000000340), 0x1, 0x109001)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
r1 = io_uring_setup(0x2e05, &(0x7f00000001c0)={0x0, 0x5acf, 0x40, 0x2})
shmctl$SHM_LOCK(0x0, 0xb)
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000240)=[{&(0x7f0000001700)=""/4095, 0xfff}], 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r3, &(0x7f0000000200)='md0', 0x3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0)
ioctl(r4, 0x400c0930, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/component_size\x00', 0x1, 0x0)
write(r5, &(0x7f0000000600)='1024\n', 0x5)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c4)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000"], 0x0, 0x3c}, 0x28)
getpid()
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32=r6, @ANYBLOB="0100000002"], 0x40)

3m16.314230895s ago: executing program 6 (id=2565):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0)
mount$bind(&(0x7f0000000540)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000280)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
umount2(&(0x7f0000000080)='./file0/file0\x00', 0x0)

3m16.030442462s ago: executing program 6 (id=2566):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/hid.usb0/no_out_endpoint\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)='1', 0x1)

3m10.688489293s ago: executing program 6 (id=2576):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e"], 0x1c}], 0x1, 0x0, 0x0, 0x4000}, 0x0)

3m9.772934035s ago: executing program 35 (id=2576):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e"], 0x1c}], 0x1, 0x0, 0x0, 0x4000}, 0x0)

2m24.311986678s ago: executing program 7 (id=2715):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x8000, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write(r0, &(0x7f0000000480)='-bond_slave_0', 0xd)

2m24.076599254s ago: executing program 7 (id=2716):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x80002, 0x0)
write(r0, 0x0, 0x0)
syz_usb_connect(0x5, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x8d, 0x8f, 0x33, 0x10, 0x5ac, 0x247, 0xc91e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x6, 0x20, 0x7, "", [{{0x9, 0x4, 0x19, 0xfe, 0x0, 0x3, 0x4b, 0x2, 0xe}}]}}]}}, 0x0)

2m21.3771998s ago: executing program 7 (id=2725):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x8000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/class/net/bond0/bonding/slaves\x00', 0x2, 0x0)
write(r0, 0x0, 0x0)

2m21.173151575s ago: executing program 7 (id=2729):
syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0), 0x1, 0x5a3, &(0x7f00000002c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x101042, 0x15)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x8)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x0, 0x101, 0x2, 0x2})

2m19.902289756s ago: executing program 7 (id=2732):
setuid(0xee01)
r0 = syz_clone(0x1100400, 0x0, 0xffffffffffffff2b, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00')
fchdir(r1)
mount(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0)
syz_open_procfs(r0, &(0x7f0000000040)='fdinfo/3\x00')

2m18.532844839s ago: executing program 7 (id=2737):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x8000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/class/net/bond0/bonding/slaves\x00', 0x2, 0x0)
write(r0, 0x0, 0x0)

2m17.215446081s ago: executing program 36 (id=2737):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x8000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/class/net/bond0/bonding/slaves\x00', 0x2, 0x0)
write(r0, 0x0, 0x0)

2m12.997090695s ago: executing program 0 (id=2754):
mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r0, @ANYBLOB="06001500070000000c001680080001"], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x44081}, 0x4)
close(0xffffffffffffffff)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c0009800800014000", @ANYRES8=r2, @ANYRESHEX=r2], 0xb0}, 0x1, 0x0, 0x0, 0x8000}, 0x40010)

2m9.973143399s ago: executing program 0 (id=2758):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x5c}}, 0x0)
getsockopt$bt_hci(r0, 0x84, 0x84, &(0x7f0000000080)=""/4096, &(0x7f0000001200)=0x1000)

2m9.776325214s ago: executing program 0 (id=2761):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
ioctl(r0, 0x400452c8, &(0x7f0000000000)="000000000000000000000000000000000000000001")
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/rfcomm0\x00', 0x802, 0x0)
write$tun(r1, &(0x7f0000000500)={@void, @val={0x0, 0x0, 0xfffe, 0x3, 0x9, 0x9}, @ipv6=@generic={0x7, 0x6, "9fd60f", 0x4b, 0x2b, 0x1, @private1, @ipv4={'\x00', '\xff\xff', @multicast1}, {[], "780464b426696554ae3f702b079ba0cb2a3d656a7e098c52ffa59553f58ceae1af76da2712a959278b246fad1383882d510fdb742de0c93da8925f0d8d5a2e63f1c593d8e94707a77d1ef3"}}}, 0x7d)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)

2m6.711032139s ago: executing program 5 (id=2766):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000006680)={0x0, 0x0, 0x0}, 0x0)
r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0)
flock(r1, 0x2)
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x1)
flock(0xffffffffffffffff, 0x1)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
gettid()
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000080), 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
clock_getres(0xffffffffffffffed, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec775000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140))
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
flock(r1, 0x5)
r3 = landlock_create_ruleset(&(0x7f0000000040)={0x1f4a, 0x0, 0x1}, 0x30, 0x0)
landlock_restrict_self(r3, 0x5)
landlock_restrict_self(r3, 0x0)
openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x35c, 0x0)

2m6.503887704s ago: executing program 0 (id=2768):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0)
mount$bind(&(0x7f0000000540)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000280)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
umount2(&(0x7f0000000080)='./file0/file0\x00', 0x0)

2m6.490866064s ago: executing program 5 (id=2769):
syz_open_procfs(0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x18410, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x942, 0x0)
rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000140)='./file1\x00')

2m5.414048041s ago: executing program 0 (id=2771):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
syz_open_dev$evdev(&(0x7f0000000340), 0x1, 0x109001)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = io_uring_setup(0x2e05, &(0x7f00000001c0)={0x0, 0x5acf, 0x40, 0x2})
shmctl$SHM_LOCK(0x0, 0xb)
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000240)=[{&(0x7f0000001700)=""/4095, 0xfff}], 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
write(r4, &(0x7f0000000200)='md', 0x2)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0)
ioctl(r5, 0x40480923, &(0x7f0000000380))
ioctl(r5, 0x40140921, &(0x7f0000000420)="00000000010000000000000000000000060000")
ioctl(r5, 0x400c0930, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/component_size\x00', 0x1, 0x0)
write(r6, &(0x7f0000000600)='1024\n', 0x5)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c4)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000"], 0x0, 0x3c}, 0x28)
getpid()
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r7, @ANYBLOB="0100000002"], 0x40)

2m5.370289332s ago: executing program 5 (id=2772):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/failslab/ignore-gfp-wait\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='N\x00', 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/failslab/task-filter\x00', 0x2, 0x0)
write(r1, 0x0, 0x0)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/times\x00', 0x2, 0x0)
write(r2, &(0x7f0000000240)='10000\x00', 0x5)
close(r2)
write(0xffffffffffffffff, &(0x7f00000002c0)='0\x00', 0x1)
close(0xffffffffffffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/failslab/probability\x00', 0x2, 0x0)
write(r3, &(0x7f0000000340)='5\x00', 0x1)
close(r3)
r4 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0)
write(r4, &(0x7f00000003c0)='1\x00', 0x1)
close(r4)
syz_usb_connect(0x0, 0x3a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404f1004000001010200010902200001010080320904000002000000000705810200020007050202"], 0x0)
r5 = syz_open_dev$usbfs(&(0x7f0000000180), 0x10000001d, 0x8041)
ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)=@usbdevfs_connect={0x0, 0x5516})
r6 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x2)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f0000000500)={0x2, 0x0, 0x3, 0x14})
ioctl$DVB_DEMUX_DMX_START(r6, 0x6f29)
ioctl$DVB_DEMUX_DMX_STOP(r6, 0x6f2a)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0)
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x40, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfffffffc}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x400c0}, 0x480c1)
ioctl$DVB_DEMUX_DMX_START(r6, 0x6f29)

2m4.190306471s ago: executing program 0 (id=2775):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
ioctl(r0, 0x400452c8, &(0x7f0000000000)="000000000000000000000000000000000000000001")
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/rfcomm0\x00', 0x802, 0x0)
write$tun(r1, &(0x7f0000000500)={@void, @val={0x0, 0x0, 0xfffe, 0x3, 0x9, 0x9}, @ipv6=@generic={0x7, 0x6, "9fd60f", 0x4b, 0x2b, 0x1, @private1, @ipv4={'\x00', '\xff\xff', @multicast1}, {[], "780464b426696554ae3f702b079ba0cb2a3d656a7e098c52ffa59553f58ceae1af76da2712a959278b246fad1383882d510fdb742de0c93da8925f0d8d5a2e63f1c593d8e94707a77d1ef3"}}}, 0x7d)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)

2m3.644963834s ago: executing program 37 (id=2775):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
ioctl(r0, 0x400452c8, &(0x7f0000000000)="000000000000000000000000000000000000000001")
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/rfcomm0\x00', 0x802, 0x0)
write$tun(r1, &(0x7f0000000500)={@void, @val={0x0, 0x0, 0xfffe, 0x3, 0x9, 0x9}, @ipv6=@generic={0x7, 0x6, "9fd60f", 0x4b, 0x2b, 0x1, @private1, @ipv4={'\x00', '\xff\xff', @multicast1}, {[], "780464b426696554ae3f702b079ba0cb2a3d656a7e098c52ffa59553f58ceae1af76da2712a959278b246fad1383882d510fdb742de0c93da8925f0d8d5a2e63f1c593d8e94707a77d1ef3"}}}, 0x7d)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)

2m2.636225558s ago: executing program 5 (id=2778):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0)
mount$bind(&(0x7f0000000540)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000280)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
umount2(&(0x7f0000000080)='./file0/file0\x00', 0x0)

2m2.373188035s ago: executing program 5 (id=2780):
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0)
setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r4, &(0x7f0000000300)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='nv', 0x2)
shutdown(r4, 0x1)
r5 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x20600)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
ioctl$NBD_SET_SOCK(r5, 0xab00, 0xffffffffffffffff)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x0, 0x0})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000)=@other={'trylock', ' ', 'none'}, 0xd)

2m1.434932108s ago: executing program 5 (id=2783):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000001c0)={0x7, &(0x7f0000000180)=[{0xfff9, 0xa, 0x8, 0x1}, {0x4, 0x6, 0x2, 0x9}, {0x5, 0xf8, 0x8, 0x18}, {0x7, 0x0, 0x3, 0x5}, {0x2, 0x8, 0xa, 0x5d}, {0xd1, 0x9, 0x9, 0x10000}, {0xb7ec, 0x1, 0x4, 0x101}]}, 0x10)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x0, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
sendmsg$unix(r1, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20048001}, 0x20000844)
chdir(&(0x7f0000000140)='./file0\x00')
r4 = open(&(0x7f0000000040)='./bus\x00', 0x4ca7e, 0x10)
fallocate(r4, 0x0, 0x0, 0x1000f4)
sendfile(r4, r4, 0x0, 0x40000000800)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d)
fallocate(r5, 0x100000000000011, 0x2000, 0x2f93)

2m0.497045621s ago: executing program 38 (id=2783):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000001c0)={0x7, &(0x7f0000000180)=[{0xfff9, 0xa, 0x8, 0x1}, {0x4, 0x6, 0x2, 0x9}, {0x5, 0xf8, 0x8, 0x18}, {0x7, 0x0, 0x3, 0x5}, {0x2, 0x8, 0xa, 0x5d}, {0xd1, 0x9, 0x9, 0x10000}, {0xb7ec, 0x1, 0x4, 0x101}]}, 0x10)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x0, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
sendmsg$unix(r1, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20048001}, 0x20000844)
chdir(&(0x7f0000000140)='./file0\x00')
r4 = open(&(0x7f0000000040)='./bus\x00', 0x4ca7e, 0x10)
fallocate(r4, 0x0, 0x0, 0x1000f4)
sendfile(r4, r4, 0x0, 0x40000000800)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d)
fallocate(r5, 0x100000000000011, 0x2000, 0x2f93)

1m31.12754105s ago: executing program 4 (id=2824):
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000000000)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r2, 0x1, &(0x7f0000000040), 0x0)
fgetxattr(0xffffffffffffffff, &(0x7f0000000200)=@known='system.posix_acl_default\x00', 0x0, 0x0)

1m30.984781363s ago: executing program 8 (id=2825):
r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='0.0.0.0:0:/\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000000c0)='0.0.0.0:0:/\x00', &(0x7f0000000600)="69f4", 0x2)

1m30.019466067s ago: executing program 4 (id=2827):
r0 = socket$kcm(0xa, 0x3, 0x73)
r1 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x368, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x298, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x0, 0x4}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @remote}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000290000000b"], 0x28}, 0x0)

1m29.730358114s ago: executing program 8 (id=2830):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001680))
ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000140)=0x200000000)
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

1m29.715365234s ago: executing program 4 (id=2831):
add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)='0', 0x1, 0xffffffffffffffff)

1m29.189495237s ago: executing program 4 (id=2833):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0)
mount$bind(&(0x7f0000000540)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000280)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
umount2(&(0x7f0000000080)='./file0/file0\x00', 0x0)

1m28.68141675s ago: executing program 8 (id=2834):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000)
write$tun(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="0a0000f80180c2000002527bcee565f486dd6d000000001011"], 0x4a)

1m28.553980333s ago: executing program 4 (id=2836):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x5c}}, 0x0)
getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000080)=""/4096, &(0x7f0000001200)=0x1000)

1m25.81420236s ago: executing program 8 (id=2844):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0)
mount$bind(&(0x7f0000000540)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000280)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
umount2(&(0x7f0000000080)='./file0/file0\x00', 0x0)

1m25.607498885s ago: executing program 8 (id=2847):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f0000000080)='gadgetfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/sys/net/ipv4/neigh/lo/base_reachable_time\x00', 0x2, 0x0)
clock_gettime(0x4, &(0x7f00000000c0))
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22004002, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@nojournal_checksum}, {@noload}, {@noinit_itable}, {@usrjquota}, {@grpjquota, 0x2e}], [{@subj_type={'subj_type', 0x3d, '\xe1[]*:['}}]}, 0x81, 0x496, &(0x7f00000001c0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x81)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
getsockopt$sock_buf(r3, 0x1, 0x1c, &(0x7f0000000000)=""/44, &(0x7f0000000040)=0x2c)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50)
bpf$MAP_CREATE_TAIL_CALL(0x9, &(0x7f0000000380), 0xc)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r4=>0x0})
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f00000000c0)=[{0x28, 0x1, 0xf7, 0xfffff020}, {0x6, 0x8, 0x2, 0x57c}]}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0xfff9, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x2}, {0xfff9, 0xc0, 0x2}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)

1m24.59418281s ago: executing program 4 (id=2849):
r0 = socket$kcm(0xa, 0x3, 0x73)
r1 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x368, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x298, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x0, 0x4}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @remote}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000290000000b000000000000"], 0x28}, 0x0)

1m24.501585412s ago: executing program 8 (id=2850):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x130, 0x1c8, 0xffffffff, 0xffffffff, 0x98, 0x130, 0x1c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xf, 0x7, 0x5b4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x2f8, 0x0, 0x98, 0x130, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='dctcp', 0x5)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)

1m23.76259649s ago: executing program 39 (id=2849):
r0 = socket$kcm(0xa, 0x3, 0x73)
r1 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x368, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x298, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x0, 0x4}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @remote}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000290000000b000000000000"], 0x28}, 0x0)

1m23.684138872s ago: executing program 40 (id=2850):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x130, 0x1c8, 0xffffffff, 0xffffffff, 0x98, 0x130, 0x1c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xf, 0x7, 0x5b4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x2f8, 0x0, 0x98, 0x130, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='dctcp', 0x5)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)

14.478603916s ago: executing program 1 (id=2994):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x800)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r1)

14.458869857s ago: executing program 3 (id=2995):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
syz_open_dev$evdev(&(0x7f0000000340), 0x1, 0x109001)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
r1 = io_uring_setup(0x2e05, &(0x7f00000001c0)={0x0, 0x5acf, 0x40, 0x2})
shmctl$SHM_LOCK(0x0, 0xb)
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000240)=[{&(0x7f0000001700)=""/4095, 0xfff}], 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
write(r3, &(0x7f0000000200)='md0', 0x3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0)
ioctl(r4, 0x400c0930, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/component_size\x00', 0x1, 0x0)
write(r5, &(0x7f0000000600)='1024\n', 0x5)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c4)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000"], 0x0, 0x3c}, 0x28)
getpid()
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32=r6, @ANYBLOB="0100000002"], 0x40)

12.808666067s ago: executing program 9 (id=2996):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
syz_open_dev$evdev(&(0x7f0000000340), 0x1, 0x109001)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = io_uring_setup(0x2e05, &(0x7f00000001c0)={0x0, 0x5acf, 0x40, 0x2})
shmctl$SHM_LOCK(0x0, 0xb)
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000240)=[{&(0x7f0000001700)=""/4095, 0xfff}], 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
write(r4, &(0x7f0000000200)='md', 0x2)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0)
ioctl(r5, 0x40480923, &(0x7f0000000380))
ioctl(r5, 0x40140921, &(0x7f0000000420)="00000000010000000000")
ioctl(r5, 0x400c0930, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/component_size\x00', 0x1, 0x0)
write(r6, &(0x7f0000000600)='1024\n', 0x5)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c4)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000"], 0x0, 0x3c}, 0x28)
getpid()
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r7, @ANYBLOB="0100000002"], 0x40)

12.762475598s ago: executing program 1 (id=2997):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
syz_open_dev$evdev(&(0x7f0000000340), 0x1, 0x109001)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
r1 = io_uring_setup(0x2e05, &(0x7f00000001c0)={0x0, 0x5acf, 0x40, 0x2})
shmctl$SHM_LOCK(0x0, 0xb)
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000240)=[{&(0x7f0000001700)=""/4095, 0xfff}], 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
write(r3, &(0x7f0000000200)='md0', 0x3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0)
ioctl(r4, 0x400c0930, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/component_size\x00', 0x1, 0x0)
write(r5, &(0x7f0000000600)='1024\n', 0x5)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c4)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000"], 0x0, 0x3c}, 0x28)
getpid()
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32=r6, @ANYBLOB="0100000002"], 0x40)

11.633128906s ago: executing program 3 (id=2998):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r0, 0x0, 0x20000011)
sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)={0x20, 0x24, 0x107, 0x70bd2e, 0x25dfdbfb, {0x2, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010)

9.598746776s ago: executing program 2 (id=2999):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0)=0x3, 0x4)
sendmmsg$inet(r0, &(0x7f0000008040)=[{{0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000002680)="bbcc", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000002940)="d6", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000003080)=[{&(0x7f0000002bc0)="4646ca", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000005380)=[{&(0x7f0000003200)="9bdf", 0x2}], 0x1}}], 0x4, 0x8040094)

9.582599076s ago: executing program 1 (id=3000):
getpid()
r0 = syz_open_dev$evdev(0x0, 0x2, 0x963b01)
ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x53, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x7}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]})
stat(&(0x7f0000000080)='./file1\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x404, &(0x7f0000000940)={[{@max_batch_time={'max_batch_time', 0x3d, 0x8}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@resuid={'resuid', 0x3d, r1}}, {@bsdgroups}, {@nombcache}, {@nojournal_checksum}, {@dax_never}, {@grpid}]}, 0x1, 0x440, &(0x7f0000000d40)="$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")
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000e80)={0x1c, r2, 0x801, 0x400, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0)

9.516406778s ago: executing program 9 (id=3001):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'lo\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x3}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0xffff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, 0x0, 0x44004)

9.364939911s ago: executing program 3 (id=3002):
setns(0xc9, 0x0)
r0 = socket(0x2a, 0x2, 0x80000001)
syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x1218001, &(0x7f0000000100)=ANY=[@ANYBLOB="63726561746f723d9f11922b2c73657373696f6e3d3078303030303030303030303030303030382c696f636861727365743d6d61636761656c69632c756d61736b3d30303030303030303030303030303030303030303030302c0062884bde17096180f9"], 0x2, 0x34b, &(0x7f00000008c0)="$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")
ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000240))

9.306531843s ago: executing program 2 (id=3003):
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x41, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0xfffffe98, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x0)

9.146598957s ago: executing program 2 (id=3004):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x20004080)

9.139603657s ago: executing program 9 (id=3005):
r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2)
write(r0, 0x0, 0x0)
ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, 0x0)

9.00007677s ago: executing program 3 (id=3006):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
syz_open_dev$evdev(&(0x7f0000000340), 0x1, 0x109001)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
r1 = io_uring_setup(0x2e05, &(0x7f00000001c0)={0x0, 0x5acf, 0x40, 0x2})
shmctl$SHM_LOCK(0x0, 0xb)
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000240)=[{&(0x7f0000001700)=""/4095, 0xfff}], 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
write(r3, &(0x7f0000000200)='md0', 0x3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0)
ioctl(r4, 0x400c0930, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/component_size\x00', 0x1, 0x0)
write(r5, &(0x7f0000000600)='1024\n', 0x5)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c4)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000"], 0x0, 0x3c}, 0x28)
getpid()
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32=r6, @ANYBLOB="0100000002"], 0x40)

8.954463801s ago: executing program 1 (id=3007):
openat$binderfs_feature(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/features/extended_error\x00', 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xe8}, 0x1, 0x0, 0x0, 0x200000c0}, 0x20000800)
r0 = syz_mount_image$exfat(&(0x7f0000001080), &(0x7f0000001040)='./bus\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='utf8,umask=00000000000000000100003,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c696f636861727365743d6575632d6a702c6572726f72733d72656d6f756e742d726f2c757466382c666d61736b3d30303030303030303030303030303030303030303133332c646d61736b3d30303030303030303030303030303030303030303030332c74696d655f6f66667365743d3078303030303030303030303030303030362c6572726f72733d72656d6f756e742d726f2c00e7f7a64e12768f24588c031e3a7d52e686581692b31c66f5320a14e587a7c28feef0f667bc0421879f8dd03f06fa51770cf06aece55ad1185a9caffc331fae3067bf"], 0x3, 0x152b, &(0x7f0000002f80)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x44)
faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x3, 0x1000)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7)
syz_emit_ethernet(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
syz_clone(0xa1209200, 0x0, 0x44, 0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
r5 = syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x99c455, 0x0, 0x40, 0x0, &(0x7f0000000140))
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000400)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRES8=r0, @ANYRES8=0x0, @ANYRES32=0x0, @ANYRES64=r5, @ANYRESDEC=0x0, @ANYRESDEC, @ANYRES16=r4], 0x1, 0x304, &(0x7f0000000bc0)="$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")
r6 = open(&(0x7f0000000040)='./bus\x00', 0x1c1242, 0x12a)
ftruncate(r6, 0x2007ffb)
lseek(r6, 0x3, 0x3)
syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000880)='./file0\x00', 0x110409e, &(0x7f0000000080)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303032303030303033333736342c6572726f72733d72656d6f756e742d726f2c64697363617264466b6565705f6c6173745f646f74732c646d61736b3d303030ffffffffffffffff3030303030303030303336322c646973636172642c696e636861727365743d63703836312c6e616d65636173653d312c656e726f7273070000007d696e75652c646973636172642c002145eb3b319d85673e4b0b826843a6371883fe7f44590bd851dcfa"], 0x1, 0x1542, &(0x7f0000004d00)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x0, 0x84)

8.951081881s ago: executing program 2 (id=3008):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
syz_open_dev$evdev(&(0x7f0000000340), 0x1, 0x109001)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
r1 = io_uring_setup(0x2e05, &(0x7f00000001c0)={0x0, 0x5acf, 0x40, 0x2})
shmctl$SHM_LOCK(0x0, 0xb)
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000240)=[{&(0x7f0000001700)=""/4095, 0xfff}], 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
write(r3, &(0x7f0000000200)='md0', 0x3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0)
ioctl(r4, 0x400c0930, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/component_size\x00', 0x1, 0x0)
write(r5, &(0x7f0000000600)='1024\n', 0x5)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c4)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000"], 0x0, 0x3c}, 0x28)
getpid()
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32=r6, @ANYBLOB="0100000002"], 0x40)

8.924649152s ago: executing program 9 (id=3009):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
syz_open_dev$evdev(&(0x7f0000000340), 0x1, 0x109001)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = io_uring_setup(0x2e05, &(0x7f00000001c0)={0x0, 0x5acf, 0x40, 0x2})
shmctl$SHM_LOCK(0x0, 0xb)
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000240)=[{&(0x7f0000001700)=""/4095, 0xfff}], 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
write(r4, &(0x7f0000000200)='md', 0x2)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0)
ioctl(r5, 0x40480923, &(0x7f0000000380))
ioctl(r5, 0x40140921, &(0x7f0000000420)="00000000010000000000")
ioctl(r5, 0x400c0930, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/component_size\x00', 0x1, 0x0)
write(r6, &(0x7f0000000600)='1024\n', 0x5)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c4)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000"], 0x0, 0x3c}, 0x28)
getpid()
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r7, @ANYBLOB="0100000002"], 0x40)

4.398904573s ago: executing program 3 (id=3010):
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6(0xa, 0x2, 0x0)
timerfd_create(0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x106, 0x3}}, 0x20)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1, 0x10000}}, 0xa)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)

4.341411874s ago: executing program 2 (id=3011):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r0, 0x0, 0x20000011)
sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)={0x20, 0x24, 0x107, 0x70bd2e, 0x25dfdbfb, {0x2, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010)

4.284046096s ago: executing program 9 (id=3012):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$sock_buf(r0, 0x1, 0x22, 0x0, &(0x7f0000001180))

4.08649764s ago: executing program 3 (id=3013):
syz_mount_image$ext4(&(0x7f00000001c0)='ext2\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000000, &(0x7f0000000080), 0x1, 0x2a8, &(0x7f0000001200)="$eJzs3b1rJGUcB/Df7EvieuE4tbESQUQ0EM5CEGzOxoMDOURE0IMTOW2UO+G8a2+tbCzsVVLZBLHSKNiITbDxD4iaIjY2wcKgYIqRnRfZbDabiTs7C9nPB3Z2JnkmzzPsfJ95AjP7BLCwLkTEpYhoR8RqRHQjIhku8Gj+ulBsrve2rkek6ct/JFm5fDtX7ncuIvoR8WxEp/zd3c3Xd//avvzER3e6j3+++VovIlpNHWNpb3fnxf3Prn749ZWn75aVrxTvw8dRp2TMzzpJxIOzqGz+ssNNqn6yy7NtDCf58udB7h+KiMey/HejVUT249tLP3TjqU/H77e032w7gVlI0+7gGthPgYXTysbASWutGJCvRKu1tpaP4X9pJ/Hurdvvr759687NG/PuqYATfXWQppNLJP38/96dF75d/ubcSP5/b+f5r+SZOhoMNG2Q/1de2vh1sL7fnndrgAZ8V64M8r/6xr0nQ/7hTOlVKCP/cNZ0KpeUf1hcp8p/43fqAJVMyu6E+6tc/2FxyT8srqr57zfYJqAm3XJlfIKnv/7/XdxB+P+bCDTtfLY0/ofFNZL/4paB4mnVaoP+y2/deGd2DQTqdq1cGc4/ALBY0uU5P4AMzM28+x8AAAAAAAAAAAAAAAAAAOCo9d7W9fLVVJ0/fhKx93w+bdFw/fm0Be1i2pH7suX9fyaHZjdKTjXb0XjXptx/Wl/U/PT11QnzPYxz/rd666/+iSxly58eqbv+3AeHN4+dDu/ezYj+oPDFTufo+Z9Unfbm2L//wOT9LnXfrFZBXZKR7edebbb+UQcb863/ynbE94P+5+K4/q8VD2fv4/ufleGvWI7/TulTee+faVoPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAk/4NAAD//5hJeF8=")
syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x191b800, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000440)={@remote, @empty}, 0x8)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
open$dir(&(0x7f0000000240)='./file0\x00', 0x2, 0x85)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r5, 0x0)

3.900694615s ago: executing program 2 (id=3014):
rt_sigprocmask(0x0, &(0x7f00000000c0)={[0x400]}, &(0x7f0000000180), 0x8)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000001480)=ANY=[], 0xfd, 0x553e, &(0x7f0000006b40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3b41, 0x10)
prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x1, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r4=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000100)=@ethtool_perm_addr={0x4b, 0x4a, "26270000000000000000e253c04105a4b6d6932f"}})
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@stripe={'stripe', 0x3d, 0x4}}, {}, {@block_validity}, {@norecovery}, {@dioread_nolock}, {@oldalloc}, {@oldalloc}, {@sysvgroups}, {@norecovery}]}, 0x3, 0x566, &(0x7f00000015c0)="$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")
dup(0xffffffffffffffff)
dup(0xffffffffffffffff)
mlockall(0x7)
ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000340)=0xfffffff9)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x9, 0x800800})

1.774703917s ago: executing program 9 (id=3015):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x8, 0x9, 0x4519b3ea, 0x6, 0x6, 0x4c9, 0x3, 0x53, 0xa32a, 0x4, 0x94f, 0x7, 0x2, 0x400, 0x1, 0xffffffffffffffff], 0x8080000, 0x28000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

445.03924ms ago: executing program 1 (id=3016):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x20004080)

0s ago: executing program 1 (id=3017):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01080000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000090000000060a01240000000000000000020000000900010073797a30000000000900020073797a300000000064000480600001800b0001007461726765740000500002800e00010049444c4554494d455200000008000240000000013400030064"], 0x104}}, 0x0)

kernel console output (not intermixed with test programs):

T16090]  ? vidtv_mux_init+0x3b1/0x1950
[ 1403.723356][T16090]  vidtv_channels_init+0x45/0xa0
[ 1403.728300][T16090]  vidtv_mux_init+0x4d4/0x1950
[ 1403.733070][T16090]  ? rcu_is_watching+0x15/0xb0
[ 1403.737844][T16090]  vidtv_start_feed+0x36c/0x590
[ 1403.742698][T16090]  ? vidtv_i2c_func+0x10/0x10
[ 1403.747399][T16090]  ? vidtv_stop_feed+0x260/0x260
[ 1403.752339][T16090]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1403.757546][T16090]  ? lockdep_hardirqs_on+0x98/0x150
[ 1403.762751][T16090]  dmx_ts_feed_start_filtering+0x120/0x220
[ 1403.768558][T16090]  ? dmx_ts_feed_stop_filtering+0x190/0x190
[ 1403.774459][T16090]  dvb_dmxdev_filter_start+0x422/0x10a0
[ 1403.780024][T16090]  dvb_demux_do_ioctl+0x491/0x530
[ 1403.785071][T16090]  dvb_usercopy+0x195/0x2b0
[ 1403.789577][T16090]  ? dvb_dmxdev_buffer_read+0x4a0/0x4a0
[ 1403.795128][T16090]  ? dvb_generic_ioctl+0xb0/0xb0
[ 1403.800108][T16090]  ? dvb_demux_poll+0x210/0x210
[ 1403.804975][T16090]  dvb_demux_ioctl+0x29/0x30
[ 1403.809588][T16090]  __se_sys_ioctl+0xfd/0x170
[ 1403.814277][T16090]  do_syscall_64+0x55/0xb0
[ 1403.818707][T16090]  ? clear_bhb_loop+0x40/0x90
[ 1403.823394][T16090]  ? clear_bhb_loop+0x40/0x90
[ 1403.828080][T16090]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1403.833984][T16090] RIP: 0033:0x7ffa35b9e199
[ 1403.838404][T16090] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1403.858052][T16090] RSP: 002b:00007ffa36ae6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1403.866493][T16090] RAX: ffffffffffffffda RBX: 00007ffa35e25fa0 RCX: 00007ffa35b9e199
[ 1403.874466][T16090] RDX: 0000000000000000 RSI: 0000000000006f29 RDI: 0000000000000003
[ 1403.882440][T16090] RBP: 00007ffa35c358e0 R08: 0000000000000000 R09: 0000000000000000
[ 1403.890411][T16090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1403.898379][T16090] R13: 00007ffa35e26038 R14: 00007ffa35e25fa0 R15: 00007ffcc51a91e8
[ 1403.906366][T16090]  </TASK>
[ 1403.971593][T16096] md: array md0 already initialised!
[ 1403.977375][T16096] md0: ADD_NEW_DISK not supported
[ 1404.022348][T16090] Mem-Info:
[ 1404.088497][T16090] active_anon:7304 inactive_anon:0 isolated_anon:0
[ 1404.088497][T16090]  active_file:18222 inactive_file:41193 isolated_file:0
[ 1404.088497][T16090]  unevictable:768 dirty:46 writeback:0
[ 1404.088497][T16090]  slab_reclaimable:13391 slab_unreclaimable:97228
[ 1404.088497][T16090]  mapped:24739 shmem:1920 pagetables:816
[ 1404.088497][T16090]  sec_pagetables:0 bounce:0
[ 1404.088497][T16090]  kernel_misc_reclaimable:0
[ 1404.088497][T16090]  free:1331144 free_pcp:11621 free_cma:0
[ 1404.218525][T16090] Node 0 active_anon:29216kB inactive_anon:0kB active_file:72888kB inactive_file:164572kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98956kB dirty:184kB writeback:0kB shmem:6144kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11464kB pagetables:3264kB sec_pagetables:0kB all_unreclaimable? no
[ 1404.303654][T16090] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[ 1404.343521][T16090] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1404.439887][T15744] veth0_vlan: entered promiscuous mode
[ 1404.496293][T15744] veth1_vlan: entered promiscuous mode
[ 1404.524314][T16090] lowmem_reserve[]: 0 2521 2522 2522 2522
[ 1404.530167][T16090] Node 0 DMA32 free:1418472kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:29180kB inactive_anon:0kB active_file:72888kB inactive_file:163744kB unevictable:1536kB writepending:184kB present:3129332kB managed:2586780kB mlocked:0kB bounce:0kB free_pcp:24512kB local_pcp:5224kB free_cma:0kB
[ 1404.573369][T16090] lowmem_reserve[]: 0 0 0 0 0
[ 1404.579376][T16090] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1404.651242][T16090] lowmem_reserve[]: 0 0 0 0 0
[ 1404.677539][T16090] Node 1 Normal free:3890612kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:20324kB local_pcp:11872kB free_cma:0kB
[ 1404.786347][T15744] veth0_macvtap: entered promiscuous mode
[ 1404.802308][T16090] lowmem_reserve[]: 0 0 0 0 0
[ 1404.823569][T15744] veth1_macvtap: entered promiscuous mode
[ 1404.826632][T16090] Node 0 
[ 1404.840005][T16090] DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 1404.881852][T16090] Node 0 DMA32: 533*4kB (UME) 1359*8kB (UME) 1046*16kB (UME) 1150*32kB (UME) 598*64kB (UM) 257*128kB (UM) 150*256kB (UME) 110*512kB (UM) 42*1024kB (M) 32*2048kB (UM) 263*4096kB (M) = 1418220kB
[ 1404.910117][T15744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1404.933176][T15744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1404.972990][T15744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1404.985665][T16090] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB
[ 1404.993604][T15744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1405.030266][T16090] Node 1 Normal: 233*4kB (UME) 48*8kB (UME) 41*16kB (UME) 64*32kB (UME) 26*64kB (UME) 7*128kB (UME) 4*256kB (UME) 0*512kB 2*1024kB (UE) 1*2048kB (E) 947*4096kB (M) = 3890612kB
[ 1405.051087][T15744] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1405.097330][T16090] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1405.123757][T16090] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1405.146793][T16090] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1405.168013][T16090] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1405.221677][T15744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1405.235298][T16090] 63486 total pagecache pages
[ 1405.246346][T16090] 0 pages in swap cache
[ 1405.250551][T16090] Free swap  = 124692kB
[ 1405.275418][T15744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1405.286026][T15744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1405.295933][T16090] Total swap = 124996kB
[ 1405.296547][T15744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1405.300596][T16090] 2097051 pages RAM
[ 1405.316634][T15744] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1405.327918][T15744] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1405.336787][T15744] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1405.360030][T15744] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1405.372025][T16090] 0 pages HighMem/MovableOnly
[ 1405.377774][T15744] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1405.386991][T16090] 416970 pages reserved
[ 1405.391175][T16090] 0 pages cma reserved
[ 1405.657680][ T8174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1405.677501][ T8174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1405.727355][T16127] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2514'.
[ 1405.801800][ T8174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1405.830482][ T8174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1407.194444][ T8174] net_ratelimit: 58 callbacks suppressed
[ 1407.580006][T16156] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1407.968612][T16163] loop4: detected capacity change from 0 to 128
[ 1408.076343][ T9841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1408.088725][ T9841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1408.098880][ T9841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1408.116895][ T9841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1408.130302][ T9841] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 1408.143982][ T9841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1408.203704][   T28] audit: type=1800 audit(1791291334.901:28): pid=16170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2524" name="no_out_endpoint" dev="configfs" ino=41914 res=0 errno=0
[ 1410.233052][ T9841] Bluetooth: hci1: command tx timeout
[ 1411.610142][T16218] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1411.837053][T16222] FAULT_INJECTION: forcing a failure.
[ 1411.837053][T16222] name fail_futex, interval 1, probability 0, space 0, times 0
[ 1411.855776][T16222] CPU: 1 PID: 16222 Comm: syz.6.2532 Not tainted syzkaller #0
[ 1411.863289][T16222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1411.873366][T16222] Call Trace:
[ 1411.876665][T16222]  <TASK>
[ 1411.879622][T16222]  dump_stack_lvl+0x18c/0x250
[ 1411.884346][T16222]  ? show_regs_print_info+0x20/0x20
[ 1411.889560][T16222]  ? load_image+0x420/0x420
[ 1411.894093][T16222]  ? kmem_cache_alloc+0x17e/0x2c0
[ 1411.899155][T16222]  ? alloc_file+0x5b/0x600
[ 1411.903598][T16222]  ? __se_sys_memfd_secret+0x125/0x300
[ 1411.909087][T16222]  ? do_syscall_64+0x55/0xb0
[ 1411.913698][T16222]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1411.913741][T16222]  should_fail_ex+0x394/0x4c0
[ 1411.913777][T16222]  get_futex_key+0x136/0x1030
[ 1411.920069][T16222]  ? futex_setup_timer+0xc0/0xc0
[ 1411.920102][T16222]  futex_wake+0x127/0x4f0
[ 1411.929715][T16222]  ? verify_lock_unused+0x140/0x140
[ 1411.944171][T16222]  ? percpu_counter_add_batch+0x1f4/0x2a0
[ 1411.944209][T16222]  ? futex_wake_mark+0x150/0x150
[ 1411.944232][T16222]  ? percpu_counter_add_batch+0x252/0x2a0
[ 1411.960745][T16222]  ? percpu_counter_set+0x1b0/0x1b0
[ 1411.960785][T16222]  do_futex+0x35d/0x3e0
[ 1411.960809][T16222]  ? fd_install+0x60/0x4e0
[ 1411.974607][T16222]  ? __ia32_sys_get_robust_list+0x110/0x110
[ 1411.980512][T16222]  __se_sys_futex+0x3a9/0x440
[ 1411.985198][T16222]  ? __x64_sys_futex+0xf0/0xf0
[ 1411.989992][T16222]  ? __x64_sys_futex+0x21/0xf0
[ 1411.994759][T16222]  do_syscall_64+0x55/0xb0
[ 1411.999180][T16222]  ? clear_bhb_loop+0x40/0x90
[ 1412.003855][T16222]  ? clear_bhb_loop+0x40/0x90
[ 1412.008530][T16222]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1412.014455][T16222] RIP: 0033:0x7fe5fe59e199
[ 1412.018906][T16222] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1412.038510][T16222] RSP: 002b:00007fe5ff4220e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1412.046928][T16222] RAX: ffffffffffffffda RBX: 00007fe5fe825fa8 RCX: 00007fe5fe59e199
[ 1412.054896][T16222] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe5fe825fac
[ 1412.062890][T16222] RBP: 00007fe5fe825fa0 R08: 00000000007459fa R09: 0000000000000000
[ 1412.070856][T16222] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000
[ 1412.070871][T16222] R13: 00007fe5fe826038 R14: 00007fffb9fb7ba0 R15: 00007fffb9fb7c88
[ 1412.070902][T16222]  </TASK>
[ 1412.211188][   T28] audit: type=1800 audit(1791291338.921:29): pid=16226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2533" name="no_out_endpoint" dev="configfs" ino=44309 res=0 errno=0
[ 1412.324816][ T9841] Bluetooth: hci1: command tx timeout
[ 1412.331533][ T8174] net_ratelimit: 41 callbacks suppressed
[ 1412.478632][T16165] chnl_net:caif_netlink_parms(): no params data found
[ 1412.837316][T16231] FAULT_INJECTION: forcing a failure.
[ 1412.837316][T16231] name fail_futex, interval 1, probability 0, space 0, times 0
[ 1412.897439][T16231] CPU: 0 PID: 16231 Comm: syz.5.2535 Not tainted syzkaller #0
[ 1412.904937][T16231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1412.904952][T16231] Call Trace:
[ 1412.904960][T16231]  <TASK>
[ 1412.904969][T16231]  dump_stack_lvl+0x18c/0x250
[ 1412.905002][T16231]  ? show_regs_print_info+0x20/0x20
[ 1412.905029][T16231]  ? load_image+0x420/0x420
[ 1412.905064][T16231]  ? preempt_schedule+0xc0/0xd0
[ 1412.918398][T16231]  ? preempt_schedule_common+0x82/0xc0
[ 1412.925992][T16231]  should_fail_ex+0x394/0x4c0
[ 1412.926026][T16231]  get_futex_key+0x136/0x1030
[ 1412.926052][T16231]  ? preempt_schedule_thunk+0x1a/0x30
[ 1412.926085][T16231]  ? try_to_wake_up+0x6f5/0x10e0
[ 1412.926104][T16231]  ? futex_setup_timer+0xc0/0xc0
[ 1412.926134][T16231]  futex_wake+0x127/0x4f0
[ 1412.926157][T16231]  ? __fget_files+0x28/0x460
[ 1412.935816][T16231]  ? futex_wake_mark+0x150/0x150
[ 1412.935851][T16231]  ? __fget_files+0x28/0x460
[ 1412.946150][T16231]  do_futex+0x35d/0x3e0
[ 1412.946179][T16231]  ? __ia32_sys_get_robust_list+0x110/0x110
[ 1412.946200][T16231]  ? __fdget+0x192/0x210
[ 1412.946232][T16231]  __se_sys_futex+0x3a9/0x440
[ 1412.946256][T16231]  ? __x64_sys_futex+0xf0/0xf0
[ 1412.946282][T16231]  ? __x64_sys_futex+0x21/0xf0
[ 1412.984672][T16231]  do_syscall_64+0x55/0xb0
[ 1412.993393][T16231]  ? clear_bhb_loop+0x40/0x90
[ 1412.993413][T16231]  ? clear_bhb_loop+0x40/0x90
[ 1412.993432][T16231]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1412.993459][T16231] RIP: 0033:0x7ffa35b9e199
[ 1412.993477][T16231] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1412.993495][T16231] RSP: 002b:00007ffa36ae60e8 EFLAGS: 00000246
[ 1413.003579][T16231]  ORIG_RAX: 00000000000000ca
[ 1413.012981][T16231] RAX: ffffffffffffffda RBX: 00007ffa35e25fa8 RCX: 00007ffa35b9e199
[ 1413.012997][T16231] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ffa35e25fac
[ 1413.013011][T16231] RBP: 00007ffa35e25fa0 R08: 00000000007459fa R09: 0000000000000000
[ 1413.013030][T16231] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[ 1413.013044][T16231] R13: 00007ffa35e26038 R14: 00007ffcc51a9100 R15: 00007ffcc51a91e8
[ 1413.013073][T16231]  </TASK>
[ 1413.225813][T16228] tipc: Started in network mode
[ 1413.230754][T16228] tipc: Node identity b60a19fe2497, cluster identity 4711
[ 1413.273337][T16228] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1413.280575][T16229] syzkaller0: entered promiscuous mode
[ 1413.303368][T16229] syzkaller0: entered allmulticast mode
[ 1413.340688][T16241] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1413.379504][T16235] tipc: Resetting bearer <eth:syzkaller0>
[ 1413.419711][T16227] tipc: Resetting bearer <eth:syzkaller0>
[ 1413.477810][T16227] tipc: Disabling bearer <eth:syzkaller0>
[ 1413.539445][   T28] audit: type=1800 audit(1791291340.251:30): pid=16246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2541" name="no_out_endpoint" dev="configfs" ino=43125 res=0 errno=0
[ 1413.976106][T16165] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1413.989903][T16165] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1414.011071][T16165] bridge_slave_0: entered allmulticast mode
[ 1414.035230][T16165] bridge_slave_0: entered promiscuous mode
[ 1414.112196][T16165] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1414.130318][T16165] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1414.140532][T16165] bridge_slave_1: entered allmulticast mode
[ 1414.165660][T16165] bridge_slave_1: entered promiscuous mode
[ 1414.394409][ T9841] Bluetooth: hci1: command tx timeout
[ 1414.431266][T16165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1414.446123][T16165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1414.898857][T16165] team0: Port device team_slave_0 added
[ 1414.945739][T16165] team0: Port device team_slave_1 added
[ 1415.193252][T11451] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1415.231177][T11451] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1415.249396][T11451] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1415.259678][T11451] bridge_slave_0: left allmulticast mode
[ 1415.271419][T11451] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1415.353314][   T28] audit: type=1800 audit(1791291342.051:31): pid=16266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2549" name="no_out_endpoint" dev="configfs" ino=43928 res=0 errno=0
[ 1416.483079][ T9841] Bluetooth: hci1: command tx timeout
[ 1416.875460][T16284] FAULT_INJECTION: forcing a failure.
[ 1416.875460][T16284] name fail_futex, interval 1, probability 0, space 0, times 0
[ 1416.888778][T16284] CPU: 0 PID: 16284 Comm: syz.6.2555 Not tainted syzkaller #0
[ 1416.896245][T16284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1416.896258][T16284] Call Trace:
[ 1416.896267][T16284]  <TASK>
[ 1416.896276][T16284]  dump_stack_lvl+0x18c/0x250
[ 1416.909589][T16284]  ? show_regs_print_info+0x20/0x20
[ 1416.917162][T16284]  ? load_image+0x420/0x420
[ 1416.917188][T16284]  ? get_user_pages_fast_only+0xa0/0xa0
[ 1416.917226][T16284]  should_fail_ex+0x394/0x4c0
[ 1416.926890][T16284]  get_futex_key+0x857/0x1030
[ 1416.926918][T16284]  ? futex_setup_timer+0xc0/0xc0
[ 1416.937109][T16284]  futex_wake+0x127/0x4f0
[ 1416.937136][T16284]  ? futex_wake_mark+0x150/0x150
[ 1416.937169][T16284]  do_futex+0x35d/0x3e0
[ 1416.946715][T16284]  ? __might_fault+0xaa/0x120
[ 1416.946739][T16284]  ? __ia32_sys_get_robust_list+0x110/0x110
[ 1416.946763][T16284]  ? __might_fault+0xc6/0x120
[ 1416.955981][T16284]  mm_release+0x184/0x3a0
[ 1416.956006][T16284]  ? exit_mm_release+0x30/0x30
[ 1416.956025][T16284]  ? lockdep_hardirqs_on+0x98/0x150
[ 1416.964933][T16284]  exit_mm+0xa4/0x340
[ 1416.964962][T16284]  ? sysctl_delayacct+0x220/0x220
[ 1416.964980][T16284]  ? do_exit+0x2530/0x2530
[ 1416.965012][T16284]  do_exit+0x909/0x2530
[ 1416.975559][T16284]  ? put_task_struct+0xc0/0xc0
[ 1416.975590][T16284]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[ 1416.994155][T16284]  ? get_signal+0x100e/0x1390
[ 1417.003564][T16284]  ? lock_chain_count+0x20/0x20
[ 1417.003587][T16284]  ? _raw_spin_lock_irq+0xbb/0xf0
[ 1417.003613][T16284]  do_group_exit+0x22d/0x2f0
[ 1417.012496][T16284]  ? lockdep_hardirqs_on+0x98/0x150
[ 1417.012520][T16284]  get_signal+0x12a6/0x1390
[ 1417.023249][T16284]  arch_do_signal_or_restart+0xc2/0x7b0
[ 1417.033079][T16284]  ? __ia32_sys_get_robust_list+0x110/0x110
[ 1417.033101][T16284]  ? get_sigframe_size+0x20/0x20
[ 1417.063874][T16284]  ? __sys_bind+0x32f/0x3f0
[ 1417.068391][T16284]  ? exit_to_user_mode_loop+0x3b/0x110
[ 1417.073857][T16284]  exit_to_user_mode_loop+0x70/0x110
[ 1417.079149][T16284]  exit_to_user_mode_prepare+0xee/0x180
[ 1417.084699][T16284]  syscall_exit_to_user_mode+0x1a/0x50
[ 1417.090186][T16284]  do_syscall_64+0x61/0xb0
[ 1417.094605][T16284]  ? clear_bhb_loop+0x40/0x90
[ 1417.099276][T16284]  ? clear_bhb_loop+0x40/0x90
[ 1417.103949][T16284]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1417.109842][T16284] RIP: 0033:0x7fe5fe59e199
[ 1417.114254][T16284] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1417.133859][T16284] RSP: 002b:00007fe5ff4220e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1417.142276][T16284] RAX: fffffffffffffe00 RBX: 00007fe5fe825fa8 RCX: 00007fe5fe59e199
[ 1417.150248][T16284] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe5fe825fa8
[ 1417.158222][T16284] RBP: 00007fe5fe825fa0 R08: 0000000000000000 R09: 0000000000000000
[ 1417.166195][T16284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1417.174162][T16284] R13: 00007fe5fe826038 R14: 00007fffb9fb7ba0 R15: 00007fffb9fb7c88
[ 1417.182148][T16284]  </TASK>
[ 1417.352936][    C1] net_ratelimit: 33 callbacks suppressed
[ 1417.512640][T16293] warn_alloc: 5 callbacks suppressed
[ 1417.512657][T16293] syz.6.2556: vmalloc error: size 65024, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz6,mems_allowed=0-1
[ 1417.582988][T16293] CPU: 0 PID: 16293 Comm: syz.6.2556 Not tainted syzkaller #0
[ 1417.590519][T16293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1417.600577][T16293] Call Trace:
[ 1417.600588][T16293]  <TASK>
[ 1417.600599][T16293]  dump_stack_lvl+0x18c/0x250
[ 1417.607124][T16293]  ? show_regs_print_info+0x20/0x20
[ 1417.617518][T16293]  ? load_image+0x420/0x420
[ 1417.622060][T16293]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[ 1417.628491][T16293]  ? cpuset_print_current_mems_allowed+0x2e7/0x360
[ 1417.635010][T16293]  warn_alloc+0x246/0x340
[ 1417.639348][T16293]  ? __get_vm_area_node+0x125/0x370
[ 1417.644558][T16293]  ? zone_watermark_ok_safe+0x230/0x230
[ 1417.644579][T16293]  ? rcu_is_watching+0x15/0xb0
[ 1417.644610][T16293]  ? __get_vm_area_node+0x356/0x370
[ 1417.644637][T16293]  ? __kasan_kmalloc+0x8f/0xa0
[ 1417.644669][T16293]  __vmalloc_node_range+0x394/0x1320
[ 1417.655264][T16293]  ? __se_sys_ioctl+0xfd/0x170
[ 1417.655294][T16293]  ? do_syscall_64+0x55/0xb0
[ 1417.655319][T16293]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1417.655375][T16293]  ? free_vm_area+0x50/0x50
[ 1417.655412][T16293]  ? vidtv_s302m_encoder_init+0x178/0x780
[ 1417.665750][T16293]  vzalloc+0x79/0x90
[ 1417.675773][T16293]  ? vidtv_s302m_encoder_init+0x178/0x780
[ 1417.686644][T16293]  vidtv_s302m_encoder_init+0x178/0x780
[ 1417.712087][T16293]  ? vidtv_pes_write_into+0x11e0/0x11e0
[ 1417.717654][T16293]  ? rcu_is_watching+0x15/0xb0
[ 1417.722424][T16293]  ? vidtv_psi_registration_desc_init+0x34/0x2a0
[ 1417.728766][T16293]  ? __kmalloc+0xe5/0x240
[ 1417.733116][T16293]  vidtv_channel_s302m_init+0x35b/0x830
[ 1417.738670][T16293]  ? vidtv_mux_init+0x3b1/0x1950
[ 1417.743637][T16293]  vidtv_channels_init+0x45/0xa0
[ 1417.748576][T16293]  vidtv_mux_init+0x4d4/0x1950
[ 1417.753346][T16293]  ? rcu_is_watching+0x15/0xb0
[ 1417.758123][T16293]  vidtv_start_feed+0x36c/0x590
[ 1417.762992][T16293]  ? vidtv_i2c_func+0x10/0x10
[ 1417.767678][T16293]  ? vidtv_stop_feed+0x260/0x260
[ 1417.772620][T16293]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1417.777822][T16293]  ? lockdep_hardirqs_on+0x98/0x150
[ 1417.783037][T16293]  dmx_ts_feed_start_filtering+0x120/0x220
[ 1417.788847][T16293]  ? dmx_ts_feed_stop_filtering+0x190/0x190
[ 1417.794741][T16293]  dvb_dmxdev_filter_start+0x422/0x10a0
[ 1417.800301][T16293]  dvb_demux_do_ioctl+0x491/0x530
[ 1417.805334][T16293]  dvb_usercopy+0x195/0x2b0
[ 1417.809841][T16293]  ? dvb_dmxdev_buffer_read+0x4a0/0x4a0
[ 1417.815389][T16293]  ? dvb_generic_ioctl+0xb0/0xb0
[ 1417.820347][T16293]  ? dvb_demux_poll+0x210/0x210
[ 1417.825204][T16293]  dvb_demux_ioctl+0x29/0x30
[ 1417.829804][T16293]  __se_sys_ioctl+0xfd/0x170
[ 1417.834401][T16293]  do_syscall_64+0x55/0xb0
[ 1417.838843][T16293]  ? clear_bhb_loop+0x40/0x90
[ 1417.843520][T16293]  ? clear_bhb_loop+0x40/0x90
[ 1417.848196][T16293]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1417.854101][T16293] RIP: 0033:0x7fe5fe59e199
[ 1417.858518][T16293] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1417.878129][T16293] RSP: 002b:00007fe5ff422028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1417.886557][T16293] RAX: ffffffffffffffda RBX: 00007fe5fe825fa0 RCX: 00007fe5fe59e199
[ 1417.894527][T16293] RDX: 0000000000000000 RSI: 0000000000006f29 RDI: 0000000000000003
[ 1417.902495][T16293] RBP: 00007fe5fe6358e0 R08: 0000000000000000 R09: 0000000000000000
[ 1417.910465][T16293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1417.918441][T16293] R13: 00007fe5fe826038 R14: 00007fe5fe825fa0 R15: 00007fffb9fb7c88
[ 1417.926443][T16293]  </TASK>
[ 1417.943570][T16293] Mem-Info:
[ 1417.946738][T16293] active_anon:7172 inactive_anon:0 isolated_anon:0
[ 1417.946738][T16293]  active_file:18222 inactive_file:41200 isolated_file:0
[ 1417.946738][T16293]  unevictable:768 dirty:127 writeback:0
[ 1417.946738][T16293]  slab_reclaimable:14501 slab_unreclaimable:97480
[ 1417.946738][T16293]  mapped:24691 shmem:1920 pagetables:785
[ 1417.946738][T16293]  sec_pagetables:0 bounce:0
[ 1417.946738][T16293]  kernel_misc_reclaimable:0
[ 1417.946738][T16293]  free:1330828 free_pcp:11026 free_cma:0
[ 1418.032055][T16293] Node 0 active_anon:28888kB inactive_anon:0kB active_file:72888kB inactive_file:164600kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:102864kB dirty:508kB writeback:0kB shmem:6144kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11512kB pagetables:3140kB sec_pagetables:0kB all_unreclaimable? no
[ 1418.078680][T16293] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[ 1418.109696][ T5763] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[ 1418.143008][T16293] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1418.251934][T16293] lowmem_reserve[]: 0 2521 2522 2522 2522
[ 1418.283162][T16293] Node 0 DMA32 free:1416832kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:28852kB inactive_anon:0kB active_file:72888kB inactive_file:163772kB unevictable:1536kB writepending:508kB present:3129332kB managed:2586780kB mlocked:0kB bounce:0kB free_pcp:24368kB local_pcp:15936kB free_cma:0kB
[ 1418.357346][T16293] lowmem_reserve[]: 0 0 0 0 0
[ 1418.365961][T16293] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1418.423150][ T5763] usb 6-1: Using ep0 maxpacket: 16
[ 1418.443923][ T5763] usb 6-1: config 8 has an invalid interface number: 25 but max is 0
[ 1418.452066][ T5763] usb 6-1: config 8 has no interface number 0
[ 1418.463039][T16293] lowmem_reserve[]: 0 0 0 0 0
[ 1418.467836][T16293] Node 1 Normal free:3890612kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:20324kB local_pcp:8452kB free_cma:0kB
[ 1418.497089][ T5763] usb 6-1: config 8 interface 25 has no altsetting 0
[ 1418.539521][ T5763] usb 6-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice=c9.1e
[ 1418.562966][T16293] lowmem_reserve[]: 0 0 0 0 0
[ 1418.567763][T16293] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 1418.582318][ T5763] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1418.613567][ T5763] usb 6-1: Product: syz
[ 1418.617781][ T5763] usb 6-1: Manufacturer: syz
[ 1418.622393][ T5763] usb 6-1: SerialNumber: syz
[ 1418.637747][T16293] Node 0 DMA32: 1674*4kB (UME) 1273*8kB (UME) 985*16kB (UME) 1084*32kB (UME) 634*64kB (UM) 286*128kB (UM) 156*256kB (UM) 111*512kB (UM) 44*1024kB (UME) 30*2048kB (UM) 261*4096kB (M) = 1416832kB
[ 1418.718686][T16293] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB
[ 1418.765636][T16293] Node 1 Normal: 233*4kB (UME) 48*8kB (UME) 41*16kB (UME) 64*32kB (UME) 26*64kB (UME) 7*128kB (UME) 4*256kB (UME) 0*512kB 2*1024kB (UE) 1*2048kB (E) 947*4096kB (M) = 3890612kB
[ 1418.843060][T16293] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1418.871814][T16293] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1418.908268][ T5763] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:8.25/input/input16
[ 1418.918880][T16293] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1418.939221][T16293] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1418.948964][T16293] 61243 total pagecache pages
[ 1418.962040][T16293] 0 pages in swap cache
[ 1418.980208][T16293] Free swap  = 124692kB
[ 1418.990236][ T5763] usb 6-1: USB disconnect, device number 26
[ 1418.990432][ T5125] bcm5974 6-1:8.25: could not read from device
[ 1418.999041][T16293] Total swap = 124996kB
[ 1419.012333][T16293] 2097051 pages RAM
[ 1419.018914][T16293] 0 pages HighMem/MovableOnly
[ 1419.027539][T16293] 416970 pages reserved
[ 1419.031801][T16293] 0 pages cma reserved
[ 1419.056162][ T5125] bcm5974 6-1:8.25: could not read from device
[ 1419.980351][T11451] team0 (unregistering): Port device team_slave_1 removed
[ 1420.245821][T11451] team0 (unregistering): Port device team_slave_0 removed
[ 1420.378849][T11451] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1421.201828][T11451] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1422.291926][T11451] bond0 (unregistering): Released all slaves
[ 1422.426325][T16165] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1422.438303][T16165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1422.469795][T16165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1422.483079][    C0] net_ratelimit: 22 callbacks suppressed
[ 1422.569641][ T8820] infiniband syz1: set down
[ 1422.581095][ T5815] syz1: rxe_query_port: returned err = -19
[ 1422.585463][T10950] syz1: rxe_query_port: returned err = -19
[ 1422.613103][T10950] infiniband syz1: ib_query_port failed (-19)
[ 1422.674764][ T1127] smc: removing ib device syz1
[ 1422.680733][T16165] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1422.692308][T16165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1422.755887][T16165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1423.199780][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[ 1423.208700][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[ 1423.365786][T16165] hsr_slave_0: entered promiscuous mode
[ 1423.442025][T16165] hsr_slave_1: entered promiscuous mode
[ 1423.762095][T16342] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000
[ 1425.061977][T11451] IPVS: stop unused estimator thread 0...
[ 1427.552454][ T8174] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1427.592948][    C1] net_ratelimit: 24 callbacks suppressed
[ 1427.850003][ T8174] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1428.010525][ T8174] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1428.295331][ T8174] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1428.406192][T16366] bond0: (slave bond_slave_0): Releasing backup interface
[ 1428.768483][T14360] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1428.784018][T14360] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1428.793961][T14360] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1428.807309][T14360] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1428.823440][T14360] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1428.831445][T14360] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1429.025678][T16165] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1429.630713][T16165] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1429.700876][T16165] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1429.882000][T16165] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1429.981544][T16378] loop4: detected capacity change from 0 to 128
[ 1430.002111][ T8174] tipc: Left network mode
[ 1430.050884][T16378] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1430.085494][T16378] ext4 filesystem being mounted at /25/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1430.167406][   T28] audit: type=1800 audit(1791291356.881:32): pid=16382 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2583" name="no_out_endpoint" dev="configfs" ino=45177 res=0 errno=0
[ 1430.197803][T15744] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1430.962691][T16392] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000
[ 1430.991053][ T9841] Bluetooth: hci3: command tx timeout
[ 1432.633111][    C0] net_ratelimit: 19 callbacks suppressed
[ 1433.033677][ T9841] Bluetooth: hci3: command tx timeout
[ 1433.156513][T16368] chnl_net:caif_netlink_parms(): no params data found
[ 1433.883123][T16416] syz_tun: entered allmulticast mode
[ 1434.212094][T16165] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1434.342317][T16368] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1434.375038][T16368] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1434.382355][T16368] bridge_slave_0: entered allmulticast mode
[ 1434.422774][T16368] bridge_slave_0: entered promiscuous mode
[ 1435.094629][T16368] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1435.113184][ T9841] Bluetooth: hci3: command tx timeout
[ 1435.225883][T16368] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1435.346173][T16368] bridge_slave_1: entered allmulticast mode
[ 1435.384594][T16368] bridge_slave_1: entered promiscuous mode
[ 1435.477621][T16165] 8021q: adding VLAN 0 to HW filter on device team0
[ 1435.654852][ T8174] hsr_slave_0: left promiscuous mode
[ 1435.741471][ T8174] hsr_slave_1: left promiscuous mode
[ 1435.852576][ T8174] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1435.878817][ T8174] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1435.991031][ T8174] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1436.020485][ T8174] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1436.042820][ T8174] bridge_slave_1: left allmulticast mode
[ 1436.066342][ T8174] bridge_slave_1: left promiscuous mode
[ 1436.081940][ T8174] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1436.093036][ T8174] bridge_slave_0: left allmulticast mode
[ 1436.098708][ T8174] bridge_slave_0: left promiscuous mode
[ 1436.104529][ T8174] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1436.488084][ T8174] veth1_macvtap: left promiscuous mode
[ 1436.559694][ T8174] veth0_macvtap: left promiscuous mode
[ 1436.619104][ T8174] veth1_vlan: left promiscuous mode
[ 1436.675987][ T8174] veth0_vlan: left promiscuous mode
[ 1437.193080][ T9841] Bluetooth: hci3: command tx timeout
[ 1437.672924][    C1] net_ratelimit: 29 callbacks suppressed
[ 1438.381315][ T8174] team0 (unregistering): Port device team_slave_1 removed
[ 1438.478716][ T8174] team0 (unregistering): Port device team_slave_0 removed
[ 1438.588823][ T8174] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1438.696208][ T8174] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1439.490939][ T8174] bond0 (unregistering): Released all slaves
[ 1439.705573][T16368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1439.832217][T16368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1439.996409][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1440.003608][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1440.123471][T16368] team0: Port device team_slave_0 added
[ 1440.149108][T11451] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1440.156327][T11451] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1440.198375][T16368] team0: Port device team_slave_1 added
[ 1440.422219][T16368] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1440.443064][T16368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1440.513689][T16368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1440.603787][T16368] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1440.610780][T16368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1440.683124][T16368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1441.700853][ T8174] IPVS: stop unused estimator thread 0...
[ 1441.861884][T16368] hsr_slave_0: entered promiscuous mode
[ 1441.905146][T16368] hsr_slave_1: entered promiscuous mode
[ 1441.912103][T16368] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1441.927454][T16368] Cannot create hsr debugfs directory
[ 1442.073191][    T9] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[ 1442.274768][T16466] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1442.291594][    T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1442.311628][    T9] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1442.361004][    T9] usb 6-1: string descriptor 0 read error: -71
[ 1442.378103][    T9] usb 6-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00
[ 1442.398731][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 1442.421366][    T9] usb 6-1: can't set config #1, error -71
[ 1442.431054][    T9] usb 6-1: USB disconnect, device number 27
[ 1442.875105][    C1] net_ratelimit: 9 callbacks suppressed
[ 1444.702985][T14906] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[ 1444.897703][T14906] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1444.919671][T14906] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1444.935103][T16486] syz.5.2614: vmalloc error: size 65024, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz5,mems_allowed=0-1
[ 1444.958008][T16486] CPU: 0 PID: 16486 Comm: syz.5.2614 Not tainted syzkaller #0
[ 1444.965501][T16486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1444.965517][T16486] Call Trace:
[ 1444.965526][T16486]  <TASK>
[ 1444.965535][T16486]  dump_stack_lvl+0x18c/0x250
[ 1444.986532][T16486]  ? show_regs_print_info+0x20/0x20
[ 1444.991773][T16486]  ? load_image+0x420/0x420
[ 1444.996312][T16486]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[ 1445.002762][T16486]  ? cpuset_print_current_mems_allowed+0x2e7/0x360
[ 1445.009299][T16486]  warn_alloc+0x246/0x340
[ 1445.013661][T16486]  ? slab_free_freelist_hook+0x130/0x1a0
[ 1445.019326][T16486]  ? zone_watermark_ok_safe+0x230/0x230
[ 1445.024894][T16486]  ? __get_vm_area_node+0x17b/0x370
[ 1445.030136][T16486]  ? __get_vm_area_node+0x17b/0x370
[ 1445.035369][T16486]  ? __kasan_kmalloc+0x8f/0xa0
[ 1445.040169][T16486]  __vmalloc_node_range+0x394/0x1320
[ 1445.045497][T16486]  ? __se_sys_ioctl+0xfd/0x170
[ 1445.050290][T16486]  ? do_syscall_64+0x55/0xb0
[ 1445.054929][T16486]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1445.061071][T16486]  ? free_vm_area+0x50/0x50
[ 1445.065618][T16486]  ? vidtv_s302m_encoder_init+0x178/0x780
[ 1445.071361][T16486]  vzalloc+0x79/0x90
[ 1445.075275][T16486]  ? vidtv_s302m_encoder_init+0x178/0x780
[ 1445.081005][T16486]  vidtv_s302m_encoder_init+0x178/0x780
[ 1445.086570][T16486]  ? vidtv_pes_write_into+0x11e0/0x11e0
[ 1445.092142][T16486]  ? rcu_is_watching+0x15/0xb0
[ 1445.096922][T16486]  ? vidtv_psi_registration_desc_init+0x34/0x2a0
[ 1445.103258][T16486]  ? __kmalloc+0xe5/0x240
[ 1445.107604][T16486]  vidtv_channel_s302m_init+0x35b/0x830
[ 1445.113162][T16486]  ? vidtv_mux_init+0x3b1/0x1950
[ 1445.118112][T16486]  vidtv_channels_init+0x45/0xa0
[ 1445.123056][T16486]  vidtv_mux_init+0x4d4/0x1950
[ 1445.127824][T16486]  ? rcu_is_watching+0x15/0xb0
[ 1445.132598][T16486]  vidtv_start_feed+0x36c/0x590
[ 1445.137456][T16486]  ? vidtv_i2c_func+0x10/0x10
[ 1445.142134][T16486]  ? vidtv_stop_feed+0x260/0x260
[ 1445.147098][T16486]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1445.152316][T16486]  ? lockdep_hardirqs_on+0x98/0x150
[ 1445.157528][T16486]  dmx_ts_feed_start_filtering+0x120/0x220
[ 1445.163341][T16486]  ? dmx_ts_feed_stop_filtering+0x190/0x190
[ 1445.169239][T16486]  dvb_dmxdev_filter_start+0x422/0x10a0
[ 1445.174808][T16486]  dvb_demux_do_ioctl+0x491/0x530
[ 1445.179843][T16486]  dvb_usercopy+0x195/0x2b0
[ 1445.184389][T16486]  ? dvb_dmxdev_buffer_read+0x4a0/0x4a0
[ 1445.189950][T16486]  ? dvb_generic_ioctl+0xb0/0xb0
[ 1445.194929][T16486]  ? dvb_demux_poll+0x210/0x210
[ 1445.199794][T16486]  dvb_demux_ioctl+0x29/0x30
[ 1445.204398][T16486]  __se_sys_ioctl+0xfd/0x170
[ 1445.209000][T16486]  do_syscall_64+0x55/0xb0
[ 1445.213426][T16486]  ? clear_bhb_loop+0x40/0x90
[ 1445.218111][T16486]  ? clear_bhb_loop+0x40/0x90
[ 1445.222790][T16486]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1445.228691][T16486] RIP: 0033:0x7ffa35b9e199
[ 1445.233113][T16486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1445.252719][T16486] RSP: 002b:00007ffa36ae6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1445.261137][T16486] RAX: ffffffffffffffda RBX: 00007ffa35e25fa0 RCX: 00007ffa35b9e199
[ 1445.269128][T16486] RDX: 0000000000000000 RSI: 0000000000006f29 RDI: 0000000000000005
[ 1445.277099][T16486] RBP: 00007ffa35c358e0 R08: 0000000000000000 R09: 0000000000000000
[ 1445.285071][T16486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1445.293041][T16486] R13: 00007ffa35e26038 R14: 00007ffa35e25fa0 R15: 00007ffcc51a91e8
[ 1445.301025][T16486]  </TASK>
[ 1445.338370][T16486] Mem-Info:
[ 1445.341585][T16486] active_anon:7159 inactive_anon:0 isolated_anon:0
[ 1445.341585][T16486]  active_file:18222 inactive_file:41211 isolated_file:0
[ 1445.341585][T16486]  unevictable:768 dirty:54 writeback:0
[ 1445.341585][T16486]  slab_reclaimable:14417 slab_unreclaimable:97529
[ 1445.341585][T16486]  mapped:24733 shmem:1920 pagetables:771
[ 1445.341585][T16486]  sec_pagetables:0 bounce:0
[ 1445.341585][T16486]  kernel_misc_reclaimable:0
[ 1445.341585][T16486]  free:1329464 free_pcp:13196 free_cma:0
[ 1445.438689][T16486] Node 0 active_anon:28636kB inactive_anon:0kB active_file:72888kB inactive_file:164644kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98932kB dirty:212kB writeback:0kB shmem:6144kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11240kB pagetables:3084kB sec_pagetables:0kB all_unreclaimable? no
[ 1445.507622][T16486] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[ 1445.570016][T16486] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1445.604826][T16486] lowmem_reserve[]: 0 2521 2522 2522 2522
[ 1445.639438][T16486] Node 0 DMA32 free:1410276kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:28600kB inactive_anon:0kB active_file:72888kB inactive_file:163816kB unevictable:1536kB writepending:200kB present:3129332kB managed:2586780kB mlocked:0kB bounce:0kB free_pcp:33860kB local_pcp:19328kB free_cma:0kB
[ 1445.709263][T16486] lowmem_reserve[]: 0 0 0 0 0
[ 1445.718046][T16486] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:12kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1445.787844][T16486] lowmem_reserve[]: 0 0 0 0 0
[ 1445.792722][T16486] Node 1 Normal free:3890868kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:20068kB local_pcp:8452kB free_cma:0kB
[ 1445.831032][T16486] lowmem_reserve[]: 0 0 0 0 0
[ 1445.857984][T16486] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 1445.871294][T16486] Node 0 DMA32: 547*4kB (UME) 449*8kB (UME) 1006*16kB (UM) 954*32kB (ME) 595*64kB (ME) 316*128kB (UME) 163*256kB (UME) 117*512kB (UME) 43*1024kB (UM) 30*2048kB (UM) 261*4096kB (UM) = 1407092kB
[ 1445.904804][T16486] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB
[ 1445.920987][T16486] Node 1 Normal: 233*4kB (UME) 48*8kB (UME) 41*16kB (UME) 68*32kB (UME) 28*64kB (UME) 7*128kB (UME) 4*256kB (UME) 0*512kB 2*1024kB (UE) 1*2048kB (E) 947*4096kB (M) = 3890868kB
[ 1445.960083][T16486] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1445.970276][T16486] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1445.984346][T16486] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1445.997803][T16486] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1446.009799][T16486] 61253 total pagecache pages
[ 1446.016999][T16486] 0 pages in swap cache
[ 1446.021289][T16486] Free swap  = 124692kB
[ 1446.029153][T16486] Total swap = 124996kB
[ 1446.035845][T16486] 2097051 pages RAM
[ 1446.039786][T16486] 0 pages HighMem/MovableOnly
[ 1446.048323][T16486] 416970 pages reserved
[ 1446.052571][T16486] 0 pages cma reserved
[ 1446.106972][T14906] usb 6-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00
[ 1446.126689][T14906] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 1446.152254][T14906] usb 6-1: can't set config #1, error -71
[ 1446.167293][T14906] usb 6-1: USB disconnect, device number 28
[ 1447.098375][T16165] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1448.056246][T16493] syzkaller0: entered promiscuous mode
[ 1448.105960][T16493] syzkaller0: entered allmulticast mode
[ 1448.153307][ T8174] net_ratelimit: 14 callbacks suppressed
[ 1449.552250][T16510] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1449.833106][ T5763] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[ 1450.016591][ T5763] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1450.032576][ T5763] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1450.054838][ T5763] usb 6-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00
[ 1450.064217][ T5763] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 1450.084461][ T5763] usb 6-1: Product: syz
[ 1450.088686][ T5763] usb 6-1: Manufacturer: syz
[ 1450.106649][ T5763] iuu_phoenix 6-1:1.0: iuu_phoenix converter detected
[ 1450.135605][ T5763] usb 6-1: iuu_phoenix converter now attached to ttyUSB0
[ 1450.317909][ T5763] usb 6-1: USB disconnect, device number 29
[ 1450.344187][ T5763] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0
[ 1450.369171][ T5763] iuu_phoenix 6-1:1.0: device disconnected
[ 1452.782155][T16525] bridge_slave_0: left allmulticast mode
[ 1452.823420][T16525] bridge_slave_0: left promiscuous mode
[ 1452.829240][T16525] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1452.874859][T16525] bridge_slave_1: left allmulticast mode
[ 1452.880548][T16525] bridge_slave_1: left promiscuous mode
[ 1452.888713][T16525] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1452.908654][T16525] bond0: (slave bond_slave_1): Releasing backup interface
[ 1452.964995][T16525] team0: Port device team_slave_0 removed
[ 1452.980486][T16525] team0: Port device team_slave_1 removed
[ 1452.995349][T16525] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1453.006815][T16525] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1453.016811][T16525] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1453.026937][T16525] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1453.241429][T16165] veth0_vlan: entered promiscuous mode
[ 1453.359440][T16165] veth1_vlan: entered promiscuous mode
[ 1453.419381][T16368] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1453.456766][T16368] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1453.498069][T16368] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1453.522253][T16368] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1453.593340][    C0] net_ratelimit: 12 callbacks suppressed
[ 1453.615247][T16165] veth0_macvtap: entered promiscuous mode
[ 1453.645389][T16165] veth1_macvtap: entered promiscuous mode
[ 1453.689881][T16165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1453.724034][T16165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1453.749304][T16165] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1453.780499][T16165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1453.792441][T16165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1453.820305][T16165] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1453.889598][T16165] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1453.923152][T16165] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1453.931897][T16165] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1453.975999][T16165] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1454.273691][T16198] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1454.273730][T16198] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1454.451961][T16544] syzkaller0: entered promiscuous mode
[ 1454.470376][T16544] syzkaller0: entered allmulticast mode
[ 1458.085791][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1458.101768][T16368] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1458.117304][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1458.254961][T16368] 8021q: adding VLAN 0 to HW filter on device team0
[ 1458.290039][T11451] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1458.297206][T11451] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1458.381267][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1458.388457][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1458.872936][    C1] net_ratelimit: 54 callbacks suppressed
[ 1459.887589][T16368] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1460.157042][T16606] net/sunrpc/rpc_pipe.c: __rpc_create_common failed to allocate inode for dentry mount
[ 1460.193388][T16606] net/sunrpc/rpc_pipe.c: rpc_populate failed to populate directory /
[ 1461.791437][T16368] veth0_vlan: entered promiscuous mode
[ 1461.800385][T10950] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[ 1461.842503][T16368] veth1_vlan: entered promiscuous mode
[ 1461.901206][T16368] veth0_macvtap: entered promiscuous mode
[ 1461.921845][T16368] veth1_macvtap: entered promiscuous mode
[ 1461.980978][T16368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1462.000063][T16368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1462.010379][T10950] usb 6-1: Using ep0 maxpacket: 16
[ 1462.016593][T16368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1462.039488][T10950] usb 6-1: config 8 has an invalid interface number: 25 but max is 0
[ 1462.057777][T10950] usb 6-1: config 8 has no interface number 0
[ 1462.065536][T16368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1462.087465][T10950] usb 6-1: config 8 interface 25 has no altsetting 0
[ 1462.109109][T16368] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1462.118944][T10950] usb 6-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice=c9.1e
[ 1462.133028][T10950] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1462.141059][T10950] usb 6-1: Product: syz
[ 1462.148610][T16368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1462.161529][T10950] usb 6-1: Manufacturer: syz
[ 1462.166805][T16368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1462.177306][T10950] usb 6-1: SerialNumber: syz
[ 1462.183395][T16368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1462.207928][T16368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1462.247219][T16368] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1462.295235][T16642] net/sunrpc/rpc_pipe.c: __rpc_create_common failed to allocate inode for dentry mount
[ 1462.333270][T16642] net/sunrpc/rpc_pipe.c: rpc_populate failed to populate directory /
[ 1462.360151][T16368] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1462.403872][T16368] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1462.430782][T10950] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:8.25/input/input17
[ 1462.442994][T16368] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1462.451723][T16368] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1462.472772][ T5125] bcm5974 6-1:8.25: could not read from device
[ 1462.509477][T10950] usb 6-1: USB disconnect, device number 30
[ 1462.531558][ T5125] bcm5974 6-1:8.25: could not read from device
[ 1463.756837][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1463.813092][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1464.552962][    C1] net_ratelimit: 68 callbacks suppressed
[ 1464.582385][  T742] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1464.640721][  T742] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1466.362998][ T5763] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[ 1466.562960][ T5763] usb 1-1: Using ep0 maxpacket: 16
[ 1466.599198][ T5763] usb 1-1: config 8 has an invalid interface number: 25 but max is 0
[ 1466.622979][ T5763] usb 1-1: config 8 has no interface number 0
[ 1466.629156][ T5763] usb 1-1: config 8 interface 25 has no altsetting 0
[ 1466.678065][ T5763] usb 1-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice=c9.1e
[ 1466.709807][ T5763] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1466.732939][ T5763] usb 1-1: Product: syz
[ 1466.749980][ T5763] usb 1-1: Manufacturer: syz
[ 1466.760105][ T5763] usb 1-1: SerialNumber: syz
[ 1467.010248][ T5763] usbtest 1-1:8.25: Interface 25 is not authorized for usage
[ 1467.030213][ T5763] bcm5974 1-1:8.25: Interface 25 is not authorized for usage
[ 1467.060116][ T5763] usbhid 1-1:8.25: Interface 25 is not authorized for usage
[ 1467.088497][ T5763] usb 1-1: USB disconnect, device number 47
[ 1470.072956][    C1] net_ratelimit: 50 callbacks suppressed
[ 1470.264049][T16733] device-mapper: ioctl: name not supplied when creating device
[ 1470.554585][    T9] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[ 1470.763474][    T9] usb 8-1: Using ep0 maxpacket: 16
[ 1470.770992][    T9] usb 8-1: config 8 has an invalid interface number: 25 but max is 0
[ 1470.787767][    T9] usb 8-1: config 8 has no interface number 0
[ 1470.807650][    T9] usb 8-1: config 8 interface 25 has no altsetting 0
[ 1470.846974][    T9] usb 8-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice=c9.1e
[ 1470.869903][    T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1470.898570][    T9] usb 8-1: Product: syz
[ 1470.903966][T16747] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1470.906551][    T9] usb 8-1: Manufacturer: syz
[ 1470.922416][    T9] usb 8-1: SerialNumber: syz
[ 1471.156260][    T9] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:8.25/input/input18
[ 1471.233016][ T5125] bcm5974 8-1:8.25: could not read from device
[ 1471.241732][    T9] usb 8-1: USB disconnect, device number 2
[ 1471.253484][ T5125] bcm5974 8-1:8.25: could not read from device
[ 1473.058817][T16770] loop7: detected capacity change from 0 to 512
[ 1473.843140][ T5815] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[ 1474.067842][ T5815] usb 8-1: Using ep0 maxpacket: 16
[ 1474.206705][ T5815] usb 8-1: config 8 has an invalid interface number: 25 but max is 0
[ 1474.311637][ T5815] usb 8-1: config 8 has no interface number 0
[ 1474.428427][ T5815] usb 8-1: config 8 interface 25 has no altsetting 0
[ 1474.612678][ T5815] usb 8-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice=c9.1e
[ 1474.679677][ T5815] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1474.715601][ T5815] usb 8-1: Product: syz
[ 1474.719833][ T5815] usb 8-1: Manufacturer: syz
[ 1474.768526][ T5815] usb 8-1: SerialNumber: syz
[ 1474.855285][T16792] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1474.862614][T16792] really_probe: driver_sysfs_add(gadget.5) failed
[ 1474.917611][T16792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1474.953099][T16792] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1475.028583][ T5815] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:8.25/input/input19
[ 1475.071974][ T5125] bcm5974 8-1:8.25: could not read from device
[ 1475.135611][ T5125] bcm5974 8-1:8.25: could not read from device
[ 1475.168532][ T5125] bcm5974 8-1:8.25: could not read from device
[ 1475.183901][ T5815] usb 8-1: USB disconnect, device number 3
[ 1475.202927][    C0] net_ratelimit: 35 callbacks suppressed
[ 1476.555575][T16814] loop7: detected capacity change from 0 to 1024
[ 1476.711394][T16814] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[ 1476.838123][T16814] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1477.620338][T16368] EXT4-fs error (device loop7): ext4_readdir:263: inode #2: block 16: comm syz-executor: path /16/file1: bad entry in directory: rec_len is smaller than minimal - offset=876, inode=0, rec_len=0, size=1024 fake=0
[ 1477.672084][T16368] EXT4-fs error (device loop7): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /16/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0
[ 1477.738643][T16368] EXT4-fs error (device loop7): ext4_empty_dir:3179: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0
[ 1477.800953][T16368] EXT4-fs error (device loop7): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /16/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0
[ 1477.873368][T16368] EXT4-fs error (device loop7): ext4_empty_dir:3179: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0
[ 1477.901234][T16368] EXT4-fs error (device loop7): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /16/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0
[ 1477.973959][T16368] EXT4-fs error (device loop7): ext4_empty_dir:3179: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0
[ 1478.035282][T16368] EXT4-fs error (device loop7): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /16/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0
[ 1478.117903][T16368] EXT4-fs error (device loop7): ext4_empty_dir:3179: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0
[ 1478.176027][T16368] EXT4-fs error (device loop7): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /16/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0
[ 1478.360026][T16836] kobject: kobject_add_internal failed for raw-gadget.1 (error: -12 parent: drivers)
[ 1478.369722][ T5815] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[ 1478.408100][T16836] UDC core: USB Raw Gadget: driver registration failed: -12
[ 1478.429386][T16836] misc raw-gadget: fail, usb_gadget_register_driver returned -12
[ 1478.563196][ T5815] usb 1-1: Using ep0 maxpacket: 16
[ 1478.571274][ T5815] usb 1-1: config 8 has an invalid interface number: 25 but max is 0
[ 1478.585933][ T5815] usb 1-1: config 8 has no interface number 0
[ 1478.596098][ T5815] usb 1-1: config 8 interface 25 has no altsetting 0
[ 1478.608966][ T5815] usb 1-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice=c9.1e
[ 1478.620890][ T5815] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1478.641428][ T5815] usb 1-1: Product: syz
[ 1478.660801][ T5815] usb 1-1: Manufacturer: syz
[ 1478.671682][ T5815] usb 1-1: SerialNumber: syz
[ 1478.901800][ T5815] usbtest 1-1:8.25: Interface 25 is not authorized for usage
[ 1478.915256][ T5815] bcm5974 1-1:8.25: Interface 25 is not authorized for usage
[ 1478.933983][ T5815] usbhid 1-1:8.25: Interface 25 is not authorized for usage
[ 1478.954549][T16368] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[ 1478.981163][ T5815] usb 1-1: USB disconnect, device number 48
[ 1479.072623][  T742] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1479.886081][  T742] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1480.266464][  T742] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1480.402609][  T742] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1480.472930][    C0] net_ratelimit: 42 callbacks suppressed
[ 1481.462971][T14906] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[ 1481.478189][T16858] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1481.575351][T14360] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1481.588024][T14360] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1481.594292][T10950] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[ 1481.604998][T14360] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1481.617856][T14360] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1481.627853][T14360] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1481.641258][T14360] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1481.729845][T14906] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1481.753633][T14906] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1481.778230][T14906] usb 5-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00
[ 1481.806295][T14906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 1481.826076][T14906] usb 5-1: Product: syz
[ 1481.830264][T14906] usb 5-1: Manufacturer: syz
[ 1481.835586][T10950] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1481.848144][T10950] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1481.870398][T10950] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1481.914236][T14906] iuu_phoenix 5-1:1.0: iuu_phoenix converter detected
[ 1481.923747][T10950] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1481.945533][T10950] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1481.957979][T14906] usb 5-1: iuu_phoenix converter now attached to ttyUSB0
[ 1481.972421][T10950] usb 6-1: config 0 descriptor??
[ 1482.125327][T14906] usb 5-1: USB disconnect, device number 18
[ 1482.194149][T14906] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0
[ 1482.225962][T14906] iuu_phoenix 5-1:1.0: device disconnected
[ 1482.407337][T10950] usbhid 6-1:0.0: can't add hid device: -71
[ 1482.419024][T10950] usbhid: probe of 6-1:0.0 failed with error -71
[ 1482.444060][T10950] usb 6-1: USB disconnect, device number 31
[ 1483.673045][ T9841] Bluetooth: hci3: command tx timeout
[ 1483.781108][  T742] hsr_slave_0: left promiscuous mode
[ 1483.793096][  T742] hsr_slave_1: left promiscuous mode
[ 1483.800863][  T742] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1483.808656][  T742] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1483.823905][  T742] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1483.836974][  T742] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1483.852688][  T742] bridge_slave_1: left allmulticast mode
[ 1483.871779][  T742] bridge_slave_1: left promiscuous mode
[ 1483.896181][  T742] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1483.926407][  T742] bridge_slave_0: left allmulticast mode
[ 1483.932092][  T742] bridge_slave_0: left promiscuous mode
[ 1483.956720][  T742] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1483.983024][ T6256] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[ 1484.050772][  T742] veth1_macvtap: left promiscuous mode
[ 1484.059313][  T742] veth0_macvtap: left promiscuous mode
[ 1484.094899][  T742] veth1_vlan: left promiscuous mode
[ 1484.100287][  T742] veth0_vlan: left promiscuous mode
[ 1484.183894][ T6256] usb 6-1: Using ep0 maxpacket: 16
[ 1484.202816][ T6256] usb 6-1: config 8 has an invalid interface number: 25 but max is 0
[ 1484.221193][ T6256] usb 6-1: config 8 has no interface number 0
[ 1484.234818][ T6256] usb 6-1: config 8 interface 25 has no altsetting 0
[ 1484.262513][ T6256] usb 6-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice=c9.1e
[ 1484.282964][ T6256] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1484.301209][ T6256] usb 6-1: Product: syz
[ 1484.312342][ T6256] usb 6-1: Manufacturer: syz
[ 1484.322317][ T6256] usb 6-1: SerialNumber: syz
[ 1484.562116][ T6256] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:8.25/input/input20
[ 1484.585373][ T5125] bcm5974 6-1:8.25: could not read from device
[ 1484.623282][ T5125] bcm5974 6-1:8.25: could not read from device
[ 1484.630801][ T6256] usb 6-1: USB disconnect, device number 32
[ 1484.655259][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[ 1484.681666][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[ 1485.419351][T16890] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1485.752967][    C0] net_ratelimit: 39 callbacks suppressed
[ 1485.753693][ T9841] Bluetooth: hci3: command tx timeout
[ 1486.035473][  T742] team0 (unregistering): Port device team_slave_1 removed
[ 1486.167571][  T742] team0 (unregistering): Port device team_slave_0 removed
[ 1486.294983][  T742] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1486.334873][T14906] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[ 1486.397695][  T742] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1486.565493][T14906] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1486.592651][T14906] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1486.624774][T14906] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1486.644033][T14906] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1486.666142][T14906] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1486.693117][T14906] usb 6-1: config 0 descriptor??
[ 1487.114813][T14906] usbhid 6-1:0.0: can't add hid device: -71
[ 1487.132671][T14906] usbhid: probe of 6-1:0.0 failed with error -71
[ 1487.158712][T14906] usb 6-1: USB disconnect, device number 33
[ 1487.394275][  T742] bond0 (unregistering): Released all slaves
[ 1487.828089][T16862] chnl_net:caif_netlink_parms(): no params data found
[ 1487.833486][ T9841] Bluetooth: hci3: command tx timeout
[ 1488.964027][T16909] netlink: 27 bytes leftover after parsing attributes in process `syz.4.2762'.
[ 1489.082677][T16862] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1489.115771][T16862] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1489.131615][T16862] bridge_slave_0: entered allmulticast mode
[ 1489.154469][T16862] bridge_slave_0: entered promiscuous mode
[ 1489.172467][T16862] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1489.204627][T16862] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1489.211916][T16862] bridge_slave_1: entered allmulticast mode
[ 1489.221605][T16862] bridge_slave_1: entered promiscuous mode
[ 1489.343142][ T5815] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[ 1489.382266][T16862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1489.409186][T16862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1489.557190][T16862] team0: Port device team_slave_0 added
[ 1489.568240][ T5815] usb 6-1: Using ep0 maxpacket: 16
[ 1489.579178][ T5815] usb 6-1: config 8 has an invalid interface number: 25 but max is 0
[ 1489.594370][T16862] team0: Port device team_slave_1 added
[ 1489.603524][ T5815] usb 6-1: config 8 has no interface number 0
[ 1489.609649][ T5815] usb 6-1: config 8 interface 25 has no altsetting 0
[ 1489.635861][ T5815] usb 6-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice=c9.1e
[ 1489.652934][ T5815] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1489.671215][ T5815] usb 6-1: Product: syz
[ 1489.675592][ T5815] usb 6-1: Manufacturer: syz
[ 1489.680219][ T5815] usb 6-1: SerialNumber: syz
[ 1489.704221][T16862] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1489.712780][T16862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1489.747573][T16862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1489.764238][T16862] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1489.779177][T16862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1489.815428][T16862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1489.913260][ T9841] Bluetooth: hci3: command tx timeout
[ 1489.952155][ T5815] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:8.25/input/input21
[ 1490.817233][T16862] hsr_slave_0: entered promiscuous mode
[ 1490.834598][ T5125] bcm5974 6-1:8.25: could not read from device
[ 1490.880313][T16862] hsr_slave_1: entered promiscuous mode
[ 1490.889774][ T5125] bcm5974 6-1:8.25: could not read from device
[ 1490.900551][ T5815] usb 6-1: USB disconnect, device number 34
[ 1490.939934][T16862] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1490.994605][T16862] Cannot create hsr debugfs directory
[ 1491.192967][    C1] net_ratelimit: 28 callbacks suppressed
[ 1492.279220][T16933] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1493.203517][ T6256] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[ 1493.424484][ T6256] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1493.444670][ T6256] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1493.488021][ T6256] usb 6-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00
[ 1493.509201][ T6256] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 1493.540011][ T6256] usb 6-1: Product: syz
[ 1493.544434][ T6256] usb 6-1: Manufacturer: syz
[ 1493.558109][ T6256] iuu_phoenix 6-1:1.0: iuu_phoenix converter detected
[ 1493.594147][ T6256] usb 6-1: iuu_phoenix converter now attached to ttyUSB0
[ 1493.664601][T16619] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1493.791547][ T8671] usb 6-1: USB disconnect, device number 35
[ 1493.827554][ T8671] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0
[ 1493.881461][ T8671] iuu_phoenix 6-1:1.0: device disconnected
[ 1493.943518][T16619] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1494.115611][T16619] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1494.381592][T16862] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1495.248322][T16619] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1495.319437][T14360] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1495.333400][T14360] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1495.343897][T14360] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1495.360289][T14360] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1495.367922][T16862] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1495.377667][T14360] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 1495.399262][T14360] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1495.676638][T16954] md: array md0 already initialised!
[ 1495.683358][T16954] md0: ADD_NEW_DISK not supported
[ 1496.084986][T16862] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1496.392943][    C1] net_ratelimit: 27 callbacks suppressed
[ 1496.516650][T16862] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1497.458898][T14360] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1497.470046][T14360] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1497.490108][T14360] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1497.508716][T14360] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1497.517652][T14360] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 1497.526219][ T5086] Bluetooth: hci1: command tx timeout
[ 1497.533735][T16966] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1497.943293][T16948] chnl_net:caif_netlink_parms(): no params data found
[ 1498.680475][T16948] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1498.693427][T16948] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1498.700741][T16948] bridge_slave_0: entered allmulticast mode
[ 1498.727707][T16948] bridge_slave_0: entered promiscuous mode
[ 1498.813907][T16948] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1498.821049][T16948] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1498.843907][T16948] bridge_slave_1: entered allmulticast mode
[ 1498.851407][T16948] bridge_slave_1: entered promiscuous mode
[ 1499.029881][T16948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1499.131400][T16948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1499.302573][T16619] hsr_slave_0: left promiscuous mode
[ 1499.329046][T16619] hsr_slave_1: left promiscuous mode
[ 1499.350702][T16619] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1499.371436][T16619] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1499.388467][T16619] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1499.399341][T16619] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1499.412060][T16619] bridge_slave_1: left allmulticast mode
[ 1499.421413][T16619] bridge_slave_1: left promiscuous mode
[ 1499.433561][T16619] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1499.454485][T16619] bridge_slave_0: left allmulticast mode
[ 1499.460161][T16619] bridge_slave_0: left promiscuous mode
[ 1499.471400][T16619] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1499.545076][T16619] veth1_macvtap: left promiscuous mode
[ 1499.550834][T16619] veth0_macvtap: left promiscuous mode
[ 1499.557097][T16619] veth1_vlan: left promiscuous mode
[ 1499.562543][T16619] veth0_vlan: left promiscuous mode
[ 1499.569493][T16956] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1499.614401][ T9841] Bluetooth: hci2: command tx timeout
[ 1499.620732][ T9841] Bluetooth: hci1: command tx timeout
[ 1501.673030][ T9841] Bluetooth: hci2: command tx timeout
[ 1501.683132][ T9841] Bluetooth: hci1: command tx timeout
[ 1502.073299][ T9841] Bluetooth: hci0: command 0x0406 tx timeout
[ 1502.144829][T16619] team0 (unregistering): Port device team_slave_1 removed
[ 1502.153046][    C1] net_ratelimit: 26 callbacks suppressed
[ 1502.255193][T16619] team0 (unregistering): Port device team_slave_0 removed
[ 1502.355799][T16619] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1502.477350][T16619] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1503.314546][T16619] bond0 (unregistering): Released all slaves
[ 1503.504791][T16948] team0: Port device team_slave_0 added
[ 1503.664978][T16948] team0: Port device team_slave_1 added
[ 1503.765806][T16966] Bluetooth: hci1: command tx timeout
[ 1503.765818][ T9841] Bluetooth: hci2: command tx timeout
[ 1503.808443][T16964] chnl_net:caif_netlink_parms(): no params data found
[ 1503.903613][T16986] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[ 1503.972581][T16948] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1503.983138][T16948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1504.040143][T16948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1504.104796][T16948] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1504.111774][T16948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1504.182986][T16948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1504.785030][T16948] hsr_slave_0: entered promiscuous mode
[ 1504.818312][T16948] hsr_slave_1: entered promiscuous mode
[ 1505.763019][T16964] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1505.844818][ T9841] Bluetooth: hci2: command tx timeout
[ 1505.880344][T16964] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1505.976670][T16964] bridge_slave_0: entered allmulticast mode
[ 1506.024335][T16964] bridge_slave_0: entered promiscuous mode
[ 1506.076049][T16964] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1506.120773][T16964] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1506.143136][T16964] bridge_slave_1: entered allmulticast mode
[ 1506.164038][T16964] bridge_slave_1: entered promiscuous mode
[ 1506.262762][T17006] loop4: detected capacity change from 0 to 512
[ 1506.381684][T16964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1506.429332][T17006] fscrypt (loop4, inode 2): Error -61 getting encryption context
[ 1506.437307][T17006] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -61
[ 1506.458551][T17006] EXT4-fs error (device loop4): ext4_orphan_get:1408: inode #13: comm syz.4.2796: iget: bad i_size value: 12154757448730
[ 1506.488029][T17006] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.2796: couldn't read orphan inode 13 (err -117)
[ 1506.535503][T17006] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1506.556057][T16964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1507.160511][T16964] team0: Port device team_slave_0 added
[ 1507.246814][T16964] team0: Port device team_slave_1 added
[ 1507.352974][    C1] net_ratelimit: 12 callbacks suppressed
[ 1507.417237][T15744] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1507.417947][T16619] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1507.689117][T16619] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1507.848902][T16964] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1507.878243][T16964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1507.985457][T16964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1508.056017][T16964] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1508.080299][T16964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1508.146444][T16964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1508.242733][T16619] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1508.396813][T16862] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1508.464573][T16619] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1508.702196][T16862] 8021q: adding VLAN 0 to HW filter on device team0
[ 1508.789342][T16948] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1508.841764][T16964] hsr_slave_0: entered promiscuous mode
[ 1508.867964][T16964] hsr_slave_1: entered promiscuous mode
[ 1508.908404][T16964] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1508.916601][T16964] Cannot create hsr debugfs directory
[ 1509.071875][T16948] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1509.101576][T16948] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1509.614375][T16948] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1510.044080][ T8174] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1510.051234][ T8174] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1510.215167][  T742] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1510.222376][  T742] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1510.282217][T17024] loop4: detected capacity change from 0 to 512
[ 1510.367073][T17024] fscrypt (loop4, inode 2): Error -61 getting encryption context
[ 1510.402598][T17024] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -61
[ 1510.449588][T17024] EXT4-fs error (device loop4): ext4_orphan_get:1408: inode #13: comm syz.4.2802: iget: bad i_size value: 12154757448730
[ 1510.498845][T17024] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.2802: couldn't read orphan inode 13 (err -117)
[ 1510.546239][T17024] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1511.380635][T16862] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1511.438360][T15744] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1511.446833][T16862] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1512.318685][T17030] FAULT_INJECTION: forcing a failure.
[ 1512.318685][T17030] name fail_futex, interval 1, probability 0, space 0, times 0
[ 1512.332499][T17030] CPU: 1 PID: 17030 Comm: syz.4.2803 Not tainted syzkaller #0
[ 1512.339997][T17030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1512.350079][T17030] Call Trace:
[ 1512.353381][T17030]  <TASK>
[ 1512.356333][T17030]  dump_stack_lvl+0x18c/0x250
[ 1512.361050][T17030]  ? show_regs_print_info+0x20/0x20
[ 1512.366288][T17030]  ? load_image+0x420/0x420
[ 1512.370845][T17030]  should_fail_ex+0x394/0x4c0
[ 1512.375566][T17030]  futex_lock_pi_atomic+0x14c/0xd00
[ 1512.380797][T17030]  ? pi_state_update_owner+0x340/0x340
[ 1512.386289][T17030]  ? futex_setup_timer+0xc0/0xc0
[ 1512.391255][T17030]  futex_lock_pi+0x22b/0xa00
[ 1512.395876][T17030]  ? futex_wait_queue+0x138/0x1b0
[ 1512.400926][T17030]  ? fixup_pi_state_owner+0x5f0/0x5f0
[ 1512.406328][T17030]  ? futex_setup_timer+0xc0/0xc0
[ 1512.411316][T17030]  ? file_end_write+0x159/0x250
[ 1512.416199][T17030]  ? vfs_write+0x5de/0x9a0
[ 1512.420649][T17030]  do_futex+0x23d/0x3e0
[ 1512.424833][T17030]  ? __ia32_sys_get_robust_list+0x110/0x110
[ 1512.430762][T17030]  __se_sys_futex+0x3a9/0x440
[ 1512.435473][T17030]  ? __x64_sys_futex+0xf0/0xf0
[ 1512.440271][T17030]  ? __x64_sys_futex+0x21/0xf0
[ 1512.445040][T17030]  do_syscall_64+0x55/0xb0
[ 1512.449494][T17030]  ? clear_bhb_loop+0x40/0x90
[ 1512.454202][T17030]  ? clear_bhb_loop+0x40/0x90
[ 1512.458905][T17030]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1512.464831][T17030] RIP: 0033:0x7f487919e199
[ 1512.469272][T17030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1512.488909][T17030] RSP: 002b:00007f487a02a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1512.497355][T17030] RAX: ffffffffffffffda RBX: 00007f4879425fa0 RCX: 00007f487919e199
[ 1512.505354][T17030] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000200000000200
[ 1512.513352][T17030] RBP: 00007f48792358e0 R08: 0000000000000000 R09: 0000000034fffffd
[ 1512.521349][T17030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1512.529348][T17030] R13: 00007f4879426038 R14: 00007f4879425fa0 R15: 00007ffd9b7ff618
[ 1512.537361][T17030]  </TASK>
[ 1512.540931][    C1] net_ratelimit: 12 callbacks suppressed
[ 1513.155711][T16862] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1513.795723][T16948] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1513.931731][T16948] 8021q: adding VLAN 0 to HW filter on device team0
[ 1514.702828][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1514.710044][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1514.765923][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1514.773129][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1514.969521][T16619] hsr_slave_0: left promiscuous mode
[ 1514.990918][T16619] hsr_slave_1: left promiscuous mode
[ 1515.081945][T16619] veth1_macvtap: left promiscuous mode
[ 1515.092978][T16619] veth0_macvtap: left promiscuous mode
[ 1515.098645][T16619] veth1_vlan: left promiscuous mode
[ 1515.129325][T16619] veth0_vlan: left promiscuous mode
[ 1517.762942][    C1] net_ratelimit: 8 callbacks suppressed
[ 1518.490814][T16619] bond0 (unregistering): Released all slaves
[ 1518.682468][T17121] batadv_slave_1: entered promiscuous mode
[ 1518.696453][T17123] batadv_slave_1: left promiscuous mode
[ 1518.806477][T16964] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1519.007285][T16964] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1519.090989][T16964] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1519.481843][T16964] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1519.876342][T16862] veth0_vlan: entered promiscuous mode
[ 1519.966656][T16862] veth1_vlan: entered promiscuous mode
[ 1520.281235][T16862] veth0_macvtap: entered promiscuous mode
[ 1520.320327][T16619] IPVS: stop unused estimator thread 0...
[ 1520.395800][T16964] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1520.414402][T16862] veth1_macvtap: entered promiscuous mode
[ 1520.528029][T16964] 8021q: adding VLAN 0 to HW filter on device team0
[ 1520.595495][T16862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1520.631208][T16862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1520.657923][T16862] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1520.726730][T17099] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1520.733920][T17099] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1520.775392][T17099] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1520.782579][T17099] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1520.851735][T16862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1520.895487][T16862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1520.908431][T16862] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1520.955599][T16948] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1520.978875][T16862] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1521.003792][T16862] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1521.012530][T16862] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1521.043758][T16862] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1522.213713][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1522.243057][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1522.386349][T16619] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1522.423731][T16619] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1522.450950][T17212] random: crng reseeded on system resumption
[ 1522.749795][T16964] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1522.856349][T16948] veth0_vlan: entered promiscuous mode
[ 1522.942738][T16948] veth1_vlan: entered promiscuous mode
[ 1523.005951][T16964] veth0_vlan: entered promiscuous mode
[ 1523.033265][    C1] net_ratelimit: 38 callbacks suppressed
[ 1523.110840][T16948] veth0_macvtap: entered promiscuous mode
[ 1523.126065][T16964] veth1_vlan: entered promiscuous mode
[ 1523.200529][T16948] veth1_macvtap: entered promiscuous mode
[ 1523.314636][T17227] Bluetooth: MGMT ver 1.22
[ 1523.329367][T16948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1523.372926][T16948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1523.382787][T16948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1523.412939][T16948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1523.453158][T16948] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1523.471372][T16964] veth0_macvtap: entered promiscuous mode
[ 1523.637316][T16948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1523.687387][T16948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1523.739076][T17236] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1523.742088][T16948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1523.760558][T16948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1523.773933][T16948] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1523.806816][T16948] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1524.077500][T16948] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1524.260536][T16948] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1524.399057][T16948] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1524.448872][T16964] veth1_macvtap: entered promiscuous mode
[ 1524.624017][T16964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1524.666408][T16964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1524.700740][T16964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1524.729534][T16964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1524.752946][T16964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1524.773745][T16964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1524.798174][T16964] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1524.847156][T16964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1524.874375][T16964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1524.903185][T16964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1525.113058][T16964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1525.153971][T16964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1525.164562][T16964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1525.190457][T16964] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1525.687798][T16964] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1525.762911][T16964] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1525.799594][T16964] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1525.809149][T16964] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1526.275514][T17257] gtp0: entered allmulticast mode
[ 1526.687040][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1526.725935][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1526.894332][T17092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1526.952184][    T9] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[ 1526.975947][T17092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1527.070888][    T9] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[ 1527.097635][T17099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1527.124437][T17099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1527.303020][T17099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1527.335297][T17099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1527.377819][ T8671] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[ 1527.603858][T17263] ceph: No mds server is up or the cluster is laggy
[ 1528.109787][    C0] net_ratelimit: 104 callbacks suppressed
[ 1529.290675][T17313] 9pnet_fd: Insufficient options for proto=fd
[ 1530.204974][T15744] syz_tun (unregistering): left allmulticast mode
[ 1530.681996][T17335] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 4294967295 (only 8 groups)
[ 1530.964201][T17099] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1531.736672][T17099] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1532.202465][T17099] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1532.529295][T17099] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1533.592945][    C0] net_ratelimit: 64 callbacks suppressed
[ 1534.068558][T17382] overlayfs: upper fs does not support RENAME_WHITEOUT.
[ 1534.141959][T17382] overlayfs: failed to set xattr on upper
[ 1534.196769][T17382] overlayfs: ...falling back to redirect_dir=nofollow.
[ 1534.355957][T17382] overlayfs: ...falling back to index=off.
[ 1534.454700][T17382] overlayfs: ...falling back to uuid=null.
[ 1535.485762][T16966] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1535.520740][T16966] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1535.543296][T16966] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1535.558089][T16966] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1535.583138][T16966] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1535.590998][T17404] loop9: detected capacity change from 0 to 512
[ 1535.598181][T16966] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1535.654166][T14360] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1535.669828][T14360] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1535.679171][T14360] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1535.701271][T17404] fscrypt (loop9, inode 2): Error -61 getting encryption context
[ 1535.709204][T14360] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1535.726661][T14360] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1535.740747][T14360] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1535.744656][T17404] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -61
[ 1535.784135][T17404] EXT4-fs error (device loop9): ext4_orphan_get:1408: inode #13: comm syz.9.2858: iget: bad i_size value: 12154757448730
[ 1535.910304][T17404] EXT4-fs error (device loop9): ext4_orphan_get:1413: comm syz.9.2858: couldn't read orphan inode 13 (err -117)
[ 1535.966318][T17404] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1537.450908][T16948] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1537.693577][T16966] Bluetooth: hci0: command tx timeout
[ 1537.833162][T16966] Bluetooth: hci3: command tx timeout
[ 1538.419104][T17433] geneve2: entered promiscuous mode
[ 1538.619928][T17099] hsr_slave_0: left promiscuous mode
[ 1538.678625][T17099] hsr_slave_1: left promiscuous mode
[ 1538.725123][T17099] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1538.746222][T17447] loop9: detected capacity change from 0 to 512
[ 1538.747424][T17099] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1538.801981][T17447] fscrypt (loop9, inode 2): Error -61 getting encryption context
[ 1538.819793][T17099] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1538.847742][T17447] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -61
[ 1538.857085][T17099] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1538.889521][T17099] bridge_slave_1: left allmulticast mode
[ 1538.910420][T17447] EXT4-fs error (device loop9): ext4_orphan_get:1408: inode #13: comm syz.9.2868: iget: bad i_size value: 12154757448730
[ 1538.941032][T17099] bridge_slave_1: left promiscuous mode
[ 1538.958471][T17099] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1538.978878][T17447] EXT4-fs error (device loop9): ext4_orphan_get:1413: comm syz.9.2868: couldn't read orphan inode 13 (err -117)
[ 1539.009130][T17099] bridge_slave_0: left allmulticast mode
[ 1539.028203][T17099] bridge_slave_0: left promiscuous mode
[ 1539.033776][    C0] net_ratelimit: 43 callbacks suppressed
[ 1539.057408][T17447] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1539.092628][T17099] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1539.821376][T16966] Bluetooth: hci0: command tx timeout
[ 1539.928089][T16966] Bluetooth: hci3: command tx timeout
[ 1540.100463][T17099] veth1_macvtap: left promiscuous mode
[ 1540.141201][T17099] veth0_macvtap: left promiscuous mode
[ 1540.147422][T17099] veth1_vlan: left promiscuous mode
[ 1540.152769][T17099] veth0_vlan: left promiscuous mode
[ 1540.187974][T16948] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1541.278338][T17478] loop3: detected capacity change from 0 to 512
[ 1541.307685][T17478] fscrypt (loop3, inode 2): Error -61 getting encryption context
[ 1541.317590][T17478] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -61
[ 1541.330257][T17478] EXT4-fs error (device loop3): ext4_orphan_get:1408: inode #13: comm syz.3.2877: iget: bad i_size value: 12154757448730
[ 1541.346884][T17478] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.2877: couldn't read orphan inode 13 (err -117)
[ 1541.392801][T17478] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1541.833104][T16966] Bluetooth: hci0: command tx timeout
[ 1541.993313][T16966] Bluetooth: hci3: command tx timeout
[ 1542.412588][T16964] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1543.149629][T17493] loop3: detected capacity change from 0 to 512
[ 1543.207867][T17493] fscrypt (loop3, inode 2): Error -61 getting encryption context
[ 1543.226101][T17493] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -61
[ 1543.258752][T17493] EXT4-fs error (device loop3): ext4_orphan_get:1408: inode #13: comm syz.3.2884: iget: bad i_size value: 12154757448730
[ 1543.356008][T17493] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.2884: couldn't read orphan inode 13 (err -117)
[ 1543.409139][T17493] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1543.688246][T17099] team0 (unregistering): Port device team_slave_1 removed
[ 1543.913953][T16966] Bluetooth: hci0: command tx timeout
[ 1544.076830][T16966] Bluetooth: hci3: command tx timeout
[ 1544.261008][T16964] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1544.275318][T17099] team0 (unregistering): Port device team_slave_0 removed
[ 1544.312956][    C0] net_ratelimit: 37 callbacks suppressed
[ 1545.071408][T17099] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1545.801985][T17518] loop3: detected capacity change from 0 to 512
[ 1545.837795][T17518] fscrypt (loop3, inode 2): Error -61 getting encryption context
[ 1545.849422][T17518] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -61
[ 1545.869339][T17518] EXT4-fs error (device loop3): ext4_orphan_get:1408: inode #13: comm syz.3.2892: iget: bad i_size value: 12154757448730
[ 1545.931253][T17518] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.2892: couldn't read orphan inode 13 (err -117)
[ 1545.962612][T17518] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1546.087669][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[ 1546.095988][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[ 1546.947273][T16964] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1547.067854][T17099] bond0 (unregistering): Released all slaves
[ 1548.562677][T17544] loop3: detected capacity change from 0 to 512
[ 1548.658902][T17544] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[ 1548.723821][T17544] System zones: 1-12
[ 1548.761269][T17399] chnl_net:caif_netlink_parms(): no params data found
[ 1548.780085][T17544] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #12: comm syz.3.2898: missing EA_INODE flag
[ 1548.830764][T17553] loop9: detected capacity change from 0 to 512
[ 1548.917341][T17544] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.2898: error while reading EA inode 12 err=-117
[ 1548.918403][T17553] fscrypt (loop9, inode 2): Error -61 getting encryption context
[ 1548.942048][T17553] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -61
[ 1548.950554][T17553] EXT4-fs error (device loop9): ext4_orphan_get:1408: inode #13: comm syz.9.2899: iget: bad i_size value: 12154757448730
[ 1548.965093][T17553] EXT4-fs error (device loop9): ext4_orphan_get:1413: comm syz.9.2899: couldn't read orphan inode 13 (err -117)
[ 1548.992724][T17544] EXT4-fs (loop3): 1 orphan inode deleted
[ 1549.004375][T17544] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1549.018348][T17553] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1549.912961][    C0] net_ratelimit: 47 callbacks suppressed
[ 1552.225824][T16948] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1552.274836][T17405] chnl_net:caif_netlink_parms(): no params data found
[ 1552.560385][T17399] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1552.614091][T17399] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1552.621387][T17399] bridge_slave_0: entered allmulticast mode
[ 1552.689877][T17399] bridge_slave_0: entered promiscuous mode
[ 1552.928995][T17099] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1553.061062][T16964] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1553.089209][T17399] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1553.113083][T17399] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1553.142562][T17399] bridge_slave_1: entered allmulticast mode
[ 1553.150951][T17399] bridge_slave_1: entered promiscuous mode
[ 1553.273582][T17567] geneve2: entered promiscuous mode
[ 1554.317032][T17099] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1554.496017][T17399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1554.675459][T17099] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1554.687462][T17591] loop9: detected capacity change from 0 to 512
[ 1554.695306][T17591] EXT4-fs: Ignoring removed bh option
[ 1554.703327][T17591] EXT4-fs: quotafile must be on filesystem root
[ 1554.767316][T17399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1554.812544][T17591] loop9: detected capacity change from 0 to 512
[ 1554.875955][T17591] EXT4-fs error (device loop9): ext4_orphan_get:1408: inode #15: comm syz.9.2906: iget: bad i_size value: 38620345925642
[ 1554.915956][T17591] EXT4-fs error (device loop9): ext4_orphan_get:1413: comm syz.9.2906: couldn't read orphan inode 15 (err -117)
[ 1554.966346][T17591] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1555.002793][T17405] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1555.011316][T17405] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1555.019152][T17405] bridge_slave_0: entered allmulticast mode
[ 1555.036366][    C0] net_ratelimit: 20 callbacks suppressed
[ 1555.048504][T17405] bridge_slave_0: entered promiscuous mode
[ 1555.132770][T17099] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1555.261831][T17610] EXT4-fs error (device loop9): ext4_validate_block_bitmap:430: comm syz.9.2906: bg 0: block 5: invalid block bitmap
[ 1555.380245][T17399] team0: Port device team_slave_0 added
[ 1555.382323][T17610] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 404 with error 28
[ 1555.407989][T17399] team0: Port device team_slave_1 added
[ 1555.477660][T17610] EXT4-fs (loop9): This should not happen!! Data will be lost
[ 1555.477660][T17610] 
[ 1555.518765][T17610] EXT4-fs (loop9): Total free blocks count 0
[ 1555.547151][T17405] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1555.551628][T17610] EXT4-fs (loop9): Free/Dirty block details
[ 1555.562029][T17405] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1555.573513][T17610] EXT4-fs (loop9): free_blocks=0
[ 1555.578528][T17610] EXT4-fs (loop9): dirty_blocks=404
[ 1555.597437][T17405] bridge_slave_1: entered allmulticast mode
[ 1555.610602][T17405] bridge_slave_1: entered promiscuous mode
[ 1555.648322][T17610] EXT4-fs (loop9): Block reservation details
[ 1555.675525][T17610] EXT4-fs (loop9): i_reserved_data_blocks=404
[ 1555.758590][T17606] syzkaller0: entered promiscuous mode
[ 1555.793075][T17606] syzkaller0: entered allmulticast mode
[ 1555.881609][T17399] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1555.904500][T17399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1555.946995][T16948] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1555.960037][T17399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1560.236551][T17399] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1560.251027][T17399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1560.283187][T17399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1560.332494][T17405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1560.376801][T17405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1560.393063][    C1] net_ratelimit: 25 callbacks suppressed
[ 1562.871928][T17399] hsr_slave_0: entered promiscuous mode
[ 1562.878968][T17399] hsr_slave_1: entered promiscuous mode
[ 1562.885519][T17399] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1562.893344][T17399] Cannot create hsr debugfs directory
[ 1562.908192][T17405] team0: Port device team_slave_0 added
[ 1562.926513][T17405] team0: Port device team_slave_1 added
[ 1564.080948][T17405] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1564.131911][T17405] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1564.254917][T17405] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1564.295667][T17405] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1564.334809][T17405] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1564.339264][T17665] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2915'.
[ 1564.403004][T17405] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1565.592950][    C1] net_ratelimit: 27 callbacks suppressed
[ 1566.297272][T17405] hsr_slave_0: entered promiscuous mode
[ 1566.370193][T17405] hsr_slave_1: entered promiscuous mode
[ 1566.438836][T17405] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1566.473028][T17405] Cannot create hsr debugfs directory
[ 1568.462414][T17709] loop3: detected capacity change from 0 to 4096
[ 1568.511416][T17709] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512).
[ 1568.630586][T17709] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[ 1568.721231][T17709] ntfs3: loop3: Failed to load $Extend (-22).
[ 1568.727583][T17709] ntfs3: loop3: Failed to initialize $Extend.
[ 1571.032937][    C1] net_ratelimit: 30 callbacks suppressed
[ 1572.028959][T11765] logitech-hidpp-device 0005:046D:B012.0005: item fetching failed at offset 3/4
[ 1572.315754][T11765] logitech-hidpp-device 0005:046D:B012.0005: hidpp_probe:parse failed
[ 1572.342985][T11765] logitech-hidpp-device: probe of 0005:046D:B012.0005 failed with error -22
[ 1572.449540][T17735] loop9: detected capacity change from 0 to 256
[ 1572.475374][T17735] exfat: Deprecated parameter 'utf8'
[ 1572.480794][T17735] exfat: Deprecated parameter 'utf8'
[ 1572.527415][T17735] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[ 1572.768551][T17740] loop3: detected capacity change from 0 to 256
[ 1572.814982][T17740] FAT-fs (loop3): Unrecognized mount option "cp932" or missing value
[ 1574.569064][T17099] hsr_slave_0: left promiscuous mode
[ 1574.637588][T17099] hsr_slave_1: left promiscuous mode
[ 1574.710767][T17099] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1574.763242][T17099] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1574.824071][T17099] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1574.831514][T17099] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1574.980254][T17099] bridge_slave_1: left allmulticast mode
[ 1574.985990][T17099] bridge_slave_1: left promiscuous mode
[ 1574.986180][T17099] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1575.086670][T17099] bridge_slave_0: left allmulticast mode
[ 1575.165406][T17099] bridge_slave_0: left promiscuous mode
[ 1575.238199][T17099] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1575.897523][T17099] veth1_macvtap: left promiscuous mode
[ 1575.908747][T17099] veth0_macvtap: left promiscuous mode
[ 1575.923498][T17099] veth1_vlan: left promiscuous mode
[ 1575.928890][T17099] veth0_vlan: left promiscuous mode
[ 1576.152934][    C0] net_ratelimit: 31 callbacks suppressed
[ 1576.298474][T15749] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[ 1576.505004][T15749] usb 4-1: config index 0 descriptor too short (expected 39, got 27)
[ 1576.525587][T15749] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[ 1576.563487][T15749] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1576.587527][T15749] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1576.614766][T15749] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1576.633608][T15749] usb 4-1: Product: syz
[ 1576.637795][T15749] usb 4-1: Manufacturer: syz
[ 1576.637815][T15749] usb 4-1: SerialNumber: syz
[ 1576.867552][T15749] usb 4-1: config 0 descriptor??
[ 1576.904408][T15749] hub 4-1:0.0: bad descriptor, ignoring hub
[ 1576.910351][T15749] hub: probe of 4-1:0.0 failed with error -5
[ 1576.948087][T15749] usb 4-1: selecting invalid altsetting 0
[ 1577.645553][T17793] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2940'.
[ 1577.699332][T17769] usb 4-1: reset high-speed USB device number 3 using dummy_hcd
[ 1577.949369][T17769] usb 4-1: device firmware changed
[ 1577.991597][T15749] usb 4-1: USB disconnect, device number 3
[ 1578.423507][T15749] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[ 1578.497414][T17099] team0 (unregistering): Port device team_slave_1 removed
[ 1578.639965][T15749] usb 4-1: config index 0 descriptor too short (expected 39, got 27)
[ 1578.648664][T15749] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[ 1578.677315][T15749] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1578.688863][T17099] team0 (unregistering): Port device team_slave_0 removed
[ 1578.701961][T15749] usb 4-1: string descriptor 0 read error: -22
[ 1578.714207][T15749] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1578.732842][T15749] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1578.752159][T15749] usb 4-1: config 0 descriptor??
[ 1578.775280][T15749] hub 4-1:0.0: bad descriptor, ignoring hub
[ 1578.781229][T15749] hub: probe of 4-1:0.0 failed with error -5
[ 1578.811367][T15749] usb 4-1: selecting invalid altsetting 0
[ 1578.811480][T17810] iommufd_mock iommufd_mock1: Adding to iommu group 0
[ 1578.908371][T17099] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1579.108784][ T8671] usb 4-1: USB disconnect, device number 4
[ 1579.195571][T17099] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1580.932077][T17099] bond0 (unregistering): Released all slaves
[ 1581.354327][    C0] net_ratelimit: 23 callbacks suppressed
[ 1581.777883][T17839] iommufd_mock iommufd_mock1: Adding to iommu group 0
[ 1583.235720][T17820] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1583.279809][T17399] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1583.331472][T17399] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1583.452287][T17405] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1583.525146][T17405] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1583.738820][T17399] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1584.154175][T17399] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1584.251585][T17405] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1584.400026][T17405] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1584.717881][T17889] iommufd_mock iommufd_mock1: Adding to iommu group 0
[ 1584.902606][T17399] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1584.971189][T17405] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1585.001138][T17399] 8021q: adding VLAN 0 to HW filter on device team0
[ 1585.027393][T17892] loop9: detected capacity change from 0 to 512
[ 1585.057727][T17099] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1585.064901][T17099] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1585.095633][T17892] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[ 1585.110872][T17892] System zones: 1-12
[ 1585.161871][T17892] EXT4-fs error (device loop9): ext4_xattr_inode_iget:441: inode #12: comm syz.9.2957: missing EA_INODE flag
[ 1585.208033][T17099] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1585.215238][T17099] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1585.245307][T17892] EXT4-fs error (device loop9): ext4_xattr_inode_iget:446: comm syz.9.2957: error while reading EA inode 12 err=-117
[ 1585.295167][T17892] EXT4-fs (loop9): 1 orphan inode deleted
[ 1585.302215][T17892] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1585.320172][T17405] 8021q: adding VLAN 0 to HW filter on device team0
[ 1585.406108][T17092] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1585.413327][T17092] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1585.550669][  T742] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1585.557913][  T742] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1586.392941][    C0] net_ratelimit: 15 callbacks suppressed
[ 1587.763779][T16948] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1587.810143][T17399] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1588.655553][T17405] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1588.919405][T17399] veth0_vlan: entered promiscuous mode
[ 1589.055080][T17399] veth1_vlan: entered promiscuous mode
[ 1589.252471][T17399] veth0_macvtap: entered promiscuous mode
[ 1589.276481][T17405] veth0_vlan: entered promiscuous mode
[ 1589.298967][T17399] veth1_macvtap: entered promiscuous mode
[ 1589.331387][T17405] veth1_vlan: entered promiscuous mode
[ 1589.389591][T17399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1589.414503][T17399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1589.438937][T17399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1589.462508][T17399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1589.485242][T17399] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1589.532133][T17399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1589.551651][T17399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1589.583530][T17399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1589.618325][T17399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1589.655158][T17399] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1589.697476][T17399] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1589.717417][T17399] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1589.740064][T17399] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1589.750428][T17399] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1589.772793][T17405] veth0_macvtap: entered promiscuous mode
[ 1589.831819][T17405] veth1_macvtap: entered promiscuous mode
[ 1589.988670][T17405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1590.024838][T17405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1590.047668][T17405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1590.062359][T17405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1590.079401][T17405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1590.090616][T17405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1590.146788][T17405] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1590.242857][T17961] md: array md0 already initialised!
[ 1590.249273][T17961] md0: ADD_NEW_DISK not supported
[ 1590.956156][T17405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1590.977301][T17405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1591.003156][T17405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1591.043123][T17405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1591.073815][T17405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1591.091962][T17405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1591.120577][T17405] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1591.165040][T17099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1591.216775][T17099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1591.252794][T17405] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1591.284910][T17405] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1591.302915][T17405] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1591.331990][T17405] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1591.992926][    C1] net_ratelimit: 59 callbacks suppressed
[ 1592.122068][T17097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1592.309765][T17097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1592.790366][T17092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1592.842981][T17092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1592.962687][T17086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1593.003615][T17086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1593.231975][T12151] smpboot: CPU 1 is now offline
[ 1595.389513][T18005] md: array md0 already initialised!
[ 1595.395458][T18005] md0: ADD_NEW_DISK not supported
[ 1597.512922][    C0] net_ratelimit: 86 callbacks suppressed
[ 1601.119339][T18040] md: array md0 already initialised!
[ 1601.125962][T18040] md0: ADD_NEW_DISK not supported
[ 1602.435020][T18041] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2983'.
[ 1602.712915][    C0] net_ratelimit: 59 callbacks suppressed
[ 1603.012463][T18068] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2993'.
[ 1606.237323][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[ 1606.243746][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[ 1607.912907][    C0] net_ratelimit: 49 callbacks suppressed
[ 1607.974349][T18091] md: array md0 already initialised!
[ 1607.979834][T18091] md0: ADD_NEW_DISK not supported
[ 1608.170945][T18100] loop1: detected capacity change from 0 to 512
[ 1608.263421][T18100] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[ 1608.341385][T18100] EXT4-fs (loop1): 1 truncate cleaned up
[ 1608.368072][T18108] loop3: detected capacity change from 0 to 64
[ 1608.387591][T18100] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1608.640020][T17405] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1613.112983][    C0] net_ratelimit: 40 callbacks suppressed
[ 1613.124250][T18125] md: array md0 already initialised!
[ 1613.129725][T18125] md0: ADD_NEW_DISK not supported
[ 1613.140153][T18132] loop1: detected capacity change from 0 to 256
[ 1613.221912][T18132] exfat: Deprecated parameter 'utf8'
[ 1613.293086][T18132] exfat: Deprecated parameter 'utf8'
[ 1613.318292][T18132] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[ 1617.154444][T18147] loop3: detected capacity change from 0 to 128
[ 1617.273666][T18147] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[ 1617.417776][T18147] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1617.554513][T18147] ext2 filesystem being mounted at /81/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[ 1617.654703][T18162] ==================================================================
[ 1617.662782][T18162] BUG: KASAN: slab-out-of-bounds in string+0x204/0x290
[ 1617.669636][T18162] Read of size 1 at addr ffff88805d01c050 by task syz.1.3017/18162
[ 1617.677520][T18162] 
[ 1617.679828][T18162] CPU: 0 PID: 18162 Comm: syz.1.3017 Not tainted syzkaller #0
[ 1617.687276][T18162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1617.697331][T18162] Call Trace:
[ 1617.700603][T18162]  <TASK>
[ 1617.703525][T18162]  dump_stack_lvl+0x18c/0x250
[ 1617.708200][T18162]  ? __lock_acquire+0x7eb0/0x7eb0
[ 1617.713215][T18162]  ? show_regs_print_info+0x20/0x20
[ 1617.718402][T18162]  ? load_image+0x420/0x420
[ 1617.722891][T18162]  ? __virt_addr_valid+0x10c/0x380
[ 1617.728075][T18162]  ? __virt_addr_valid+0x10c/0x380
[ 1617.733171][T18162]  ? __virt_addr_valid+0x10c/0x380
[ 1617.738266][T18162]  print_report+0xa8/0x210
[ 1617.742671][T18162]  ? string+0x204/0x290
[ 1617.746806][T18162]  kasan_report+0x117/0x150
[ 1617.751292][T18162]  ? string+0x204/0x290
[ 1617.755452][T18162]  string+0x204/0x290
[ 1617.759418][T18162]  vsnprintf+0xf72/0x1ba0
[ 1617.763732][T18162]  pointer+0x9ed/0x1150
[ 1617.767871][T18162]  ? string+0x290/0x290
[ 1617.772011][T18162]  vsnprintf+0xdaa/0x1ba0
[ 1617.776329][T18162]  vprintk_store+0x3d9/0xd50
[ 1617.780904][T18162]  ? printk_parse_prefix+0x3d0/0x3d0
[ 1617.786195][T18162]  ? mark_lock+0x94/0x320
[ 1617.790511][T18162]  ? mark_lock+0x94/0x320
[ 1617.794823][T18162]  vprintk_emit+0x117/0x610
[ 1617.799311][T18162]  ? printk_sprint+0x460/0x460
[ 1617.804057][T18162]  ? __lock_acquire+0x135d/0x7eb0
[ 1617.809068][T18162]  _printk+0xde/0x130
[ 1617.813038][T18162]  ? load_image+0x420/0x420
[ 1617.817531][T18162]  __dynamic_pr_debug+0x1a3/0x260
[ 1617.822541][T18162]  ? mark_lock+0x94/0x320
[ 1617.826855][T18162]  ? param_get_dyndbg_classes+0x170/0x170
[ 1617.832566][T18162]  idletimer_tg_checkentry_v1+0xc97/0xe20
[ 1617.838273][T18162]  xt_check_target+0x4a1/0xbf0
[ 1617.843019][T18162]  ? __flush_work+0x120/0xac0
[ 1617.847676][T18162]  ? arch_stack_walk+0x160/0x190
[ 1617.852595][T18162]  ? xt_find_jump_offset+0xe0/0xe0
[ 1617.857687][T18162]  ? stack_trace_save+0xaa/0x100
[ 1617.862610][T18162]  ? stack_trace_snprint+0xf0/0xf0
[ 1617.867704][T18162]  ? __stack_depot_save+0x1f/0x660
[ 1617.872796][T18162]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[ 1617.878754][T18162]  ? nft_target_init+0x1ea/0xa00
[ 1617.883680][T18162]  nft_target_init+0x694/0xa00
[ 1617.888427][T18162]  ? nfnetlink_rcv+0x1133/0x2490
[ 1617.893344][T18162]  ? netlink_unicast+0x7b1/0x930
[ 1617.898263][T18162]  ? nft_target_release_ops+0x70/0x70
[ 1617.903633][T18162]  ? nf_tables_newrule+0x1515/0x2870
[ 1617.908899][T18162]  ? rcu_is_watching+0x15/0xb0
[ 1617.913645][T18162]  ? nf_tables_newrule+0x1515/0x2870
[ 1617.918907][T18162]  ? __kmalloc+0xe5/0x240
[ 1617.923221][T18162]  nf_tables_newrule+0x176e/0x2870
[ 1617.928317][T18162]  ? nf_tables_delchain+0x1050/0x1050
[ 1617.933668][T18162]  ? __lock_acquire+0x7eb0/0x7eb0
[ 1617.938675][T18162]  ? nf_tables_newtable+0xd58/0x17b0
[ 1617.943950][T18162]  ? __nla_parse+0x40/0x50
[ 1617.948353][T18162]  nfnetlink_rcv+0x1133/0x2490
[ 1617.953108][T18162]  ? nfnetlink_net_exit_batch+0xa0/0xa0
[ 1617.958664][T18162]  ? __lock_acquire+0x7eb0/0x7eb0
[ 1617.963675][T18162]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1617.968859][T18162]  netlink_unicast+0x7b1/0x930
[ 1617.973610][T18162]  netlink_sendmsg+0x8d0/0xbf0
[ 1617.978357][T18162]  ? netlink_getsockopt+0x590/0x590
[ 1617.983536][T18162]  ? apparmor_socket_sendmsg+0x8e/0x330
[ 1617.989063][T18162]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 1617.994330][T18162]  ? security_socket_sendmsg+0x80/0xa0
[ 1617.999769][T18162]  ? netlink_getsockopt+0x590/0x590
[ 1618.004950][T18162]  ____sys_sendmsg+0x61b/0x980
[ 1618.009716][T18162]  ? __asan_memset+0x22/0x40
[ 1618.014297][T18162]  ? __sys_sendmsg_sock+0x30/0x30
[ 1618.019308][T18162]  ? __import_iovec+0x5f2/0x850
[ 1618.024148][T18162]  ? import_iovec+0x73/0xa0
[ 1618.028634][T18162]  ___sys_sendmsg+0x2a6/0x360
[ 1618.033296][T18162]  ? __sys_sendmsg+0x2b0/0x2b0
[ 1618.038065][T18162]  __se_sys_sendmsg+0x1d0/0x2c0
[ 1618.042899][T18162]  ? __x64_sys_sendmsg+0x80/0x80
[ 1618.047821][T18162]  ? lockdep_hardirqs_on+0x98/0x150
[ 1618.053003][T18162]  do_syscall_64+0x55/0xb0
[ 1618.057407][T18162]  ? clear_bhb_loop+0x40/0x90
[ 1618.062076][T18162]  ? clear_bhb_loop+0x40/0x90
[ 1618.066733][T18162]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1618.072611][T18162] RIP: 0033:0x7fd8c279e199
[ 1618.077025][T18162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1618.096612][T18162] RSP: 002b:00007fd8c3734028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1618.105006][T18162] RAX: ffffffffffffffda RBX: 00007fd8c2a25fa0 RCX: 00007fd8c279e199
[ 1618.112962][T18162] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[ 1618.120918][T18162] RBP: 00007fd8c28358e0 R08: 0000000000000000 R09: 0000000000000000
[ 1618.128870][T18162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1618.136820][T18162] R13: 00007fd8c2a26038 R14: 00007fd8c2a25fa0 R15: 00007ffe3e649b98
[ 1618.144789][T18162]  </TASK>
[ 1618.147789][T18162] 
[ 1618.150094][T18162] Allocated by task 18162:
[ 1618.154485][T18162]  kasan_set_track+0x4e/0x70
[ 1618.159064][T18162]  __kasan_kmalloc+0x8f/0xa0
[ 1618.163645][T18162]  __kmalloc+0xb7/0x240
[ 1618.167784][T18162]  nf_tables_newrule+0x1515/0x2870
[ 1618.172875][T18162]  nfnetlink_rcv+0x1133/0x2490
[ 1618.177624][T18162]  netlink_unicast+0x7b1/0x930
[ 1618.182366][T18162]  netlink_sendmsg+0x8d0/0xbf0
[ 1618.187109][T18162]  ____sys_sendmsg+0x61b/0x980
[ 1618.191858][T18162]  ___sys_sendmsg+0x2a6/0x360
[ 1618.196516][T18162]  __se_sys_sendmsg+0x1d0/0x2c0
[ 1618.201348][T18162]  do_syscall_64+0x55/0xb0
[ 1618.205749][T18162]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1618.211626][T18162] 
[ 1618.213933][T18162] Last potentially related work creation:
[ 1618.219625][T18162]  kasan_save_stack+0x3e/0x60
[ 1618.224282][T18162]  __kasan_record_aux_stack+0xaf/0xc0
[ 1618.229641][T18162]  call_rcu+0x153/0x900
[ 1618.233791][T18162]  nf_unregister_net_hooks+0xcb/0x130
[ 1618.239146][T18162]  nf_ct_netns_put+0x2d2/0x520
[ 1618.243888][T18162]  nf_conncount_destroy+0x41/0x150
[ 1618.248984][T18162]  ovs_ct_exit_finish+0xa5/0x210
[ 1618.253904][T18162]  ovs_exit_net+0xed/0x7a0
[ 1618.258300][T18162]  cleanup_net+0x6f7/0xb00
[ 1618.262699][T18162]  process_scheduled_works+0xa60/0x1600
[ 1618.268244][T18162]  worker_thread+0xa5e/0xfe0
[ 1618.272839][T18162]  kthread+0x2fa/0x390
[ 1618.276901][T18162]  ret_from_fork+0x48/0x80
[ 1618.281309][T18162]  ret_from_fork_asm+0x11/0x20
[ 1618.286060][T18162] 
[ 1618.288411][T18162] The buggy address belongs to the object at ffff88805d01c000
[ 1618.288411][T18162]  which belongs to the cache kmalloc-cg-96 of size 96
[ 1618.302536][T18162] The buggy address is located 0 bytes to the right of
[ 1618.302536][T18162]  allocated 80-byte region [ffff88805d01c000, ffff88805d01c050)
[ 1618.316936][T18162] 
[ 1618.319245][T18162] The buggy address belongs to the physical page:
[ 1618.325652][T18162] page:ffffea0001740700 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5d01c
[ 1618.335804][T18162] memcg:ffff888024f5b601
[ 1618.340021][T18162] anon flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff)
[ 1618.347979][T18162] page_type: 0xffffffff()
[ 1618.352287][T18162] raw: 00fff00000000800 ffff888017c4db40 ffffea00018ef800 dead000000000005
[ 1618.360847][T18162] raw: 0000000000000000 0000000080200020 00000001ffffffff ffff888024f5b601
[ 1618.369416][T18162] page dumped because: kasan: bad access detected
[ 1618.375815][T18162] page_owner tracks the page as allocated
[ 1618.381504][T18162] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 5773, tgid 5773 (syz-executor), ts 115671445229, free_ts 115670994378
[ 1618.399984][T18162]  post_alloc_hook+0x1c1/0x200
[ 1618.404733][T18162]  get_page_from_freelist+0x2181/0x22a0
[ 1618.410263][T18162]  __alloc_pages+0x1f0/0x460
[ 1618.414833][T18162]  alloc_slab_page+0x5d/0x180
[ 1618.419486][T18162]  new_slab+0x87/0x2d0
[ 1618.423531][T18162]  ___slab_alloc+0xc5c/0x12f0
[ 1618.428191][T18162]  __kmem_cache_alloc_node+0x11f/0x250
[ 1618.433657][T18162]  __kmalloc_node+0xa6/0x240
[ 1618.438235][T18162]  kvmalloc_node+0x70/0x180
[ 1618.442720][T18162]  alloc_fdtable+0x169/0x2c0
[ 1618.447292][T18162]  dup_fd+0x747/0xa20
[ 1618.451255][T18162]  copy_files+0xaf/0x110
[ 1618.455479][T18162]  copy_process+0x157d/0x3da0
[ 1618.460134][T18162]  kernel_clone+0x24b/0x8a0
[ 1618.464614][T18162]  __x64_sys_clone+0x1b7/0x230
[ 1618.469360][T18162]  do_syscall_64+0x55/0xb0
[ 1618.473761][T18162] page last free stack trace:
[ 1618.478415][T18162]  free_unref_page_prepare+0x7d7/0x8f0
[ 1618.483853][T18162]  free_unref_page+0x32/0x2e0
[ 1618.488505][T18162]  vfree+0x1a7/0x340
[ 1618.492381][T18162]  __do_replace+0x878/0x9b0
[ 1618.496861][T18162]  do_ip6t_set_ctl+0xb41/0xe10
[ 1618.501613][T18162]  nf_setsockopt+0x263/0x280
[ 1618.506184][T18162]  do_sock_setsockopt+0x175/0x1a0
[ 1618.511194][T18162]  __x64_sys_setsockopt+0x182/0x200
[ 1618.516370][T18162]  do_syscall_64+0x55/0xb0
[ 1618.520785][T18162]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1618.526663][T18162] 
[ 1618.528970][T18162] Memory state around the buggy address:
[ 1618.534573][T18162]  ffff88805d01bf00: 00 fc fc 00 00 00 00 00 fc fc 00 00 00 00 00 fc
[ 1618.542609][T18162]  ffff88805d01bf80: fc 00 00 00 00 00 fc fc 00 00 00 00 00 fc fc fc
[ 1618.550647][T18162] >ffff88805d01c000: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc
[ 1618.558696][T18162]                                                  ^
[ 1618.565343][T18162]  ffff88805d01c080: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
[ 1618.573380][T18162]  ffff88805d01c100: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
[ 1618.581413][T18162] ==================================================================
[ 1618.589463][T18162] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1618.596643][T18162] CPU: 0 PID: 18162 Comm: syz.1.3017 Not tainted syzkaller #0
[ 1618.604080][T18162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1618.614118][T18162] Call Trace:
[ 1618.617382][T18162]  <TASK>
[ 1618.620312][T18162]  dump_stack_lvl+0x18c/0x250
[ 1618.624980][T18162]  ? show_regs_print_info+0x20/0x20
[ 1618.630169][T18162]  ? load_image+0x420/0x420
[ 1618.634653][T18162]  panic+0x2ca/0x720
[ 1618.638535][T18162]  ? bpf_jit_dump+0xd0/0xd0
[ 1618.643032][T18162]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[ 1618.648906][T18162]  ? _raw_spin_unlock+0x40/0x40
[ 1618.653738][T18162]  ? print_memory_metadata+0x314/0x400
[ 1618.659176][T18162]  ? string+0x204/0x290
[ 1618.663312][T18162]  check_panic_on_warn+0x84/0xa0
[ 1618.668237][T18162]  ? string+0x204/0x290
[ 1618.672372][T18162]  end_report+0x6f/0x130
[ 1618.676596][T18162]  kasan_report+0x128/0x150
[ 1618.681085][T18162]  ? string+0x204/0x290
[ 1618.685220][T18162]  string+0x204/0x290
[ 1618.689186][T18162]  vsnprintf+0xf72/0x1ba0
[ 1618.693502][T18162]  pointer+0x9ed/0x1150
[ 1618.697654][T18162]  ? string+0x290/0x290
[ 1618.701791][T18162]  vsnprintf+0xdaa/0x1ba0
[ 1618.706101][T18162]  vprintk_store+0x3d9/0xd50
[ 1618.710674][T18162]  ? printk_parse_prefix+0x3d0/0x3d0
[ 1618.715941][T18162]  ? mark_lock+0x94/0x320
[ 1618.720255][T18162]  ? mark_lock+0x94/0x320
[ 1618.724584][T18162]  vprintk_emit+0x117/0x610
[ 1618.729072][T18162]  ? printk_sprint+0x460/0x460
[ 1618.733814][T18162]  ? __lock_acquire+0x135d/0x7eb0
[ 1618.738820][T18162]  _printk+0xde/0x130
[ 1618.742785][T18162]  ? load_image+0x420/0x420
[ 1618.747294][T18162]  __dynamic_pr_debug+0x1a3/0x260
[ 1618.752305][T18162]  ? mark_lock+0x94/0x320
[ 1618.756613][T18162]  ? param_get_dyndbg_classes+0x170/0x170
[ 1618.762322][T18162]  idletimer_tg_checkentry_v1+0xc97/0xe20
[ 1618.768029][T18162]  xt_check_target+0x4a1/0xbf0
[ 1618.772775][T18162]  ? __flush_work+0x120/0xac0
[ 1618.777447][T18162]  ? arch_stack_walk+0x160/0x190
[ 1618.782370][T18162]  ? xt_find_jump_offset+0xe0/0xe0
[ 1618.787462][T18162]  ? stack_trace_save+0xaa/0x100
[ 1618.792388][T18162]  ? stack_trace_snprint+0xf0/0xf0
[ 1618.797563][T18162]  ? __stack_depot_save+0x1f/0x660
[ 1618.802653][T18162]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[ 1618.808611][T18162]  ? nft_target_init+0x1ea/0xa00
[ 1618.813533][T18162]  nft_target_init+0x694/0xa00
[ 1618.818278][T18162]  ? nfnetlink_rcv+0x1133/0x2490
[ 1618.823193][T18162]  ? netlink_unicast+0x7b1/0x930
[ 1618.828111][T18162]  ? nft_target_release_ops+0x70/0x70
[ 1618.833470][T18162]  ? nf_tables_newrule+0x1515/0x2870
[ 1618.838735][T18162]  ? rcu_is_watching+0x15/0xb0
[ 1618.843483][T18162]  ? nf_tables_newrule+0x1515/0x2870
[ 1618.848746][T18162]  ? __kmalloc+0xe5/0x240
[ 1618.853060][T18162]  nf_tables_newrule+0x176e/0x2870
[ 1618.858155][T18162]  ? nf_tables_delchain+0x1050/0x1050
[ 1618.863505][T18162]  ? __lock_acquire+0x7eb0/0x7eb0
[ 1618.868520][T18162]  ? nf_tables_newtable+0xd58/0x17b0
[ 1618.873783][T18162]  ? __nla_parse+0x40/0x50
[ 1618.878182][T18162]  nfnetlink_rcv+0x1133/0x2490
[ 1618.882938][T18162]  ? nfnetlink_net_exit_batch+0xa0/0xa0
[ 1618.888489][T18162]  ? __lock_acquire+0x7eb0/0x7eb0
[ 1618.893513][T18162]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1618.898694][T18162]  netlink_unicast+0x7b1/0x930
[ 1618.903451][T18162]  netlink_sendmsg+0x8d0/0xbf0
[ 1618.908198][T18162]  ? netlink_getsockopt+0x590/0x590
[ 1618.913377][T18162]  ? apparmor_socket_sendmsg+0x8e/0x330
[ 1618.918905][T18162]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 1618.924188][T18162]  ? security_socket_sendmsg+0x80/0xa0
[ 1618.929640][T18162]  ? netlink_getsockopt+0x590/0x590
[ 1618.934842][T18162]  ____sys_sendmsg+0x61b/0x980
[ 1618.939601][T18162]  ? __asan_memset+0x22/0x40
[ 1618.944186][T18162]  ? __sys_sendmsg_sock+0x30/0x30
[ 1618.949310][T18162]  ? __import_iovec+0x5f2/0x850
[ 1618.954158][T18162]  ? import_iovec+0x73/0xa0
[ 1618.958654][T18162]  ___sys_sendmsg+0x2a6/0x360
[ 1618.963325][T18162]  ? __sys_sendmsg+0x2b0/0x2b0
[ 1618.968100][T18162]  __se_sys_sendmsg+0x1d0/0x2c0
[ 1618.972947][T18162]  ? __x64_sys_sendmsg+0x80/0x80
[ 1618.977876][T18162]  ? lockdep_hardirqs_on+0x98/0x150
[ 1618.983064][T18162]  do_syscall_64+0x55/0xb0
[ 1618.987470][T18162]  ? clear_bhb_loop+0x40/0x90
[ 1618.992136][T18162]  ? clear_bhb_loop+0x40/0x90
[ 1618.996794][T18162]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1619.002674][T18162] RIP: 0033:0x7fd8c279e199
[ 1619.007071][T18162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1619.026656][T18162] RSP: 002b:00007fd8c3734028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1619.035067][T18162] RAX: ffffffffffffffda RBX: 00007fd8c2a25fa0 RCX: 00007fd8c279e199
[ 1619.043019][T18162] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[ 1619.050978][T18162] RBP: 00007fd8c28358e0 R08: 0000000000000000 R09: 0000000000000000
[ 1619.058927][T18162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1619.066875][T18162] R13: 00007fd8c2a26038 R14: 00007fd8c2a25fa0 R15: 00007ffe3e649b98
[ 1619.074829][T18162]  </TASK>
[ 1619.077891][T18162] Kernel Offset: disabled
[ 1619.082195][T18162] Rebooting in 86400 seconds..