last executing test programs:

49.567399462s ago: executing program 0 (id=1):
r0 = syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1, 0x62d0, &(0x7f000001fb40)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
fsync(r0)

47.831196104s ago: executing program 0 (id=7):
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x3, 0x9})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0x2, 0x8001, 0x8000})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000380)={0x6, 0x2006, 0x4, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000001c0)={r2})

47.279307111s ago: executing program 0 (id=9):
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./lower1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./lower2\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./upper\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./work\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./lower1/dir1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./lower1/dir1\x00', 0x1ff)
mount(0x0, &(0x7f00000002c0)='./mnt\x00', &(0x7f0000000340)='overlay\x00', 0x0, &(0x7f0000000380)='lowerdir=lower1:lower2,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00')
renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/dir1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./mnt/dir2\x00', 0x0)
umount2(&(0x7f0000000600)='./mnt\x00', 0x0)
mount(0x0, &(0x7f0000000640)='./mnt\x00', 0x0, 0x0, 0x0)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0xe10, 0x80000001f000000})

44.419825688s ago: executing program 0 (id=13):
socket$can_raw(0x1d, 0x3, 0x1)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r0 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112)
getdents(r0, 0x0, 0x0)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x40000004, 0x0)
socket$packet(0x11, 0x2, 0x300)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000700)={{{@in, @in=@initdev}}, {{@in=@loopback}, 0x0, @in=@initdev}}, 0x0)
fstat(r2, 0x0)
getresgid(&(0x7f0000000a00), 0x0, &(0x7f0000000a80))
r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000200)=@chain)
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f00000005c0), 0x10)
sendmsg$can_bcm(r5, &(0x7f0000000240)={&(0x7f0000000040), 0x10, &(0x7f0000000200)={&(0x7f0000000140)={0x5, 0x1a8, 0x6, {}, {0x0, 0x2710}, {0x3}, 0x1, @can={{0x4}, 0x2, 0x3, 0x0, 0x0, "47b46543b18856f3"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0x1)
r6 = socket(0x10, 0x3, 0x0)
write(r6, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24)

28.873799637s ago: executing program 32 (id=13):
socket$can_raw(0x1d, 0x3, 0x1)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r0 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112)
getdents(r0, 0x0, 0x0)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x40000004, 0x0)
socket$packet(0x11, 0x2, 0x300)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000700)={{{@in, @in=@initdev}}, {{@in=@loopback}, 0x0, @in=@initdev}}, 0x0)
fstat(r2, 0x0)
getresgid(&(0x7f0000000a00), 0x0, &(0x7f0000000a80))
r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000200)=@chain)
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f00000005c0), 0x10)
sendmsg$can_bcm(r5, &(0x7f0000000240)={&(0x7f0000000040), 0x10, &(0x7f0000000200)={&(0x7f0000000140)={0x5, 0x1a8, 0x6, {}, {0x0, 0x2710}, {0x3}, 0x1, @can={{0x4}, 0x2, 0x3, 0x0, 0x0, "47b46543b18856f3"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0x1)
r6 = socket(0x10, 0x3, 0x0)
write(r6, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24)

22.268993782s ago: executing program 6 (id=38):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
madvise(&(0x7f00001c1000/0x3000)=nil, 0x40000, 0x9)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0)

19.903227111s ago: executing program 6 (id=38):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
madvise(&(0x7f00001c1000/0x3000)=nil, 0x40000, 0x9)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0)

18.370062704s ago: executing program 3 (id=61):
mkdir(&(0x7f0000000300)='./bus\x00', 0x80)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@index_on}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000140)='./bus\x00')

17.98360292s ago: executing program 3 (id=65):
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)

17.750978884s ago: executing program 6 (id=38):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
madvise(&(0x7f00001c1000/0x3000)=nil, 0x40000, 0x9)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0)

15.116960374s ago: executing program 5 (id=70):
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000ec0))
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/igmp6\x00')
pread64(r0, 0x0, 0x0, 0x4009)
socket$inet6(0xa, 0x80002, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008001}, 0x80)
fchown(0xffffffffffffffff, 0x0, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6(0xa, 0x800000000000002, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4)
syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, 0x0, 0x4000054)

14.963149366s ago: executing program 2 (id=71):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket$unix(0x1, 0x1, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3)

13.229699045s ago: executing program 5 (id=72):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003)
r4 = syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffd, 0x2e44)
dup3(r4, 0xffffffffffffffff, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff)
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)

13.08019972s ago: executing program 4 (id=73):
setns(0xc9, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
mount(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x201000c, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f)
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', 0x1})
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r2, &(0x7f0000000100), 0x12)
listen(r2, 0x1)
write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000008050000010b007e0b0a43b820"], 0x97)

12.974387822s ago: executing program 1 (id=74):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/bcdUSB\x00', 0x1, 0x0)
write(0xffffffffffffffff, &(0x7f0000000b40)="a75f3e8763810fb65db27b093ce625d61034fd6f81992cbace7584a0463a17a53bd51219be4c462a52591512f0901461910a999bff9cac267b67b04c786921a9b7730ccc20ca181bdcfd994246f794823814ba667bdd9f2fd0f25ee2666f23ac4e5454b442a9d4", 0x67)
write(0xffffffffffffffff, &(0x7f0000000400), 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/hid.usb0/no_out_endpoint\x00', 0x1, 0x0)
ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000005b80))
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB, @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0])
read$FUSE(r2, 0x0, 0x0)
write$FUSE_INIT(r2, &(0x7f0000000380)={0x50, 0x0, 0x0, {0x7, 0x28, 0x7fffffff, 0x4069a064, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffec}}, 0x50)
rmdir(&(0x7f0000000100)='./config/usb_gadget/g1/functions/hid.usb0\x00')

12.97221969s ago: executing program 3 (id=75):
r0 = socket$rxrpc(0x21, 0x2, 0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r2 = socket$kcm(0xa, 0x922000000003, 0x11)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000780)}], 0x1}, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0)
bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24)
openat$ptmx(0xffffff9c, &(0x7f0000000000), 0x8100, 0x0)
socket$inet6(0x10, 0x3, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
prctl$PR_MCE_KILL(0x4e, 0x1, 0x0)
prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000)
r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmmsg$inet(r4, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014)

10.458141179s ago: executing program 5 (id=76):
sched_setscheduler(0x0, 0x1, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x20702, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{0x0}], 0x1)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44010)
openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r3 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0xfffffe98, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044804}, 0x40040)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r6 = syz_open_dev$video4linux(0x0, 0x0, 0x0)
ioctl$VIDIOC_QUERYMENU(r6, 0xc008561c, &(0x7f00000000c0)={0xf0f002, 0x2, @name="2a0bfa91762a67fc38beda01496988cd2bae0aa03dc5d7b06bef2d1e67d01e0c"})

10.408644272s ago: executing program 2 (id=77):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xff}, 0x0)
setrlimit(0xd, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0x100000001)
setsockopt$inet_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xbc}}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
close(r2)

10.191866976s ago: executing program 6 (id=38):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
madvise(&(0x7f00001c1000/0x3000)=nil, 0x40000, 0x9)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0)

10.185741072s ago: executing program 1 (id=78):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000180)={0x1, 0xffff8000, 0x80000000, 0xce, 0x4, "c9e366e10263891c6efb5a0440ffadee885fb6"})
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0)
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x50)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x0, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, 0x0, 0x0)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xb0ff}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
read(r1, &(0x7f0000000380)=""/184, 0xb8)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x80000a, 0x31, 0xffffffffffffffff, 0xd0fb8000)
ptrace$getregs(0xc, r4, 0x1, &(0x7f0000000440)=""/75)
ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f00000004c0)={{&(0x7f0000c02000/0x1000)=nil, 0x1000}, 0x1})
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x8413, &(0x7f0000000100)={[{@sb={'sb', 0x3d, 0x7}}, {@dioread_nolock}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@abort}]}, 0x1e, 0x528, &(0x7f0000000a80)="$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")

7.786622182s ago: executing program 1 (id=79):
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f8, &(0x7f0000000900)={'sit0\x00', @random="1e40002000"})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@ipv4_newrule={0x30, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1f}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth0_to_bond\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4001}, 0x44004)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r4 = syz_open_dev$video4linux(&(0x7f0000000280), 0x4d64, 0x80400)
ioctl$VIDIOC_QUERYCTRL(r4, 0xc0445624, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r5)
sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x54, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, '01234567890123456789'}}]}]}, 0x54}}, 0x0)

7.785678931s ago: executing program 3 (id=80):
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8e490a37f87c31bd}, 0xc, &(0x7f00000007c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRES32=0xee01, @ANYBLOB="04005a8008005d0000000000b83e860df2a349dbdec82a51a09c1e2d7424681d22508c78b8ce24b8aefd7a656c0db84ddd195623a2f2cfd35a2dfa95dc79ae312055dab3fea8277b975653a3d281dc5a2709be0bbfa0f7902a05269cdef1a31bf666be452d8c21bc51d16571cf425aa1b6023c3ac0e3c1f5438caf46b8cf500f60b753c39dd4601a8f78937ad66c347a24f7b1aad17829312df93aa62c80ea73c77250149e7bc3d0aafa8756a9adaf135e67e8e30001319b5b2ecea08f14fa042fdab03304009580b100"/212], 0x1f8}, 0x1, 0x0, 0x0, 0xc010}, 0x40001)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet6_sctp(0xa, 0x1, 0x84)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = openat(r3, 0x0, 0x0, 0x0)
read(r4, &(0x7f0000001080)=""/4096, 0x1000)
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r1, 0x0, 0xe0)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000380)={0x28, 0x7, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000})
ioctl$IOMMU_IOAS_COPY(r5, 0x3b83, &(0x7f00000004c0)={0x28, 0x7, 0x0, 0x0, 0x1c, 0x0, 0x2})
socketpair$unix(0x1, 0x0, 0x0, 0x0)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0)
r6 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt(r6, 0x65, 0x9ea, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000300))
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup(r7)

7.785492128s ago: executing program 4 (id=81):
r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config\x00', 0x1c0)
mount(0x0, &(0x7f0000000100)='./sys\x00', 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1c0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0)
close(r1)
write(0xffffffffffffffff, &(0x7f00000009c0)="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", 0x1fb)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/ncm.usb0\x00', 0x1c0)
symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/configs/c.1/../../functions/ncm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/ncm.usb0\x00')
r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r2, &(0x7f0000000480), 0x0)
close(r2)
write(0xffffffffffffffff, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/os_desc/qw_sign\x00', 0x1, 0x0)
write(r3, &(0x7f0000000580)='MSFT100\n\x00', 0x8)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/ncm.usb0/os_desc/interface.ncm/compatible_id\x00', 0x1, 0x0)
write(r4, &(0x7f00000006c0), 0x0)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r5, &(0x7f0000000740)='dummy_udc.0', 0xb)
close(r5)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000240)={0xf0f046, 0x100000})
lsetxattr$security_ima(&(0x7f0000000000)='./config/usb_gadget/g1/functions/ncm.usb0\x00', &(0x7f0000000040), &(0x7f0000000280)=ANY=[@ANYBLOB="0411e5438f32a5e9cffcdfddc429b5f74a"], 0x11, 0x3)

5.626409711s ago: executing program 1 (id=82):
socket$nl_netfilter(0x10, 0x3, 0xc)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
listen(r0, 0x3)
accept4(r0, 0x0, 0x0, 0x800)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16)
syz_emit_vhci(0x0, 0x11)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0xf0ffffffffffff}, 0x0)

5.466246752s ago: executing program 5 (id=83):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_io_uring_setup(0x156, &(0x7f0000000400)={0x0, 0x595f, 0x800, 0x2, 0x51}, &(0x7f0000000180)=<r2=>0x0, &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000080)=<r4=>0x0)
syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_FADVISE={0x18, 0x40, 0x0, @fd=r1, 0xffffffffffff8001, 0x0, 0x2, 0x4, 0x1})
io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050027bd700000000000060000000800", @ANYRES32=r7, @ANYBLOB="080005000200e000"], 0x24}, 0x1, 0x0, 0x0, 0x8814}, 0x0)
r8 = mq_open(&(0x7f0000000000)='@+\\\x00', 0x40, 0x0, 0x0)
mq_timedsend(r8, 0x0, 0x0, 0x7, 0x0)
sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000740)=@mgmt_frame=@assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x5}, @device_b, @broadcast, @initial, {0x5, 0x9}}, 0x1004, 0x2d, @random=0xffff, @val={0x1, 0x3, [{0x2, 0x1}, {0x4}, {0x12}]}, @void, [{0xdd, 0xe5, "020431af9d7723c8f3332ff1c3e02b87f91c08bbf08b0a59a1596ea6133a20101462c86133b46b3c49a1a47f87b721d86fd540c514856f33dafa91ee8d559307fef1e5c0eb19f7ab94cd050583c17b6210551a0ffbaf7f794aa501f29f614ff7aee04696b816da893cec70fe97f79e30edeab7d0a7e3365e36051955e3b3d3de1948e65d1384ae9ef3dbc0a84c1a7a6a3d20853c51e831eaac02d25b8294cd57773d829fdaa82dd44d4581389ed99f8d55e811ed0d739302cb81f823b4394d246b9d234bb5ec2a8a4c1c1bf80a762ffd5759635201baa5dcfad705596b10c0a42ac10eb703"}]}, 0x10a)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac=@broadcast, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)
nanosleep(&(0x7f0000000540)={0x0, 0x5f5e100}, &(0x7f0000000580))
sendmsg$NL80211_CMD_TDLS_MGMT(r5, 0x0, 0x0)
r9 = getpid()
r10 = syz_open_procfs(r9, &(0x7f0000000040)='net/dev\x00')
lseek(r10, 0x47ea, 0x667ffca8cf06c461)
sendmsg$nl_route_sched(r10, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@gettaction={0x3c, 0x32, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x4}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x80000000}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}]}, 0x3c}}, 0x40041)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
r11 = socket$inet6_udp(0xa, 0x2, 0x0)
r12 = socket$phonet_pipe(0x23, 0x5, 0x2)
bind$phonet(r12, &(0x7f0000000040)={0x23, 0x4, 0x3, 0xcc}, 0x10)
r13 = socket$phonet_pipe(0x23, 0x5, 0x2)
bind$phonet(r13, &(0x7f0000000040)={0x23, 0x14}, 0x10)
close_range(r11, 0xffffffffffffffff, 0x0)

5.245117094s ago: executing program 3 (id=84):
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0xfffffffe, 0x180000, 0x1}, 0x1c)
recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)

5.212030404s ago: executing program 4 (id=85):
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, 0x0, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, 0x0)
listen(r1, 0xfffffffc)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r6, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r4, 0x1, 0x70bd2c, 0x9000000, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000)

4.75877678s ago: executing program 1 (id=86):
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x1)
close(0x3)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000000)="0d0000000100", 0x6)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e1301"], 0x16)
write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0)

4.730816666s ago: executing program 2 (id=87):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r0, &(0x7f0000000540)={0x28, 0x0, 0x2710, @local}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000f80)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='mode=00000000000000000000202,umask=00000000000000000000002,dmode=00000000000000000100002,gid=forget,longad,shortad,novrs,iocharset=cp437,uid=forget,umask=00000000000000000000006,dmode=00000000000000000000010,gid=', @ANYRESDEC=0x0, @ANYRES16], 0x1, 0xc5f, &(0x7f0000002580)="$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")
ptrace(0x8, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r2 = getpid()
r3 = syz_pidfd_open(r2, 0x0)
fspick(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x1)
setns(r3, 0x24020000)
umount2(&(0x7f0000000040)='.\x00', 0x2)
close_range(r1, 0xffffffffffffffff, 0x0)

4.642253781s ago: executing program 6 (id=38):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
madvise(&(0x7f00001c1000/0x3000)=nil, 0x40000, 0x9)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0)

4.598588283s ago: executing program 4 (id=88):
r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config\x00', 0x1c0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1c0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0)
close(r1)
write(0xffffffffffffffff, &(0x7f00000009c0)="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", 0x1fb)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/ncm.usb0\x00', 0x1c0)
symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/configs/c.1/../../functions/ncm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/ncm.usb0\x00')
r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r2, &(0x7f0000000480), 0x0)
close(r2)
write(0xffffffffffffffff, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/os_desc/qw_sign\x00', 0x1, 0x0)
write(r3, &(0x7f0000000580)='MSFT100\n\x00', 0x8)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/ncm.usb0/os_desc/interface.ncm/compatible_id\x00', 0x1, 0x0)
write(r4, &(0x7f00000006c0)='WINNCM\n\x00', 0x8)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r5, &(0x7f0000000740)='dummy_udc.0', 0xb)
close(r5)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000240)={0xf0f046, 0x100000})
lsetxattr$security_ima(&(0x7f0000000000)='./config/usb_gadget/g1/functions/ncm.usb0\x00', &(0x7f0000000040), &(0x7f0000000280)=ANY=[@ANYBLOB="0411e5438f32a5e9cffcdfddc4"], 0x11, 0x3)

2.802123451s ago: executing program 1 (id=89):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
syz_usb_connect(0x6, 0x371, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x2)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000001a40)=ANY=[@ANYBLOB], 0x6)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x24008840)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8192, 0x2000, 0x800}, 0x20)
setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', <r4=>0x0})
bind$xdp(r2, &(0x7f00000003c0)={0x2c, 0x1, r4, 0x0, 0x0}, 0x10)
mq_open(0x0, 0x800, 0x40, 0x0)
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000240)={'vcan0\x00', <r6=>0x0})
bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, r6}, 0x18)
sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x200040e5)
sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)}, 0x0)

2.795055509s ago: executing program 2 (id=90):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000080)='asymmetric\x00', 0x0)
r4 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
r5 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r4)
mmap$IORING_OFF_SQ_RING(0x0, 0x5, 0x2, 0x2172, 0xffffffffffffffff, 0x0)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000000c0)={r5, 0xdc}, 0x0, &(0x7f0000000780)="cb44032c2a3a518de9000000c11a536275a146d65e2988ef1a4992f9a2675b2853d82c107d0fd00990b531004a27f0395fdb7d3b545b60ff5be75bcb1d85878c1cbdb120730ded7b4d10b0612763631dd3db62dd70ef53038a0e38940ef7f799a4257d4bf67e86244beee88b1e3e5bac3ad4dea44fc08db9f741b76996bf785368bc3b208158713c814e6e9e7a9cb923bdcf8df50500000000878700b8bf19da1095e6b47db929f5277a39b2c121f0adffea4fc3cdf6578298601882835783433d69235c8e4d17ab168bb112970ed88899356456c2167044a93025df", 0x0)
add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000780), 0x0, 0x0)

2.794877961s ago: executing program 3 (id=91):
prctl$PR_SET_THP_DISABLE(0x19, 0x10000000000001)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff)
unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x200)

2.794400093s ago: executing program 4 (id=92):
socket$inet6_icmp(0xa, 0x2, 0x3a)
r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x3fe, 0xc2000)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000140)={{0x0, 0x1, 0x80000001, 0x0, 'syz0\x00', 0x6}, 0x3, 0x30, 0x4, 0x0, 0x1, 0x8001, 'syz0\x00', &(0x7f0000000000)=['{\x00'], 0x2})

2.793886362s ago: executing program 5 (id=93):
r0 = socket$rxrpc(0x21, 0x2, 0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r2 = socket$kcm(0xa, 0x922000000003, 0x11)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000780)}], 0x1}, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0)
bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24)
openat$ptmx(0xffffff9c, &(0x7f0000000000), 0x8100, 0x0)
socket$inet6(0x10, 0x3, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
prctl$PR_MCE_KILL(0x4e, 0x1, 0x0)
prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000)
r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmmsg$inet(r4, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014)

1.547678773s ago: executing program 2 (id=94):
pipe(&(0x7f0000000000))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_emit_ethernet(0x0, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7)
setrlimit(0xf, &(0x7f0000002100)={0x8f1, 0x7d847eea})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r3 = semget$private(0x0, 0x6, 0x0)
semtimedop(r3, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0)
semop(r3, &(0x7f00000000c0)=[{0x4}, {0x2, 0x0, 0x1000}], 0x2)
semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f0000000180)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xf})
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_SETMODE(r4, 0x5602, &(0x7f0000000100)={0x0, 0x7, 0x4, 0x1000, 0x8})
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x3a4, 0x0, 0x2, 0x9, 0x0, 0x4}, 0x20)
socket$nl_route(0x10, 0x3, 0x0)

1.290241558s ago: executing program 4 (id=95):
sched_setscheduler(0x0, 0x1, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x20702, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{0x0}], 0x1)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44010)
openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r3 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0xfffffe98, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044804}, 0x40040)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r6 = syz_open_dev$video4linux(0x0, 0x0, 0x0)
ioctl$VIDIOC_QUERYMENU(r6, 0xc008561c, &(0x7f00000000c0)={0xf0f002, 0x2, @name="2a0bfa91762a67fc38beda01496988cd2bae0aa03dc5d7b06bef2d1e67d01e0c"})

1.13302376s ago: executing program 5 (id=96):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7)
io_submit(0x0, 0x0, 0x0)
mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0)

86.546045ms ago: executing program 2 (id=97):
r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config\x00', 0x1c0)
mount(0x0, &(0x7f0000000100)='./sys\x00', 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1c0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0)
close(r1)
write(0xffffffffffffffff, &(0x7f00000009c0)="080008001b07245b30d807000000007e7fde7b6ba78eed2713e5b42efa488d33afa5890bd927c14f402557965e7f089e132a769d8c14743ba7980bd3b5936a5dd7bc996d9d8ed491292bb6d915717246dcbc2d912556ebe45bdd05dd53f0d85f650947005f7d5f8c61d4bf755aa941ddb7f32643682cb4b2200369686cf561673c0908a4e3bb29aba455a8883b98ae97376cccd17b7b1ba16e9cf2829d335207e0528f5762a05cd50fc6833d1716ed26382209a28d4bebb7b9c4c0e25259bcb7ad661475ca2be8b5a6bb926a5aeca5022fa1293d3af01cf24cb381c496840fdca730c273727890cf395d1bca9b41d3fb021ad9e3dde4595494d075bec58ed9675606d2673f19a3ec9206ddba1970d35094850e9079c62913ff72dd7b07e7ae4961e8dced66ce1c2244fd48bd87413712f22e020cf6a8a96e9ca2f090e47a4310bcee801d4585da2472c23b97dd55533d18cf0e402c17cc77d49b876b26dd478ffe79dbc7eefb138f261c857b34686b5199b13953e3502fccadb2f6d24df0a26f6cc795c51e85eba040f67eec0eae28c1eb2b9a62ba3482f013d21fcdba7789f8e15010655a35920e91e58282994529ea1f6144464c22e0123c986a5467d9e21cdfea65a3634b781e52d003e8ea6afd18b04dadae69b0ff58587b384aa6a4d0285cd97c678e17a09a19793f7bcbf6c9a6e93be1fb3371aa19ee32e5", 0x1fb)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/ncm.usb0\x00', 0x1c0)
symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/configs/c.1/../../functions/ncm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/ncm.usb0\x00')
r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r2, &(0x7f0000000480), 0x0)
close(r2)
write(0xffffffffffffffff, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/os_desc/qw_sign\x00', 0x1, 0x0)
write(r3, &(0x7f0000000580)='MSFT100\n\x00', 0x8)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/ncm.usb0/os_desc/interface.ncm/compatible_id\x00', 0x1, 0x0)
write(r4, &(0x7f00000006c0)='WINN', 0x4)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r5, &(0x7f0000000740)='dummy_udc.0', 0xb)
close(r5)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000240)={0xf0f046, 0x100000})
lsetxattr$security_ima(&(0x7f0000000000)='./config/usb_gadget/g1/functions/ncm.usb0\x00', &(0x7f0000000040), &(0x7f0000000280)=ANY=[@ANYBLOB="0411e5438f32a5e9cffcdfddc429b5f74a"], 0x11, 0x3)

0s ago: executing program 6 (id=38):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
madvise(&(0x7f00001c1000/0x3000)=nil, 0x40000, 0x9)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.163' (ED25519) to the list of known hosts.
[   82.948303][ T5600] cgroup: Unknown subsys name 'net'
[   83.117873][ T5600] cgroup: Unknown subsys name 'cpuset'
[   83.122010][ T5600] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   84.808232][ T5600] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   86.115826][  T189] cfg80211: failed to load regulatory.db
[   87.520271][ T5613] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   87.522746][ T5613] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   87.523272][ T5613] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   87.524654][ T5613] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   87.525361][ T5613] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   87.526692][ T5613] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   87.527399][ T5613] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   87.530609][ T5613] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   87.560462][ T5618] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   87.563239][ T5613] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   87.565488][ T5613] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   87.566028][ T5613] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   87.584891][   T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   87.585296][   T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   87.598555][ T5624] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   87.599063][ T5624] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   87.601072][ T5624] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   87.605308][ T5627] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   87.605839][ T5629] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   87.607211][ T5624] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   87.607773][ T5624] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   87.611071][ T5624] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   87.612419][ T5621] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   87.613237][ T4930] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   87.613606][ T4930] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   87.623687][ T5624] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   87.651764][ T4930] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   87.651895][ T4930] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   87.655809][   T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   87.656219][   T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   89.633448][ T5618] Bluetooth: hci1: command tx timeout
[   89.633452][   T52] Bluetooth: hci3: command tx timeout
[   89.714750][ T5618] Bluetooth: hci2: command tx timeout
[   89.714917][ T5618] Bluetooth: hci4: command tx timeout
[   89.715066][ T5618] Bluetooth: hci0: command tx timeout
[   89.715327][   T52] Bluetooth: hci5: command tx timeout
[   90.250544][ T5622] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.251309][ T5622] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.251471][ T5622] bridge_slave_0: entered allmulticast mode
[   90.264585][ T5622] bridge_slave_0: entered promiscuous mode
[   90.323436][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.323563][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.324428][ T5617] bridge_slave_0: entered allmulticast mode
[   90.326385][ T5617] bridge_slave_0: entered promiscuous mode
[   90.328555][ T5622] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.328670][ T5622] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.328824][ T5622] bridge_slave_1: entered allmulticast mode
[   90.332193][ T5622] bridge_slave_1: entered promiscuous mode
[   90.424094][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.424208][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.424606][ T5617] bridge_slave_1: entered allmulticast mode
[   90.426636][ T5617] bridge_slave_1: entered promiscuous mode
[   90.449335][ T5622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.487723][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.487850][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.487969][ T5612] bridge_slave_0: entered allmulticast mode
[   90.489636][ T5612] bridge_slave_0: entered promiscuous mode
[   90.493693][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.493810][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.493960][ T5612] bridge_slave_1: entered allmulticast mode
[   90.496124][ T5612] bridge_slave_1: entered promiscuous mode
[   90.534747][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.543922][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.601718][ T5622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.727354][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.727473][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.727624][ T5614] bridge_slave_0: entered allmulticast mode
[   90.729633][ T5614] bridge_slave_0: entered promiscuous mode
[   90.736529][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.785922][ T5612] team0: Port device team_slave_0 added
[   90.786241][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.786429][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.786590][ T5614] bridge_slave_1: entered allmulticast mode
[   90.788447][ T5614] bridge_slave_1: entered promiscuous mode
[   90.792126][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.796259][ T5622] team0: Port device team_slave_0 added
[   90.799739][ T5622] team0: Port device team_slave_1 added
[   90.817465][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.817593][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.817743][ T5611] bridge_slave_0: entered allmulticast mode
[   90.819867][ T5611] bridge_slave_0: entered promiscuous mode
[   90.823974][ T5620] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.824092][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.824880][ T5620] bridge_slave_0: entered allmulticast mode
[   90.827107][ T5620] bridge_slave_0: entered promiscuous mode
[   90.831202][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.831368][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.831526][ T5620] bridge_slave_1: entered allmulticast mode
[   90.834556][ T5620] bridge_slave_1: entered promiscuous mode
[   90.840065][ T5612] team0: Port device team_slave_1 added
[   90.940682][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.940800][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.940953][ T5611] bridge_slave_1: entered allmulticast mode
[   90.950579][ T5611] bridge_slave_1: entered promiscuous mode
[   91.038095][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_0
[   91.038119][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   91.038159][ T5622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   91.060585][ T5620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   91.066822][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   91.067614][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0
[   91.067635][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   91.067678][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   91.075321][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   91.079587][ T5617] team0: Port device team_slave_0 added
[   91.084502][ T5620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   91.085537][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1
[   91.085558][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   91.085602][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   91.102280][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   91.103824][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_1
[   91.103845][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   91.103889][ T5622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   91.107633][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   91.127706][ T5617] team0: Port device team_slave_1 added
[   91.298558][ T5620] team0: Port device team_slave_0 added
[   91.300771][ T5611] team0: Port device team_slave_0 added
[   91.305346][ T5611] team0: Port device team_slave_1 added
[   91.308142][ T5614] team0: Port device team_slave_0 added
[   91.344375][ T5620] team0: Port device team_slave_1 added
[   91.360157][ T5614] team0: Port device team_slave_1 added
[   91.376610][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0
[   91.376630][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   91.376671][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   91.403310][ T5612] hsr_slave_0: entered promiscuous mode
[   91.404720][ T5612] hsr_slave_1: entered promiscuous mode
[   91.461754][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1
[   91.461777][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   91.461818][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   91.479389][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0
[   91.479411][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   91.479455][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   91.503682][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0
[   91.503705][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   91.503749][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   91.527963][ T5622] hsr_slave_0: entered promiscuous mode
[   91.529156][ T5622] hsr_slave_1: entered promiscuous mode
[   91.530021][ T5622] debugfs: 'hsr0' already exists in 'hsr'
[   91.530103][ T5622] Cannot create hsr debugfs directory
[   91.534823][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1
[   91.534844][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   91.534889][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   91.610938][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0
[   91.610962][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   91.611006][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   91.614786][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1
[   91.614807][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   91.614851][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   91.705536][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1
[   91.705560][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   91.705604][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   91.714802][ T5613] Bluetooth: hci1: command tx timeout
[   91.742224][ T5613] Bluetooth: hci3: command tx timeout
[   91.796490][ T5613] Bluetooth: hci5: command tx timeout
[   91.796530][ T5613] Bluetooth: hci4: command tx timeout
[   91.796540][ T5618] Bluetooth: hci2: command tx timeout
[   91.796639][   T52] Bluetooth: hci0: command tx timeout
[   91.880791][ T5617] hsr_slave_0: entered promiscuous mode
[   91.881713][ T5617] hsr_slave_1: entered promiscuous mode
[   91.882345][ T5617] debugfs: 'hsr0' already exists in 'hsr'
[   91.882373][ T5617] Cannot create hsr debugfs directory
[   91.968250][ T5614] hsr_slave_0: entered promiscuous mode
[   91.969203][ T5614] hsr_slave_1: entered promiscuous mode
[   91.969813][ T5614] debugfs: 'hsr0' already exists in 'hsr'
[   91.969841][ T5614] Cannot create hsr debugfs directory
[   92.017383][ T5611] hsr_slave_0: entered promiscuous mode
[   92.018242][ T5611] hsr_slave_1: entered promiscuous mode
[   92.018955][ T5611] debugfs: 'hsr0' already exists in 'hsr'
[   92.019002][ T5611] Cannot create hsr debugfs directory
[   92.111474][ T5620] hsr_slave_0: entered promiscuous mode
[   92.112362][ T5620] hsr_slave_1: entered promiscuous mode
[   92.117009][ T5620] debugfs: 'hsr0' already exists in 'hsr'
[   92.117037][ T5620] Cannot create hsr debugfs directory
[   92.770959][ T5612] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   92.786635][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   92.787853][ T5612] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   92.792039][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   92.793656][ T5612] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   92.806938][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   92.831914][ T5612] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   92.839935][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   92.922511][ T5622] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   92.933377][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   92.941928][ T5622] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   92.952433][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   92.971258][ T5622] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   92.976606][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   92.982268][ T5622] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   92.993481][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   93.053973][ T5614] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   93.068721][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   93.091306][ T5614] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   93.098821][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   93.111921][ T5614] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   93.119298][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   93.121919][ T5614] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   93.131062][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   93.221803][ T5617] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   93.227522][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   93.228584][ T5617] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   93.241132][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   93.259833][ T5617] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   93.271965][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   93.280452][ T5617] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   93.285596][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   93.398470][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.445822][ T5620] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   93.449632][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   93.450650][ T5620] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   93.456447][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   93.484663][ T5620] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   93.487794][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   93.489924][ T5620] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   93.499328][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   93.537940][ T5612] 8021q: adding VLAN 0 to HW filter on device team0
[   93.583202][   T91] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.583321][   T91] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.624981][   T91] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.625089][   T91] bridge0: port 2(bridge_slave_1) entered forwarding state
[   93.630692][ T5622] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.689922][ T5622] 8021q: adding VLAN 0 to HW filter on device team0
[   93.727890][ T5611] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   93.731390][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   93.752974][   T91] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.753097][   T91] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.760662][ T5611] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   93.770601][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   93.773221][ T5611] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   93.782520][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   93.799787][ T5613] Bluetooth: hci1: command tx timeout
[   93.799882][   T52] Bluetooth: hci3: command tx timeout
[   93.807996][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.812791][ T5611] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   93.829508][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   93.844783][   T91] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.844911][   T91] bridge0: port 2(bridge_slave_1) entered forwarding state
[   93.868591][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.877766][ T5613] Bluetooth: hci5: command tx timeout
[   93.877920][   T52] Bluetooth: hci2: command tx timeout
[   93.883381][ T5613] Bluetooth: hci4: command tx timeout
[   93.883468][   T52] Bluetooth: hci0: command tx timeout
[   93.951033][ T5617] 8021q: adding VLAN 0 to HW filter on device team0
[   93.990820][ T5614] 8021q: adding VLAN 0 to HW filter on device team0
[   94.012374][  T152] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.012469][  T152] bridge0: port 1(bridge_slave_0) entered forwarding state
[   94.058102][  T152] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.058230][  T152] bridge0: port 2(bridge_slave_1) entered forwarding state
[   94.078287][  T152] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.078408][  T152] bridge0: port 1(bridge_slave_0) entered forwarding state
[   94.123690][  T152] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.123814][  T152] bridge0: port 2(bridge_slave_1) entered forwarding state
[   94.279978][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0
[   94.440952][ T5620] 8021q: adding VLAN 0 to HW filter on device team0
[   94.538301][  T152] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.538525][  T152] bridge0: port 1(bridge_slave_0) entered forwarding state
[   94.579975][  T152] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.580098][  T152] bridge0: port 2(bridge_slave_1) entered forwarding state
[   94.600302][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0
[   94.739531][ T5611] 8021q: adding VLAN 0 to HW filter on device team0
[   94.849171][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.849298][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   94.892260][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.892381][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.166747][ T5611] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   95.612309][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0
[   95.781646][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0
[   95.816813][ T5612] veth0_vlan: entered promiscuous mode
[   95.873170][ T5613] Bluetooth: hci1: command tx timeout
[   95.873226][   T52] Bluetooth: hci3: command tx timeout
[   95.883076][ T5612] veth1_vlan: entered promiscuous mode
[   95.957644][ T5613] Bluetooth: hci4: command tx timeout
[   95.957687][ T5613] Bluetooth: hci2: command tx timeout
[   95.957720][ T5613] Bluetooth: hci5: command tx timeout
[   95.957796][   T52] Bluetooth: hci0: command tx timeout
[   96.080102][ T5612] veth0_macvtap: entered promiscuous mode
[   96.145586][ T5612] veth1_macvtap: entered promiscuous mode
[   96.166270][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0
[   96.238885][ T5622] veth0_vlan: entered promiscuous mode
[   96.309458][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0
[   96.320087][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0
[   96.328253][ T5622] veth1_vlan: entered promiscuous mode
[   96.351730][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1
[   96.433668][  T152] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   96.434870][  T152] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   96.434937][  T152] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   96.434998][  T152] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   96.706675][ T5622] veth0_macvtap: entered promiscuous mode
[   96.742625][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0
[   96.770951][ T5622] veth1_macvtap: entered promiscuous mode
[   96.785993][ T5617] veth0_vlan: entered promiscuous mode
[   96.849148][   T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.849180][   T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.888758][ T5617] veth1_vlan: entered promiscuous mode
[   96.909291][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0
[   96.965752][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1
[   97.003782][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.003812][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.053791][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0
[   97.076049][ T5614] veth0_vlan: entered promiscuous mode
[   97.103168][   T50] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.103243][   T50] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.103305][   T50] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.103366][   T50] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   97.156304][ T5620] veth0_vlan: entered promiscuous mode
[   97.184180][ T5617] veth0_macvtap: entered promiscuous mode
[   97.215456][ T5617] veth1_macvtap: entered promiscuous mode
[   97.229948][ T5614] veth1_vlan: entered promiscuous mode
[   97.233163][ T5620] veth1_vlan: entered promiscuous mode
[   97.247731][ T5612] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   97.384713][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0
[   97.446190][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1
[   97.490482][   T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.490513][   T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.533036][   T50] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   97.534064][   T50] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.534129][   T50] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.534190][   T50] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.663178][ T5620] veth0_macvtap: entered promiscuous mode
[   97.690471][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.690501][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.704930][ T5614] veth0_macvtap: entered promiscuous mode
[   97.714079][ T5620] veth1_macvtap: entered promiscuous mode
[   97.758054][ T5614] veth1_macvtap: entered promiscuous mode
[   97.904571][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0
[   97.910174][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1
[   97.978658][   T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.978690][   T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.994918][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0
[   98.046605][ T5845] loop0: detected capacity change from 0 to 32768
[   98.085350][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1
[   98.100999][ T5845] 
[   98.100999][ T5845]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   98.100999][ T5845] 
[   98.145554][ T5845] ERROR: (device loop0): diWrite: ixpxd invalid
[   98.145554][ T5845] 
[   98.148784][ T5845] ERROR: (device loop0): txAbort: 
[   98.148784][ T5845] 
[   98.195874][   T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.195904][   T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.329089][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   98.450239][   T91] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   98.455598][  T152] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   98.461804][  T152] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   98.467649][   T37] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   98.502181][ T1160] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   98.502402][ T1160] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   98.502576][ T1160] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   99.119158][ T5612] 
[   99.119158][ T5612]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   99.119158][ T5612] 
[   99.130981][ T5612] 
[   99.130981][ T5612]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   99.130981][ T5612] 
[   99.586987][ T5859] faux_driver vgem: [drm] Unknown color mode 9; guessing buffer size.
[   99.637414][   T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.637462][   T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.639064][ T5611] veth0_vlan: entered promiscuous mode
[  100.599042][ T5862] loop2: detected capacity change from 0 to 32768
[  100.611664][ T5611] veth1_vlan: entered promiscuous mode
[  100.678773][ T5862] JBD2: Ignoring recovery information on journal
[  100.681467][ T5862] jbd2_journal_bmap: journal block not found at offset 32 on loop2-75
[  100.681682][ T5862] JBD2: bad block at offset 32
[  100.715624][ T5862] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  100.718801][  T993] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.718828][  T993] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.862428][ T5872] loop3: detected capacity change from 0 to 128
[  100.921816][  T152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.921847][  T152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.268059][ T5875] OCFS2: ERROR (device loop2): ocfs2_claim_suballoc_bits: Chain allocator dinode 71 has 16777215 used bits but only 1024 total
[  101.268113][ T5875] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  101.268131][ T5875] OCFS2: File system is now read-only.
[  101.268146][ T5875] (syz.2.3,5875,1):ocfs2_claim_suballoc_bits:2198 ERROR: status = -30
[  101.268189][ T5875] (syz.2.3,5875,1):__ocfs2_claim_clusters:2579 ERROR: status = -30
[  101.268230][ T5875] (syz.2.3,5875,1):__ocfs2_claim_clusters:2587 ERROR: status = -30
[  101.268271][ T5875] (syz.2.3,5875,1):ocfs2_add_clusters_in_btree:4847 ERROR: status = -30
[  101.268313][ T5875] (syz.2.3,5875,1):ocfs2_write_cluster:1134 ERROR: status = -30
[  101.268354][ T5875] (syz.2.3,5875,1):ocfs2_write_cluster_by_desc:1228 ERROR: status = -30
[  101.268395][ T5875] (syz.2.3,5875,1):ocfs2_write_begin_nolock:1800 ERROR: status = -30
[  101.269122][ T5875] (syz.2.3,5875,1):ocfs2_write_begin:1888 ERROR: status = -30
[  102.250888][  T152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.250921][  T152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.371674][ T5611] veth0_macvtap: entered promiscuous mode
[  102.400827][ T5611] veth1_macvtap: entered promiscuous mode
[  102.595819][ T5617] ocfs2: Unmounting device (7,2) on (node local)
[  102.602264][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0
[  102.676753][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1
[  103.537749][   T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  103.537833][   T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  103.537895][   T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  103.595336][ T1160] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  103.942998][   T25] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  104.009682][   T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  104.009712][   T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  104.104085][    T9] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[  104.134743][   T25] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  104.197052][ T5897] =======================================================
[  104.197052][ T5897] WARNING: The mand mount option has been deprecated and
[  104.197052][ T5897]          and is ignored by this kernel. Remove the mand
[  104.197052][ T5897]          option from the mount to silence this warning.
[  104.197052][ T5897] =======================================================
[  104.200574][   T25] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  104.200658][   T25] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  104.200714][   T25] usb 3-1: config 1 interface 1 altsetting 1 has an invalid endpoint descriptor of length 6, skipping
[  104.200751][   T25] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  104.404701][   T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.404804][   T25] usb 3-1: Product: syz
[  104.404849][   T25] usb 3-1: Manufacturer: syz
[  104.404895][   T25] usb 3-1: SerialNumber: syz
[  104.722203][    T9] usb 4-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40
[  104.964250][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.964310][    T9] usb 4-1: Product: syz
[  104.964337][    T9] usb 4-1: Manufacturer: syz
[  104.964361][    T9] usb 4-1: SerialNumber: syz
[  105.089857][   T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  105.089889][   T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  105.897593][    T9] usb 4-1: USB disconnect, device number 2
[  106.014252][   T25] cdc_ncm 3-1:1.0: bind() failure
[  106.053866][   T25] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[  106.053928][   T25] cdc_ncm 3-1:1.1: bind() failure
[  106.296913][   T25] usb 3-1: USB disconnect, device number 2
[  107.062136][ T5912] Bluetooth: MGMT ver 1.23
[  107.285626][ T5743] udevd[5743]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  108.013212][ T5758] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  108.265528][ T5758] usb 3-1: New USB device found, idVendor=1164, idProduct=0622, bcdDevice= 0.00
[  108.269096][ T5758] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  108.269160][ T5758] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  108.269224][ T5758] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  108.289372][ T5758] pvrusb2: Hardware description: Gotview USB 2.0 DVD 2
[  108.309543][ T5921] loop1: detected capacity change from 0 to 512
[  108.398881][ T5921] EXT4-fs error (device loop1): ext4_iget_extra_inode:5209: inode #15: comm syz.1.21: corrupted in-inode xattr: invalid ea_ino
[  108.399075][ T5921] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  108.401505][ T5921] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.21: couldn't read orphan inode 15 (err -117)
[  108.401669][ T5921] loop1: lost filesystem error report for type 5 error -117
[  108.460751][ T5921] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  108.855322][ T5925] loop3: detected capacity change from 0 to 40427
[  108.868442][ T5925] F2FS-fs (loop3): invalid crc_offset: 4177530876
[  108.889582][ T5925] F2FS-fs (loop3): Wrong journal entry on segno 65538
[  108.889692][ T5925] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-117)
[  109.156833][    T9] usb 3-1: USB disconnect, device number 3
[  109.159629][ T2356] pvrusb2: control-write URB failure, status=-71
[  109.159650][ T2356] pvrusb2: Device being rendered inoperable
[  109.159811][ T2356] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  109.159828][ T2356] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  109.159841][ T2356] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  109.159893][ T2356] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  109.221508][ T2356] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  110.265851][ T2356] pvrusb2: Attached sub-driver cx25840
[  110.270695][ T2356] pvrusb2: Attempted to execute control transfer when device not ok
[  110.270726][ T2356] pvrusb2: Attempted to execute control transfer when device not ok
[  110.270750][ T2356] pvrusb2: Attempted to execute control transfer when device not ok
[  110.270773][ T2356] pvrusb2: Attempted to execute control transfer when device not ok
[  110.270791][ T2356] pvrusb2: Module ID 4 (tuner) for device Gotview USB 2.0 DVD 2 failed to load.  Possible missing sub-device kernel module or initialization failure within module.
[  110.541040][ T5620] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.688229][   T52] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201'
[  110.688271][   T52] CPU: 0 UID: 0 PID: 52 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) 
[  110.688317][   T52] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  110.688342][   T52] Workqueue: hci5 hci_rx_work
[  110.688410][   T52] Call Trace:
[  110.688422][   T52]  <TASK>
[  110.688436][   T52]  dump_stack_lvl+0x100/0x190
[  110.688492][   T52]  sysfs_warn_dup.cold+0x1c/0x28
[  110.688555][   T52]  sysfs_create_dir_ns+0x24b/0x2b0
[  110.688607][   T52]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  110.688651][   T52]  ? find_held_lock+0x2b/0x80
[  110.688709][   T52]  ? kobject_add_internal+0x25f/0x930
[  110.688769][   T52]  ? kobject_add_internal+0x25f/0x930
[  110.688832][   T52]  ? srso_alias_return_thunk+0x5/0xfbef5
[  110.688878][   T52]  ? do_raw_spin_unlock+0x145/0x1e0
[  110.688931][   T52]  kobject_add_internal+0x2c8/0x930
[  110.689006][   T52]  kobject_add+0x16a/0x1e0
[  110.689065][   T52]  ? __pfx_kobject_add+0x10/0x10
[  110.689122][   T52]  ? class_to_subsys+0x10f/0x150
[  110.689168][   T52]  ? srso_alias_return_thunk+0x5/0xfbef5
[  110.689215][   T52]  ? srso_alias_return_thunk+0x5/0xfbef5
[  110.689262][   T52]  ? kobject_put+0xb9/0x640
[  110.689314][   T52]  ? _raw_spin_unlock+0x28/0x50
[  110.689366][   T52]  device_add+0x294/0x1970
[  110.689406][   T52]  ? __pfx_dev_set_name+0x10/0x10
[  110.689454][   T52]  ? __pfx_device_add+0x10/0x10
[  110.689493][   T52]  ? srso_alias_return_thunk+0x5/0xfbef5
[  110.689540][   T52]  ? mgmt_send_event_skb+0x2fb/0x460
[  110.689592][   T52]  hci_conn_add_sysfs+0x1a3/0x260
[  110.689640][   T52]  le_conn_complete_evt+0x122f/0x2130
[  110.689715][   T52]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  110.689776][   T52]  ? hci_event_packet+0x186/0xcd0
[  110.689835][   T52]  ? srso_alias_return_thunk+0x5/0xfbef5
[  110.689894][   T52]  hci_le_conn_complete_evt+0x23c/0x3a0
[  110.689959][   T52]  ? skb_pull_data+0x15f/0x1e0
[  110.690018][   T52]  hci_le_meta_evt+0x34a/0x5f0
[  110.690058][   T52]  ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[  110.690129][   T52]  hci_event_packet+0x51c/0xcd0
[  110.690192][   T52]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  110.690233][   T52]  ? __pfx_hci_event_packet+0x10/0x10
[  110.690303][   T52]  ? srso_alias_return_thunk+0x5/0xfbef5
[  110.690349][   T52]  ? lockdep_hardirqs_on+0x7d/0x110
[  110.690395][   T52]  ? srso_alias_return_thunk+0x5/0xfbef5
[  110.690451][   T52]  hci_rx_work+0x451/0xfc0
[  110.690518][   T52]  process_one_work+0xac7/0x1b10
[  110.690595][   T52]  ? __pfx_process_one_work+0x10/0x10
[  110.690655][   T52]  ? lock_acquire+0x1d1/0x380
[  110.690708][   T52]  ? srso_alias_return_thunk+0x5/0xfbef5
[  110.690761][   T52]  worker_thread+0x5ef/0xe50
[  110.690837][   T52]  ? kthread+0x13a/0x450
[  110.690887][   T52]  ? __pfx_worker_thread+0x10/0x10
[  110.690942][   T52]  kthread+0x373/0x450
[  110.690997][   T52]  ? __pfx_kthread+0x10/0x10
[  110.691052][   T52]  ret_from_fork+0x730/0xd60
[  110.691094][   T52]  ? __pfx_ret_from_fork+0x10/0x10
[  110.691137][   T52]  ? srso_alias_return_thunk+0x5/0xfbef5
[  110.691183][   T52]  ? __switch_to+0x800/0x10f0
[  110.691234][   T52]  ? __switch_to_asm+0x39/0x70
[  110.691271][   T52]  ? __pfx_kthread+0x10/0x10
[  110.691327][   T52]  ret_from_fork_asm+0x1a/0x30
[  110.691388][   T52]  </TASK>
[  110.691469][   T52] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  110.691519][   T52] Bluetooth: hci5: failed to register connection device
[  110.709325][ T2356] TUNER: Unable to find symbol tda829x_probe()
[  110.722400][ T2356] DVB: Unable to find symbol tda9887_attach()
[  110.722417][ T2356] tuner: 1-0043: Tuner 4 found with type(s) Radio TV.
[  110.722877][ T2356] pvrusb2: Attached sub-driver tuner
[  110.722894][ T2356] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules.
[  110.722913][ T2356] pvrusb2: You need to resolve the failing condition before this driver can function.  There should be some earlier messages giving more information about the problem.
[  111.188047][ T5953] loop1: detected capacity change from 0 to 512
[  111.189244][ T5953] EXT4-fs: Ignoring removed nomblk_io_submit option
[  111.214721][ T5956] syz.4.29 uses obsolete (PF_INET,SOCK_PACKET)
[  111.232642][ T5953] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  112.206489][ T5953] EXT4-fs (loop1): 1 truncate cleaned up
[  112.268992][ T5953] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  112.558615][ T5964] Zero length message leads to an empty skb
[  115.599978][ T5620] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.829940][ T5973] loop1: detected capacity change from 0 to 128
[  117.697691][ T4930] Bluetooth: hci5: command 0x0406 tx timeout
[  117.702515][ T5973] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  117.976722][ T5973] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  118.382970][   T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  118.547608][   T10] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  118.742181][   T10] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  118.742616][   T10] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  118.774518][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  119.098882][ T5983] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  119.128248][ T5973] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  119.178915][   T10] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  119.312410][ T4930] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  119.317470][ T4930] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  119.318184][ T4930] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  119.320312][ T4930] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  119.322582][ T4930] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  119.493859][   T10] usb 6-1: USB disconnect, device number 2
[  119.580195][ T5911] udevd[5911]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  119.692408][ T5996] netlink: 8 bytes leftover after parsing attributes in process `syz.2.41'.
[  122.765390][   T91] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.886266][   T91] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.989631][   T91] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.159056][   T91] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.590509][   T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  123.601423][   T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  123.610352][   T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  123.612017][   T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  123.612816][   T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  124.106117][ T4930] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201'
[  124.106154][ T4930] CPU: 0 UID: 0 PID: 4930 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) 
[  124.106201][ T4930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  124.106228][ T4930] Workqueue: hci2 hci_rx_work
[  124.106294][ T4930] Call Trace:
[  124.106307][ T4930]  <TASK>
[  124.106322][ T4930]  dump_stack_lvl+0x100/0x190
[  124.106381][ T4930]  sysfs_warn_dup.cold+0x1c/0x28
[  124.106444][ T4930]  sysfs_create_dir_ns+0x24b/0x2b0
[  124.106500][ T4930]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  124.106549][ T4930]  ? find_held_lock+0x2b/0x80
[  124.106606][ T4930]  ? kobject_add_internal+0x25f/0x930
[  124.106670][ T4930]  ? kobject_add_internal+0x25f/0x930
[  124.106736][ T4930]  ? srso_alias_return_thunk+0x5/0xfbef5
[  124.106784][ T4930]  ? do_raw_spin_unlock+0x145/0x1e0
[  124.106840][ T4930]  kobject_add_internal+0x2c8/0x930
[  124.106910][ T4930]  kobject_add+0x16a/0x1e0
[  124.106972][ T4930]  ? __pfx_kobject_add+0x10/0x10
[  124.107032][ T4930]  ? class_to_subsys+0x10f/0x150
[  124.107079][ T4930]  ? srso_alias_return_thunk+0x5/0xfbef5
[  124.107130][ T4930]  ? srso_alias_return_thunk+0x5/0xfbef5
[  124.107178][ T4930]  ? kobject_put+0xb9/0x640
[  124.107233][ T4930]  ? _raw_spin_unlock+0x28/0x50
[  124.107286][ T4930]  device_add+0x294/0x1970
[  124.107328][ T4930]  ? __pfx_dev_set_name+0x10/0x10
[  124.107377][ T4930]  ? __pfx_device_add+0x10/0x10
[  124.107418][ T4930]  ? srso_alias_return_thunk+0x5/0xfbef5
[  124.107466][ T4930]  ? mgmt_send_event_skb+0x2fb/0x460
[  124.107526][ T4930]  hci_conn_add_sysfs+0x1a3/0x260
[  124.107575][ T4930]  le_conn_complete_evt+0x122f/0x2130
[  124.107652][ T4930]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  124.107716][ T4930]  ? hci_event_packet+0x186/0xcd0
[  124.107777][ T4930]  ? srso_alias_return_thunk+0x5/0xfbef5
[  124.107838][ T4930]  hci_le_conn_complete_evt+0x23c/0x3a0
[  124.107907][ T4930]  ? skb_pull_data+0x15f/0x1e0
[  124.107962][ T4930]  hci_le_meta_evt+0x34a/0x5f0
[  124.108003][ T4930]  ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[  124.108076][ T4930]  hci_event_packet+0x51c/0xcd0
[  124.108142][ T4930]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  124.108185][ T4930]  ? __pfx_hci_event_packet+0x10/0x10
[  124.108257][ T4930]  ? srso_alias_return_thunk+0x5/0xfbef5
[  124.108305][ T4930]  ? lockdep_hardirqs_on+0x7d/0x110
[  124.108353][ T4930]  ? srso_alias_return_thunk+0x5/0xfbef5
[  124.108411][ T4930]  hci_rx_work+0x451/0xfc0
[  124.108489][ T4930]  process_one_work+0xac7/0x1b10
[  124.108569][ T4930]  ? __pfx_process_one_work+0x10/0x10
[  124.108632][ T4930]  ? lock_acquire+0x1d1/0x380
[  124.108686][ T4930]  ? srso_alias_return_thunk+0x5/0xfbef5
[  124.108742][ T4930]  worker_thread+0x5ef/0xe50
[  124.108815][ T4930]  ? __pfx_worker_thread+0x10/0x10
[  124.108877][ T4930]  ? kthread+0x13a/0x450
[  124.108929][ T4930]  ? __pfx_worker_thread+0x10/0x10
[  124.108987][ T4930]  kthread+0x373/0x450
[  124.109039][ T4930]  ? __pfx_kthread+0x10/0x10
[  124.109096][ T4930]  ret_from_fork+0x730/0xd60
[  124.109140][ T4930]  ? __pfx_ret_from_fork+0x10/0x10
[  124.109184][ T4930]  ? srso_alias_return_thunk+0x5/0xfbef5
[  124.109233][ T4930]  ? __switch_to+0x800/0x10f0
[  124.109286][ T4930]  ? __switch_to_asm+0x39/0x70
[  124.109324][ T4930]  ? __pfx_kthread+0x10/0x10
[  124.109382][ T4930]  ret_from_fork_asm+0x1a/0x30
[  124.109445][ T4930]  </TASK>
[  124.109680][ T4930] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  124.109732][ T4930] Bluetooth: hci2: failed to register connection device
[  124.877964][   T31] audit: type=1800 audit(1791001982.412:2): pid=6045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.3.52" name="/usb_gadget/g1/functions/ncm.usb0" dev="configfs" ino=9145 res=0 errno=0
[  125.236428][ T6043] configfs-gadget.g1 gadget.0: HOST MAC 2e:40:97:a3:6c:92
[  125.236467][ T6043] configfs-gadget.g1 gadget.0: MAC 7a:00:fc:23:47:f6
[  125.362237][   T91] bridge_slave_1: left allmulticast mode
[  125.362287][   T91] bridge_slave_1: left promiscuous mode
[  125.363731][   T91] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.420919][   T91] bridge_slave_0: left allmulticast mode
[  125.420957][   T91] bridge_slave_0: left promiscuous mode
[  125.421192][   T91] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.474760][ T5842] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  125.623997][ T5842] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.03
[  125.625641][ T5842] usb 1-1: Dual-Role OTG device on HNP port
[  125.625948][ T5842] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.724453][ T5842] cdc_ncm 1-1:1.0: MAC-Address: 2e:40:97:a3:6c:92
[  126.650862][ T4930] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  126.664428][ T4930] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  126.668718][ T4930] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  126.676104][ T4930] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  126.686167][ T4930] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  128.220768][   T91] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  128.289088][   T91] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  128.307592][   T91] bond0 (unregistering): Released all slaves
[  128.332316][ T5275] 8021q: adding VLAN 0 to HW filter on device eth1
[  128.393486][ T5842] cdc_ncm 1-1:1.0 usb1: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 2e:40:97:a3:6c:92
[  128.468273][ T5275] 8021q: adding VLAN 0 to HW filter on device eth2
[  128.668626][ T5275] 8021q: adding VLAN 0 to HW filter on device eth3
[  128.688044][ T6085] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  128.688083][ T6085] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[  128.688100][ T6085] overlayfs: missing 'lowerdir'
[  128.817376][ T5613] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  128.820348][ T5613] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  128.822044][ T5613] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  128.845490][ T5613] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  128.849743][ T5613] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  128.964761][ T6093] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  129.022124][ T6093] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  129.120678][ T6096] loop2: detected capacity change from 0 to 1024
[  129.121765][ T6096] EXT4-fs: Ignoring removed orlov option
[  129.125815][ T6096] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities
[  129.288901][   T52] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201'
[  129.288938][   T52] CPU: 0 UID: 0 PID: 52 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) 
[  129.289001][   T52] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  129.289028][   T52] Workqueue: hci3 hci_rx_work
[  129.289096][   T52] Call Trace:
[  129.289108][   T52]  <TASK>
[  129.289123][   T52]  dump_stack_lvl+0x100/0x190
[  129.289182][   T52]  sysfs_warn_dup.cold+0x1c/0x28
[  129.289245][   T52]  sysfs_create_dir_ns+0x24b/0x2b0
[  129.289295][   T52]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  129.289341][   T52]  ? find_held_lock+0x2b/0x80
[  129.289398][   T52]  ? kobject_add_internal+0x25f/0x930
[  129.289461][   T52]  ? kobject_add_internal+0x25f/0x930
[  129.289526][   T52]  ? srso_alias_return_thunk+0x5/0xfbef5
[  129.289576][   T52]  ? do_raw_spin_unlock+0x145/0x1e0
[  129.289632][   T52]  kobject_add_internal+0x2c8/0x930
[  129.289702][   T52]  kobject_add+0x16a/0x1e0
[  129.289764][   T52]  ? __pfx_kobject_add+0x10/0x10
[  129.289824][   T52]  ? class_to_subsys+0x10f/0x150
[  129.289871][   T52]  ? srso_alias_return_thunk+0x5/0xfbef5
[  129.289922][   T52]  ? srso_alias_return_thunk+0x5/0xfbef5
[  129.289983][   T52]  ? kobject_put+0xb9/0x640
[  129.290040][   T52]  ? _raw_spin_unlock+0x28/0x50
[  129.290093][   T52]  device_add+0x294/0x1970
[  129.290135][   T52]  ? __pfx_dev_set_name+0x10/0x10
[  129.290185][   T52]  ? __pfx_device_add+0x10/0x10
[  129.290226][   T52]  ? srso_alias_return_thunk+0x5/0xfbef5
[  129.290274][   T52]  ? mgmt_send_event_skb+0x2fb/0x460
[  129.290327][   T52]  hci_conn_add_sysfs+0x1a3/0x260
[  129.290376][   T52]  le_conn_complete_evt+0x122f/0x2130
[  129.290454][   T52]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  129.290517][   T52]  ? hci_event_packet+0x186/0xcd0
[  129.290577][   T52]  ? srso_alias_return_thunk+0x5/0xfbef5
[  129.290638][   T52]  hci_le_conn_complete_evt+0x23c/0x3a0
[  129.290707][   T52]  ? skb_pull_data+0x15f/0x1e0
[  129.290761][   T52]  hci_le_meta_evt+0x34a/0x5f0
[  129.290802][   T52]  ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[  129.290875][   T52]  hci_event_packet+0x51c/0xcd0
[  129.290940][   T52]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  129.290996][   T52]  ? __pfx_hci_event_packet+0x10/0x10
[  129.291058][   T52]  ? srso_alias_return_thunk+0x5/0xfbef5
[  129.291106][   T52]  ? __pfx___sanitizer_cov_trace_switch+0x10/0x10
[  129.291157][   T52]  ? srso_alias_return_thunk+0x5/0xfbef5
[  129.291204][   T52]  ? kfree_skbmem+0xc3/0x210
[  129.291254][   T52]  ? srso_alias_return_thunk+0x5/0xfbef5
[  129.291302][   T52]  ? sk_skb_reason_drop+0x114/0x1b0
[  129.291351][   T52]  hci_rx_work+0x451/0xfc0
[  129.291422][   T52]  process_one_work+0xac7/0x1b10
[  129.291503][   T52]  ? __pfx_process_one_work+0x10/0x10
[  129.291566][   T52]  ? lock_acquire+0x1d1/0x380
[  129.291622][   T52]  ? srso_alias_return_thunk+0x5/0xfbef5
[  129.291678][   T52]  worker_thread+0x5ef/0xe50
[  129.291755][   T52]  ? kthread+0x13a/0x450
[  129.291808][   T52]  ? __pfx_worker_thread+0x10/0x10
[  129.291865][   T52]  kthread+0x373/0x450
[  129.291918][   T52]  ? __pfx_kthread+0x10/0x10
[  129.292008][   T52]  ret_from_fork+0x730/0xd60
[  129.292054][   T52]  ? __pfx_ret_from_fork+0x10/0x10
[  129.292098][   T52]  ? srso_alias_return_thunk+0x5/0xfbef5
[  129.292146][   T52]  ? __switch_to+0x800/0x10f0
[  129.292199][   T52]  ? __switch_to_asm+0x39/0x70
[  129.292237][   T52]  ? __pfx_kthread+0x10/0x10
[  129.292295][   T52]  ret_from_fork_asm+0x1a/0x30
[  129.292357][   T52]  </TASK>
[  129.292520][   T52] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  129.292569][   T52] Bluetooth: hci3: failed to register connection device
[  129.666761][ T6105] xt_hashlimit: size too large, truncated to 1048576
[  130.320239][   T91] hsr_slave_0: left promiscuous mode
[  130.324874][   T91] hsr_slave_1: left promiscuous mode
[  130.325883][   T91] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  130.325920][   T91] batman_adv: batadv0: Removing interface: batadv_slave_0
[  130.336327][   T91] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  130.336353][   T91] batman_adv: batadv0: Removing interface: batadv_slave_1
[  130.385249][   T91] veth1_macvtap: left promiscuous mode
[  130.385316][   T91] veth0_macvtap: left promiscuous mode
[  130.385445][   T91] veth1_vlan: left promiscuous mode
[  130.385594][   T91] veth0_vlan: left promiscuous mode
[  130.607832][ T4930] Bluetooth: hci2: command 0x0406 tx timeout
[  131.657162][   T91] team0 (unregistering): Port device team_slave_1 removed
[  131.681412][   T91] team0 (unregistering): Port device team_slave_0 removed
[  132.233383][ T1307] ieee802154 phy0 wpan0: encryption failed: -22
[  132.233494][ T1307] ieee802154 phy1 wpan1: encryption failed: -22
[  133.745785][ T5275] 8021q: adding VLAN 0 to HW filter on device eth4
[  133.998538][   T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  134.009914][   T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  134.017635][   T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  134.020392][   T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  134.021589][   T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  134.383203][    T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!!
[  134.432704][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  134.502698][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  134.552698][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  135.602700][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  135.612691][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  135.682719][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  135.852702][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  135.962700][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  136.048736][ T4930] Bluetooth: hci3: command 0x0406 tx timeout
[  136.123339][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  141.368351][   T31] audit: type=1800 audit(1791001998.912:3): pid=6181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.4.81" name="/usb_gadget/g1/functions/ncm.usb0" dev="configfs" ino=9145 res=0 errno=0
[  141.525898][   T52] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201'
[  141.525935][   T52] CPU: 0 UID: 0 PID: 52 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) 
[  141.525981][   T52] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  141.526008][   T52] Workqueue: hci4 hci_rx_work
[  141.526072][   T52] Call Trace:
[  141.526085][   T52]  <TASK>
[  141.526100][   T52]  dump_stack_lvl+0x100/0x190
[  141.526157][   T52]  sysfs_warn_dup.cold+0x1c/0x28
[  141.526219][   T52]  sysfs_create_dir_ns+0x24b/0x2b0
[  141.526267][   T52]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  141.526312][   T52]  ? find_held_lock+0x2b/0x80
[  141.526372][   T52]  ? kobject_add_internal+0x25f/0x930
[  141.526434][   T52]  ? kobject_add_internal+0x25f/0x930
[  141.526505][   T52]  ? srso_alias_return_thunk+0x5/0xfbef5
[  141.526550][   T52]  ? do_raw_spin_unlock+0x145/0x1e0
[  141.526595][   T52]  kobject_add_internal+0x2c8/0x930
[  141.526656][   T52]  kobject_add+0x16a/0x1e0
[  141.526713][   T52]  ? __pfx_kobject_add+0x10/0x10
[  141.526758][   T52]  ? class_to_subsys+0x10f/0x150
[  141.526799][   T52]  ? srso_alias_return_thunk+0x5/0xfbef5
[  141.526847][   T52]  ? srso_alias_return_thunk+0x5/0xfbef5
[  141.526887][   T52]  ? kobject_put+0xb9/0x640
[  141.526927][   T52]  ? _raw_spin_unlock+0x28/0x50
[  141.526980][   T52]  device_add+0x294/0x1970
[  141.527017][   T52]  ? __pfx_dev_set_name+0x10/0x10
[  141.527056][   T52]  ? __pfx_device_add+0x10/0x10
[  141.527086][   T52]  ? srso_alias_return_thunk+0x5/0xfbef5
[  141.527133][   T52]  ? mgmt_send_event_skb+0x2fb/0x460
[  141.527182][   T52]  hci_conn_add_sysfs+0x1a3/0x260
[  141.527218][   T52]  le_conn_complete_evt+0x122f/0x2130
[  141.527288][   T52]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  141.527345][   T52]  ? hci_event_packet+0x186/0xcd0
[  141.527388][   T52]  ? srso_alias_return_thunk+0x5/0xfbef5
[  141.527447][   T52]  hci_le_conn_complete_evt+0x23c/0x3a0
[  141.527511][   T52]  ? skb_pull_data+0x15f/0x1e0
[  141.527552][   T52]  hci_le_meta_evt+0x34a/0x5f0
[  141.527592][   T52]  ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[  141.527656][   T52]  hci_event_packet+0x51c/0xcd0
[  141.527705][   T52]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  141.527748][   T52]  ? __pfx_hci_event_packet+0x10/0x10
[  141.527811][   T52]  ? srso_alias_return_thunk+0x5/0xfbef5
[  141.527845][   T52]  ? lockdep_hardirqs_on+0x7d/0x110
[  141.527890][   T52]  ? srso_alias_return_thunk+0x5/0xfbef5
[  141.527944][   T52]  hci_rx_work+0x451/0xfc0
[  141.527999][   T52]  process_one_work+0xac7/0x1b10
[  141.528075][   T52]  ? __pfx_process_one_work+0x10/0x10
[  141.528127][   T52]  ? lock_acquire+0x1d1/0x380
[  141.528170][   T52]  ? srso_alias_return_thunk+0x5/0xfbef5
[  141.528224][   T52]  worker_thread+0x5ef/0xe50
[  141.528288][   T52]  ? kthread+0x13a/0x450
[  141.528329][   T52]  ? __pfx_worker_thread+0x10/0x10
[  141.528383][   T52]  kthread+0x373/0x450
[  141.528427][   T52]  ? __pfx_kthread+0x10/0x10
[  141.528470][   T52]  ret_from_fork+0x730/0xd60
[  141.528518][   T52]  ? __pfx_ret_from_fork+0x10/0x10
[  141.528559][   T52]  ? srso_alias_return_thunk+0x5/0xfbef5
[  141.528595][   T52]  ? __switch_to+0x800/0x10f0
[  141.528638][   T52]  ? __switch_to_asm+0x39/0x70
[  141.528675][   T52]  ? __pfx_kthread+0x10/0x10
[  141.528726][   T52]  ret_from_fork_asm+0x1a/0x30
[  141.528772][   T52]  </TASK>
[  141.528830][   T52] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  141.528876][   T52] Bluetooth: hci4: failed to register connection device
[  141.529489][   T52] Bluetooth: hci4: link tx timeout
[  141.529509][   T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  141.915372][ T6205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  141.935622][ T4930] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  141.937731][ T4930] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  141.949791][ T4930] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  141.960099][ T4930] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  141.969289][ T4930] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  141.994476][ T6202] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  142.588175][ T6219] loop2: detected capacity change from 0 to 2048
[  142.732296][   T31] audit: type=1800 audit(1791002000.272:4): pid=6221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.4.88" name="/usb_gadget/g1/functions/ncm.usb0" dev="configfs" ino=9145 res=0 errno=0
[  142.772389][ T6219] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  143.554917][ T5613] Bluetooth: hci4: command 0x0406 tx timeout
[  145.835352][ T5613] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  145.838575][ T5613] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  145.840942][ T5613] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  145.867438][ T5613] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  145.868381][ T5613] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  146.960052][ T6246] ------------[ cut here ]------------
[  146.960072][ T6246] failed to allocate ring buffer on CPU 0
[  146.960088][ T6246] WARNING: kernel/trace/ring_buffer.c:8109 at trace_rb_cpu_prepare+0x463/0x520, CPU#0: syz.3.91/6246
[  146.983914][ T6246] Modules linked in:
[  146.987835][ T6246] CPU: 0 UID: 0 PID: 6246 Comm: syz.3.91 Not tainted syzkaller #0 PREEMPT(full) 
[  146.997552][ T6246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  147.008103][ T6246] RIP: 0010:trace_rb_cpu_prepare+0x465/0x520
[  147.014532][ T6246] Code: 48 c1 ea 03 80 3c 02 00 0f 84 bc fc ff ff 48 8b 3c 24 e8 4e f1 6d 00 e9 ae fc ff ff e8 b4 7e fb ff 48 8d 3d fd b8 38 0f 89 ee <67> 48 0f b9 3a bb f4 ff ff ff e9 d3 fd ff ff 4c 89 ef e8 24 f1 6d
[  147.034342][ T6246] RSP: 0018:ffffc900031d78d8 EFLAGS: 00010283
[  147.040435][ T6246] RAX: 000000000001a570 RBX: ffff888053a410b8 RCX: ffffc90006172000
[  147.048614][ T6246] RDX: 0000000000080000 RSI: 0000000000000000 RDI: ffffffff91496180
[  147.056686][ T6246] RBP: 0000000000000000 R08: ffff88801c117680 R09: 0000000000000000
[  147.064967][ T6246] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000
[  147.073091][ T6246] R13: ffff888053a41010 R14: 0000000000000162 R15: 0000000000000000
[  147.081764][ T6246] FS:  00007f49446b76c0(0000) GS:ffff888123b4e000(0000) knlGS:0000000000000000
[  147.091239][ T6246] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  147.097891][ T6246] CR2: 0000000000000000 CR3: 0000000074b1b000 CR4: 0000000000350ef0
[  147.105932][ T6246] Call Trace:
[  147.109221][ T6246]  <TASK>
[  147.112169][ T6246]  ? __pfx_trace_rb_cpu_prepare+0x10/0x10
[  147.117967][ T6246]  cpuhp_invoke_callback+0x205/0x9a0
[  147.123340][ T6246]  ? __pfx_trace_rb_cpu_prepare+0x10/0x10
[  147.129104][ T6246]  cpuhp_issue_call+0x1b8/0x970
[  147.134011][ T6246]  ? srso_alias_return_thunk+0x5/0xfbef5
[  147.139690][ T6246]  __cpuhp_state_add_instance_cpuslocked+0x2d7/0x400
[  147.146456][ T6246]  __cpuhp_state_add_instance+0xda/0x2e0
[  147.152134][ T6246]  alloc_buffer+0x6f8/0x1690
[  147.156802][ T6246]  ? srso_alias_return_thunk+0x5/0xfbef5
[  147.162480][ T6246]  __ring_buffer_alloc+0x2d/0x40
[  147.167500][ T6246]  allocate_trace_buffer+0x150/0xa30
[  147.172852][ T6246]  ? __pfx_allocate_trace_buffer+0x10/0x10
[  147.178695][ T6246]  trace_array_create_systems+0x582/0xc30
[  147.185074][ T6246]  instance_mkdir+0xca/0x140
[  147.189684][ T6246]  tracefs_syscall_mkdir+0x10e/0x180
[  147.195446][ T6246]  ? srso_alias_return_thunk+0x5/0xfbef5
[  147.201113][ T6246]  ? __pfx_tracefs_syscall_mkdir+0x10/0x10
[  147.207026][ T6246]  ? srso_alias_return_thunk+0x5/0xfbef5
[  147.212750][ T6246]  vfs_mkdir+0x364/0x850
[  147.217053][ T6246]  filename_mkdirat+0x48b/0x5e0
[  147.221935][ T6246]  ? __pfx_filename_mkdirat+0x10/0x10
[  147.227397][ T6246]  ? strncpy_from_user+0x19d/0x2d0
[  147.232569][ T6246]  ? srso_alias_return_thunk+0x5/0xfbef5
[  147.238440][ T6246]  ? do_getname+0x191/0x390
[  147.243018][ T6246]  __x64_sys_mkdirat+0x89/0xc0
[  147.247813][ T6246]  do_syscall_64+0x123/0x790
[  147.252428][ T6246]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  147.258399][ T6246] RIP: 0033:0x7f494379e159
[  147.262874][ T6246] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  147.282648][ T6246] RSP: 002b:00007f49446b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  147.291796][ T6246] RAX: ffffffffffffffda RBX: 00007f4943a25fa0 RCX: 00007f494379e159
[  147.300201][ T6246] RDX: 00000000000001ff RSI: 0000200000000140 RDI: ffffffffffffff9c
[  147.308227][ T6246] RBP: 00007f494383506b R08: 0000000000000000 R09: 0000000000000000
[  147.316353][ T6246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  147.324395][ T6246] R13: 00007f4943a26038 R14: 00007f4943a25fa0 R15: 00007ffe263447b8
[  147.332395][ T6246]  </TASK>
[  147.335453][ T6246] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  147.342748][ T6246] CPU: 0 UID: 0 PID: 6246 Comm: syz.3.91 Not tainted syzkaller #0 PREEMPT(full) 
[  147.351877][ T6246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  147.361927][ T6246] Call Trace:
[  147.365216][ T6246]  <TASK>
[  147.368154][ T6246]  dump_stack_lvl+0x100/0x190
[  147.372917][ T6246]  vpanic+0x553/0x970
[  147.376927][ T6246]  ? __pfx_vpanic+0x10/0x10
[  147.381452][ T6246]  panic+0xd1/0xe0
[  147.385193][ T6246]  ? __pfx_panic+0x10/0x10
[  147.389645][ T6246]  check_panic_on_warn.cold+0x19/0x34
[  147.395041][ T6246]  ? trace_rb_cpu_prepare+0x463/0x520
[  147.400437][ T6246]  __warn.cold+0x191/0x318
[  147.404883][ T6246]  __report_bug+0x30f/0x440
[  147.409416][ T6246]  ? trace_rb_cpu_prepare+0x463/0x520
[  147.414815][ T6246]  ? __pfx___report_bug+0x10/0x10
[  147.419948][ T6246]  ? rb_allocate_cpu_buffer+0xed0/0x2780
[  147.425612][ T6246]  ? srso_alias_return_thunk+0x5/0xfbef5
[  147.431277][ T6246]  ? rb_allocate_cpu_buffer+0xeec/0x2780
[  147.436944][ T6246]  report_bug_entry+0xe2/0x290
[  147.441725][ T6246]  ? trace_rb_cpu_prepare+0x465/0x520
[  147.447119][ T6246]  handle_bug+0x1cd/0x2a0
[  147.451490][ T6246]  exc_invalid_op+0x17/0x50
[  147.456018][ T6246]  asm_exc_invalid_op+0x1a/0x20
[  147.460876][ T6246] RIP: 0010:trace_rb_cpu_prepare+0x465/0x520
[  147.466879][ T6246] Code: 48 c1 ea 03 80 3c 02 00 0f 84 bc fc ff ff 48 8b 3c 24 e8 4e f1 6d 00 e9 ae fc ff ff e8 b4 7e fb ff 48 8d 3d fd b8 38 0f 89 ee <67> 48 0f b9 3a bb f4 ff ff ff e9 d3 fd ff ff 4c 89 ef e8 24 f1 6d
[  147.486505][ T6246] RSP: 0018:ffffc900031d78d8 EFLAGS: 00010283
[  147.492595][ T6246] RAX: 000000000001a570 RBX: ffff888053a410b8 RCX: ffffc90006172000
[  147.500575][ T6246] RDX: 0000000000080000 RSI: 0000000000000000 RDI: ffffffff91496180
[  147.508560][ T6246] RBP: 0000000000000000 R08: ffff88801c117680 R09: 0000000000000000
[  147.516546][ T6246] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000
[  147.524529][ T6246] R13: ffff888053a41010 R14: 0000000000000162 R15: 0000000000000000
[  147.532544][ T6246]  ? trace_rb_cpu_prepare+0x45c/0x520
[  147.537960][ T6246]  ? __pfx_trace_rb_cpu_prepare+0x10/0x10
[  147.543708][ T6246]  cpuhp_invoke_callback+0x205/0x9a0
[  147.549046][ T6246]  ? __pfx_trace_rb_cpu_prepare+0x10/0x10
[  147.554807][ T6246]  cpuhp_issue_call+0x1b8/0x970
[  147.559681][ T6246]  ? srso_alias_return_thunk+0x5/0xfbef5
[  147.565341][ T6246]  __cpuhp_state_add_instance_cpuslocked+0x2d7/0x400
[  147.572053][ T6246]  __cpuhp_state_add_instance+0xda/0x2e0
[  147.577712][ T6246]  alloc_buffer+0x6f8/0x1690
[  147.582343][ T6246]  ? srso_alias_return_thunk+0x5/0xfbef5
[  147.588012][ T6246]  __ring_buffer_alloc+0x2d/0x40
[  147.592981][ T6246]  allocate_trace_buffer+0x150/0xa30
[  147.598309][ T6246]  ? __pfx_allocate_trace_buffer+0x10/0x10
[  147.604148][ T6246]  trace_array_create_systems+0x582/0xc30
[  147.609885][ T6246]  instance_mkdir+0xca/0x140
[  147.614508][ T6246]  tracefs_syscall_mkdir+0x10e/0x180
[  147.619825][ T6246]  ? srso_alias_return_thunk+0x5/0xfbef5
[  147.625489][ T6246]  ? __pfx_tracefs_syscall_mkdir+0x10/0x10
[  147.631348][ T6246]  ? srso_alias_return_thunk+0x5/0xfbef5
[  147.637007][ T6246]  vfs_mkdir+0x364/0x850
[  147.641293][ T6246]  filename_mkdirat+0x48b/0x5e0
[  147.646181][ T6246]  ? __pfx_filename_mkdirat+0x10/0x10
[  147.651569][ T6246]  ? strncpy_from_user+0x19d/0x2d0
[  147.656712][ T6246]  ? srso_alias_return_thunk+0x5/0xfbef5
[  147.662359][ T6246]  ? do_getname+0x191/0x390
[  147.666890][ T6246]  __x64_sys_mkdirat+0x89/0xc0
[  147.671663][ T6246]  do_syscall_64+0x123/0x790
[  147.676282][ T6246]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  147.682182][ T6246] RIP: 0033:0x7f494379e159
[  147.686598][ T6246] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  147.706209][ T6246] RSP: 002b:00007f49446b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  147.714640][ T6246] RAX: ffffffffffffffda RBX: 00007f4943a25fa0 RCX: 00007f494379e159
[  147.722608][ T6246] RDX: 00000000000001ff RSI: 0000200000000140 RDI: ffffffffffffff9c
[  147.730580][ T6246] RBP: 00007f494383506b R08: 0000000000000000 R09: 0000000000000000
[  147.738551][ T6246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  147.746531][ T6246] R13: 00007f4943a26038 R14: 00007f4943a25fa0 R15: 00007ffe263447b8
[  147.754536][ T6246]  </TASK>
[  147.757779][ T6246] Kernel Offset: disabled
[  147.762101][ T6246] Rebooting in 86400 seconds..