last executing test programs:

3m49.31232103s ago: executing program 4 (id=18):
r0 = socket$kcm(0x11, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
close(0xffffffffffffffff)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xb, 0x10}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x40000)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000280)=@xdp={0x2c, 0x8, r4, 0x3e}, 0x80, &(0x7f0000000240)=[{&(0x7f00000004c0)='\'', 0x1}], 0x1}, 0x4040080)

3m47.93071793s ago: executing program 4 (id=24):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}}, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="60010000", @ANYRES16=r1, @ANYBLOB="010028bd7000fbdbdf250c"], 0x160}, 0x1, 0x0, 0x0, 0x28000021}, 0x24008854)

3m46.710928806s ago: executing program 4 (id=28):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x80)

3m45.922590229s ago: executing program 4 (id=31):
r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000180)={0x47c, 0x1, 0xa, 0x10, 0x101, 0x2, 0x4})

3m45.102308439s ago: executing program 4 (id=35):
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080), 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x22ea0a9, &(0x7f0000000000)={[{@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x32]}}]})

3m43.939422947s ago: executing program 4 (id=38):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
pipe2$9p(0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x39000, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB], 0xfc80}}, 0x0)
r3 = memfd_create(&(0x7f0000000340)='<Z2>K=\t\xeb\xf8\xa7\x04\x9f\xe1hO\x8e\xd7\xb5\x93}\x8d\xed\x01L`\x9b`;\x1c\xfce5W\xb8B\xf8\xd2\xdeK\xc1=\xa06p\x19\x9c\xb5w>\xd6r\x90\xd65\xa6\x89\xab\xd7\xbd\x96\x9f\xfd\xacU\x0e\xd7\x12r\x7f|\xfa\x85;}\xdc\xc1j%-_\xb9+\v\xe0\xa5\xd9K*\x84[\xfcu#\xfc\x04\x96]\x9a/\xea\xd3<\xb1\xfc\x12\xccs\x88=\xc4\xcf\xe3\xe8\xb9w!\xb0H\x0e\x1c\x050\xdf\xab\xd9>\xa4d\x83O\x14\xf61\xf9\x12\x84\x91\x00\xc3\xe0^\xf1\xacC\x87\xb15\xab\xa1\x19x\vY@\xe3\x9dD\xaf>\x96\x97\x17\xafO\xf3\x14\xb8\xdb\xa2\xaa\xe7\xe7\x1e{,\xac\x9fQ\xe7\xa7\x830\xd5\xed\'\xb0\x1f\xda\t\xb2f/\x00\xd8[\xd2\xe8\f\\.\xfc\xdbj\xa2Gl\x9f\xb3\xdb\xa05(\xf0\xe5\xd7[\xbcm\xdaLn\xb98\xd0\x99\x84\xac\xee\v\x7fMZ;\xab\xd7\xbdf\xe3\xc7 *\xac]\xac\xb6n\x0fq\xfe\xd9\x90kut\x83\x93\xf1`gW\x01{\x17-V\xbc\xcd', 0x2)
splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x408cd, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfffffe3e)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r6 = dup2(r5, r3)
ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10})
ioctl$BLKTRACETEARDOWN(r6, 0x1276, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
socket(0xa, 0x3, 0x87)
prlimit64(0x0, 0x2, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)

3m28.66691181s ago: executing program 32 (id=38):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
pipe2$9p(0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x39000, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB], 0xfc80}}, 0x0)
r3 = memfd_create(&(0x7f0000000340)='<Z2>K=\t\xeb\xf8\xa7\x04\x9f\xe1hO\x8e\xd7\xb5\x93}\x8d\xed\x01L`\x9b`;\x1c\xfce5W\xb8B\xf8\xd2\xdeK\xc1=\xa06p\x19\x9c\xb5w>\xd6r\x90\xd65\xa6\x89\xab\xd7\xbd\x96\x9f\xfd\xacU\x0e\xd7\x12r\x7f|\xfa\x85;}\xdc\xc1j%-_\xb9+\v\xe0\xa5\xd9K*\x84[\xfcu#\xfc\x04\x96]\x9a/\xea\xd3<\xb1\xfc\x12\xccs\x88=\xc4\xcf\xe3\xe8\xb9w!\xb0H\x0e\x1c\x050\xdf\xab\xd9>\xa4d\x83O\x14\xf61\xf9\x12\x84\x91\x00\xc3\xe0^\xf1\xacC\x87\xb15\xab\xa1\x19x\vY@\xe3\x9dD\xaf>\x96\x97\x17\xafO\xf3\x14\xb8\xdb\xa2\xaa\xe7\xe7\x1e{,\xac\x9fQ\xe7\xa7\x830\xd5\xed\'\xb0\x1f\xda\t\xb2f/\x00\xd8[\xd2\xe8\f\\.\xfc\xdbj\xa2Gl\x9f\xb3\xdb\xa05(\xf0\xe5\xd7[\xbcm\xdaLn\xb98\xd0\x99\x84\xac\xee\v\x7fMZ;\xab\xd7\xbdf\xe3\xc7 *\xac]\xac\xb6n\x0fq\xfe\xd9\x90kut\x83\x93\xf1`gW\x01{\x17-V\xbc\xcd', 0x2)
splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x408cd, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfffffe3e)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r6 = dup2(r5, r3)
ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10})
ioctl$BLKTRACETEARDOWN(r6, 0x1276, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
socket(0xa, 0x3, 0x87)
prlimit64(0x0, 0x2, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)

2m37.474180611s ago: executing program 3 (id=170):
r0 = syz_io_uring_setup(0x254c, &(0x7f0000000000)={0x0, 0x7c87, 0x800, 0x0, 0x39}, &(0x7f0000000080), &(0x7f00000001c0))
io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, 0x0, 0x1)
io_uring_register$IORING_UNREGISTER_PBUF_RING(r0, 0x17, &(0x7f0000000f40)={0x0, 0x0, 0x3}, 0x1)

2m35.629166453s ago: executing program 3 (id=174):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0xd0f, 0x400000, 0x25dfdbfc, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8, 0x2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x3}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000"], 0x50)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x6)
r4 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}]}, 0x4c}}, 0x0)

2m32.973263434s ago: executing program 3 (id=182):
r0 = syz_mount_image$hfsplus(&(0x7f0000001140), &(0x7f00000004c0)='./file1\x00', 0x804c10, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYRES16], 0xfe, 0x66b, &(0x7f0000001180)="$eJzs3c1vHGcdB/DvbDZ2Ni3BTZM2oEq1GgkQFolf5IK5YBBCPlSoKgfOVuI0VjZpsV3kVog6vF576B9QDr4gTkjcIxUOXODWG/KxEhKXXjCnRTuetdfrl66TxrtpP59o93lmnplnfs/vmZl9saIN8IW1MJH6gxRZmHhlvb28tTnT3NqcudupJxlNspHUk9SSFP9ttVofJvNJsdtN0VMe8P7y3GsffbL18c5SvXqU29eO269Htd1Gz+qNzrrxJGeq8hHs6+/GI/dX7EY+n+RqVcLAnU3S2udnf396t6VL47C9z51KjMDjVey8bh4wlpyvLvT2+4DOK2/tdKPr32if2/W+gwAAAIAnTT+fgb+8ne2sFxdOIRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4XNjY+/3/onrUOvXxFJ3f/x+p1qWqD5cXT7b5g8cVBwAAAAAAAACcohe3s531XOgst4ryb/4vlQuXyuen8lZWs5SVXMt6FrOWtaxkKslYV0cj64traytTfew5feie058S6GhVNj6bcQMAAAAAAADA58yvsrD3938AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgGRXJmp0hxv2v1WGr1JOeSjLRXbCT/7NSfZA8GHQAAAACcgtFkO+u50FluFbmU5LnyO4BzeSv3spblrKWZpdwsvxfY+dRf29qcaW5tztxtPw72+/3/nCiMssfsfPdw+JGvlFs0civL5ZpruZE30szN1Mo9265U8XR67Ynrfjum4nuVPiO7WZXtkb9XlQe8e6LBHuWEX6aMlRk5u5uRySq2djae6czM4TN0wtnpPdJUarvBXuo50sj+wTxUzs9XZXs8vzsq5wPRm4nprrPvueNznnz9L3/66WRVH54h9edMVbbK58bBTMx0ZeL5fjJxu3nvzu1bqxNPWiYOmCwzcXl3eSE/yk8ykfG8mpUs5+dZzFqWMp4flrXFavKLrkv+iEzN71t69dMiGanO0J3JOllML5X7Xshyfpw3cjNLebn8N52pfDuzmc1c1wxfPn6Gy6u+tu+q35vm1pcODf7qN6pKI8nvq3I4tPP6TFdeu++5Y2Vb95q9LF3sI0snvDfWv1pV2sf4dVUOh95MTHVl4tnjM/GH8ray2rx3Z+X24pv9He7ie1WlfWb9NhkfnhtJ+3y52J6scmn/2dFue/bQtqmy7dJuW+1A2+Xdtp0rdePIK3Wkeg93sKfpsu35Q9tmyrYrXW2Hvd8CYOid/+b5kca/G/9ofND4TeN245VzPxj9zugLIzn717PfrU+e+VrtheLP+SC/3Pv8DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLzVt9+5s9hsLq30VFqt1rtHNPVZqVdHeMjdH6GS8X891T7yIU2dnzM7xXi+8nRyemMf1sr/Wq1WtaY4Yps//m1oEtWqDEXqBlQZ3D0JOB3X1+6+eX317Xe+tXx38fWl15fuzc3Ozk3Ozb48c/3WcnNpcud50FECj8Pei/6gIwEAAAAAAAAAAAD6dRr/nWDQYwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACebAsTqT9IkanJa5Pt5a3NmWb70anvbVlPUktS/CIpPkzmi6phrKu74qjjvL8899pHn2x9vNdXvbN97bj9+rNRPTKe5MxOef+z6u9GVR6rOG4Ixe4I55NcrUoYuP8HAAD//xokBkA=")
dup(r0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x21)
unlinkat(0xffffffffffffff9c, 0x0, 0x0)
pwritev2(r2, &(0x7f00000007c0)=[{0x0}], 0x1, 0x5412, 0x2, 0x2)
write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
ftruncate(r1, 0xa75)

2m30.700377484s ago: executing program 3 (id=185):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2m29.26356118s ago: executing program 3 (id=189):
syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x3008800, &(0x7f0000000100)=ANY=[@ANYRES8=0x0, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRES8, @ANYRES64, @ANYRESHEX=0x0, @ANYRES8=0x0], 0x1, 0x1ec, &(0x7f0000000780)="$eJzs271u01AYxvHnxG4SQ4HyOSCkDAywkIRUVGIqXAdT1aZVhQsIsyRCqrkBuAaug5vhAmBgY8LIjtOk/kgdR24I+f+G9thPX/vYruOTKEcA1pYtycioHi48aG59uW0K1dWr7hiAygXx7z9BGU6pKgD/Cut3ck08AvCX0x8Al+XnS+m7pB+/Pu7LSo/qw9wf57VGOv8k3bfj3DTlJMcXX6VH43pzJV1vj96DjPKrmdt//HC8/01d03Xd0JZu6pbxZaL84Kz+3uzBTrJzAACsKaP2RXlbsnJSO/qZHhVMbOjwW/qpPlHX4bHb712Qb2ckVrzvMG/vv3UPZuwFQJZaofs/nxXdf938ent6qTl3/wBUxxsMG3Ld/ntvED5Qo8bw9Z47V8MpVVWkYSrbcnajnlgTnEo6W/NCJjpjc285OF/lTJ/nltdavPNm9CmNkpFTpLymrOhViW7spqMNSYtdFOOXKt/8rMzjWqyxq0J/3Mq4FqUbjUv65z/fWPYrE4CqdT6cvOt4g+GT45O9o/5R/02v232+82z76U6vE43sO7PH9wBW1+Shr6lvAwEAAAAAAAAAAAAAgFVyR3fFzFgAAABgPaRm/5yWnDNkK3e61bKPEQAAAAAAAAAAAAAAAACA/83fAAAA///gowKN")
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
listen(r0, 0x0)
accept4(r0, 0x0, 0x0, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000b00)='\x00', 0x89901)
fstat(r1, &(0x7f0000000100))

2m27.205982751s ago: executing program 3 (id=193):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x20801, 0x0)
add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000240)="0100000200373a4541062101a59ea940d2cb0b3692f5020000a00000050000000000eb000000a5e5be21c44e328e68f3922af831e4e51bfb30f7788fd57e51bc464355bd646d037ccc16ddb08a7b3a697a793acf37119e61f502d8bbb016f701890700000068d945af468c1c9090c76906b94e0f27761c75e58c82da54d010078660684a4106855bea1ce67fe118aa4acabb5bee7f082d23a16b010c92471eba59152e716af8776ab90ac47a9680aa613a56aa11bfa73af4c4e94b5cfc855f0e910186d7e68ac24f8b125140ac5f7f4819168ce1c25550c6773b410119873dd9827757d96c5e8aa4617cc54c5e67060a9266f416b78f774e53ca1f84e698d1fe3cee10a8", 0x104, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
msgget$private(0x0, 0x101)

2m11.28362926s ago: executing program 33 (id=193):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x20801, 0x0)
add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000240)="0100000200373a4541062101a59ea940d2cb0b3692f5020000a00000050000000000eb000000a5e5be21c44e328e68f3922af831e4e51bfb30f7788fd57e51bc464355bd646d037ccc16ddb08a7b3a697a793acf37119e61f502d8bbb016f701890700000068d945af468c1c9090c76906b94e0f27761c75e58c82da54d010078660684a4106855bea1ce67fe118aa4acabb5bee7f082d23a16b010c92471eba59152e716af8776ab90ac47a9680aa613a56aa11bfa73af4c4e94b5cfc855f0e910186d7e68ac24f8b125140ac5f7f4819168ce1c25550c6773b410119873dd9827757d96c5e8aa4617cc54c5e67060a9266f416b78f774e53ca1f84e698d1fe3cee10a8", 0x104, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
msgget$private(0x0, 0x101)

1m20.757526778s ago: executing program 0 (id=310):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x97, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000480)={0x0, 0x15, 0x2, "efe6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f00000001c0)={0x60, 0xa, 0xf, "6e56ff8ed4bf3fa2e0147fe2960792"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1m17.280514046s ago: executing program 0 (id=317):
syz_mount_image$hfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x10012, &(0x7f0000001e80)=ANY=[@ANYBLOB='codepage=cp775,umask=00000000007777,iocharset=koi8-ru,\x00'/64, @ANYBLOB="7b467be6d3ffd5dbc39d475a3efbcc1a8227f7877fce1eaf2d016780277d325666f07a12652e81e75be5e881b521fcda9e61566e2b548201f553091a16ad9bb6888f170e5d63f7a84c585f22f2397bf6c9fe0ad346d27e428fa6322e2a05eddacbf8af7162ea449789312db3927438", @ANYRES16], 0x4, 0x345, &(0x7f00000007c0)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r0, 0x0, 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r0, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x80)
getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000)

1m15.527180345s ago: executing program 0 (id=320):
r0 = syz_mount_image$hfsplus(&(0x7f0000001140), &(0x7f00000004c0)='./file1\x00', 0x804c10, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYRES16], 0xfe, 0x66b, &(0x7f0000001180)="$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")
dup(r0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x21)
unlinkat(0xffffffffffffff9c, 0x0, 0x0)
pwritev2(r2, &(0x7f00000007c0)=[{&(0x7f0000000880)="2c9495fe66350889dea51a7d86809e1d0f9de9c460a16085cefe32840101cecc11d660a5ade9126db40a1f4fadf087a273427d4fd7c09b0624fc54b900781b996805aa46750b328818a8fe2507a01e06d942bc96bc6b4df0309090f2123d7a571ae0c8c5c67f440c861642daf7a0e5194627a0a5ae00cc3142a8f1623733e3de42427a235ae7eed011b523222c35af7130a441a22ce710", 0x97}], 0x1, 0x5412, 0x2, 0x2)
write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
ftruncate(r1, 0xa75)

1m13.321857666s ago: executing program 0 (id=323):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
umount2(&(0x7f0000000000)='./file0/../file0\x00', 0x1)

1m11.718242698s ago: executing program 0 (id=330):
syz_mount_image$hfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x10012, &(0x7f0000001e80)=ANY=[@ANYBLOB='codepage=cp775,umask=00000000007777,iocharset=koi8-ru,\x00'/64, @ANYBLOB="7b467be6d3ffd5dbc39d475a3efbcc1a8227f7877fce1eaf2d016780277d325666f07a12652e81e75be5e881b521fcda9e61566e2b548201f553091a16ad9bb6888f170e5d63f7a84c585f22f2397bf6c9fe0ad346d27e428fa6322e2a05eddacbf8af7162ea449789312db3927438", @ANYRES16], 0x4, 0x345, &(0x7f00000007c0)="$eJzs3U9P1EwcB/DvtLtL94EHK2BIPBmUxBMBPGi8QAzxNXgwRIQlIayYKCZKTETPxngzMfHIzbPRt6AX4xvQEwfjSS/EgzUznXan3ZnuLuAWwveTuHbb+fObbWc6A1kKIjqxri183bm0K/+JKgAfwFXAAxAAFQBnMB482NjsWJCfbgnEOUVbmuWNhi1rAJ1DC+W7CobMffRvRFEUfeuY6mdfYqHyCLMHGzxgQPdOdTzoe2QHNmfbuR2362QxzrDYwx4eYrjMcIiIqHz6/u/pu8SQnr97HjCp5+HH9f6fyMxv9sqL40hI7/9e/D4S8vM5pQ7J9d7aZrOxEi/h5Nn3klWirSzrNRG1Pu4a4ivLHzSmXEYtdioWr7661mxMbasCnmFOM5KNqdcVJA1RXNHWgBkAE5a1aYGithcbVG2oyjbMOuIfLarRugD+8B2v7NUtfuoiJvFRfBaLIsRrrKTzv0ok5IejzlSY6ypx/NPuElUrwzhVppWt8E+rSs7qGvD+bauVddfnGsCXsdjIUkR+/h4mcb6suXNhBNkfK8Stm3G3TuUaBSpCrRrMXLNpot/WXGP5uuqr1WZjavlu03XRHy7rik68EDfEBH7gHRaM+b8nU0/C3TMzvVyolPrKKGxPRaVsO4+WDqg68J2eeiYp1zODX3ee4zauYPj+o631pWazca/8jaSr7DP7uUOOJ74Q9eUo98j/jTQI5EYVgLOcqvuQdeNPFEXWQxX04xRUVVMvv2k1eWt9Segx72BVyJEzd2jenRjAPAC9JxkR9lP7kzTXQKvArrL/kmdb7bFfkElUfeggSVWZQz4Guuop9bY9Ox1yPf4/HSSe9jys0PHSOvsYv1l2MFQGOXcQ8frPWK9Mq1FHvoQF65+oU+FGiTOOFdCIev2vuxVcWqxznjiYbOTWXMb8Va25zl8ELuRq9JDU2DbyhTpOHMXfSvb+qwyxgC+4xZ//ExEREREREREREREREREREREREREdN71+G6H96wSdN7I17p7AP7xBRERERERERERERERERERERERERERERHQwxvN/AV89MaZme/5v0ZOaFD9+QkxwGM//9e3P/62bb8R2jy0lory/AQAA//82R1zj")
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r0, 0x0, 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r0, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x80)
getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000)

1m10.965203754s ago: executing program 0 (id=332):
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000240)={[{@nobarrier}, {@barrier}, {@noauto_da_alloc}, {@noload}, {@nobarrier}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}]}, 0xfe, 0x44e, &(0x7f00000010c0)="$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")
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
io_setup(0x202, &(0x7f0000000200)=<r1=>0x0)
ftruncate(0xffffffffffffffff, 0x7fff)
io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x4000, 0x2000}])

1m6.601956076s ago: executing program 34 (id=332):
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000240)={[{@nobarrier}, {@barrier}, {@noauto_da_alloc}, {@noload}, {@nobarrier}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}]}, 0xfe, 0x44e, &(0x7f00000010c0)="$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")
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
io_setup(0x202, &(0x7f0000000200)=<r1=>0x0)
ftruncate(0xffffffffffffffff, 0x7fff)
io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x4000, 0x2000}])

13.742656864s ago: executing program 5 (id=452):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r0}, 0x18)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={<r5=>0xffffffffffffffff}, 0x2, 0x1}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x0, @remote, 0xf}, r5}}, 0x30)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e24, 0x40043, @mcast1, 0xf}, {0x2, 0xfff8, 0xc00, @empty, 0x10000}, r5, 0x9dffffff}}, 0x48)

10.999008058s ago: executing program 6 (id=461):
r0 = syz_mount_image$hfsplus(&(0x7f0000001140), &(0x7f00000004c0)='./file1\x00', 0x804c10, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYRES16], 0xfe, 0x66b, &(0x7f0000001180)="$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")
dup(r0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x21)
unlinkat(0xffffffffffffff9c, 0x0, 0x0)
pwritev2(r2, &(0x7f00000007c0)=[{&(0x7f0000000880)="2c9495fe66350889dea51a7d86809e1d0f9de9c460a16085cefe32840101cecc11d660a5ade9126db40a1f4fadf087a273427d4fd7c09b0624fc54b900781b996805aa46750b328818a8fe2507a01e06d942bc96bc6b4df0309090f2123d7a571ae0c8c5c67f440c861642daf7a0e5194627a0a5ae00cc3142a8f1623733e3de42427a235ae7eed011b523222c35af7130a441a22ce7107ecc4a198049e1a55b1c24893d719d47df5dc12205a68bef07", 0xb0}], 0x1, 0x5412, 0x2, 0x2)
write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
ftruncate(r1, 0xa75)

9.444654849s ago: executing program 6 (id=467):
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x13, 0x2})
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xd)

8.382392808s ago: executing program 2 (id=470):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$FS_IOC_GETVERSION(r1, 0x5b23, 0x0)

8.382217327s ago: executing program 5 (id=471):
syz_usb_connect(0x5, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0)
r0 = syz_open_dev$sndctrl(0x0, 0xfffffffffffffffd, 0x183003)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f00000011c0)=""/230)

8.31846727s ago: executing program 6 (id=472):
r0 = io_uring_setup(0x68f6, 0x0)
r1 = mq_open(&(0x7f0000000000)='bat\x13\x1b\r\xcbs\xecave_5\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000000000000, 0x8, 0x1, 0xc05})
mq_getsetattr(r1, &(0x7f0000000040)={0x0, 0x40, 0x4, 0xffff}, 0x0)
mq_timedreceive(r1, &(0x7f00000003c0)=""/100, 0x64, 0xfffffffffffffff8, &(0x7f0000000280)={0x77359400})
close_range(r0, 0xffffffffffffffff, 0x0)
r2 = socket$l2tp(0x2, 0x2, 0x73)
bind$l2tp(r2, &(0x7f00000000c0), 0x10)
r3 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0)
setsockopt(r2, 0x2, 0x81, 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x94)
syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0)
mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

6.956502s ago: executing program 1 (id=475):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500f0e66f1500000000000000", @ANYRES32=0x0, @ANYRES32=r1], 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x28008000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6}, 0x0)

6.344375112s ago: executing program 7 (id=476):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
readv(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/214, 0xd6}], 0x1)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x80040005, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl(r1, 0x8b1a, &(0x7f0000000040))
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000003c0)={{0x1, 0x1, 0x18, <r2=>r0, {0x2}}, './file0\x00'})
ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f00000004c0)=0xd)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r4}, 0x18)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000002000)=""/102400, 0x19000)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8417f, 0x0)
connect$vsock_stream(r5, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)

5.998967995s ago: executing program 6 (id=477):
r0 = syz_mount_image$hfsplus(&(0x7f0000001140), &(0x7f00000004c0)='./file1\x00', 0x804c10, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYRES16], 0xfe, 0x66b, &(0x7f0000001180)="$eJzs3c1vHGcdB/DvbDZ2Ni3BTZM2oEq1GgkQFolf5IK5YBBCPlSoKgfOVuI0VjZpsV3kVog6vF576B9QDr4gTkjcIxUOXODWG/KxEhKXXjCnRTuetdfrl66TxrtpP59o93lmnplnfs/vmZl9saIN8IW1MJH6gxRZmHhlvb28tTnT3NqcudupJxlNspHUk9SSFP9ttVofJvNJsdtN0VMe8P7y3GsffbL18c5SvXqU29eO269Htd1Gz+qNzrrxJGeq8hHs6+/GI/dX7EY+n+RqVcLAnU3S2udnf396t6VL47C9z51KjMDjVey8bh4wlpyvLvT2+4DOK2/tdKPr32if2/W+gwAAAIAnTT+fgb+8ne2sFxdOIRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4XNjY+/3/onrUOvXxFJ3f/x+p1qWqD5cXT7b5g8cVBwAAAAAAAACcohe3s531XOgst4ryb/4vlQuXyuen8lZWs5SVXMt6FrOWtaxkKslYV0cj64traytTfew5feie058S6GhVNj6bcQMAAAAAAADA58yvsrD3938AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgGRXJmp0hxv2v1WGr1JOeSjLRXbCT/7NSfZA8GHQAAAACcgtFkO+u50FluFbmU5LnyO4BzeSv3spblrKWZpdwsvxfY+dRf29qcaW5tztxtPw72+/3/nCiMssfsfPdw+JGvlFs0civL5ZpruZE30szN1Mo9265U8XR67Ynrfjum4nuVPiO7WZXtkb9XlQe8e6LBHuWEX6aMlRk5u5uRySq2djae6czM4TN0wtnpPdJUarvBXuo50sj+wTxUzs9XZXs8vzsq5wPRm4nprrPvueNznnz9L3/66WRVH54h9edMVbbK58bBTMx0ZeL5fjJxu3nvzu1bqxNPWiYOmCwzcXl3eSE/yk8ykfG8mpUs5+dZzFqWMp4flrXFavKLrkv+iEzN71t69dMiGanO0J3JOllML5X7Xshyfpw3cjNLebn8N52pfDuzmc1c1wxfPn6Gy6u+tu+q35vm1pcODf7qN6pKI8nvq3I4tPP6TFdeu++5Y2Vb95q9LF3sI0snvDfWv1pV2sf4dVUOh95MTHVl4tnjM/GH8ray2rx3Z+X24pv9He7ie1WlfWb9NhkfnhtJ+3y52J6scmn/2dFue/bQtqmy7dJuW+1A2+Xdtp0rdePIK3Wkeg93sKfpsu35Q9tmyrYrXW2Hvd8CYOid/+b5kca/G/9ofND4TeN245VzPxj9zugLIzn717PfrU+e+VrtheLP+SC/3Pv8DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLzVt9+5s9hsLq30VFqt1rtHNPVZqVdHeMjdH6GS8X891T7yIU2dnzM7xXi+8nRyemMf1sr/Wq1WtaY4Yps//m1oEtWqDEXqBlQZ3D0JOB3X1+6+eX317Xe+tXx38fWl15fuzc3Ozk3Ozb48c/3WcnNpcud50FECj8Pei/6gIwEAAAAAAAAAAAD6dRr/nWDQYwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACebAsTqT9IkanJa5Pt5a3NmWb70anvbVlPUktS/CIpPkzmi6phrKu74qjjvL8899pHn2x9vNdXvbN97bj9+rNRPTKe5MxOef+z6u9GVR6rOG4Ixe4I55NcrUoYuP8HAAD//xokBkA=")
dup(r0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x21)
unlinkat(0xffffffffffffff9c, 0x0, 0x0)
pwritev2(r2, &(0x7f00000007c0)=[{&(0x7f0000000880)="2c9495fe66350889dea51a7d86809e1d0f9de9c460a16085cefe32840101cecc11d660a5ade9126db40a1f4fadf087a273427d4fd7c09b0624fc54b900781b996805aa46750b328818a8fe2507a01e06d942bc96bc6b4df0309090f2123d7a571ae0c8c5c67f440c861642daf7a0e5194627a0a5ae00cc3142a8f1623733e3de42427a235ae7eed011b523222c35af7130a441a22ce7107ecc4a198049e1a55b1c24893d719d47df5dc12205a68bef0727734cea8e89766d39d6a72f2f", 0xbd}], 0x1, 0x5412, 0x2, 0x2)
write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
ftruncate(r1, 0xa75)

5.93902353s ago: executing program 5 (id=478):
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0)
sendfile(r0, r1, 0x0, 0x20fffe82)

5.668875675s ago: executing program 1 (id=479):
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0)
landlock_restrict_self(0xffffffffffffffff, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2)

5.602465364s ago: executing program 2 (id=480):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={&(0x7f0000000880)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x7, [@var={0x3, 0x0, 0x0, 0xe, 0x5, 0x1}]}, {0x0, [0x2e, 0x2e, 0x2e, 0x5f, 0x7f]}}, 0x0, 0x2f, 0x0, 0x1, 0xffff}, 0x28)

4.554093909s ago: executing program 2 (id=481):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x2a, 0x2, [@TCA_CODEL_LIMIT={0x8, 0x2, 0x3}, @TCA_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x4}]}}, @TCA_INGRESS_BLOCK={0x0, 0xd, 0x2}]}, 0x4c}}, 0x4000)

4.476817443s ago: executing program 1 (id=482):
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x13, 0x2})
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r1, &(0x7f0000000000), 0xd)

4.301702725s ago: executing program 7 (id=483):
r0 = syz_open_dev$vbi(0x0, 0x2, 0x2)
ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000400)=@userptr={0x0, 0x4, 0x4, 0x4, 0xd, {0x0, 0x2710}, {0x2, 0x1, 0x6, 0x5f, 0x3, 0x7, "147a6c13"}, 0x0, 0x2, {0x0}, 0x5})

4.151372981s ago: executing program 5 (id=484):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000007000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='oom_score_adj_update\x00', r0}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_adj\x00')
writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000280)='0', 0x1}], 0x1)

3.75617618s ago: executing program 6 (id=485):
syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000940)=ANY=[@ANYBLOB="1201000200000020bd2803190000000000010902240001000020000904ff800603000100092105006d01220500"], 0x0)
sendto(0xffffffffffffffff, &(0x7f0000000540)="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", 0x2fa, 0x4000, &(0x7f0000000180)=@caif=@rfm={0x25, 0x107ff, "6798c48f000000ec00"}, 0x80)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00])
read$FUSE(r0, &(0x7f0000003680)={0x2020}, 0x2020)

3.413152565s ago: executing program 1 (id=486):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="84010000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054010b8008"], 0x184}}, 0x0)

3.26605896s ago: executing program 7 (id=487):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000140)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8}, 0xe)
shutdown(r0, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={0x0, 0x86}, 0x8)

3.257240456s ago: executing program 2 (id=488):
syz_usb_connect(0x5, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0)
r0 = syz_open_dev$sndctrl(0x0, 0xfffffffffffffffd, 0x183003)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f00000011c0)=""/230)

2.829529875s ago: executing program 5 (id=489):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500f0e66f1500000000000000", @ANYRES32=0x0, @ANYRES32=r1], 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x28008000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6}, 0x0)

2.499235752s ago: executing program 7 (id=490):
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$FS_IOC_GETVERSION(r0, 0x5b23, 0x0)

2.322278948s ago: executing program 1 (id=491):
r0 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r0, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400})
sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x0)
syz_emit_ethernet(0xd86, 0x0, 0x0)
close(0x3)

1.459658448s ago: executing program 7 (id=492):
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0)
landlock_restrict_self(0xffffffffffffffff, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2)

1.439458662s ago: executing program 5 (id=493):
r0 = syz_mount_image$btrfs(&(0x7f00000004c0), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000000180)={[{@clear_cache}, {@user_subvol_rm}, {@nodiscard}, {@noautodefrag}, {@autodefrag}, {@ssd}, {@max_inline={'max_inline', 0x3d, [0x7, 0x32, 0x38, 0x2d, 0x35, 0x36, 0x78, 0x2d, 0x2d, 0x37]}}, {@space_cache}]}, 0x0, 0x559e, &(0x7f00000103c0)="$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")
chdir(&(0x7f0000000080)='./file0\x00')
ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000580)={0x1})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a)
fallocate(r1, 0x10, 0x800, 0x8000)
mknod$loop(0x0, 0x0, 0x1)

781.25155ms ago: executing program 2 (id=494):
syz_emit_ethernet(0x36, &(0x7f0000000240)={@broadcast, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x0, 0x2c, 0x0, @remote, @local}}}}, 0x0)

712.679839ms ago: executing program 7 (id=495):
socket(0x2a, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
read(r1, &(0x7f00000019c0)=""/4107, 0x100b)
socket$can_j1939(0x1d, 0x2, 0x7)
dup(0xffffffffffffffff)
socket(0x2a, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8b}, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$kcm(0x29, 0x5, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)

667.528732ms ago: executing program 1 (id=496):
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x13, 0x2})
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r1, &(0x7f0000000000), 0xd)

491.619578ms ago: executing program 6 (id=497):
r0 = syz_open_dev$vbi(0x0, 0x2, 0x2)
ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000400)=@userptr={0x0, 0x4, 0x4, 0x4, 0xd, {0x0, 0x2710}, {0x2, 0x1, 0x6, 0x5f, 0x3, 0x7, "147a6c13"}, 0x0, 0x2, {0x0}, 0x5})

0s ago: executing program 2 (id=498):
openat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0xc0040}, 0x18)
mount$cgroup(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={[{@subsystem='devices'}]})

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.132' (ED25519) to the list of known hosts.
[  189.270308][ T5789] cgroup: Unknown subsys name 'net'
[  189.397847][ T5789] cgroup: Unknown subsys name 'cpuset'
[  189.414370][ T5789] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[  195.771357][ T5789] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[  200.709898][ T5104] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  200.741019][ T5807] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  200.750588][ T5810] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  200.758708][ T5811] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  200.793847][ T5810] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  200.802434][ T5810] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  200.805525][ T5811] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  200.823883][ T5811] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  200.857840][ T5810] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  200.863178][ T5811] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  200.875025][ T5810] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  200.884660][ T5810] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  200.888938][ T5811] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  200.909772][ T5811] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  200.933206][ T5104] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  201.005058][ T5104] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  201.017467][ T5104] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  201.028247][ T5104] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  201.038676][ T5104] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  201.055583][ T5104] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  201.067344][ T5104] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  201.067381][   T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  201.078113][   T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  201.150031][   T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  201.202369][ T5810] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  202.450983][ T5805] chnl_net:caif_netlink_parms(): no params data found
[  202.897285][ T5810] Bluetooth: hci0: command tx timeout
[  202.967361][ T5810] Bluetooth: hci1: command tx timeout
[  203.028182][ T5809] chnl_net:caif_netlink_parms(): no params data found
[  203.047842][ T5810] Bluetooth: hci2: command tx timeout
[  203.309101][ T5815] chnl_net:caif_netlink_parms(): no params data found
[  203.332349][ T5813] chnl_net:caif_netlink_parms(): no params data found
[  203.378258][ T5810] Bluetooth: hci4: command tx timeout
[  203.383931][ T5811] Bluetooth: hci3: command tx timeout
[  203.670065][ T5816] chnl_net:caif_netlink_parms(): no params data found
[  203.791760][ T5805] bridge0: port 1(bridge_slave_0) entered blocking state
[  203.799445][ T5805] bridge0: port 1(bridge_slave_0) entered disabled state
[  203.807312][ T5805] bridge_slave_0: entered allmulticast mode
[  203.817203][ T5805] bridge_slave_0: entered promiscuous mode
[  203.905633][ T5805] bridge0: port 2(bridge_slave_1) entered blocking state
[  203.914099][ T5805] bridge0: port 2(bridge_slave_1) entered disabled state
[  203.921878][ T5805] bridge_slave_1: entered allmulticast mode
[  203.931545][ T5805] bridge_slave_1: entered promiscuous mode
[  204.287670][ T5805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  204.430877][ T5805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  204.513904][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state
[  204.521696][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state
[  204.529578][ T5809] bridge_slave_0: entered allmulticast mode
[  204.539214][ T5809] bridge_slave_0: entered promiscuous mode
[  204.606593][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state
[  204.614347][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state
[  204.622153][ T5815] bridge_slave_0: entered allmulticast mode
[  204.631896][ T5815] bridge_slave_0: entered promiscuous mode
[  204.689526][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state
[  204.697397][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state
[  204.705101][ T5809] bridge_slave_1: entered allmulticast mode
[  204.716368][ T5809] bridge_slave_1: entered promiscuous mode
[  204.770538][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state
[  204.778348][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state
[  204.786066][ T5815] bridge_slave_1: entered allmulticast mode
[  204.795736][ T5815] bridge_slave_1: entered promiscuous mode
[  204.968763][ T5811] Bluetooth: hci0: command tx timeout
[  204.993930][ T5805] team0: Port device team_slave_0 added
[  205.001137][ T5813] bridge0: port 1(bridge_slave_0) entered blocking state
[  205.008950][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state
[  205.016551][ T5813] bridge_slave_0: entered allmulticast mode
[  205.025737][ T5813] bridge_slave_0: entered promiscuous mode
[  205.067337][ T5811] Bluetooth: hci1: command tx timeout
[  205.091225][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  205.127448][ T5811] Bluetooth: hci2: command tx timeout
[  205.146083][ T5805] team0: Port device team_slave_1 added
[  205.163033][ T5809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  205.212085][ T5813] bridge0: port 2(bridge_slave_1) entered blocking state
[  205.221360][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state
[  205.229528][ T5813] bridge_slave_1: entered allmulticast mode
[  205.238419][ T5813] bridge_slave_1: entered promiscuous mode
[  205.259002][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  205.348441][ T5809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  205.447242][ T5811] Bluetooth: hci3: command tx timeout
[  205.452878][ T5811] Bluetooth: hci4: command tx timeout
[  205.546328][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_0
[  205.553598][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  205.580888][ T5805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  205.594298][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state
[  205.602081][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state
[  205.610302][ T5816] bridge_slave_0: entered allmulticast mode
[  205.619666][ T5816] bridge_slave_0: entered promiscuous mode
[  205.676733][ T5813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  205.722535][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_1
[  205.730039][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  205.756420][ T5805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  205.768832][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state
[  205.776359][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state
[  205.784236][ T5816] bridge_slave_1: entered allmulticast mode
[  205.794071][ T5816] bridge_slave_1: entered promiscuous mode
[  205.836319][ T5815] team0: Port device team_slave_0 added
[  205.850581][ T5813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  205.868859][ T5809] team0: Port device team_slave_0 added
[  205.889843][ T5809] team0: Port device team_slave_1 added
[  205.941049][ T5815] team0: Port device team_slave_1 added
[  206.184136][ T5813] team0: Port device team_slave_0 added
[  206.270187][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  206.282070][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_0
[  206.289292][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  206.315674][ T5809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  206.369430][ T5813] team0: Port device team_slave_1 added
[  206.387348][ T5805] hsr_slave_0: entered promiscuous mode
[  206.396413][ T5805] hsr_slave_1: entered promiscuous mode
[  206.416027][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  206.449331][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1
[  206.456437][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  206.483408][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  206.499150][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0
[  206.506284][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  206.532614][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  206.629409][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1
[  206.636565][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  206.663057][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  206.758632][ T5816] team0: Port device team_slave_0 added
[  206.786009][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_0
[  206.793601][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  206.819974][ T5813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  206.843056][ T5816] team0: Port device team_slave_1 added
[  206.948058][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_1
[  206.955135][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  206.981502][ T5813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  207.047413][ T5810] Bluetooth: hci0: command tx timeout
[  207.128341][ T5810] Bluetooth: hci1: command tx timeout
[  207.207418][ T5810] Bluetooth: hci2: command tx timeout
[  207.248391][ T5809] hsr_slave_0: entered promiscuous mode
[  207.258787][ T5809] hsr_slave_1: entered promiscuous mode
[  207.267667][ T5809] debugfs: 'hsr0' already exists in 'hsr'
[  207.273588][ T5809] Cannot create hsr debugfs directory
[  207.316032][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0
[  207.323455][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  207.349949][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  207.426612][ T5815] hsr_slave_0: entered promiscuous mode
[  207.436150][ T5815] hsr_slave_1: entered promiscuous mode
[  207.444785][ T5815] debugfs: 'hsr0' already exists in 'hsr'
[  207.450786][ T5815] Cannot create hsr debugfs directory
[  207.459834][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1
[  207.467058][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  207.493280][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  207.527470][ T5810] Bluetooth: hci4: command tx timeout
[  207.533104][ T5811] Bluetooth: hci3: command tx timeout
[  207.769951][ T5813] hsr_slave_0: entered promiscuous mode
[  207.780344][ T5813] hsr_slave_1: entered promiscuous mode
[  207.789017][ T5813] debugfs: 'hsr0' already exists in 'hsr'
[  207.794880][ T5813] Cannot create hsr debugfs directory
[  208.019037][ T5816] hsr_slave_0: entered promiscuous mode
[  208.029639][ T5816] hsr_slave_1: entered promiscuous mode
[  208.041897][ T5816] debugfs: 'hsr0' already exists in 'hsr'
[  208.047989][ T5816] Cannot create hsr debugfs directory
[  208.778294][ T5805] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  208.862953][ T5805] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  208.886106][ T5805] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  208.970872][ T5805] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  209.127563][ T5810] Bluetooth: hci0: command tx timeout
[  209.207576][ T5810] Bluetooth: hci1: command tx timeout
[  209.292842][ T5810] Bluetooth: hci2: command tx timeout
[  209.385202][ T5809] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  209.447543][ T5809] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  209.470249][ T5809] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  209.496664][ T5809] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  209.615835][ T5810] Bluetooth: hci4: command tx timeout
[  209.625414][ T5811] Bluetooth: hci3: command tx timeout
[  209.699542][ T5816] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  209.729737][ T5816] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  209.768910][ T5816] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  209.832565][ T5816] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  209.945744][ T5815] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  210.144337][ T5815] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  210.170843][ T5815] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  210.213953][ T5813] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  210.240837][ T5813] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  210.268899][ T5813] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  210.293298][ T5815] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  210.328681][ T5813] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  210.387783][ T5805] 8021q: adding VLAN 0 to HW filter on device bond0
[  210.621144][ T5805] 8021q: adding VLAN 0 to HW filter on device team0
[  210.706469][ T3656] bridge0: port 1(bridge_slave_0) entered blocking state
[  210.714142][ T3656] bridge0: port 1(bridge_slave_0) entered forwarding state
[  210.812777][ T3656] bridge0: port 2(bridge_slave_1) entered blocking state
[  210.820445][ T3656] bridge0: port 2(bridge_slave_1) entered forwarding state
[  211.278170][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0
[  211.355760][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0
[  211.519937][ T5809] 8021q: adding VLAN 0 to HW filter on device team0
[  211.586806][ T5816] 8021q: adding VLAN 0 to HW filter on device team0
[  211.667237][ T3695] bridge0: port 1(bridge_slave_0) entered blocking state
[  211.674807][ T3695] bridge0: port 1(bridge_slave_0) entered forwarding state
[  211.806256][ T5813] 8021q: adding VLAN 0 to HW filter on device bond0
[  211.858364][ T3695] bridge0: port 2(bridge_slave_1) entered blocking state
[  211.865898][ T3695] bridge0: port 2(bridge_slave_1) entered forwarding state
[  211.886681][ T3695] bridge0: port 1(bridge_slave_0) entered blocking state
[  211.894332][ T3695] bridge0: port 1(bridge_slave_0) entered forwarding state
[  211.919767][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0
[  211.987033][ T3695] bridge0: port 2(bridge_slave_1) entered blocking state
[  211.994562][ T3695] bridge0: port 2(bridge_slave_1) entered forwarding state
[  212.231075][ T5815] 8021q: adding VLAN 0 to HW filter on device team0
[  212.252296][ T5813] 8021q: adding VLAN 0 to HW filter on device team0
[  212.344605][ T3695] bridge0: port 1(bridge_slave_0) entered blocking state
[  212.352229][ T3695] bridge0: port 1(bridge_slave_0) entered forwarding state
[  212.523334][ T3695] bridge0: port 1(bridge_slave_0) entered blocking state
[  212.530994][ T3695] bridge0: port 1(bridge_slave_0) entered forwarding state
[  212.547588][ T3695] bridge0: port 2(bridge_slave_1) entered blocking state
[  212.555213][ T3695] bridge0: port 2(bridge_slave_1) entered forwarding state
[  212.571193][ T3695] bridge0: port 2(bridge_slave_1) entered blocking state
[  212.578801][ T3695] bridge0: port 2(bridge_slave_1) entered forwarding state
[  213.041729][ T5813] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  213.755754][ T5805] 8021q: adding VLAN 0 to HW filter on device batadv0
[  214.336795][ T5805] veth0_vlan: entered promiscuous mode
[  214.480946][ T5805] veth1_vlan: entered promiscuous mode
[  214.515919][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0
[  214.792114][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0
[  214.920492][ T5805] veth0_macvtap: entered promiscuous mode
[  215.004566][ T5805] veth1_macvtap: entered promiscuous mode
[  215.116263][ T5813] 8021q: adding VLAN 0 to HW filter on device batadv0
[  215.166112][ T5809] veth0_vlan: entered promiscuous mode
[  215.237569][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_0
[  215.296528][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_1
[  215.341927][ T5809] veth1_vlan: entered promiscuous mode
[  215.361051][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0
[  215.461867][   T58] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  215.547772][ T3991] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  215.556807][ T3991] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  215.646264][ T3991] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  215.722145][ T5809] veth0_macvtap: entered promiscuous mode
[  215.823433][ T5809] veth1_macvtap: entered promiscuous mode
[  215.942102][ T5813] veth0_vlan: entered promiscuous mode
[  216.057656][ T5815] veth0_vlan: entered promiscuous mode
[  216.124407][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0
[  216.175775][ T5813] veth1_vlan: entered promiscuous mode
[  216.199316][ T5815] veth1_vlan: entered promiscuous mode
[  216.231366][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1
[  216.384459][ T3656] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  216.446350][ T3656] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  216.510730][ T3656] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  216.571077][ T3656] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  216.641122][ T5813] veth0_macvtap: entered promiscuous mode
[  216.665632][ T5815] veth0_macvtap: entered promiscuous mode
[  216.720404][ T5813] veth1_macvtap: entered promiscuous mode
[  216.797357][ T5815] veth1_macvtap: entered promiscuous mode
[  216.939894][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0
[  217.031427][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1
[  217.065058][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0
[  217.150458][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1
[  217.224334][ T3858] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  217.279387][ T3858] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  217.340371][ T3858] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  217.401791][ T3858] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  217.451928][ T3858] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  217.496229][ T3858] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  217.568385][ T3858] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  217.622743][ T3858] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  218.131053][ T5816] veth0_vlan: entered promiscuous mode
[  218.251343][ T5816] veth1_vlan: entered promiscuous mode
[  218.556240][ T5816] veth0_macvtap: entered promiscuous mode
[  218.614519][ T5816] veth1_macvtap: entered promiscuous mode
[  218.822550][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0
[  218.963193][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1
[  219.060307][ T3695] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  219.097362][ T3695] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  219.106417][ T3695] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  219.187843][ T3695] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  222.664781][ T4335] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  222.675835][ T4335] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  222.927896][ T3585] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  222.935937][ T3585] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  223.325205][ T5805] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  223.581958][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  223.590942][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  223.613762][ T3858] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  223.621907][ T3858] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  223.921761][ T4335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  223.932411][ T4335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  224.064638][ T3587] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  224.073100][ T3587] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  224.285609][ T4079] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  224.293935][ T4079] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  224.399582][ T3695] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  224.407987][ T3695] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  224.793238][ T5990] loop1: detected capacity change from 0 to 4096
[  224.865616][ T5990] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512).
[  225.332913][   T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  225.341198][   T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  225.526578][ T5994] loop3: detected capacity change from 0 to 1024
[  225.563748][ T5994] =======================================================
[  225.563748][ T5994] WARNING: The mand mount option has been deprecated and
[  225.563748][ T5994]          and is ignored by this kernel. Remove the mand
[  225.563748][ T5994]          option from the mount to silence this warning.
[  225.563748][ T5994] =======================================================
[  225.822894][ T5994] hfsplus: bad catalog entry type
[  225.831647][   T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  225.839928][   T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  226.320176][ T4335] hfsplus: b-tree write err: -5, ino 4
[  228.219392][ T6019] netlink: 320 bytes leftover after parsing attributes in process `syz.0.13'.
[  228.378642][ T6022] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14'.
[  228.670284][ T6028] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14'.
[  228.679598][ T6028] nbd: device at index 64 is going down
[  228.724290][ T6027] loop1: detected capacity change from 0 to 512
[  228.805723][ T5985] udevd[5985]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  228.849038][ T6027] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  228.954729][ T5985] udevd[5985]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  229.028311][ T6027] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.16: iget: bad extended attribute block 851968
[  229.167806][ T6027] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.16: couldn't read orphan inode 15 (err -117)
[  229.248056][ T6027] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  229.975924][ T5805] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  230.649529][ T5865] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  230.798722][ T6053] netlink: 332 bytes leftover after parsing attributes in process `syz.4.24'.
[  230.847396][ T5865] usb 3-1: Using ep0 maxpacket: 32
[  230.874397][ T5865] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  230.886263][ T5865] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  230.896606][ T5865] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  230.913190][ T5865] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  230.934216][ T5865] usb 3-1: config 0 descriptor??
[  231.480094][ T5865] savu 0003:1E7D:2D5A.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0
[  231.665538][ T5865] usb 3-1: USB disconnect, device number 2
[  232.137421][ T5864] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  232.326098][ T5864] usb 1-1: too many configurations: 9, using maximum allowed: 8
[  232.372968][ T5864] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  232.382776][ T5864] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  232.394209][ T5864] usb 1-1: config 0 interface 0 has no altsetting 0
[  232.474862][ T5864] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  232.484384][ T5864] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  232.495826][ T5864] usb 1-1: config 0 interface 0 has no altsetting 0
[  232.564394][ T5864] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  232.576211][ T5864] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  232.587555][ T5864] usb 1-1: config 0 interface 0 has no altsetting 0
[  232.634627][ T6068] fido_id[6068]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  232.683450][ T5864] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  232.692861][ T5864] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  232.704306][ T5864] usb 1-1: config 0 interface 0 has no altsetting 0
[  232.808665][ T5864] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  232.819454][ T5864] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  232.830934][ T5864] usb 1-1: config 0 interface 0 has no altsetting 0
[  232.980981][ T5864] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  232.990458][ T5864] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  233.001751][ T5864] usb 1-1: config 0 interface 0 has no altsetting 0
[  233.130224][ T5864] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  233.139721][ T5864] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  233.151052][ T5864] usb 1-1: config 0 interface 0 has no altsetting 0
[  233.253480][ T5864] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  233.264635][ T5864] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  233.277219][ T5864] usb 1-1: config 0 interface 0 has no altsetting 0
[  233.316668][ T6080] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  233.359995][ T5864] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  233.371924][ T5864] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  233.381188][ T5864] usb 1-1: Product: syz
[  233.385562][ T5864] usb 1-1: Manufacturer: syz
[  233.390474][ T5864] usb 1-1: SerialNumber: syz
[  233.411364][ T5864] usb 1-1: config 0 descriptor??
[  233.452507][ T5864] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0
[  233.619462][ T6084] tmpfs: Cannot change global quota limit on remount
[  233.691914][ T5865] usb 1-1: USB disconnect, device number 2
[  233.744863][ T5865] yurex 1-1:0.0: USB YUREX #0 now disconnected
[  234.628737][ T6096] loop2: detected capacity change from 0 to 64
[  234.996617][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  235.008937][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  235.396123][ T5865] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  235.587358][ T5865] usb 4-1: Using ep0 maxpacket: 16
[  235.608326][    T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!!
[  235.668119][ T5865] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  235.668279][ T5865] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  235.668408][ T5865] usb 4-1: Product: syz
[  235.668511][ T5865] usb 4-1: Manufacturer: syz
[  235.668624][ T5865] usb 4-1: SerialNumber: syz
[  235.674235][ T5865] usb 4-1: config 0 descriptor??
[  235.725087][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  236.110098][    T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!!
[  236.117601][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  236.118938][ T5864] usb 4-1: USB disconnect, device number 2
[  236.178064][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  236.185737][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  236.248538][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  236.269110][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  236.271570][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  236.304990][ T5865] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  236.363970][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  236.458142][ T6041] udevd[6041]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  236.481514][ T5865] usb 3-1: Using ep0 maxpacket: 8
[  236.504583][ T5865] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  236.504758][ T5865] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  236.505093][ T5865] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  236.505255][ T5865] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  236.505473][ T5865] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  236.505622][ T5865] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  236.832061][ T5865] usb 3-1: GET_CAPABILITIES returned 2f
[  236.832227][ T5865] usbtmc 3-1:16.0: can't read capabilities
[  237.125428][ T5864] usb 3-1: USB disconnect, device number 3
[  237.417593][ T6114] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  237.910170][ T6118] Zero length message leads to an empty skb
[  238.848885][ T6125] netlink: 'syz.0.49': attribute type 39 has an invalid length.
[  238.871534][ T6125] bridge0: port 1(bridge_slave_0) entered disabled state
[  239.008318][ T6125] bridge_slave_0 (unregistering): left allmulticast mode
[  239.015525][ T6125] bridge_slave_0 (unregistering): left promiscuous mode
[  239.023402][ T6125] bridge0: port 1(bridge_slave_0) entered disabled state
[  241.395547][ T6149] loop3: detected capacity change from 0 to 4096
[  241.464435][ T6149] EXT4-fs: Ignoring removed mblk_io_submit option
[  241.525633][ T6149] EXT4-fs (loop3): Test dummy encryption mode enabled
[  241.639602][ T6149] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  242.254887][   T30] audit: type=1800 audit(1767853112.522:2): pid=6149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.54" name="file1" dev="loop3" ino=15 res=0 errno=0
[  243.145963][ T6163] loop0: detected capacity change from 0 to 736
[  243.172422][ T5809] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  244.046095][ T6163] rock: directory entry would overflow storage
[  244.058012][ T6163] rock: sig=0x3b10, size=4, remaining=3
[  248.601900][ T6208] loop1: detected capacity change from 0 to 1024
[  248.715255][ T6208] EXT4-fs: inline encryption not supported
[  248.727719][ T6208] EXT4-fs: Ignoring removed bh option
[  249.032886][ T6208] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  249.579625][ T5805] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  252.355080][ T6241] netlink: 4 bytes leftover after parsing attributes in process `syz.0.79'.
[  252.629641][ T5810] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  252.730640][ T5810] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  252.758108][ T5810] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  252.805196][ T5810] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  252.828439][ T5810] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  254.423548][ T6251] syz.1.85 uses obsolete (PF_INET,SOCK_PACKET)
[  254.513273][ T6252] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  255.007563][ T5810] Bluetooth: hci5: command tx timeout
[  255.402449][ T6260] loop1: detected capacity change from 0 to 1024
[  255.476067][ T6260] EXT4-fs: test_dummy_encryption requires encrypt feature
[  257.056599][ T5810] Bluetooth: hci5: command tx timeout
[  257.162128][ T6237] chnl_net:caif_netlink_parms(): no params data found
[  259.084717][ T6237] bridge0: port 1(bridge_slave_0) entered blocking state
[  259.093942][ T6237] bridge0: port 1(bridge_slave_0) entered disabled state
[  259.101743][ T6237] bridge_slave_0: entered allmulticast mode
[  259.110654][ T6237] bridge_slave_0: entered promiscuous mode
[  259.177157][ T5810] Bluetooth: hci5: command tx timeout
[  259.509913][ T6237] bridge0: port 2(bridge_slave_1) entered blocking state
[  259.517857][ T6237] bridge0: port 2(bridge_slave_1) entered disabled state
[  259.525676][ T6237] bridge_slave_1: entered allmulticast mode
[  259.535723][ T6237] bridge_slave_1: entered promiscuous mode
[  260.278239][ T6237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  260.649073][ T6237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  261.208302][ T5810] Bluetooth: hci5: command tx timeout
[  262.281269][ T6237] team0: Port device team_slave_0 added
[  262.425250][ T6237] team0: Port device team_slave_1 added
[  262.517149][ T6301] loop2: detected capacity change from 0 to 512
[  262.688224][ T6301] EXT4-fs (loop2): blocks per group (34) and clusters per group (32768) inconsistent
[  263.201068][ T6237] batman_adv: batadv0: Adding interface: batadv_slave_0
[  263.208403][ T6237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  263.234807][ T6237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  263.613183][ T6237] batman_adv: batadv0: Adding interface: batadv_slave_1
[  263.620550][ T6237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  263.647196][ T6237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  265.037909][ T6237] hsr_slave_0: entered promiscuous mode
[  265.048716][ T6237] hsr_slave_1: entered promiscuous mode
[  265.058397][ T6237] debugfs: 'hsr0' already exists in 'hsr'
[  265.064265][ T6237] Cannot create hsr debugfs directory
[  265.530705][ T6314] loop3: detected capacity change from 0 to 64
[  265.712015][ T6316] loop0: detected capacity change from 0 to 1024
[  266.599004][ T6318] loop3: detected capacity change from 0 to 2048
[  268.017461][ T6318] loop3: detected capacity change from 0 to 8192
[  268.641284][ T6237] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  268.809390][ T6237] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  268.893955][ T6237] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  269.068403][ T6237] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  271.077144][ T6337] loop3: detected capacity change from 0 to 256
[  271.104816][ T6339] loop0: detected capacity change from 0 to 64
[  272.710584][ T6345] loop0: detected capacity change from 0 to 1024
[  273.597873][ T6237] 8021q: adding VLAN 0 to HW filter on device bond0
[  273.748640][ T6237] 8021q: adding VLAN 0 to HW filter on device team0
[  273.850971][ T1153] bridge0: port 1(bridge_slave_0) entered blocking state
[  273.858440][ T1153] bridge0: port 1(bridge_slave_0) entered forwarding state
[  273.871544][ T1153] bridge0: port 2(bridge_slave_1) entered blocking state
[  273.879003][ T1153] bridge0: port 2(bridge_slave_1) entered forwarding state
[  276.226326][ T6237] 8021q: adding VLAN 0 to HW filter on device batadv0
[  276.758147][ T6366] syz.1.123 (6366): /proc/6364/oom_adj is deprecated, please use /proc/6364/oom_score_adj instead.
[  278.919974][ T6384] loop2: detected capacity change from 0 to 64
[  279.404079][ T6237] veth0_vlan: entered promiscuous mode
[  279.530170][ T6237] veth1_vlan: entered promiscuous mode
[  280.132331][ T6391] hfs: request for non-existent node 131072 in B*Tree
[  280.139659][ T6391] hfs: request for non-existent node 131072 in B*Tree
[  280.183679][ T6237] veth0_macvtap: entered promiscuous mode
[  280.248283][ T6382] ref_ctr going negative. vaddr: 0x80ffc002, curr val: -29824, delta: 1
[  280.256992][ T6382] ref_ctr increment failed for inode: 0xa8 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88810005e200
[  280.332535][ T6237] veth1_macvtap: entered promiscuous mode
[  280.962409][ T6396] loop1: detected capacity change from 0 to 128
[  281.146574][ T6237] batman_adv: batadv0: Interface activated: batadv_slave_0
[  281.363387][ T6237] batman_adv: batadv0: Interface activated: batadv_slave_1
[  281.604128][ T3656] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  281.674782][ T3656] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  281.783304][ T3656] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  281.918655][ T3656] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  283.083560][ T6407] loop2: detected capacity change from 0 to 2048
[  284.938793][ T6427] loop1: detected capacity change from 0 to 64
[  285.159984][ T6427] hfs: request for non-existent node 131072 in B*Tree
[  285.167097][ T6427] hfs: request for non-existent node 131072 in B*Tree
[  285.456502][ T6426] loop3: detected capacity change from 0 to 2048
[  286.141033][ T6432] loop1: detected capacity change from 0 to 128
[  288.700947][ T6448] ref_ctr going negative. vaddr: 0x80ffc002, curr val: -29824, delta: 1
[  288.709765][ T6448] ref_ctr increment failed for inode: 0xd7 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88811d50cd00
[  290.392300][ T6456] loop3: detected capacity change from 0 to 4096
[  292.072594][ T6471] loop1: detected capacity change from 0 to 64
[  292.316109][ T6467] loop0: detected capacity change from 0 to 1024
[  292.844697][ T6474] loop3: detected capacity change from 0 to 128
[  292.928284][ T6471] hfs: request for non-existent node 131072 in B*Tree
[  292.935346][ T6471] hfs: request for non-existent node 131072 in B*Tree
[  294.900332][ T6484] ref_ctr going negative. vaddr: 0x80ffc002, curr val: -29824, delta: 1
[  294.916407][ T6484] ref_ctr increment failed for inode: 0xe8 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88810005a300
[  295.751836][ T4467] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  295.760044][ T4467] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  295.789718][ T3991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  295.797980][ T3991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  296.050957][ T6487] loop1: detected capacity change from 0 to 2048
[  296.438057][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  296.449478][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  297.822408][ T6487] loop1: detected capacity change from 0 to 8192
[  298.988860][ T6505] loop0: detected capacity change from 0 to 128
[  299.069647][ T6501] loop3: detected capacity change from 0 to 4096
[  300.784657][ T6509] loop1: detected capacity change from 0 to 1024
[  303.130485][ T6522] ref_ctr going negative. vaddr: 0x80ffc002, curr val: -29824, delta: 1
[  303.139116][ T6522] ref_ctr increment failed for inode: 0xfe offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88811d50bf00
[  305.093897][ T6534] loop5: detected capacity change from 0 to 2048
[  306.234116][ T6542] loop3: detected capacity change from 0 to 1024
[  306.921909][ T6534] loop5: detected capacity change from 0 to 8192
[  307.020442][ T6540] loop0: detected capacity change from 0 to 4096
[  309.331182][ T6556] loop3: detected capacity change from 0 to 64
[  310.145396][ T6553] loop1: detected capacity change from 0 to 8192
[  310.312515][ T6553] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  310.652325][ T3656] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  311.113012][ T3656] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  311.139863][ T6564] ref_ctr going negative. vaddr: 0x80ffc002, curr val: -29824, delta: 1
[  311.148675][ T6564] ref_ctr increment failed for inode: 0x10a offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88810005db00
[  311.502865][ T3656] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  311.690586][ T3656] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  312.727482][ T3656] bridge_slave_1: left allmulticast mode
[  312.733648][ T3656] bridge_slave_1: left promiscuous mode
[  312.741423][ T3656] bridge0: port 2(bridge_slave_1) entered disabled state
[  312.971903][ T3656] bridge_slave_0: left allmulticast mode
[  312.977907][ T3656] bridge_slave_0: left promiscuous mode
[  312.984212][ T3656] bridge0: port 1(bridge_slave_0) entered disabled state
[  313.899066][ T3656] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  313.927261][ T3656] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  313.945326][ T3656] bond0 (unregistering): Released all slaves
[  314.234234][ T6583] loop5: detected capacity change from 0 to 1024
[  314.826293][ T3656] hsr_slave_0: left promiscuous mode
[  314.852752][ T3656] hsr_slave_1: left promiscuous mode
[  314.863721][ T3656] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  314.871475][ T3656] batman_adv: batadv0: Removing interface: batadv_slave_0
[  315.086715][ T3656] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  315.094846][ T3656] batman_adv: batadv0: Removing interface: batadv_slave_1
[  315.252725][ T3656] veth1_macvtap: left promiscuous mode
[  315.258732][ T3656] veth0_macvtap: left promiscuous mode
[  315.264530][ T3656] veth1_vlan: left promiscuous mode
[  315.270479][ T3656] veth0_vlan: left promiscuous mode
[  316.493155][ T6589] loop1: detected capacity change from 0 to 2048
[  317.096576][ T3656] team0 (unregistering): Port device team_slave_1 removed
[  317.148195][ T5864] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  317.250695][ T3656] team0 (unregistering): Port device team_slave_0 removed
[  317.417564][ T5864] usb 1-1: Using ep0 maxpacket: 16
[  317.708158][ T5864] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  317.718769][ T5864] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0
[  317.728853][ T5864] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023
[  319.141310][ T5864] usb 1-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47
[  319.150852][ T5864] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  319.159191][ T5864] usb 1-1: Product: syz
[  319.163479][ T5864] usb 1-1: Manufacturer: syz
[  319.168366][ T5864] usb 1-1: SerialNumber: syz
[  319.324384][ T5864] usb 1-1: config 0 descriptor??
[  319.334423][ T6600] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  319.456755][ T5864] mcba_usb 1-1:0.0 can0: failed tx_urb -90
[  319.463415][ T5864] mcba_usb 1-1:0.0 can0: Failed to send cmd (169)
[  319.470624][ T5864] mcba_usb 1-1:0.0 can0: failed tx_urb -90
[  319.476793][ T5864] mcba_usb 1-1:0.0 can0: Failed to send cmd (169)
[  319.487524][ T5864] mcba_usb 1-1:0.0: Microchip CAN BUS Analyzer connected
[  319.658781][ T5864] usb 1-1: USB disconnect, device number 3
[  319.668436][ T5864] mcba_usb 1-1:0.0 can0: device disconnected
[  323.993473][ T6644] loop1: detected capacity change from 0 to 1024
[  324.099842][ T6633] Bluetooth: hci0: command 0x0406 tx timeout
[  324.100949][ T5807] Bluetooth: hci4: command 0x0406 tx timeout
[  324.110405][ T6633] Bluetooth: hci1: command 0x0406 tx timeout
[  324.119566][   T50] Bluetooth: hci2: command 0x0406 tx timeout
[  324.161220][ T6648] loop0: detected capacity change from 0 to 2048
[  324.436240][ T6655] netlink: 'syz.5.215': attribute type 39 has an invalid length.
[  325.570952][ T6648] loop0: detected capacity change from 0 to 8192
[  328.611166][ T5811] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  328.628487][ T5811] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  328.639645][ T5811] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  328.670437][ T5811] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  328.702045][ T5811] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  330.808753][ T5811] Bluetooth: hci3: command tx timeout
[  331.224635][ T6705] loop0: detected capacity change from 0 to 1024
[  331.894536][ T6682] chnl_net:caif_netlink_parms(): no params data found
[  332.899138][ T5811] Bluetooth: hci3: command tx timeout
[  333.183693][ T6722] loop2: detected capacity change from 0 to 2048
[  334.495116][ T6722] loop2: detected capacity change from 0 to 8192
[  334.937164][ T6732] loop0: detected capacity change from 0 to 512
[  334.967376][ T5811] Bluetooth: hci3: command tx timeout
[  335.127723][ T6732] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  335.552996][ T6732] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.233: iget: bad extended attribute block 851968
[  335.788898][ T6732] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.233: couldn't read orphan inode 15 (err -117)
[  335.803110][ T6682] bridge0: port 1(bridge_slave_0) entered blocking state
[  335.810880][ T6682] bridge0: port 1(bridge_slave_0) entered disabled state
[  335.818989][ T6682] bridge_slave_0: entered allmulticast mode
[  335.828186][ T6682] bridge_slave_0: entered promiscuous mode
[  335.885752][ T6732] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  336.052658][ T6682] bridge0: port 2(bridge_slave_1) entered blocking state
[  336.060944][ T6682] bridge0: port 2(bridge_slave_1) entered disabled state
[  336.068741][ T6682] bridge_slave_1: entered allmulticast mode
[  336.084448][ T6682] bridge_slave_1: entered promiscuous mode
[  336.439404][ T6682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  336.460913][ T5813] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  336.538087][ T6682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  336.954596][ T6682] team0: Port device team_slave_0 added
[  337.029509][ T6682] team0: Port device team_slave_1 added
[  337.047287][ T5811] Bluetooth: hci3: command tx timeout
[  337.450712][ T6682] batman_adv: batadv0: Adding interface: batadv_slave_0
[  337.457924][ T6682] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  337.484342][ T6682] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  337.525632][ T6682] batman_adv: batadv0: Adding interface: batadv_slave_1
[  337.533970][ T6682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  337.561211][ T6682] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  337.952029][ T6748] loop1: detected capacity change from 0 to 1024
[  338.213726][ T6682] hsr_slave_0: entered promiscuous mode
[  338.231471][ T6682] hsr_slave_1: entered promiscuous mode
[  338.239740][ T6682] debugfs: 'hsr0' already exists in 'hsr'
[  338.245593][ T6682] Cannot create hsr debugfs directory
[  339.650240][ T6682] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  339.835910][ T6682] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  339.948260][ T6682] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  340.030101][ T6682] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  341.556445][ T6777] loop1: detected capacity change from 0 to 512
[  341.641951][ T6777] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  341.774368][ T6682] 8021q: adding VLAN 0 to HW filter on device bond0
[  341.845117][ T6777] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.246: iget: bad extended attribute block 851968
[  342.050988][ T6682] 8021q: adding VLAN 0 to HW filter on device team0
[  342.104247][ T6779] loop0: detected capacity change from 0 to 2048
[  342.140780][ T6777] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.246: couldn't read orphan inode 15 (err -117)
[  342.176760][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state
[  342.184407][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state
[  342.300273][ T6777] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  342.350264][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state
[  342.357889][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state
[  343.043663][ T6779] loop0: detected capacity change from 0 to 512
[  343.153241][ T6779] EXT4-fs: Ignoring removed nobh option
[  343.159917][ T6779] ext4: Unknown parameter 'volume'
[  344.561535][ T5805] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  345.957773][   T30] audit: type=1326 audit(1767853216.282:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6806 comm="syz.5.253" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000
[  346.182715][ T6807] loop0: detected capacity change from 0 to 1024
[  346.328475][   T30] audit: type=1326 audit(1767853216.492:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6806 comm="syz.5.253" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000
[  346.350658][   T30] audit: type=1326 audit(1767853216.582:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6806 comm="syz.5.253" exe="/root/syz-executor" sig=0 arch=40000003 syscall=321 compat=1 ip=0xf709d539 code=0x7ffc0000
[  346.372969][   T30] audit: type=1326 audit(1767853216.582:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6806 comm="syz.5.253" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000
[  346.395040][   T30] audit: type=1326 audit(1767853216.582:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6806 comm="syz.5.253" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000
[  346.420529][   T30] audit: type=1326 audit(1767853216.592:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6806 comm="syz.5.253" exe="/root/syz-executor" sig=0 arch=40000003 syscall=439 compat=1 ip=0xf709d539 code=0x7ffc0000
[  346.444081][   T30] audit: type=1326 audit(1767853216.592:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6806 comm="syz.5.253" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000
[  346.466204][   T30] audit: type=1326 audit(1767853216.622:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6806 comm="syz.5.253" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000
[  347.140750][ T6820] Bluetooth: MGMT ver 1.23
[  348.692534][ T5865] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[  348.810315][ T6682] 8021q: adding VLAN 0 to HW filter on device batadv0
[  348.920204][ T5865] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  348.930853][ T5865] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[  348.940184][ T5865] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  348.950097][ T5865] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  349.025908][ T5865] usb 2-1: config 0 descriptor??
[  349.154693][ T5865] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  349.161966][ T5865] dvb-usb: bulk message failed: -22 (3/0)
[  349.201201][ T5865] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  349.266042][ T6834] loop2: detected capacity change from 0 to 512
[  349.310839][ T6829] dibusb: i2c wr: len=61 is too big!
[  349.310839][ T6829] 
[  349.359929][ T5865] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  349.369973][ T5865] usb 2-1: media controller created
[  349.411089][ T5865] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  349.539578][ T5865] dvb-usb: bulk message failed: -22 (6/0)
[  349.545814][ T5865] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  349.632454][ T5865] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input5
[  349.738912][ T5865] dvb-usb: schedule remote query interval to 150 msecs.
[  349.745997][ T5865] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  349.825743][ T6834] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  349.899699][  T912] dvb-usb: bulk message failed: -22 (1/0)
[  349.905681][  T912] dvb-usb: error while querying for an remote control event.
[  349.925600][ T5865] usb 2-1: USB disconnect, device number 2
[  350.118786][ T5865] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  350.667912][ T6834] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.260: iget: bad extended attribute block 851968
[  350.865581][ T6834] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.260: couldn't read orphan inode 15 (err -117)
[  351.159295][ T6834] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  351.902979][ T5815] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  353.850391][ T6682] veth0_vlan: entered promiscuous mode
[  353.965195][ T6682] veth1_vlan: entered promiscuous mode
[  354.002795][ T6865] loop1: detected capacity change from 0 to 1024
[  354.306452][ T6682] veth0_macvtap: entered promiscuous mode
[  354.348763][ T6682] veth1_macvtap: entered promiscuous mode
[  354.555845][ T6682] batman_adv: batadv0: Interface activated: batadv_slave_0
[  354.646495][ T6682] batman_adv: batadv0: Interface activated: batadv_slave_1
[  354.729855][ T6867] loop0: detected capacity change from 0 to 2048
[  354.821020][   T87] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  354.852109][ T6867] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  354.862527][ T6867] NILFS (loop0): mounting unchecked fs
[  354.893126][   T87] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  354.961859][   T87] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  355.021761][ T4079] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  355.203497][ T6867] NILFS (loop0): recovery complete
[  355.354715][ T6877] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  357.183811][ T6894] loop2: detected capacity change from 0 to 512
[  357.212440][ T6889] loop5: detected capacity change from 0 to 2048
[  357.389773][ T6894] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  357.470029][ T6889] EXT4-fs: Ignoring removed mblk_io_submit option
[  357.670602][ T6894] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.274: iget: bad extended attribute block 851968
[  357.740377][ T6894] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.274: couldn't read orphan inode 15 (err -117)
[  357.879280][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  357.888971][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  357.930150][ T6894] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  358.008870][ T6889] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  359.038611][ T5815] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  359.797909][ T6237] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  361.768546][ T6924] loop0: detected capacity change from 0 to 1024
[  362.661168][ T6937] loop5: detected capacity change from 0 to 64
[  363.217938][ T6937] hfs: request for non-existent node 131072 in B*Tree
[  363.224965][ T6937] hfs: request for non-existent node 131072 in B*Tree
[  363.692647][ T6946] loop2: detected capacity change from 0 to 512
[  363.785363][ T6946] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  363.903272][ T6946] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.285: iget: bad extended attribute block 851968
[  364.048095][ T6946] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.285: couldn't read orphan inode 15 (err -117)
[  364.132817][ T6946] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  365.745718][ T5815] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  366.819019][ T6959] loop0: detected capacity change from 0 to 4096
[  366.931981][ T6959] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512).
[  367.781645][ T6959] ntfs3(loop0): ino=1d, mi_enum_attr
[  367.788976][ T6959] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  367.855378][ T6976] loop5: detected capacity change from 0 to 1024
[  367.884297][ T6959] ntfs3(loop0): ino=1d, mi_enum_attr
[  367.892543][ T6959] ntfs3(loop0): ino=1d, "file1" mi_enum_attr
[  368.276240][ T6981] loop1: detected capacity change from 0 to 64
[  368.574966][ T6981] hfs: request for non-existent node 131072 in B*Tree
[  368.582064][ T6981] hfs: request for non-existent node 131072 in B*Tree
[  372.393352][ T7007] loop0: detected capacity change from 0 to 512
[  372.754937][ T7007] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  373.113275][ T7007] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.302: iget: bad extended attribute block 851968
[  373.167577][ T7007] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.302: couldn't read orphan inode 15 (err -117)
[  373.268879][ T7007] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  373.981588][ T5813] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  374.327696][ T5863] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  374.457621][ T7023] loop5: detected capacity change from 0 to 64
[  374.932763][ T7013] loop1: detected capacity change from 0 to 8192
[  374.977391][ T1153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  374.990006][ T1153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  375.061424][ T5863] usb 3-1: Using ep0 maxpacket: 16
[  375.102513][ T5863] usb 3-1: config 0 interface 0 has no altsetting 0
[  375.109687][ T5863] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  375.119236][ T5863] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  375.147936][ T7027] loop0: detected capacity change from 0 to 1024
[  375.225304][ T3585] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  375.233401][ T3585] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  375.287731][ T5811] Bluetooth: hci5: command 0x0406 tx timeout
[  375.421326][ T7023] hfs: request for non-existent node 131072 in B*Tree
[  375.428681][ T7023] hfs: request for non-existent node 131072 in B*Tree
[  375.679576][ T5863] usb 3-1: config 0 descriptor??
[  376.335718][ T7020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  376.346802][ T7020] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  376.848496][ T5863] hid (null): invalid report_size -266181755
[  376.854777][ T5863] hid (null): global environment stack underflow
[  377.628505][ T5863] usb 3-1: USB disconnect, device number 4
[  378.350480][ T5865] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  378.585874][ T5865] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  378.595527][ T5865] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  378.689310][ T5865] usb 1-1: config 0 descriptor??
[  378.730797][ T5865] cp210x 1-1:0.0: cp210x converter detected
[  379.155089][ T5865] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32
[  379.427307][ T5865] usb 1-1: cp210x converter now attached to ttyUSB0
[  379.830087][ T5865] usb 1-1: USB disconnect, device number 4
[  379.982506][ T5865] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  380.144065][ T5865] cp210x 1-1:0.0: device disconnected
[  381.291830][ T7062] loop0: detected capacity change from 0 to 64
[  381.324997][ T7060] loop1: detected capacity change from 0 to 512
[  381.544152][ T7060] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  381.722605][ T7060] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.316: iget: bad extended attribute block 851968
[  381.817620][ T7060] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.316: couldn't read orphan inode 15 (err -117)
[  381.908698][ T7060] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  383.724968][ T5805] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  383.815986][ T7078] loop0: detected capacity change from 0 to 1024
[  384.184687][ T7070] loop5: detected capacity change from 0 to 8192
[  387.663107][ T3695] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  388.143021][ T3695] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  388.361040][ T3695] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  388.871812][ T3695] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  389.462140][ T3695] bridge_slave_1: left allmulticast mode
[  389.468680][ T3695] bridge_slave_1: left promiscuous mode
[  389.474995][ T3695] bridge0: port 2(bridge_slave_1) entered disabled state
[  390.565400][ T3695] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  390.609103][ T3695] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  390.626030][ T3695] bond0 (unregistering): Released all slaves
[  391.386504][ T3695] hsr_slave_0: left promiscuous mode
[  391.424126][ T3695] hsr_slave_1: left promiscuous mode
[  391.434635][ T3695] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  391.442585][ T3695] batman_adv: batadv0: Removing interface: batadv_slave_0
[  391.604859][ T3695] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  391.612910][ T3695] batman_adv: batadv0: Removing interface: batadv_slave_1
[  391.853790][ T3695] veth1_macvtap: left promiscuous mode
[  391.859648][ T3695] veth0_macvtap: left promiscuous mode
[  391.865543][ T3695] veth1_vlan: left promiscuous mode
[  391.871287][ T3695] veth0_vlan: left promiscuous mode
[  392.089912][ T7122] loop6: detected capacity change from 0 to 2048
[  392.782633][ T7130] loop1: detected capacity change from 0 to 1024
[  393.580563][   T30] audit: type=1800 audit(1767853263.862:11): pid=7130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.334" name="file2" dev="loop1" ino=21 res=0 errno=0
[  393.630789][ T3695] team0 (unregistering): Port device team_slave_1 removed
[  393.781665][ T3695] team0 (unregistering): Port device team_slave_0 removed
[  394.231428][ T7122] loop6: detected capacity change from 0 to 8192
[  394.375979][ T5811] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  394.387405][ T5811] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  394.403425][ T5811] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  394.538594][ T5811] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  394.564379][ T5811] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  395.319171][ T5860] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[  395.592614][ T5860] usb 6-1: config index 0 descriptor too short (expected 63186, got 210)
[  395.601793][ T5860] usb 6-1: config 0 has an invalid interface number: 106 but max is 0
[  395.610560][ T5860] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  395.621066][ T5860] usb 6-1: config 0 has no interface number 0
[  395.627540][ T5860] usb 6-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  395.637772][ T5860] usb 6-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  395.648002][ T5860] usb 6-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[  395.661499][ T5860] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb
[  395.675582][ T5860] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  395.757766][  T912] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  396.177156][  T912] usb 2-1: Using ep0 maxpacket: 16
[  396.212552][ T5860] usb 6-1: config 0 descriptor??
[  396.234830][  T912] usb 2-1: no configurations
[  396.242349][  T912] usb 2-1: can't read configurations, error -22
[  396.371199][ T5860] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  396.456054][ T5860] usb 6-1: USB disconnect, device number 2
[  396.477667][ T3695] usb 6-1: Failed to submit usb control message: -71
[  396.484660][ T3695] usb 6-1: unable to send the bmi data to the device: -71
[  396.497516][ T3695] usb 6-1: unable to get target info from device
[  396.504015][ T3695] usb 6-1: could not get target info (-71)
[  396.512193][ T3695] usb 6-1: could not probe fw (-71)
[  396.523432][  T912] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  396.718929][  T912] usb 2-1: Using ep0 maxpacket: 16
[  396.762893][  T912] usb 2-1: no configurations
[  396.767856][  T912] usb 2-1: can't read configurations, error -22
[  396.808000][ T5810] Bluetooth: hci2: command tx timeout
[  396.827922][  T912] usb usb2-port1: attempt power cycle
[  397.217939][  T912] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  397.314088][  T912] usb 2-1: Using ep0 maxpacket: 16
[  397.362426][  T912] usb 2-1: no configurations
[  397.368714][  T912] usb 2-1: can't read configurations, error -22
[  397.630698][  T912] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  397.673792][  T912] usb 2-1: Using ep0 maxpacket: 16
[  397.698570][  T912] usb 2-1: no configurations
[  397.703405][  T912] usb 2-1: can't read configurations, error -22
[  397.786389][  T912] usb usb2-port1: unable to enumerate USB device
[  398.178597][ T7138] chnl_net:caif_netlink_parms(): no params data found
[  398.815513][ T7159] ref_ctr going negative. vaddr: 0x80ffc002, curr val: -29824, delta: 1
[  398.824317][ T7159] ref_ctr increment failed for inode: 0x39 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88803361f000
[  398.887412][ T5810] Bluetooth: hci2: command tx timeout
[  400.739515][ T7138] bridge0: port 1(bridge_slave_0) entered blocking state
[  400.747668][ T7138] bridge0: port 1(bridge_slave_0) entered disabled state
[  400.755443][ T7138] bridge_slave_0: entered allmulticast mode
[  400.764934][ T7138] bridge_slave_0: entered promiscuous mode
[  400.900625][ T7138] bridge0: port 2(bridge_slave_1) entered blocking state
[  400.910845][ T7138] bridge0: port 2(bridge_slave_1) entered disabled state
[  400.918790][ T7138] bridge_slave_1: entered allmulticast mode
[  400.927794][ T7138] bridge_slave_1: entered promiscuous mode
[  400.967301][ T5810] Bluetooth: hci2: command tx timeout
[  401.603076][ T7138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  401.781017][ T7138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  401.955267][ T7194] loop2: detected capacity change from 0 to 2048
[  402.399319][ T7138] team0: Port device team_slave_0 added
[  402.444465][ T7138] team0: Port device team_slave_1 added
[  403.048032][ T5810] Bluetooth: hci2: command tx timeout
[  403.078861][ T7138] batman_adv: batadv0: Adding interface: batadv_slave_0
[  403.086005][ T7138] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  403.112462][ T7138] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  403.287327][ T5864] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  403.352583][ T7138] batman_adv: batadv0: Adding interface: batadv_slave_1
[  403.359948][ T7138] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  403.386340][ T7138] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  403.591074][ T5864] usb 7-1: Using ep0 maxpacket: 16
[  403.625482][ T5864] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  403.636132][ T5864] usb 7-1: config 0 has no interfaces?
[  403.843965][ T5864] usb 7-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  403.853453][ T5864] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  403.864623][ T5864] usb 7-1: Product: syz
[  403.869981][ T5864] usb 7-1: Manufacturer: syz
[  403.874803][ T5864] usb 7-1: SerialNumber: syz
[  403.958617][ T5864] usb 7-1: config 0 descriptor??
[  403.978855][ T7194] loop2: detected capacity change from 0 to 8192
[  404.224759][ T5864] usb 7-1: USB disconnect, device number 2
[  404.617390][ T7138] hsr_slave_0: entered promiscuous mode
[  404.627201][ T7138] hsr_slave_1: entered promiscuous mode
[  404.635635][ T7138] debugfs: 'hsr0' already exists in 'hsr'
[  404.641712][ T7138] Cannot create hsr debugfs directory
[  404.928689][ T3981] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  405.283774][ T3981] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  405.694625][ T3981] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  406.117563][ T3981] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  406.886467][ T7224] loop1: detected capacity change from 0 to 64
[  407.126279][ T3981] bridge_slave_1: left allmulticast mode
[  407.132526][ T3981] bridge_slave_1: left promiscuous mode
[  407.143038][ T3981] bridge0: port 2(bridge_slave_1) entered disabled state
[  407.186790][ T3981] bridge_slave_0: left allmulticast mode
[  407.194921][ T3981] bridge_slave_0: left promiscuous mode
[  407.201921][ T3981] bridge0: port 1(bridge_slave_0) entered disabled state
[  408.236649][ T3981] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  408.341007][ T3981] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  408.402712][ T3981] bond0 (unregistering): Released all slaves
[  408.587250][ T7239] capability: warning: `syz.1.366' uses deprecated v2 capabilities in a way that may be insecure
[  408.954263][ T7242] loop5: detected capacity change from 0 to 2048
[  409.763397][ T3981] hsr_slave_0: left promiscuous mode
[  409.827599][ T3981] hsr_slave_1: left promiscuous mode
[  409.836052][ T3981] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  409.844014][ T3981] batman_adv: batadv0: Removing interface: batadv_slave_0
[  409.973755][ T3981] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  409.981960][ T3981] batman_adv: batadv0: Removing interface: batadv_slave_1
[  410.012765][ T3981] veth1_macvtap: left promiscuous mode
[  410.020172][ T3981] veth0_macvtap: left promiscuous mode
[  410.026531][ T3981] veth1_vlan: left promiscuous mode
[  410.032385][ T3981] veth0_vlan: left promiscuous mode
[  410.703382][ T7254] ref_ctr going negative. vaddr: 0x80ffc002, curr val: -29824, delta: 1
[  410.715221][ T7254] ref_ctr increment failed for inode: 0x1bd offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88811d50d400
[  411.223199][ T3981] team0 (unregistering): Port device team_slave_1 removed
[  411.320134][ T3981] team0 (unregistering): Port device team_slave_0 removed
[  411.711801][ T7138] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  411.853886][ T7258] netlink: 12 bytes leftover after parsing attributes in process `syz.1.373'.
[  411.938687][ T7138] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  411.979573][ T7138] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  412.042252][ T7138] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  412.719275][ T7267] loop2: detected capacity change from 0 to 64
[  412.961155][ T7268] loop6: detected capacity change from 0 to 1024
[  413.187350][ T5863] usb 2-1: new full-speed USB device number 7 using dummy_hcd
[  413.482630][ T5863] usb 2-1: config 1 has an invalid interface number: 105 but max is 0
[  413.494160][ T5863] usb 2-1: config 1 has no interface number 0
[  413.501198][ T5863] usb 2-1: config 1 interface 105 has no altsetting 0
[  413.744193][ T7138] 8021q: adding VLAN 0 to HW filter on device bond0
[  413.754284][ T5863] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=31.6d
[  413.764776][ T5863] usb 2-1: New USB device strings: Mfr=107, Product=102, SerialNumber=146
[  413.773639][ T5863] usb 2-1: Product: syz
[  413.778373][ T5863] usb 2-1: Manufacturer: syz
[  413.783200][ T5863] usb 2-1: SerialNumber: syz
[  414.116154][ T7138] 8021q: adding VLAN 0 to HW filter on device team0
[  414.270109][ T5863] aqc111 2-1:1.105: probe with driver aqc111 failed with error -71
[  414.305737][ T4467] bridge0: port 1(bridge_slave_0) entered blocking state
[  414.313343][ T4467] bridge0: port 1(bridge_slave_0) entered forwarding state
[  414.390032][ T5863] usb 2-1: USB disconnect, device number 7
[  414.416985][ T4467] bridge0: port 2(bridge_slave_1) entered blocking state
[  414.424525][ T4467] bridge0: port 2(bridge_slave_1) entered forwarding state
[  416.826594][ T1153] hfsplus: b-tree write err: -5, ino 4
[  417.099380][ T7138] 8021q: adding VLAN 0 to HW filter on device batadv0
[  418.574061][ T7309] ref_ctr going negative. vaddr: 0x80ffc002, curr val: -29824, delta: 1
[  418.582821][ T7309] ref_ctr increment failed for inode: 0x69 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88811d50aa00
[  419.294528][ T7318] loop5: detected capacity change from 0 to 4096
[  419.318355][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  419.329177][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  419.582670][ T7328] loop6: detected capacity change from 0 to 256
[  419.627178][ T7318] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  419.676783][ T7328] exfat: Deprecated parameter 'utf8'
[  419.682838][ T7328] exfat: Deprecated parameter 'namecase'
[  419.693382][ T7328] exfat: Deprecated parameter 'namecase'
[  419.699551][ T7328] exfat: Deprecated parameter 'utf8'
[  419.740725][ T7328] exFAT-fs (loop6): invalid fs_name
[  419.746257][ T7328] exFAT-fs (loop6): failed to read boot sector
[  419.752852][ T7328] exFAT-fs (loop6): failed to recognize exfat type
[  420.047656][ T7318] ntfs3(loop5): ino=1a, mi_enum_attr
[  420.053507][ T7318] ntfs3(loop5): ino=1a, mi_enum_attr
[  420.060648][ T7318] ntfs3(loop5): Failed to initialize $Extend/$Reparse.
[  420.268374][ T7318] ntfs3(loop5): ino=5, "/" indx_read
[  420.467950][ T7138] veth0_vlan: entered promiscuous mode
[  420.597043][ T7138] veth1_vlan: entered promiscuous mode
[  420.998728][ T7138] veth0_macvtap: entered promiscuous mode
[  421.079166][ T7138] veth1_macvtap: entered promiscuous mode
[  421.340879][ T7138] batman_adv: batadv0: Interface activated: batadv_slave_0
[  421.460535][ T7138] batman_adv: batadv0: Interface activated: batadv_slave_1
[  421.603752][ T3656] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  421.688739][ T3991] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  421.785630][   T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  421.827648][   T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  423.241411][ T7353] syzkaller0: entered promiscuous mode
[  423.247380][ T7353] syzkaller0: entered allmulticast mode
[  425.139182][ T7371] veth1_to_bridge: entered promiscuous mode
[  425.155363][ T7371] veth1_to_bridge: left promiscuous mode
[  427.026211][ T7392] loop5: detected capacity change from 0 to 1024
[  427.079606][ T7392] EXT4-fs: Ignoring removed orlov option
[  427.260020][ T7392] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  427.868681][ T6237] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  429.538150][ T7423] ref_ctr going negative. vaddr: 0x80ffc002, curr val: -29824, delta: 1
[  429.547056][ T7423] ref_ctr increment failed for inode: 0x155 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff888033619500
[  430.852705][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  430.861270][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  431.114309][ T1139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  431.122663][ T1139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  432.364243][ T7449] loop7: detected capacity change from 0 to 1024
[  435.156431][ T7469] loop7: detected capacity change from 0 to 1024
[  436.432016][ T7478] netlink: 28 bytes leftover after parsing attributes in process `syz.6.425'.
[  436.441366][ T7478] netlink: 28 bytes leftover after parsing attributes in process `syz.6.425'.
[  436.467715][ T7478] syz_tun: entered promiscuous mode
[  436.595706][ T7478] syz_tun: left promiscuous mode
[  438.025617][ T7497] loop7: detected capacity change from 0 to 1024
[  438.787414][ T5864] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  439.008715][ T5864] usb 7-1: Using ep0 maxpacket: 8
[  439.064904][ T5864] usb 7-1: config 0 has an invalid interface number: 56 but max is 0
[  439.073870][ T5864] usb 7-1: config 0 has no interface number 0
[  439.135574][ T5864] usb 7-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64
[  439.145721][ T5864] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  439.154266][ T5864] usb 7-1: Product: syz
[  439.158841][ T5864] usb 7-1: Manufacturer: syz
[  439.163663][ T5864] usb 7-1: SerialNumber: syz
[  439.174644][ T5864] usb 7-1: config 0 descriptor??
[  439.211259][ T5864] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state.
[  439.219874][ T5864] pctv452e: pctv452e_power_ctrl: 1
[  439.219874][ T5864] 
[  439.227815][ T5864] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22
[  439.227815][ T5864] 
[  439.238807][ T5864] dvb-usb: bulk message failed: -22 (5/0)
[  439.451018][ T5864] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  439.461783][ T7503] dvb-usb: bulk message failed: -22 (7/0)
[  439.467984][ T7503] pctv452e: I2C error -22; AA 01  00 00 00 -> aa 01 31 03 00 00 00
[  439.510602][ T5864] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600)
[  439.519405][ T5864] usb 7-1: media controller created
[  439.524939][ T5864] dvb-usb: bulk message failed: -22 (8/0)
[  439.531255][ T5864] pctv452e: I2C error -22; AA 02  A0 01 14 -> aa 02 31 04 a0 01 14
[  439.540210][ T5864] dvb-usb: MAC address reading failed.
[  439.762356][ T5864] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  440.918094][ T5864] DVB: Unable to find symbol stb0899_attach()
[  440.924368][ T5864] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600'
[  441.571540][ T5864] rc_core: IR keymap rc-tt-1500 not found
[  441.577721][ T5864] Registered IR keymap rc-empty
[  441.585931][ T5864] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0
[  441.600345][ T5864] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0/input6
[  441.790253][ T5864] dvb-usb: schedule remote query interval to 100 msecs.
[  441.797679][ T5864] pctv452e: pctv452e_power_ctrl: 0
[  441.797679][ T5864] 
[  441.805259][ T5864] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected.
[  441.908089][ T5863] dvb-usb: bulk message failed: -22 (4/0)
[  441.914111][ T5863] dvb-usb: error -22 while querying for an remote control event.
[  442.016352][ T5864] usb 7-1: USB disconnect, device number 3
[  442.460698][ T5864] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected.
[  442.697189][ T5863] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  442.861520][ T7545] netlink: 348 bytes leftover after parsing attributes in process `syz.6.448'.
[  442.929566][ T5863] usb 8-1: config index 0 descriptor too short (expected 65323, got 119)
[  442.938747][ T5863] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  442.949581][ T5863] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[  442.958905][ T5863] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  443.121483][ T7544] loop2: detected capacity change from 0 to 1024
[  443.222429][ T5863] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  443.232078][ T5863] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  443.241203][ T5863] usb 8-1: Product: syz
[  443.245592][ T5863] usb 8-1: Manufacturer: syz
[  443.250671][ T5863] usb 8-1: SerialNumber: syz
[  443.738783][ T5863] usb 8-1: 0:2 : does not exist
[  443.887579][ T5863] usb 8-1: USB disconnect, device number 2
[  444.147771][ T7113] udevd[7113]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  447.118081][ T7582] netlink: 348 bytes leftover after parsing attributes in process `syz.2.460'.
[  447.655567][ T7585] loop6: detected capacity change from 0 to 1024
[  447.955398][ T7590] loop1: detected capacity change from 0 to 512
[  448.129062][ T7590] EXT4-fs (loop1): 1 truncate cleaned up
[  448.153143][ T7590] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  448.901007][ T5805] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  450.387667][    T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  450.517268][  T912] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  450.607289][    T9] usb 3-1: Using ep0 maxpacket: 8
[  450.633643][    T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  450.645622][    T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  450.663079][    T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  450.677002][    T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  450.690569][    T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  450.699966][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  450.747271][  T912] usb 6-1: Using ep0 maxpacket: 16
[  450.820206][  T912] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  450.829730][  T912] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  450.838353][  T912] usb 6-1: Product: syz
[  450.842714][  T912] usb 6-1: Manufacturer: syz
[  450.847586][  T912] usb 6-1: SerialNumber: syz
[  450.930457][  T912] usb 6-1: config 0 descriptor??
[  451.227702][  T912] usb 6-1: USB disconnect, device number 3
[  451.248004][    T9] usb 3-1: GET_CAPABILITIES returned 2f
[  451.254085][    T9] usbtmc 3-1:16.0: can't read capabilities
[  451.298332][ T7624] netlink: 348 bytes leftover after parsing attributes in process `syz.7.474'.
[  451.481582][    T9] usb 3-1: USB disconnect, device number 5
[  451.520995][ T7113] udevd[7113]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  451.968916][ T7627] netlink: 72 bytes leftover after parsing attributes in process `syz.1.475'.
[  452.097742][ T5811] Bluetooth: hci3: command 0x0406 tx timeout
[  452.360375][ T7631] warning: `syz.7.476' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  452.758814][ T7634] loop6: detected capacity change from 0 to 1024
[  452.790022][ T7636] loop5: detected capacity change from 0 to 256
[  453.104178][ T7636] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  453.393649][ T7636] exFAT-fs (loop5): valid_size(150994954) is greater than size(10)
[  453.432499][   T30] audit: type=1800 audit(1767853323.752:12): pid=7636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.478" name="file1" dev="loop5" ino=1048624 res=0 errno=0
[  454.369910][ T7648] netlink: 28 bytes leftover after parsing attributes in process `syz.2.481'.
[  455.238354][ T7658] netlink: 328 bytes leftover after parsing attributes in process `syz.1.486'.
[  455.345076][ T5863] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  455.500416][ T5864] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  455.537789][ T5863] usb 7-1: Using ep0 maxpacket: 32
[  455.620502][ T5863] usb 7-1: config 0 has an invalid interface number: 255 but max is 0
[  455.629342][ T5863] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  455.639996][ T5863] usb 7-1: config 0 has no interface number 0
[  455.646324][ T5863] usb 7-1: config 0 interface 255 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 6
[  455.660115][ T5863] usb 7-1: config 0 interface 255 has no altsetting 0
[  455.667325][ T5863] usb 7-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.00
[  455.680075][ T5863] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  455.808184][ T5864] usb 3-1: Using ep0 maxpacket: 16
[  455.840153][ T5864] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  455.849741][ T5864] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  455.858338][ T5864] usb 3-1: Product: syz
[  455.862706][ T5864] usb 3-1: Manufacturer: syz
[  455.867711][ T5864] usb 3-1: SerialNumber: syz
[  455.939994][ T5863] usb 7-1: config 0 descriptor??
[  455.953820][ T5864] usb 3-1: config 0 descriptor??
[  455.996038][ T7665] netlink: 72 bytes leftover after parsing attributes in process `syz.5.489'.
[  456.025509][ T5863] usbhid 7-1:0.255: couldn't find an input interrupt endpoint
[  456.280804][ T5864] usb 3-1: USB disconnect, device number 6
[  456.448792][    T9] usb 7-1: USB disconnect, device number 4
[  456.532763][ T5985] udevd[5985]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  458.115314][ T5458] =====================================================
[  458.124743][ T5458] BUG: KMSAN: kernel-infoleak in _copy_to_iter+0xef3/0x33f0
[  458.136320][ T5458]  _copy_to_iter+0xef3/0x33f0
[  458.142614][ T5458]  __skb_datagram_iter+0x196/0x12c0
[  458.149072][ T5458]  skb_copy_datagram_iter+0x5b/0x1e0
[  458.154599][ T5458]  netlink_recvmsg+0x4bb/0xfe0
[  458.159691][ T5458]  sock_recvmsg+0x2df/0x390
[  458.164469][ T5458]  ____sys_recvmsg+0x193/0x610
[  458.169616][ T5458]  ___sys_recvmsg+0x20b/0x850
[  458.174512][ T5458]  __x64_sys_recvmsg+0x20e/0x3d0
[  458.179843][ T5458]  x64_sys_call+0x38b7/0x3e70
[  458.184655][ T5458]  do_syscall_64+0xd3/0xf80
[  458.189446][ T5458]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  458.195526][ T5458] 
[  458.197968][ T5458] Uninit was stored to memory at:
[  458.203194][ T5458]  pskb_expand_head+0x310/0x15d0
[  458.208450][ T5458]  netlink_trim+0x3a3/0x450
[  458.213177][ T5458]  netlink_broadcast_filtered+0x80/0x28f0
[  458.219299][ T5458]  nlmsg_notify+0x15b/0x2f0
[  458.224078][ T5458]  rtnl_notify+0xba/0x100
[  458.228733][ T5458]  wireless_nlevent_process+0xfe/0x290
[  458.238387][ T5458]  process_scheduled_works+0xb91/0x1d80
[  458.244206][ T5458]  worker_thread+0xedf/0x1590
[  458.250487][ T5458]  kthread+0xd5c/0xf00
[  458.254794][ T5458]  ret_from_fork+0x208/0x710
[  458.259706][ T5458]  ret_from_fork_asm+0x1a/0x30
[  458.264705][ T5458] 
[  458.267204][ T5458] Uninit was stored to memory at:
[  458.272551][ T5458]  wireless_send_event+0x652/0x1540
[  458.278210][ T5458]  ioctl_standard_iw_point+0x12b0/0x13f0
[  458.284087][ T5458]  compat_standard_call+0x188/0x4c0
[  458.289642][ T5458]  wext_ioctl_dispatch+0x192/0x7a0
[  458.295151][ T5458]  compat_wext_handle_ioctl+0x1a1/0x300
[  458.301054][ T5458]  compat_sock_ioctl+0x20c/0xff0
[  458.306241][ T5458]  __ia32_compat_sys_ioctl+0x7f9/0x1270
[  458.312124][ T5458]  ia32_sys_call+0x25d9/0x4340
[  458.317204][ T5458]  __do_fast_syscall_32+0x154/0x320
[  458.322632][ T5458]  do_fast_syscall_32+0x38/0x80
[  458.327955][ T5458]  do_SYSENTER_32+0x1f/0x30
[  458.332682][ T5458]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  458.344642][ T5458] 
[  458.348472][ T5458] Local variable iwp created at:
[  458.353527][ T5458]  compat_standard_call+0x4a/0x4c0
[  458.359022][ T5458]  wext_ioctl_dispatch+0x192/0x7a0
[  458.364351][ T5458] 
[  458.367537][ T5458] Bytes 60-63 of 64 are uninitialized
[  458.373325][ T5458] Memory access of size 64 starts at ffff8881183ec000
[  458.380228][ T5458] Data copied to user address 00007ffe7d4a8260
[  458.386442][ T5458] 
[  458.389658][ T5458] CPU: 1 UID: 101 PID: 5458 Comm: dhcpcd Not tainted syzkaller #0 PREEMPT(none) 
[  458.399615][ T5458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  458.409867][ T5458] =====================================================
[  458.417001][ T5458] Disabling lock debugging due to kernel taint
[  458.423279][ T5458] Kernel panic - not syncing: kmsan.panic set ...
[  458.429858][ T5458] CPU: 1 UID: 101 PID: 5458 Comm: dhcpcd Tainted: G    B               syzkaller #0 PREEMPT(none) 
[  458.440747][ T5458] Tainted: [B]=BAD_PAGE
[  458.445016][ T5458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  458.455223][ T5458] Call Trace:
[  458.458641][ T5458]  <TASK>
[  458.461689][ T5458]  __dump_stack+0x26/0x30
[  458.466230][ T5458]  dump_stack_lvl+0x50/0x1c0
[  458.470945][ T5458]  ? dump_stack+0x12/0x25
[  458.475396][ T5458]  dump_stack+0x1e/0x25
[  458.479673][ T5458]  vpanic+0x435/0xd30
[  458.483797][ T5458]  panic+0x15d/0x160
[  458.487842][ T5458]  kmsan_report+0x31c/0x320
[  458.492486][ T5458]  ? kmsan_internal_check_memory+0x1e1/0x230
[  458.498592][ T5458]  ? kmsan_copy_to_user+0xf1/0x190
[  458.503879][ T5458]  ? _copy_to_iter+0xef3/0x33f0
[  458.508972][ T5458]  ? __skb_datagram_iter+0x196/0x12c0
[  458.514561][ T5458]  ? skb_copy_datagram_iter+0x5b/0x1e0
[  458.520240][ T5458]  ? netlink_recvmsg+0x4bb/0xfe0
[  458.525419][ T5458]  ? sock_recvmsg+0x2df/0x390
[  458.530209][ T5458]  ? ____sys_recvmsg+0x193/0x610
[  458.535272][ T5458]  ? ___sys_recvmsg+0x20b/0x850
[  458.540255][ T5458]  ? __x64_sys_recvmsg+0x20e/0x3d0
[  458.545584][ T5458]  ? x64_sys_call+0x38b7/0x3e70
[  458.550658][ T5458]  ? do_syscall_64+0xd3/0xf80
[  458.555554][ T5458]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  458.561820][ T5458]  ? kernel_text_address+0x10e/0x1a0
[  458.567326][ T5458]  ? kmsan_get_metadata+0xfb/0x160
[  458.572676][ T5458]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  458.578726][ T5458]  ? kmsan_get_metadata+0xfb/0x160
[  458.584081][ T5458]  ? kmsan_internal_set_shadow_origin+0x7a/0x110
[  458.590554][ T5458]  ? kmsan_internal_unpoison_memory+0x14/0x20
[  458.596763][ T5458]  ? _raw_spin_unlock_irqrestore+0x3f/0x60
[  458.602763][ T5458]  ? kmsan_get_metadata+0xfb/0x160
[  458.608095][ T5458]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  458.614054][ T5458]  kmsan_internal_check_memory+0x1e1/0x230
[  458.620015][ T5458]  kmsan_copy_to_user+0xf1/0x190
[  458.625087][ T5458]  _copy_to_iter+0xef3/0x33f0
[  458.629901][ T5458]  ? kmsan_internal_set_shadow_origin+0x7a/0x110
[  458.636380][ T5458]  ? kmsan_get_metadata+0xfb/0x160
[  458.641666][ T5458]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  458.647714][ T5458]  ? kmsan_get_metadata+0xfb/0x160
[  458.653060][ T5458]  ? kmsan_internal_set_shadow_origin+0x7a/0x110
[  458.659629][ T5458]  __skb_datagram_iter+0x196/0x12c0
[  458.664973][ T5458]  ? __pfx_simple_copy_to_iter+0x10/0x10
[  458.670787][ T5458]  skb_copy_datagram_iter+0x5b/0x1e0
[  458.676202][ T5458]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  458.682155][ T5458]  netlink_recvmsg+0x4bb/0xfe0
[  458.687079][ T5458]  ? aa_sock_msg_perm+0x284/0x2e0
[  458.692285][ T5458]  ? __pfx_netlink_recvmsg+0x10/0x10
[  458.697728][ T5458]  sock_recvmsg+0x2df/0x390
[  458.702360][ T5458]  ____sys_recvmsg+0x193/0x610
[  458.707255][ T5458]  ? __pfx_should_fail_ex+0x10/0x10
[  458.712606][ T5458]  ___sys_recvmsg+0x20b/0x850
[  458.717467][ T5458]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  458.723480][ T5458]  ? kmsan_get_metadata+0xfb/0x160
[  458.728733][ T5458]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  458.734694][ T5458]  __x64_sys_recvmsg+0x20e/0x3d0
[  458.739813][ T5458]  ? kmsan_get_metadata+0xfb/0x160
[  458.745098][ T5458]  x64_sys_call+0x38b7/0x3e70
[  458.749994][ T5458]  do_syscall_64+0xd3/0xf80
[  458.754720][ T5458]  ? clear_bhb_loop+0x40/0x90
[  458.759598][ T5458]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  458.765654][ T5458] RIP: 0033:0x7f9572398407
[  458.770154][ T5458] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  458.789879][ T5458] RSP: 002b:00007ffe7d4a8150 EFLAGS: 00000202 ORIG_RAX: 000000000000002f
[  458.798427][ T5458] RAX: ffffffffffffffda RBX: 00007f957230e740 RCX: 00007f9572398407
[  458.806527][ T5458] RDX: 0000000000000040 RSI: 00007ffe7d4a81d0 RDI: 0000000000000009
[  458.814581][ T5458] RBP: 000055b1d0352aa0 R08: 0000000000000000 R09: 0000000000000000
[  458.822636][ T5458] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000009
[  458.830687][ T5458] R13: 00007ffe7d4ac330 R14: 0000000000000000 R15: 00007ffe7d4ac320
[  458.838776][ T5458]  </TASK>
[  458.842524][ T5458] Kernel Offset: disabled
[  458.847014][ T5458] Rebooting in 86400 seconds..