last executing test programs:

7m41.986717204s ago: executing program 32 (id=560):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
ioprio_set$pid(0x3, 0x0, 0x0)
r0 = syz_open_procfs(0x0, 0x0)
preadv(r0, &(0x7f0000000040), 0x0, 0x1000000, 0xd)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
listen(0xffffffffffffffff, 0x0)
shmctl$SHM_LOCK(0xffffffffffffffff, 0xb)
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, 0x0)
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000200)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, &(0x7f00000002c0)={0xc, r3})
ioctl$IOMMU_VFIO_SET_IOMMU(r2, 0x3b66, 0x1)
ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r2, 0x3b72, 0x0)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000010)
userfaultfd(0x80001)

7m34.710229857s ago: executing program 33 (id=596):
socket(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls}, 0x43)

6m54.799130353s ago: executing program 34 (id=708):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x120)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_route(0x10, 0x3, 0x0)
bind$rds(0xffffffffffffffff, 0x0, 0x0)
mount(&(0x7f0000000100)=@md0, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='virtiofs\x00', 0x5, 0x0)

5m46.763814714s ago: executing program 35 (id=858):
mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000001400)='.\x00', 0x0, 0x800, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$unix(0x1, 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00')
mount(0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$inet(0x2, 0x1, 0x0)
listen(r2, 0x0)
futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, 0x0, 0x0)
write(r3, &(0x7f0000000000)="2e000300010000", 0x7)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0)

5m3.535015121s ago: executing program 36 (id=959):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
write$ppp(0xffffffffffffffff, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
gettid()
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x28, 0x3e, 0x107, 0xfffffffe, 0xfffffffd, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x20, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)

4m55.447425296s ago: executing program 37 (id=982):
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
io_uring_setup(0x4355b, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000040)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r2})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000180)={0x28, 0x4, r2, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7})

4m51.583152077s ago: executing program 38 (id=988):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f00000004c0)=ANY=[@ANYBLOB='iocharset=maciceland,gid=', @ANYRESHEX=0x0, @ANYBLOB="009b09c3f8", @ANYRESDEC, @ANYBLOB=',errors=continue,fmask=00000000000000000177777,time_offset=0x0000000000000005,namecase=1,iocharset=iso8859-7,utf8,errors=continue,\x00'], 0x1, 0x152d, &(0x7f0000001f80)="$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")
mkdir(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0)
arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x3)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x208050, &(0x7f0000000c40)={[{@dioread_nolock}, {@norecovery}, {@resgid}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@grpid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@grpid}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@subj_user={'subj_user', 0x3d, '('}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '\xf3\xdeE\xf8+U.Fv1\xcc\x92\x00#9=\x19b\xd9\x12PEj\xb4e\x13\x17V:\xda\xd9\xf2g\x8e\x7f\x95\x80N\xf92\xb1\xb1\x01\xf2g(\x9e$\x17\x13(h;q\xb0\x8b\x9f\x94\a\xc4\n\xbd^\xe8\x90\xfd\xb6r\xe9\x9e\xf58\xba\xd0\xa1\'k\xc7\xdf.\xf3\x85\xcd\xc7\xdeq\x06\xb0H\xff\x93\xf4\xe4\xcf\xbf\xce_\xc4\xd0\xfa\x8c[0+6z\x10\x84\x00\xd2iJ7\xf6\x9aI[!*\xcf\x03\xc28\x0f\xb0\xd3\xd09$\xef?:\xe9\r\xcd\xc1\xc6)\xb3v\x81\xb1(;\xdcH\x8b'}}, {@euid_gt}]}, 0xfd, 0x588, &(0x7f0000000680)="$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")

4m17.665124045s ago: executing program 39 (id=1022):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x40, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
socket$inet6(0xa, 0x3, 0x8)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)={0x14, 0x3e, 0x1, 0x7fffc, 0x4, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000040), 0x0}, 0x20)
syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x800, &(0x7f0000000480)=ANY=[@ANYRES32=0x0, @ANYRES8, @ANYRES16, @ANYRES16, @ANYRES16], 0x1, 0x1cf, &(0x7f0000000780)="$eJzKKC4sZmdgYPj7sSaZQYABDBgZeBguMDAysDAwMKgzQsQYmCDUeij/BZSeCZW2gfKbofRCKF1xS3vdmlN+Z0566motk2VmaPXUlkcWk0vtMXKTXMwjwcwQmnpkUbEQQ3ZiTk5qUfFChopbyUkVp08wsFy3v6bSLMHp8EeewyFJ00GH6YiPR9aMxhLOSVKaYmxsmQpnz3yQX8emcYTh0QrmjXWeeY11halT8xrykqqyqrLmTZy4cWZjZ2Pjyol1UWl+qxhbUlw2NXUyMjlsURPYzGyoPslGe8K79lUPkxxYezz8mk8ZK71OZb5kvLBI6tSKqpkTvijNZjT8znCHp2yFhIaGk8QVCYsGE0Ymhv8NriAnpjQwpCmEMSapsYm1bTkzJ4SZn81tgUJL8gmm0KMcS2dKWBwQqjr501LzrUOi24xtTx3YzvAcPs6zpqBP0Oi4BIPTQsH/MiBjEhoayjTWMi21XfClSOOvhNdqY6cMBnd7pmWwAGVpAJEroTxZsJ6E5BUeOpqaRinJCQ2bJBKS3AoMXzJs3cO5WqCBASnaVBgYGLYzwuIWAq7BGKNgFIyCUTAKRsEoGAWjYBSMglEwCkYEAAQAAP//+UiYTQ==")

4m4.813436184s ago: executing program 40 (id=1033):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce)
socket$nl_rdma(0x10, 0x3, 0x14)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002a80)=""/102400, 0x19000)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
listen(r1, 0x1)
getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, 0x0, &(0x7f00000001c0))

3m56.054145739s ago: executing program 41 (id=1039):
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00'})
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "7f00ef", 0xc, 0x2c, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast2, {[], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
openat$rfkill(0xffffffffffffff9c, 0x0, 0x80000, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000", @ANYRES16, @ANYBLOB="01160700000000000025020000000800010003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a017f7f00000000000000050000000900010073797a30000000000900030073797a300000000008000a400000000328000480080002400000001208000140000000000d0003"], 0xac}}, 0x0)

3m35.686218472s ago: executing program 42 (id=1054):
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x4, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x88100, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2092)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$SNDCTL_TMR_TEMPO(r2, 0xc0045405, &(0x7f0000000040)=0x2b)
ioctl$SNDCTL_TMR_START(r2, 0x5402)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000004b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000006800000000000064512c5f530d85e700000000000054006e"], 0x1c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000022c0)=ANY=[@ANYBLOB="1c0000006a0001012dbd7000fddbdf250200000000000000040009009278267b384d9d59683dd8b8147008719457f55adcc04b9d93ba07f5146bdd8caa0fcd28ff52781f430bc3fe195d329061e8ab5c35a84170596d462011f6675c56b856b2906cac770fd85565f209c5d01d6e4bf61701cc2e34f0b728f9dd8f47fe8ebd9d7646c27307a697a1a203001400000000"], 0x1c}}, 0x0)
ppoll(&(0x7f0000002200)=[{r1}], 0x1, &(0x7f0000002240)={0x0, 0x3938700}, 0x0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2)
socket$inet6_tcp(0xa, 0x1, 0x0)

3m22.556418148s ago: executing program 0 (id=1076):
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x3200c00, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x3, 0xa73, &(0x7f0000003cc0)="$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")
pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfdef, 0xfecc)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2002, 0x0)

3m20.960630193s ago: executing program 0 (id=1078):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x304}, "0300", "95670cff05e29ee8dcfc54e13b2dd711", "fdffb26f", "a2deb79f8c96bff4"}, 0x28)
setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000880)=0x3, 0x4)

3m18.764121802s ago: executing program 0 (id=1080):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
geteuid()

3m17.683874871s ago: executing program 0 (id=1081):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, 0x0, 0x440a4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x3c, r4, 0x211, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x3c}}, 0x0)

3m16.344448596s ago: executing program 0 (id=1082):
syz_usb_connect(0x2, 0x3f, &(0x7f0000000140)={{0x12, 0x1, 0x250, 0x38, 0xe2, 0xaa, 0x8, 0x2b73, 0x17, 0xa20e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x2, 0xdb, 0x4, 0x80, 0xe6, [{{0x9, 0x4, 0x0, 0x4, 0x0, 0xff, 0x9e, 0x4d, 0x5}}, {{0x9, 0x4, 0x0, 0x2, 0x2, 0xe2, 0xa5, 0xc6, 0xa, [], [{{0x9, 0x5, 0x4, 0x4, 0x8, 0x9, 0x2, 0x9}}, {{0x9, 0x5, 0x5, 0x0, 0x10, 0x10, 0xf8, 0x7}}]}}]}}]}}, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0})

3m12.473278548s ago: executing program 0 (id=1085):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x100)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000)
clock_settime(0x1ed5d7403, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x9f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)

3m5.439106961s ago: executing program 43 (id=1077):
r0 = socket$alg(0x26, 0x5, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58)
r2 = accept4(r0, 0x0, 0x0, 0x0)
recvmmsg$unix(r2, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0)

3m2.78461312s ago: executing program 5 (id=1100):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$UHID_INPUT(r0, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0)
rseq(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0)

2m58.880166168s ago: executing program 5 (id=1101):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
preadv(r0, &(0x7f0000000740)=[{0x0}], 0x1, 0x6, 0x7)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'rose0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r2], 0x20}}, 0x0)

2m58.26952913s ago: executing program 7 (id=1102):
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
ioctl$RTC_UIE_ON(r0, 0x7003)
ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000240)={0x1, 0x1, {0xa, 0x2e, 0x4, 0x4, 0x2, 0xfe3, 0x0, 0x151, 0xffffffffffffffff}})

2m57.412647121s ago: executing program 7 (id=1103):
syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000200)='./file0\x00', 0x10, &(0x7f0000000480)=ANY=[], 0x5, 0xa5a, &(0x7f0000001b40)="$eJzs3U1sHFcBAOA3a6/z22ZTHGrS0CYU2vJTu3FM+ImAVM2FqKm4Vaq4RElaIpyASCVI1UOSEzdaVeHK76mX8qNK5IKinrhUopG49FQ4cCAKUiUO0JC48vq99e7zbmbt2J6s9/uk2bdv3tt9b3ZnZmdn5r0XgKFVaz7OzEwUIVy+8saRfz32zy0hXBlfzNFoPo62xeohhCLGR7P3+2BkIbz14asnuoVFmG4+pnh47kbrtdtCCBfC3nA1NMLuy9def3f62WMXj17a996bh66vzdIDAMBw+c7VQzO7/v7Xh3Z+9NbDh8Om1vx0fN6I8e3xuP9wPPBPx/+10Bkv2qZ2Y1m+0TjVsnwjXfK1l1PP8o32KH8se996j3ybSsofaZvXbblhkKX1uBGK2mRHvFabnFz4Tx6a/+vHismzp2dfPFdRRYFV959HQgh7Taahny42N4jq67Gu09yOqvdAAAvy64VLXMjPLNyd1ruN9lf+jadr3V8Pq2C913/lD1b5v71oj8Pq2ahrU1qutB1tj/G26whnQpf7l/Ltby5/42z7T++XX4+o91nPXtcRBuX6Qq96jqxzPVaqV/3z9WKj+kYM0+fwzSy9ffvJv9NB+Y6B7v7r/L/JNLTTkuPbO8jvlQE2tvy+ubkopef39eXpm0rSN5ekbylJ39qRa2n6tpLXwzD748s/C68Vi//z8//0yz0fns6z3RfD+5dZn/x85HLLH7tDbD3Kd4zEIPnT8edPffXkC9cW7v8vWuv/7bi+743xRtyarsYM6Xxhfl69de9/o7OcWo98D2T1ua9L/ubz8c58xfji+4S2/cySekx0vm5Hr3x7OvM1snxb4rQ5q29+fLI1e106/kj71fR5jWbLW8+WYyyrR9qv7IxhXg9YibQ+9rr/P62fE6FevHh69tRTMZ7W07+M1DfNz99fXtTvVrvuwN3pt/3PROhs/7O9Nb9ea98v7FicX7TvFxrZ/Oke8w/EePqd+97Ilub8yRM/mD252gsPQ+7c+Ve+f3x29tSPPPHEE09aT6reMwFrberlMz+cOnf+lSdPnzn+0qmXTp09cPDggenpg187MDPVPK6faj+6BzaSxR/9qmsCAAAAAAAAAAAA9OvHR49c+9s7X3l/of3/Yvu/1P4/3fmb2v//tFho615rmx+6jAOY2gHu7JLezJN1sDqW5avH6RNZfcezcnZlr/tkDFvj+MX2/6m4vF/XVJ8Hs/l5/70pX9adwJL+UsayXkfy8QI/E8NLMfx1gAoVW7rPjmFZ/9ZpXU/9UyyjX4ruBVOJ9L2lLyX1Y5Laf/fq1ynt/3euQx1ZfevRnLDqZQS6+/cQ9//dPHZZw/f/zf3VL+Pm3mmbqq6bqfppbs4oHsC9oerxP9N5zxSe/fO3N89PKduNpzv3l3n/pXA37vXxJ5W/scb/bI1/19f+7+bS0RMaKyv3f7+4/n5bsWF3v/vffPlTP9DjeQl3PhP90Xz5NxcX5fHQX/lzv8rKzy8I9elmXP70+W/ts/wly7+nrKTzb3eb+/9YfvrYnni03/IXalzUOuuRnzdO1//y88bJrWz5T650+Vc4UOPtWD4Ms0EZZ3a5+hj/t6ls/N8lVnn8317y+zC+HONpR5juc8hHOFlm/VuR9DuwK3v/ouT3zfi/g+3rMSzbHtL4v2l9bHSJ19ri9S6f7Ubd18Cg+uDevf63+ENVfV1M/X5f1dfDtIxpbm5ubU9olai0cCr//Kv+n1B1+VV//mXy8X/zY/h8/N88PR//N0/Px//N0/Px9fL0rVl6/nnm4//m6Q9m75uPDzyR/cHO0z9V8vrdJekPlaTvKUn/dEn6vpL0h0vSHylJf6Ak/dGS9M+WpH+uJP2xkvQnStI/X5K+0aX2KMO6/DDM8vZ5tn8YHql9ba/tf7wkHRhcP39r/zMv/OG7jYX2/2Ot8yHpOt7hGK/H/84/ifH8undoi8+nvRPj/8jS7/XzHTBM8v4z8t/3x0vSgcGV7vOyfcMQKrq3k+i336pex/kMli/E8Isx/FIMn4zhZAynYrg/htPrVD/WxjO/f/vQa8Xi//0dWXq/95Pn7YHyfqIO9Fmf/PzAcu/Hz/vxW667LX+FzcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAqU2s+zsxMFCFcvvLGkeePnZ6an/OtVo5G83G0LVZvvS6Ep2I4EsNfxie3Pnz1RHt4O4ZFmA5FKFrzw3M3WiVtCyFcCHvD1dAIuy9fe/3d6WePXTx6ad97bx66vnafAAAAAGx8HwcAAP//V88c0Q==")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x80186e84, &(0x7f0000000080)={@desc={0x40002, 0x0, @desc1}})

2m57.41220446s ago: executing program 5 (id=1104):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_vlan\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = gettid()
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x403, 0xfffffffd, 0x25dfdbfe, {0x0, 0x0, 0x74, r1, 0x19c04, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r3}]}, 0x28}, 0x1, 0x0, 0x0, 0x4802}, 0x854)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0, 0x0)
r4 = socket$inet(0xa, 0x801, 0x84)
readv(r4, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)}, 0x20044880)

2m57.068433112s ago: executing program 44 (id=1085):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x100)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000)
clock_settime(0x1ed5d7403, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x9f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)

2m55.879851406s ago: executing program 7 (id=1106):
syz_usb_connect(0x2, 0x0, 0x0, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0})

2m55.461934347s ago: executing program 5 (id=1107):
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x88200, 0x0)
ioctl$TCXONC(r0, 0x540a, 0x2)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0xb)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x7, 0x80, 0x9, 0x110, 0x1b, "96010000000000000000000000000000000008"})

2m54.235998155s ago: executing program 7 (id=1108):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x52, 0x1, 0x10, 0x0, {0x2}}, 0x14}}, 0x0)

2m53.792268135s ago: executing program 7 (id=1109):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/timers\x00', 0x0, 0x0)
read$FUSE(r0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x49, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r5, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_dest={0x18, 0x114, 0x2, {0x2, 0x7c}}], 0x18, 0x1}, 0x0)

2m53.680760046s ago: executing program 5 (id=1110):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x124}}, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fbdbdf251e00000008000300", @ANYRES32=r2, @ANYBLOB="50002f800c0002000203aaaaaaaaaaaa0c0003800800010002000000340003800800010000000000280003"], 0x6c}, 0x1, 0x0, 0x0, 0x20000041}, 0x80)

2m52.872687733s ago: executing program 5 (id=1111):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0)
bind$inet(r0, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
socket$inet6_sctp(0xa, 0x5, 0x84)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40044}, 0x4040084)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x4895)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
pipe2$watch_queue(&(0x7f00000000c0), 0x80)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)

2m49.364565041s ago: executing program 7 (id=1112):
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0)
ioperm(0x0, 0x2, 0x7e)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = socket$kcm(0x2, 0x1, 0x84)
sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc)
sendmsg$inet(r2, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0xd9}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setscheduler(r0, 0x6, &(0x7f0000000500)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000)

2m36.756709857s ago: executing program 45 (id=1111):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0)
bind$inet(r0, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
socket$inet6_sctp(0xa, 0x5, 0x84)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40044}, 0x4040084)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x4895)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
pipe2$watch_queue(&(0x7f00000000c0), 0x80)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)

2m32.927086581s ago: executing program 46 (id=1112):
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0)
ioperm(0x0, 0x2, 0x7e)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = socket$kcm(0x2, 0x1, 0x84)
sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc)
sendmsg$inet(r2, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0xd9}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setscheduler(r0, 0x6, &(0x7f0000000500)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000)

1m47.158543814s ago: executing program 8 (id=1163):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x88200, 0x0)
ioctl$TCXONC(r0, 0x540a, 0x2)
ioctl$TIOCPKT(r0, 0x5420, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x7, 0x80, 0x9, 0x110, 0x1b, "96010000000000000000000000000000000008"})

1m46.358723467s ago: executing program 8 (id=1164):
memfd_create(0x0, 0x4)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
r5 = add_key$user(0x0, &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000540)="0706675823b8a37f19b37e0f9f120663b78a6a322f28cb301825eddc42c667fc68923d7df9f4c1843c5f11b63d2684fff43955079736fa4c80100487c31c09706b6bf145eb1baf416d2681491bd6a3098fe1a6741d65b085b4075db8419d9e6d17b1eec4dfb860a71d61af753459bcc5ea1f20d6c1c74afda3b0c08bf98886eaac01b08aa753b8727f25773c98cd6a78c06b758992b03b81e2e09cf103dc16a5658a3b58626b457ee4773d41b3548f2258a2e11cc22555da4ef9035cbf", 0xbd, r4)
r6 = add_key$user(&(0x7f0000000180), &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000140), 0x0, 0xfffffffffffffffe)
r7 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, 0x0, 0x39)
keyctl$dh_compute(0x17, &(0x7f00000001c0)={r6, r5, r6}, &(0x7f0000000700)=""/259, 0x103, &(0x7f0000000400)={&(0x7f0000000100)={'streebog256-generic\x00'}})
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_init_net_socket$ax25(0x3, 0x3, 0x0)
r8 = io_uring_setup(0x5b42, &(0x7f0000000640)={0x0, 0xfffffffe, 0x800, 0x103fc, 0x159})
r9 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r9, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b)
sendmsg$rds(r9, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
close_range(r8, 0xffffffffffffffff, 0x0)

1m41.798523603s ago: executing program 8 (id=1172):
r0 = syz_open_dev$loop(&(0x7f0000000040), 0x7, 0xc0041)
ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x593)

1m41.278086485s ago: executing program 8 (id=1173):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x88200, 0x0)
ioctl$TCXONC(r0, 0x540a, 0x2)
ioctl$TIOCPKT(r0, 0x5420, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x7, 0x80, 0x9, 0x110, 0x1b, "96010000000000000000000000000000000008"})

1m40.682230262s ago: executing program 8 (id=1175):
socket$inet_udp(0x2, 0x2, 0x0)
getpid()
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
syz_open_dev$media(0x0, 0xd6e, 0x0)
syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f0000002480)=ANY=[@ANYRES32=0x0], 0xfe, 0x1222, &(0x7f00000024c0)="$eJzs3E9rXFUYB+DXSdrUxPxRa7UF6cFudHNJsnCjIEFSkA4obSO0gnBrbnTIdSbMHQIjYnTl1o0fwK24dCeIO91k42dwl41LF+qVzrTaaUeDFjtpeJ7NvMw5P+a9M8OBM8y5By9/9v72VpVt5b1oPPJKNHYipn9LkaIRt30cL7z0/Q/PXrl2/dJas7l+OaWLa1dXXkwpLZz/9q0Pv3ruu97cm18vfDMT+0tvH/y8+tP+mf2zB79ffa9VpVaV2p1eytONTqeX3yiLtNmqtrOU3iiLvCpSq10V3ZHxrbKzs9NPeXtzfnanW1RVytv9tF30U6+Tet1+yt/NW+2UZVmanw3ux8aXv9R1HVHXJ+Jk1HVdPxqz0YjHYj4WYjGW4vF4Ip6M0/FUnImn45k4O5g16b4BAAAAAAAAAAAAAAAAAADgeBl3/n/unvP/n0eMO/9/fsLNAwAAAAAAAAAAAAAAAAAAwDFx5dr1S2vN5vrllE5FlJ/ubuxuDB+H42tb0YoyiliOxfg1Bqf/h4b1yWiuL6eBpfik3LuV39vdmBrNrwxuJ3BP/uJrzfWVYT6N5mdi9s78aizG6fH51bvyFwb5U/H8hTvyWSzGj+9EJ8rYjJvZv/IfraT06uvNu17/3GAeAAAAHAdZ+tPY/XuW/d34MH/Y7wM399fLY/f303FuerLXTkTV/2A7L8uiO/HidkfDZ/Yi4og09p+LRkQcgTb+oThx6Jy5CTT2xVzEfcSnRr5IR+J9fhiLw1aOqf91XeLBuPWhz0y6DwAAAAAAAAAAAP6dB/F3wklfIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAH+zAsQAAAACAMH/rNDo2AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvgoAAP//SPnJBA==")
creat(&(0x7f00000002c0)='./file0\x00', 0x109)
truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5)
creat(&(0x7f0000000240)='./file0\x00', 0x0)
socket$kcm(0x29, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={0x0, &(0x7f0000000140)=""/2, 0x53, 0x2, 0x1, 0x107}, 0x28)

1m38.322516382s ago: executing program 8 (id=1178):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_udp_encap(r0, 0x11, 0x68, &(0x7f0000000040)=0x2, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r2, 0x0, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0)
setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x2, 0x4)

1m22.41949027s ago: executing program 47 (id=1178):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_udp_encap(r0, 0x11, 0x68, &(0x7f0000000040)=0x2, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r2, 0x0, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0)
setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x2, 0x4)

1m8.961088118s ago: executing program 2 (id=1220):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, 0x0, &(0x7f0000000040))

1m8.134269074s ago: executing program 2 (id=1221):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmsg$802154_raw(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000140)="711f3b77464eb59135a9", 0xa}}, 0x24000840)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000000)=0xf, 0x4)
recvmmsg(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2163, 0x0)

1m7.043041591s ago: executing program 2 (id=1223):
syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000240)={[{@datacow}, {@nodatasum}, {@compress_force}, {@metadata_ratio={'metadata_ratio', 0x3d, 0x1}}, {@ssd}, {}, {@acl}, {@nodiscard}]}, 0xfb, 0x50f9, &(0x7f0000005140)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000b00)={{r0}, 0x0, 0x0, @inherit={0x0, 0x0}, @devid})

1m2.439541056s ago: executing program 2 (id=1235):
gettid()
r0 = socket(0x11, 0x3, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000480)={0x0, &(0x7f00000000c0)})
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x40082102, &(0x7f0000000100))
munmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000)
mremap(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil)
bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14)
socket$kcm(0x21, 0xf, 0x2)
connect$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c)
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00'], 0x1, 0x225, &(0x7f0000000300)="$eJzKKC4sZmdgYPj7sSaZgUGAAQRYGEQYLjAwMrEwMDDIM4KFGD4yQeipUPomlGaDyl+B0r5Q8XaYvHlVRBQDA2Om0j0zpgPiKYqMAgw8Il9PPWBIZuCPZbCc573mUlDmlKtCb5fuB6n3Cq3cxMConsK/aM6GCU4zecHGMkZG/UUyh/mAzCwOkEEMDAyT/0Tce8AiySCCZJYoxz+xUy3LV5l13meY0TEtjYGRE+IYBt2Zdga83UxQM4srq7ITc3JSi4rPMKCaP5lxP5MiI0jdmb9Xgx8w2jF0xzIwMsht8Fdb/O2PVOXGTfWR06siaqZ2N91cuj6OYZv+3ysmUu8nZoT9f3BIUMsiL//DPBml75sb5nyoqXti4tjZqDyXv/Xy33fvY2qLE9SYHot3FbLxJ7hp1XxydnKzfDw3vbp9S7Higqw0l4nHpl78m3B8LQPD5AtPbPVrzhyKV4zhlHKrnBtz1y1ekGuZ+vm6NwwMB6M+T2RgXM64n4mBYWbYzj3I/ipvgEYGAzMDA4MKAwMDPwMLQ1pmTqqBBwMjAzOUY8gCVQVTzcTAAZbQS87PSWlnYGRghGlbzsDCwATT9piBFc4xQuYYWzSgGgixHAQ8oPRyKP0YSsujJRuWBlBU9UN5Gg0MDGwMFYklJUWGbAwMUBZczAguZiTQwAD3BMTWuUyobjnOxDAKRsEoGAWjYBSMglEwCkbBKBgFIxkAAgAA///R9rbb")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan1\x00'})
getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x3, 0x0, &(0x7f0000000040))
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
open(&(0x7f0000000080)='./file0/file0\x00', 0x103000, 0x2)
r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000080)=0x2)

1m0.708975794s ago: executing program 2 (id=1236):
r0 = socket$isdn(0x22, 0x3, 0x3)
pidfd_getfd(0xffffffffffffffff, r0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_open_dev$dri(0x0, 0xd21, 0x0)
sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, 0x0, 0x20040000)
mount(&(0x7f0000000380)=@sg0, 0x0, &(0x7f0000000400)='minix\x00', 0x2000, &(0x7f0000000440)='&/#%&-\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r3=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={r3, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, 0x0)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x4)
ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000380)={0x401, 0x1, &(0x7f0000000240)=[r4], 0x0, &(0x7f00000000c0)=[0x0], &(0x7f0000000040), 0x0, 0x300})
mkdir(&(0x7f0000000200)='./file0\x00', 0x0)

58.967630993s ago: executing program 2 (id=1239):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x169a82, 0x18c)
migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x272)
r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0000000004000002000000", @ANYRES32=r1, @ANYBLOB="fcffffff000000000000024b0f9248376bfcb5be", @ANYRES32, @ANYRES32=r1, @ANYBLOB="0100000001000000020000000a00"/28], 0x50)

42.124381632s ago: executing program 48 (id=1239):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x169a82, 0x18c)
migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x272)
r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0000000004000002000000", @ANYRES32=r1, @ANYBLOB="fcffffff000000000000024b0f9248376bfcb5be", @ANYRES32, @ANYRES32=r1, @ANYBLOB="0100000001000000020000000a00"/28], 0x50)

7.232897596s ago: executing program 1 (id=1362):
r0 = socket(0x1, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev}})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r1 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f00000001c0), 0x12)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x7d, 0x0, &(0x7f0000000240))
ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000000))
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x74)
r4 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0)
write$cgroup_freezer_state(r4, &(0x7f00000000c0)='THAWED\x00', 0x7)
syz_init_net_socket$ax25(0x3, 0x5, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', 0x0})
recvmmsg(r0, 0x0, 0x0, 0x0, &(0x7f0000001840))

6.475016117s ago: executing program 3 (id=1365):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01000900010073797a30000000000900030073797a3200000000b0000000060a010400000000000000000100000008000b400000000088000480340001800b000100657874686472000024000280080001400000000c080003400000000008"], 0x124}}, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fbdbdf251e00000008000300", @ANYRES32=r2, @ANYBLOB="50002f800c0002000203aaaaaaaaaaaa0c0003800800010002000000340003800800010000000000280003"], 0x6c}, 0x1, 0x0, 0x0, 0x20000041}, 0x80)

5.868118247s ago: executing program 1 (id=1368):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009e602206d"], 0x0)
ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000040)=""/185)

5.794378671s ago: executing program 3 (id=1369):
r0 = socket(0x1c, 0x1, 0x0)
setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000140)=0xfff, 0x4)
sendmsg$inet_sctp(r0, &(0x7f0000000200)={&(0x7f0000000000)=@in6={0x1c, 0x1c}, 0x1c, 0x0}, 0x0)

5.099335116s ago: executing program 4 (id=1373):
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYRES8=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='mmap_lock_acquire_returned\x00', r3, 0x0, 0x5}, 0x18)
mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000200)=""/160)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e00)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000d00)=[{0x200000000006, 0x0, 0x7f, 0x5}]})
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$tipc(0x1e, 0x2, 0x0)
sendmsg$tipc(r5, &(0x7f0000000780)={&(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x1}}, 0x10, &(0x7f0000000b00)=[{&(0x7f00000000c0)="92a334996eeacfe4b055dc21af3245313aeb739b4cde62ffa58283cde1182aee0b09a5e12f17111cf788d85ca63d93fd4d51beb612de61db93", 0x39}, {&(0x7f0000000140)="3390f51f884865", 0x7}, {&(0x7f00000001c0)="34b9e8444a050765fa2b0a21af34355d07928306598701b18ddb4f02319c70", 0x1f}, {&(0x7f00000002c0)="b4f239b92ac7077ccc307e6c1decd09bba85e9c64d825cf5f6b81a8baefa35db6c79c588acc24cb0a0f4dd1505ac70aa9d281093050622ccfba9c5d2530bdfb3376fc74a67fd8072a51bf233b7f6b04429633ce96a0c2729444e2f3005ebea7953ba4fd0d8de255058e0cf4778c575906a49188326066a070701297c29784d0515b0be03e8009d9b18f61e53a6a6366d7edfab4283b3", 0x96}, {&(0x7f0000000380)="aa466485bdff2db785d32719ae7eaa9c6516ef5b7553a787c44a1931a6025636250a89955d71966020ce104bf918ddd1eeec645ba2b76e516cb10cf1f18f6c8544e59d92a396fb96d58bbb2b67f5979f035ce590062411c103149bb075ceaa114dc58bc397f994ccee9c08868ebd20d8bb1373f2bfcfd459b3527c8b5b27b6a27031aa6eb8c0ac0e58cf83c1c76f97824e9cfd22e623d97f668005865255738fdae9705352e5ef3c5e6ba172c9a2106afb739efb6370f0fc82f54021b3d4ad676b7edfa4a66035e8b58c93d84ac04f2cf626cb14615d114facfcec72bc6323ea4ac0ba8f503e", 0xe6}, {0x0}, {&(0x7f0000000480)="7ae1ba1d95b5749a761bff2de5d540f6a5224520fa9cf21cb4dd54ada3b7c0a96e773a2df9a12929f869fca9057852f8d2b20ba8", 0x34}, {&(0x7f0000000980)="c0a11b150484bc1fd02fb453b708707e7507324e65e37d5cd656a3ef3f0d56c9804b93dd0923ccbfb3728d3b77b21e5056a47493ca5ff397fb7d33ad6c3341abbdf86f449d4e3ec800005074fc679f6afcc01c4f0e4537210629b6f5e6a1636e819e2d16c3d70253d835b3c77a09000000109046538c2150738a563da284cbc206a544a3bbe923bc2f0b1abbfc0532fdde0038b3184df0376a58ee555155e4c269eaabede15a3931ad89796b8362ad1482dcbf6258aae880d489edfe2eb63b30bdab3aebce7ec123ff7f78cd4100e2e6f553cee119eb86d985fc8d58a80883bcb9", 0xe1}, {&(0x7f0000000a80)="afd8fbb2f60eb2c45a6bdfdfa7af3157009850dee5e760fe077cd767d05ea0c2051a018f827e70a454fd3388ec1188ef21cfb58556c7bffebf497d62017a74bb8846d8e19e0f4fa24543cb16c98748143034b298b75db7967aba0041e87aecedb80bacd27b8a7a35", 0x68}], 0x9, &(0x7f0000000bc0)="d77887a059365a2463f732568e45b7b014b5c78e360afbbeb4aa6faa6ede33c29d04069974311ec3d422bbd67844419ea91237593d54b213c7f68f94e7ae3e684cba3c6ed0c2bc3072f393b3c555b42d8e697784556e647de5a929d298e71b5b7d8eeeb31adb801c68e9a98094b3038bfa5a778cd699c5a352506403336d6e43773f7f00350b484d384ae9288baf03faae541a35e114c6eb26678440180076fbcaab1ee3b1e30490eb40dd41c407813dc065617c0b98b74d390ccb56ea0b435cd5a7cbc172d983451cde", 0xca, 0x20040010}, 0x4000800)
r6 = gettid()
r7 = memfd_secret(0x80000)
fcntl$setlease(r7, 0x400, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r6}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
readv(r8, &(0x7f00000007c0)=[{&(0x7f0000000580)=""/148, 0x94}, {&(0x7f0000000d40)=""/110, 0x6e}, {&(0x7f0000000540)=""/3, 0x3}], 0x3)
readv(r8, &(0x7f0000001240)=[{&(0x7f0000000040)=""/73, 0x49}], 0x1)
fallocate(r0, 0x0, 0x0, 0x1000f4)
io_setup(0x7d, &(0x7f0000000600)=<r9=>0x0)
r10 = fsopen(&(0x7f0000000000)='selinuxfs\x00', 0x1)
fsconfig$FSCONFIG_SET_FLAG(r10, 0x5, &(0x7f0000000540)='mand\x00', 0x0, 0x0)
io_submit(r9, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)="96", 0xfffffe10, 0x0, 0x0, 0x0, r1}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, r0, 0x0, 0x0, 0xffffffffffffffff}])

4.994423457s ago: executing program 3 (id=1375):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0xb, 0xd, 0x6})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100})
r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0xdf, 0x1ff, 0xe})
r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x8, 0x2, 0x7})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x40, 0x4, 0x800})
dup(r1)
close_range(r0, 0xffffffffffffffff, 0x0)

4.391693036s ago: executing program 9 (id=1376):
r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r1=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r1, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, [<r3=>0x0]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={r3, 0x0, <r4=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, [<r5=>0x0], [0xffffffff], [0x9], [0xfffffffffffffffc]})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r4})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={r5})

3.964970146s ago: executing program 3 (id=1378):
r0 = socket(0x1, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev}})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r1 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f00000001c0), 0x12)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x7d, 0x0, &(0x7f0000000240))
ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000000))
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x74)
r4 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0)
write$cgroup_freezer_state(r4, &(0x7f00000000c0)='THAWED\x00', 0x7)
syz_init_net_socket$ax25(0x3, 0x5, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', 0x0})
recvmmsg(r0, 0x0, 0x0, 0x0, &(0x7f0000001840))

3.907472321s ago: executing program 9 (id=1379):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01000900010073797a30000000000900030073797a3200000000b0000000060a010400000000000000000100000008000b400000000088000480340001800b000100657874686472000024000280080001400000000c080003400000000008"], 0x124}}, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fbdbdf251e00000008000300", @ANYRES32=r2, @ANYBLOB="50002f800c0002000203aaaaaaaaaaaa0c0003800800010002000000340003800800010000000000280003"], 0x6c}, 0x1, 0x0, 0x0, 0x20000041}, 0x80)

3.6920659s ago: executing program 4 (id=1380):
syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @remote, @val, {@ipv4}}, 0x0)

3.486207931s ago: executing program 1 (id=1382):
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x13, 0x10, 0x8}, 0x50)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00'}, 0x90)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r2}, 0x10)
r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8)
close(r4)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r1, 0x0, 0x0}, 0x10)
sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c1)
r5 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r5, 0x0, 0x0)
syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0)

3.214892634s ago: executing program 9 (id=1383):
socket$netlink(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmmsg(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000a40)="118db76e8efb27d530b26a8302bad647e35540226c4052b6d573165d39ad8ead67632e8fe108cf55473bc22914286359c3bb3decf99ed04d34d1a73ae48dae0e69ee69fe", 0x44}], 0x4}}], 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fff001201000006000043be4354", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e00000004000280080004"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)

3.01993722s ago: executing program 4 (id=1384):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, &(0x7f0000000000)=0x7, 0x4)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000001c0)=ANY=[@ANYRES16=r0], 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
close(0x3)
bind$alg(r1, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
accept4(r1, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x3e8, 0x0, 0xfffffffffffffd25)
r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r6=>0x0})
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vxcan0\x00', <r7=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1b, 0xf, &(0x7f0000000200)=@raw=[@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @map_val={0x18, 0x4, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', r7, @fallback=0x27, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

2.939142644s ago: executing program 6 (id=1385):
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66)

2.774099074s ago: executing program 9 (id=1386):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000000c0)={[{@quota}, {@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x33]}}]})
open$dir(0x0, 0x0, 0x20)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00')
read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2100)

2.732380375s ago: executing program 1 (id=1387):
r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x201, 0x2)
r1 = dup(r0)
ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000040)={0x2, 0x1, 0x2, 0x1, 0xffffffffffffff54, 0x0, 0x0})

2.636257115s ago: executing program 3 (id=1388):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100})
r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0xdf, 0x1ff, 0xe})
r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x8, 0x2, 0x7})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000200)={0x40, 0x4, 0x800})
dup(r2)
close_range(r0, 0xffffffffffffffff, 0x0)

2.171085726s ago: executing program 6 (id=1389):
r0 = syz_open_dev$dri(0x0, 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r2=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [<r4=>0x0]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, [<r6=>0x0], [0xffffffff], [0x9], [0xfffffffffffffffc]})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r5})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000040)={r6})

2.064030598s ago: executing program 9 (id=1390):
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYRES8=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='mmap_lock_acquire_returned\x00', r3, 0x0, 0x5}, 0x18)
mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000200)=""/160)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e00)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000d00)=[{0x200000000006, 0x0, 0x7f, 0x5}]})
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$tipc(0x1e, 0x2, 0x0)
sendmsg$tipc(r5, &(0x7f0000000780)={&(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x1}}, 0x10, &(0x7f0000000b00)=[{&(0x7f00000000c0)="92a334996eeacfe4b055dc21af3245313aeb739b4cde62ffa58283cde1182aee0b09a5e12f17111cf788d85ca63d93fd4d51beb612de61db93", 0x39}, {&(0x7f0000000140)="3390f51f884865", 0x7}, {&(0x7f00000001c0)="34b9e8444a050765fa2b0a21af34355d07928306598701b18ddb4f02319c70", 0x1f}, {&(0x7f00000002c0)="b4f239b92ac7077ccc307e6c1decd09bba85e9c64d825cf5f6b81a8baefa35db6c79c588acc24cb0a0f4dd1505ac70aa9d281093050622ccfba9c5d2530bdfb3376fc74a67fd8072a51bf233b7f6b04429633ce96a0c2729444e2f3005ebea7953ba4fd0d8de255058e0cf4778c575906a49188326066a070701297c29784d0515b0be03e8009d9b18f61e53a6a6366d7edfab4283b3", 0x96}, {&(0x7f0000000380)="aa466485bdff2db785d32719ae7eaa9c6516ef5b7553a787c44a1931a6025636250a89955d71966020ce104bf918ddd1eeec645ba2b76e516cb10cf1f18f6c8544e59d92a396fb96d58bbb2b67f5979f035ce590062411c103149bb075ceaa114dc58bc397f994ccee9c08868ebd20d8bb1373f2bfcfd459b3527c8b5b27b6a27031aa6eb8c0ac0e58cf83c1c76f97824e9cfd22e623d97f668005865255738fdae9705352e5ef3c5e6ba172c9a2106afb739efb6370f0fc82f54021b3d4ad676b7edfa4a66035e8b58c93d84ac04f2cf626cb14615d114facfcec72bc6323ea4ac0ba8f503e", 0xe6}, {0x0}, {&(0x7f0000000480)="7ae1ba1d95b5749a761bff2de5d540f6a5224520fa9cf21cb4dd54ada3b7c0a96e773a2df9a12929f869fca9057852f8d2b20ba8", 0x34}, {&(0x7f0000000980)="c0a11b150484bc1fd02fb453b708707e7507324e65e37d5cd656a3ef3f0d56c9804b93dd0923ccbfb3728d3b77b21e5056a47493ca5ff397fb7d33ad6c3341abbdf86f449d4e3ec800005074fc679f6afcc01c4f0e4537210629b6f5e6a1636e819e2d16c3d70253d835b3c77a09000000109046538c2150738a563da284cbc206a544a3bbe923bc2f0b1abbfc0532fdde0038b3184df0376a58ee555155e4c269eaabede15a3931ad89796b8362ad1482dcbf6258aae880d489edfe2eb63b30bdab3aebce7ec123ff7f78cd4100e2e6f553cee119eb86d985fc8d58a80883bcb9", 0xe1}, {&(0x7f0000000a80)="afd8fbb2f60eb2c45a6bdfdfa7af3157009850dee5e760fe077cd767d05ea0c2051a018f827e70a454fd3388ec1188ef21cfb58556c7bffebf497d62017a74bb8846d8e19e0f4fa24543cb16c98748143034b298b75db7967aba0041e87aecedb80bacd27b8a7a35", 0x68}], 0x9, &(0x7f0000000bc0)="d77887a059365a2463f732568e45b7b014b5c78e360afbbeb4aa6faa6ede33c29d04069974311ec3d422bbd67844419ea91237593d54b213c7f68f94e7ae3e684cba3c6ed0c2bc3072f393b3c555b42d8e697784556e647de5a929d298e71b5b7d8eeeb31adb801c68e9a98094b3038bfa5a778cd699c5a352506403336d6e43773f7f00350b484d384ae9288baf03faae541a35e114c6eb26678440180076fbcaab1ee3b1e30490eb40dd41c407813dc065617c0b98b74d390ccb56ea0b435cd5a7cbc172d983451cde", 0xca, 0x20040010}, 0x4000800)
r6 = gettid()
r7 = memfd_secret(0x80000)
fcntl$setlease(r7, 0x400, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r6}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
readv(r8, &(0x7f00000007c0)=[{&(0x7f0000000580)=""/148, 0x94}, {&(0x7f0000000d40)=""/110, 0x6e}, {&(0x7f0000000540)=""/3, 0x3}], 0x3)
readv(r8, &(0x7f0000001240)=[{&(0x7f0000000040)=""/73, 0x49}], 0x1)
fallocate(r0, 0x0, 0x0, 0x1000f4)
io_setup(0x7d, &(0x7f0000000600)=<r9=>0x0)
r10 = fsopen(&(0x7f0000000000)='selinuxfs\x00', 0x1)
fsconfig$FSCONFIG_SET_FLAG(r10, 0x5, &(0x7f0000000540)='mand\x00', 0x0, 0x0)
io_submit(r9, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)="96", 0xfffffe10, 0x0, 0x0, 0x0, r1}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, r0, 0x0, 0x0, 0xffffffffffffffff}])

1.780456467s ago: executing program 1 (id=1391):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0)
write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000200)=0xef49)

1.673704111s ago: executing program 3 (id=1392):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009e602206d"], 0x0)
ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000040)=""/185)

1.632926698s ago: executing program 6 (id=1393):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$kcm(0x2, 0xa, 0x2)
sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9ecda75e2a7d49d5cbcb370c4d789390a328ba42c9c60cf2154d1b659aa709e8980a522cfb72f23ad87fb7019706ccae98cfe7c4fd23e8297b8cabc46ede1ac3da78f1b488c6357e7edfcd417df6660af20a54ecdcb02f689ae15ee655d4b7b1ea733e88ee9f53669388dff487c1c49953f3bc142112bd4b582b29b35d43962ed245c2cd5d5df40a3e0ed6beaf3b641e84b0f0dfa121a9efe05269f9f4a0e9bcbf43c7a90a711f453668c730c3badedca687b71a9c27bab9e724cc4a4918713031596ea6fd01124f973f257ccd9665aee7df4a9d64f079d176abc00000000d7af3e2dd4396f72373fb0a787a6129ca41181f5087fb843212550b58e3707d5a0399de36c2503836cbe2133de4f574e9e05c96788b0de1bd13e390445433d96737b964fa8af2ac4b2f0f9390ca93d8d3d810044d024359e067c4553230ab748947d33f8fc115ce9a49e6571c45a", 0x17e, 0x0, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000000111ff00000000000000000000000000000000ff0200000000000000000000000000014f194e20"], 0x4b)

1.251459608s ago: executing program 4 (id=1394):
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000000)='./control\x00', 0x0)
mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x2000, 0x0)
mkdir(&(0x7f0000000100)='./file1\x00', 0x13b)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00')

1.076779589s ago: executing program 6 (id=1395):
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x101]}, 0x8)
write$char_usb(r0, &(0x7f0000000040)="5b85da75a59f70e6ea65384a5b37e7d711ac6305ea2716", 0x17)
pipe(0x0)
syz_emit_vhci(&(0x7f0000002800)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xc}, @hci_rp_read_local_version={{0xc2}, {0x94, 0x4, 0x7, 0x17, 0x6, 0xfffc}}}}, 0xf)

764.584262ms ago: executing program 4 (id=1396):
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
removexattr(&(0x7f0000000480)='./file1\x00', &(0x7f0000000500)=@random={'security.', '/dev/video#\x00'})

663.943215ms ago: executing program 6 (id=1397):
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x13, 0x10, 0x8}, 0x50)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00'}, 0x90)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r2}, 0x10)
r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8)
close(r4)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r1, 0x0, 0x0}, 0x10)
sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c1)
r5 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r5, 0x0, 0x0)
syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0)

427.375339ms ago: executing program 9 (id=1398):
r0 = socket(0x1, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev}})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r1 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f00000001c0), 0x12)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffe}, 0x0)
ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000000))
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x74)
r4 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0)
write$cgroup_freezer_state(r4, &(0x7f00000000c0)='THAWED\x00', 0x7)
syz_init_net_socket$ax25(0x3, 0x5, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', 0x0})
recvmmsg(r0, 0x0, 0x0, 0x0, &(0x7f0000001840))

330.165228ms ago: executing program 1 (id=1399):
r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5)
close(r0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESOCT=0x0])
r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmsg$802154_raw(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000140)="711f3b77464eb59135a976300000", 0xe}}, 0x24000840)
setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, &(0x7f0000000000)=0xf, 0x4)
recvmmsg(r2, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2163, 0x0)
read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f00000002c0)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48)
r5 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r6=>0x0}, &(0x7f0000cab000)=0xc)
setregid(0xffffffffffffffff, r6)
r7 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0)
ioctl$DRM_IOCTL_GET_CAP(r7, 0xc010640c, &(0x7f00000000c0)={0x7})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000040)="b90103606989068c3c270040f00000", 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101081, 0x11e)
lstat(&(0x7f0000000b80)='./file0\x00', 0x0)
r9 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0x3d}, 0x4e20, 0x3, 'dh\x00', 0x1, 0x800002, 0x6e}, 0x2c)
ioctl$SG_IO(r8, 0x2285, &(0x7f0000000480)={0x53, 0xffffffffffffffff, 0x2a, 0xb, @buffer={0x0, 0x1000, &(0x7f000000a380)=""/4096}, &(0x7f0000000100)="ddbb038d2e3d6591d46532dec296ac54cde3d8aa8f81b1de617c3fa8e5e5a1bf0cddd3dd42ae2bb80be2", &(0x7f0000000180)=""/96, 0x7fffffff, 0x10004, 0x1, &(0x7f0000000440)})
statfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)=""/64)

177.409193ms ago: executing program 4 (id=1400):
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"})
r2 = syz_open_pts(r1, 0x0)
dup3(r2, r1, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

0s ago: executing program 6 (id=1401):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@delchain={0x44, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0xf}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40044}, 0x4804)

kernel console output (not intermixed with test programs):

v_slave_0 (retrying later): interface not active
[  551.484571][ T8931] batman_adv: batadv0: Adding interface: batadv_slave_1
[  551.491767][ T8931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  551.518339][ T8931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  552.110618][ T8931] hsr_slave_0: entered promiscuous mode
[  552.119862][ T8931] hsr_slave_1: entered promiscuous mode
[  552.127817][ T8931] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  552.135659][ T8931] Cannot create hsr debugfs directory
[  552.242372][ T5801] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  553.014011][ T5806] Bluetooth: hci5: command tx timeout
[  553.272009][ T8959] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  553.909804][ T8958] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  553.919132][ T8958] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  553.927246][ T8958] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  553.934093][ T8958] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  553.940699][ T8958] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  553.948754][ T8958] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  553.955177][ T8958] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  553.968561][ T8958] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  553.988192][ T8931] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  554.043671][ T5799] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  554.056818][ T5799] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  554.096163][ T5799] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  554.114303][ T5799] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  554.126397][ T5799] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  554.171556][ T8931] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  554.199051][ T8931] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  554.225046][ T8931] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  555.174667][ T5799] Bluetooth: hci3: command 0x0c1a tx timeout
[  555.973937][ T5806] Bluetooth: hci5: command 0x0c1a tx timeout
[  555.980270][ T5806] Bluetooth: hci1: command 0x040f tx timeout
[  555.987877][ T5795] Bluetooth: hci2: command 0x0405 tx timeout
[  555.995243][ T5795] Bluetooth: hci0: command 0x0405 tx timeout
[  556.001499][ T5795] Bluetooth: hci4: command 0x0c1a tx timeout
[  556.215008][ T8975] Bluetooth: hci6: command tx timeout
[  556.495949][ T8964] chnl_net:caif_netlink_parms(): no params data found
[  556.719972][ T8981] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1004'.
[  557.583819][ T5799] Bluetooth: hci3: Opcode 0x206a failed: -110
[  557.585554][ T8975] Bluetooth: hci3: command 0x0c1a tx timeout
[  557.609373][ T5799] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  557.619428][ T5799] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  557.710665][ T8931] 8021q: adding VLAN 0 to HW filter on device bond0
[  557.736908][ T5799] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  557.835014][ T8931] 8021q: adding VLAN 0 to HW filter on device team0
[  557.864699][ T5799] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  557.878971][ T5799] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  557.957342][ T1099] bridge0: port 1(bridge_slave_0) entered blocking state
[  557.964777][ T1099] bridge0: port 1(bridge_slave_0) entered forwarding state
[  558.147147][ T5799] Bluetooth: hci5: command 0x0c1a tx timeout
[  558.293672][ T5799] Bluetooth: hci6: command tx timeout
[  558.432815][ T1099] bridge0: port 2(bridge_slave_1) entered blocking state
[  558.440495][ T1099] bridge0: port 2(bridge_slave_1) entered forwarding state
[  559.082878][ T8989] loop8: detected capacity change from 0 to 4096
[  559.716015][ T8964] bridge0: port 1(bridge_slave_0) entered blocking state
[  559.724492][ T8964] bridge0: port 1(bridge_slave_0) entered disabled state
[  559.735451][ T8964] bridge_slave_0: entered allmulticast mode
[  559.745112][ T8964] bridge_slave_0: entered promiscuous mode
[  559.977646][ T5799] Bluetooth: hci7: command tx timeout
[  560.025623][ T8964] bridge0: port 2(bridge_slave_1) entered blocking state
[  560.033185][ T8964] bridge0: port 2(bridge_slave_1) entered disabled state
[  560.046051][ T8964] bridge_slave_1: entered allmulticast mode
[  560.055164][ T8964] bridge_slave_1: entered promiscuous mode
[  560.218168][ T5799] Bluetooth: hci5: command 0x0c1a tx timeout
[  560.255346][ T8964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  560.317681][ T8964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  560.375638][ T5799] Bluetooth: hci6: command tx timeout
[  560.582480][ T8964] team0: Port device team_slave_0 added
[  560.662865][ T8964] team0: Port device team_slave_1 added
[  561.655372][ T8964] batman_adv: batadv0: Adding interface: batadv_slave_0
[  561.662670][ T8964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  561.692438][ T8964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  561.969640][ T8964] batman_adv: batadv0: Adding interface: batadv_slave_1
[  561.977500][ T8964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  562.006674][ T8964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  562.114791][ T8975] Bluetooth: hci7: command tx timeout
[  562.174835][ T8931] 8021q: adding VLAN 0 to HW filter on device batadv0
[  562.453636][ T8975] Bluetooth: hci6: command tx timeout
[  562.645155][ T8964] hsr_slave_0: entered promiscuous mode
[  562.654435][ T8964] hsr_slave_1: entered promiscuous mode
[  562.662676][ T8964] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  562.670625][ T8964] Cannot create hsr debugfs directory
[  563.753319][ T9017] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  563.804626][ T8978] chnl_net:caif_netlink_parms(): no params data found
[  564.133889][ T8975] Bluetooth: hci7: command tx timeout
[  564.171900][ T4054] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  564.372450][ T4054] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  564.400034][ T9014] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  564.409628][ T9014] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  564.417372][ T9014] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  564.426013][ T9014] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  564.432573][ T9014] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  564.440085][ T9014] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  564.450026][ T9014] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  564.560638][ T4054] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  564.595945][ T9014] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  564.675140][ T9014] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[  564.681594][ T9014] Bluetooth: hci7: Opcode 0x0406 failed: -4
[  564.737270][ T9014] Bluetooth: hci7: Opcode 0x0406 failed: -4
[  564.796906][ T4054] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  565.459931][ T4054] bridge_slave_1: left allmulticast mode
[  565.468878][ T4054] bridge_slave_1: left promiscuous mode
[  565.476383][ T4054] bridge0: port 2(bridge_slave_1) entered disabled state
[  565.549536][ T4054] bridge_slave_0: left allmulticast mode
[  565.557887][ T4054] bridge_slave_0: left promiscuous mode
[  565.565726][ T4054] bridge0: port 1(bridge_slave_0) entered disabled state
[  565.653641][ T8975] Bluetooth: hci3: command 0x0c1a tx timeout
[  566.229218][ T9029] loop1: detected capacity change from 0 to 2048
[  566.373909][ T9030] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  566.401183][   T30] kauditd_printk_skb: 13 callbacks suppressed
[  566.401262][   T30] audit: type=1800 audit(1751278645.969:49): pid=9029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1015" name="file1" dev="loop1" ino=15 res=0 errno=0
[  566.454506][ T8975] Bluetooth: hci6: command 0x0c1a tx timeout
[  566.461288][ T5799] Bluetooth: hci5: command 0x0c1a tx timeout
[  566.468578][ T5799] Bluetooth: hci1: command 0x040f tx timeout
[  566.475196][ T5799] Bluetooth: hci0: command 0x0405 tx timeout
[  566.481342][ T5799] Bluetooth: hci4: command 0x0c1a tx timeout
[  566.555429][ T4054] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  566.579962][ T4054] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  566.600857][ T4054] bond0 (unregistering): Released all slaves
[  566.703775][ T5810] Bluetooth: hci7: command 0x0c1a tx timeout
[  567.958989][ T8931] veth0_vlan: entered promiscuous mode
[  568.277573][ T8931] veth1_vlan: entered promiscuous mode
[  568.487070][ T4054] hsr_slave_0: left promiscuous mode
[  568.542380][ T5810] Bluetooth: hci6: command 0x0c1a tx timeout
[  568.703218][ T4054] hsr_slave_1: left promiscuous mode
[  568.748626][ T4054] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  568.764687][ T4054] batman_adv: batadv0: Removing interface: batadv_slave_0
[  568.779209][ T5810] Bluetooth: hci7: command 0x0c1a tx timeout
[  568.975578][ T4054] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  568.983695][ T4054] batman_adv: batadv0: Removing interface: batadv_slave_1
[  569.352627][ T4054] veth1_macvtap: left promiscuous mode
[  569.365066][ T4054] veth0_macvtap: left promiscuous mode
[  569.371024][ T4054] veth1_vlan: left promiscuous mode
[  569.377027][ T4054] veth0_vlan: left promiscuous mode
[  570.312323][ T4054] team0 (unregistering): Port device team_slave_1 removed
[  570.336889][ T4054] team0 (unregistering): Port device team_slave_0 removed
[  570.530874][ T8964] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  570.664574][ T5810] Bluetooth: hci6: command 0x0c1a tx timeout
[  570.846550][ T8978] bridge0: port 1(bridge_slave_0) entered blocking state
[  570.854286][ T5810] Bluetooth: hci7: command 0x0c1a tx timeout
[  570.854371][ T8978] bridge0: port 1(bridge_slave_0) entered disabled state
[  570.869133][ T8978] bridge_slave_0: entered allmulticast mode
[  570.877997][ T8978] bridge_slave_0: entered promiscuous mode
[  570.953823][ T8964] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  571.051563][ T8964] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  571.246405][ T8964] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  571.800063][ T8978] bridge0: port 2(bridge_slave_1) entered blocking state
[  571.807699][ T8978] bridge0: port 2(bridge_slave_1) entered disabled state
[  571.824972][ T8978] bridge_slave_1: entered allmulticast mode
[  571.833271][ T8978] bridge_slave_1: entered promiscuous mode
[  572.005772][ T8931] veth0_macvtap: entered promiscuous mode
[  572.395839][ T8931] veth1_macvtap: entered promiscuous mode
[  572.483892][ T8978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  572.610117][ T8978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  573.057995][ T8978] team0: Port device team_slave_0 added
[  573.120876][ T8931] batman_adv: batadv0: Interface activated: batadv_slave_0
[  573.172241][ T8978] team0: Port device team_slave_1 added
[  573.429514][ T8931] batman_adv: batadv0: Interface activated: batadv_slave_1
[  573.461193][ T8978] batman_adv: batadv0: Adding interface: batadv_slave_0
[  573.469325][ T8978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  573.496315][ T8978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  573.570543][ T8931] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  573.579742][ T8931] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  573.588842][ T8931] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  573.597874][ T8931] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  573.750100][ T8978] batman_adv: batadv0: Adding interface: batadv_slave_1
[  573.758183][ T8978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  573.787927][ T8978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  573.834256][ T8964] 8021q: adding VLAN 0 to HW filter on device bond0
[  574.028783][ T8964] 8021q: adding VLAN 0 to HW filter on device team0
[  574.169422][ T8736] bridge0: port 1(bridge_slave_0) entered blocking state
[  574.176948][ T8736] bridge0: port 1(bridge_slave_0) entered forwarding state
[  574.379896][ T9058] loop8: detected capacity change from 0 to 8
[  574.431141][ T9058] SQUASHFS error: zlib decompression failed, data probably corrupt
[  574.439480][ T9058] SQUASHFS error: Failed to read block 0x9b: -5
[  574.446048][ T9058] SQUASHFS error: Unable to read metadata cache entry [99]
[  574.458057][ T9058] SQUASHFS error: Unable to read inode 0x127
[  574.608096][ T8736] bridge0: port 2(bridge_slave_1) entered blocking state
[  574.615765][ T8736] bridge0: port 2(bridge_slave_1) entered forwarding state
[  574.839956][ T8978] hsr_slave_0: entered promiscuous mode
[  574.861319][ T8978] hsr_slave_1: entered promiscuous mode
[  574.876972][ T8978] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  574.885471][ T8978] Cannot create hsr debugfs directory
[  575.334588][ T9062] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1023'.
[  577.721114][ T8964] 8021q: adding VLAN 0 to HW filter on device batadv0
[  578.379437][ T8978] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  578.413965][ T8978] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  578.439233][ T8978] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  578.501178][ T8978] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  578.603296][ T8964] veth0_vlan: entered promiscuous mode
[  578.738871][ T8964] veth1_vlan: entered promiscuous mode
[  579.217838][ T8964] veth0_macvtap: entered promiscuous mode
[  579.282047][ T8964] veth1_macvtap: entered promiscuous mode
[  579.383247][ T4142] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  579.564045][ T4142] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  579.736336][ T4142] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  579.827446][ T4142] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  580.040245][ T8964] batman_adv: batadv0: Interface activated: batadv_slave_0
[  580.127920][ T8964] batman_adv: batadv0: Interface activated: batadv_slave_1
[  580.307992][ T8964] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  580.318072][ T8964] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  580.327271][ T8964] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  580.336532][ T8964] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  580.461947][ T8978] 8021q: adding VLAN 0 to HW filter on device bond0
[  580.471949][ T4142] bridge_slave_1: left allmulticast mode
[  580.478756][ T4142] bridge_slave_1: left promiscuous mode
[  580.485666][ T4142] bridge0: port 2(bridge_slave_1) entered disabled state
[  580.577208][ T4142] bridge_slave_0: left allmulticast mode
[  580.583336][ T4142] bridge_slave_0: left promiscuous mode
[  580.590029][ T4142] bridge0: port 1(bridge_slave_0) entered disabled state
[  581.121729][ T4142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  581.162103][ T4142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  581.178656][ T4142] bond0 (unregistering): Released all slaves
[  581.527026][ T8978] 8021q: adding VLAN 0 to HW filter on device team0
[  581.721374][ T8736] bridge0: port 1(bridge_slave_0) entered blocking state
[  581.729034][ T8736] bridge0: port 1(bridge_slave_0) entered forwarding state
[  582.069575][ T8736] bridge0: port 2(bridge_slave_1) entered blocking state
[  582.077222][ T8736] bridge0: port 2(bridge_slave_1) entered forwarding state
[  582.732412][ T4142] hsr_slave_0: left promiscuous mode
[  582.754182][ T4142] hsr_slave_1: left promiscuous mode
[  582.762416][ T4142] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  582.770508][ T4142] batman_adv: batadv0: Removing interface: batadv_slave_0
[  582.789750][ T4142] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  582.797443][ T4142] batman_adv: batadv0: Removing interface: batadv_slave_1
[  582.859580][ T4142] veth1_macvtap: left promiscuous mode
[  582.865457][ T4142] veth0_macvtap: left promiscuous mode
[  582.871230][ T4142] veth1_vlan: left promiscuous mode
[  582.878153][ T4142] veth0_vlan: left promiscuous mode
[  583.579859][ T4142] team0 (unregistering): Port device team_slave_1 removed
[  583.654910][ T4142] team0 (unregistering): Port device team_slave_0 removed
[  583.952461][ T9100] @: renamed from vlan0
[  585.080859][ T1099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  585.089452][ T1099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  585.164698][ T4318] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  585.172745][ T4318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  585.909227][ T8978] 8021q: adding VLAN 0 to HW filter on device batadv0
[  588.418083][ T1154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  588.426701][ T1154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  588.634838][ T1099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  588.642949][ T1099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  588.648533][ T8978] veth0_vlan: entered promiscuous mode
[  588.767883][ T8978] veth1_vlan: entered promiscuous mode
[  589.155100][ T8978] veth0_macvtap: entered promiscuous mode
[  589.229934][ T8978] veth1_macvtap: entered promiscuous mode
[  589.368495][ T8978] batman_adv: batadv0: Interface activated: batadv_slave_0
[  589.489100][ T8978] batman_adv: batadv0: Interface activated: batadv_slave_1
[  589.573599][ T8978] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  589.582679][ T8978] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  589.591790][ T8978] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  589.600783][ T8978] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  590.405007][ T5799] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  590.420047][ T5799] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  590.436510][ T5799] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  590.448847][ T5799] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  590.464260][ T5799] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  592.615844][ T5810] Bluetooth: hci0: command tx timeout
[  592.928021][ T9148] chnl_net:caif_netlink_parms(): no params data found
[  594.397721][ T9148] bridge0: port 1(bridge_slave_0) entered blocking state
[  594.405465][ T9148] bridge0: port 1(bridge_slave_0) entered disabled state
[  594.413070][ T9148] bridge_slave_0: entered allmulticast mode
[  594.421888][ T9148] bridge_slave_0: entered promiscuous mode
[  594.556751][ T9148] bridge0: port 2(bridge_slave_1) entered blocking state
[  594.564377][ T9148] bridge0: port 2(bridge_slave_1) entered disabled state
[  594.572061][ T9148] bridge_slave_1: entered allmulticast mode
[  594.580999][ T9148] bridge_slave_1: entered promiscuous mode
[  594.693670][ T5810] Bluetooth: hci0: command tx timeout
[  594.908097][ T9148] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  594.962852][ T9148] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  595.130756][ T9148] team0: Port device team_slave_0 added
[  595.195976][ T9148] team0: Port device team_slave_1 added
[  595.461292][ T9148] batman_adv: batadv0: Adding interface: batadv_slave_0
[  595.470570][ T9148] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  595.499245][ T9148] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  595.559776][ T9183] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1039'.
[  595.570464][ T9183] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1039'.
[  595.711463][ T9148] batman_adv: batadv0: Adding interface: batadv_slave_1
[  595.718912][ T9148] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  595.745725][ T9148] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  596.204419][ T9148] hsr_slave_0: entered promiscuous mode
[  596.217300][ T9148] hsr_slave_1: entered promiscuous mode
[  596.228510][ T9148] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  596.236324][ T9148] Cannot create hsr debugfs directory
[  596.773734][ T5810] Bluetooth: hci0: command tx timeout
[  597.671344][ T3950] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  597.679485][ T3950] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  597.955157][ T3950] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  597.963178][ T3950] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  598.043067][ T9148] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  598.099415][ T9148] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  598.165846][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  598.172550][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  598.192448][ T9148] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  598.280047][ T9148] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  598.853698][ T5810] Bluetooth: hci0: command tx timeout
[  599.459068][ T9148] 8021q: adding VLAN 0 to HW filter on device bond0
[  599.625260][ T9148] 8021q: adding VLAN 0 to HW filter on device team0
[  599.733770][ T4318] bridge0: port 1(bridge_slave_0) entered blocking state
[  599.741288][ T4318] bridge0: port 1(bridge_slave_0) entered forwarding state
[  599.858244][ T4318] bridge0: port 2(bridge_slave_1) entered blocking state
[  599.865896][ T4318] bridge0: port 2(bridge_slave_1) entered forwarding state
[  600.140371][ T9148] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  602.112137][ T9148] 8021q: adding VLAN 0 to HW filter on device batadv0
[  602.775736][ T9148] veth0_vlan: entered promiscuous mode
[  602.983021][ T9148] veth1_vlan: entered promiscuous mode
[  604.254491][ T9148] veth0_macvtap: entered promiscuous mode
[  604.416156][ T9148] veth1_macvtap: entered promiscuous mode
[  604.622358][ T9148] batman_adv: batadv0: Interface activated: batadv_slave_0
[  604.764916][ T9148] batman_adv: batadv0: Interface activated: batadv_slave_1
[  604.829123][ T9148] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  604.838995][ T9148] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  604.848421][ T9148] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  604.857997][ T9148] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  605.880705][ T5799] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  605.890985][ T5799] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  605.910508][ T5799] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  605.945384][ T5799] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  605.970552][ T5799] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  608.153789][ T5799] Bluetooth: hci2: command tx timeout
[  608.184139][ T5848] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  608.433864][ T5848] usb 4-1: Using ep0 maxpacket: 32
[  608.455882][ T5848] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  608.465324][ T5848] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  608.599379][ T5848] usb 4-1: config 0 descriptor??
[  608.643547][ T5848] gspca_main: sunplus-2.14.0 probing 041e:400b
[  609.615804][ T9211] chnl_net:caif_netlink_parms(): no params data found
[  609.717966][ T5848] gspca_sunplus: reg_w_riv err -71
[  609.723899][ T5848] sunplus 4-1:0.0: probe with driver sunplus failed with error -71
[  609.791640][ T5848] usb 4-1: USB disconnect, device number 2
[  610.221953][ T5799] Bluetooth: hci2: command tx timeout
[  611.691857][ T9240] loop3: detected capacity change from 0 to 2048
[  611.822031][ T9242] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  611.847472][   T30] audit: type=1800 audit(1751278691.409:50): pid=9240 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1050" name="file1" dev="loop3" ino=15 res=0 errno=0
[  611.887080][ T9211] bridge0: port 1(bridge_slave_0) entered blocking state
[  611.895722][ T9211] bridge0: port 1(bridge_slave_0) entered disabled state
[  611.903667][ T9211] bridge_slave_0: entered allmulticast mode
[  611.912242][ T9211] bridge_slave_0: entered promiscuous mode
[  611.966633][ T9211] bridge0: port 2(bridge_slave_1) entered blocking state
[  611.975321][ T9211] bridge0: port 2(bridge_slave_1) entered disabled state
[  611.983317][ T9211] bridge_slave_1: entered allmulticast mode
[  611.993862][ T9211] bridge_slave_1: entered promiscuous mode
[  612.186029][ T9211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  612.281879][ T9211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  612.303697][ T5799] Bluetooth: hci2: command tx timeout
[  612.798782][ T9211] team0: Port device team_slave_0 added
[  613.096777][ T9240] syz.3.1050 (9240) used greatest stack depth: 4168 bytes left
[  613.220317][ T9211] team0: Port device team_slave_1 added
[  613.256793][ T5810] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  613.275314][ T5810] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  613.290567][ T5810] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  613.317083][ T5810] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  613.331287][ T5810] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  613.876435][   T35] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  614.086683][ T9211] batman_adv: batadv0: Adding interface: batadv_slave_0
[  614.093955][ T9211] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  614.124536][ T9211] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  614.282668][   T35] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  614.382554][ T5799] Bluetooth: hci2: command tx timeout
[  614.605749][ T9211] batman_adv: batadv0: Adding interface: batadv_slave_1
[  614.613076][ T9211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  614.643270][ T9211] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  614.768437][   T35] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  615.061411][   T35] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  615.556184][ T5799] Bluetooth: hci1: command tx timeout
[  615.725530][   T35] bridge_slave_1: left allmulticast mode
[  615.731523][   T35] bridge_slave_1: left promiscuous mode
[  615.738467][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[  615.762810][   T35] bridge_slave_0: left allmulticast mode
[  615.769503][   T35] bridge_slave_0: left promiscuous mode
[  615.775963][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[  616.354086][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  616.384301][ T9261] process 'syz.3.1054' launched './file2' with NULL argv: empty string added
[  616.427788][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  616.459162][   T35] bond0 (unregistering): Released all slaves
[  616.727786][ T9211] hsr_slave_0: entered promiscuous mode
[  616.737144][ T9211] hsr_slave_1: entered promiscuous mode
[  616.746121][ T9211] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  616.754088][ T9211] Cannot create hsr debugfs directory
[  617.575627][ T5799] Bluetooth: hci1: command tx timeout
[  617.986676][ T3950] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  617.995581][ T3950] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  619.364198][   T35] hsr_slave_0: left promiscuous mode
[  619.376389][   T35] hsr_slave_1: left promiscuous mode
[  619.385298][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  619.393166][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[  619.406312][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  619.414899][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[  619.462984][   T35] veth1_macvtap: left promiscuous mode
[  619.471146][   T35] veth0_macvtap: left promiscuous mode
[  619.477580][   T35] veth1_vlan: left promiscuous mode
[  619.483148][   T35] veth0_vlan: left promiscuous mode
[  619.734189][ T5799] Bluetooth: hci1: command tx timeout
[  620.015915][   T35] team0 (unregistering): Port device team_slave_1 removed
[  620.088068][   T35] team0 (unregistering): Port device team_slave_0 removed
[  620.727091][ T4142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  620.735386][ T4142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  620.980074][ T9211] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  621.116337][ T9211] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  621.237067][ T9211] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  621.523148][ T9245] chnl_net:caif_netlink_parms(): no params data found
[  621.637079][ T9211] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  621.815665][ T5799] Bluetooth: hci1: command tx timeout
[  622.830142][ T9211] 8021q: adding VLAN 0 to HW filter on device bond0
[  623.086163][ T9211] 8021q: adding VLAN 0 to HW filter on device team0
[  623.185713][ T8736] bridge0: port 1(bridge_slave_0) entered blocking state
[  623.193198][ T8736] bridge0: port 1(bridge_slave_0) entered forwarding state
[  623.585180][ T9245] bridge0: port 1(bridge_slave_0) entered blocking state
[  623.592651][ T9245] bridge0: port 1(bridge_slave_0) entered disabled state
[  623.602384][ T9245] bridge_slave_0: entered allmulticast mode
[  623.611865][ T9245] bridge_slave_0: entered promiscuous mode
[  623.777370][ T8736] bridge0: port 2(bridge_slave_1) entered blocking state
[  623.784982][ T8736] bridge0: port 2(bridge_slave_1) entered forwarding state
[  623.851098][ T9245] bridge0: port 2(bridge_slave_1) entered blocking state
[  623.858797][ T9245] bridge0: port 2(bridge_slave_1) entered disabled state
[  623.866554][ T9245] bridge_slave_1: entered allmulticast mode
[  623.875140][ T9245] bridge_slave_1: entered promiscuous mode
[  623.987290][ T9211] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  623.998216][ T9211] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  624.443177][ T9245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  624.566897][ T9245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  624.984771][ T9245] team0: Port device team_slave_0 added
[  625.022140][ T9245] team0: Port device team_slave_1 added
[  625.435929][ T9245] batman_adv: batadv0: Adding interface: batadv_slave_0
[  625.443117][ T9245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  625.471427][ T9245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  625.501431][ T9284] loop0: detected capacity change from 0 to 2048
[  625.695636][ T9245] batman_adv: batadv0: Adding interface: batadv_slave_1
[  625.702731][ T9245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  625.729288][ T9245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  625.929786][ T9288] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  626.334610][ T9211] 8021q: adding VLAN 0 to HW filter on device batadv0
[  626.355823][ T9245] hsr_slave_0: entered promiscuous mode
[  626.366895][ T9245] hsr_slave_1: entered promiscuous mode
[  626.375221][ T9245] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  626.382896][ T9245] Cannot create hsr debugfs directory
[  626.648597][ T9291] loop4: detected capacity change from 0 to 1024
[  626.684846][ T9291] EXT4-fs: Ignoring removed orlov option
[  626.712019][ T9291] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (23153!=20869)
[  626.721960][ T9291] EXT4-fs (loop4): group descriptors corrupted!
[  628.768630][ T9245] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  628.896257][ T9245] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  629.137927][ T9245] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  629.235413][ T9245] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  629.309320][ T9211] veth0_vlan: entered promiscuous mode
[  629.499499][ T9211] veth1_vlan: entered promiscuous mode
[  629.976157][ T9211] veth0_macvtap: entered promiscuous mode
[  630.086650][ T9211] veth1_macvtap: entered promiscuous mode
[  630.347776][ T9211] batman_adv: batadv0: Interface activated: batadv_slave_0
[  630.498264][ T9211] batman_adv: batadv0: Interface activated: batadv_slave_1
[  630.625500][ T9211] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  630.634715][ T9211] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  630.643865][ T9211] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  630.652846][ T9211] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  630.846735][ T9245] 8021q: adding VLAN 0 to HW filter on device bond0
[  630.971165][ T9245] 8021q: adding VLAN 0 to HW filter on device team0
[  631.078619][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[  631.086127][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[  631.240771][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[  631.248339][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[  632.414369][ T1875] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  632.655372][ T1875] usb 1-1: Using ep0 maxpacket: 8
[  632.705185][ T1875] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  632.716132][ T1875] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  632.725567][ T1875] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  632.925051][ T1875] usb 1-1: config 0 descriptor??
[  632.987513][ T1875] gspca_main: vc032x-2.14.0 probing 046d:0892
[  633.247297][ T9323] loop4: detected capacity change from 0 to 2048
[  633.431022][ T5810] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  633.442284][ T5810] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  633.475865][ T5810] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  633.503697][ T5810] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  633.518848][ T5810] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  633.640838][ T9328] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  634.386700][ T1875] gspca_vc032x: reg_w err -71
[  634.394087][ T1875] vc032x 1-1:0.0: probe with driver vc032x failed with error -71
[  634.465647][ T1875] usb 1-1: USB disconnect, device number 2
[  634.947659][ T9245] 8021q: adding VLAN 0 to HW filter on device batadv0
[  635.574867][ T5799] Bluetooth: hci3: command tx timeout
[  637.665695][ T5799] Bluetooth: hci3: command tx timeout
[  638.538440][ T4142] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  638.765422][ T4142] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  638.950891][ T4142] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  639.189196][ T4142] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  639.780283][ T5799] Bluetooth: hci3: command tx timeout
[  639.824162][ T4142] bridge_slave_1: left allmulticast mode
[  639.830159][ T4142] bridge_slave_1: left promiscuous mode
[  639.837536][ T4142] bridge0: port 2(bridge_slave_1) entered disabled state
[  639.854266][ T4142] bridge_slave_0: left allmulticast mode
[  639.860232][ T4142] bridge_slave_0: left promiscuous mode
[  639.867622][ T4142] bridge0: port 1(bridge_slave_0) entered disabled state
[  640.281737][ T4142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  640.358082][ T4142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  640.437990][ T4142] bond0 (unregistering): Released all slaves
[  640.586127][ T9245] veth0_vlan: entered promiscuous mode
[  640.656372][ T9326] chnl_net:caif_netlink_parms(): no params data found
[  640.746637][ T9245] veth1_vlan: entered promiscuous mode
[  641.562703][ T9245] veth0_macvtap: entered promiscuous mode
[  641.807186][ T9245] veth1_macvtap: entered promiscuous mode
[  641.822836][ T5799] Bluetooth: hci3: command tx timeout
[  642.080348][ T4142] hsr_slave_0: left promiscuous mode
[  642.211540][ T4142] hsr_slave_1: left promiscuous mode
[  642.220083][ T4142] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  642.228382][ T4142] batman_adv: batadv0: Removing interface: batadv_slave_0
[  642.361593][ T4142] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  642.374101][ T4142] batman_adv: batadv0: Removing interface: batadv_slave_1
[  642.490804][ T4142] veth1_macvtap: left promiscuous mode
[  642.496984][ T4142] veth0_macvtap: left promiscuous mode
[  642.503098][ T4142] veth1_vlan: left promiscuous mode
[  642.508953][ T4142] veth0_vlan: left promiscuous mode
[  643.168749][ T4142] team0 (unregistering): Port device team_slave_1 removed
[  643.266984][ T4142] team0 (unregistering): Port device team_slave_0 removed
[  643.743115][ T9245] batman_adv: batadv0: Interface activated: batadv_slave_0
[  643.851669][ T9245] batman_adv: batadv0: Interface activated: batadv_slave_1
[  643.975815][ T9245] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  643.985173][ T9245] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  643.994312][ T9245] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  644.003221][ T9245] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  644.052239][ T1099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  644.060875][ T1099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  644.404780][ T3950] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  644.413003][ T3950] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  644.949723][ T9326] bridge0: port 1(bridge_slave_0) entered blocking state
[  644.958185][ T9326] bridge0: port 1(bridge_slave_0) entered disabled state
[  644.966161][ T9326] bridge_slave_0: entered allmulticast mode
[  644.975137][ T9326] bridge_slave_0: entered promiscuous mode
[  645.119786][ T9326] bridge0: port 2(bridge_slave_1) entered blocking state
[  645.127685][ T9326] bridge0: port 2(bridge_slave_1) entered disabled state
[  645.140992][ T9326] bridge_slave_1: entered allmulticast mode
[  645.149733][ T9326] bridge_slave_1: entered promiscuous mode
[  645.228326][ T9384] loop0: detected capacity change from 0 to 2048
[  645.402660][ T9388] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  645.580807][ T9326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  645.686308][ T9326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  646.027562][ T9326] team0: Port device team_slave_0 added
[  646.123027][ T9326] team0: Port device team_slave_1 added
[  646.497788][ T9326] batman_adv: batadv0: Adding interface: batadv_slave_0
[  646.505132][ T9326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  646.534710][ T9326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  646.652319][ T9326] batman_adv: batadv0: Adding interface: batadv_slave_1
[  646.659568][ T9326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  646.690102][ T9326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  647.527212][ T9326] hsr_slave_0: entered promiscuous mode
[  647.537928][ T9326] hsr_slave_1: entered promiscuous mode
[  647.546823][ T9326] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  647.554795][ T9326] Cannot create hsr debugfs directory
[  648.521793][   T30] audit: type=1326 audit(1751278728.089:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9410 comm="syz.0.1080" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45539 code=0x7ffc0000
[  648.645906][   T30] audit: type=1326 audit(1751278728.119:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9410 comm="syz.0.1080" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f45539 code=0x7ffc0000
[  648.668450][   T30] audit: type=1326 audit(1751278728.119:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9410 comm="syz.0.1080" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45539 code=0x7ffc0000
[  648.690817][   T30] audit: type=1326 audit(1751278728.119:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9410 comm="syz.0.1080" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45539 code=0x7ffc0000
[  648.714824][   T30] audit: type=1326 audit(1751278728.139:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9410 comm="syz.0.1080" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f45539 code=0x7ffc0000
[  648.739647][   T30] audit: type=1326 audit(1751278728.139:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9410 comm="syz.0.1080" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45539 code=0x7ffc0000
[  648.762679][   T30] audit: type=1326 audit(1751278728.139:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9410 comm="syz.0.1080" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45539 code=0x7ffc0000
[  648.784868][   T30] audit: type=1326 audit(1751278728.149:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9410 comm="syz.0.1080" exe="/root/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf7f45539 code=0x7ffc0000
[  648.807093][   T30] audit: type=1326 audit(1751278728.149:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9410 comm="syz.0.1080" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f45558 code=0x7ffc0000
[  648.832288][   T30] audit: type=1326 audit(1751278728.149:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9410 comm="syz.0.1080" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f45558 code=0x7ffc0000
[  651.311072][ T9326] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  651.581115][ T9326] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  651.611612][ T5850] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[  651.766553][ T9326] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  651.988661][ T5850] usb 1-1: unable to get BOS descriptor or descriptor too short
[  652.056183][ T5850] usb 1-1: not running at top speed; connect to a high speed hub
[  652.100406][ T9326] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  652.221347][ T3950] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  652.229470][ T3950] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  652.283927][ T5850] usb 1-1: config 219 has 1 interface, different from the descriptor's value: 2
[  652.293669][ T5850] usb 1-1: config 219 interface 0 has no altsetting 0
[  652.300716][ T5850] usb 1-1: config 219 interface 0 has no altsetting 1
[  652.360164][ T3950] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  652.368498][ T3950] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  652.671656][ T5850] usb 1-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice=a2.0e
[  652.681185][ T5850] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  652.689612][ T5850] usb 1-1: Product: syz
[  652.694126][ T5850] usb 1-1: Manufacturer: syz
[  652.698971][ T5850] usb 1-1: SerialNumber: syz
[  652.750497][ T9326] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  652.852357][ T9326] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  652.989006][ T9326] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  653.165797][ T9326] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  653.380604][ T5850] usb 1-1: selecting invalid altsetting 0
[  653.394483][ T5850] usb 1-1: selecting invalid altsetting 0
[  653.713900][ T1875] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  653.739122][ T5850] usb 1-1: USB disconnect, device number 3
[  653.927388][ T1875] usb 8-1: Using ep0 maxpacket: 32
[  654.026770][ T1875] usb 8-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  654.036748][ T1875] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  654.049539][ T1875] usb 8-1: Product: syz
[  654.055384][ T1875] usb 8-1: Manufacturer: syz
[  654.060154][ T1875] usb 8-1: SerialNumber: syz
[  654.200492][ T1875] usb 8-1: config 0 descriptor??
[  654.257164][ T1875] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  655.366889][ T9326] 8021q: adding VLAN 0 to HW filter on device bond0
[  655.668942][ T1875] gspca_ov534_9: reg_r err -71
[  655.710420][ T9326] 8021q: adding VLAN 0 to HW filter on device team0
[  655.827812][ T1099] bridge0: port 1(bridge_slave_0) entered blocking state
[  655.835484][ T1099] bridge0: port 1(bridge_slave_0) entered forwarding state
[  655.943969][ T1875] gspca_ov534_9: Unknown sensor 0000
[  655.944214][ T1875] ov534_9 8-1:0.0: probe with driver ov534_9 failed with error -22
[  656.024053][ T1099] bridge0: port 2(bridge_slave_1) entered blocking state
[  656.031750][ T1099] bridge0: port 2(bridge_slave_1) entered forwarding state
[  656.039778][ T1875] usb 8-1: USB disconnect, device number 2
[  656.481197][ T9326] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  656.496273][ T9326] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  658.987206][ T9326] 8021q: adding VLAN 0 to HW filter on device batadv0
[  659.448425][ T9326] veth0_vlan: entered promiscuous mode
[  659.611788][ T9326] veth1_vlan: entered promiscuous mode
[  659.626539][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  659.633267][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  660.427949][ T9326] veth0_macvtap: entered promiscuous mode
[  660.545808][ T9326] veth1_macvtap: entered promiscuous mode
[  660.692768][ T9326] batman_adv: batadv0: Interface activated: batadv_slave_0
[  660.825234][ T9326] batman_adv: batadv0: Interface activated: batadv_slave_1
[  660.935982][ T9326] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  660.945080][ T9326] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  660.954159][ T9326] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  660.963078][ T9326] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  661.878869][   T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  662.120989][   T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  662.410589][   T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  662.780904][   T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  663.097144][ T5810] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  663.150450][ T5810] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  663.171079][   T35] bridge_slave_1: left allmulticast mode
[  663.178849][   T35] bridge_slave_1: left promiscuous mode
[  663.185923][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[  663.201565][ T5810] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  663.211759][   T35] bridge_slave_0: left allmulticast mode
[  663.218091][   T35] bridge_slave_0: left promiscuous mode
[  663.224574][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[  663.275628][ T5810] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  663.288346][ T5810] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  664.007445][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  664.093658][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  664.141403][   T35] bond0 (unregistering): Released all slaves
[  665.413750][ T5810] Bluetooth: hci4: command tx timeout
[  665.453779][ T1875] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  665.800845][ T1875] usb 8-1: Using ep0 maxpacket: 8
[  666.096013][ T1875] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  666.119748][ T1875] usb 8-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  666.138187][ T1875] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  666.596163][ T1875] usb 8-1: config 0 descriptor??
[  666.648687][ T1875] gspca_main: vc032x-2.14.0 probing 046d:0892
[  666.950600][   T35] hsr_slave_0: left promiscuous mode
[  666.961162][   T35] hsr_slave_1: left promiscuous mode
[  666.970902][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  666.979884][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[  667.035595][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  667.043702][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[  667.120530][   T35] veth1_macvtap: left promiscuous mode
[  667.127601][   T35] veth0_macvtap: left promiscuous mode
[  667.133693][   T35] veth1_vlan: left promiscuous mode
[  667.139306][   T35] veth0_vlan: left promiscuous mode
[  667.493789][ T5810] Bluetooth: hci4: command tx timeout
[  667.986205][ T1875] gspca_vc032x: reg_r err -71
[  667.991196][ T1875] vc032x 8-1:0.0: probe with driver vc032x failed with error -71
[  668.027037][ T1875] usb 8-1: USB disconnect, device number 3
[  668.145994][   T35] team0 (unregistering): Port device team_slave_1 removed
[  668.181004][   T35] team0 (unregistering): Port device team_slave_0 removed
[  669.134269][ T9500] rtc_cmos 00:00: Alarms can be up to one day in the future
[  669.346390][ T5850] rtc_cmos 00:00: Alarms can be up to one day in the future
[  669.354428][ T5850] rtc_cmos 00:00: Alarms can be up to one day in the future
[  669.362318][ T5850] rtc_cmos 00:00: Alarms can be up to one day in the future
[  669.370513][ T5850] rtc_cmos 00:00: Alarms can be up to one day in the future
[  669.378377][ T5850] rtc rtc0: __rtc_set_alarm: err=-22
[  669.500013][ T9485] chnl_net:caif_netlink_parms(): no params data found
[  669.575726][ T5810] Bluetooth: hci4: command tx timeout
[  670.441444][ T9509] loop7: detected capacity change from 0 to 2048
[  670.505100][ T9509] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024)
[  670.666383][ T9516] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  671.674220][ T5810] Bluetooth: hci4: command tx timeout
[  671.751269][ T9485] bridge0: port 1(bridge_slave_0) entered blocking state
[  671.765085][ T9485] bridge0: port 1(bridge_slave_0) entered disabled state
[  671.772732][ T9485] bridge_slave_0: entered allmulticast mode
[  671.781572][ T9485] bridge_slave_0: entered promiscuous mode
[  671.886684][ T9485] bridge0: port 2(bridge_slave_1) entered blocking state
[  671.894967][ T9485] bridge0: port 2(bridge_slave_1) entered disabled state
[  671.902608][ T9485] bridge_slave_1: entered allmulticast mode
[  671.911318][ T9485] bridge_slave_1: entered promiscuous mode
[  672.088135][ T9485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  672.117364][ T9485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  672.307786][ T9485] team0: Port device team_slave_0 added
[  672.386705][ T9485] team0: Port device team_slave_1 added
[  672.837232][ T9485] batman_adv: batadv0: Adding interface: batadv_slave_0
[  672.844630][ T9485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  672.871185][ T9485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  673.029933][ T9485] batman_adv: batadv0: Adding interface: batadv_slave_1
[  673.037929][ T9485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  673.064536][ T9485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  673.700586][ T9485] hsr_slave_0: entered promiscuous mode
[  673.715676][ T9485] hsr_slave_1: entered promiscuous mode
[  673.723738][ T9485] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  673.731431][ T9485] Cannot create hsr debugfs directory
[  673.882164][ T9534] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1110'.
[  674.427228][ T5799] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  674.437115][ T5799] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  674.471644][ T5799] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  674.492121][ T5799] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  674.517609][ T5799] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  676.626068][ T5810] Bluetooth: hci5: command tx timeout
[  676.722083][ T9485] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  676.756010][ T9485] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  676.848186][ T9485] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  676.889239][ T9485] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  677.741786][ T9535] chnl_net:caif_netlink_parms(): no params data found
[  677.958141][ T3584] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  677.968610][ T3584] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  678.392173][ T3584] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  678.401009][ T3584] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  678.693798][ T5810] Bluetooth: hci5: command tx timeout
[  678.765395][ T9485] 8021q: adding VLAN 0 to HW filter on device bond0
[  678.981873][ T9485] 8021q: adding VLAN 0 to HW filter on device team0
[  679.111293][ T9360] bridge0: port 1(bridge_slave_0) entered blocking state
[  679.118783][ T9360] bridge0: port 1(bridge_slave_0) entered forwarding state
[  679.224219][ T9360] bridge0: port 2(bridge_slave_1) entered blocking state
[  679.231727][ T9360] bridge0: port 2(bridge_slave_1) entered forwarding state
[  679.840585][ T9485] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  679.856787][ T9485] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  680.064423][ T9552] Driver unsupported XDP return value 0 on prog  (id 220) dev N/A, expect packet loss!
[  680.776611][ T5810] Bluetooth: hci5: command tx timeout
[  680.855988][ T9535] bridge0: port 1(bridge_slave_0) entered blocking state
[  680.863885][ T9535] bridge0: port 1(bridge_slave_0) entered disabled state
[  680.881718][ T9535] bridge_slave_0: entered allmulticast mode
[  680.891402][ T9535] bridge_slave_0: entered promiscuous mode
[  681.028823][ T9535] bridge0: port 2(bridge_slave_1) entered blocking state
[  681.036523][ T9535] bridge0: port 2(bridge_slave_1) entered disabled state
[  681.044519][ T9535] bridge_slave_1: entered allmulticast mode
[  681.052893][ T9535] bridge_slave_1: entered promiscuous mode
[  681.559834][ T9535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  681.756043][ T9535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  682.122439][ T9535] team0: Port device team_slave_0 added
[  682.198350][ T9535] team0: Port device team_slave_1 added
[  682.637787][ T9535] batman_adv: batadv0: Adding interface: batadv_slave_0
[  682.646675][ T9535] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  682.674146][ T9535] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  682.853704][ T5810] Bluetooth: hci5: command tx timeout
[  682.881349][ T9535] batman_adv: batadv0: Adding interface: batadv_slave_1
[  682.889199][ T9535] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  682.915844][ T9535] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  683.051652][ T9485] 8021q: adding VLAN 0 to HW filter on device batadv0
[  683.399630][ T9566] loop2: detected capacity change from 0 to 1024
[  683.491057][ T9566] EXT4-fs: Ignoring removed orlov option
[  683.497277][ T9566] EXT4-fs: Ignoring removed nomblk_io_submit option
[  683.548930][ T9535] hsr_slave_0: entered promiscuous mode
[  683.557932][ T9535] hsr_slave_1: entered promiscuous mode
[  683.565904][ T9535] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  683.573797][ T9535] Cannot create hsr debugfs directory
[  683.931442][ T9566] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  684.950373][ T9326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  685.451422][ T9535] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  685.559087][ T9535] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  685.627987][ T9535] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  685.667003][ T9535] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  687.481821][ T9485] veth0_vlan: entered promiscuous mode
[  687.500901][ T9535] 8021q: adding VLAN 0 to HW filter on device bond0
[  687.750886][ T9535] 8021q: adding VLAN 0 to HW filter on device team0
[  687.929698][ T8736] bridge0: port 1(bridge_slave_0) entered blocking state
[  687.937365][ T8736] bridge0: port 1(bridge_slave_0) entered forwarding state
[  688.105598][ T9485] veth1_vlan: entered promiscuous mode
[  688.153251][ T8736] bridge0: port 2(bridge_slave_1) entered blocking state
[  688.160812][ T8736] bridge0: port 2(bridge_slave_1) entered forwarding state
[  688.691991][ T9535] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  688.819841][ T1118] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  688.996290][ T1118] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  689.195716][ T1118] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  689.368402][ T1118] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  690.054017][ T9485] veth0_macvtap: entered promiscuous mode
[  690.386774][ T9485] veth1_macvtap: entered promiscuous mode
[  690.777768][ T9485] batman_adv: batadv0: Interface activated: batadv_slave_0
[  690.822364][ T1118] bridge_slave_1: left allmulticast mode
[  690.828572][ T1118] bridge_slave_1: left promiscuous mode
[  690.835439][ T1118] bridge0: port 2(bridge_slave_1) entered disabled state
[  691.034903][ T1118] bridge_slave_0: left allmulticast mode
[  691.040730][ T1118] bridge_slave_0: left promiscuous mode
[  691.049549][ T1118] bridge0: port 1(bridge_slave_0) entered disabled state
[  692.006892][ T1118] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  692.008441][ T5799] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  692.026276][ T5799] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  692.057418][ T5799] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  692.064797][ T1118] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  692.079454][ T1118] bond0 (unregistering): Released all slaves
[  692.106841][ T5799] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  692.122171][ T5799] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  692.278539][ T9590] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1118'.
[  692.334885][ T9485] batman_adv: batadv0: Interface activated: batadv_slave_1
[  692.420978][ T9485] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  692.430598][ T9485] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  692.440050][ T9485] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  692.455299][ T9485] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  692.938455][ T9535] 8021q: adding VLAN 0 to HW filter on device batadv0
[  694.251020][ T5810] Bluetooth: hci6: command tx timeout
[  694.461667][ T1118] hsr_slave_0: left promiscuous mode
[  694.595685][ T1118] hsr_slave_1: left promiscuous mode
[  694.603916][ T1118] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  694.611710][ T1118] batman_adv: batadv0: Removing interface: batadv_slave_0
[  694.781907][ T1118] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  694.789741][ T1118] batman_adv: batadv0: Removing interface: batadv_slave_1
[  695.041328][ T1118] veth1_macvtap: left promiscuous mode
[  695.047127][ T1118] veth0_macvtap: left promiscuous mode
[  695.052962][ T1118] veth1_vlan: left promiscuous mode
[  695.058780][ T1118] veth0_vlan: left promiscuous mode
[  695.634555][ T5799] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  695.645227][ T5799] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  695.664549][ T5799] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  695.726702][ T5799] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  695.744647][ T5799] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  696.165390][ T1118] team0 (unregistering): Port device team_slave_1 removed
[  696.189828][ T1118] team0 (unregistering): Port device team_slave_0 removed
[  696.323951][ T5799] Bluetooth: hci6: command tx timeout
[  697.849306][ T5799] Bluetooth: hci7: command tx timeout
[  698.393594][ T5799] Bluetooth: hci6: command tx timeout
[  699.896415][ T5799] Bluetooth: hci7: command tx timeout
[  700.230361][ T9587] chnl_net:caif_netlink_parms(): no params data found
[  700.371382][ T4142] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  700.466113][ T5799] Bluetooth: hci6: command tx timeout
[  700.589632][ T4142] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  700.852396][ T4142] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  701.058225][ T4142] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  701.523107][ T9535] veth0_vlan: entered promiscuous mode
[  701.636120][ T4142] bridge_slave_1: left allmulticast mode
[  701.642056][ T4142] bridge_slave_1: left promiscuous mode
[  701.648561][ T4142] bridge0: port 2(bridge_slave_1) entered disabled state
[  701.749697][ T4142] bridge_slave_0: left allmulticast mode
[  701.755738][ T4142] bridge_slave_0: left promiscuous mode
[  701.767375][ T4142] bridge0: port 1(bridge_slave_0) entered disabled state
[  701.973618][ T5799] Bluetooth: hci7: command tx timeout
[  702.359978][ T4142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  702.390026][ T4142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  702.416644][ T4142] bond0 (unregistering): Released all slaves
[  702.707386][ T9535] veth1_vlan: entered promiscuous mode
[  703.327955][ T9587] bridge0: port 1(bridge_slave_0) entered blocking state
[  703.337241][ T9587] bridge0: port 1(bridge_slave_0) entered disabled state
[  703.346775][ T9587] bridge_slave_0: entered allmulticast mode
[  703.357900][ T9587] bridge_slave_0: entered promiscuous mode
[  703.407990][ T9598] chnl_net:caif_netlink_parms(): no params data found
[  703.468638][ T9587] bridge0: port 2(bridge_slave_1) entered blocking state
[  703.476096][ T9587] bridge0: port 2(bridge_slave_1) entered disabled state
[  703.483968][ T9587] bridge_slave_1: entered allmulticast mode
[  703.492530][ T9587] bridge_slave_1: entered promiscuous mode
[  704.144341][ T5799] Bluetooth: hci7: command tx timeout
[  704.869976][ T9535] veth0_macvtap: entered promiscuous mode
[  705.112118][ T4142] hsr_slave_0: left promiscuous mode
[  705.168202][ T4142] hsr_slave_1: left promiscuous mode
[  705.176280][ T4142] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  705.184269][ T4142] batman_adv: batadv0: Removing interface: batadv_slave_0
[  705.369906][ T4142] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  705.377851][ T4142] batman_adv: batadv0: Removing interface: batadv_slave_1
[  705.615248][ T4142] veth1_macvtap: left promiscuous mode
[  705.621148][ T4142] veth0_macvtap: left promiscuous mode
[  705.627229][ T4142] veth1_vlan: left promiscuous mode
[  705.632793][ T4142] veth0_vlan: left promiscuous mode
[  705.880781][ T9637] loop2: detected capacity change from 0 to 32768
[  706.167209][ T9637] workqueue: Failed to create a rescuer kthread for wq "btree_update": -EINTR
[  706.167523][ T9637] bcachefs (loop2): shutdown complete
[  706.602112][ T4142] team0 (unregistering): Port device team_slave_1 removed
[  706.629201][ T4142] team0 (unregistering): Port device team_slave_0 removed
[  706.867693][ T9587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  706.900989][ T9535] veth1_macvtap: entered promiscuous mode
[  707.266296][ T9587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  707.735603][ T9637] bcachefs: bch2_fs_get_tree() error: ENOMEM_btree_interior_update_worker_init
[  707.792760][ T9587] team0: Port device team_slave_0 added
[  707.826870][ T9535] batman_adv: batadv0: Interface activated: batadv_slave_0
[  707.890249][ T9587] team0: Port device team_slave_1 added
[  707.915827][ T9535] batman_adv: batadv0: Interface activated: batadv_slave_1
[  708.248362][ T9535] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  708.257630][ T9535] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  708.266781][ T9535] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  708.275804][ T9535] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  708.325697][ T9587] batman_adv: batadv0: Adding interface: batadv_slave_0
[  708.332809][ T9587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  708.359784][ T9587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  708.581394][ T9587] batman_adv: batadv0: Adding interface: batadv_slave_1
[  708.588575][ T9587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  708.615672][ T9587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  708.641883][ T9598] bridge0: port 1(bridge_slave_0) entered blocking state
[  708.651706][ T9598] bridge0: port 1(bridge_slave_0) entered disabled state
[  708.659924][ T9598] bridge_slave_0: entered allmulticast mode
[  708.668427][ T9598] bridge_slave_0: entered promiscuous mode
[  708.731709][ T9598] bridge0: port 2(bridge_slave_1) entered blocking state
[  708.741360][ T9598] bridge0: port 2(bridge_slave_1) entered disabled state
[  708.749310][ T9598] bridge_slave_1: entered allmulticast mode
[  708.757909][ T9598] bridge_slave_1: entered promiscuous mode
[  709.220225][ T9587] hsr_slave_0: entered promiscuous mode
[  709.229278][ T9587] hsr_slave_1: entered promiscuous mode
[  709.242154][ T9587] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  709.249980][ T9587] Cannot create hsr debugfs directory
[  709.323667][ T9598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  709.356782][ T9598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  709.591320][ T9359] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  709.601126][ T9359] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  709.674807][ T9598] team0: Port device team_slave_0 added
[  709.787412][ T9598] team0: Port device team_slave_1 added
[  710.048151][ T8736] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  710.059509][ T8736] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  710.142293][ T9598] batman_adv: batadv0: Adding interface: batadv_slave_0
[  710.150942][ T9598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  710.181631][ T9598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  710.455824][ T9598] batman_adv: batadv0: Adding interface: batadv_slave_1
[  710.462942][ T9598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  710.494842][ T9598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  710.697508][ T9587] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  710.881491][ T9587] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  711.011001][ T9587] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  711.067459][ T9598] hsr_slave_0: entered promiscuous mode
[  711.089526][ T9598] hsr_slave_1: entered promiscuous mode
[  711.097712][ T9598] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  711.105529][ T9598] Cannot create hsr debugfs directory
[  711.273886][ T9587] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  712.170230][ T9587] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  712.261384][ T9587] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  712.349405][ T9587] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  712.441611][ T9587] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  714.319182][ T9598] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  714.381691][ T9598] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  714.455809][ T9670] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1126'.
[  714.472835][ T9598] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  714.528098][ T9598] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  714.807397][ T9587] 8021q: adding VLAN 0 to HW filter on device bond0
[  714.991328][ T9587] 8021q: adding VLAN 0 to HW filter on device team0
[  715.121529][ T3950] bridge0: port 1(bridge_slave_0) entered blocking state
[  715.128959][ T3950] bridge0: port 1(bridge_slave_0) entered forwarding state
[  715.369093][ T3950] bridge0: port 2(bridge_slave_1) entered blocking state
[  715.376768][ T3950] bridge0: port 2(bridge_slave_1) entered forwarding state
[  715.848521][ T9587] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  716.869401][ T9684] loop6: detected capacity change from 0 to 1024
[  717.006358][ T9684] EXT4-fs: Ignoring removed orlov option
[  717.012389][ T9684] EXT4-fs: Ignoring removed nomblk_io_submit option
[  717.404117][ T9684] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  717.536524][   T30] kauditd_printk_skb: 55 callbacks suppressed
[  717.536599][   T30] audit: type=1800 audit(1751278797.099:116): pid=9684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1129" name="bus" dev="loop6" ino=18 res=0 errno=0
[  718.109956][ T9598] 8021q: adding VLAN 0 to HW filter on device bond0
[  718.387715][ T9598] 8021q: adding VLAN 0 to HW filter on device team0
[  718.435695][ T9359] bridge0: port 1(bridge_slave_0) entered blocking state
[  718.443767][ T9359] bridge0: port 1(bridge_slave_0) entered forwarding state
[  718.725162][ T9359] bridge0: port 2(bridge_slave_1) entered blocking state
[  718.732719][ T9359] bridge0: port 2(bridge_slave_1) entered forwarding state
[  719.049737][ T9485] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  719.180228][ T9587] 8021q: adding VLAN 0 to HW filter on device batadv0
[  720.110970][ T9705] loop6: detected capacity change from 0 to 256
[  720.144454][ T9587] veth0_vlan: entered promiscuous mode
[  720.362436][ T9587] veth1_vlan: entered promiscuous mode
[  720.545621][ T9705] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d)
[  721.023358][ T9587] veth0_macvtap: entered promiscuous mode
[  721.064647][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  721.071327][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  721.145612][ T1118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  721.153753][ T1118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  721.269044][ T9587] veth1_macvtap: entered promiscuous mode
[  721.567819][ T9587] batman_adv: batadv0: Interface activated: batadv_slave_0
[  721.715218][ T9359] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  721.723891][ T9359] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  721.824416][ T9587] batman_adv: batadv0: Interface activated: batadv_slave_1
[  722.016633][ T9587] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  722.026510][ T9587] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  722.042043][ T9587] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  722.052717][ T9587] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  722.438595][ T9359] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  722.598207][ T9359] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  722.805508][ T9359] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  723.068798][ T9359] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  723.309505][ T9598] 8021q: adding VLAN 0 to HW filter on device batadv0
[  723.812816][ T9359] bridge_slave_1: left allmulticast mode
[  723.821880][ T9359] bridge_slave_1: left promiscuous mode
[  723.829410][ T9359] bridge0: port 2(bridge_slave_1) entered disabled state
[  723.960321][ T9359] bridge_slave_0: left allmulticast mode
[  723.967085][ T9359] bridge_slave_0: left promiscuous mode
[  723.973800][ T9359] bridge0: port 1(bridge_slave_0) entered disabled state
[  724.796692][ T9359] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  725.018674][ T9359] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  725.081416][ T9359] bond0 (unregistering): Released all slaves
[  725.204073][ T9728] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1135'.
[  726.208214][ T9738] loop6: detected capacity change from 0 to 1024
[  726.284257][ T9738] EXT4-fs: Ignoring removed orlov option
[  726.290308][ T9738] EXT4-fs: Ignoring removed nomblk_io_submit option
[  726.887088][ T9738] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  726.976980][ T9359] hsr_slave_0: left promiscuous mode
[  727.054960][ T9359] hsr_slave_1: left promiscuous mode
[  727.063262][ T9359] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  727.071665][ T9359] batman_adv: batadv0: Removing interface: batadv_slave_0
[  727.078334][   T30] audit: type=1800 audit(1751278806.619:117): pid=9738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1138" name="bus" dev="loop6" ino=18 res=0 errno=0
[  727.196970][ T9359] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  727.204843][ T9359] batman_adv: batadv0: Removing interface: batadv_slave_1
[  727.221577][ T9740] loop8: detected capacity change from 0 to 8192
[  727.394947][ T9359] veth1_macvtap: left promiscuous mode
[  727.400843][ T9359] veth0_macvtap: left promiscuous mode
[  727.406938][ T9359] veth1_vlan: left promiscuous mode
[  727.412564][ T9359] veth0_vlan: left promiscuous mode
[  727.901296][ T9485] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  728.337654][ T9359] team0 (unregistering): Port device team_slave_1 removed
[  728.375798][ T9359] team0 (unregistering): Port device team_slave_0 removed
[  729.544401][ T9598] veth0_vlan: entered promiscuous mode
[  730.065759][ T9359] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  730.157346][ T9598] veth1_vlan: entered promiscuous mode
[  730.278091][ T9359] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  730.518727][ T9359] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  730.698792][ T9359] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  731.041473][ T9598] veth0_macvtap: entered promiscuous mode
[  731.122061][ T9598] veth1_macvtap: entered promiscuous mode
[  731.284199][ T9359] bridge_slave_1: left allmulticast mode
[  731.290147][ T9359] bridge_slave_1: left promiscuous mode
[  731.299942][ T9359] bridge0: port 2(bridge_slave_1) entered disabled state
[  731.382298][ T9359] bridge_slave_0: left allmulticast mode
[  731.388590][ T9359] bridge_slave_0: left promiscuous mode
[  731.395939][ T9359] bridge0: port 1(bridge_slave_0) entered disabled state
[  731.958313][ T9359] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  732.041610][ T9359] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  732.080665][ T9359] bond0 (unregistering): Released all slaves
[  732.134831][ T9766] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1145'.
[  732.258450][ T9598] batman_adv: batadv0: Interface activated: batadv_slave_0
[  732.377260][ T9598] batman_adv: batadv0: Interface activated: batadv_slave_1
[  732.620788][ T9598] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  732.630599][ T9598] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  732.639838][ T9598] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  732.649175][ T9598] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  733.491005][ T9779] loop6: detected capacity change from 0 to 1024
[  733.586563][ T9779] EXT4-fs: Ignoring removed nomblk_io_submit option
[  733.850810][ T9359] hsr_slave_0: left promiscuous mode
[  733.914014][ T9359] hsr_slave_1: left promiscuous mode
[  733.922388][ T9359] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  733.930382][ T9359] batman_adv: batadv0: Removing interface: batadv_slave_0
[  734.009466][ T9779] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  734.044086][ T9359] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  734.052029][ T9359] batman_adv: batadv0: Removing interface: batadv_slave_1
[  734.093029][ T9359] veth1_macvtap: left promiscuous mode
[  734.098998][ T9359] veth0_macvtap: left promiscuous mode
[  734.105134][ T9359] veth1_vlan: left promiscuous mode
[  734.110693][ T9359] veth0_vlan: left promiscuous mode
[  734.896898][ T9359] team0 (unregistering): Port device team_slave_1 removed
[  734.935324][ T9485] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  734.956454][ T9359] team0 (unregistering): Port device team_slave_0 removed
[  735.067454][ T9775] loop2: detected capacity change from 0 to 8192
[  736.237030][ T4318] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  736.245879][ T4318] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  736.360370][ T4318] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  736.368603][ T4318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  738.156515][ T9813] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1156'.
[  739.537444][   T30] audit: type=1326 audit(1751278819.099:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9828 comm="syz.6.1162" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f78539 code=0x0
[  740.585227][ T9823] loop2: detected capacity change from 0 to 8192
[  741.892020][ T9849] loop6: detected capacity change from 0 to 128
[  741.989725][ T9849] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  742.151305][ T9849] ext4 filesystem being mounted at /18/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  742.299848][ T9360] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  742.308832][ T9360] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  742.525821][ T4318] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  742.534806][ T4318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  742.924903][ T9856] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1168'.
[  745.921273][ T9485] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  746.383817][   T30] audit: type=1326 audit(1751278825.949:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9871 comm="syz.6.1174" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f78539 code=0x0
[  747.747978][ T9876] loop8: detected capacity change from 0 to 8192
[  753.597166][ T9897] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1179'.
[  759.561267][   T30] audit: type=1326 audit(1751278839.129:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9917 comm="syz.2.1186" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f73539 code=0x0
[  760.933086][ T9927] loop6: detected capacity change from 0 to 8192
[  761.230146][ T9934] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1191'.
[  766.015341][ T5810] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  766.025262][ T5810] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  766.037315][ T5810] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  766.054904][ T5810] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  766.100811][ T5810] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  766.473674][   T30] audit: type=1326 audit(1751278845.999:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9956 comm="syz.9.1201" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x0
[  767.121402][ T9359] bridge_slave_1: left allmulticast mode
[  767.128366][ T9359] bridge_slave_1: left promiscuous mode
[  767.135099][ T9359] bridge0: port 2(bridge_slave_1) entered disabled state
[  768.276038][ T5810] Bluetooth: hci0: command tx timeout
[  768.404362][ T9359] bridge_slave_0: left allmulticast mode
[  768.410435][ T9359] bridge_slave_0: left promiscuous mode
[  768.417472][ T9359] bridge0: port 1(bridge_slave_0) entered disabled state
[  768.745091][ T9359] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  768.805742][ T9359] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  768.880998][ T9359] bond0 (unregistering): Released all slaves
[  769.084963][ T9966] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1203'.
[  769.252740][ T9359] tipc: Left network mode
[  770.087788][ T9359] hsr_slave_0: left promiscuous mode
[  770.096409][ T9359] batman_adv: batadv0: Removing interface: batadv_slave_0
[  770.273213][ T9359] batman_adv: batadv0: Removing interface: batadv_slave_1
[  770.302355][ T5799] Bluetooth: hci0: command tx timeout
[  771.248439][ T9969] loop1: detected capacity change from 0 to 8192
[  771.342833][ T9359] team0 (unregistering): Port device team_slave_1 removed
[  771.372209][ T9976] capability: warning: `syz.6.1207' uses deprecated v2 capabilities in a way that may be insecure
[  771.412298][ T9359] team0 (unregistering): Port device team_slave_0 removed
[  771.431568][ T1154] smc: removing ib device syz!
[  772.433843][ T5810] Bluetooth: hci0: command tx timeout
[  774.754303][ T5810] Bluetooth: hci0: command tx timeout
[  774.927017][ T9954] chnl_net:caif_netlink_parms(): no params data found
[  775.033541][   T30] audit: type=1326 audit(1751278854.579:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9990 comm="syz.2.1211" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f73539 code=0x0
[  776.320964][ T9359] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  776.532744][ T9359] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  776.764848][ T9359] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  776.828677][T10012] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1215'.
[  777.002482][ T9359] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  777.589023][ T9359] bridge_slave_1: left allmulticast mode
[  777.595233][ T9359] bridge_slave_1: left promiscuous mode
[  777.601863][ T9359] bridge0: port 2(bridge_slave_1) entered disabled state
[  777.667344][ T9359] bridge_slave_0: left allmulticast mode
[  777.673230][ T9359] bridge_slave_0: left promiscuous mode
[  777.680601][ T9359] bridge0: port 1(bridge_slave_0) entered disabled state
[  777.788070][T10017] overlayfs: failed to resolve './file2': -2
[  778.428834][ T9359] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  778.475075][ T9359] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  778.503996][ T9359] bond0 (unregistering): Released all slaves
[  778.578650][ T9954] bridge0: port 1(bridge_slave_0) entered blocking state
[  778.586336][ T9954] bridge0: port 1(bridge_slave_0) entered disabled state
[  778.594108][ T9954] bridge_slave_0: entered allmulticast mode
[  778.603580][ T9954] bridge_slave_0: entered promiscuous mode
[  778.993974][ T9954] bridge0: port 2(bridge_slave_1) entered blocking state
[  779.001778][ T9954] bridge0: port 2(bridge_slave_1) entered disabled state
[  779.009872][ T9954] bridge_slave_1: entered allmulticast mode
[  779.018605][ T9954] bridge_slave_1: entered promiscuous mode
[  779.172996][T10020] loop9: detected capacity change from 0 to 8192
[  779.456962][T10024] ieee802154 phy0 wpan0: encryption failed: -22
[  779.499159][ T5810] Bluetooth: hci3: command 0x0406 tx timeout
[  779.595060][ T9954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  779.621126][ T9954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  780.084063][ T9359] hsr_slave_0: left promiscuous mode
[  780.104615][ T9359] hsr_slave_1: left promiscuous mode
[  780.112653][ T9359] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  780.121187][ T9359] batman_adv: batadv0: Removing interface: batadv_slave_0
[  780.196666][ T9359] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  780.209281][ T9359] batman_adv: batadv0: Removing interface: batadv_slave_1
[  780.321313][ T9359] veth1_macvtap: left promiscuous mode
[  780.327279][ T9359] veth0_macvtap: left promiscuous mode
[  780.333226][ T9359] veth1_vlan: left promiscuous mode
[  780.339010][ T9359] veth0_vlan: left promiscuous mode
[  781.393239][ T9359] team0 (unregistering): Port device team_slave_1 removed
[  781.449774][ T9359] team0 (unregistering): Port device team_slave_0 removed
[  781.730427][   T30] audit: type=1326 audit(1751278861.279:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10034 comm="syz.6.1225" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f78539 code=0x0
[  782.005287][ T9954] team0: Port device team_slave_0 added
[  782.083179][ T9954] team0: Port device team_slave_1 added
[  782.493538][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  782.500270][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  782.558460][T10044] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1227'.
[  782.582605][ T9954] batman_adv: batadv0: Adding interface: batadv_slave_0
[  782.591625][ T9954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  782.618624][ T9954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  782.702162][ T9954] batman_adv: batadv0: Adding interface: batadv_slave_1
[  782.709777][ T9954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  782.736643][ T9954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  783.122179][ T9954] hsr_slave_0: entered promiscuous mode
[  783.133002][ T9954] hsr_slave_1: entered promiscuous mode
[  783.142252][ T9954] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  783.150242][ T9954] Cannot create hsr debugfs directory
[  783.180393][T10048] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1230'.
[  783.340082][T10048] bond0: (slave bond_slave_0): Releasing backup interface
[  785.206594][ T9954] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  785.280276][T10073] loop2: detected capacity change from 0 to 8
[  785.316260][ T9954] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  785.437647][ T9954] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  785.754282][T10075] SQUASHFS error: xz decompression failed, data probably corrupt
[  785.762391][T10075] SQUASHFS error: Failed to read block 0xa8: -5
[  785.795757][T10075] SQUASHFS error: xz decompression failed, data probably corrupt
[  785.803962][T10075] SQUASHFS error: Failed to read block 0xa8: -5
[  785.862316][ T9954] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  785.889143][   T30] audit: type=1800 audit(1751278865.379:124): pid=10075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1235" name="file0" dev="loop2" ino=3 res=0 errno=0
[  786.468620][T10067] loop1: detected capacity change from 0 to 8192
[  787.802732][ T9954] 8021q: adding VLAN 0 to HW filter on device bond0
[  787.988223][ T9954] 8021q: adding VLAN 0 to HW filter on device team0
[  788.129519][ T1154] bridge0: port 1(bridge_slave_0) entered blocking state
[  788.137355][ T1154] bridge0: port 1(bridge_slave_0) entered forwarding state
[  788.246416][ T1154] bridge0: port 2(bridge_slave_1) entered blocking state
[  788.254109][ T1154] bridge0: port 2(bridge_slave_1) entered forwarding state
[  789.093219][T10095] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1238'.
[  789.654374][ T5810] Bluetooth: hci4: command 0x0406 tx timeout
[  790.309957][ T9954] 8021q: adding VLAN 0 to HW filter on device batadv0
[  790.737072][T10106] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  790.755988][T10106] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  790.767576][T10106] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  790.780425][T10106] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  790.794511][T10106] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  790.806221][T10106] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  790.818090][T10106] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  790.830591][T10106] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  790.842534][T10106] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  790.858773][T10106] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  791.302019][ T9954] veth0_vlan: entered promiscuous mode
[  791.445941][ T9954] veth1_vlan: entered promiscuous mode
[  791.865010][ T9954] veth0_macvtap: entered promiscuous mode
[  791.953683][ T9954] veth1_macvtap: entered promiscuous mode
[  792.136918][ T9954] batman_adv: batadv0: Interface activated: batadv_slave_0
[  792.176507][T10109] loop9: detected capacity change from 0 to 1024
[  792.228989][ T9954] batman_adv: batadv0: Interface activated: batadv_slave_1
[  792.241639][T10109] EXT4-fs: Ignoring removed orlov option
[  792.248078][T10109] EXT4-fs: Ignoring removed nomblk_io_submit option
[  792.321135][ T9954] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  792.330598][ T9954] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  792.339938][ T9954] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  792.349267][ T9954] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  792.497823][T10109] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  792.653937][   T30] audit: type=1800 audit(1751278872.219:125): pid=10109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1245" name="bus" dev="loop9" ino=18 res=0 errno=0
[  792.718970][T10109] Trying to write to read-only block-device loop9
[  793.208321][ T9598] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  795.001412][T10121] loop6: detected capacity change from 0 to 8192
[  796.618294][T10136] loop6: detected capacity change from 0 to 512
[  796.639260][T10136] EXT4-fs: Invalid want_extra_isize 73
[  796.847840][T10139] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1252'.
[  797.589347][T10140] loop6: detected capacity change from 0 to 2048
[  799.406168][T10150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1254'.
[  799.633899][T10152] loop6: detected capacity change from 0 to 1024
[  799.672197][T10152] EXT4-fs: Ignoring removed orlov option
[  799.679546][T10152] EXT4-fs: Ignoring removed nomblk_io_submit option
[  799.801693][T10152] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  799.994516][   T30] audit: type=1800 audit(1751278879.559:126): pid=10152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1255" name="bus" dev="loop6" ino=18 res=0 errno=0
[  800.015973][   T30] audit: type=1804 audit(1751278879.559:127): pid=10152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.1255" name="/newroot/40/file1/bus" dev="loop6" ino=18 res=1 errno=0
[  800.377215][ T9359] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  800.385707][ T9359] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  800.494475][ T4318] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  800.502640][ T4318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  800.648924][ T9485] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  800.851574][T10164] loop9: detected capacity change from 0 to 164
[  800.934804][T10164] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  801.635917][T10173] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1261'.
[  802.079458][T10166] loop1: detected capacity change from 0 to 8192
[  802.282046][T10176] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1262'.
[  804.452448][T10185] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6)
[  804.459293][T10185] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  804.471032][T10185] vhci_hcd vhci_hcd.0: Device attached
[  804.745151][T10186] vhci_hcd: connection closed
[  804.797861][ T1154] vhci_hcd: stop threads
[  804.807365][ T1154] vhci_hcd: release socket
[  804.812108][ T1154] vhci_hcd: disconnect device
[  804.837850][ T9586] vhci_hcd: vhci_device speed not set
[  806.104256][T10192] loop1: detected capacity change from 0 to 1024
[  806.155667][ T5810] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  806.181609][ T5810] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  806.202293][ T5810] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  806.233989][ T5810] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  806.246611][ T5810] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  806.268372][T10192] EXT4-fs: Ignoring removed orlov option
[  806.274582][T10192] EXT4-fs: Ignoring removed nomblk_io_submit option
[  806.882661][T10192] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  806.982515][   T30] audit: type=1800 audit(1751278886.549:128): pid=10192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1268" name="bus" dev="loop1" ino=18 res=0 errno=0
[  807.157914][   T30] audit: type=1804 audit(1751278886.629:129): pid=10192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1268" name="/newroot/28/file1/bus" dev="loop1" ino=18 res=1 errno=0
[  807.448584][ T9587] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  807.695187][T10204] ieee802154 phy0 wpan0: encryption failed: -22
[  808.005377][T10193] chnl_net:caif_netlink_parms(): no params data found
[  808.127955][ T1154] bridge_slave_1: left allmulticast mode
[  808.134204][ T1154] bridge_slave_1: left promiscuous mode
[  808.140530][ T1154] bridge0: port 2(bridge_slave_1) entered disabled state
[  808.194509][ T1154] bridge_slave_0: left allmulticast mode
[  808.200639][ T1154] bridge_slave_0: left promiscuous mode
[  808.207779][ T1154] bridge0: port 1(bridge_slave_0) entered disabled state
[  808.373606][ T5799] Bluetooth: hci1: command tx timeout
[  808.674674][ T1154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  808.740754][ T1154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  808.816663][ T1154] bond0 (unregistering): Released all slaves
[  808.933948][T10211] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1273'.
[  809.223753][ T1154] tipc: Left network mode
[  810.225986][ T1154] hsr_slave_0: left promiscuous mode
[  810.234489][ T1154] batman_adv: batadv0: Removing interface: batadv_slave_0
[  810.297768][ T1154] batman_adv: batadv0: Removing interface: batadv_slave_1
[  810.453989][ T5799] Bluetooth: hci1: command tx timeout
[  810.468452][T10216] loop1: detected capacity change from 0 to 8192
[  810.905373][ T4142] smc: removing ib device syz0
[  811.014368][ T1154] team0 (unregistering): Port device team_slave_1 removed
[  811.122632][ T1154] team0 (unregistering): Port device team_slave_0 removed
[  812.542904][ T5799] Bluetooth: hci1: command tx timeout
[  814.624915][ T5810] Bluetooth: hci1: command tx timeout
[  815.185272][T10193] bridge0: port 1(bridge_slave_0) entered blocking state
[  815.192903][T10193] bridge0: port 1(bridge_slave_0) entered disabled state
[  815.200887][T10193] bridge_slave_0: entered allmulticast mode
[  815.210528][T10193] bridge_slave_0: entered promiscuous mode
[  815.369962][T10238] loop6: detected capacity change from 0 to 1024
[  815.413218][T10193] bridge0: port 2(bridge_slave_1) entered blocking state
[  815.421144][T10193] bridge0: port 2(bridge_slave_1) entered disabled state
[  815.434140][T10193] bridge_slave_1: entered allmulticast mode
[  815.434839][T10238] EXT4-fs: Ignoring removed orlov option
[  815.444038][T10193] bridge_slave_1: entered promiscuous mode
[  815.446331][T10238] EXT4-fs: Ignoring removed nomblk_io_submit option
[  815.714633][T10238] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  815.777842][T10244] ieee802154 phy0 wpan0: encryption failed: -22
[  815.819400][ T5810] Bluetooth: hci6: command 0x0406 tx timeout
[  815.927476][T10193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  816.005366][   T30] audit: type=1800 audit(1751278895.569:130): pid=10246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1280" name="bus" dev="loop6" ino=18 res=0 errno=0
[  816.026560][   T30] audit: type=1804 audit(1751278895.579:131): pid=10238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.1280" name="/newroot/45/file1/bus" dev="loop6" ino=18 res=1 errno=0
[  816.030881][T10193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  816.430850][T10248] sp0: Synchronizing with TNC
[  816.468382][T10193] team0: Port device team_slave_0 added
[  816.519285][T10193] team0: Port device team_slave_1 added
[  816.578173][ T9485] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  816.718703][T10193] batman_adv: batadv0: Adding interface: batadv_slave_0
[  816.726111][T10193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  816.752318][    C0] vkms_vblank_simulate: vblank timer overrun
[  816.764050][T10193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  816.829511][T10193] batman_adv: batadv0: Adding interface: batadv_slave_1
[  816.837009][T10193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  816.868246][T10193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  816.987827][T10249] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1283'.
[  817.547095][T10193] hsr_slave_0: entered promiscuous mode
[  817.557727][T10193] hsr_slave_1: entered promiscuous mode
[  817.567091][T10193] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  817.582219][T10193] Cannot create hsr debugfs directory
[  817.712164][T10257] netlink: 'syz.6.1285': attribute type 1 has an invalid length.
[  817.720557][T10257] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1285'.
[  818.401421][T10261] IPVS: length: 129 != 8
[  819.710632][T10264] loop6: detected capacity change from 0 to 8192
[  819.996944][ T3950] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  820.031530][T10193] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  820.171600][ T3950] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  820.255167][T10193] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  820.352410][ T3950] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  820.374350][ T5810] Bluetooth: hci7: command 0x0406 tx timeout
[  820.415757][T10193] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  820.568386][ T3950] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  820.629790][T10193] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  820.992656][T10276] loop9: detected capacity change from 0 to 1024
[  821.134346][ T3950] bridge_slave_1: left allmulticast mode
[  821.140332][ T3950] bridge_slave_1: left promiscuous mode
[  821.147052][ T3950] bridge0: port 2(bridge_slave_1) entered disabled state
[  821.255448][ T3950] bridge_slave_0: left allmulticast mode
[  821.268267][ T3950] bridge_slave_0: left promiscuous mode
[  821.275634][ T3950] bridge0: port 1(bridge_slave_0) entered disabled state
[  821.764738][T10280] ieee802154 phy0 wpan0: encryption failed: -22
[  821.815144][ T3950] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  821.861697][ T3950] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  821.939256][ T3950] bond0 (unregistering): Released all slaves
[  822.301537][T10283] loop6: detected capacity change from 0 to 1024
[  822.345465][T10283] EXT4-fs: Ignoring removed orlov option
[  822.351592][T10283] EXT4-fs: Ignoring removed nomblk_io_submit option
[  822.473131][T10283] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  822.603150][ T3950] hsr_slave_0: left promiscuous mode
[  822.623718][ T3950] hsr_slave_1: left promiscuous mode
[  822.631932][ T3950] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  822.640219][ T3950] batman_adv: batadv0: Removing interface: batadv_slave_0
[  822.643676][ T5850] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  822.737570][ T3950] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  822.745812][ T3950] batman_adv: batadv0: Removing interface: batadv_slave_1
[  822.856286][ T3950] veth1_macvtap: left promiscuous mode
[  822.862097][ T3950] veth0_macvtap: left promiscuous mode
[  822.868583][ T3950] veth1_vlan: left promiscuous mode
[  822.869483][ T5850] usb 10-1: config index 0 descriptor too short (expected 23569, got 27)
[  822.875331][ T3950] veth0_vlan: left promiscuous mode
[  822.882828][ T5850] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  822.960994][ T5850] usb 10-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  822.970700][ T5850] usb 10-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  822.979450][ T5850] usb 10-1: Manufacturer: syz
[  823.016146][ T5850] usb 10-1: config 0 descriptor??
[  823.360076][ T9485] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  823.542352][ T5850] rc_core: IR keymap rc-hauppauge not found
[  823.548616][ T5850] Registered IR keymap rc-empty
[  823.555672][ T5850] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0
[  823.568602][ T5850] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input6
[  823.677720][    C1] igorplugusb 10-1:0.0: Error: urb status = -32
[  823.700291][T10285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  823.710083][T10285] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  823.790964][ T5848] usb 10-1: USB disconnect, device number 2
[  823.948880][ T3950] team0 (unregistering): Port device team_slave_1 removed
[  824.025269][ T3950] team0 (unregistering): Port device team_slave_0 removed
[  824.360579][T10291] netlink: 'syz.3.1297': attribute type 1 has an invalid length.
[  824.370607][T10291] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1297'.
[  825.063870][T10193] 8021q: adding VLAN 0 to HW filter on device bond0
[  825.233578][T10193] 8021q: adding VLAN 0 to HW filter on device team0
[  825.296559][ T3950] bridge0: port 1(bridge_slave_0) entered blocking state
[  825.304304][ T3950] bridge0: port 1(bridge_slave_0) entered forwarding state
[  825.412713][ T3950] bridge0: port 2(bridge_slave_1) entered blocking state
[  825.420535][ T3950] bridge0: port 2(bridge_slave_1) entered forwarding state
[  825.603818][T10300] loop3: detected capacity change from 0 to 4096
[  825.722966][T10307] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  825.763835][ T9586] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  825.955116][ T9586] usb 2-1: Using ep0 maxpacket: 32
[  825.993880][ T9586] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  826.005758][ T9586] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  826.016021][ T9586] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  826.025500][ T9586] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  826.043108][ T9586] usb 2-1: config 0 descriptor??
[  826.056251][ T9586] hub 2-1:0.0: USB hub found
[  826.277210][ T9586] hub 2-1:0.0: 1 port detected
[  826.669234][T10317] loop6: detected capacity change from 0 to 1024
[  826.722292][T10317] EXT4-fs: Ignoring removed orlov option
[  826.729555][T10317] EXT4-fs: Ignoring removed nomblk_io_submit option
[  826.785359][T10317] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  826.920504][ T9586] hub 2-1:0.0: hub_ext_port_status failed (err = -71)
[  826.928694][ T5848] usb 2-1: USB disconnect, device number 3
[  826.929417][ T9586] usb 2-1: Failed to suspend device, error -19
[  827.011393][ T9485] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  827.367734][T10193] 8021q: adding VLAN 0 to HW filter on device batadv0
[  827.379188][T10327] netlink: 'syz.6.1308': attribute type 1 has an invalid length.
[  827.387697][T10327] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1308'.
[  828.018040][ T9586] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  828.252455][ T9586] usb 10-1: config index 0 descriptor too short (expected 23569, got 27)
[  828.261474][ T9586] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  828.325675][ T9586] usb 10-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  828.338100][ T9586] usb 10-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  828.347826][ T9586] usb 10-1: Manufacturer: syz
[  828.405987][ T9586] usb 10-1: config 0 descriptor??
[  828.783794][ T9586] rc_core: IR keymap rc-hauppauge not found
[  828.790008][ T9586] Registered IR keymap rc-empty
[  828.796900][ T9586] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0
[  828.811173][ T9586] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input7
[  828.961700][    C1] igorplugusb 10-1:0.0: Error: urb status = -32
[  829.004378][   T11] usb 10-1: USB disconnect, device number 3
[  829.596370][T10193] veth0_vlan: entered promiscuous mode
[  829.720200][T10193] veth1_vlan: entered promiscuous mode
[  829.782969][T10351] loop6: detected capacity change from 0 to 1024
[  829.809417][T10351] EXT4-fs: Ignoring removed orlov option
[  829.816079][T10351] EXT4-fs: Ignoring removed nomblk_io_submit option
[  829.942633][T10351] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  830.125781][T10193] veth0_macvtap: entered promiscuous mode
[  830.192481][T10360] netlink: 'syz.9.1319': attribute type 1 has an invalid length.
[  830.201553][T10360] netlink: 'syz.9.1319': attribute type 3 has an invalid length.
[  830.209783][T10360] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1319'.
[  830.228350][T10193] veth1_macvtap: entered promiscuous mode
[  830.425871][T10193] batman_adv: batadv0: Interface activated: batadv_slave_0
[  830.474311][ T9485] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  830.535093][T10193] batman_adv: batadv0: Interface activated: batadv_slave_1
[  830.635224][T10193] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  830.644536][T10193] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  830.653783][T10193] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  830.662771][T10193] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  830.876828][   T11] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  831.050410][   T11] usb 4-1: Using ep0 maxpacket: 32
[  831.068378][   T11] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  831.079891][   T11] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  831.090708][   T11] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  831.106689][   T11] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  831.228226][   T11] usb 4-1: config 0 descriptor??
[  831.251977][T10372] loop1: detected capacity change from 0 to 256
[  831.261656][   T11] hub 4-1:0.0: USB hub found
[  831.285527][T10372] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  831.302175][T10372] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[  831.379366][T10372] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  831.453561][   T11] hub 4-1:0.0: 1 port detected
[  831.715414][ T9586] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  831.903622][ T9586] usb 2-1: Using ep0 maxpacket: 16
[  831.955980][ T9586] usb 2-1: config 0 has an invalid interface number: 64 but max is 0
[  831.965516][ T9586] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  831.976192][ T9586] usb 2-1: config 0 has no interface number 0
[  831.982606][ T9586] usb 2-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b
[  831.992081][ T9586] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  832.091338][ T5848] hub 4-1:0.0: hub_ext_port_status failed (err = -71)
[  832.100248][   T11] usb 4-1: USB disconnect, device number 3
[  832.111497][ T9586] usb 2-1: config 0 descriptor??
[  832.180730][ T9586] usb 2-1: Found UVC 0.00 device <unnamed> (0bd3:0555)
[  832.188178][ T9586] usb 2-1: No valid video chain found.
[  832.463626][ T9586] usb 2-1: USB disconnect, device number 4
[  832.824861][ T5850] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  833.014232][ T5850] usb 10-1: config index 0 descriptor too short (expected 23569, got 27)
[  833.024057][ T5850] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  833.065051][ T5850] usb 10-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  833.074908][ T5850] usb 10-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  833.083421][ T5850] usb 10-1: Manufacturer: syz
[  833.100155][T10393] loop3: detected capacity change from 0 to 1024
[  833.110124][T10393] EXT4-fs: Ignoring removed orlov option
[  833.116339][T10393] EXT4-fs: Ignoring removed nomblk_io_submit option
[  833.128115][ T5850] usb 10-1: config 0 descriptor??
[  833.202786][T10396] netlink: 'syz.6.1331': attribute type 1 has an invalid length.
[  833.211235][T10396] netlink: 'syz.6.1331': attribute type 3 has an invalid length.
[  833.219435][T10396] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1331'.
[  833.255813][T10393] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  833.337099][   T30] audit: type=1800 audit(1751278912.899:132): pid=10393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1330" name="bus" dev="loop3" ino=18 res=0 errno=0
[  833.524480][ T5850] rc_core: IR keymap rc-hauppauge not found
[  833.530657][ T5850] Registered IR keymap rc-empty
[  833.538924][ T5850] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0
[  833.553195][ T5850] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input8
[  833.629562][    C1] igorplugusb 10-1:0.0: Error: urb status = -32
[  833.711077][ T5850] usb 10-1: USB disconnect, device number 4
[  833.745693][ T9954] Trying to write to read-only block-device loop3
[  833.811663][ T9954] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  835.069483][T10425] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  835.154816][   T30] audit: type=1326 audit(1751278914.699:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10422 comm="syz.1.1339" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x0
[  835.435271][T10432] netlink: 'syz.3.1342': attribute type 1 has an invalid length.
[  835.443496][T10432] netlink: 'syz.3.1342': attribute type 3 has an invalid length.
[  835.451673][T10432] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1342'.
[  835.874286][T10441] loop6: detected capacity change from 0 to 1024
[  835.884116][T10441] EXT4-fs: Ignoring removed orlov option
[  835.890131][T10441] EXT4-fs: Ignoring removed nomblk_io_submit option
[  836.057033][T10441] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  836.208340][   T30] audit: type=1800 audit(1751278915.769:134): pid=10441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1343" name="bus" dev="loop6" ino=18 res=0 errno=0
[  836.510484][ T4054] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  836.522594][ T4054] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  836.654120][ T9485] Trying to write to read-only block-device loop6
[  836.692451][ T9485] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  836.749928][ T8736] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  836.759494][ T8736] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  836.829966][ T5850] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  837.014315][ T5850] usb 2-1: config index 0 descriptor too short (expected 23569, got 27)
[  837.023175][ T5850] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  837.097688][ T5850] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  837.107490][ T5850] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  837.116010][ T5850] usb 2-1: Manufacturer: syz
[  837.202792][ T5850] usb 2-1: config 0 descriptor??
[  837.614849][ T5850] rc_core: IR keymap rc-hauppauge not found
[  837.621110][ T5850] Registered IR keymap rc-empty
[  837.627711][ T5850] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  837.641363][ T5850] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input9
[  837.796798][    C1] igorplugusb 2-1:0.0: Error: urb status = -32
[  837.840561][ T5850] usb 2-1: USB disconnect, device number 5
[  838.127470][T10475] netlink: 'syz.9.1353': attribute type 1 has an invalid length.
[  838.139647][T10475] netlink: 'syz.9.1353': attribute type 3 has an invalid length.
[  838.148737][T10475] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1353'.
[  838.909010][   T30] audit: type=1326 audit(1751278918.469:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10481 comm="syz.9.1355" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x0
[  840.929198][T10515] netlink: 'syz.3.1365': attribute type 1 has an invalid length.
[  840.937814][T10515] netlink: 'syz.3.1365': attribute type 3 has an invalid length.
[  840.946010][T10515] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1365'.
[  841.683744][   T11] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  841.888856][   T11] usb 2-1: config index 0 descriptor too short (expected 23569, got 27)
[  841.897896][   T11] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  841.955856][   T11] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  841.965529][   T11] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  841.974746][   T11] usb 2-1: Manufacturer: syz
[  842.021810][   T11] usb 2-1: config 0 descriptor??
[  842.364848][   T30] audit: type=1326 audit(1751278921.919:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10536 comm="syz.4.1373" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x0
[  842.499437][   T11] rc_core: IR keymap rc-hauppauge not found
[  842.506080][   T11] Registered IR keymap rc-empty
[  842.512666][   T11] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  842.526834][   T11] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input10
[  842.625179][    C0] igorplugusb 2-1:0.0: Error: urb status = -32
[  842.627839][T10545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  842.641024][T10545] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  842.794904][ T5850] usb 2-1: USB disconnect, device number 6
[  843.442979][T10556] netlink: 'syz.9.1379': attribute type 1 has an invalid length.
[  843.451564][T10556] netlink: 'syz.9.1379': attribute type 3 has an invalid length.
[  843.459951][T10556] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1379'.
[  843.935466][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  843.942319][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  844.880535][T10579] usb usb3: check_ctrlrecip: process 10579 (syz.1.1387) requesting ep 01 but needs 81
[  844.890720][T10579] usb usb3: usbfs: process 10579 (syz.1.1387) did not claim interface 0 before use
[  845.483199][   T30] audit: type=1326 audit(1751278925.049:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10583 comm="syz.9.1390" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x0
[  845.875302][   T11] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  846.089745][   T11] usb 4-1: config index 0 descriptor too short (expected 23569, got 27)
[  846.099930][   T11] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  846.154184][ T5799] Bluetooth: hci4: unexpected event for opcode 0x1001
[  846.157942][   T11] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  846.170828][   T11] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  846.179311][   T11] usb 4-1: Manufacturer: syz
[  846.275429][   T11] usb 4-1: config 0 descriptor??
[  846.653466][   T11] rc_core: IR keymap rc-hauppauge not found
[  846.664276][   T11] Registered IR keymap rc-empty
[  846.670917][   T11] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  846.684336][   T11] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input11
[  846.844848][    C0] igorplugusb 4-1:0.0: Error: urb status = -32
[  846.879966][T10590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  846.890100][T10590] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  847.008168][   T11] usb 4-1: USB disconnect, device number 4
[  847.140314][T10611] =====================================================
[  847.147847][T10611] BUG: KMSAN: uninit-value in batadv_get_vid+0x2d0/0x3b0
[  847.155354][T10611]  batadv_get_vid+0x2d0/0x3b0
[  847.160379][T10611]  batadv_interface_tx+0x2e9/0x1e60
[  847.165938][T10611]  dev_hard_start_xmit+0x22c/0xa30
[  847.171369][T10611]  __dev_queue_xmit+0x3cb4/0x5e20
[  847.176753][T10611]  __bpf_redirect+0x162d/0x1760
[  847.181790][T10611]  bpf_clone_redirect+0x366/0x530
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  847.187172][T10611]  ___bpf_prog_run+0x1294/0xeba0
[  847.192500][T10611]  __bpf_prog_run512+0xc5/0x100
[  847.197666][T10611]  bpf_test_run+0x547/0xd20
[  847.202380][T10611]  bpf_prog_test_run_skb+0x19f8/0x26c0
[  847.208173][T10611]  bpf_prog_test_run+0x5c2/0xa40
[  847.213471][T10611]  __sys_bpf+0x6ca/0xe60
[  847.217958][T10611]  __ia32_sys_bpf+0xa4/0xf0
[  847.222659][T10611]  ia32_sys_call+0x2544/0x42c0
[  847.227761][T10611]  __do_fast_syscall_32+0xb0/0x150
[  847.233106][T10611]  do_fast_syscall_32+0x38/0x80
[  847.238300][T10611]  do_SYSENTER_32+0x1f/0x30
[  847.243065][T10611]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  847.249736][T10611] 
[  847.252200][T10611] Uninit was created at:
[  847.256781][T10611]  kmem_cache_alloc_node_noprof+0x818/0xf00
[  847.262984][T10611]  kmalloc_reserve+0x13c/0x4b0
[  847.268096][T10611]  pskb_expand_head+0x1fc/0x1610
[  847.273375][T10611]  skb_ensure_writable+0x44e/0x510
[  847.278795][T10611]  bpf_clone_redirect+0x1c1/0x530
[  847.284124][T10611]  ___bpf_prog_run+0x1294/0xeba0
[  847.289281][T10611]  __bpf_prog_run512+0xc5/0x100
[  847.294457][T10611]  bpf_test_run+0x547/0xd20
[  847.299164][T10611]  bpf_prog_test_run_skb+0x19f8/0x26c0
[  847.304928][T10611]  bpf_prog_test_run+0x5c2/0xa40
[  847.310175][T10611]  __sys_bpf+0x6ca/0xe60
[  847.314734][T10611]  __ia32_sys_bpf+0xa4/0xf0
[  847.319513][T10611]  ia32_sys_call+0x2544/0x42c0
[  847.324558][T10611]  __do_fast_syscall_32+0xb0/0x150
[  847.329941][T10611]  do_fast_syscall_32+0x38/0x80
[  847.335104][T10611]  do_SYSENTER_32+0x1f/0x30
[  847.339837][T10611]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  847.346552][T10611] 
[  847.349062][T10611] CPU: 1 UID: 0 PID: 10611 Comm: syz.1.1399 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(undef) 
[  847.359848][T10611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  847.370188][T10611] =====================================================
[  847.377487][T10611] Disabling lock debugging due to kernel taint
[  847.383866][T10611] Kernel panic - not syncing: kmsan.panic set ...
[  847.390490][T10611] CPU: 1 UID: 0 PID: 10611 Comm: syz.1.1399 Tainted: G    B               6.16.0-rc4-syzkaller #0 PREEMPT(undef) 
[  847.402714][T10611] Tainted: [B]=BAD_PAGE
[  847.407006][T10611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  847.417256][T10611] Call Trace:
[  847.420689][T10611]  <TASK>
[  847.423769][T10611]  __dump_stack+0x26/0x30
[  847.428351][T10611]  dump_stack_lvl+0x53/0x270
[  847.433218][T10611]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  847.439311][T10611]  dump_stack+0x1e/0x25
[  847.443709][T10611]  panic+0x4bd/0xd50
[  847.447871][T10611]  kmsan_report+0x31c/0x320
[  847.452616][T10611]  ? __msan_warning+0x1b/0x30
[  847.457513][T10611]  ? batadv_get_vid+0x2d0/0x3b0
[  847.462596][T10611]  ? batadv_interface_tx+0x2e9/0x1e60
[  847.468216][T10611]  ? dev_hard_start_xmit+0x22c/0xa30
[  847.473745][T10611]  ? __dev_queue_xmit+0x3cb4/0x5e20
[  847.479155][T10611]  ? __bpf_redirect+0x162d/0x1760
[  847.484366][T10611]  ? bpf_clone_redirect+0x366/0x530
[  847.489745][T10611]  ? ___bpf_prog_run+0x1294/0xeba0
[  847.495053][T10611]  ? __bpf_prog_run512+0xc5/0x100
[  847.500308][T10611]  ? bpf_test_run+0x547/0xd20
[  847.505165][T10611]  ? bpf_prog_test_run_skb+0x19f8/0x26c0
[  847.510978][T10611]  ? bpf_prog_test_run+0x5c2/0xa40
[  847.516387][T10611]  ? __sys_bpf+0x6ca/0xe60
[  847.520988][T10611]  ? __ia32_sys_bpf+0xa4/0xf0
[  847.525841][T10611]  ? ia32_sys_call+0x2544/0x42c0
[  847.530950][T10611]  ? __do_fast_syscall_32+0xb0/0x150
[  847.536430][T10611]  ? do_fast_syscall_32+0x38/0x80
[  847.541623][T10611]  ? do_SYSENTER_32+0x1f/0x30
[  847.546474][T10611]  ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  847.553189][T10611]  ? kmsan_get_metadata+0xfb/0x160
[  847.558537][T10611]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  847.564591][T10611]  ? kmsan_get_metadata+0xfb/0x160
[  847.569908][T10611]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  847.575967][T10611]  ? batadv_interface_tx+0x21/0x1e60
[  847.581482][T10611]  ? filter_irq_stacks+0x49/0x190
[  847.586683][T10611]  ? stack_depot_save_flags+0x35/0x7b0
[  847.592342][T10611]  ? kmsan_get_metadata+0xfb/0x160
[  847.597702][T10611]  __msan_warning+0x1b/0x30
[  847.602443][T10611]  batadv_get_vid+0x2d0/0x3b0
[  847.607402][T10611]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  847.613461][T10611]  batadv_interface_tx+0x2e9/0x1e60
[  847.618958][T10611]  ? kmsan_internal_set_shadow_origin+0x79/0x110
[  847.625538][T10611]  ? kmsan_get_metadata+0xfb/0x160
[  847.630871][T10611]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  847.636959][T10611]  ? __pfx_batadv_interface_tx+0x10/0x10
[  847.642849][T10611]  dev_hard_start_xmit+0x22c/0xa30
[  847.648285][T10611]  __dev_queue_xmit+0x3cb4/0x5e20
[  847.653501][T10611]  ? skb_release_data+0xa12/0xac0
[  847.658689][T10611]  ? kmsan_internal_memmove_metadata+0x91/0x230
[  847.665179][T10611]  ? kmsan_get_metadata+0xfb/0x160
[  847.670560][T10611]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  847.676617][T10611]  ? __dev_queue_xmit+0x30c/0x5e20
[  847.681986][T10611]  __bpf_redirect+0x162d/0x1760
[  847.687064][T10611]  ? kmsan_get_metadata+0xfb/0x160
[  847.692414][T10611]  bpf_clone_redirect+0x366/0x530
[  847.697663][T10611]  ___bpf_prog_run+0x1294/0xeba0
[  847.702900][T10611]  __bpf_prog_run512+0xc5/0x100
[  847.707936][T10611]  ? kmsan_internal_set_shadow_origin+0x79/0x110
[  847.714472][T10611]  ? kmsan_internal_poison_memory+0x7f/0xa0
[  847.720580][T10611]  ? kmsan_internal_poison_memory+0x4a/0xa0
[  847.726701][T10611]  ? kmsan_slab_alloc+0xde/0x160
[  847.731911][T10611]  ? kmsan_get_metadata+0xfb/0x160
[  847.737277][T10611]  ? kmsan_internal_set_shadow_origin+0x79/0x110
[  847.743851][T10611]  ? kmsan_internal_unpoison_memory+0x14/0x20
[  847.750154][T10611]  ? kmsan_get_metadata+0xfb/0x160
[  847.755607][T10611]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  847.761665][T10611]  ? kmsan_get_metadata+0xfb/0x160
[  847.767029][T10611]  ? kmsan_get_metadata+0xfb/0x160
[  847.772394][T10611]  ? kmsan_get_metadata+0xfb/0x160
[  847.777757][T10611]  ? kmsan_internal_set_shadow_origin+0x79/0x110
[  847.784425][T10611]  ? kmsan_get_metadata+0x150/0x160
[  847.789878][T10611]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  847.795956][T10611]  ? __pfx___bpf_prog_run512+0x10/0x10
[  847.801635][T10611]  ? __pfx___bpf_prog_run512+0x10/0x10
[  847.807265][T10611]  bpf_test_run+0x547/0xd20
[  847.811950][T10611]  ? kmsan_get_metadata+0xfb/0x160
[  847.817317][T10611]  ? kmsan_internal_set_shadow_origin+0x79/0x110
[  847.823902][T10611]  ? kmsan_get_metadata+0xfb/0x160
[  847.829242][T10611]  ? bpf_test_run+0x39e/0xd20
[  847.834142][T10611]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  847.840209][T10611]  bpf_prog_test_run_skb+0x19f8/0x26c0
[  847.845892][T10611]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  847.851924][T10611]  bpf_prog_test_run+0x5c2/0xa40
[  847.857102][T10611]  __sys_bpf+0x6ca/0xe60
[  847.861561][T10611]  __ia32_sys_bpf+0xa4/0xf0
[  847.866243][T10611]  ia32_sys_call+0x2544/0x42c0
[  847.871194][T10611]  __do_fast_syscall_32+0xb0/0x150
[  847.876504][T10611]  do_fast_syscall_32+0x38/0x80
[  847.881521][T10611]  do_SYSENTER_32+0x1f/0x30
[  847.886215][T10611]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  847.892793][T10611] RIP: 0023:0xf710e539
[  847.897036][T10611] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  847.916946][T10611] RSP: 002b:00000000f50fe55c EFLAGS: 00000206 ORIG_RAX: 0000000000000165
[  847.925598][T10611] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000080
[  847.933744][T10611] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000
[  847.941877][T10611] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  847.950102][T10611] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  847.958239][T10611] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  847.966393][T10611]  </TASK>
[  847.969832][T10611] Kernel Offset: disabled
[  847.974253][T10611] Rebooting in 86400 seconds..