last executing test programs:

24.527918788s ago: executing program 4:
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "0f03c8c7e8da000000000000ffffff017f000000cce67e1d2000e565aa9a9d32c7627ffe7a54cdbd77b3000000000000000000060000000000000000deff00", 0x39}, 0x60)
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x118)
mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c)
sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x11)
ioctl$SNDCTL_DSP_GETBLKSIZE(0xffffffffffffffff, 0xc0045004, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000040)=@v2={0x2, @adiantum, 0x0, '\x00', @a})
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4)

22.658732006s ago: executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r3, &(0x7f0000000140), 0x400000000000303, 0x10002, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

18.117615593s ago: executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0)

17.596097769s ago: executing program 4:
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2010410, &(0x7f0000000040)=ANY=[], 0x3, 0x657, &(0x7f0000000ac0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x0, 0x100008b}, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000000080))
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
stat(&(0x7f0000000000)='./file0\x00', 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f00000000c0)='./file0\x00', 0x1071cd0, &(0x7f0000000140)={[], [{@euid_gt}]}, 0x0, 0x453, &(0x7f00000008c0)="$eJzs289vFFUcAPDvzLYUQWhFREGQKhobf7S0oHLwotHEgyYmesBjbQtBFmpoTYQQrcbg0ZB4Nx5N/As86cWoJxOvejckRIkJ6KlmZmfodumW/tjtFvbzSSZ9b+dN531n5u1+Z95uAF1rMCJ6I+LeiPg9IvojImlsMFj7c+PaxYl/r12cSGJ+/q2/krzd9WsXJ8qm5Xbbi8pQGpF+ltQ2bjBz/sLp8Wp16lxRH5k98/7IzPkLz546M35y6uTU2bFjx44eGX3h+bHnWhJnFtf1fR9N79/72juX35g4fvndn7/N+rvnQG19fRyt0JcftsGIv+dzjeufaOXONoEddeWkp4MdYVUqEZGdrjQf//1RiYWT1xevftrRzgFtlX029TVfPZetPzgP3J2S6HQPgM4oP+iz+99y2aDUY1O4+lLtBiiL+0ax1Nb05PdEUTwfaZfBiDg+999X2RJteA4BANDo+yz/eWap/C+NPXXtdhZzKAMRcV9E7IqI+yNid0Q8EJG3fTAiHlrRXhcyqsapoVvzn/TKmoNbgSz/e7GY21qc/5XZXwxUitqOPP7e5MSp6tTh4pgMRW9fVh9dZh8/vPLbF83W1ed/2ZLtv8wFi35c6Wl4QDc5PjveqqT06icR+3qWij+5OROQRMTeiNi3un+9syyceuqb/c0a3T7+ZbRgnmn+64gna+d/LhriLyXLz0+ObI3q1OGR8qq41S+/Xnqz2f7XFX8LZOd/2+Lrv6FF/z9J/XztzOr3cemPz5ve06z1+t+SvJ3PWW8pXvtwfHb23GjEluT1vL7o9bGFbct62T6Lf+jQ0uN/V7FNFv/DEZFdxAci4pGIOFj0/dGIeCwiDi0T/08vP/7e2uNvryz+ySXf/25e/wOLz//qC5XTP37XbP8rO/9H89JQ8Ur+/ncbK+3geo4dAAAA3CnS/Lv/STp8s5ymw8O17/Dvjm1pdXpm9ukT0x+cnaz9RmAgetPySVd/3fPQ0WSu+I+1+ljxrLhcf6R4bvxl5Z68PjwxXZ3scOzQ7bY3Gf+ZPyud7h3Qdn6vBd2rcfynHeoHsPHW+vnv/gDufPJ/6F7GP3Svpcb/xw11uT7cnerG/9ZO9gPYePJ/6F7GP3Qv4x+60np+16/QmUJ57jrbjUg3x9FQaE+hs+9LAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArfJ/AAAA//8BPupW")
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
socket$key(0xf, 0x3, 0x2)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r1, &(0x7f0000000400)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x3a}, 0x1}, {{@in6=@dev, 0x0, 0x33}, 0x0, @in6=@private2, 0x0, 0x4, 0x0, 0xb7}}, 0xe8)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0)

16.64958451s ago: executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000100)=0x6)
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000))
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000040))
r2 = syz_open_dev$sndctrl(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000000)=0xf80)
r3 = gettid()
read(r2, &(0x7f0000000700)=""/247, 0xf7)
tkill(r3, 0x7)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
openat$nullb(0xffffffffffffff9c, 0x0, 0x20080, 0x0)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000ac0)={0x4, 0x3a30, 0x0, 'queue0\x00'})
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
syz_open_dev$loop(&(0x7f0000000000), 0xa7cc, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080))
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000380), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, 0xffffffffffffffff, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000580)='cgroup.threads\x00', 0x2, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, &(0x7f0000000100)={0x1100, 0x0, 0x0, 0x10000})

16.233770247s ago: executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0)

14.827053018s ago: executing program 3:
ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628)
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
socket$inet6(0xa, 0x800000000000002, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0)
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r4 = socket$l2tp6(0xa, 0x2, 0x73)
sendmmsg$inet6(r4, &(0x7f0000000280)=[{{&(0x7f0000002e00)={0xa, 0x0, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000300)=0x80000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000040)={@hyper})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000000c0)={{@hyper}, @any, 0x0, 0x0, 0x3})
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x90000)
r5 = syz_open_dev$rtc(0x0, 0x8000, 0x200)
ioctl$RTC_WKALM_SET(r5, 0x4028700f, &(0x7f0000000180)={0x0, 0x0, {0x4, 0x10, 0x8, 0xc, 0x4, 0x0, 0x1, 0x5e, 0xffffffffffffffff}})
r6 = open$dir(0x0, 0x0, 0x100)
mkdirat(r6, &(0x7f00000001c0)='./file0\x00', 0x160)
fsopen(&(0x7f0000000000)='ocfs2_dlmfs\x00', 0x0)
close(r0)

13.732114487s ago: executing program 3:
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2010410, &(0x7f0000000040)=ANY=[], 0x3, 0x657, &(0x7f0000000ac0)="$eJzs3c1vHGcdB/DvrB3HG0LqpkkbUKVajQQIi8SO5YK5EBAgHypUlQNnK3EaK5u02C5yK0TN+7WH/gHl4BsnJO6RyoUL3Hr1sRISl14wp0UzO+vXtWPnxbsun080+zyzzzPP/J7fzOzsrhVtgP9bcxMZfpgicxOvr5brG+vTrY316fvdepKzSdaS4SSNJMV/2u32J8nNpNgapthT7vPR4uybn36+8Vlnbbheqv6Nw7Y7mrV6yXiSobp8WuPdeuLxiq0Z3kxytS6h784kae/y87+f77SM7OrY7LX16MkECTxTRee+uc9Ycq6+0Mv3AZ27Yueefaqt9TsAAAAAOAHPbWYzq8WFfscBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp8Xa9u//F/XS6NbHU3R//3+kfi51fbC8crzuD59VHAAAAAAAAABwgl7ZzGZWc6G73i6qv/m/Wq1cqh6/lHeznIUs5VpWM5+VrGQpU0nGdgw0sjq/srI0dYQtb/Tc8sYjAj1bl82nM28AAAAAAAAA+IL5Tea2//4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACDoEiGOkW1XOrWx9IYTjKaZKTst5b8s1s/zR72OwAAAAB4cs1HdXhuM5tZzYXueruoPvO/WH3uH827eZCVLGYlrSzkdvVdQOdTf2Njfbq1sT59v1z2j/v9fx8rzmrEdL576L3nK1WPZu5ksXrmWm7l7bRyO41qy9KVOp7uqHvi+nUZU/G92hEju12X5cw/rMt9PjjWZA9yzC9TxqqMnNnKyGQdW5mN57tHpvcROubR2bunqTS2gr20Z097JvFYOT9Xl+V8/nBQzvtiVyZGU611z74XD8958vW//vlnd1sP7t29szwxOFM6mqG6bFePzf3nxPSOTLz0Rc7EPpNVJi5vrc/lx/lpJjKeN7KUxfwi81nJQsbzw6o2X5/PxY5L/oBM3dy19sajIhmpz9DOwTpeTK9W217IYn6St3M7C3mt+ncjU/l2ZjKT2R1H+PLhR7i66hsHXPXtL/cM/uo36kp5z/rjUe5dJ6bM6/PdvBbZ9Zo7VrXtfGY7SxePkKVjvjYOf7W+Bst9/LYuB8PeTEztyMQLh2fiT9WUllsP7i3dnX/naLu7+GFdKa+j3w/UXaI8Xy6WB6ta2312lG0v9GybqtoubbU19rVd3mrrXKlrB16pI/V7uP0j3ajaXurZNl21XdnR1uv9FgAD79w3z400/9X8R/Pj5u+ad5uvj/7g7HfOvjySM387893hyaGvNV4u/pKP86vtz/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDjW37v/XvzrdbC0q7KWqvdbn/Qs+l0V7o/Z3aCO/3K+eSRnc8PSH6OWSmKo3b+b7vdrp8pBiT4Qyrt2qDE049Kn1+YgGfu+sr9d64vv/f+txbvz7+18NbCg9mZmdnJ2ZnXpq/fWWwtTHYe92412p9ggadq+6bf70gAAAAAAAAAAACAozqJ/07Q7zkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9vcRIYfpsjU5LXJcn1jfbpVLt36ds/hJI0kxS+T4pPkZjpLxnYMVxy0n48WZ9/89PONz7bHGu72b/TY7kfHm8VavWQ8yVBdPoFd493qBvvYiq0Zlgm72k0c9Nv/AgAA//+08g5/")
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x0, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000000080))
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
stat(&(0x7f0000000000)='./file0\x00', 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f00000000c0)='./file0\x00', 0x1071cd0, &(0x7f0000000140)={[], [{@euid_gt}]}, 0x0, 0x453, &(0x7f00000008c0)="$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")
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
socket$key(0xf, 0x3, 0x2)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r1, &(0x7f0000000400)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x3a}, 0x1}, {{@in6=@dev, 0x0, 0x33}, 0x0, @in6=@private2, 0x0, 0x4, 0x0, 0xb7}}, 0xe8)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0)

13.481192672s ago: executing program 2:
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x1, 0x0, 0x0, 0x2}, 0x20)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl(r0, 0x8b32, &(0x7f0000000040))
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[], 0x1, 0x2cd, &(0x7f0000000200)="$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")
socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c}, 0x38)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x9, [@func, @var]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x3d}, 0x20)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x64, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x64}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x2c, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63c}, {}, {}, [@call, @map_val, @ringbuf_output, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @snprintf]}, 0x0}, 0x90)
sendmsg$NL80211_CMD_FRAME(r2, 0x0, 0x0)

12.610337819s ago: executing program 2:
ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000080)=0x7f)
ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_mount_image$bcachefs(&(0x7f000001f540), &(0x7f0000005dc0)='./file0\x00', 0x0, &(0x7f0000005f80)=ANY=[@ANYBLOB="646174615f636865636b73756d3f6e6f6e652c7374725f686173683d6372633332632c646174615f636865636b73756d3d7878686173682c6261636b67726f756e645f636f6d7072657373696f6e3d6e6f6e652c6d657461646174615f636865636b73756d3d63726336342c7374725f686173683d63726336342c636f6d7072657373696f6e3d677a69702c00b12ad55da9e690f3f671e2a963c6e436c7504557f0fbadaab9607da576d448dd11521821e84b69dce1a85442e5ffd2b948d59a9ab54444559714cabaaa60824f890721ff2a820fe81299e633"], 0xff, 0x5d5e, &(0x7f0000000000)="$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")
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000005e00)={'wlan1\x00'})
openat$nullb(0xffffffffffffff9c, &(0x7f0000005d80), 0x40840, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000005e40)=0x1010001)
open(0x0, 0x80000000000206, 0xfffffffffffffffd)
utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000140)={{0x0, 0x6}}, 0x0)
open$dir(0x0, 0x0, 0x0)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x21, 0x0, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r2 = open(0x0, 0x1451c2, 0x0)
ioctl$SOUND_MIXER_READ_CAPS(0xffffffffffffffff, 0x80044dfc, &(0x7f0000005ec0))
ftruncate(r2, 0x2007ffb)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000100), 0xfecc)

12.586676125s ago: executing program 0:
prlimit64(0x0, 0xe, 0x0, 0x0)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='syscall\x00')
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
read$FUSE(r0, &(0x7f0000002740)={0x2020}, 0x2020)

11.66712448s ago: executing program 1:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x90)
ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, &(0x7f0000000180))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000300)='hrtimer_expire_entry\x00', r0}, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]})
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000340)=0x1)
sched_setaffinity(0x0, 0x0, 0x0)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
r3 = eventfd(0x0)
ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$RTC_WKALM_SET(r4, 0x4028700f, 0x0)
ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x0, r3})
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, &(0x7f0000000700)=""/99, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000640))
ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x20000)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000dc0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xfc5, 0xb080, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000ac0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)

11.136645054s ago: executing program 4:
bind$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x1c)
ioctl$EXT4_IOC_GETFSUUID(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000))
socket$netlink(0x10, 0x3, 0x14)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0x2, 0x0)
r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f0000000bc0)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303030342c6e6c733d61736369692c73657373696f6e3d3078666666666666666666666666666637662c747970653d883b7f382c63726561746f723dd4a620e92c6e6f6465636f6d706f73652c747970653d5dbcce902c756d61736b3d30303030303030303030303030303030303030303030312c63726561746f723d40f194712c626172726965722c63726561746f723d65fe04c22c6e6f6465636f6d706f73652c6465636f6d706f73652c63726561746f723d8a7222832c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c756d61736b3d30303030303030303030303030303030303030303030362c626172726965722c6e6f626172726965722c736d61636b66737472616e736d7574653d55dac73dddd1aa0ff491f57216572f1e671a989f42c64dc0b65d67d4250567573bb5e8d8c2d916d55de0fad0693e50202f126e0e71e930d123c47bc4a1d2ab46e52a07fd8ca501f330abb8b07d3a5364154ec1faf99b6a9779abe230ce8f5a290ef9442c7569643c", @ANYRES8, @ANYBLOB="101500000000", @ANYRES32, @ANYRESDEC, @ANYRES64], 0x1, 0x6f8, &(0x7f0000000300)="$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")
inotify_init1(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet(0x2, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000040)={0x5})
ioctl$KVM_HYPERV_EVENTFD(r0, 0x4048aec9, &(0x7f0000000080)={0x6})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
mkdir(&(0x7f0000000440)='./control\x00', 0x0)
open$dir(&(0x7f00000002c0)='./control/file0\x00', 0x80040, 0x0)
unlink(&(0x7f00000001c0)='./control/file0\x00')

10.941991647s ago: executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r3, &(0x7f0000000140), 0x400000000000303, 0x10002, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

9.293909105s ago: executing program 3:
ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000080)=0x7f)
ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_mount_image$bcachefs(&(0x7f000001f540), &(0x7f0000005dc0)='./file0\x00', 0x0, &(0x7f0000005f80)=ANY=[@ANYBLOB="646174615f636865636b73756d3f6e6f6e652c7374725f686173683d6372633332632c646174615f636865636b73756d3d7878686173682c6261636b67726f756e645f636f6d7072657373696f6e3d6e6f6e652c6d657461646174615f636865636b73756d3d63726336342c7374725f686173683d63726336342c636f6d7072657373696f6e3d677a69702c00b12ad55da9e690f3f671e2a963c6e436c7504557f0fbadaab9607da576d448dd11521821e84b69dce1a85442e5ffd2b948d59a9ab54444559714cabaaa60824f890721ff2a820fe81299e633"], 0xff, 0x5d5e, &(0x7f0000000000)="$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")
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000005e00)={'wlan1\x00'})
openat$nullb(0xffffffffffffff9c, &(0x7f0000005d80), 0x40840, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000005e40)=0x1010001)
open(0x0, 0x80000000000206, 0xfffffffffffffffd)
utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000140)={{0x0, 0x6}}, 0x0)
open$dir(0x0, 0x0, 0x0)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x21, 0x0, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r2 = open(0x0, 0x1451c2, 0x0)
ioctl$SOUND_MIXER_READ_CAPS(0xffffffffffffffff, 0x80044dfc, &(0x7f0000005ec0))
ftruncate(r2, 0x2007ffb)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000100), 0xfecc)

9.04390597s ago: executing program 1:
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)
ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0)

7.527627197s ago: executing program 1:
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r4 = socket(0xa, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x29, @private=0xa010101, 0x0, 0x0, 'lblc\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0)
r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000280)={0x10001, 0x401f, 0x3})

6.395511547s ago: executing program 1:
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)}, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sched_setscheduler(0x0, 0x0, 0x0)
socket$qrtr(0x2a, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
r2 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19})
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
close(r2)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x1ff, 0x0, {{0x2a, 0x4, 0x0, 0x0, 0xa8, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x10, 0x0, 0x0, 0x9, [0x401, 0x0, 0x4]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@multicast1}, {@remote, 0x8}, {@dev={0xac, 0x14, 0x14, 0x32}}, {@empty, 0x8000}, {@empty}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x8, [{@broadcast}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@multicast2}]}, @noop, @noop, @lsrr={0x83, 0xf, 0xdc, [@private=0xa010102, @rand_addr, @multicast1]}, @rr={0x7, 0x13, 0x0, [@dev={0xac, 0x14, 0x14, 0x3}, @multicast1, @private=0xa010102, @remote]}]}}}}})

5.805687972s ago: executing program 3:
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x1, 0x0, 0x0, 0x2}, 0x20)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl(r0, 0x8b32, &(0x7f0000000040))
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[], 0x1, 0x2cd, &(0x7f0000000200)="$eJzs3T9rJGUYAPBnNpPdVYtNYSWCA1pYHZdrbTbIHYipPFKohQYvB5JdhAQC/sH1KlsbCws/gSD4QWz8BoKtYOcJB6/M7MzO7N2SZI/biJffr8mTd97nned9d0MmRZ79+NXp8b0i7j/46vcYRha9cYzjYRY70YvGN7Fk/F0AAP9nD1OKv9LcOnlZRAw3VxYAsEGX+/2ft+EvV1IWALBBd9//4N29/f3b7xXFMO5Mvz07KP+yL7/Or+/dj09jEkdxM0bxKKJ6UNiO6mmhDO+klGZ5UdqJN6azs4Myc/rRr/X6e39GVPm7MYqdamjxtFHlv7N/e7eY6+TPyjperO8/LvNvxSheXiQv5d9akR8H/Xjz9U79N2IUv30Sn8Uk7lVFtPlf7xbF2+n7v7/8sCyvzM9mZweDal4rbV3xSwMAAAAAAAAAAAAAAAAAAAAAwHPsRt07ZxBV/55yqO6/s/Wo/GY7isbOcn+eeX7WLNTtD5RSmqX4semvc7MoilRPbPPzeCXvNhYEAAAAAAAAAAAAAAAAAACA6+v08y+ODyeTo5NnEjTdAPKI+OduxNOuM+6MvBZ10IuVkwf1PQ8nk14dLs/JuyOx1czJIto5zXF0Vi438bSnkcdae3/hiZrr4Kef17378OI526vv9SyD5jiPD7PVZziIZmRYH9QP/Yh2Tj8uea/+4yNpNF8nrfUS9FdeGl2Y3mx0sc5LVTA7Jyuy8wp764+lBbPHd9GvTnVxzsNoD2q7Drr1LL83LvV+LtesflKekOnWAQAAAAAAAAAAAAAAAAAAG9X+9++Kiw/OTe2lwcbKAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAr1X7+/xrBrE4+OjnNL5jcj5PT/3iLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXAP/BgAA///vmVBI")
socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c}, 0x38)
r1 = socket$packet(0x11, 0x3, 0x300)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r3=>0x0})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x9, [@func, @var]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x3d}, 0x20)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x64, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x64}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x2c, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63c}, {}, {}, [@call, @map_val, @ringbuf_output, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @snprintf]}, 0x0}, 0x90)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0)

5.4419107s ago: executing program 0:
ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628)
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
socket$inet6(0xa, 0x800000000000002, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0)
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r4 = socket$l2tp6(0xa, 0x2, 0x73)
sendmmsg$inet6(r4, &(0x7f0000000280)=[{{&(0x7f0000002e00)={0xa, 0x0, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000300)=0x80000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000040)={@hyper})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000000c0)={{@hyper}, @any, 0x0, 0x0, 0x3})
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x90000)
r5 = syz_open_dev$rtc(0x0, 0x8000, 0x200)
ioctl$RTC_WKALM_SET(r5, 0x4028700f, &(0x7f0000000180)={0x0, 0x0, {0x4, 0x10, 0x8, 0xc, 0x4, 0x0, 0x1, 0x5e, 0xffffffffffffffff}})
r6 = open$dir(0x0, 0x0, 0x100)
mkdirat(r6, &(0x7f00000001c0)='./file0\x00', 0x160)
fsopen(&(0x7f0000000000)='ocfs2_dlmfs\x00', 0x0)
close(r0)

4.170959289s ago: executing program 0:
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r2=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000002498fe4934ee5c82101100000000000000000095000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0xc0000)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$OBJ_GET_MAP(0x7, 0x0, 0xbb)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b706000014000000b7030000e0ffffff8500000005000000bc0000000000003509010000000000950000000400000087060000000000007b9af8ff00000000b5090200000000007baaf0ff00000000bfa600000000000007080000f8ffffffbf6400000000000007040000f0ffffffb70200000800000018220000", @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056040000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000006280)={r2, 0x1, 0x6, @broadcast}, 0x10)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @random="429ca2e4534e"}, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x4)
write(r4, &(0x7f0000000040)="2700000014000707030e0200120f0a001100000007dd8378626c5e43c93e7b1e469e0000000000", 0x27)

3.724466724s ago: executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0x806c4120, &(0x7f0000000000)={0x0, [0x0, 0x0, 0x3]})
r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
write$UHID_CREATE2(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a00000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/259], 0x119)
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x101)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000080)={'veth0_macvtap\x00', {0x2, 0x5e20, @local}})
syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x101)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10)
r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r7 = fcntl$dupfd(r6, 0x0, r6)
ioctl$SG_IO(r7, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x40002, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0})

3.602139532s ago: executing program 4:
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)="d64018d045425ac05ef8825ab12f4cdfaf249ed25b2237ec697b1a2672f0eebf752b42a90d7ce1bb6cecde79137894996f34a9ddd06068a9360753eac71eb73e721b50443ae5e8577a1d34201aee2aa328c12d859757fb0edfbdea0f3628fe3f4a7644a465df876afdcdcd2e30859763deda795aefd8d36d1fba16e6c96c78a38742063c8de5acbfc6308a7fd282d958725da202db52c2d49bed515de5035d8fb6b24ae8d37accc6181d74535e8f01aaabd131cd5f44030f5d26eda9c4f7f0168557ca9e3a9f0ee806", 0xc9)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180400000100f1ff0000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)={0x2c, r1, 0x3e8c4ddb697c9f8f, 0x0, 0x0, {0x4}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}]}, 0x2c}}, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = dup(r3)
ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000100))
ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x3000, 0x0, 0x1ff}})
ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1b, 0x0, "05be04f85f24b3154478c908c2f6ecd93900e179a582b52ce9cfeb10f466693ce04d4c38eef0cdc8075077a1f8d2e67f41bbcb62a57680a053b58536349d9c41", "e3c055e4c17b5fec8c1737c24bc5bbb0751fe63b9e0c55b1e82eac590b9d7f057b8d7c7af91d8d9d0b4f7525250c81dd277b5b6cbc5b00", "7a91b590b9c06821ef5c606d5f4ba751aae2edcc2717a215ed6e2285e774391e", [0x7, 0x2]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x3, &(0x7f0000000000)=[{0x15}, {0x5}, {0x6, 0x8d, 0x0, 0x1}]})
r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x80100, 0x0, 0x20}, 0x18)
fcntl$setownex(r5, 0xf, &(0x7f00000000c0))
open_tree(r5, &(0x7f0000000100)='./file0\x00', 0x9000)
socket$nl_generic(0x10, 0x3, 0x10)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x400280, 0x0)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001780)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
pipe(&(0x7f0000000140)={<r6=>0xffffffffffffffff})
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000440), 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x84, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e20, 0x6, @mcast2, 0x9de}}, 0xfffd}, 0x90)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x3c, &(0x7f0000000400)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e23, 0xff, @empty, 0x7}]}, &(0x7f0000000240)=0x10)
r8 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000180)={0x1100005, 0x0, 0x0, 0x3}, 0x10)
write(0xffffffffffffffff, &(0x7f00000001c0)="240000001a001deb23713f48f96d19b528aca4b2d1000050c4088356b1bf4aecf49f0514bb0000f9f40700", 0x2b)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setresuid(0xee01, 0xee00, 0x0)

2.499797761s ago: executing program 0:
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0xfea0)
syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0xa1c440, &(0x7f0000000fc0)=ANY=[], 0xfe, 0xc32, &(0x7f0000001140)="$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")
syz_emit_ethernet(0x86, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040))
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
bind$netlink(0xffffffffffffffff, &(0x7f0000000080), 0xc)
socket$inet6(0xa, 0x3, 0x1)
mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6e6e0269eaba0000000004"])
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$nfc_llcp(r1, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "0f03c8c7e8da000000000000ffffff017f0000050000001d2000e565aa9a9d32c7627ffe7a5ccdbd77b3000000000000000000060000000000000000deff00", 0x39}, 0x60)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r2, &(0x7f0000000000)=ANY=[], 0x118)
mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e24, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x4c)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x11)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0)

2.115835652s ago: executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0x806c4120, &(0x7f0000000000)={0x0, [0x0, 0x0, 0x3]})
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a00000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/259], 0x119)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x101)
ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000080)={'veth0_macvtap\x00', {0x2, 0x5e20, @local}})
syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x101)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10)
r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$SG_IO(r6, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x40002, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0})

818.464259ms ago: executing program 1:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x90)
ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, &(0x7f0000000180))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000300)='hrtimer_expire_entry\x00', r0}, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]})
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000340)=0x1)
sched_setaffinity(0x0, 0x0, 0x0)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
r3 = eventfd(0x0)
ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$RTC_WKALM_SET(r4, 0x4028700f, 0x0)
ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x0, r3})
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, &(0x7f0000000700)=""/99, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000640))
ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x20000)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000dc0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xfc5, 0xb080, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000ac0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)

796.411163ms ago: executing program 4:
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0)
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000005640), 0x1, 0x55b1, &(0x7f0000005680)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000240)={0x0, 0x0, 0x80000, 0x20008})
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x8, 0x0, 0x0, 0x820008})

310.629634ms ago: executing program 0:
socket$netlink(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x2f, 0x20008010)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
r4 = syz_open_dev$dri(&(0x7f0000000300), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[0x0, 0x0], &(0x7f0000000540)=[0x0], 0x0, 0x4000000000000089})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'})
bpf$BPF_PROG_DETACH(0xe, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48)

17.685788ms ago: executing program 3:
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2010410, &(0x7f0000000040)=ANY=[], 0x3, 0x657, &(0x7f0000000ac0)="$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")
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x0, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000000080))
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
stat(&(0x7f0000000000)='./file0\x00', 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f00000000c0)='./file0\x00', 0x1071cd0, &(0x7f0000000140)={[], [{@euid_gt}]}, 0x0, 0x453, &(0x7f00000008c0)="$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")
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
socket$key(0xf, 0x3, 0x2)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r1, &(0x7f0000000400)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, 0x1}, {{@in6=@dev, 0x0, 0x33}, 0x0, @in6=@private2, 0x0, 0x4, 0x0, 0xb7}}, 0xe8)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0)

0s ago: executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305839, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = dup(r1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f00000000c0)={0x8, 0x7f, 0x0, 0x0, 0x3, "f06fc539471398450104663ea5b3e92dad434f"})
socket$inet_udp(0x2, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=@mpls_newroute={0xb4, 0x18, 0x400, 0x70bd26, 0x80000001, {0x1c, 0x20, 0x20, 0xff, 0xfd, 0x4, 0xc8, 0x2, 0x2000}, [@RTA_MULTIPATH={0xc, 0x9, {0x1, 0x10, 0x20}}, @RTA_NEWDST={0x84, 0x13, [{0x8}, {0x0, 0x0, 0x1}, {0xffffa}, {0x200, 0x0, 0x1}, {0x6}, {0x4, 0x0, 0x1}, {0x8000}, {0x51e5}, {0xffff, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x800, 0x0, 0x1}, {}, {0x4}, {0x7, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x8001, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x7}, {0x7}, {0x9, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x24f7, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0xc105, 0x0, 0x1}, {0x8}, {0x101, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x3ff}, {0x40, 0x0, 0x1}, {0x2, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000015}, 0x4004)
r3 = timerfd_create(0x7, 0x800)
timerfd_gettime(r3, &(0x7f0000000180))
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioperm(0x0, 0x5, 0x5e3b)
r6 = gettid()
signalfd(r5, &(0x7f0000000140)={[0x5]}, 0x8)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
socket$inet(0x2, 0x4, 0x6)

kernel console output (not intermixed with test programs):

interface descriptor's value: 21
[ 2844.831668][T11555] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2844.857658][T11555] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2844.876734][   T62] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2844.883269][T11555] usb 2-1: config 0 descriptor??
[ 2845.348743][T11555] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving
[ 2845.418785][T11555] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[ 2845.510522][T22623] loop2: detected capacity change from 0 to 256
[ 2845.903810][T12908] usb 2-1: USB disconnect, device number 22
[ 2846.258160][   T62] bridge_slave_1: left allmulticast mode
[ 2846.272201][T20535] Bluetooth: hci5: command tx timeout
[ 2846.277804][T20535] Bluetooth: hci3: command tx timeout
[ 2846.285345][   T62] bridge_slave_1: left promiscuous mode
[ 2846.294440][   T62] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2846.345076][   T62] bridge_slave_0: left allmulticast mode
[ 2846.350807][   T62] bridge_slave_0: left promiscuous mode
[ 2846.398949][   T62] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2848.445319][T20535] Bluetooth: hci5: command tx timeout
[ 2848.500291][T10097] Bluetooth: hci3: command tx timeout
[ 2848.747561][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2850.482918][   T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2850.507671][   T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2850.544177][   T62] bond0 (unregistering): Released all slaves
[ 2850.656106][T20535] Bluetooth: hci5: command tx timeout
[ 2850.656146][T10097] Bluetooth: hci3: command tx timeout
[ 2850.715744][T22588] chnl_net:caif_netlink_parms(): no params data found
[ 2850.846590][T22590] chnl_net:caif_netlink_parms(): no params data found
[ 2851.908117][T22670] loop2: detected capacity change from 0 to 2048
[ 2851.921261][T22670] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found!
[ 2851.933058][T22670] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found!
[ 2852.034225][T22670] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512
[ 2852.061232][T22670] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[ 2852.099878][T22670] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512
[ 2852.119850][T22670] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1)
[ 2852.257760][T22588] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2852.300814][T18472] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[ 2852.311445][T22588] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2852.348520][T22588] bridge_slave_0: entered allmulticast mode
[ 2852.371020][T22588] bridge_slave_0: entered promiscuous mode
[ 2852.403860][T22588] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2852.425806][T22588] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2852.440749][T22588] bridge_slave_1: entered allmulticast mode
[ 2852.451264][T22588] bridge_slave_1: entered promiscuous mode
[ 2852.527304][T18472] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7
[ 2852.554404][T18472] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0
[ 2852.556620][T22590] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2852.588930][T22590] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2852.598172][T18472] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 2852.600698][T22590] bridge_slave_0: entered allmulticast mode
[ 2852.631987][T22590] bridge_slave_0: entered promiscuous mode
[ 2852.635809][T18472] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2852.676991][T18472] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2852.698263][T18472] usb 1-1: config 0 descriptor??
[ 2852.706223][   T62] hsr_slave_0: left promiscuous mode
[ 2852.733949][   T62] hsr_slave_1: left promiscuous mode
[ 2852.765774][   T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2852.786873][   T62] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2852.806624][   T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2852.822630][   T62] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2852.899560][   T62] veth1_macvtap: left promiscuous mode
[ 2852.941446][   T62] veth0_macvtap: left promiscuous mode
[ 2852.948881][   T62] veth1_vlan: left promiscuous mode
[ 2852.956019][   T62] veth0_vlan: left promiscuous mode
[ 2853.348024][T22687] loop2: detected capacity change from 0 to 32768
[ 2853.363428][T18472] plantronics 0003:047F:FFFF.0014: No inputs registered, leaving
[ 2853.377052][T22687] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (22687)
[ 2853.410435][T22687] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 2853.420680][T22687] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[ 2853.429364][T22687] BTRFS info (device loop2): using free-space-tree
[ 2853.444155][T18472] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[ 2853.589933][T22687] BTRFS info (device loop2): rebuilding free space tree
[ 2853.628923][T22205] usb 1-1: USB disconnect, device number 27
[ 2853.704135][T22128] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 2856.633685][T22706] loop2: detected capacity change from 0 to 32768
[ 2856.695868][T22706] 
[ 2856.695868][T22706]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 2856.695868][T22706] 
[ 2856.917507][T22706] 
[ 2856.917507][T22706]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 2856.917507][T22706] 
[ 2856.966330][T22706] 
[ 2856.966330][T22706]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 2856.966330][T22706] 
[ 2857.340260][   T62] team0 (unregistering): Port device team_slave_1 removed
[ 2857.572884][   T62] team0 (unregistering): Port device team_slave_0 removed
[ 2858.269527][T22717] loop1: detected capacity change from 0 to 4096
[ 2858.604939][T22720] loop1: detected capacity change from 0 to 1024
[ 2860.285142][T22590] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2860.292619][T22590] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2860.299946][T22590] bridge_slave_1: entered allmulticast mode
[ 2860.312130][T22590] bridge_slave_1: entered promiscuous mode
[ 2860.494600][T22588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2860.548915][T22588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2861.942668][T22732] loop2: detected capacity change from 0 to 32768
[ 2861.957072][T22732] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (22732)
[ 2861.982532][T22732] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 2861.996507][T22732] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[ 2862.008687][T22732] BTRFS info (device loop2): using free-space-tree
[ 2862.096536][T22590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2862.129574][T22590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2862.284703][T22732] BTRFS info (device loop2): rebuilding free space tree
[ 2862.347992][T22588] team0: Port device team_slave_0 added
[ 2862.380069][T22128] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 2862.963435][T22590] team0: Port device team_slave_0 added
[ 2862.984933][ T5215] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[ 2863.320773][T22588] team0: Port device team_slave_1 added
[ 2863.470160][T22590] team0: Port device team_slave_1 added
[ 2863.563872][ T5215] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2863.602357][ T5215] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2863.642532][ T5215] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[ 2863.699208][ T5215] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2863.771546][T22588] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2863.779478][ T5215] usb 2-1: config 0 descriptor??
[ 2863.806836][T22588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2863.807172][ T5215] usb 2-1: can't set config #0, error -71
[ 2863.833572][T22588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2863.855238][T22588] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2863.862389][T22588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2863.889948][T22588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2863.977476][T22590] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2863.985428][ T5215] usb 2-1: USB disconnect, device number 23
[ 2863.992468][T22590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2864.052150][T22590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2864.082322][T22761] fuse: Bad value for 'rootmode'
[ 2864.103642][   T29] audit: type=1804 audit(1718819193.788:1263): pid=22761 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir1062684645/syzkaller.KAMVAa/75/file0" dev="sda1" ino=1949 res=1 errno=0
[ 2864.570383][T22590] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2864.619190][T22590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2865.040568][T22590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2865.460411][   T29] audit: type=1326 audit(1718819195.158:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22765 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f35aca7cf29 code=0x0
[ 2865.547585][T22588] hsr_slave_0: entered promiscuous mode
[ 2865.561049][T22588] hsr_slave_1: entered promiscuous mode
[ 2865.577610][T22588] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2865.592725][T22588] Cannot create hsr debugfs directory
[ 2865.621425][T22775] loop1: detected capacity change from 0 to 512
[ 2865.633229][T22775] EXT4-fs: Ignoring removed bh option
[ 2865.641368][T22775] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[ 2865.676492][T22775] EXT4-fs (loop1): 1 truncate cleaned up
[ 2865.701038][T22775] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 2865.827695][T22590] hsr_slave_0: entered promiscuous mode
[ 2865.850827][T22590] hsr_slave_1: entered promiscuous mode
[ 2865.869409][T22590] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2865.877404][T22590] Cannot create hsr debugfs directory
[ 2865.912416][T22775] loop1: detected capacity change from 512 to 64
[ 2866.016880][   T62] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2866.209640][T20532] EXT4-fs warning (device loop1): htree_dirblock_to_tree:1082: inode #19: lblock 0: comm syz-executor.1: error -12 reading directory block
[ 2866.228617][T20532] EXT4-fs warning (device loop1): ext4_empty_dir:3089: inode #19: lblock 0: comm syz-executor.1: error -12 reading directory block
[ 2866.248314][T20532] EXT4-fs warning (device loop1): htree_dirblock_to_tree:1082: inode #19: lblock 0: comm syz-executor.1: error -12 reading directory block
[ 2866.285247][T20532] EXT4-fs warning (device loop1): ext4_empty_dir:3089: inode #19: lblock 0: comm syz-executor.1: error -12 reading directory block
[ 2866.347334][T20532] EXT4-fs warning (device loop1): htree_dirblock_to_tree:1082: inode #19: lblock 0: comm syz-executor.1: error -12 reading directory block
[ 2866.473295][T20532] EXT4-fs warning (device loop1): ext4_empty_dir:3089: inode #19: lblock 0: comm syz-executor.1: error -12 reading directory block
[ 2866.553005][T20532] EXT4-fs warning (device loop1): htree_dirblock_to_tree:1082: inode #19: lblock 0: comm syz-executor.1: error -12 reading directory block
[ 2866.627684][T20532] EXT4-fs warning (device loop1): ext4_empty_dir:3089: inode #19: lblock 0: comm syz-executor.1: error -12 reading directory block
[ 2866.706755][T20532] EXT4-fs warning (device loop1): htree_dirblock_to_tree:1082: inode #19: lblock 0: comm syz-executor.1: error -12 reading directory block
[ 2866.788037][T20532] EXT4-fs warning (device loop1): ext4_empty_dir:3089: inode #19: lblock 0: comm syz-executor.1: error -12 reading directory block
[ 2867.359533][   T62] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2868.638275][   T62] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2868.688918][T20532] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2868.701565][T22792] loop2: detected capacity change from 0 to 2048
[ 2868.761219][T22792] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found!
[ 2868.830182][T22792] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found!
[ 2868.917043][T22792] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512
[ 2868.970376][T22792] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[ 2868.994326][   T62] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2869.037505][T22792] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512
[ 2869.082594][T22792] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1)
[ 2869.918690][T22801] fuse: Bad value for 'rootmode'
[ 2869.969619][   T29] audit: type=1804 audit(1718819199.658:1265): pid=22801 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir1062684645/syzkaller.KAMVAa/79/file0" dev="sda1" ino=1931 res=1 errno=0
[ 2870.587174][   T62] bridge_slave_1: left allmulticast mode
[ 2870.602707][   T62] bridge_slave_1: left promiscuous mode
[ 2870.622488][   T62] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2870.653196][   T62] bridge_slave_0: left allmulticast mode
[ 2870.669057][   T62] bridge_slave_0: left promiscuous mode
[ 2870.686604][   T62] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2871.064540][T20535] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 2871.081248][T20535] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 2871.091020][T20535] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 2871.100449][T20535] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 2871.113337][T20535] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 2871.132209][T20535] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 2871.895676][T22809] loop2: detected capacity change from 0 to 32768
[ 2871.948981][T22809] 
[ 2871.948981][T22809]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 2871.948981][T22809] 
[ 2872.038420][T22809] 
[ 2872.038420][T22809]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 2872.038420][T22809] 
[ 2872.072177][T22809] 
[ 2872.072177][T22809]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 2872.072177][T22809] 
[ 2872.133091][T22813] 
[ 2872.133091][T22813]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 2872.133091][T22813] 
[ 2872.282695][T22128] 
[ 2872.282695][T22128]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 2872.282695][T22128] 
[ 2872.312863][T22128] 
[ 2872.312863][T22128]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 2872.312863][T22128] 
[ 2872.783184][   T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2872.836804][   T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2872.865044][   T62] bond0 (unregistering): Released all slaves
[ 2873.106329][   T62] tipc: Left network mode
[ 2873.302481][T20535] Bluetooth: hci2: command tx timeout
[ 2874.086685][   T62] hsr_slave_0: left promiscuous mode
[ 2874.103869][   T62] hsr_slave_1: left promiscuous mode
[ 2874.113670][   T62] batman_adv: batadv0: Removing interface: team0
[ 2874.132663][   T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2874.140301][   T62] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2874.149102][   T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2874.156955][   T62] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2874.212401][   T62] veth1_macvtap: left promiscuous mode
[ 2874.218158][   T62] veth0_macvtap: left promiscuous mode
[ 2874.224260][   T62] veth1_vlan: left promiscuous mode
[ 2874.230611][   T62] veth0_vlan: left promiscuous mode
[ 2874.323042][ T5215] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[ 2874.537562][ T5215] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7
[ 2874.576962][ T5215] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0
[ 2874.622303][ T5215] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 2874.664283][ T5215] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2874.712360][ T5215] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2874.744897][ T5215] usb 3-1: config 0 descriptor??
[ 2875.238448][ T5215] plantronics 0003:047F:FFFF.0015: No inputs registered, leaving
[ 2875.324492][ T5215] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[ 2875.394235][T20535] Bluetooth: hci2: command tx timeout
[ 2875.751485][ T5215] usb 3-1: USB disconnect, device number 15
[ 2876.408768][   T62] team0 (unregistering): Port device team_slave_1 removed
[ 2876.629005][   T62] team0 (unregistering): Port device team_slave_0 removed
[ 2877.474491][T20535] Bluetooth: hci2: command tx timeout
[ 2879.542375][T20535] Bluetooth: hci2: command tx timeout
[ 2880.112664][T22588] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 2881.065446][T22588] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 2881.091732][T22588] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 2881.277484][T22588] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 2883.926504][T20535] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[ 2883.943122][T20535] Bluetooth: hci1: Injecting HCI hardware error event
[ 2883.955167][T10097] Bluetooth: hci1: hardware error 0x00
[ 2884.649644][T22811] chnl_net:caif_netlink_parms(): no params data found
[ 2884.667798][   T29] audit: type=1804 audit(1718819214.358:1266): pid=22856 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1062684645/syzkaller.KAMVAa/86/bus" dev="sda1" ino=1953 res=1 errno=0
[ 2884.910215][T22590] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 2884.947840][T22590] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 2885.112754][   T62] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2885.196533][T22590] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 2885.253336][T22590] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 2885.576799][   T62] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2885.666542][T22811] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2885.692560][T22811] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2885.716728][T22811] bridge_slave_0: entered allmulticast mode
[ 2885.739905][T22811] bridge_slave_0: entered promiscuous mode
[ 2885.770035][T22811] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2885.801293][T22811] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2885.812488][T22811] bridge_slave_1: entered allmulticast mode
[ 2885.826203][T22811] bridge_slave_1: entered promiscuous mode
[ 2885.875272][T22867] loop2: detected capacity change from 0 to 1024
[ 2885.994606][   T62] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2887.893000][T10097] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[ 2888.150739][   T62] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2888.274751][T22811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2888.437538][T22811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2888.803932][T22811] team0: Port device team_slave_0 added
[ 2894.024516][T22811] team0: Port device team_slave_1 added
[ 2894.037315][T22588] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2894.381889][   T62] bridge_slave_0: left allmulticast mode
[ 2894.388717][   T62] bridge_slave_0: left promiscuous mode
[ 2894.402392][   T62] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2894.523246][   T62] bridge_slave_1: left allmulticast mode
[ 2894.553516][   T62] bridge_slave_1: left promiscuous mode
[ 2894.559636][   T62] bridge1: port 1(bridge_slave_1) entered disabled state
[ 2895.442401][T12908] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[ 2895.714878][T12908] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2895.735597][T12908] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2895.757381][T12908] usb 1-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[ 2896.262269][T12908] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2896.293508][T12908] usb 1-1: config 0 descriptor??
[ 2897.955575][   T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2897.989373][   T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2898.017672][   T62] bond0 (unregistering): Released all slaves
[ 2898.082853][T22811] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2898.101161][T22811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2898.234011][T22811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2898.414021][T12908] usbhid 1-1:0.0: can't add hid device: -71
[ 2898.455394][T12908] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[ 2898.475496][T12908] usb 1-1: USB disconnect, device number 28
[ 2898.636459][T22811] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2898.658694][T22811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2898.707960][T22811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2899.203993][T22811] hsr_slave_0: entered promiscuous mode
[ 2899.239367][T22811] hsr_slave_1: entered promiscuous mode
[ 2899.257028][T22811] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2899.280540][T22811] Cannot create hsr debugfs directory
[ 2899.700999][   T62] hsr_slave_0: left promiscuous mode
[ 2899.732759][   T62] hsr_slave_1: left promiscuous mode
[ 2899.753582][   T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2899.781711][   T62] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2899.822218][   T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2899.859559][   T62] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2900.008151][   T62] veth1_macvtap: left promiscuous mode
[ 2900.038238][   T62] veth0_macvtap: left promiscuous mode
[ 2900.052634][   T62] veth1_vlan: left promiscuous mode
[ 2900.065324][   T62] veth0_vlan: left promiscuous mode
[ 2900.200938][T21308] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 2900.214149][T21308] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 2900.232898][T21308] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 2900.257816][T21308] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 2900.277722][T21308] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 2900.286268][T21308] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 2900.699201][T10097] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 2900.719966][T10097] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 2900.732749][T10097] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 2900.760124][T10097] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 2900.771666][T10097] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[ 2900.788056][T10097] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 2901.702462][T22205] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[ 2901.894750][T22205] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2901.907466][T22205] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2901.950440][T22205] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[ 2901.962139][T22205] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2901.993071][T22205] usb 3-1: config 0 descriptor??
[ 2902.422779][T10097] Bluetooth: hci3: command tx timeout
[ 2902.912394][T10097] Bluetooth: hci5: command tx timeout
[ 2903.398140][ T1251] ieee802154 phy1 wpan1: encryption failed: -22
[ 2903.443975][   T62] team0 (unregistering): Port device team_slave_1 removed
[ 2903.717668][   T62] team0 (unregistering): Port device team_slave_0 removed
[ 2904.147334][T22205] usbhid 3-1:0.0: can't add hid device: -71
[ 2904.153806][T22205] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 2904.174014][T22205] usb 3-1: USB disconnect, device number 16
[ 2904.502502][T10097] Bluetooth: hci3: command tx timeout
[ 2904.982562][T10097] Bluetooth: hci5: command tx timeout
[ 2906.222953][T11463] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[ 2906.555676][T11463] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2906.582783][T10097] Bluetooth: hci3: command tx timeout
[ 2906.590886][T11463] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2906.632658][T11463] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[ 2906.641791][T11463] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2906.713543][T11463] usb 3-1: config 0 descriptor??
[ 2907.066401][T10097] Bluetooth: hci5: command tx timeout
[ 2907.522103][T11463] usbhid 3-1:0.0: can't add hid device: -71
[ 2907.528327][T11463] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 2907.556040][T11463] usb 3-1: USB disconnect, device number 17
[ 2907.748305][T22908] chnl_net:caif_netlink_parms(): no params data found
[ 2907.822550][T18472] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[ 2908.041060][T18472] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2908.053375][T18472] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2908.063544][T18472] usb 1-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[ 2908.072995][T22910] chnl_net:caif_netlink_parms(): no params data found
[ 2908.074747][T18472] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2908.111338][T22811] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 2908.125967][T18472] usb 1-1: config 0 descriptor??
[ 2908.227756][T22811] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 2908.279816][T22958] loop2: detected capacity change from 0 to 4096
[ 2908.294386][T22958] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512).
[ 2908.365254][T22908] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2908.372879][T22908] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2908.381852][T22908] bridge_slave_0: entered allmulticast mode
[ 2908.399597][T22908] bridge_slave_0: entered promiscuous mode
[ 2908.439574][T22811] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 2908.552273][T22908] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2908.571111][T22908] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2908.585337][T22908] bridge_slave_1: entered allmulticast mode
[ 2908.612174][T22908] bridge_slave_1: entered promiscuous mode
[ 2908.671483][T22811] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 2908.672271][T10097] Bluetooth: hci3: command tx timeout
[ 2908.869507][T18472] usbhid 1-1:0.0: can't add hid device: -71
[ 2908.894958][T18472] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[ 2908.944347][T18472] usb 1-1: USB disconnect, device number 29
[ 2909.046570][T22908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2909.142411][T10097] Bluetooth: hci5: command tx timeout
[ 2909.461356][T22908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2909.885459][T22910] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2909.894243][T22910] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2909.901709][T22910] bridge_slave_0: entered allmulticast mode
[ 2909.955213][T22910] bridge_slave_0: entered promiscuous mode
[ 2910.380570][T22910] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2910.412357][T22910] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2910.419744][T22910] bridge_slave_1: entered allmulticast mode
[ 2910.444623][T22910] bridge_slave_1: entered promiscuous mode
[ 2910.483695][T22977] loop2: detected capacity change from 0 to 4096
[ 2910.527044][T22908] team0: Port device team_slave_0 added
[ 2910.745700][T22908] team0: Port device team_slave_1 added
[ 2910.830770][T22910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2910.889071][T22985] loop2: detected capacity change from 0 to 1024
[ 2911.048350][T22908] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2911.055658][T22908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2911.082456][T22908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2911.127716][T22910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2911.213346][T22908] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2911.238067][T22908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2911.297205][T22908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2911.446010][T22910] team0: Port device team_slave_0 added
[ 2912.326221][T22910] team0: Port device team_slave_1 added
[ 2912.745588][T22995] loop2: detected capacity change from 0 to 8
[ 2912.897446][   T62] bridge_slave_1: left allmulticast mode
[ 2912.903973][   T62] bridge_slave_1: left promiscuous mode
[ 2912.909889][   T62] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2912.923713][   T62] bridge_slave_0: left allmulticast mode
[ 2912.929654][   T62] bridge_slave_0: left promiscuous mode
[ 2912.940120][   T62] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2912.977374][   T62] bridge_slave_1: left allmulticast mode
[ 2913.010676][   T62] bridge_slave_1: left promiscuous mode
[ 2913.021294][   T62] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2913.036944][   T62] bridge_slave_0: left allmulticast mode
[ 2913.043078][   T62] bridge_slave_0: left promiscuous mode
[ 2913.049013][   T62] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2914.069068][T23008] loop2: detected capacity change from 0 to 4096
[ 2914.088260][T23008] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512).
[ 2914.423431][   T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2914.460869][   T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2914.474635][   T62] bond0 (unregistering): Released all slaves
[ 2915.977022][   T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2916.044793][   T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2916.097411][   T62] bond0 (unregistering): Released all slaves
[ 2916.392825][T22908] hsr_slave_0: entered promiscuous mode
[ 2916.463629][T22908] hsr_slave_1: entered promiscuous mode
[ 2916.553394][T22908] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2916.581754][T22908] Cannot create hsr debugfs directory
[ 2916.663370][   T62] hsr_slave_0: left promiscuous mode
[ 2916.709041][   T62] hsr_slave_1: left promiscuous mode
[ 2916.760974][   T62] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2916.791210][   T62] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2916.881116][   T62] hsr_slave_0: left promiscuous mode
[ 2916.896866][   T62] hsr_slave_1: left promiscuous mode
[ 2916.910814][   T62] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2916.947729][   T62] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2917.528679][T23025] loop2: detected capacity change from 0 to 4096
[ 2917.726297][   T62] team0 (unregistering): Port device team_slave_1 removed
[ 2917.979997][   T62] team0 (unregistering): Port device team_slave_0 removed
[ 2918.099530][T23028] loop2: detected capacity change from 0 to 1024
[ 2919.858322][   T62] team0 (unregistering): Port device team_slave_1 removed
[ 2920.680572][   T62] team0 (unregistering): Port device team_slave_0 removed
[ 2922.805537][T22910] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2922.834570][T22910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2922.922313][T22910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2923.060988][T23065] binder: 23064:23065 ioctl ae41 2 returned -22
[ 2923.145923][T22910] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2923.340998][T22910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2923.375795][T22910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2923.513472][T23068] hub 9-0:1.0: USB hub found
[ 2923.518495][T23068] hub 9-0:1.0: 8 ports detected
[ 2923.970176][T22910] hsr_slave_0: entered promiscuous mode
[ 2924.011867][T22910] hsr_slave_1: entered promiscuous mode
[ 2924.060044][T22910] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2924.092049][T22910] Cannot create hsr debugfs directory
[ 2925.220695][T22811] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2925.575952][T22811] 8021q: adding VLAN 0 to HW filter on device team0
[ 2925.621218][T12908] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2925.628603][T12908] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2925.668987][T23070] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2925.685255][T12908] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2925.692578][T12908] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2926.050944][   T29] audit: type=1326 audit(1718819255.748:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23077 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0e49a7cf29 code=0x0
[ 2926.298836][T23084] loop2: detected capacity change from 0 to 1024
[ 2926.648327][T22811] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2926.787657][T22910] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 2926.862936][T22910] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 2926.961068][T22910] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 2927.010989][T22910] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 2927.402199][T22811] veth0_vlan: entered promiscuous mode
[ 2927.610206][T22811] veth1_vlan: entered promiscuous mode
[ 2927.669855][T22908] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 2927.699443][T22908] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 2927.734645][T22908] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 2927.810606][T22908] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 2928.074249][T22811] veth0_macvtap: entered promiscuous mode
[ 2928.195964][T22811] veth1_macvtap: entered promiscuous mode
[ 2928.404917][T22811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2928.437360][T22811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2928.458944][T22811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2928.489396][T22811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2928.517124][T22811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2928.537435][T22811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2928.553593][T22811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2928.566699][T22811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2928.579519][T22811] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2928.679523][T22811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2928.699505][T22811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2928.750987][T22811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2928.786928][T22811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2928.814242][T22811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2928.836691][T22811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2928.855725][T22811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2928.861473][T23099] loop2: detected capacity change from 0 to 4096
[ 2928.868913][T22811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2928.897084][T22811] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2928.912872][T23099] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512).
[ 2928.921533][T22811] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2928.935695][T22811] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2928.945048][T22811] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2928.964995][T22811] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2929.115211][T22910] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2929.500134][T23109] binder: 23108:23109 ioctl ae41 2 returned -22
[ 2929.726427][T22910] 8021q: adding VLAN 0 to HW filter on device team0
[ 2929.744486][T11463] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2929.751752][T11463] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2929.835198][T22908] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2929.916126][ T5215] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2929.923443][ T5215] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2929.965149][T23111] hub 9-0:1.0: USB hub found
[ 2929.970262][T23111] hub 9-0:1.0: 8 ports detected
[ 2930.324911][T22908] 8021q: adding VLAN 0 to HW filter on device team0
[ 2930.462039][T12908] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2930.469410][T12908] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2930.495675][T12908] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2930.503041][T12908] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2930.803879][T22910] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 2932.049103][ T5710] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2935.157326][ T5710] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2935.217058][T22908] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2935.279129][T22910] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2935.515298][ T5710] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2935.552613][T21308] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 2935.577357][T21308] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 2935.594212][T21308] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 2935.613947][T21308] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 2935.629782][T21308] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 2935.643267][T21308] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 2935.798435][ T5710] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2935.998240][   T29] audit: type=1326 audit(1718819265.698:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23136 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f35aca7cf29 code=0x0
[ 2936.210235][T22910] veth0_vlan: entered promiscuous mode
[ 2936.323750][T22910] veth1_vlan: entered promiscuous mode
[ 2936.565453][ T5710] bridge_slave_1: left allmulticast mode
[ 2936.571232][ T5710] bridge_slave_1: left promiscuous mode
[ 2936.590474][ T5710] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2936.618056][ T5710] bridge_slave_0: left allmulticast mode
[ 2936.626365][ T5710] bridge_slave_0: left promiscuous mode
[ 2936.656591][ T5710] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2943.714439][T10097] Bluetooth: hci2: command tx timeout
[ 2944.361613][T23156] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 2944.771469][   T29] audit: type=1326 audit(1718819274.468:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23155 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f35aca7cf29 code=0x0
[ 2945.345770][ T5710] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2945.369002][ T5710] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2945.385815][ T5710] bond0 (unregistering): Released all slaves
[ 2945.474365][T23156] netlink: 'syz-executor.2': attribute type 10 has an invalid length.
[ 2945.515873][T23156] batman_adv: batadv0: Adding interface: team0
[ 2945.522519][T23156] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2945.547951][T23156] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[ 2945.782240][T21308] Bluetooth: hci2: command tx timeout
[ 2945.959349][ T5710] hsr_slave_0: left promiscuous mode
[ 2945.987921][ T5710] hsr_slave_1: left promiscuous mode
[ 2946.017249][T23162] loop2: detected capacity change from 0 to 4096
[ 2946.029023][ T5710] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2946.037266][ T5710] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2946.045031][T23162] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512).
[ 2946.053582][ T5710] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2946.062857][ T5710] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2946.125714][ T5710] veth1_macvtap: left promiscuous mode
[ 2946.131751][ T5710] veth0_macvtap: left promiscuous mode
[ 2946.144549][ T5710] veth1_vlan: left promiscuous mode
[ 2946.150022][ T5710] veth0_vlan: left promiscuous mode
[ 2947.528384][T23173] hub 9-0:1.0: USB hub found
[ 2947.553319][T23173] hub 9-0:1.0: 8 ports detected
[ 2948.533133][T21308] Bluetooth: hci2: command tx timeout
[ 2950.443743][ T5710] team0 (unregistering): Port device team_slave_1 removed
[ 2950.560367][ T5710] team0 (unregistering): Port device team_slave_0 removed
[ 2950.602465][T21308] Bluetooth: hci2: command tx timeout
[ 2951.279343][   T29] audit: type=1326 audit(1718819280.978:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23184 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f35aca7cf29 code=0x0
[ 2952.076675][T22910] veth0_macvtap: entered promiscuous mode
[ 2952.136157][T22908] veth0_vlan: entered promiscuous mode
[ 2952.170156][T22910] veth1_macvtap: entered promiscuous mode
[ 2959.303426][T23130] chnl_net:caif_netlink_parms(): no params data found
[ 2959.749218][T23201] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[ 2959.973018][   T29] audit: type=1400 audit(1718819289.638:1271): avc:  denied  { listen } for  pid=23200 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[ 2960.084027][T23208] loop2: detected capacity change from 0 to 1024
[ 2960.092690][   T29] audit: type=1400 audit(1718819289.798:1272): avc:  denied  { setopt } for  pid=23200 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[ 2960.126986][T23130] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2960.135241][T23130] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2960.144393][T23130] bridge_slave_0: entered allmulticast mode
[ 2960.164229][T23130] bridge_slave_0: entered promiscuous mode
[ 2960.418551][T23130] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2960.450303][T23130] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2960.491218][T23130] bridge_slave_1: entered allmulticast mode
[ 2960.532213][T23130] bridge_slave_1: entered promiscuous mode
[ 2961.013890][T23130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2961.644855][T23130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2961.808575][T10097] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 2961.884952][T10097] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 2961.907277][T10097] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 2961.934714][T10097] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 2961.957339][T10097] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 2961.972541][T10097] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 2962.287764][T23130] team0: Port device team_slave_0 added
[ 2962.310969][T23130] team0: Port device team_slave_1 added
[ 2962.464203][T10097] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 2962.492236][T10097] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 2962.512459][T10097] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 2962.541193][T10097] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 2962.549693][T10097] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[ 2962.565766][T10097] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 2962.766144][T23130] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2962.776489][T23130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2962.817067][T23130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2962.863642][T23130] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2962.878138][T23130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2962.906128][T23130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2963.818191][T23130] hsr_slave_0: entered promiscuous mode
[ 2963.875077][T23226] hub 9-0:1.0: USB hub found
[ 2963.880769][T23226] hub 9-0:1.0: 8 ports detected
[ 2965.073219][ T1251] ieee802154 phy1 wpan1: encryption failed: -22
[ 2965.122515][T21308] Bluetooth: hci3: command tx timeout
[ 2965.131864][T21308] Bluetooth: hci5: command tx timeout
[ 2965.174925][T23130] hsr_slave_1: entered promiscuous mode
[ 2965.212217][T23130] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2965.241903][T23130] Cannot create hsr debugfs directory
[ 2966.413593][ T5710] bridge_slave_1: left allmulticast mode
[ 2966.419679][ T5710] bridge_slave_1: left promiscuous mode
[ 2966.427895][ T5710] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2966.441228][ T5710] bridge_slave_0: left allmulticast mode
[ 2966.450201][ T5710] bridge_slave_0: left promiscuous mode
[ 2966.456208][ T5710] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2966.573891][   T29] audit: type=1326 audit(1718819296.278:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23236 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f35aca7cf29 code=0x0
[ 2967.157917][T10097] Bluetooth: hci5: command tx timeout
[ 2967.158277][T21308] Bluetooth: hci3: command tx timeout
[ 2967.296609][ T5710] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2967.309629][ T5710] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2967.327828][ T5710] bond0 (unregistering): Released all slaves
[ 2967.828830][ T5710] hsr_slave_0: left promiscuous mode
[ 2967.851563][ T5710] hsr_slave_1: left promiscuous mode
[ 2967.864399][ T5710] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2967.887468][ T5710] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2967.946372][ T5710] veth1_macvtap: left promiscuous mode
[ 2967.952393][ T5710] veth0_macvtap: left promiscuous mode
[ 2967.958468][ T5710] veth1_vlan: left promiscuous mode
[ 2967.969256][ T5710] veth0_vlan: left promiscuous mode
[ 2968.172152][T18472] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[ 2968.386206][T18472] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2968.418805][T18472] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2968.472136][T18472] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[ 2968.485951][T18472] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2968.505481][T18472] usb 3-1: config 0 descriptor??
[ 2968.746051][T23256] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 2968.771213][   T62] nci: nci_add_new_protocol: the target found does not have the desired protocol
[ 2969.226762][T21308] Bluetooth: hci5: command tx timeout
[ 2969.232843][T10097] Bluetooth: hci3: command tx timeout
[ 2969.751184][ T5710] team0 (unregistering): Port device team_slave_1 removed
[ 2969.915251][ T5710] team0 (unregistering): Port device team_slave_0 removed
[ 2970.610859][T18472] usbhid 3-1:0.0: can't add hid device: -71
[ 2970.617961][T18472] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 2970.640265][T18472] usb 3-1: USB disconnect, device number 18
[ 2971.302427][T21308] Bluetooth: hci3: command tx timeout
[ 2971.302453][T10097] Bluetooth: hci5: command tx timeout
[ 2971.571769][T23215] chnl_net:caif_netlink_parms(): no params data found
[ 2972.271914][T23271] hub 9-0:1.0: USB hub found
[ 2972.291674][T23271] hub 9-0:1.0: 8 ports detected
[ 2973.632786][T21611] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[ 2973.655903][T23215] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2973.679986][T23215] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2973.688361][T23215] bridge_slave_0: entered allmulticast mode
[ 2973.704269][T23215] bridge_slave_0: entered promiscuous mode
[ 2973.728887][T23215] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2973.736606][T23215] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2973.751076][T23215] bridge_slave_1: entered allmulticast mode
[ 2973.762108][T23215] bridge_slave_1: entered promiscuous mode
[ 2973.863363][T21611] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7
[ 2973.887239][T21611] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0
[ 2973.905422][T21611] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 2973.920074][T21611] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2973.944572][T21611] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2973.944803][T23217] chnl_net:caif_netlink_parms(): no params data found
[ 2973.996255][T21611] usb 3-1: config 0 descriptor??
[ 2974.005110][T23215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2974.093810][T23215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2974.509485][T21611] plantronics 0003:047F:FFFF.0016: No inputs registered, leaving
[ 2974.551932][T21611] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[ 2974.764130][T23215] team0: Port device team_slave_0 added
[ 2974.799877][T23215] team0: Port device team_slave_1 added
[ 2974.981289][ T5215] usb 3-1: USB disconnect, device number 19
[ 2974.992157][T23282] plantronics 0003:047F:FFFF.0016: usb_submit_urb(ctrl) failed: -19
[ 2975.272271][T23287] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2975.320523][T23215] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2975.328005][T23215] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2975.357761][T23215] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2975.370748][T23130] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 2975.386882][T23130] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 2975.416324][T23217] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2975.427522][T23217] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2975.442399][T23217] bridge_slave_0: entered allmulticast mode
[ 2975.458486][T23217] bridge_slave_0: entered promiscuous mode
[ 2975.476273][T23287] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[ 2975.489879][T23215] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2975.501497][T23215] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2975.501511][   T29] audit: type=1326 audit(1718819305.198:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23286 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0e49a7cf29 code=0x0
[ 2975.551736][T23215] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2975.577448][T23130] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 2975.603729][T23217] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2975.618116][T23217] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2975.625774][T23217] bridge_slave_1: entered allmulticast mode
[ 2975.634283][T23217] bridge_slave_1: entered promiscuous mode
[ 2975.736648][T23217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2975.748565][T23130] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 2975.790596][T23217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2975.920780][T23215] hsr_slave_0: entered promiscuous mode
[ 2975.938522][T23215] hsr_slave_1: entered promiscuous mode
[ 2975.955980][T23215] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2975.964537][T23215] Cannot create hsr debugfs directory
[ 2975.989934][T23217] team0: Port device team_slave_0 added
[ 2976.080362][T23217] team0: Port device team_slave_1 added
[ 2976.148941][   T29] audit: type=1326 audit(1718819305.838:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23292 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f35aca7cf29 code=0x0
[ 2976.437664][ T5710] bridge_slave_1: left allmulticast mode
[ 2976.443661][ T5710] bridge_slave_1: left promiscuous mode
[ 2976.455724][ T5710] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2976.491513][ T5710] bridge_slave_0: left allmulticast mode
[ 2976.505234][ T5710] bridge_slave_0: left promiscuous mode
[ 2976.511546][ T5710] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2978.305264][ T5710] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2978.349267][ T5710] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2978.386154][ T5710] bond0 (unregistering): Released all slaves
[ 2978.506417][T23217] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2978.532181][T23217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2978.602079][T23217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2978.746230][T23217] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2978.760628][T23217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2978.794297][T23217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2978.817982][ T5710] hsr_slave_0: left promiscuous mode
[ 2978.827510][ T5710] hsr_slave_1: left promiscuous mode
[ 2978.847035][ T5710] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2978.857561][ T5710] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2978.921398][ T5710] veth0_vlan: left promiscuous mode
[ 2981.793996][ T5710] team0 (unregistering): Port device team_slave_1 removed
[ 2981.918550][ T5710] team0 (unregistering): Port device team_slave_0 removed
[ 2983.030818][   T29] audit: type=1326 audit(1718819312.728:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23330 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0e49a7cf29 code=0x0
[ 2983.784898][T23336] loop2: detected capacity change from 0 to 8
[ 2983.843073][T23217] hsr_slave_0: entered promiscuous mode
[ 2983.850670][T23217] hsr_slave_1: entered promiscuous mode
[ 2983.877029][T23217] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2983.888065][T23217] Cannot create hsr debugfs directory
[ 2986.407290][T23130] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2986.670493][T23130] 8021q: adding VLAN 0 to HW filter on device team0
[ 2986.743372][T15501] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2986.750650][T15501] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2986.779007][T15501] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2986.786280][T15501] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2986.832122][T22205] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[ 2986.868071][T23215] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 2986.930700][T23215] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 2987.045340][T22205] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2987.052088][T23215] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 2987.063453][T22205] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2987.073617][T22205] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[ 2987.084108][T22205] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2987.106675][T23215] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 2987.107170][T22205] usb 3-1: config 0 descriptor??
[ 2987.871004][T22205] usbhid 3-1:0.0: can't add hid device: -71
[ 2987.878049][T22205] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 2987.912780][T22205] usb 3-1: USB disconnect, device number 20
[ 2988.184099][T23215] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2988.450694][T23217] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 2988.561824][T23215] 8021q: adding VLAN 0 to HW filter on device team0
[ 2988.586060][T23217] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 2988.606687][T23217] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 2988.694622][T23217] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 2988.730806][T15501] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2988.738358][T15501] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2988.833262][T15501] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2988.840549][T15501] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2988.904846][T23130] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2988.999597][T23369] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2989.453412][T23130] veth0_vlan: entered promiscuous mode
[ 2989.498698][   T29] audit: type=1326 audit(1718819319.198:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23372 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0e49a7cf29 code=0x0
[ 2989.590833][T23130] veth1_vlan: entered promiscuous mode
[ 2989.781664][T23217] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2989.878299][T23217] 8021q: adding VLAN 0 to HW filter on device team0
[ 2989.917067][T23130] veth0_macvtap: entered promiscuous mode
[ 2989.945832][T15509] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2989.953173][T15509] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2989.988237][T23130] veth1_macvtap: entered promiscuous mode
[ 2990.013030][T15501] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[ 2990.030548][T11463] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2990.037856][T11463] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2990.150145][T23215] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2990.167441][T23130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2990.181872][T23130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2990.206251][T23130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2990.221307][T15501] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2990.222008][T23130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2990.242359][T15501] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2990.242441][T15501] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[ 2990.242486][T15501] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2990.260738][T23130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2990.288343][T23130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2990.309142][T23130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2990.318687][T15501] usb 3-1: config 0 descriptor??
[ 2990.320004][T23130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2990.384222][T23130] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2990.501321][T23130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2990.526451][T23130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2990.540175][T23130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2990.560979][T23130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2990.582216][T23130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2990.639656][T23130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2990.662651][T23130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2990.698722][T23130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2990.728094][T23130] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2990.806043][T23130] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2990.819943][T23130] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2990.832428][T23130] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2990.847389][T23130] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2991.178488][T15501] usbhid 3-1:0.0: can't add hid device: -71
[ 2991.184925][T15501] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 2991.196594][T15501] usb 3-1: USB disconnect, device number 21
[ 2991.234475][T23215] veth0_vlan: entered promiscuous mode
[ 2991.404525][T23215] veth1_vlan: entered promiscuous mode
[ 2992.705374][T23215] veth0_macvtap: entered promiscuous mode
[ 2992.777470][T23215] veth1_macvtap: entered promiscuous mode
[ 2992.965214][T23215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2993.012107][T23215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2993.035553][T23215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2993.053961][T23215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2993.072566][T23215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2993.102143][T23215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2993.122059][T23215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2993.145583][T23215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2993.163924][T23215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2993.192149][T23215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2993.214966][T23215] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2993.249765][T23217] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2993.283126][T23215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2993.302093][T23215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2993.314960][T23215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2993.352034][T23215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2993.362678][T23215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2993.379622][T23215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2993.390804][T23215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2993.401512][T23215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2993.422141][T23215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2993.453821][T23215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2993.475729][T23215] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2993.493663][T23406] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2993.673664][T23215] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2993.712070][T23215] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2993.732288][T23215] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2993.741171][T23215] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2993.802236][T15509] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[ 2993.999910][T15509] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2994.061096][T15509] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2994.096880][T15509] usb 1-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[ 2994.144368][T15509] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2994.177596][T15509] usb 1-1: config 0 descriptor??
[ 2994.213403][ T5710] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2994.479386][ T5710] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2994.558131][   T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2994.603416][   T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2994.778309][ T5710] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2994.788475][T21308] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 2994.804420][T21308] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 2994.826385][T21308] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 2994.839235][T21308] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 2994.851835][T21308] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 2994.868907][T21308] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 2994.941156][T15509] usbhid 1-1:0.0: can't add hid device: -71
[ 2994.947333][T15509] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[ 2994.961802][T15509] usb 1-1: USB disconnect, device number 30
[ 2995.045471][ T5710] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2995.197567][ T5709] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2995.239009][ T5709] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2995.449680][T23217] veth0_vlan: entered promiscuous mode
[ 2995.703738][   T29] audit: type=1326 audit(1718819325.398:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23428 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0e49a7cf29 code=0x0
[ 2995.777769][ T5710] bridge_slave_1: left allmulticast mode
[ 2995.792507][ T5710] bridge_slave_1: left promiscuous mode
[ 2995.800730][ T5710] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2995.826261][ T5710] bridge_slave_0: left allmulticast mode
[ 2995.847983][ T5710] bridge_slave_0: left promiscuous mode
[ 2995.854015][ T5710] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2996.072289][T23435] loop2: detected capacity change from 0 to 4096
[ 2996.095902][T23435] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512).
[ 2996.471363][T23442] loop3: detected capacity change from 0 to 8
[ 2996.902963][T21308] Bluetooth: hci2: command tx timeout
[ 2998.331797][ T5710] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2998.355658][ T5710] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2998.375302][ T5710] bond0 (unregistering): Released all slaves
[ 2998.423698][T23217] veth1_vlan: entered promiscuous mode
[ 2998.982317][T21308] Bluetooth: hci2: command tx timeout
[ 2999.235699][T23456] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2999.462263][ T5710] hsr_slave_0: left promiscuous mode
[ 2999.503759][ T5710] hsr_slave_1: left promiscuous mode
[ 2999.536490][ T5710] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2999.548511][ T5710] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2999.576633][ T5710] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2999.602170][ T5710] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2999.686727][ T5710] veth1_macvtap: left promiscuous mode
[ 2999.692650][ T5710] veth0_macvtap: left promiscuous mode
[ 2999.698778][ T5710] veth1_vlan: left promiscuous mode
[ 2999.704612][ T5710] veth0_vlan: left promiscuous mode
[ 3000.182709][ T5215] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[ 3000.395066][ T5215] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3000.412233][ T5215] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3000.422893][ T5215] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[ 3000.435128][ T5215] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3000.480564][ T5215] usb 4-1: config 0 descriptor??
[ 3001.064431][T21308] Bluetooth: hci2: command tx timeout
[ 3001.951841][ T5710] team0 (unregistering): Port device team_slave_1 removed
[ 3002.132452][ T5710] team0 (unregistering): Port device team_slave_0 removed
[ 3002.613700][ T5215] usbhid 4-1:0.0: can't add hid device: -71
[ 3002.623866][ T5215] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 3002.671268][ T5215] usb 4-1: USB disconnect, device number 17
[ 3003.153292][T21308] Bluetooth: hci2: command tx timeout
[ 3003.888346][T23468] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 3003.972652][T23217] veth0_macvtap: entered promiscuous mode
[ 3004.097850][T23217] veth1_macvtap: entered promiscuous mode
[ 3004.217618][T23418] chnl_net:caif_netlink_parms(): no params data found
[ 3004.268020][T23217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3004.284572][T23480] loop2: detected capacity change from 0 to 8
[ 3004.287514][T23217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3004.328746][T23217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3004.344662][T23217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3004.356014][T23217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3004.366811][T23217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3004.376920][T23217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3004.387520][T23217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3004.397873][T23217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3004.408568][T23217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3004.454070][T23217] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 3004.497648][T23481] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3012.888236][T23217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3012.898964][T23217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3012.911643][T23217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3013.052059][T23217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3013.092074][T23217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3013.112122][T23217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3013.142053][T23217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3013.179186][T23217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3013.197060][T23217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3013.222126][T23217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3013.276480][T23217] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 3013.370467][T23217] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 3013.402050][T23217] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 3013.432033][T23217] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 3013.440909][T23217] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 3013.630584][T23495] loop3: detected capacity change from 0 to 4096
[ 3013.665330][T23495] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512).
[ 3013.835305][T23418] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3013.872740][T23418] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3013.907563][T23418] bridge_slave_0: entered allmulticast mode
[ 3013.927082][T23418] bridge_slave_0: entered promiscuous mode
[ 3013.993029][T23418] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3013.999274][T23504] loop2: detected capacity change from 0 to 1024
[ 3014.024073][T23418] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3014.056766][T23418] bridge_slave_1: entered allmulticast mode
[ 3014.116427][T23418] bridge_slave_1: entered promiscuous mode
[ 3014.530201][T23418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 3014.613164][T23418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 3015.228904][T23418] team0: Port device team_slave_0 added
[ 3015.313582][T23418] team0: Port device team_slave_1 added
[ 3015.735371][T23418] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 3015.756456][T23418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 3015.813331][T23418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 3015.861430][T23418] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 3015.872427][T18761] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3015.885533][T23418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 3015.902033][T18761] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3016.199236][T23418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 3018.349693][T23418] hsr_slave_0: entered promiscuous mode
[ 3018.403111][T23418] hsr_slave_1: entered promiscuous mode
[ 3018.414177][T23418] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 3018.442280][T23418] Cannot create hsr debugfs directory
[ 3018.707284][T23525] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 3018.735777][T20809] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3018.744847][T20809] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3019.034122][T23531] binder: 23530:23531 ioctl ae41 0 returned -22
[ 3019.509819][T23534] hub 9-0:1.0: USB hub found
[ 3019.518045][T23534] hub 9-0:1.0: 8 ports detected
[ 3022.538349][T23546] loop2: detected capacity change from 0 to 4096
[ 3022.587787][T23546] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512).
[ 3022.709235][   T29] audit: type=1326 audit(1718819352.398:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23553 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0a7f47cf29 code=0x0
[ 3023.114823][T23560] loop3: detected capacity change from 0 to 164
[ 3023.620986][T23566] loop4: detected capacity change from 0 to 1024
[ 3024.343370][T23418] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 3024.388737][T23418] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 3024.517227][T23569] loop3: detected capacity change from 0 to 4096
[ 3024.532206][T23418] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 3024.590723][T23418] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 3025.330624][T23418] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3025.474116][T23418] 8021q: adding VLAN 0 to HW filter on device team0
[ 3025.551274][T13951] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3025.558528][T13951] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 3025.626391][T13951] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3025.633807][T13951] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 3025.834269][T23574] loop3: detected capacity change from 0 to 1024
[ 3026.271464][ T1251] ieee802154 phy1 wpan1: encryption failed: -22
[ 3026.843334][T23587] binder: 23586:23587 ioctl ae41 2 returned -22
[ 3027.203471][T23590] hub 9-0:1.0: USB hub found
[ 3027.209146][T23590] hub 9-0:1.0: 8 ports detected
[ 3027.695487][T23418] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 3028.027602][T23418] veth0_vlan: entered promiscuous mode
[ 3029.977613][T23418] veth1_vlan: entered promiscuous mode
[ 3030.162997][   T29] audit: type=1326 audit(1718819359.848:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23607 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f35aca7cf29 code=0x0
[ 3030.173876][T23418] veth0_macvtap: entered promiscuous mode
[ 3030.281430][T23418] veth1_macvtap: entered promiscuous mode
[ 3030.690741][T23418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3030.757762][T23418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3030.791848][T23418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3030.874426][T23418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3030.945555][T23418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3031.046734][T23418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3031.105389][T23418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3031.207391][T23418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3031.256245][T23418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3031.297991][T23418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3031.318898][T23418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 3031.365624][T23418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3031.423248][T23418] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 3031.487409][T23418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3031.525215][T23418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3031.553914][T23418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3031.585607][T23418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3031.622867][T23418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3031.642130][T23418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3031.688759][T23418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3031.729982][T23418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3031.770391][T23418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3031.825681][T23418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3031.859651][T23418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 3031.932232][T23418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 3031.974733][T23418] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 3032.080118][T23418] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 3032.102072][T23418] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 3032.110879][T23418] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 3032.196093][T23418] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 3032.815376][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3032.872708][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3033.041744][T12907] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3033.102594][T12907] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3033.615435][T23641] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 3033.701598][T23641] gretap0: entered promiscuous mode
[ 3033.760944][T23633] loop2: detected capacity change from 0 to 4096
[ 3033.810658][T23644] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 3033.833077][T23644] 0猉功D: renamed from gretap0
[ 3033.974163][T23644] 0猉功D: left promiscuous mode
[ 3033.979413][T23644] 0猉功D: entered allmulticast mode
[ 3034.005372][T23643] loop1: detected capacity change from 0 to 1024
[ 3034.052757][T23649] binder: 23648:23649 ioctl ae41 2 returned -22
[ 3034.303444][T23644] A link change request failed with some changes committed already. Interface 
30猉功D may have been left with an inconsistent configuration, please check.
[ 3034.412962][T23653] hub 9-0:1.0: USB hub found
[ 3034.418321][T23653] hub 9-0:1.0: 8 ports detected
[ 3035.144155][T23656] syz_tun: entered promiscuous mode
[ 3035.207912][T23655] syz_tun: left promiscuous mode
[ 3036.576416][   T29] audit: type=1326 audit(1718819366.278:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23660 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0e49a7cf29 code=0x0
[ 3036.658747][T23668] loop4: detected capacity change from 0 to 2048
[ 3036.728022][T23668] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found!
[ 3037.867833][T23668] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found!
[ 3037.985563][T23668] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512
[ 3038.057193][T23681] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 3038.069597][T23668] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[ 3038.146042][T23668] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512
[ 3038.192078][T23668] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1)
[ 3038.446463][T23691] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 3038.608671][T11463] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[ 3038.781314][T23694] binder: 23693:23694 ioctl ae41 2 returned -22
[ 3039.069384][T11463] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3039.148896][T23698] hub 9-0:1.0: USB hub found
[ 3039.158901][T23698] hub 9-0:1.0: 8 ports detected
[ 3039.454610][T11463] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3039.468828][T11463] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[ 3039.478225][T11463] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3039.500129][T11463] usb 4-1: config 0 descriptor??
[ 3040.063032][T23701] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 3040.176669][T23701] gretap0: entered promiscuous mode
[ 3040.302249][T23703] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 3040.312687][T11463] usbhid 4-1:0.0: can't add hid device: -71
[ 3040.318715][T11463] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 3040.340864][T23703] 0猉功D: renamed from gretap0
[ 3040.385975][T11463] usb 4-1: USB disconnect, device number 18
[ 3040.418809][T23703] 0猉功D: left promiscuous mode
[ 3040.424345][T23703] 0猉功D: entered allmulticast mode
[ 3040.493291][T23703] A link change request failed with some changes committed already. Interface 
30猉功D may have been left with an inconsistent configuration, please check.
[ 3044.640552][   T29] audit: type=1326 audit(1718819374.338:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23722 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0a7f47cf29 code=0x0
[ 3045.483356][T23729] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3045.967131][T23744] binder: 23742:23744 ioctl ae41 2 returned -22
[ 3046.328444][T23746] hub 9-0:1.0: USB hub found
[ 3046.333777][T23746] hub 9-0:1.0: 8 ports detected
[ 3047.077145][T23751] loop4: detected capacity change from 0 to 32768
[ 3047.097840][T23751] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (23751)
[ 3047.162879][T23751] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 3047.174172][T23751] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[ 3047.183309][T23751] BTRFS info (device loop4): using free-space-tree
[ 3047.248796][T23738] loop3: detected capacity change from 0 to 4096
[ 3047.267551][T23738] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512).
[ 3047.711276][T23774] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 3047.777195][T23774] 0猉功D: entered promiscuous mode
[ 3047.815964][T23774] 0猉功D: left allmulticast mode
[ 3048.106889][T23777] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 3048.142680][T23777] 1猉功D: renamed from 
30猉功D
[ 3048.302815][T23777] 1猉功D: left promiscuous mode
[ 3048.309997][T23777] 1猉功D: entered allmulticast mode
[ 3048.387368][T23777] A link change request failed with some changes committed already. Interface 
31猉功D may have been left with an inconsistent configuration, please check.
[ 3049.823410][T10279] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[ 3050.841485][T10279] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3050.875686][T10279] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3050.900142][T23803] overlayfs: failed to resolve './file0': -2
[ 3050.932150][T10279] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[ 3050.974067][T10279] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3051.027436][T10279] usb 2-1: config 0 descriptor??
[ 3051.202399][   T29] audit: type=1326 audit(1718819380.898:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23802 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f35aca7cf29 code=0x0
[ 3051.626365][T23808] binder: 23807:23808 ioctl ae41 2 returned -22
[ 3052.776787][T10279] usbhid 2-1:0.0: can't add hid device: -71
[ 3052.792159][T10279] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 3052.815210][T10279] usb 2-1: USB disconnect, device number 24
[ 3052.890138][T23815] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 3053.163672][T23820] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3053.227492][T23217] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 3053.249013][T23820] gretap0: entered promiscuous mode
[ 3053.325173][T23821] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3053.367140][T23821] 0猉功D: renamed from gretap0
[ 3053.409609][T23821] 0猉功D: left promiscuous mode
[ 3053.414996][T23821] 0猉功D: entered allmulticast mode
[ 3053.505554][T23821] A link change request failed with some changes committed already. Interface 
30猉功D may have been left with an inconsistent configuration, please check.
[ 3058.270038][T23844] binder: 23843:23844 ioctl ae41 2 returned -22
[ 3058.921313][T23851] hub 9-0:1.0: USB hub found
[ 3058.926698][T23851] hub 9-0:1.0: 8 ports detected
[ 3059.962321][T13951] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[ 3060.093404][   T29] audit: type=1326 audit(1718819389.798:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23856 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0e49a7cf29 code=0x0
[ 3060.156109][T13951] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7
[ 3060.199634][T13951] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0
[ 3060.241423][T13951] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 3060.291447][T13951] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 3060.316784][T13951] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3060.359887][T13951] usb 5-1: config 0 descriptor??
[ 3060.377993][T22205] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[ 3060.798335][T23865] loop1: detected capacity change from 0 to 32768
[ 3060.835786][T23865] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (23865)
[ 3060.879213][T23865] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 3060.889788][T23865] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[ 3060.898581][T23865] BTRFS info (device loop1): using free-space-tree
[ 3060.933527][T22205] usb 3-1: Using ep0 maxpacket: 16
[ 3060.969102][T22205] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3060.984162][T22205] usb 3-1: New USB device found, idVendor=046d, idProduct=c512, bcdDevice= 0.00
[ 3060.996116][T22205] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3061.012964][T22205] usb 3-1: config 0 descriptor??
[ 3061.049449][T22205] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[ 3061.154549][T13951] plantronics 0003:047F:FFFF.0017: No inputs registered, leaving
[ 3061.456280][T13951] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[ 3061.552483][T13951] usb 5-1: USB disconnect, device number 28
[ 3062.149764][T22205] usb 3-1: USB disconnect, device number 22
[ 3062.582538][T23891] overlayfs: failed to resolve './file0': -2
[ 3063.963756][T23899] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 3064.005996][T23899] 1猉功D: entered promiscuous mode
[ 3064.011413][T23899] 1猉功D: left allmulticast mode
[ 3064.142485][T23900] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 3064.162373][T23900] 0猉功D: renamed from 
31猉功D
[ 3064.226731][T23900] 0猉功D: left promiscuous mode
[ 3064.249704][T23900] 0猉功D: entered allmulticast mode
[ 3064.298758][T23900] A link change request failed with some changes committed already. Interface 
30猉功D may have been left with an inconsistent configuration, please check.
[ 3066.007565][T23910] binder: 23909:23910 ioctl ae41 2 returned -22
[ 3066.339203][T23911] hub 9-0:1.0: USB hub found
[ 3066.344589][T23911] hub 9-0:1.0: 8 ports detected
[ 3066.969247][T23418] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 3067.067302][T23913] loop3: detected capacity change from 0 to 4096
[ 3067.101039][T23913] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512).
[ 3067.447200][   T29] audit: type=1326 audit(1718819397.128:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23921 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f35aca7cf29 code=0x0
[ 3067.692131][T15509] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[ 3067.964466][T15509] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7
[ 3067.987709][T15509] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0
[ 3067.998788][T15509] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 3068.966516][T15509] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 3068.975821][T15509] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3069.037729][T15509] usb 1-1: config 0 descriptor??
[ 3069.542266][T11555] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[ 3069.586678][T15509] plantronics 0003:047F:FFFF.0018: No inputs registered, leaving
[ 3069.649633][T15509] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[ 3069.743622][T11555] usb 3-1: Using ep0 maxpacket: 16
[ 3069.765196][T11555] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3069.825899][T11555] usb 3-1: New USB device found, idVendor=046d, idProduct=c512, bcdDevice= 0.00
[ 3069.850341][T11555] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3069.875582][T11555] usb 3-1: config 0 descriptor??
[ 3069.900024][T11555] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[ 3070.048967][T11555] usb 1-1: USB disconnect, device number 31
[ 3070.061035][T23937] plantronics 0003:047F:FFFF.0018: usb_submit_urb(ctrl) failed: -19
[ 3070.306112][T23943] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 3070.330862][T23943] gretap0: entered promiscuous mode
[ 3070.486446][T23943] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 3070.496231][T23943] 0猉功D: renamed from gretap0
[ 3070.507588][T23943] 0猉功D: left promiscuous mode
[ 3070.522549][T23943] 0猉功D: entered allmulticast mode
[ 3070.557062][T23943] A link change request failed with some changes committed already. Interface 
30猉功D may have been left with an inconsistent configuration, please check.
[ 3070.687027][T15509] usb 3-1: USB disconnect, device number 23
[ 3071.222482][T23949] loop3: detected capacity change from 0 to 32768
[ 3071.348273][T23936] loop1: detected capacity change from 0 to 32768
[ 3071.360665][T23954] overlayfs: failed to resolve './file0': -2
[ 3071.453872][T23936] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 3071.494540][T23949] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=crc64,data_checksum=xxhash,compression=gzip,str_hash=crc64,nojournal_transaction_names
[ 3071.513348][T23949] bcachefs (loop3): recovering from clean shutdown, journal seq 7
[ 3071.585168][T23949] bcachefs (loop3): alloc_read... done
[ 3071.591206][T23949] bcachefs (loop3): stripes_read... done
[ 3071.597195][T23949] bcachefs (loop3): snapshots_read... done
[ 3071.608526][T23949] bcachefs (loop3): journal_replay... done
[ 3071.618846][T23949] bcachefs (loop3): resume_logged_ops... done
[ 3071.621640][T23936] XFS (loop1): Ending clean mount
[ 3071.663801][T23949] bcachefs (loop3): going read-write
[ 3071.677529][T23936] XFS (loop1): Quotacheck needed: Please wait.
[ 3071.686676][T23971] binder: 23970:23971 ioctl ae41 2 returned -22
[ 3071.688573][T23949] bcachefs (loop3): done starting filesystem
[ 3072.018310][T23974] hub 9-0:1.0: USB hub found
[ 3072.027884][T23974] hub 9-0:1.0: 8 ports detected
[ 3072.387261][   T29] audit: type=1800 audit(1718819402.018:1286): pid=23975 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=4100 res=0 errno=0
[ 3072.633747][T23936] XFS (loop1): Quotacheck: Done.
[ 3072.700969][T23936] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 3072.799254][T23978] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 3072.849007][T23215] bcachefs (loop3): shutting down
[ 3072.897494][T23215] bcachefs (loop3): going read-only
[ 3072.953664][T23215] bcachefs (loop3): finished waiting for writes to stop
[ 3073.022934][T23215] bcachefs (loop3): flushing journal and stopping allocators, journal seq 9
[ 3073.129912][T23215] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 11
[ 3073.181518][T23215] bcachefs (loop3): shutdown complete, journal seq 12
[ 3073.231812][T23215] bcachefs (loop3): marking filesystem clean
[ 3073.501172][T23215] bcachefs (loop3): shutdown complete
[ 3073.781812][T23954] loop4: detected capacity change from 0 to 32768
[ 3073.793515][T23954] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (23954)
[ 3073.852445][T23954] BTRFS info (device loop4): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663
[ 3073.900788][T23954] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[ 3073.920752][T23954] BTRFS info (device loop4): using free-space-tree
[ 3074.141174][T24003] loop2: detected capacity change from 0 to 1024
[ 3074.460464][T23217] BTRFS info (device loop4): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663
[ 3077.829944][T11463] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[ 3078.089898][T11463] usb 1-1: Using ep0 maxpacket: 16
[ 3078.098764][T24023] loop4: detected capacity change from 0 to 4096
[ 3078.125327][T11463] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3078.146364][T11463] usb 1-1: New USB device found, idVendor=046d, idProduct=c512, bcdDevice= 0.00
[ 3078.155955][T24023] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512).
[ 3078.176371][T11463] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3078.197930][T11463] usb 1-1: config 0 descriptor??
[ 3078.274919][T11463] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 3079.426711][ T5163] usb 1-1: USB disconnect, device number 32
[ 3079.719880][T24038] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3079.769337][ T6156] hfsplus: b-tree write err: -5, ino 4
[ 3080.183731][T24042] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 3085.002954][T24057] binder: 24056:24057 ioctl ae41 2 returned -22
[ 3085.397864][T24060] hub 9-0:1.0: USB hub found
[ 3085.403159][T24060] hub 9-0:1.0: 8 ports detected
[ 3086.188769][T20535] Bluetooth: hci3: command 0x0406 tx timeout
[ 3086.404087][T24064] loop3: detected capacity change from 0 to 1024
[ 3088.493123][ T1251] ieee802154 phy1 wpan1: encryption failed: -22
[ 3088.926432][T24074] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 3088.932155][ T5163] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[ 3089.172080][ T5163] usb 2-1: Using ep0 maxpacket: 16
[ 3089.203770][ T5163] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3089.240455][ T5163] usb 2-1: New USB device found, idVendor=046d, idProduct=c512, bcdDevice= 0.00
[ 3089.263769][ T5163] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3089.328089][ T5163] usb 2-1: config 0 descriptor??
[ 3089.378935][ T5163] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[ 3090.587130][T21308] Bluetooth: hci5: command 0x0406 tx timeout
[ 3090.587927][ T5709] hfsplus: b-tree write err: -5, ino 4
[ 3090.627463][   T25] usb 2-1: USB disconnect, device number 25
[ 3095.088181][T24104] loop1: detected capacity change from 0 to 4096
[ 3095.166081][T24104] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512).
[ 3095.313968][T24109] loop3: detected capacity change from 0 to 32768
[ 3095.371613][T24113] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 3095.609419][T24109] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=crc64,data_checksum=xxhash,compression=gzip,str_hash=crc64,nojournal_transaction_names
[ 3095.626809][T24109] bcachefs (loop3): recovering from clean shutdown, journal seq 7
[ 3095.662815][T24109] bcachefs (loop3): alloc_read... done
[ 3095.668363][T24109] bcachefs (loop3): stripes_read... done
[ 3095.677659][T24109] bcachefs (loop3): snapshots_read... done
[ 3095.686749][T24109] bcachefs (loop3): journal_replay... done
[ 3095.692691][T24109] bcachefs (loop3): resume_logged_ops... done
[ 3095.702748][T24109] bcachefs (loop3): going read-write
[ 3095.713590][T24109] bcachefs (loop3): done starting filesystem
[ 3096.557341][   T29] audit: type=1800 audit(1718819426.258:1287): pid=24132 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=4100 res=0 errno=0
[ 3097.019993][T23215] bcachefs (loop3): shutting down
[ 3097.048454][T23215] bcachefs (loop3): going read-only
[ 3097.073460][T23215] bcachefs (loop3): finished waiting for writes to stop
[ 3097.152935][T23215] bcachefs (loop3): flushing journal and stopping allocators, journal seq 9
[ 3098.156206][T23215] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 12
[ 3098.252096][T23215] bcachefs (loop3): shutdown complete, journal seq 13
[ 3098.259717][T23215] bcachefs (loop3): marking filesystem clean
[ 3098.499022][   T29] audit: type=1800 audit(1718819428.158:1288): pid=24141 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1967 res=0 errno=0
[ 3098.790575][T23215] bcachefs (loop3): shutdown complete
[ 3099.152636][T24145] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[ 3099.299970][T24149] loop4: detected capacity change from 0 to 1024
[ 3099.624554][T11555] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[ 3099.892088][T11555] usb 3-1: Using ep0 maxpacket: 16
[ 3099.923790][T11555] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3100.004860][T11555] usb 3-1: New USB device found, idVendor=046d, idProduct=c512, bcdDevice= 0.00
[ 3100.039738][T11555] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3100.087760][T11555] usb 3-1: config 0 descriptor??
[ 3100.116907][T11555] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[ 3100.848966][T24163] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 3101.076047][T15509] usb 3-1: USB disconnect, device number 24
[ 3102.614196][   T62] hfsplus: b-tree write err: -5, ino 4
[ 3102.803471][T24179] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 3102.821459][T24179] 0猉功D: entered promiscuous mode
[ 3102.826936][T24179] 0猉功D: left allmulticast mode
[ 3102.989808][   T29] audit: type=1800 audit(1718819432.688:1289): pid=24184 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1965 res=0 errno=0
[ 3109.455339][T24202] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3109.822510][T24213] binder: 24212:24213 ioctl ae41 2 returned -22
[ 3110.122832][T24215] hub 9-0:1.0: USB hub found
[ 3110.127824][T24215] hub 9-0:1.0: 8 ports detected
[ 3110.212165][ T5163] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[ 3110.321540][T24218] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 3110.333948][T24218] 0猉功D: entered promiscuous mode
[ 3110.339416][T24218] 0猉功D: left allmulticast mode
[ 3110.452571][ T5163] usb 2-1: Using ep0 maxpacket: 16
[ 3110.488288][ T5163] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3110.530536][ T5163] usb 2-1: New USB device found, idVendor=046d, idProduct=c512, bcdDevice= 0.00
[ 3110.559438][ T5163] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3110.614232][ T5163] usb 2-1: config 0 descriptor??
[ 3110.793532][ T5163] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[ 3112.635354][   T29] audit: type=1800 audit(1718819442.328:1290): pid=24239 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1967 res=0 errno=0
[ 3112.890279][T11555] usb 2-1: USB disconnect, device number 26
[ 3120.572338][T24270] binder: 24265:24270 ioctl ae41 2 returned -22
[ 3120.874092][T24271] hub 9-0:1.0: USB hub found
[ 3120.882174][T24271] hub 9-0:1.0: 8 ports detected
[ 3121.117216][T24276] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 3121.142795][T24276] 0猉功D: entered promiscuous mode
[ 3121.148927][T24276] 0猉功D: left allmulticast mode
[ 3121.548731][T20535] Bluetooth: hci2: command 0x0406 tx timeout
[ 3122.092270][T11463] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[ 3122.227363][T24288] loop4: detected capacity change from 0 to 1024
[ 3122.311978][T11463] usb 3-1: Using ep0 maxpacket: 16
[ 3122.335398][T11463] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3122.381178][T11463] usb 3-1: New USB device found, idVendor=046d, idProduct=c512, bcdDevice= 0.00
[ 3122.404112][T11463] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3122.434558][T11463] usb 3-1: config 0 descriptor??
[ 3122.457441][T11463] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[ 3132.541355][T10279] usb 3-1: USB disconnect, device number 25
[ 3136.115695][T24334] loop2: detected capacity change from 0 to 1024
[ 3136.741171][ T6156] hfsplus: b-tree write err: -5, ino 4
[ 3137.468503][T24350] loop1: detected capacity change from 0 to 256
[ 3137.562106][T13951] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[ 3141.592015][T13951] usb 1-1: Using ep0 maxpacket: 16
[ 3141.797201][T13951] usb 1-1: device descriptor read/all, error -71
[ 3144.328994][ T6156] hfsplus: b-tree write err: -5, ino 4
[ 3144.429705][   T29] audit: type=1800 audit(1718819474.098:1291): pid=24378 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1958 res=0 errno=0
[ 3146.643967][   T29] audit: type=1800 audit(1718819476.328:1292): pid=24382 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1961 res=0 errno=0
[ 3146.665922][    C1] vkms_vblank_simulate: vblank timer overrun
[ 3146.937036][T24388] loop2: detected capacity change from 0 to 1024
[ 3148.864387][T24392] loop3: detected capacity change from 0 to 32768
[ 3148.926145][T24392] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (24392)
[ 3148.991109][T24392] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 3149.001514][T24392] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[ 3149.011207][T24392] BTRFS info (device loop3): using free-space-tree
[ 3149.149970][ T1251] ieee802154 phy1 wpan1: encryption failed: -22
[ 3149.452027][T11463] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[ 3149.859270][T24409] loop4: detected capacity change from 0 to 2048
[ 3149.877115][T24409] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found!
[ 3149.912658][T24409] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found!
[ 3150.028337][T24409] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512
[ 3150.082095][T11463] usb 2-1: Using ep0 maxpacket: 16
[ 3150.090026][T24409] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[ 3150.116835][T11463] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3150.146368][T24409] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512
[ 3150.168731][T11463] usb 2-1: New USB device found, idVendor=046d, idProduct=c512, bcdDevice= 0.00
[ 3150.203497][T24409] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1)
[ 3150.222858][T11463] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3150.259465][T11463] usb 2-1: config 0 descriptor??
[ 3150.280183][T11463] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[ 3150.551077][T23215] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 3150.563834][T18472] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[ 3150.802499][T18472] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3150.875173][T18472] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3150.941730][T18472] usb 1-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[ 3151.005000][T18472] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3151.094953][T18472] usb 1-1: config 0 descriptor??
[ 3151.904106][T11555] usb 2-1: USB disconnect, device number 27
[ 3151.917170][   T62] hfsplus: b-tree write err: -5, ino 4
[ 3151.991569][T24433] loop4: detected capacity change from 0 to 1024
[ 3153.361075][T24443] loop3: detected capacity change from 0 to 1024
[ 3153.480382][T24447] loop1: detected capacity change from 0 to 8
[ 3154.589202][T18472] usbhid 1-1:0.0: can't add hid device: -71
[ 3154.643610][T18472] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[ 3154.693184][T18472] usb 1-1: USB disconnect, device number 35
[ 3155.005393][T24455] loop2: detected capacity change from 0 to 1024
[ 3157.434792][T24463] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 3157.681301][T24469] loop1: detected capacity change from 0 to 256
[ 3158.089352][T24469] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 3158.112367][T24469] FAT-fs (loop1): Filesystem has been set read-only
[ 3158.786459][T20809] hfsplus: b-tree write err: -5, ino 4
[ 3158.792476][T10279] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[ 3159.024350][T10279] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7
[ 3159.075684][T10279] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0
[ 3159.102340][T10279] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 3159.131021][T10279] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 3159.142037][T10279] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3159.169276][T10279] usb 2-1: config 0 descriptor??
[ 3159.187286][T24478] loop4: detected capacity change from 0 to 1024
[ 3159.716363][T10279] plantronics 0003:047F:FFFF.0019: No inputs registered, leaving
[ 3159.800204][T10279] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[ 3159.937160][   T62] hfsplus: b-tree write err: -5, ino 4
[ 3160.032331][T18472] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[ 3161.085260][T18472] usb 4-1: Using ep0 maxpacket: 16
[ 3161.160561][T18472] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3161.221990][T18472] usb 4-1: New USB device found, idVendor=046d, idProduct=c512, bcdDevice= 0.00
[ 3161.247501][T18472] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3161.280279][T18472] usb 4-1: config 0 descriptor??
[ 3161.294295][T24497] loop2: detected capacity change from 0 to 8
[ 3161.315191][   T25] usb 2-1: reset high-speed USB device number 28 using dummy_hcd
[ 3161.331857][T18472] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[ 3161.752089][T18472] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[ 3161.980098][T18472] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3162.012431][T18472] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3162.027000][T18472] usb 1-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[ 3162.959139][T18472] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3162.972064][T15509] usb 2-1: USB disconnect, device number 28
[ 3163.022843][T18472] usb 1-1: config 0 descriptor??
[ 3163.111831][T24510] loop1: detected capacity change from 0 to 1024
[ 3163.278160][T10279] usb 4-1: USB disconnect, device number 19
[ 3164.428757][T18472] usbhid 1-1:0.0: can't add hid device: -71
[ 3164.814570][T18472] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[ 3164.886175][T18472] usb 1-1: USB disconnect, device number 36
[ 3164.991363][T24519] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 3165.058967][T24517] loop3: detected capacity change from 0 to 1024
[ 3165.324256][T24524] binder: 24523:24524 ioctl ae41 2 returned -22
[ 3165.531592][T24526] loop2: detected capacity change from 0 to 1024
[ 3168.046002][T12907] hfsplus: b-tree write err: -5, ino 4
[ 3168.155711][   T62] hfsplus: b-tree write err: -5, ino 4
[ 3170.192925][T18472] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[ 3170.273998][T24551] loop1: detected capacity change from 0 to 8
[ 3170.802218][T18472] usb 3-1: Using ep0 maxpacket: 16
[ 3170.810614][T18472] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 3170.832040][T18472] usb 3-1: New USB device found, idVendor=046d, idProduct=c512, bcdDevice= 0.00
[ 3170.865787][T18472] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3170.923358][   T25] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[ 3171.192097][   T29] audit: type=1800 audit(1718819500.648:1293): pid=24558 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1968 res=0 errno=0
[ 3171.233477][T18472] usb 3-1: config 0 descriptor??
[ 3171.256921][T18472] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[ 3171.405593][   T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3171.417181][   T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3171.434520][   T25] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[ 3171.499980][   T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3171.525437][   T25] usb 4-1: config 0 descriptor??
[ 3171.565822][ T5709] nci: nci_add_new_protocol: the target found does not have the desired protocol
[ 3171.793254][T24569] binder: 24568:24569 ioctl ae41 2 returned -22
[ 3171.975261][T18472] usb 3-1: USB disconnect, device number 26
[ 3172.009802][T24571] loop1: detected capacity change from 0 to 1024
[ 3172.292560][   T25] usbhid 4-1:0.0: can't add hid device: -71
[ 3172.319373][   T25] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 3172.364080][   T25] usb 4-1: USB disconnect, device number 20
[ 3174.611404][T24588] loop4: detected capacity change from 0 to 1024
[ 3177.371548][T24601] loop3: detected capacity change from 0 to 1024
[ 3177.460528][T24603] loop2: detected capacity change from 0 to 256
[ 3177.549110][T24603] FAT-fs (loop2): bogus sectors per cluster 0
[ 3177.599700][T24603] FAT-fs (loop2): Can't find a valid FAT filesystem
[ 3178.603415][T24610] loop2: detected capacity change from 0 to 32768
[ 3178.828808][T24610] bcachefs (loop2): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=crc64,data_checksum=xxhash,compression=gzip,str_hash=crc64,nojournal_transaction_names
[ 3178.845856][T24610] bcachefs (loop2): recovering from clean shutdown, journal seq 7
[ 3178.920979][T24610] bcachefs (loop2): alloc_read... done
[ 3178.929795][T24610] bcachefs (loop2): stripes_read... done
[ 3178.935594][T24610] bcachefs (loop2): snapshots_read... done
[ 3178.945863][T24610] bcachefs (loop2): journal_replay... done
[ 3178.951782][T24610] bcachefs (loop2): resume_logged_ops... done
[ 3178.966671][T24610] bcachefs (loop2): going read-write
[ 3178.981512][T24610] bcachefs (loop2): done starting filesystem
[ 3179.982770][T22128] bcachefs (loop2): shutting down
[ 3180.021034][T22128] bcachefs (loop2): going read-only
[ 3180.067145][T22128] bcachefs (loop2): finished waiting for writes to stop
[ 3180.097686][T22128] bcachefs (loop2): flushing journal and stopping allocators, journal seq 10
[ 3180.175510][T22128] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 11
[ 3180.210497][T22128] bcachefs (loop2): shutdown complete, journal seq 12
[ 3180.221358][T22128] bcachefs (loop2): marking filesystem clean
[ 3180.287782][T22128] bcachefs (loop2): shutdown complete
[ 3180.343578][T15509] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[ 3180.554997][T15509] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3180.588912][T24627] loop4: detected capacity change from 0 to 1024
[ 3180.600134][T15509] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3180.638947][T15509] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[ 3180.682050][T15509] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3180.754861][T15509] usb 2-1: config 0 descriptor??
[ 3181.512303][T15509] usbhid 2-1:0.0: can't add hid device: -71
[ 3181.530304][T15509] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 3181.574223][T15509] usb 2-1: USB disconnect, device number 29
[ 3182.482619][T24633] loop3: detected capacity change from 0 to 32768
[ 3183.390017][T24633] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=crc64,data_checksum=xxhash,compression=gzip,str_hash=crc64,nojournal_transaction_names
[ 3183.407053][T24633] bcachefs (loop3): recovering from clean shutdown, journal seq 7
[ 3183.423645][T24646] IPVS: set_ctl: invalid protocol: 41 10.1.1.1:0
[ 3184.033529][T24633] bcachefs (loop3): alloc_read... done
[ 3184.039131][T24633] bcachefs (loop3): stripes_read... done
[ 3184.044951][T24633] bcachefs (loop3): snapshots_read... done
[ 3184.063280][T24633] bcachefs (loop3): journal_replay... done
[ 3184.069196][T24633] bcachefs (loop3): resume_logged_ops... done
[ 3184.132281][T24633] bcachefs (loop3): going read-write
[ 3184.237496][T24633] bcachefs (loop3): done starting filesystem
[ 3185.177916][T23215] bcachefs (loop3): shutting down
[ 3185.185699][T23215] bcachefs (loop3): going read-only
[ 3185.190965][T23215] bcachefs (loop3): finished waiting for writes to stop
[ 3185.246883][T23215] bcachefs (loop3): flushing journal and stopping allocators, journal seq 9
[ 3185.447136][T23215] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 11
[ 3185.498463][T23215] bcachefs (loop3): shutdown complete, journal seq 12
[ 3185.572405][T23215] bcachefs (loop3): marking filesystem clean
[ 3186.674649][T23215] bcachefs (loop3): shutdown complete
[ 3186.888590][T24665] syz_tun: entered promiscuous mode
[ 3186.904365][T24664] syz_tun: left promiscuous mode
[ 3187.159872][ T5709] hfsplus: b-tree write err: -5, ino 4
[ 3188.587342][   T29] audit: type=1326 audit(1718819518.288:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24670 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0a7f47cf29 code=0x0
[ 3190.380742][T24692] loop3: detected capacity change from 0 to 256
[ 3190.419410][T24692] FAT-fs (loop3): bogus sectors per cluster 0
[ 3190.449106][T24692] FAT-fs (loop3): Can't find a valid FAT filesystem
[ 3190.552029][T11555] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[ 3190.779794][T11555] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3190.823665][T11555] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3190.900850][T11555] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[ 3190.952642][T11555] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3191.034688][T11555] usb 2-1: config 0 descriptor??
[ 3296.911856][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[ 3296.918888][    C1] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P5709/1:b..l
[ 3296.927839][    C1] rcu: 	(detected by 1, t=10502 jiffies, g=253293, q=491 ncpus=2)
[ 3296.935671][    C1] task:kworker/u8:10   state:R  running task     stack:19096 pid:5709  tgid:5709  ppid:2      flags:0x00004000
[ 3296.949783][    C1] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet
[ 3296.957665][    C1] Call Trace:
[ 3296.960962][    C1]  <TASK>
[ 3296.963931][    C1]  __schedule+0xf15/0x5d00
[ 3296.968417][    C1]  ? __pfx_mark_lock+0x10/0x10
[ 3296.973236][    C1]  ? __pfx_mark_lock+0x10/0x10
[ 3296.978045][    C1]  ? __lock_acquire+0x14f4/0x3b30
[ 3296.983120][    C1]  ? __pfx___schedule+0x10/0x10
[ 3296.988109][    C1]  ? mark_held_locks+0x9f/0xe0
[ 3296.992917][    C1]  preempt_schedule_irq+0x51/0x90
[ 3296.998003][    C1]  irqentry_exit+0x36/0x90
[ 3297.002471][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 3297.008498][    C1] RIP: 0010:lock_acquire+0x1f2/0x560
[ 3297.013829][    C1] Code: c1 05 3a af 96 7e 83 f8 01 0f 85 ea 02 00 00 9c 58 f6 c4 02 0f 85 d5 02 00 00 48 85 ed 74 01 fb 48 b8 00 00 00 00 00 fc ff df <48> 01 c3 48 c7 03 00 00 00 00 48 c7 43 08 00 00 00 00 48 8b 84 24
[ 3297.033903][    C1] RSP: 0018:ffffc900034afa70 EFLAGS: 00000206
[ 3297.040006][    C1] RAX: dffffc0000000000 RBX: 1ffff92000695f50 RCX: 00000000f585c680
[ 3297.048195][    C1] RDX: 0000000000000001 RSI: ffffffff8b2cb260 RDI: ffffffff8b900680
[ 3297.056202][    C1] RBP: 0000000000000200 R08: 0000000000000000 R09: fffffbfff284dc58
[ 3297.064285][    C1] R10: ffffffff9426e2c7 R11: 0000000000000003 R12: 0000000000000000
[ 3297.072378][    C1] R13: 0000000000000000 R14: ffffffff8dbb1920 R15: 0000000000000000
[ 3297.080384][    C1]  ? __pfx_lock_acquire+0x10/0x10
[ 3297.085455][    C1]  ? batadv_iv_ogm_schedule_buff+0x75c/0x1500
[ 3297.091939][    C1]  ? __pfx_lock_release+0x10/0x10
[ 3297.097036][    C1]  ? rcu_is_watching+0x12/0xc0
[ 3297.101859][    C1]  batadv_iv_ogm_schedule_buff+0x5ac/0x1500
[ 3297.107811][    C1]  ? batadv_iv_ogm_schedule_buff+0x5a6/0x1500
[ 3297.113937][    C1]  ? __pfx_batadv_iv_ogm_schedule_buff+0x10/0x10
[ 3297.120346][    C1]  ? batadv_send_skb_packet+0x56c/0x6b0
[ 3297.125931][    C1]  batadv_iv_send_outstanding_bat_ogm_packet+0x31e/0x8d0
[ 3297.133014][    C1]  process_one_work+0x9fb/0x1b60
[ 3297.137987][    C1]  ? __pfx_batadv_iv_send_outstanding_bat_ogm_packet+0x10/0x10
[ 3297.145574][    C1]  ? __pfx_process_one_work+0x10/0x10
[ 3297.150970][    C1]  ? assign_work+0x1a0/0x250
[ 3297.155623][    C1]  worker_thread+0x6c8/0xf70
[ 3297.160247][    C1]  ? __pfx_worker_thread+0x10/0x10
[ 3297.165383][    C1]  kthread+0x2c1/0x3a0
[ 3297.169491][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[ 3297.174740][    C1]  ? __pfx_kthread+0x10/0x10
[ 3297.179369][    C1]  ret_from_fork+0x45/0x80
[ 3297.183835][    C1]  ? __pfx_kthread+0x10/0x10
[ 3297.188455][    C1]  ret_from_fork_asm+0x1a/0x30
[ 3297.193270][    C1]  </TASK>
[ 3297.196314][    C1] rcu: rcu_preempt kthread starved for 10528 jiffies! g253293 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
[ 3297.207723][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[ 3297.217706][    C1] rcu: RCU grace-period kthread stack dump:
[ 3297.223610][    C1] task:rcu_preempt     state:R  running task     stack:27680 pid:17    tgid:17    ppid:2      flags:0x00004000
[ 3297.235469][    C1] Call Trace:
[ 3297.238767][    C1]  <TASK>
[ 3297.241716][    C1]  __schedule+0xf15/0x5d00
[ 3297.246171][    C1]  ? __pfx___lock_acquire+0x10/0x10
[ 3297.251411][    C1]  ? __pfx___schedule+0x10/0x10
[ 3297.256307][    C1]  ? schedule+0x298/0x350
[ 3297.260679][    C1]  ? __pfx_lock_release+0x10/0x10
[ 3297.265747][    C1]  ? __pfx___mod_timer+0x10/0x10
[ 3297.270708][    C1]  ? lock_acquire+0x1b1/0x560
[ 3297.275430][    C1]  ? lockdep_init_map_type+0x16d/0x7d0
[ 3297.280931][    C1]  schedule+0xe7/0x350
[ 3297.285048][    C1]  schedule_timeout+0x136/0x2a0
[ 3297.289936][    C1]  ? __pfx_schedule_timeout+0x10/0x10
[ 3297.295359][    C1]  ? __pfx_process_timeout+0x10/0x10
[ 3297.300783][    C1]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 3297.306649][    C1]  ? prepare_to_swait_event+0xf0/0x470
[ 3297.312154][    C1]  rcu_gp_fqs_loop+0x1eb/0xb00
[ 3297.316958][    C1]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[ 3297.322284][    C1]  ? _raw_spin_unlock_irq+0x2e/0x50
[ 3297.327534][    C1]  rcu_gp_kthread+0x271/0x380
[ 3297.332255][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[ 3297.337529][    C1]  ? lockdep_hardirqs_on+0x7c/0x110
[ 3297.342759][    C1]  ? __kthread_parkme+0x148/0x220
[ 3297.347935][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[ 3297.353168][    C1]  kthread+0x2c1/0x3a0
[ 3297.357279][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[ 3297.362687][    C1]  ? __pfx_kthread+0x10/0x10
[ 3297.367312][    C1]  ret_from_fork+0x45/0x80
[ 3297.371798][    C1]  ? __pfx_kthread+0x10/0x10
[ 3297.376440][    C1]  ret_from_fork_asm+0x1a/0x30
[ 3297.381249][    C1]  </TASK>
[ 3297.384305][    C1] rcu: Stack dump where RCU GP kthread last ran:
[ 3297.390664][    C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 6.10.0-rc3-syzkaller-00044-g2ccbdf43d5e7 #0
[ 3297.400431][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[ 3297.410520][    C1] RIP: 0010:acpi_safe_halt+0x1a/0x20
[ 3297.416283][    C1] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 65 48 8b 05 d8 b3 1b 75 48 8b 00 a8 08 75 0c 66 90 0f 00 2d 68 1f b3 00 fb f4 <fa> c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 3297.435921][    C1] RSP: 0018:ffffc900001a7d58 EFLAGS: 00000246
[ 3297.442020][    C1] RAX: 0000000000004000 RBX: 0000000000000001 RCX: ffffffff8ae80889
[ 3297.450038][    C1] RDX: 0000000000000001 RSI: ffff888019a82000 RDI: ffff888019a82064
[ 3297.458055][    C1] RBP: ffff888019a82064 R08: 0000000000000001 R09: ffffed1017266fe5
[ 3297.466154][    C1] R10: ffff8880b9337f2b R11: 0000000000000000 R12: ffff88801c2a5800
[ 3297.474149][    C1] R13: ffffffff8e744e60 R14: 0000000000000001 R15: 0000000000000000
[ 3297.482153][    C1] FS:  0000000000000000(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000
[ 3297.491109][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 3297.497715][    C1] CR2: 0000001b3204d000 CR3: 000000007a3c4000 CR4: 00000000003526f0
[ 3297.505725][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 3297.513731][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 3297.521730][    C1] Call Trace:
[ 3297.525030][    C1]  <IRQ>
[ 3297.527921][    C1]  ? show_regs+0x8c/0xa0
[ 3297.532206][    C1]  ? rcu_check_gp_kthread_starvation+0x31b/0x450
[ 3297.538670][    C1]  ? do_raw_spin_unlock+0x172/0x230
[ 3297.543894][    C1]  ? rcu_sched_clock_irq+0x22a2/0x3100
[ 3297.549380][    C1]  ? __pfx_rcu_sched_clock_irq+0x10/0x10
[ 3297.555047][    C1]  ? tmigr_requires_handle_remote+0x14c/0x480
[ 3297.561151][    C1]  ? __pfx_tmigr_requires_handle_remote+0x10/0x10
[ 3297.567626][    C1]  ? hrtimer_run_queues+0x97/0x450
[ 3297.572775][    C1]  ? update_process_times+0x175/0x220
[ 3297.578185][    C1]  ? __pfx_update_process_times+0x10/0x10
[ 3297.583941][    C1]  ? __pfx_tick_nohz_handler+0x10/0x10
[ 3297.589440][    C1]  ? update_wall_time+0x1c/0x40
[ 3297.594327][    C1]  ? tick_nohz_handler+0x376/0x530
[ 3297.599475][    C1]  ? __pfx_tick_nohz_handler+0x10/0x10
[ 3297.604965][    C1]  ? __hrtimer_run_queues+0x657/0xcc0
[ 3297.610377][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[ 3297.616135][    C1]  ? ktime_get_update_offsets_now+0x201/0x310
[ 3297.622334][    C1]  ? hrtimer_interrupt+0x31b/0x800
[ 3297.627503][    C1]  ? __sysvec_apic_timer_interrupt+0x10f/0x450
[ 3297.633708][    C1]  ? sysvec_apic_timer_interrupt+0x90/0xb0
[ 3297.639582][    C1]  </IRQ>
[ 3297.642538][    C1]  <TASK>
[ 3297.645497][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 3297.651793][    C1]  ? ct_kernel_exit+0x139/0x190
[ 3297.656684][    C1]  ? acpi_safe_halt+0x1a/0x20
[ 3297.661402][    C1]  acpi_idle_enter+0xc5/0x160
[ 3297.666126][    C1]  cpuidle_enter_state+0x85/0x500
[ 3297.671184][    C1]  ? __pfx_tsc_verify_tsc_adjust+0x10/0x10
[ 3297.677115][    C1]  cpuidle_enter+0x4e/0xa0
[ 3297.681569][    C1]  do_idle+0x313/0x3f0
[ 3297.685664][    C1]  ? __pfx_do_idle+0x10/0x10
[ 3297.690283][    C1]  cpu_startup_entry+0x4f/0x60
[ 3297.695079][    C1]  start_secondary+0x220/0x2b0
[ 3297.699883][    C1]  ? __pfx_start_secondary+0x10/0x10
[ 3297.705201][    C1]  common_startup_64+0x13e/0x148
[ 3297.710178][    C1]  </TASK>