last executing test programs:

38.159868665s ago: executing program 2 (id=204):
syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg2\x00'})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xff, 0xfffffffffffffffc}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
timer_create(0x0, &(0x7f0000000940)={0x0, 0x6, 0x1, @tid=r1}, &(0x7f0000000980)=<r2=>0x0)
timer_gettime(r2, &(0x7f00000009c0))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000000c0)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@private1, 0x800}, 0x20)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000440)='\x00\x00\x00\x00\x00\x00', 0x6)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r5, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f00000001c0)={0x0, 0x5, 0x1, "fd"}, 0x9)
sendto$inet6(r5, &(0x7f00000000c0)="eb", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000380)={0x0, 0x400, 0x1, 'A'}, 0x9)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000340)={0x0, 0x5}, 0x8)
r6 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x2, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000540))
socket$kcm(0x10, 0x3, 0x10)

35.886478278s ago: executing program 2 (id=206):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
clock_gettime(0x0, &(0x7f0000000000))
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5)
r3 = socket(0x1e, 0x4, 0x0)
connect$tipc(r3, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10)
sendmmsg$unix(r3, &(0x7f0000004400), 0x400000000000203, 0x0)

30.435855474s ago: executing program 2 (id=227):
syz_usb_connect$uac1(0x0, 0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406b1d01014000010203010902720003010000000904000000010300000a2401"], 0x0)

28.405841153s ago: executing program 2 (id=235):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006ffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x9, 0x2a8, &(0x7f0000000500)="$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")
bpf$MAP_CREATE(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0))
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r4 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r4, &(0x7f0000000600)={&(0x7f0000000280)={0x8, 0x0, @broadcast}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000000)="0233afcfcd69", 0x6}], 0x2, &(0x7f0000000100)=ANY=[], 0x30}, 0x0)
syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000040)='./file2\x00', 0x300001a, &(0x7f0000000a40)=ANY=[@ANYBLOB="7379735f696d6d757461626c652c666d61736b3d30313737373737373737373737373737373737373737332c73686f72746e616d653d6c6f7765722c636865636b3d7374726963742c2c756e695f786c6174653d302c726f6469722c726f6469722c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c756e695f786c6174653d312c756e695f786c6174653d312c6572726f72733d636f6e74696e75652c74696d655f6f66667365743d3078303030303030303030303030303465302c757466383d302c0077b5b28056fc4549d277ed7fab6b0be29df17f888ccab55cccc917ad315c8ea56f5a89c104f92d058b92f5881e69e06002f5914c03fef3eb09121733eaf5ded73df976fbd4cfcb8b70b0bf44da1b46bc3935431d5e60a641f9e4ebbf71c77fc9a810ce726b8c6d6295a5f2e2b069b95ba8ecce52ded99b82923228c37d5e1ec11cdbcabb8a89cbf2cf2771d69e3cf0e6760094145e542e426bceaab9b2cf261046247bce0565db3ac5888b74efd48bc9f455e60f49496ca8137aba85fe39756814fda1f0624b33a2025792a477ccfff09befb1d0cf1599d272628028b9786e1fbfb3d637c2561421488c9de8d3739a94bf13ac582f6b67de0cad933631794271b2259fe5d73a74ad7da615c31505c7c0c168052d38e5b64c4bb7d0599e5dcf0000000000000000000000000000002790cf17418aa278cfc0c9d1c81c63e58b877706a4b7eed8a5aff253298db2939adc0efdab4745ab0e09ef8beaaf04e5374c2e7e4672e47fe5a25502919954242f8d779d84091f20646210edf871d3f20ad66fcf4b816323b8abb307381d4ada887dcc71e35f364baa1b93fd5ee36c02aa4628511442992ced893ab946472440b53fc08cc41403e167b1f2605e04d5f0c16ed49969b59d650d88642b10c7893fe9b664421a40f4822ffcc284dfe9aea76e4a04293c970f2dae776decf07b085e16511b0bd365b0f86c7fcd8df00a87f4dbbf8e623667e3b65e4c487055a2e5cd64402a4de537bf113fc7370099e4faebe6ea9d4f155f8f5f4c5f9b205ce1bbc8c0002a19457e05a210d9e9820bc7f318ebfdfcbe2f83150503b2076b7591149e6f426564f017ebe1f8253e880de2f63aff6ea337c137b607ffb0291b1223f578ec8b5a9568984ae47e157363144ea5ae13358e354cf1c896ddf139d580411f7676b8302974b5c65aec8de25c8f41a1459baeeb26d0ad35d101ec17dcca961fbae721d31bd58956c1d97c26e2926fe3ac0ce3f7ec46265a2df602d66bf5d34cd7f4097d6875640c0cc409408cbf931447c0ec0f15f5f4c359530d99275d78e68cc061f73375ffea29733d768484", @ANYRES16], 0xd, 0x2aa, &(0x7f0000001300)="$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")
creat(&(0x7f0000000080)='./file1\x00', 0x0)
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
renameat2(r5, &(0x7f0000000100)='./file1\x00', r5, &(0x7f0000000140)='./file0\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"})
r6 = syz_open_dev$tty20(0xc, 0x4, 0x0)
fcntl$dupfd(r6, 0x0, r6)

26.973337099s ago: executing program 2 (id=237):
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="040ed7e54e20"], 0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r3)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000000c0)=0x3)
recvmmsg(r4, &(0x7f0000003480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x102, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="04ffff691fd8c302d8579034470c023daf965ec7b49f043a5eec2dd1ab8b7d28c43e9680afaea58e66af3a4ce8870c559aa19941baff4d46d836a336fd54705d1300ec42420ee877e2679b06f31aaa10f3080444467940a0f78efb6a5d4e000000002b0eb96d8cb127c152372abe0141cfad78db2f6fbbb6d5136cadfa11b2b5062671a7d60708668cc138b821024d6f16aaadbc", @ANYRES8=r5], 0xb)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r6)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r8=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r8, @ANYBLOB="0800050002000000050053000100000043dffe227c597a63bd5ae03b5c1fc13c180291f5d7123d7eed548479d195478d154714b5c7b063758b8d02f48519ae1b40afb4ff86155a85206721c9ac710991abed6e83ede455a20b6b90b41bd70f67ee2438c038b0062f5365090252b49647cef88a76cdf9e61d4213687d77359483509232d3ca2f3cc508a1e2dffc5359ab9d0f8263870aabfb9264425ad683e811b64ae6606becf1484ee31a4bab5745229e0c8300000000000000"], 0x2c}}, 0x0)
io_uring_setup(0x536d, &(0x7f0000000380)={0x0, 0x2cf6, 0x800, 0x3, 0x56})
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}, @NFTA_QUEUE_FLAGS={0x6}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x4}]}}}]}]}], {0x14}}, 0x84}}, 0x0)
mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000006f00)={[{}]})

25.448528787s ago: executing program 2 (id=240):
bind$alg(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc70, 0xf0bd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x16, {0x16, 0x0, "17e13f220e08f066000000000000008000001e00"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x1a}, 0x20)

12.140002515s ago: executing program 3 (id=273):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
write(0xffffffffffffffff, &(0x7f0000000080)="3300000058001f000307f4f9002304000a04f55f0800010002010002080003", 0x1f)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001f000100000000000000000002"], 0x114}], 0x1}, 0x0)

11.624511417s ago: executing program 3 (id=275):
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000180)='./file1\x00', 0x4080, &(0x7f0000000040)=ANY=[], 0x3, 0x7c4, &(0x7f00000006c0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file1\x00', 0x0)
ftruncate(r0, 0x9)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000100)={0x3, &(0x7f0000000040)=[{0x48}, {0x5}, {0x6, 0x0, 0x0, 0xffffefff}]}, 0x10)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000140), r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0xfffffa20}, 0x48)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="6c0000000001090c00000000000000000200000024f900801400018008000100e000000208000200000000000c00028005000100000000002400028014000180080001007f00000108000200ac1e00010c000280050001000000000008000740000000000500164000000000"], 0x6c}}, 0x0)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r2, &(0x7f0000000040), 0x20000000}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r2, 0x0, 0x0}, 0x20)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000380)={0x0, &(0x7f00000001c0)})
creat(&(0x7f00000001c0)='./bus\x00', 0x105)
r5 = open(&(0x7f0000000100)='./bus\x00', 0x1, 0x40)
mlockall(0x2)
r6 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil)
shmat(r6, &(0x7f0000ffc000/0x2000)=nil, 0x4000)
r7 = shmget(0x1, 0x3000, 0x4, &(0x7f00001c9000/0x3000)=nil)
shmat(r7, &(0x7f0000ffc000/0x4000)=nil, 0x4000)
shmat(r6, &(0x7f0000ffc000/0x4000)=nil, 0x1000)
shmat(0x0, &(0x7f000025f000/0x1000)=nil, 0x4000)
shmat(r6, &(0x7f000012a000/0x4000)=nil, 0x5000)
fcntl$addseals(r4, 0x409, 0xa)
shmctl$IPC_RMID(0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x2, &(0x7f0000000140)=ANY=[@ANYRESOCT=r6], &(0x7f0000000180)='syzkaller\x00', 0xfffffffe, 0x0, &(0x7f00000001c0), 0x40f00, 0x2e, '\x00', 0x0, 0x9, r5, 0x8, &(0x7f0000000200)={0x800006, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x8000c, 0x2f16, 0x3}, 0x10, 0xffffffffffffffff}, 0x90)

10.394176183s ago: executing program 0 (id=281):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
syz_mount_image$hfs(&(0x7f0000000100), &(0x7f0000000040)='./bus\x00', 0x10, &(0x7f0000000140)={[{@codepage={'codepage', 0x3d, 'macgreek'}}, {@part={'part', 0x3d, 0x9}}, {@iocharset={'iocharset', 0x3d, 'cp1251'}}, {@gid}]}, 0x1, 0x297, &(0x7f0000003f80)="$eJzs3U9rE0EYx/HfbNImtaVu/0jBY7XgRbH1Il4U6YvwIKI2EYqhglZQT+JZxJvgUfDmWXwDXjyJb0BPnnwBva3M7CbZ1P3XaDJJ/X4gYXXnmX2mO8nOE0hWAP5b17e/v7/00z6MVFNN0hUpkNSU6pJOaa35eG9/d7/TbhV1VHMR9mEUR5o/2uzstbNCbZyLSIT2X3UtpP8PoxFFUfTDdxLwzr36MwRSI3l1uv3NsWc2Gs99J+CZOdCBnmjRdx4AAL+S63+QXOcXkvV7EEgbyWX/WF3/D3wn4Fnq+u+qrMjY83vS7erXe66Es/uDbpVY0GPunlnFM2tggWnKqkqXSzB3b7fTvrDzoNMK9EJXE6lmq+65FU/drpJs1wuSzVA+9jzzbgwzdgxbOfmvDHPEN0dPpcd8MV/NLRPqrVq99V89MvY0uTMVujMV9gLi/C/m9+hGGcatcka55A5yOjmCPn2oMMpmdkWi7oxa0uAHBGE3z9ezBVHLh6Li0W3mj85FrWRGbZVErR6O6s/m/Mjh5Qy7z1ZyMq/MDbOuX/qo7dT6P7B/7Q1VeWXaNq5lMjMKx1N3LcMK6QcV2qC6mcK9L3VXl7X46Omz+3c6nfbDqdioTUYa4954d14aw7G6E2YShjywYSY1saE39Nf91NTQSFMtevOY+1fvUfCsf9K1dtN3MvDBrrtMXP+l6pVrbp995w3dOn1GWev0qKzzVI+bObXBsns+caQKbj6/gmuoWs115px0tuCInwe7DZM8jwmzrW+6zef/AAAAAAAAAAAAAAAAAAAA06ba9wEaSevhvk7QP9rKvK9xAgAAAAAAAAAAAAAAAAAAAAAwzUZ//9/Ur3qX3//X/Uo39/8FxuN3AAAA//8IPnfj")
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/slabinfo\x00', 0x0, 0x0)
read$FUSE(r2, &(0x7f0000000080)={0x2020}, 0x2020)
write$binfmt_script(r1, &(0x7f00000001c0), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0)
pread64(r0, &(0x7f0000002180)=""/4105, 0x137, 0x11)

10.115421678s ago: executing program 0 (id=283):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_UDP_CSUM={0x5}]}}}]}, 0x40}}, 0x0)

9.78966043s ago: executing program 3 (id=284):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='-', @ANYRESOCT, @ANYRESDEC], 0x44)

9.504326423s ago: executing program 3 (id=285):
open(&(0x7f0000001780)='./bus\x00', 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000300), 0x0)
mmap(&(0x7f000001a000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$KDENABIO(0xffffffffffffffff, 0x4b36)
prctl$PR_MCE_KILL(0x48, 0x0, 0x2)
r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040))
ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f0000165000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0})

8.363925926s ago: executing program 5 (id=286):
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c90010000c000500174008000000009f120a"], 0x15)
r0 = socket$alg(0x26, 0x5, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6)
bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000100), 0x1c)
listen(r2, 0xfff)
syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@delpolicy={0x50, 0x27, 0x1, 0x0, 0x0, {{@in=@private=0xa010100, @in6=@remote}}}, 0x50}}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd600a843500140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000001c907800005de8292d213c6bac68bb2e3d465d0f72573c78ddbd1c2fc658629d16be0b4d74f8032fee034843313aecaeefd516570c60f16653b97f240d8492e77faab64ca1010708c48cf4eb5d276625d86a34434e5ea0d45d502b5e29a1e789702e2bec53de5e3a90f3c3bc"], 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000002a00)='\v', 0x1)
r4 = socket$kcm(0x10, 0x2, 0x0)
inotify_init1(0x80000)
sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000012008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf604003f00020400bf050005001201", 0x2e}], 0x1}, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000400)={0x0, 0x0, 0x200}, 0x0, 0x0)
r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92})
pwritev2(0xffffffffffffffff, &(0x7f00000012c0)=[{&(0x7f0000000100)="7270aa3f0c63ef31716980d71af481e691d156e5c690c37493c965008b713ed133a85027d43b49d05b8ec0e538f674752205f76fb42632a5233a7d64e1cea692029b6a", 0x43}], 0x1, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000bc0)={0x2, 0x0, [{0x0, 0xd5, &(0x7f0000000ac0)=""/213}, {0xe8b84bb294a96876, 0xe4, &(0x7f00000009c0)=""/228}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=""/253, 0x0, &(0x7f0000000600)=""/91})
ioctl$VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f0000000040)={@my=0x1})
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r6, &(0x7f00000001c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10)

8.362370867s ago: executing program 4 (id=297):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
setreuid(0xffffffffffffffff, 0xee00)
setfsuid(0x0)
quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)

8.096224196s ago: executing program 3 (id=287):
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$kcm(0x10, 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0x7, &(0x7f0000000000)={0xfd7, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200))
r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff)
ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5393, &(0x7f0000000000))
syz_open_dev$tty20(0xc, 0x4, 0x0)
prctl$PR_SET_PTRACER(0x59616d61, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0xc, 0x0, &(0x7f0000000100)=[@free_buffer], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x84240)

7.967096641s ago: executing program 4 (id=288):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000440)={0x0, 0x0, {0x3, 0x0, 0x4007ff}})
ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)

6.714263616s ago: executing program 4 (id=289):
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0x0)
ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_switch\x00', r3}, 0x10)
r4 = userfaultfd(0x801)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140))
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f000076e000/0x4000)=nil, 0x400000, 0x0, 0x2})

6.298907758s ago: executing program 1 (id=290):
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0, 0x0, 0x0)

6.298607869s ago: executing program 0 (id=291):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000140)=ANY=[], 0x1, 0x68b, &(0x7f0000000a40)="$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")
truncate(&(0x7f0000000080)='./file1\x00', 0xf000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f0000000240)='2', 0x1, 0x8000c61)

6.209979909s ago: executing program 5 (id=292):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r1, 0x0)
sendmmsg$inet(r0, &(0x7f0000004bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)="1e", 0x1}, {&(0x7f0000001bc0)="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", 0x441}], 0x2}}], 0x2, 0x0)

5.792189552s ago: executing program 5 (id=293):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10)
bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
futimesat(0xffffffffffffffff, 0x0, 0xfffffffffffffffd)
syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./bus\x00', 0x1824016, &(0x7f0000002ac0)=ANY=[@ANYRES8=r0], 0x1, 0x14fe, &(0x7f0000001580)="$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")
r2 = open(&(0x7f0000007f80)='./bus\x00', 0x145142, 0x0)
r3 = creat(&(0x7f00000001c0)='./file2\x00', 0x122)
ftruncate(r2, 0x96ef)
write$cgroup_subtree(r3, &(0x7f0000000680)=ANY=[], 0x5)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00'}, 0x90)
pipe(&(0x7f0000000040))
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_SET_ADV_SET_RAND_ADDR}}, 0x7)
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0)
r9 = fsmount(0xffffffffffffffff, 0x0, 0x0)
renameat2(0xffffffffffffffff, 0x0, r9, &(0x7f00000000c0)='./file1\x00', 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00'})

5.6460485s ago: executing program 0 (id=294):
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f00000002c0)=0x10)
sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="58000000140001ed13bd7000000000000a84b7c6fc"], 0x58}}, 0x0)

5.053473182s ago: executing program 1 (id=295):
syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x21080d, &(0x7f0000000280)=ANY=[], 0x1, 0x1cf, &(0x7f0000000780)="$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")
socket$key(0xf, 0x3, 0x2)
mkdirat(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
r0 = socket$inet(0x2, 0x80805, 0x7)
setsockopt$inet_buf(r0, 0x0, 0x2c, &(0x7f00000000c0)="290182fa29bbf661604cf1700b34e27524ac3efe0d82d0b0d6e642f207130d0b", 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
mkdir(0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket(0x840000000002, 0x3, 0x7)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r4, &(0x7f0000005240), 0x264e33, 0x14)
mount$fuse(0x0, 0x0, &(0x7f0000000100), 0x0, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000006e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x890}, 0x0)

4.666971846s ago: executing program 5 (id=296):
socket$netlink(0x10, 0x3, 0x0)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="44000000606edcd33b0d6dc30a70e43d3bda4486efbed39d4d6fcbb1f877de93aae984ddca8c6947da213f298f78b1584397aca2bb64e034ddea040a290121af86b523e44b3fc4d5803bf4a84e3b2481860d0f108f1ef4adcc7cf3028117025dbb759d8efd8980b417c59b118ea6d69491ec0c9abbbe328f69958cedbfe6a6549a4d4d0f821b86a3066e21812c8452f8f7b5dea7f626974ebfe4a19a6db4edf7e7580268680ee91a88ac14d6ab1acf8f399abdea19dc9a2ba67dcb4306efce9e8c756e13775da1e1605171cbe3126bd3a44ce310767f7499b5cd308c0007db5fe42388c82ea2f7e5", @ANYRES16=0x0, @ANYBLOB="000000000000000000000300000014000980080002000000000008000200000000001c000180170001006574683a6272696467655f736c6176655f310000"], 0x44}}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000400)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$alg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x630}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0)
sendmsg$nl_route_sched_retired(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xf, &(0x7f0000000440)=ANY=[@ANYRESOCT, @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c000000090000000000000002f2000d00001bd5060000000000000000000000000000000000000000002e1000"], &(0x7f0000000180)=""/129, 0x3d, 0x81, 0x1}, 0x20)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8}, @NFTA_CT_DREG={0x8}]}}}]}]}], {0x14}}, 0x60}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000008c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYBLOB="0100", @ANYRES32=r7, @ANYBLOB="140004006e73"], 0x50}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r9, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r8, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="030f0000000000000000340000000800030004000000e16e6b414a7bce65498a46c34b46a3f8075fd39e8ccca636f3ba08d0f20f9d5760c1495c9c0fbf8649dad88aef1e3aa901af62fcf8fde410ed4171798077c6c927e04902073f8bcc8510cdfeade29d59e9ef48451a1a1bd3fd89298bced7ed92ff57fdefb60363598ffbeab95d"], 0x1c}}, 0x0)
sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="01002cbd7000fedbdf254a0000000800030000000000080001007063690011000200303030303a30303a31302e3000000000"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x8000)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)

3.212656513s ago: executing program 0 (id=298):
sched_setscheduler(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xbc415, &(0x7f00000003c0)=ANY=[], 0x11, 0x6be, &(0x7f00000002c0)="$eJzs3UtsHHcdB/DvrNePTSXXbdM2oEiYRiqIiMSOlUK4JCCEglShKhy4YjVOY8VJg+OitAfiAhJXDtwph3CBEwghISFFKme4VdwsTpWQuPRC2gODZvbhtbO7dpLGD/h8otn5zfxn/vOb3zz2EVkT4P/WxZNp3ksrF0++erua3ri7sLJxd+F6N04ymaSRNNujFDeS4v3kQtpDPlPN7HRXDNvOL5bPXfrgo40P21PNbPZXvbSGJ9jczV6sd4bMJhnrjB/Dlv5ef7T+JjfDoleZqmAnuoWD/TaepNziBy9stgxSjvVNDL3egcOjaL9v9mlf/zPJkSRT3Te09XZjY+8z3NGIe9HEA3PWn2wuAAAAcCA8ff9OcjvT+50HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCad5/8XnaHRjWdTdJ//P9H3jP0HH6h/UIzObKob3GvsRTIAAAAAAAAA8ASsb4afu5/fXCrL6e50WdT/5/9SPXG0fn0qb+VWlrKaU7mdxaxlLauZTzLT1+fE7cW1tdX57pqflGU5ZM0zA9c8s8vcW4+15wAAAAAAAADwv+Z8Z/zjXMz0PucCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABbFMlYe1QPR7vxTBrNJFNJJqrl1pO/deNDoDWs4d7e5gEAAAD74un7uZ/bme5Ol0X9nf+F+nv/VN7KjaxlOWtZyVIu178FtL/1NzbuLqxs3F24Xg0P9vv1f23Gv5/eMY26x7R/exi85WP1Eq1cyXI951Rez5tZyeU06jUrx7r5DM7r3Sqn4nxbWe6uQJc742rPf94ZHwwzdUXGexWZ6+RWVeOZ0ZXoPzo9w3/L2b6l+TR6Sx99iJqfH7k/xX+6x+RId07y1Ld3rvn46OZP0/ZKnOk7+14YXYnkC3/47feurty4drVYP3lwTqOHMPmPzatmeyUW+irx4q4rceXW4azEdo0834sv5lv5bk5mNq9lNcv5YRazlqXM5pt1tNg5n6vXmdGVurBl6rWdspjoHJexbTl9/un2eFROL9XrTmc538mbuZylvFL/O5P5fCVnczbn+o7w87u46hsDrvo/Dk/+xBc7QSvJz0b9Zrvnqro+01fX/nvuTN3WP6eRcrK93rO7uTcWOf/vcqd7Y0/zs52gOhI/6YwPhl4lptJ7l+hm91y3AuPbKtG+FH5V31Zurdy4tnp18ea2fov1wdt7OVt3f8SNZI+LVJ0vz1YHq57aenZUbc8NbJuv24722hrb237d6rXtdKVOdD7DPdjTmbrtxYFtC3Xbsb62zc9bn5Rl2f68BcCBd+RLRyZa/2z9tfVe66etq61Xp74x+dXJ4xMZ/8v415pzYy83jhe/y3v5UXb+hg4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOzo1tvvXFtcWVla3RaUZXlnSNMTCdJMtsz585/6lklSPwxo9x1WS19oJPWcZjrBwyV259F2591HLcLfO8dkTwr+qQRTQ8+f7cHHZVnub87HH2LhslY0D9Ox2DHIw601+H4x5JlcwCF0eu36zdO33n7ny8vXF99YemPpxrmzZ8/NnTv7ysLpK8srS3Pt1/3OEngS+j6BAwAAAAAAAAAAAIfE7v44pxjWNNHpZvTqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI/h4sk076XI/NypuWp64+7CSjV0480lP07SSFLMJsX7yYW0h8z0dVcM2856cumDjzY+bE81O0O9fGPUev2K9RG910Nmk4x1xgNMDZpZ3hnW3/d/WfVzc3h/u1T09rAq2Ilu4WC//TcAAP//9/0XYw==")
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x800000, &(0x7f0000000880)=ANY=[], 0x1, 0x375, &(0x7f0000000980)="$eJzs3c+LG2UYwPEnu9lk0tJNDqIoyD7oRS/D7urZGqQFMWDZNmIrCNPuREPGZJkJkYi468mrePMfECw9FjwU1H9gL97qxYsn9yhoEXFkfiWbZPKzWzbb/X6gzZO8zzszbzJZnieQydH7X3/SqHlmzWrLiqGSERF5JFKSFUlkopucpDiQVy/++fDF6zdvvVOuVK7sqF4t33htW1XXN3789PNCnPYgL4elD4/E+P3w2cPnj/678XHd07qnzVZbLb3d+q1t3XZs3a17DVP1mmNbnq31pme70XgrGq85rb29rlrN3UsX9lzb89RqdrVhd7Xd0rbb1exHVr2ppmnqpQtph/sUMxaYU727s2OVF9zhnQXn4aT94/v+hGHXLVurImZhZKR694keFwAAWEq9+j8blJD6bVIjlGSlV1Bm4l4gF8aDbUBQ/ydxWP8HzUK//r/30s/ti+/dX4/r/we5tPr/9V+j+QP1f7D3+et/a3L9//3Q/dGK6Mzbnyf5sep/LIeNwXfkH/2OPRbU/8G7odfRf/nBvc0woP4HAAAAAAAAAAAAAAAAAAAAAOAseOT7Rd/3i8lt8q//FYL4fiQ38YvGOHPGvf75+IoCvfMBT6XrN2+JEX5xL7su4nzVqXaq0W08niRuSlH+Dc+HWHTBiYNwUAMl+cnZ71TX4gmr4f9lERVHbNmSopQG5ofx1bcrV7Y0Es0P999LKtekHs7flqI8kz5/e3T+fqeak1delv58U4ryyx1piSO74Xndn//Flupb71aG5hfCvDSXn+xLAgAAAADAiTNVjbh9Lg32v1H/bpqqaeNBLx/o9dejnw/0+uvN1P48W3whe7prBwAAAADgvPBynzUsx7Fdrzs2KMi0nHy8taGhrEzZchBkZ8gZCB6GwdqknNVjK5y2QUOiIBf/gsZwzuXx25GZjzkJ/spL6pOZXMJ1YMhIf1ZnDJL1z5BszPsSuN7K/Gu3XW8jOB6RRZZzLEg+NhqXI9cW3fK4ILly7rTk57757u/FdpGJr9p7fOiN+8aUlYZBZuiRg/HJa7OeUWvpfy1+WORHZgAAAAAsiaToL3jJI2+e7gEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHAOnehl0sYEp71GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYFn8HwAA///DmPIC")
syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000000))
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000040)="07000000010001", 0x7)

2.878306079s ago: executing program 5 (id=299):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
sched_setscheduler(0x0, 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0xc, &(0x7f0000001300)=ANY=[@ANYBLOB="696f636861727365743d6d61636963656c616e642c696f636861727365743d757466382c666d61736b3d30303030303030303030303030303030303030303031302c6572726f72733d72656d6f756e742d726f2c636865636b3d7374726963742c757466383d302c756e695f786c6174653d312c757466383d302c73686f72746e616d653d6d697865642c756e695f786c6174653d302c757466383d312c00ec24d52cd656eadd39d406526adc61a7b193d91057769822e39d283530efe28116f0305d770fd70a3670"], 0xff, 0x191, &(0x7f0000000580)="$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")
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10)
syncfs(r0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0)
mount$tmpfs(0x0, 0x0, &(0x7f0000000240), 0x0, 0x0)
umount2(0x0, 0xb)
r2 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r2, 0x40045542, &(0x7f0000000080))
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x482, &(0x7f0000000800)=ANY=[], 0x1, 0x266, &(0x7f0000000ac0)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
mkdirat(r3, &(0x7f0000000180)='./bus\x00', 0x0)
r4 = syz_open_dev$usbmon(0x0, 0x7, 0x0)
ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f0000000140)={0x0, 0xfffffffffffffd7f})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x11, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r3}, 0x90)
ioctl$MON_IOCX_GETX(r4, 0x4018920a, &(0x7f0000000a40)={0x0, 0x0})

2.852388573s ago: executing program 4 (id=310):
syz_mount_image$erofs(&(0x7f0000000100), &(0x7f0000000580)='./file2\x00', 0x2000000, &(0x7f0000000200)=ANY=[], 0x1, 0x1ff, &(0x7f0000000600)="$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")
lgetxattr(&(0x7f0000001380)='./file3\x00', &(0x7f0000000b80)=ANY=[@ANYBLOB="73656375726974792e6d8d8b38eeb9a446656d6f72792e6c48e0f5c92fa94f0b95"], 0x0, 0x0)

2.83013908s ago: executing program 3 (id=300):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20081e, &(0x7f00000020c0), 0x1, 0x4ef, &(0x7f0000000a00)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='io.stat\x00', 0x275a, 0x0)
ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f00000001c0))
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'syztnl1\x00', 0x0})
r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080))
r3 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_UNLINK(r3, 0x40044160, 0x3)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
getpid()
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], 0x0, 0x9, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000340), &(0x7f00000003c0), 0x8, 0x0, 0x8, 0x8, &(0x7f0000000400)}}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000098c0), 0x0, 0x0)
ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000100)={0x1, 0x0, 0x1080, 0x7ff, 0x21, "a07ec0f500060000eaffffe8000000000100", 0x307, 0xfffffffb})
bind$alg(r0, &(0x7f0000001200)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300), 0x0)
r5 = accept$alg(r0, 0x0, 0x0)
write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[], 0x100000530)
recvmmsg(r5, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/66, 0x34000}], 0x1}}], 0x1, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

2.720817461s ago: executing program 1 (id=301):
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006})
chdir(&(0x7f0000000100)='./file0\x00')
acct(&(0x7f00000000c0)='./file0\x00')
acct(0x0)

2.272259847s ago: executing program 0 (id=302):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000003c0))
r3 = openat$incfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000340)={<r4=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000100)={r4})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000480)={<r5=>0x0})
r6 = fanotify_init(0x0, 0x0)
r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x840c0, 0x0)
fanotify_mark(r6, 0x61, 0x40001002, r7, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8a601, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f0000000080)={r4, 0x6, 0x1})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000180)={r5})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f00000000c0)={r5, 0xff, 0x2908})
r8 = add_key$fscrypt_provisioning(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x48, 0xfffffffffffffffe)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r3, 0xc0506617, &(0x7f0000000280)={@desc={0x1, 0x0, @desc1}, 0x40, r8, '\x00', @b})
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'lo\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0xffffffff}}}}]}, 0x58}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r9, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
r13 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c000000100001040000000006000000000000007e9e5e6c6029636b6e6ad573a1829dc2ac9995502305054205e7a54d70706b2582a0fee5987356428502e49bb82c25b44eeed10392e224f7f1b00c9b3c7bddcd36dd93f8604c9fe200b92a77d15fa88b8f0a78e490f1b08269ed38bf1e4641f403488b661c200db9ef427573c16a0290f49f6ee3363ce335bec600c4b3c0bc8b0a9ce44a118a3d8fe149116a47c2051eaa0f8dd5a0dba3d13a373cd9d6d0a0ee977e73e151527939ff4a518478eecdc743c59884b6237f4ccd6163bae1", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r9, @ANYBLOB], 0x3c}}, 0x0)
socket$unix(0x1, 0x1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)

2.238143549s ago: executing program 4 (id=303):
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
connect$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
r2 = dup2(r0, r1)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xb, &(0x7f0000000080), 0x317)

1.455762795s ago: executing program 4 (id=304):
syz_usb_connect$uac1(0x0, 0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406b1d01014000010203010902720003010000000904000000010300000a2401"], 0x0)

1.341831823s ago: executing program 1 (id=305):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x19, 0x4, 0x4, 0x5}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)

1.289949639s ago: executing program 5 (id=306):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)={0x18, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}, 0x18}], 0x1}, 0x0)

831.268027ms ago: executing program 1 (id=307):
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x1000000000010001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x20)
rt_sigprocmask(0x0, &(0x7f0000000000), 0x0, 0x8)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000200))
ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000000)='z', 0x1, 0xffffffffffffffff)
keyctl$update(0x2, r1, &(0x7f0000000600)="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", 0x5c7)
keyctl$read(0x3, r1, 0x0, 0x0)

0s ago: executing program 1 (id=308):
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000180)='./file1\x00', 0x4080, &(0x7f0000000040)=ANY=[], 0x3, 0x7c4, &(0x7f00000006c0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0)
mkdir(&(0x7f00000002c0)='./file1/file1\x00', 0x0)
ftruncate(r0, 0x9)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000100)={0x3, &(0x7f0000000040)=[{0x48}, {0x5}, {0x6, 0x0, 0x0, 0xffffefff}]}, 0x10)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000140), r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0xfffffa20}, 0x48)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="6c0000000001090c00000000000000000200000024f900801400018008000100e000000208000200000000000c00028005000100000000002400028014000180080001007f00000108000200ac1e00010c000280050001000000000008000740000000000500164000000000"], 0x6c}}, 0x0)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r2, &(0x7f0000000040), 0x20000000}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r2, 0x0, 0x0}, 0x20)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000380)={0x0, &(0x7f00000001c0)})
creat(&(0x7f00000001c0)='./bus\x00', 0x105)
r5 = open(&(0x7f0000000100)='./bus\x00', 0x1, 0x40)
mlockall(0x2)
r6 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil)
shmat(r6, &(0x7f0000ffc000/0x2000)=nil, 0x4000)
r7 = shmget(0x1, 0x3000, 0x4, &(0x7f00001c9000/0x3000)=nil)
shmat(r7, &(0x7f0000ffc000/0x4000)=nil, 0x4000)
shmat(r6, &(0x7f0000ffc000/0x4000)=nil, 0x1000)
shmat(0x0, &(0x7f000025f000/0x1000)=nil, 0x4000)
shmat(r6, &(0x7f000012a000/0x4000)=nil, 0x5000)
fcntl$addseals(r4, 0x409, 0xa)
shmctl$IPC_RMID(0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x2, &(0x7f0000000140)=ANY=[@ANYRESOCT=r6], &(0x7f0000000180)='syzkaller\x00', 0xfffffffe, 0x0, &(0x7f00000001c0), 0x40f00, 0x2e, '\x00', 0x0, 0x9, r5, 0x8, &(0x7f0000000200)={0x800006, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x8000c, 0x2f16, 0x3}, 0x10, 0xffffffffffffffff}, 0x90)

kernel console output (not intermixed with test programs):

allmulticast mode
[   84.387259][ T5233] bridge_slave_1: entered promiscuous mode
[   84.415093][ T5235] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.422236][ T5235] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.429518][ T5235] bridge_slave_1: entered allmulticast mode
[   84.437185][ T5235] bridge_slave_1: entered promiscuous mode
[   84.464964][ T5247] Bluetooth: hci5: command tx timeout
[   84.465271][ T5248] Bluetooth: hci2: command tx timeout
[   84.470708][ T5247] Bluetooth: hci4: command tx timeout
[   84.476214][ T5249] Bluetooth: hci0: command tx timeout
[   84.481594][ T5240] Bluetooth: hci1: command tx timeout
[   84.487224][ T5248] Bluetooth: hci3: command tx timeout
[   84.529805][ T5229] team0: Port device team_slave_0 added
[   84.562348][ T5233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   84.616688][ T5228] team0: Port device team_slave_0 added
[   84.626393][ T5235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   84.654733][ T5231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   84.666055][ T5229] team0: Port device team_slave_1 added
[   84.674687][ T5231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   84.686126][ T5233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   84.728287][ T5235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   84.755316][ T5228] team0: Port device team_slave_1 added
[   84.847007][ T5230] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.854363][ T5230] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.861580][ T5230] bridge_slave_0: entered allmulticast mode
[   84.869855][ T5230] bridge_slave_0: entered promiscuous mode
[   84.909737][ T5235] team0: Port device team_slave_0 added
[   84.919274][ T5235] team0: Port device team_slave_1 added
[   84.939725][ T5229] batman_adv: batadv0: Adding interface: batadv_slave_0
[   84.946742][ T5229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.973007][ T5229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   84.990796][ T5231] team0: Port device team_slave_0 added
[   85.001001][ T5233] team0: Port device team_slave_0 added
[   85.010685][ T5233] team0: Port device team_slave_1 added
[   85.016827][ T5230] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.024535][ T5230] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.031685][ T5230] bridge_slave_1: entered allmulticast mode
[   85.039086][ T5230] bridge_slave_1: entered promiscuous mode
[   85.061478][ T5228] batman_adv: batadv0: Adding interface: batadv_slave_0
[   85.072030][ T5228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.098625][ T5228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   85.114498][ T5228] batman_adv: batadv0: Adding interface: batadv_slave_1
[   85.121439][ T5228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.148323][ T5228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   85.186598][ T5229] batman_adv: batadv0: Adding interface: batadv_slave_1
[   85.193683][ T5229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.219740][ T5229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   85.240379][ T5231] team0: Port device team_slave_1 added
[   85.281041][ T5230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   85.298958][ T5235] batman_adv: batadv0: Adding interface: batadv_slave_0
[   85.305974][ T5235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.333039][ T5235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   85.346295][ T5235] batman_adv: batadv0: Adding interface: batadv_slave_1
[   85.353429][ T5235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.379603][ T5235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   85.428762][ T5230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   85.500844][ T5233] batman_adv: batadv0: Adding interface: batadv_slave_0
[   85.513117][ T5233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.540233][ T5233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   85.554110][ T5233] batman_adv: batadv0: Adding interface: batadv_slave_1
[   85.561066][ T5233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.588232][ T5233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   85.652321][ T5229] hsr_slave_0: entered promiscuous mode
[   85.659206][ T5229] hsr_slave_1: entered promiscuous mode
[   85.667984][ T5231] batman_adv: batadv0: Adding interface: batadv_slave_0
[   85.676149][ T5231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.727555][ T5231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   85.776623][ T5230] team0: Port device team_slave_0 added
[   85.804892][ T5235] hsr_slave_0: entered promiscuous mode
[   85.811498][ T5235] hsr_slave_1: entered promiscuous mode
[   85.818761][ T5235] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   85.826692][ T5235] Cannot create hsr debugfs directory
[   85.849978][ T5231] batman_adv: batadv0: Adding interface: batadv_slave_1
[   85.857231][ T5231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.883398][ T5231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   85.909152][ T5228] hsr_slave_0: entered promiscuous mode
[   85.915786][ T5228] hsr_slave_1: entered promiscuous mode
[   85.922084][ T5228] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   85.929705][ T5228] Cannot create hsr debugfs directory
[   85.955235][ T5230] team0: Port device team_slave_1 added
[   86.130116][ T5230] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.137208][ T5230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.164466][ T5230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.182841][ T5233] hsr_slave_0: entered promiscuous mode
[   86.190160][ T5233] hsr_slave_1: entered promiscuous mode
[   86.200111][ T5233] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   86.208146][ T5233] Cannot create hsr debugfs directory
[   86.264297][ T5230] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.271348][ T5230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.298394][ T5230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.312108][  T934] cfg80211: failed to load regulatory.db
[   86.350214][ T5231] hsr_slave_0: entered promiscuous mode
[   86.357607][ T5231] hsr_slave_1: entered promiscuous mode
[   86.364278][ T5231] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   86.371834][ T5231] Cannot create hsr debugfs directory
[   86.544342][ T5249] Bluetooth: hci4: command tx timeout
[   86.549779][ T5249] Bluetooth: hci2: command tx timeout
[   86.553353][ T5248] Bluetooth: hci1: command tx timeout
[   86.555238][ T5253] Bluetooth: hci5: command tx timeout
[   86.560538][ T5247] Bluetooth: hci0: command tx timeout
[   86.572144][ T5240] Bluetooth: hci3: command tx timeout
[   86.586589][ T5230] hsr_slave_0: entered promiscuous mode
[   86.593101][ T5230] hsr_slave_1: entered promiscuous mode
[   86.600171][ T5230] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   86.607793][ T5230] Cannot create hsr debugfs directory
[   87.021832][ T5229] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   87.043721][ T5229] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   87.068787][ T5229] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   87.081439][ T5229] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   87.189041][ T5228] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   87.214923][ T5228] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   87.239234][ T5228] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   87.261483][ T5228] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   87.330508][ T5235] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   87.341656][ T5235] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   87.358861][ T5235] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   87.396673][ T5235] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   87.515544][ T5233] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   87.538108][ T5233] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   87.557944][ T5233] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   87.609172][ T5233] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   87.631151][ T5230] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   87.673614][ T5230] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   87.690275][ T5230] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   87.737410][ T5229] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.751107][ T5230] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   87.865019][ T5231] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   87.881416][ T5231] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   87.923796][ T5231] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   87.938380][ T5229] 8021q: adding VLAN 0 to HW filter on device team0
[   87.958693][ T5228] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.972439][ T5231] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   88.022853][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.030248][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.071716][ T5228] 8021q: adding VLAN 0 to HW filter on device team0
[   88.082482][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.089669][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.188182][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.195595][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.283296][ T3031] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.290460][ T3031] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.326052][ T5233] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.380555][ T5235] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.485813][ T5233] 8021q: adding VLAN 0 to HW filter on device team0
[   88.561713][ T5301] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.568938][ T5301] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.589814][ T5235] 8021q: adding VLAN 0 to HW filter on device team0
[   88.624178][ T5248] Bluetooth: hci4: command tx timeout
[   88.624469][ T5249] Bluetooth: hci3: command tx timeout
[   88.629582][ T5248] Bluetooth: hci0: command tx timeout
[   88.635903][ T5249] Bluetooth: hci1: command tx timeout
[   88.641105][ T5247] Bluetooth: hci5: command tx timeout
[   88.652915][ T5240] Bluetooth: hci2: command tx timeout
[   88.676613][ T5230] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.688511][ T5301] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.695780][ T5301] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.723508][ T5301] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.730752][ T5301] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.809186][ T5299] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.816410][ T5299] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.845016][ T5230] 8021q: adding VLAN 0 to HW filter on device team0
[   88.877758][ T5231] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.914924][ T5229] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.972905][ T5299] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.980165][ T5299] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.020769][ T5297] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.027976][ T5297] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.082989][ T5231] 8021q: adding VLAN 0 to HW filter on device team0
[   89.130351][ T5228] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.165497][ T5297] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.172686][ T5297] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.211959][ T5235] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   89.261056][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.268212][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.397422][ T5229] veth0_vlan: entered promiscuous mode
[   89.557029][ T5228] veth0_vlan: entered promiscuous mode
[   89.578708][ T5229] veth1_vlan: entered promiscuous mode
[   89.690706][ T5228] veth1_vlan: entered promiscuous mode
[   89.747926][ T5233] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.845279][ T5229] veth0_macvtap: entered promiscuous mode
[   89.901223][ T5228] veth0_macvtap: entered promiscuous mode
[   89.930643][ T5228] veth1_macvtap: entered promiscuous mode
[   89.949403][ T5229] veth1_macvtap: entered promiscuous mode
[   90.035959][ T5229] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.061561][ T5235] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.086431][ T5230] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.101786][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.115910][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.134987][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.149140][ T5233] veth0_vlan: entered promiscuous mode
[   90.168914][ T5229] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.189783][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.203846][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.216062][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.236535][ T5229] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.247190][ T5229] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.256160][ T5229] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.265240][ T5229] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.295391][ T5233] veth1_vlan: entered promiscuous mode
[   90.318788][ T5228] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.337732][ T5228] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.359422][ T5228] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.368666][ T5228] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.393690][ T5231] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.656442][ T5235] veth0_vlan: entered promiscuous mode
[   90.690825][ T5233] veth0_macvtap: entered promiscuous mode
[   90.704259][ T5248] Bluetooth: hci1: command tx timeout
[   90.709704][ T5248] Bluetooth: hci3: command tx timeout
[   90.714541][ T5240] Bluetooth: hci4: command tx timeout
[   90.715211][ T5247] Bluetooth: hci0: command tx timeout
[   90.720470][ T5236] Bluetooth: hci5: command tx timeout
[   90.731451][ T5249] Bluetooth: hci2: command tx timeout
[   90.774359][ T5233] veth1_macvtap: entered promiscuous mode
[   90.806227][   T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.825030][   T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.858769][ T5235] veth1_vlan: entered promiscuous mode
[   90.921221][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.937036][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.951823][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.963492][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.975377][ T5233] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.995852][ T2921] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.005524][ T2921] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.087388][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   91.098597][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.109191][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   91.120666][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.132708][ T5233] batman_adv: batadv0: Interface activated: batadv_slave_1
[   91.161489][ T5230] veth0_vlan: entered promiscuous mode
[   91.171672][ T2921] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.181471][ T2921] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.203868][ T5233] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.213595][ T5233] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.222324][ T5233] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.231067][ T5233] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.246440][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.254555][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.286764][ T5230] veth1_vlan: entered promiscuous mode
[   91.395733][ T5235] veth0_macvtap: entered promiscuous mode
[   91.409188][ T5231] veth0_vlan: entered promiscuous mode
[   91.446068][ T5235] veth1_macvtap: entered promiscuous mode
[   91.537137][ T5231] veth1_vlan: entered promiscuous mode
[   91.829980][ T2887] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.865153][ T2887] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.919806][ T5345] xt_TPROXY: Can be used only with -p tcp or -p udp
[   92.406093][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   92.429346][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.445641][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   92.460645][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.480577][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   92.497064][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.521179][ T5235] batman_adv: batadv0: Interface activated: batadv_slave_0
[   92.578642][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   92.600367][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.636789][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   92.684968][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.695979][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   92.713489][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.744924][ T5235] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.760734][ T5230] veth0_macvtap: entered promiscuous mode
[   92.798317][ T2887] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.810179][ T5230] veth1_macvtap: entered promiscuous mode
[   92.816643][ T2887] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.875569][ T5235] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.913431][ T5235] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.922159][ T5235] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.954544][ T5235] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.037048][ T5231] veth0_macvtap: entered promiscuous mode
[   93.129144][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   93.159759][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.183533][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   93.200007][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.235768][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   93.263183][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.280585][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   93.292872][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.314143][ T5230] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.355921][ T5231] veth1_macvtap: entered promiscuous mode
[   93.409264][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   93.436836][ T5361] loop1: detected capacity change from 0 to 2048
[   93.448289][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.545895][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   93.572890][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.601382][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   93.612459][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.633974][ T5367] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   93.657097][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   93.745174][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.773902][ T5230] batman_adv: batadv0: Interface activated: batadv_slave_1
[   94.261168][ T5361] NILFS error (device loop1): nilfs_check_folio: bad entry in directory #2: disallowed inode number - offset=56, inode=6, rec_len=24, name_len=5
[   94.438788][ T5230] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.469999][ T5230] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.482262][ T5361] Remounting filesystem read-only
[   94.507500][ T5374] netlink: 'syz.1.15': attribute type 10 has an invalid length.
[   94.515971][ T5230] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.566256][ T5230] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.592080][ T5374] netlink: 212848 bytes leftover after parsing attributes in process `syz.1.15'.
[   94.698567][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   94.713054][ T5377] loop2: detected capacity change from 0 to 512
[   94.732607][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.751140][ T5377] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   94.751264][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   94.796476][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.803292][ T5377] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   94.820488][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   94.831850][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.842408][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   94.869218][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.869802][ T5377] EXT4-fs (loop2): 1 truncate cleaned up
[   94.879398][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   94.901268][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.903942][ T5377] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   94.919620][ T5231] batman_adv: batadv0: Interface activated: batadv_slave_0
[   94.994320][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   95.024506][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.050133][ T5385] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   95.052964][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   95.101556][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.121890][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   95.132539][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.142422][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   95.160260][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.170191][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   95.181130][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.196032][ T5231] batman_adv: batadv0: Interface activated: batadv_slave_1
[   95.262410][ T5233] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   95.318588][ T5231] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.359328][ T5231] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.382653][ T5231] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.402840][ T5231] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.492337][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.535381][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.685979][   T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.709228][   T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.723888][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[   95.755409][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   96.159188][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.198427][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.288216][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.334940][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.532192][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.553371][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.580879][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.653380][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.476537][ T5422] loop2: detected capacity change from 0 to 64
[   97.593725][ T5425] loop0: detected capacity change from 0 to 256
[   97.707749][ T5425] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 196)
[   97.735089][ T5426] loop5: detected capacity change from 0 to 512
[   97.767201][ T5425] FAT-fs (loop0): Filesystem has been set read-only
[   97.803882][ T5426] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   97.912577][ T5426] EXT4-fs (loop5): 1 truncate cleaned up
[   98.071465][ T5426] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   98.091318][ T5228] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 196)
[   98.424945][ T5444] IPv6: sit1: Disabled Multicast RS
[   98.571848][ T5449] =======================================================
[   98.571848][ T5449] WARNING: The mand mount option has been deprecated and
[   98.571848][ T5449]          and is ignored by this kernel. Remove the mand
[   98.571848][ T5449]          option from the mount to silence this warning.
[   98.571848][ T5449] =======================================================
[   99.572541][   T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.741286][   T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.958370][   T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.149280][   T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.154166][ T5474] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  100.322265][ T5475] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  100.579599][ T5482] loop2: detected capacity change from 0 to 2048
[  100.614558][ T5482] EXT4-fs: Ignoring removed mblk_io_submit option
[  100.663596][   T35] bridge_slave_1: left allmulticast mode
[  100.669519][   T35] bridge_slave_1: left promiscuous mode
[  100.725969][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.786787][ T5482] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  100.853170][ T5489] loop3: detected capacity change from 0 to 1024
[  100.888870][   T35] bridge_slave_0: left allmulticast mode
[  100.947380][   T35] bridge_slave_0: left promiscuous mode
[  100.953191][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.279893][ T5249] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  101.288992][ T5249] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  101.303625][ T5249] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  101.315155][ T5249] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  101.323430][ T5249] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  101.346083][ T5249] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  101.425935][   T12] hfsplus: b-tree write err: -5, ino 8
[  101.784514][ T5301] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  102.053842][ T5301] usb 5-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a
[  102.083625][ T5301] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.151155][ T5301] usb 5-1: config 0 descriptor??
[  102.179485][ T5230] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.190919][ T5301] gspca_main: sn9c2028-2.14.0 probing 0c45:8001
[  102.391572][ T5301] gspca_sn9c2028: read1 error -71
[  102.401715][ T5301] gspca_sn9c2028: read1 error -71
[  102.416038][ T5301] gspca_sn9c2028: read1 error -71
[  102.435273][ T5301] sn9c2028 5-1:0.0: probe with driver sn9c2028 failed with error -71
[  102.462796][ T5301] usb 5-1: USB disconnect, device number 2
[  102.486500][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  102.550622][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  102.577202][   T35] bond0 (unregistering): Released all slaves
[  102.595134][ T5522] syz.5.62 uses obsolete (PF_INET,SOCK_PACKET)
[  102.606079][ T5497] netlink: 4 bytes leftover after parsing attributes in process `syz.1.55'.
[  102.625198][ T5497] netlink: 'syz.1.55': attribute type 11 has an invalid length.
[  102.666892][ T5233] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /11/file0: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=117440527, rec_len=0, size=2048 fake=0
[  102.669257][ T5522] loop5: detected capacity change from 0 to 1764
[  102.724900][ T5497] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  102.736608][ T5497] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  102.747095][ T5497] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  102.755998][ T5497] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  102.787411][ T5233] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  102.818720][ T5497] vxlan0: entered promiscuous mode
[  102.859938][ T5233] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.971511][ T5518] netlink: 10 bytes leftover after parsing attributes in process `syz.3.60'.
[  103.156511][ T5529] loop5: detected capacity change from 0 to 512
[  103.217489][ T5533] loop1: detected capacity change from 0 to 16
[  103.233663][ T5529] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found
[  103.263316][ T5529] UDF-fs: Scanning with blocksize 512 failed
[  103.296438][ T5529] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found
[  103.314326][ T5533] erofs: (device loop1): mounted with root inode @ nid 36.
[  103.339985][ T5529] UDF-fs: Scanning with blocksize 1024 failed
[  103.380090][ T5529] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found
[  103.408933][ T5529] UDF-fs: Scanning with blocksize 2048 failed
[  103.424084][ T5240] Bluetooth: hci0: command tx timeout
[  103.481135][ T5529] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  103.587734][ T5539] netlink: 4 bytes leftover after parsing attributes in process `syz.3.66'.
[  103.618282][ T5529] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  104.635503][ T5338] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  104.703145][   T29] audit: type=1804 audit(1722966988.713:2): pid=5564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.73" name="/newroot/15/file0/bus" dev="hugetlbfs" ino=7937 res=1 errno=0
[  104.716604][ T5566] loop1: detected capacity change from 0 to 128
[  104.800448][   T29] audit: type=1804 audit(1722966988.813:3): pid=5564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.73" name="/newroot/15/file0/bus" dev="hugetlbfs" ino=7937 res=1 errno=0
[  104.860303][ T5338] usb 4-1: config 0 has an invalid interface number: 106 but max is 0
[  104.880737][ T5338] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  104.912939][   T29] audit: type=1804 audit(1722966988.863:4): pid=5564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.73" name="/newroot/15/file0/bus" dev="hugetlbfs" ino=7937 res=1 errno=0
[  104.930746][ T5570] loop5: detected capacity change from 0 to 512
[  104.943720][ T5338] usb 4-1: config 0 has no interface number 0
[  104.963927][ T5338] usb 4-1: config 0 interface 106 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  104.984108][ T5338] usb 4-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[  104.986804][   T35] hsr_slave_0: left promiscuous mode
[  105.025812][ T5570] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  105.039503][   T35] hsr_slave_1: left promiscuous mode
[  105.045843][ T5338] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb
[  105.074558][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  105.077407][ T5338] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  105.108822][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[  105.118907][ T5338] usb 4-1: config 0 descriptor??
[  105.145940][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  105.150922][ T5570] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  105.155810][ T5338] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  105.175897][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[  105.243553][ T5570] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  105.270867][   T35] veth1_macvtap: left promiscuous mode
[  105.306563][   T35] veth0_macvtap: left promiscuous mode
[  105.350789][   T35] veth1_vlan: left promiscuous mode
[  105.369006][   T35] veth0_vlan: left promiscuous mode
[  105.374761][   T12] usb 4-1: Failed to submit usb control message: -71
[  105.375655][ T3031] usb 4-1: USB disconnect, device number 2
[  105.388779][ T5585] loop2: detected capacity change from 0 to 1024
[  105.403527][   T12] usb 4-1: unable to send the bmi data to the device: -71
[  105.416171][   T12] usb 4-1: unable to get target info from device
[  105.422610][   T12] usb 4-1: could not get target info (-71)
[  105.433399][   T12] usb 4-1: could not probe fw (-71)
[  105.504177][ T5240] Bluetooth: hci0: command tx timeout
[  105.514810][ T5586] EXT4-fs error (device loop5): __ext4_new_inode:1279: comm syz.5.77: failed to insert inode 16: doubly allocated?
[  105.765827][ T5230] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.513403][ T3031] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  106.733457][ T3031] usb 3-1: Using ep0 maxpacket: 32
[  106.804701][ T3031] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  107.039265][ T3031] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  107.051296][ T3031] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  107.064822][ T3031] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  107.073965][ T3031] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  107.089796][ T3031] usb 3-1: config 0 descriptor??
[  107.098017][ T5602] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  107.115589][ T3031] hub 3-1:0.0: USB hub found
[  107.353438][ T3031] hub 3-1:0.0: 2 ports detected
[  107.440552][ T5615] loop3: detected capacity change from 0 to 256
[  107.595012][ T5240] Bluetooth: hci0: command tx timeout
[  107.839510][ T3031] hub 3-1:0.0: set hub depth failed
[  107.892884][ T3031] usb 3-1: USB disconnect, device number 2
[  108.126958][ T5617] loop4: detected capacity change from 0 to 1024
[  108.250493][ T5623] loop5: detected capacity change from 0 to 512
[  108.309612][ T5623] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2
[  108.318263][ T5623] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2
[  108.329452][ T5623] EXT4-fs (loop5): 1 truncate cleaned up
[  108.401745][ T5623] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  108.697156][    T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!!
[  108.708804][ T5617] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  109.004040][ T5630] loop2: detected capacity change from 0 to 8
[  109.063687][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  109.124390][ T5630] SQUASHFS error: zlib decompression failed, data probably corrupt
[  109.175941][ T5630] SQUASHFS error: Failed to read block 0x9b: -5
[  109.216930][ T5630] SQUASHFS error: Unable to read metadata cache entry [99]
[  109.265758][ T5230] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.267380][ T5630] SQUASHFS error: Unable to read inode 0x127
[  109.556335][ T5632] loop5: detected capacity change from 0 to 64
[  109.743468][ T5240] Bluetooth: hci0: command tx timeout
[  109.794872][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  109.803640][    T0] NOHZ tick-stop error: local softirq work is pending, handler #280!!!
[  109.864296][   T35] team0 (unregistering): Port device team_slave_1 removed
[  110.863654][ T5625] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  110.938664][   T35] team0 (unregistering): Port device team_slave_0 removed
[  111.004956][ T5638] hfs: request for non-existent node 131072 in B*Tree
[  111.026577][ T5240] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  111.035337][ T5240] Bluetooth: hci2: Injecting HCI hardware error event
[  111.044298][ T5240] Bluetooth: hci2: hardware error 0x00
[  111.204599][ T5638] hfs: request for non-existent node 131072 in B*Tree
[  111.228519][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  111.275319][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  111.554537][ T5231] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.028695][ T5644] loop4: detected capacity change from 0 to 128
[  112.085609][ T5644] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  113.174560][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  113.284540][ T5240] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  113.788532][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  117.029153][ T5662] vlan2: entered promiscuous mode
[  117.563856][ T5249] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  117.583536][ T5249] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  117.591319][ T5249] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  117.599683][ T5249] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  117.607585][ T5249] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  117.615194][ T5249] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  117.627444][ T5677] loop5: detected capacity change from 0 to 1764
[  118.684823][ T5498] chnl_net:caif_netlink_parms(): no params data found
[  118.904838][ T5240] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  118.920306][ T5240] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  118.933402][ T5240] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  118.957282][ T5240] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  118.973575][ T5240] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  118.980981][ T5240] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  119.528381][ T5498] bridge0: port 1(bridge_slave_0) entered blocking state
[  119.536166][ T5498] bridge0: port 1(bridge_slave_0) entered disabled state
[  119.543967][ T5498] bridge_slave_0: entered allmulticast mode
[  119.551777][ T5498] bridge_slave_0: entered promiscuous mode
[  119.553494][    T8] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  119.571345][ T5498] bridge0: port 2(bridge_slave_1) entered blocking state
[  119.587700][ T5498] bridge0: port 2(bridge_slave_1) entered disabled state
[  119.597849][ T5498] bridge_slave_1: entered allmulticast mode
[  119.616325][ T5498] bridge_slave_1: entered promiscuous mode
[  119.674885][ T5249] Bluetooth: hci2: command tx timeout
[  119.676305][ T5236] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  119.697048][ T5236] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  119.705899][ T5236] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  119.716158][ T5236] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  119.724358][ T5236] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  119.733870][ T5236] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  119.793904][    T8] usb 6-1: Using ep0 maxpacket: 16
[  119.801405][    T8] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  119.828066][    T8] usb 6-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice= 0.40
[  119.843355][    T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.851365][    T8] usb 6-1: Product: syz
[  119.859200][    T8] usb 6-1: Manufacturer: syz
[  119.864064][    T8] usb 6-1: SerialNumber: syz
[  119.900122][    T8] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input5
[  119.936967][ T5498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  120.151888][ T5498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  120.199623][  T934] usb 6-1: USB disconnect, device number 2
[  120.526132][ T5498] team0: Port device team_slave_0 added
[  120.595830][ T5498] team0: Port device team_slave_1 added
[  120.675582][ T5678] chnl_net:caif_netlink_parms(): no params data found
[  120.777864][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  120.812361][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.940735][ T5498] batman_adv: batadv0: Adding interface: batadv_slave_0
[  120.966703][ T5498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  121.024220][ T5240] Bluetooth: hci1: command tx timeout
[  121.044872][ T5498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  121.267125][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  121.298377][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.447849][ T5498] batman_adv: batadv0: Adding interface: batadv_slave_1
[  121.465226][ T5498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  121.502939][ T5498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  121.608160][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  121.626959][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.744772][ T5240] Bluetooth: hci2: command tx timeout
[  121.755736][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  121.799820][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.833660][ T5240] Bluetooth: hci6: command tx timeout
[  122.217459][ T5498] hsr_slave_0: entered promiscuous mode
[  122.227865][ T5498] hsr_slave_1: entered promiscuous mode
[  122.237847][ T5498] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  122.246402][ T5498] Cannot create hsr debugfs directory
[  122.288924][ T5773] netlink: 'syz.5.119': attribute type 1 has an invalid length.
[  122.343025][ T5774] netlink: 4 bytes leftover after parsing attributes in process `syz.5.119'.
[  122.401914][ T5678] bridge0: port 1(bridge_slave_0) entered blocking state
[  122.423582][ T5678] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.431217][ T5678] bridge_slave_0: entered allmulticast mode
[  122.455421][ T5678] bridge_slave_0: entered promiscuous mode
[  122.533482][ T5678] bridge0: port 2(bridge_slave_1) entered blocking state
[  122.540918][ T5678] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.575267][ T5678] bridge_slave_1: entered allmulticast mode
[  122.598317][ T5678] bridge_slave_1: entered promiscuous mode
[  122.812737][ T5678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  122.955482][ T5692] chnl_net:caif_netlink_parms(): no params data found
[  122.988564][ T5778] loop2: detected capacity change from 0 to 512
[  123.042848][ T5678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  123.091300][ T5778] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.120: couldn't read orphan inode 17 (err -116)
[  123.103565][ T5240] Bluetooth: hci1: command tx timeout
[  123.194990][ T5778] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  123.309216][ T5678] team0: Port device team_slave_0 added
[  123.348258][ T5778] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback.
[  123.367272][   T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.429864][ T5233] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.539673][ T5678] team0: Port device team_slave_1 added
[  123.828651][ T5240] Bluetooth: hci2: command tx timeout
[  123.905245][ T5236] Bluetooth: hci6: command tx timeout
[  124.267677][ T5796] loop2: detected capacity change from 0 to 1024
[  124.284613][ T5796] hfsplus: invalid catalog btree flag
[  124.290656][ T5796] hfsplus: failed to load catalog file
[  124.433037][   T29] audit: type=1326 audit(1722967008.443:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5801 comm="syz.5.123" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f09a2d779f9 code=0x0
[  124.462410][   T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.560926][ T5806] xt_bpf: check failed: parse error
[  124.693184][   T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.732243][ T5717] chnl_net:caif_netlink_parms(): no params data found
[  124.757401][ T5678] batman_adv: batadv0: Adding interface: batadv_slave_0
[  124.777355][ T5678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  124.843361][ T5678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  124.886052][ T5678] batman_adv: batadv0: Adding interface: batadv_slave_1
[  124.893096][ T5678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  124.922076][ T5678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  124.975085][ T5820] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  125.004075][ T5692] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.011343][ T5692] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.028728][ T5692] bridge_slave_0: entered allmulticast mode
[  125.037206][ T5692] bridge_slave_0: entered promiscuous mode
[  125.121294][   T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.183541][ T5236] Bluetooth: hci1: command tx timeout
[  125.308578][ T5692] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.316025][ T5692] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.323480][ T5692] bridge_slave_1: entered allmulticast mode
[  125.331086][ T5692] bridge_slave_1: entered promiscuous mode
[  125.526733][ T5338] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  125.628314][ T5692] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  125.755619][ T5338] usb 3-1: config 0 has an invalid interface number: 59 but max is 0
[  125.764839][ T5338] usb 3-1: config 0 has no interface number 0
[  125.786415][ T5678] hsr_slave_0: entered promiscuous mode
[  125.787828][ T5338] usb 3-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac
[  125.801717][ T5338] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.803868][ T5678] hsr_slave_1: entered promiscuous mode
[  125.816632][ T5338] usb 3-1: Product: syz
[  125.820903][ T5338] usb 3-1: Manufacturer: syz
[  125.820935][ T5678] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  125.826149][ T5338] usb 3-1: SerialNumber: syz
[  125.828974][ T5338] usb 3-1: config 0 descriptor??
[  125.843476][ T5678] Cannot create hsr debugfs directory
[  125.856661][ T5692] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  125.992970][ T5236] Bluetooth: hci6: command tx timeout
[  125.998691][ T5240] Bluetooth: hci2: command tx timeout
[  126.088451][  T934] usb 3-1: USB disconnect, device number 3
[  126.142505][ T5717] bridge0: port 1(bridge_slave_0) entered blocking state
[  126.156807][ T5717] bridge0: port 1(bridge_slave_0) entered disabled state
[  126.169030][ T5717] bridge_slave_0: entered allmulticast mode
[  126.180789][ T5717] bridge_slave_0: entered promiscuous mode
[  126.234753][ T5692] team0: Port device team_slave_0 added
[  126.242800][ T5717] bridge0: port 2(bridge_slave_1) entered blocking state
[  126.256018][ T5717] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.264423][ T5717] bridge_slave_1: entered allmulticast mode
[  126.272172][ T5717] bridge_slave_1: entered promiscuous mode
[  126.319973][ T5692] team0: Port device team_slave_1 added
[  126.472287][   T12] bridge_slave_1: left allmulticast mode
[  126.481315][   T12] bridge_slave_1: left promiscuous mode
[  126.498742][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.525081][   T12] bridge_slave_0: left allmulticast mode
[  126.530752][   T12] bridge_slave_0: left promiscuous mode
[  126.553677][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  126.575875][   T12] bridge_slave_1: left allmulticast mode
[  126.581536][   T12] bridge_slave_1: left promiscuous mode
[  126.592920][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.604488][   T12] bridge_slave_0: left allmulticast mode
[  126.610440][   T12] bridge_slave_0: left promiscuous mode
[  126.617616][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  126.828294][   T29] audit: type=1326 audit(1722967010.843:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5836 comm="syz.5.130" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f09a2d779f9 code=0x0
[  127.247500][ T5850] loop2: detected capacity change from 0 to 256
[  127.270930][ T5850] exfat: Deprecated parameter 'namecase'
[  127.277744][ T5236] Bluetooth: hci1: command tx timeout
[  127.402703][ T5850] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  127.732689][ T5852] loop2: detected capacity change from 0 to 512
[  127.752583][ T5852] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[  127.781915][ T5852] UDF-fs: Scanning with blocksize 512 failed
[  127.805666][ T5852] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[  127.822657][ T5852] UDF-fs: Scanning with blocksize 1024 failed
[  127.831482][ T5852] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[  127.839295][ T5852] UDF-fs: Scanning with blocksize 2048 failed
[  127.846351][ T5852] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  127.876175][ T5852] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  127.987966][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  127.990838][ T5852] syz.2.134: attempt to access beyond end of device
[  127.990838][ T5852] loop2: rw=2049, sector=600, nr_sectors = 8 limit=512
[  128.017109][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  128.039705][   T12] bond0 (unregistering): Released all slaves
[  128.074620][ T5236] Bluetooth: hci6: command tx timeout
[  128.297361][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  128.324933][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  128.352542][   T12] bond0 (unregistering): Released all slaves
[  128.486795][ T5692] batman_adv: batadv0: Adding interface: batadv_slave_0
[  128.496752][ T5692] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  128.540079][ T5692] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  128.591834][ T5717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  128.616664][ T5717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  128.818700][ T5692] batman_adv: batadv0: Adding interface: batadv_slave_1
[  128.833347][ T5692] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  128.902410][ T5692] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  129.060692][ T5498] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  129.102526][ T5862] netlink: 8 bytes leftover after parsing attributes in process `syz.5.138'.
[  129.119000][ T5862] netlink: 24 bytes leftover after parsing attributes in process `syz.5.138'.
[  129.140246][ T5862] geneve2: entered promiscuous mode
[  129.163508][ T5862] geneve2: entered allmulticast mode
[  129.210637][ T5717] team0: Port device team_slave_0 added
[  129.240952][ T5717] team0: Port device team_slave_1 added
[  129.326793][ T5867] loop2: detected capacity change from 0 to 512
[  129.393385][ T5498] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  129.407653][ T5498] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  129.458427][ T5867] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  129.474737][ T5867] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  129.490833][ T5692] hsr_slave_0: entered promiscuous mode
[  129.500720][ T5692] hsr_slave_1: entered promiscuous mode
[  129.514442][ T5692] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  129.522102][ T5692] Cannot create hsr debugfs directory
[  129.653409][ T5872] netlink: 4 bytes leftover after parsing attributes in process `syz.5.141'.
[  129.680881][ T5498] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  129.799058][ T5717] batman_adv: batadv0: Adding interface: batadv_slave_0
[  129.824447][ T5717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  129.851634][ T5717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  129.932932][ T5717] batman_adv: batadv0: Adding interface: batadv_slave_1
[  129.948957][ T5717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  130.045740][ T5717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  130.985550][ T5717] hsr_slave_0: entered promiscuous mode
[  131.036740][ T5717] hsr_slave_1: entered promiscuous mode
[  131.058390][ T5717] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  131.132607][ T5717] Cannot create hsr debugfs directory
[  131.598699][   T12] hsr_slave_0: left promiscuous mode
[  131.615443][   T12] hsr_slave_1: left promiscuous mode
[  131.629723][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  131.643657][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  131.660369][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  131.683427][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  131.699870][   T12] hsr_slave_0: left promiscuous mode
[  131.706541][   T12] hsr_slave_1: left promiscuous mode
[  131.719167][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  131.726793][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  131.740064][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  131.752037][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  131.835940][   T12] veth1_macvtap: left promiscuous mode
[  131.841704][   T12] veth0_macvtap: left promiscuous mode
[  131.847633][   T12] veth1_vlan: left promiscuous mode
[  131.853010][   T12] veth0_vlan: left promiscuous mode
[  131.864385][   T12] veth1_macvtap: left promiscuous mode
[  131.869898][   T12] veth0_macvtap: left promiscuous mode
[  131.886445][   T12] veth1_vlan: left promiscuous mode
[  131.891797][   T12] veth0_vlan: left promiscuous mode
[  132.388195][ T1254] ieee802154 phy0 wpan0: encryption failed: -22
[  132.395225][ T1254] ieee802154 phy1 wpan1: encryption failed: -22
[  132.893487][ T5233] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.087159][   T12] team0 (unregistering): Port device team_slave_1 removed
[  133.129976][   T12] team0 (unregistering): Port device team_slave_0 removed
[  133.223621][   T46] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  133.633425][   T46] usb 6-1: Using ep0 maxpacket: 8
[  133.660788][   T46] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  133.734617][ T5895] xt_TPROXY: Can be used only with -p tcp or -p udp
[  134.415491][   T46] usb 6-1: config 0 has no interface number 0
[  134.421649][   T46] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  134.434387][   T46] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  134.444481][   T46] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.471871][   T46] usb 6-1: config 0 descriptor??
[  134.514250][   T46] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  134.702204][ T5901] loop2: detected capacity change from 0 to 512
[  134.792103][  T934] usb 6-1: USB disconnect, device number 3
[  134.792180][    C1] iowarrior 6-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19
[  134.817145][  T934] iowarrior 6-1:0.1: I/O-Warror #0 now disconnected
[  135.008543][   T12] team0 (unregistering): Port device team_slave_1 removed
[  135.047818][   T12] team0 (unregistering): Port device team_slave_0 removed
[  135.951506][ T5910] loop2: detected capacity change from 0 to 512
[  135.975192][ T5910] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[  135.983633][ T5910] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2
[  135.995259][ T5910] EXT4-fs (loop2): 1 truncate cleaned up
[  136.002411][ T5910] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  136.227437][ T5692] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.258348][ T5678] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  136.280156][ T5678] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  136.318993][ T5678] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  136.325996][  T934] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  136.369956][ T5692] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.395900][ T5678] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  136.432907][ T5498] 8021q: adding VLAN 0 to HW filter on device bond0
[  136.479450][ T5692] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.524872][  T934] usb 6-1: Using ep0 maxpacket: 8
[  136.561172][  T934] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  136.582687][  T934] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  136.601173][ T5692] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.601366][  T934] usb 6-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00
[  136.633799][  T934] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  136.668922][  T934] usb 6-1: config 0 descriptor??
[  136.709593][ T5498] 8021q: adding VLAN 0 to HW filter on device team0
[  136.758116][ T3031] bridge0: port 1(bridge_slave_0) entered blocking state
[  136.766090][ T3031] bridge0: port 1(bridge_slave_0) entered forwarding state
[  136.840818][ T3031] bridge0: port 2(bridge_slave_1) entered blocking state
[  136.848037][ T3031] bridge0: port 2(bridge_slave_1) entered forwarding state
[  136.871151][ T5233] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.041738][ T5933] loop2: detected capacity change from 0 to 128
[  137.042865][   T12] bridge_slave_1: left allmulticast mode
[  137.055747][ T5933] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  137.072253][   T12] bridge_slave_1: left promiscuous mode
[  137.083604][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  137.102172][   T12] bridge_slave_0: left allmulticast mode
[  137.113424][   T12] bridge_slave_0: left promiscuous mode
[  137.116049][  T934] aquacomputer_d5next 0003:0C70:F0BD.0001: unknown main item tag 0xe
[  137.119328][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  137.159906][  T934] aquacomputer_d5next 0003:0C70:F0BD.0001: hidraw0: USB HID v0.00 Device [HID 0c70:f0bd] on usb-dummy_hcd.5-1/input0
[  137.559538][  T934] usb 6-1: USB disconnect, device number 4
[  138.561310][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  138.585408][ T5956] loop5: detected capacity change from 0 to 512
[  138.598125][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  138.614636][ T5956] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.154: couldn't read orphan inode 17 (err -116)
[  138.614937][   T12] bond0 (unregistering): Released all slaves
[  138.650381][ T5956] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  138.763918][ T5956] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback.
[  138.826842][ T5230] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.357012][ T5692] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  139.666616][ T5692] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  139.688261][ T5967] loop5: detected capacity change from 0 to 1024
[  139.774722][ T5967] hfsplus: invalid catalog btree flag
[  139.780489][ T5967] hfsplus: failed to load catalog file
[  140.172836][ T5692] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  140.325997][ T5692] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  140.439764][   T12] hsr_slave_0: left promiscuous mode
[  140.472091][   T12] hsr_slave_1: left promiscuous mode
[  140.495066][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  140.502519][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  140.530822][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  140.553356][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  140.600049][   T12] veth1_macvtap: left promiscuous mode
[  140.613383][   T12] veth0_macvtap: left promiscuous mode
[  140.619475][   T12] veth1_vlan: left promiscuous mode
[  140.635348][   T12] veth0_vlan: left promiscuous mode
[  140.840539][ T5240] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  140.850290][ T5240] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  140.858377][ T5240] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  140.870228][ T5240] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  140.885250][ T5240] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  140.892609][ T5240] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  141.459051][   T12] team0 (unregistering): Port device team_slave_1 removed
[  141.513115][   T12] team0 (unregistering): Port device team_slave_0 removed
[  142.141047][ T5678] 8021q: adding VLAN 0 to HW filter on device bond0
[  142.311847][ T5498] 8021q: adding VLAN 0 to HW filter on device batadv0
[  142.365480][ T5678] 8021q: adding VLAN 0 to HW filter on device team0
[  142.504517][ T5234] bridge0: port 1(bridge_slave_0) entered blocking state
[  142.511818][ T5234] bridge0: port 1(bridge_slave_0) entered forwarding state
[  142.525277][ T5234] bridge0: port 2(bridge_slave_1) entered blocking state
[  142.532428][ T5234] bridge0: port 2(bridge_slave_1) entered forwarding state
[  142.682602][ T5678] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  142.700440][ T5678] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  142.741906][ T5717] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  142.755784][ T5717] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  142.883739][ T5717] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  142.921691][ T5717] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  142.953432][ T5236] Bluetooth: hci4: command tx timeout
[  142.999943][ T5498] veth0_vlan: entered promiscuous mode
[  143.178396][ T5498] veth1_vlan: entered promiscuous mode
[  143.270955][ T5692] 8021q: adding VLAN 0 to HW filter on device bond0
[  143.304999][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.429961][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.494118][ T5678] 8021q: adding VLAN 0 to HW filter on device batadv0
[  143.524534][ T5989] chnl_net:caif_netlink_parms(): no params data found
[  143.607597][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.700128][ T5498] veth0_macvtap: entered promiscuous mode
[  143.726476][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.776927][ T5498] veth1_macvtap: entered promiscuous mode
[  143.788783][ T5692] 8021q: adding VLAN 0 to HW filter on device team0
[  143.797862][ T5989] bridge0: port 1(bridge_slave_0) entered blocking state
[  143.807804][ T5989] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.815272][ T5989] bridge_slave_0: entered allmulticast mode
[  143.822554][ T5989] bridge_slave_0: entered promiscuous mode
[  143.850318][ T5989] bridge0: port 2(bridge_slave_1) entered blocking state
[  143.858452][ T5989] bridge0: port 2(bridge_slave_1) entered disabled state
[  143.866767][ T5989] bridge_slave_1: entered allmulticast mode
[  143.874653][ T5989] bridge_slave_1: entered promiscuous mode
[  143.945145][ T5989] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  143.959078][ T5989] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  143.974734][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[  143.981973][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[  144.062956][ T3031] bridge0: port 2(bridge_slave_1) entered blocking state
[  144.070183][ T3031] bridge0: port 2(bridge_slave_1) entered forwarding state
[  144.122835][ T5989] team0: Port device team_slave_0 added
[  144.132188][ T5989] team0: Port device team_slave_1 added
[  144.138704][ T5678] veth0_vlan: entered promiscuous mode
[  144.149720][ T5498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  144.160993][ T5498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  144.171117][ T5498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  144.181651][ T5498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  144.193562][ T5498] batman_adv: batadv0: Interface activated: batadv_slave_0
[  144.306128][ T5498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  144.317354][ T5498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  144.327504][ T5498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  144.338119][ T5498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  144.352434][ T5498] batman_adv: batadv0: Interface activated: batadv_slave_1
[  144.366430][ T5989] batman_adv: batadv0: Adding interface: batadv_slave_0
[  144.373759][ T5989] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  144.407321][ T5989] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  144.420286][ T5989] batman_adv: batadv0: Adding interface: batadv_slave_1
[  144.427382][ T5989] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  144.454728][ T5989] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  144.490898][   T12] bridge_slave_1: left allmulticast mode
[  144.497676][   T12] bridge_slave_1: left promiscuous mode
[  144.503564][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.515707][   T12] bridge_slave_0: left allmulticast mode
[  144.521361][   T12] bridge_slave_0: left promiscuous mode
[  144.528101][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.880582][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  144.892164][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  144.903799][   T12] bond0 (unregistering): Released all slaves
[  144.921762][ T5498] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  144.931599][ T5498] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  144.940406][ T5498] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  144.949270][ T5498] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  145.024664][ T5236] Bluetooth: hci4: command tx timeout
[  145.027960][ T5678] veth1_vlan: entered promiscuous mode
[  145.051307][ T5989] hsr_slave_0: entered promiscuous mode
[  145.058410][ T5989] hsr_slave_1: entered promiscuous mode
[  145.077576][ T5717] 8021q: adding VLAN 0 to HW filter on device bond0
[  145.199242][ T5692] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  145.294997][ T5717] 8021q: adding VLAN 0 to HW filter on device team0
[  145.471949][   T12] hsr_slave_0: left promiscuous mode
[  145.484874][   T12] hsr_slave_1: left promiscuous mode
[  145.502708][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  145.514871][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  145.524468][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  145.532249][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  145.561230][   T12] veth1_macvtap: left promiscuous mode
[  145.567007][   T12] veth0_macvtap: left promiscuous mode
[  145.572768][   T12] veth1_vlan: left promiscuous mode
[  145.578462][   T12] veth0_vlan: left promiscuous mode
[  146.198056][   T12] team0 (unregistering): Port device team_slave_1 removed
[  146.245127][   T12] team0 (unregistering): Port device team_slave_0 removed
[  146.624934][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[  146.632088][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[  146.714701][ T5296] bridge0: port 2(bridge_slave_1) entered blocking state
[  146.721884][ T5296] bridge0: port 2(bridge_slave_1) entered forwarding state
[  146.785428][ T5678] veth0_macvtap: entered promiscuous mode
[  146.886878][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  146.905030][ T5678] veth1_macvtap: entered promiscuous mode
[  146.924005][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  147.103559][ T5236] Bluetooth: hci4: command tx timeout
[  147.116301][ T1048] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  147.127501][ T5692] 8021q: adding VLAN 0 to HW filter on device batadv0
[  147.141965][ T1048] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  147.188663][ T5678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  147.220352][ T5678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  147.238238][ T5678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  147.249091][ T5678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  147.273021][ T5678] batman_adv: batadv0: Interface activated: batadv_slave_0
[  147.311480][ T5717] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  147.340656][ T5717] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  147.396246][ T5678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  147.429406][ T5678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  147.460335][ T5678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  147.492283][ T5678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  147.520212][ T5678] batman_adv: batadv0: Interface activated: batadv_slave_1
[  147.576610][ T6069] netlink: 24 bytes leftover after parsing attributes in process `syz.5.165'.
[  147.840738][ T5678] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  147.854050][ T5678] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  147.862766][ T5678] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  147.871495][ T5678] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  148.173277][ T5692] veth0_vlan: entered promiscuous mode
[  148.246079][ T5692] veth1_vlan: entered promiscuous mode
[  148.299634][ T5989] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  148.339338][ T5717] 8021q: adding VLAN 0 to HW filter on device batadv0
[  148.362582][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  148.393650][ T5989] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  148.426570][ T5989] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  148.459143][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  150.003886][ T5236] Bluetooth: hci4: command tx timeout
[  150.432792][ T5989] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  150.500933][ T5692] veth0_macvtap: entered promiscuous mode
[  150.665614][ T5692] veth1_macvtap: entered promiscuous mode
[  150.712755][ T6096] loop5: detected capacity change from 0 to 256
[  150.736063][ T5655] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  150.749446][ T5655] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  151.079870][ T5692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  151.607280][ T5692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.617520][ T5692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  151.628116][ T5692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.887874][ T5692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  151.917844][ T5692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.957812][ T5692] batman_adv: batadv0: Interface activated: batadv_slave_0
[  152.022738][ T5692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  152.074084][ T5692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  152.100380][ T5692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  152.129716][ T5692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  152.149244][ T5692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  152.167888][ T5692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  152.182435][ T5692] batman_adv: batadv0: Interface activated: batadv_slave_1
[  152.202546][   T29] audit: type=1326 audit(1722967036.213:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6111 comm="syz.5.162" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f09a2d779f9 code=0x0
[  152.366735][ T5692] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  152.412752][ T5692] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  152.435616][ T5692] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  152.460714][ T5692] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  152.938353][ T6123] loop0: detected capacity change from 0 to 256
[  156.292653][ T5989] 8021q: adding VLAN 0 to HW filter on device bond0
[  156.522067][ T5717] veth0_vlan: entered promiscuous mode
[  156.633385][ T5338] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  156.662968][ T5989] 8021q: adding VLAN 0 to HW filter on device team0
[  156.752910][ T5717] veth1_vlan: entered promiscuous mode
[  156.821670][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[  156.828881][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[  156.846334][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  156.863470][ T5338] usb 2-1: Using ep0 maxpacket: 8
[  156.871227][ T5338] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  156.892779][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  156.904030][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[  156.911191][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[  156.918863][ T5338] usb 2-1: config 0 interface 0 altsetting 253 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  156.938601][ T5338] usb 2-1: config 0 interface 0 has no altsetting 0
[  156.954662][ T5338] usb 2-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.00
[  156.971869][ T5338] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.991249][ T5338] usb 2-1: config 0 descriptor??
[  157.037919][ T5338] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input6
[  157.098699][ T1048] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  157.118881][ T1048] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  157.150496][ T6150] netlink: 20 bytes leftover after parsing attributes in process `syz.0.170'.
[  157.153512][ T5301] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  157.181018][ T5717] veth0_macvtap: entered promiscuous mode
[  157.231400][ T4659] bcm5974 2-1:0.0: could not read from device
[  157.289981][ T5338] usb 2-1: USB disconnect, device number 2
[  157.394796][ T5717] veth1_macvtap: entered promiscuous mode
[  157.403793][ T5301] usb 6-1: Using ep0 maxpacket: 16
[  157.439408][ T5301] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  157.441886][ T5989] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  157.461018][ T5301] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.484458][ T5301] usb 6-1: config 0 descriptor??
[  157.507566][ T5301] gspca_main: sonixj-2.14.0 probing 0471:0327
[  157.586096][ T5717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  157.633366][ T5717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  157.686213][ T5717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  157.739994][ T5717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  157.794006][ T5717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  157.835401][ T5717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  157.858272][ T5717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  157.905908][ T5717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  157.981578][ T5717] batman_adv: batadv0: Interface activated: batadv_slave_0
[  158.105324][ T5717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  158.193533][ T5717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.248396][ T5717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  158.298999][ T5717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.325440][ T6169] netlink: 36 bytes leftover after parsing attributes in process `syz.0.172'.
[  158.349922][ T5717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  158.383423][ T5717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.400228][ T5717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  158.411234][ T5717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.428913][ T5717] batman_adv: batadv0: Interface activated: batadv_slave_1
[  158.444846][ T5717] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  158.474434][ T5717] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  158.495766][ T5717] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  158.525262][ T5717] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  158.535684][    T8] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  158.763358][    T8] usb 2-1: Using ep0 maxpacket: 16
[  159.655842][    T8] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  159.688817][    T8] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice= 0.40
[  159.704762][ T5989] 8021q: adding VLAN 0 to HW filter on device batadv0
[  159.709596][    T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  159.720675][    T8] usb 2-1: Product: syz
[  159.726364][    T8] usb 2-1: Manufacturer: syz
[  159.730982][    T8] usb 2-1: SerialNumber: syz
[  159.791446][    T8] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input7
[  160.092983][    T8] usb 2-1: USB disconnect, device number 3
[  160.099305][ T5989] veth0_vlan: entered promiscuous mode
[  160.138774][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  160.147130][ T5301] gspca_sonixj: reg_r err -71
[  160.151878][ T5301] sonixj 6-1:0.0: probe with driver sonixj failed with error -71
[  160.177812][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  160.219079][ T5301] usb 6-1: USB disconnect, device number 5
[  160.316726][ T5989] veth1_vlan: entered promiscuous mode
[  160.365310][ T5655] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  160.388449][ T5655] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  160.476784][ T5989] veth0_macvtap: entered promiscuous mode
[  160.554889][ T5989] veth1_macvtap: entered promiscuous mode
[  160.688718][ T5989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  160.720266][ T5989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  160.734262][ T5989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  160.745087][ T6205] netlink: 52 bytes leftover after parsing attributes in process `syz.4.106'.
[  160.745640][ T6205] unsupported nlmsg_type 40
[  160.826725][ T5989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  160.837815][ T5989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  160.848818][ T5989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  160.894822][ T5989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  160.932938][ T5989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  160.967710][ T5989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  161.043643][ T5989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  162.007570][ T5989] batman_adv: batadv0: Interface activated: batadv_slave_0
[  162.259241][ T5989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  162.263525][ T5301] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  162.272532][ T5989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  162.336395][ T5989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  162.383332][ T5989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  162.421539][ T5989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  162.508815][ T5989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  162.534153][ T5301] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[  162.550235][ T5989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  162.578916][ T5301] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.616822][ T5989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  162.635225][ T5301] usb 2-1: Product: syz
[  162.651368][ T5301] usb 2-1: Manufacturer: syz
[  162.669147][ T5301] usb 2-1: SerialNumber: syz
[  162.675092][ T5989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  162.690188][ T6234] vivid-000: disconnect
[  162.698558][ T5989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  162.712068][ T5301] usb 2-1: config 0 descriptor??
[  162.723145][ T6234] vivid-000: reconnect
[  162.763101][ T5989] batman_adv: batadv0: Interface activated: batadv_slave_1
[  162.776930][ T5297] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  162.809286][ T6219] netlink: 'syz.4.106': attribute type 63 has an invalid length.
[  162.856435][ T5989] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  162.946173][ T5989] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  162.959762][ T5301] hso 2-1:0.0: Can't find BULK IN endpoint
[  162.989568][ T5301] usb-storage 2-1:0.0: USB Mass Storage device detected
[  162.995700][ T5989] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  163.018211][ T5297] usb 6-1: Using ep0 maxpacket: 32
[  163.038446][ T5989] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  163.066200][ T5297] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  163.086815][ T5297] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  163.098286][ T5297] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  163.122274][ T5297] usb 6-1: Product: syz
[  163.126776][ T5297] usb 6-1: Manufacturer: syz
[  163.131538][ T5297] usb 6-1: SerialNumber: syz
[  163.140909][ T5297] usb 6-1: config 0 descriptor??
[  163.150450][ T6229] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  163.214088][ T6242] loop3: detected capacity change from 0 to 256
[  163.271906][ T6242] exfat: Deprecated parameter 'namecase'
[  163.409386][ T6242] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  163.506115][ T5301] usb 2-1: USB disconnect, device number 4
[  163.535463][ T5338] usb 6-1: USB disconnect, device number 6
[  163.544343][ T6242] syz.3.184: attempt to access beyond end of device
[  163.544343][ T6242] loop3: rw=524288, sector=34359738488, nr_sectors = 1 limit=256
[  163.886670][ T6242] syz.3.184: attempt to access beyond end of device
[  163.886670][ T6242] loop3: rw=0, sector=34359738488, nr_sectors = 1 limit=256
[  164.243499][ T6245] netlink: 12 bytes leftover after parsing attributes in process `syz.0.183'.
[  164.254827][   T29] audit: type=1800 audit(1722967048.223:8): pid=6242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.184" name="file1" dev="loop3" ino=1048639 res=0 errno=0
[  164.426514][ T6242] exFAT-fs (loop3): error, invalid size(size(4096) > aligned(512)
[  164.426514][ T6242] 
[  164.733435][    T8] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  164.754350][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  164.778550][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  164.876769][ T1048] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  164.902782][ T1048] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  164.923437][ T5338] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  164.953416][    T8] usb 5-1: Using ep0 maxpacket: 16
[  164.982427][    T8] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  165.009565][    T8] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87
[  165.055583][    T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11
[  165.080836][    T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024
[  165.094711][ T5296] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  165.117625][    T8] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  165.159691][    T8] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[  165.203890][    T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.234376][ T6271] loop2: detected capacity change from 0 to 512
[  165.240784][    T8] usb 5-1: Product: syz
[  165.251154][    T8] usb 5-1: Manufacturer: syz
[  165.269121][    T8] usb 5-1: SerialNumber: syz
[  165.292274][ T6271] ext4: Bad value for 'barrier'
[  165.299946][ T5296] usb 4-1: Using ep0 maxpacket: 16
[  165.343544][ T5296] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  165.381313][    T8] usb 5-1: config 0 descriptor??
[  165.401541][ T5338] usb 1-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice=6c.69
[  165.411356][ T5338] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  165.436167][ T5338] usb 1-1: config 0 descriptor??
[  165.455969][ T5338] gspca_main: sunplus-2.14.0 probing 052b:1803
[  165.469783][ T5296] usb 4-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice= 0.40
[  165.483989][ T6271] loop2: detected capacity change from 0 to 512
[  165.511495][ T6271] EXT4-fs: Ignoring removed bh option
[  165.584988][ T6274] loop1: detected capacity change from 0 to 512
[  165.639202][ T6274] EXT4-fs (loop1): blocks per group (95) and clusters per group (32768) inconsistent
[  165.801445][ T6271] ext4: Unknown parameter 'auto_da_alloc.smackfsfloor'
[  166.017972][ T5338] gspca_sunplus: reg_r err -71
[  166.022885][ T5338] sunplus 1-1:0.0: probe with driver sunplus failed with error -71
[  166.108265][ T5338] usb 1-1: USB disconnect, device number 2
[  166.176484][ T6269] loop5: detected capacity change from 0 to 2048
[  166.311207][ T6269] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  166.361697][ T6271] loop2: detected capacity change from 0 to 256
[  166.604832][    T8] appledisplay: Apple Cinema Display connected
[  166.630835][ T5296] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.652428][ T5296] usb 4-1: Product: syz
[  166.658420][ T5296] usb 4-1: Manufacturer: syz
[  166.664243][ T5296] usb 4-1: SerialNumber: syz
[  166.716187][    T8] usb 5-1: USB disconnect, device number 3
[  166.722047][    C0] usb 5-1: appledisplay_complete - usb_submit_urb failed with result -19
[  166.745832][ T5296] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input8
[  166.791435][    T8] appledisplay: Apple Cinema Display disconnected
[  167.012872][ T6280] netlink: 2 bytes leftover after parsing attributes in process `syz.0.195'.
[  167.047001][ T5338] usb 4-1: USB disconnect, device number 3
[  167.194510][ T5297] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  167.425330][ T5297] usb 2-1: Using ep0 maxpacket: 8
[  167.452846][ T5297] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  167.470190][ T5297] usb 2-1: config 0 has no interface number 0
[  167.480295][ T5297] usb 2-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f
[  167.530381][ T5297] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  167.544584][ T5297] usb 2-1: Product: syz
[  167.550513][ T5297] usb 2-1: Manufacturer: syz
[  167.555862][ T5297] usb 2-1: SerialNumber: syz
[  167.566599][ T5297] usb 2-1: config 0 descriptor??
[  167.579153][ T5297] usb 2-1: selecting invalid altsetting 2
[  167.587096][ T5297] i2c-cp2615 2-1:0.1: probe with driver i2c-cp2615 failed with error -22
[  168.814222][ T5234] usb 2-1: USB disconnect, device number 5
[  169.704931][ T6301] syz.5.201 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  172.791364][ T6335] netlink: 32 bytes leftover after parsing attributes in process `syz.0.211'.
[  172.829154][ T5296] IPVS: starting estimator thread 0...
[  172.857463][ T6340] Bluetooth: MGMT ver 1.23
[  172.943302][ T6342] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  173.093846][ T5338] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  173.155110][ T6339] IPVS: using max 15 ests per chain, 36000 per kthread
[  173.823396][ T5338] usb 2-1: Using ep0 maxpacket: 8
[  173.849870][ T5338] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  173.886500][ T5338] usb 2-1: config 0 has no interface number 0
[  173.909834][ T5338] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  173.959638][ T5338] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  173.991972][ T5338] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  174.017582][ T6351] loop4: detected capacity change from 0 to 764
[  174.028857][ T6351] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  174.050717][ T6351] Symlink component flag not implemented
[  174.066937][ T6351] Symlink component flag not implemented
[  174.086145][ T6351] Symlink component flag not implemented (128)
[  174.099183][ T5338] usb 2-1: config 0 descriptor??
[  174.118285][ T6351] Symlink component flag not implemented (122)
[  174.172563][ T5338] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  174.196631][ T6351] netlink: 88 bytes leftover after parsing attributes in process `syz.4.217'.
[  174.419126][ T5338] usb 2-1: USB disconnect, device number 6
[  174.424991][    C1] iowarrior 2-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19
[  174.494511][ T5338] iowarrior 2-1:0.1: I/O-Warror #0 now disconnected
[  174.718273][ T6358] loop0: detected capacity change from 0 to 2048
[  174.824558][ T6358] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  175.074535][   T11] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  175.093555][ T5338] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  175.120767][ T6368] tipc: Started in network mode
[  175.143566][   T11] EXT4-fs (loop0): Remounting filesystem read-only
[  175.159070][ T6368] tipc: Node identity 6ae00239eca4, cluster identity 4711
[  175.188310][ T6368] tipc: Enabled bearer <eth:syzkaller0>, priority 30
[  175.193019][ T5498] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  175.313314][ T5338] usb 4-1: Using ep0 maxpacket: 32
[  175.342136][ T5338] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  175.385088][ T5338] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  175.403324][ T5338] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  175.424137][ T5338] usb 4-1: Product: syz
[  175.428319][ T5338] usb 4-1: Manufacturer: syz
[  175.463692][ T5338] usb 4-1: SerialNumber: syz
[  175.494403][ T5338] usb 4-1: config 0 descriptor??
[  175.521199][ T6364] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  175.572221][ T6368] tipc: Resetting bearer <eth:syzkaller0>
[  175.606911][ T5240] Bluetooth: hci5: sending frame failed (-49)
[  175.615198][ T5236] Bluetooth: hci5: Opcode 0x1003 failed: -49
[  175.635253][ T6374] bridge0: port 2(bridge_slave_1) entered disabled state
[  175.645587][ T6374] bridge0: port 1(bridge_slave_0) entered disabled state
[  175.738464][ T6374] bridge0: entered allmulticast mode
[  175.830523][ T6377] bridge0: port 2(bridge_slave_1) entered blocking state
[  175.836781][ T6387] loop4: detected capacity change from 0 to 64
[  175.837806][ T6377] bridge0: port 2(bridge_slave_1) entered forwarding state
[  175.852317][ T6377] bridge0: port 1(bridge_slave_0) entered blocking state
[  175.859536][ T6377] bridge0: port 1(bridge_slave_0) entered forwarding state
[  175.931273][ T5297] usb 4-1: USB disconnect, device number 4
[  175.973924][ T6377] bridge0: entered promiscuous mode
[  176.093356][    T8] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  176.269557][ T6367] tipc: Resetting bearer <eth:syzkaller0>
[  176.296244][    T8] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  176.336874][    T8] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  176.374680][    T8] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  176.393366][    T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  176.409415][    T8] usb 3-1: Product: syz
[  176.415557][ T5296] tipc: Node number set to 2252603961
[  176.428940][    T8] usb 3-1: Manufacturer: syz
[  176.439958][    T8] usb 3-1: SerialNumber: syz
[  176.713138][    T8] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  176.767559][ T5296] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  176.846480][    T8] usb 3-1: USB disconnect, device number 4
[  177.004899][ T5296] usb 1-1: New USB device found, idVendor=06e0, idProduct=f114, bcdDevice= 9.6c
[  177.014700][ T5296] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.033305][ T5296] usb 1-1: Product: syz
[  177.037487][ T5296] usb 1-1: Manufacturer: syz
[  177.042106][ T5296] usb 1-1: SerialNumber: syz
[  177.135134][ T5296] usb 1-1: config 0 descriptor??
[  177.206619][ T5296] ti_usb_3410_5052 1-1:0.0: required endpoints missing
[  177.472576][ T5394] udevd[5394]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  177.499572][ T5296] usb 1-1: USB disconnect, device number 3
[  177.797707][ T6413] loop2: detected capacity change from 0 to 128
[  178.147207][ T6416] syz.0.236[6416] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  178.147390][ T6416] syz.0.236[6416] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  179.126508][ T5989] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000074f)
[  179.149395][ T5989] FAT-fs (loop2): Filesystem has been set read-only
[  179.161535][ T5989] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000074f)
[  179.247265][ T5297] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  179.446527][ T5297] usb 1-1: Using ep0 maxpacket: 16
[  179.467188][ T5297] usb 1-1: config 1 has an invalid interface descriptor of length 2, skipping
[  179.476463][ T5297] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  179.495210][ T5297] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  179.506948][ T5297] usb 1-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping
[  179.519367][ T5297] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  179.530392][ T5297] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  179.538879][ T5297] usb 1-1: Product: syz
[  179.543675][ T5297] usb 1-1: Manufacturer: syz
[  179.548285][ T5297] usb 1-1: SerialNumber: syz
[  179.782420][ T5297] usb 1-1: 0:2 : does not exist
[  179.843899][ T5297] usb 1-1: USB disconnect, device number 4
[  180.090845][ T6367] tipc: Disabling bearer <eth:syzkaller0>
[  180.101816][ T6397] tipc: Started in network mode
[  180.107212][ T6397] tipc: Node identity aaaaaaaaaa41, cluster identity 4711
[  180.115086][ T6397] tipc: Enabled bearer <eth:geneve1>, priority 10
[  180.166926][ T6276] udevd[6276]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  180.281888][ T6421] loop4: detected capacity change from 0 to 512
[  180.327421][ T6421] ext4: Bad value for 'barrier'
[  180.461638][ T6421] loop4: detected capacity change from 0 to 512
[  180.462536][ T6423] loop5: detected capacity change from 0 to 128
[  180.501011][ T6421] EXT4-fs: Ignoring removed bh option
[  180.523399][ T6421] ext4: Unknown parameter 'auto_da_alloc.smackfsfloor'
[  180.525409][ T6425] loop3: detected capacity change from 0 to 64
[  180.664527][ T6426] loop4: detected capacity change from 0 to 256
[  180.915320][ T6429] hfs: request for non-existent node 131072 in B*Tree
[  180.922265][ T6429] hfs: request for non-existent node 131072 in B*Tree
[  181.005428][   T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  181.197318][   T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  181.243523][ T5239] tipc: Node number set to 15444650
[  181.342113][   T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  181.777986][   T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  181.837887][ T6439] loop5: detected capacity change from 0 to 2048
[  181.931703][ T6439] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  182.167894][ T6446] loop3: detected capacity change from 0 to 128
[  182.283763][ T5296] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  182.424939][ T6446] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  182.727495][   T35] bridge_slave_1: left allmulticast mode
[  182.764694][ T6446] ext4 filesystem being mounted at /13/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  183.033737][   T35] bridge_slave_1: left promiscuous mode
[  183.039894][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[  183.114965][   T35] bridge_slave_0: left allmulticast mode
[  183.141234][   T35] bridge_slave_0: left promiscuous mode
[  183.159571][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[  183.367652][ T5296] usb 2-1: config 0 has an invalid interface number: 255 but max is 0
[  183.388002][ T5296] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  183.437343][ T5296] usb 2-1: config 0 has no interface number 0
[  183.453286][ T5296] usb 2-1: config 0 interface 255 has no altsetting 0
[  183.469033][ T5296] usb 2-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53
[  183.490986][ T5296] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  183.592064][ T5296] usb 2-1: config 0 descriptor??
[  183.666679][ T5692] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  183.694468][ T5296] usb 2-1: selecting invalid altsetting 0
[  184.115023][ T6460] loop4: detected capacity change from 0 to 16
[  184.127851][ T6460] erofs: Unknown parameter '������������������0xffffffffffffffff]����#[8����+K���W��䶓�?�҇�987'
[  184.510076][ T5296] usb 2-1: USB disconnect, device number 7
[  184.774771][ T5240] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  184.791074][ T5240] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  184.802120][ T5240] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  184.820823][ T5240] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  184.831506][ T5240] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  184.839338][ T5240] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  184.893066][ T5452] udevd[5452]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.255/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  186.097848][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  186.127941][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  186.188396][   T35] bond0 (unregistering): Released all slaves
[  186.270178][ T6481] netlink: 36397 bytes leftover after parsing attributes in process `syz.1.257'.
[  186.654699][   T29] audit: type=1326 audit(1722967070.663:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6490 comm="syz.4.259" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f13383779f9 code=0x0
[  186.699349][  T934] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  186.965256][ T5240] Bluetooth: hci4: command tx timeout
[  188.104528][ T6506] loop3: detected capacity change from 0 to 256
[  188.251184][ T6506] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  188.588147][ T6506] fuse: Bad value for 'group_id'
[  188.593186][ T6506] fuse: Bad value for 'group_id'
[  188.797035][  T934] usb 1-1: Using ep0 maxpacket: 16
[  189.076072][ T5240] Bluetooth: hci4: command tx timeout
[  189.133354][  T934] usb 1-1: unable to read config index 0 descriptor/start: -71
[  189.140968][  T934] usb 1-1: can't read configurations, error -71
[  192.639377][ T6524] loop3: detected capacity change from 0 to 512
[  192.654557][ T5240] Bluetooth: hci4: command tx timeout
[  192.716477][ T6524] EXT4-fs (loop3): blocks per group (95) and clusters per group (32768) inconsistent
[  193.849678][ T6538] loop1: detected capacity change from 0 to 256
[  193.885146][ T1254] ieee802154 phy0 wpan0: encryption failed: -22
[  193.891472][ T1254] ieee802154 phy1 wpan1: encryption failed: -22
[  194.035119][ T6538] exfat: Deprecated parameter 'utf8'
[  194.040578][ T6538] exfat: Deprecated parameter 'namecase'
[  194.097521][ T6538] exfat: Deprecated parameter 'utf8'
[  194.113787][ T6542] loop4: detected capacity change from 0 to 64
[  194.155562][ T6546] netlink: 240 bytes leftover after parsing attributes in process `syz.3.273'.
[  194.189113][ T6538] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  194.263545][ T6546] NCSI netlink: No device for ifindex 33554690
[  194.358051][ T6538] exFAT-fs (loop1): hint_cluster is invalid (1), rewind to the first cluster
[  194.491087][ T6552] hfs: request for non-existent node 131072 in B*Tree
[  194.507281][ T6552] hfs: request for non-existent node 131072 in B*Tree
[  194.679407][   T35] hsr_slave_0: left promiscuous mode
[  194.690076][ T6557] loop3: detected capacity change from 0 to 764
[  194.696867][   T35] hsr_slave_1: left promiscuous mode
[  194.703772][ T5240] Bluetooth: hci4: command tx timeout
[  194.719355][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  194.744931][ T6557] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  194.749831][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[  194.799148][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  194.808629][ T6557] Symlink component flag not implemented
[  194.824202][ T6557] Symlink component flag not implemented
[  194.832165][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[  194.869962][ T6557] Symlink component flag not implemented (128)
[  194.893561][ T5239] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  194.930669][ T6557] Symlink component flag not implemented (122)
[  194.969747][   T35] veth1_macvtap: left promiscuous mode
[  194.983566][ T6561] netlink: 88 bytes leftover after parsing attributes in process `syz.3.275'.
[  195.014385][   T35] veth0_macvtap: left promiscuous mode
[  195.034495][   T35] veth1_vlan: left promiscuous mode
[  195.049358][   T35] veth0_vlan: left promiscuous mode
[  195.143376][ T5239] usb 2-1: Using ep0 maxpacket: 16
[  195.160437][ T5239] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  195.223360][ T5239] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  195.233053][ T5239] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  195.307518][ T5239] usb 2-1: New USB device found, idVendor=04e6, idProduct=0007, bcdDevice= 1.75
[  195.336317][ T5239] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=5
[  195.342657][ T6566] loop4: detected capacity change from 0 to 256
[  195.357684][ T5239] usb 2-1: SerialNumber: syz
[  195.393854][ T5239] usb-storage 2-1:1.0: USB Mass Storage device detected
[  195.435343][ T5239] usb-storage 2-1:1.0: Quirks match for vid 04e6 pid 0007: 1
[  195.444856][ T6566] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d)
[  195.523651][ T6566] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  195.596878][   T29] audit: type=1800 audit(1722967079.613:10): pid=6566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.278" name="file2" dev="loop4" ino=1048659 res=0 errno=0
[  195.750749][ T6573] loop0: detected capacity change from 0 to 64
[  196.093406][ T5234] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  196.308957][ T5234] usb 6-1: Using ep0 maxpacket: 32
[  196.329887][ T5234] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  196.346179][ T5234] usb 6-1: config 0 has 2 interfaces, different from the descriptor's value: 1
[  196.376459][ T5234] usb 6-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14
[  196.411069][ T5234] usb 6-1: New USB device found, idVendor=0582, idProduct=002b, bcdDevice=9f.7f
[  196.432597][ T5234] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  196.466146][ T5234] usb 6-1: Product: syz
[  196.470427][ T5234] usb 6-1: Manufacturer: syz
[  196.486008][ T5234] usb 6-1: SerialNumber: syz
[  196.508088][ T5234] usb 6-1: config 0 descriptor??
[  196.807144][ T5234] usb 6-1: USB disconnect, device number 7
[  197.020977][ T6276] udevd[6276]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  197.128901][   T35] team0 (unregistering): Port device team_slave_1 removed
[  197.710790][   T35] team0 (unregistering): Port device team_slave_0 removed
[  197.900408][ T6590] loop4: detected capacity change from 0 to 512
[  197.911405][ T6591] netlink: 52 bytes leftover after parsing attributes in process `syz.5.286'.
[  198.029674][ T6590] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  198.058883][ T6590] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  198.162207][ T5717] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.733588][ T6591] netlink: 'syz.5.286': attribute type 63 has an invalid length.
[  199.748695][ T5234] usb 2-1: USB disconnect, device number 8
[  199.824315][ T5362] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  200.020237][ T6469] chnl_net:caif_netlink_parms(): no params data found
[  200.040390][ T6609] loop0: detected capacity change from 0 to 1024
[  200.053324][ T5362] usb 5-1: Using ep0 maxpacket: 16
[  200.077137][ T5362] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8
[  200.127596][ T5362] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[  200.181185][ T5362] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  200.239172][ T5362] usb 5-1: Product: syz
[  200.257899][ T5362] usb 5-1: Manufacturer: syz
[  200.292170][ T5362] usb 5-1: SerialNumber: syz
[  200.328108][ T5362] usb 5-1: config 0 descriptor??
[  200.364847][ T5362] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected
[  200.410058][ T5362] usb 5-1: Detected FT232R
[  200.510717][ T6620] loop5: detected capacity change from 0 to 256
[  201.093733][ T6469] bridge0: port 1(bridge_slave_0) entered blocking state
[  201.101030][ T6469] bridge0: port 1(bridge_slave_0) entered disabled state
[  201.193558][ T6469] bridge_slave_0: entered allmulticast mode
[  201.233156][ T6469] bridge_slave_0: entered promiscuous mode
[  201.248575][ T6469] bridge0: port 2(bridge_slave_1) entered blocking state
[  201.258279][ T6469] bridge0: port 2(bridge_slave_1) entered disabled state
[  201.265576][ T5362] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  201.272806][ T5362] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  201.290537][ T6469] bridge_slave_1: entered allmulticast mode
[  201.315828][ T5362] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71
[  201.433340][ T6469] bridge_slave_1: entered promiscuous mode
[  201.434295][ T6635] loop1: detected capacity change from 0 to 8
[  201.496295][ T6635] SQUASHFS error: zlib decompression failed, data probably corrupt
[  201.503919][ T5362] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  201.519643][ T6635] SQUASHFS error: Failed to read block 0x9b: -5
[  201.559557][ T5362] usb 5-1: USB disconnect, device number 4
[  201.567534][ T6635] SQUASHFS error: Unable to read metadata cache entry [99]
[  201.600709][ T6635] SQUASHFS error: Unable to read inode 0x127
[  201.665190][ T5362] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  201.681345][ T6469] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  201.945423][ T5362] ftdi_sio 5-1:0.0: device disconnected
[  201.969133][ T6469] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  203.354133][ T6651] loop0: detected capacity change from 0 to 1024
[  203.392140][ T6469] team0: Port device team_slave_0 added
[  203.404931][ T6653] loop4: detected capacity change from 0 to 16
[  203.442799][ T6469] team0: Port device team_slave_1 added
[  203.460616][ T6651] loop0: detected capacity change from 0 to 128
[  203.465512][ T6657] loop3: detected capacity change from 0 to 512
[  203.474465][ T6653] erofs: (device loop4): mounted with root inode @ nid 36.
[  203.511154][ T6658] loop5: detected capacity change from 0 to 128
[  203.535535][ T6651] Bluetooth: MGMT ver 1.23
[  203.546950][ T6658] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  203.598571][ T6660] loop1: detected capacity change from 0 to 2048
[  203.626719][ T6657] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  203.766038][ T6657] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  204.290226][ T6660] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  204.381584][ T6469] batman_adv: batadv0: Adding interface: batadv_slave_0
[  204.463680][ T6469] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  204.645802][ T6469] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  204.780393][ T5678] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  204.805570][ T6469] batman_adv: batadv0: Adding interface: batadv_slave_1
[  204.828947][ T6469] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  204.935391][ T6469] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  205.027305][ T5240] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  205.038168][ T5240] Bluetooth: hci3: Injecting HCI hardware error event
[  205.253651][ T5362] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  205.431236][ T6469] hsr_slave_0: entered promiscuous mode
[  205.480455][ T6469] hsr_slave_1: entered promiscuous mode
[  205.498971][ T5362] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  205.547712][ T5362] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  205.560988][ T6685] netlink: 12 bytes leftover after parsing attributes in process `syz.0.302'.
[  205.572678][ T5362] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  205.587882][ T5362] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  205.639793][ T5362] usb 5-1: Product: syz
[  205.648207][ T5362] usb 5-1: Manufacturer: syz
[  205.680951][ T5362] usb 5-1: SerialNumber: syz
[  205.811747][ T6683] netlink: 28 bytes leftover after parsing attributes in process `syz.0.302'.
[  205.982190][ T5362] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  206.205001][ T5362] usb 5-1: USB disconnect, device number 5
[  206.235222][ T5240] Bluetooth: hci3: command 0x0406 tx timeout
[  206.344186][ T6695] loop1: detected capacity change from 0 to 764
[  206.371138][ T5240] Bluetooth: hci3: hardware error 0x00
[  206.379777][ T6695] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  206.485819][ T6696] Symlink component flag not implemented
[  206.539778][ T5240] 
[  206.542139][ T5240] ============================================
[  206.548286][ T5240] WARNING: possible recursive locking detected
[  206.554520][ T5240] 6.11.0-rc2-syzkaller-00011-geb5e56d14912 #0 Not tainted
[  206.557907][ T6696] Symlink component flag not implemented
[  206.561613][ T5240] --------------------------------------------
[  206.561624][ T5240] kworker/u9:3/5240 is trying to acquire lock:
[  206.561639][ T5240] ffff88802f764948 ((wq_completion)hci3){+.+.}-{0:0}, at: __flush_workqueue+0x1b0/0x1710
[  206.589416][ T5240] 
[  206.589416][ T5240] but task is already holding lock:
[  206.596784][ T5240] ffff88802f764948 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830
[  206.607186][ T5240] 
[  206.607186][ T5240] other info that might help us debug this:
[  206.615291][ T5240]  Possible unsafe locking scenario:
[  206.615291][ T5240] 
[  206.622741][ T5240]        CPU0
[  206.626020][ T5240]        ----
[  206.629298][ T5240]   lock((wq_completion)hci3);
[  206.634078][ T5240]   lock((wq_completion)hci3);
[  206.636514][ T6697] netlink: 88 bytes leftover after parsing attributes in process `syz.1.308'.
[  206.638838][ T5240] 
[  206.638838][ T5240]  *** DEADLOCK ***
[  206.638838][ T5240] 
[  206.638847][ T5240]  May be due to missing lock nesting notation
[  206.638847][ T5240] 
[  206.664303][ T5240] 2 locks held by kworker/u9:3/5240:
[  206.669593][ T5240]  #0: ffff88802f764948 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830
[  206.680603][ T5240]  #1: ffffc9000319fd00 ((work_completion)(&hdev->error_reset)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830
[  206.693013][ T5240] 
[  206.693013][ T5240] stack backtrace:
[  206.698904][ T5240] CPU: 0 UID: 0 PID: 5240 Comm: kworker/u9:3 Not tainted 6.11.0-rc2-syzkaller-00011-geb5e56d14912 #0
[  206.709760][ T5240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  206.711183][ T6696] Symlink component flag not implemented (128)
[  206.719810][ T5240] Workqueue: hci3 hci_error_reset
[  206.719850][ T5240] Call Trace:
[  206.734288][ T5240]  <TASK>
[  206.737225][ T5240]  dump_stack_lvl+0x241/0x360
[  206.741937][ T5240]  ? __pfx_dump_stack_lvl+0x10/0x10
[  206.747171][ T5240]  ? srso_alias_return_thunk+0x5/0xfbef5
[  206.752829][ T5240]  ? print_deadlock_bug+0x479/0x620
[  206.758044][ T5240]  ? srso_alias_return_thunk+0x5/0xfbef5
[  206.763785][ T5240]  validate_chain+0x15d3/0x5900
[  206.768657][ T5240]  ? __pfx_validate_chain+0x10/0x10
[  206.773865][ T5240]  ? __pfx_validate_chain+0x10/0x10
[  206.779076][ T5240]  ? srso_alias_return_thunk+0x5/0xfbef5
[  206.784715][ T5240]  ? __pfx_validate_chain+0x10/0x10
[  206.789915][ T5240]  ? __pfx_validate_chain+0x10/0x10
[  206.795118][ T5240]  ? srso_alias_return_thunk+0x5/0xfbef5
[  206.800761][ T5240]  ? srso_alias_return_thunk+0x5/0xfbef5
[  206.806397][ T5240]  ? mark_lock+0x9a/0x350
[  206.810743][ T5240]  __lock_acquire+0x137a/0x2040
[  206.815615][ T5240]  lock_acquire+0x1ed/0x550
[  206.820218][ T5240]  ? __flush_workqueue+0x1b0/0x1710
[  206.825431][ T5240]  ? srso_alias_return_thunk+0x5/0xfbef5
[  206.831069][ T5240]  ? __pfx_lock_acquire+0x10/0x10
[  206.836105][ T5240]  ? __pfx_lockdep_init_map_type+0x10/0x10
[  206.841929][ T5240]  ? srso_alias_return_thunk+0x5/0xfbef5
[  206.847579][ T5240]  ? srso_alias_return_thunk+0x5/0xfbef5
[  206.853220][ T5240]  ? __init_swait_queue_head+0xae/0x150
[  206.858774][ T5240]  ? __flush_workqueue+0x1b0/0x1710
[  206.863983][ T5240]  __flush_workqueue+0x1c9/0x1710
[  206.869024][ T5240]  ? __flush_workqueue+0x1b0/0x1710
[  206.874242][ T5240]  ? rcu_is_watching+0x15/0xb0
[  206.879022][ T5240]  ? trace_contention_end+0x3c/0x120
[  206.884835][ T5240]  ? srso_alias_return_thunk+0x5/0xfbef5
[  206.890567][ T5240]  ? __pfx___flush_workqueue+0x10/0x10
[  206.896049][ T5240]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  206.902215][ T5240]  ? rcu_read_unlock_special+0x470/0x550
[  206.907853][ T5240]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  206.913836][ T5240]  drain_workqueue+0xc9/0x3a0
[  206.918540][ T5240]  destroy_workqueue+0xba/0xc40
[  206.923389][ T5240]  ? srso_alias_return_thunk+0x5/0xfbef5
[  206.929024][ T5240]  ? __rcu_read_unlock+0xa1/0x110
[  206.934052][ T5240]  hci_release_dev+0x169/0x16b0
[  206.938908][ T5240]  ? devres_release_all+0x1eb/0x250
[  206.944116][ T5240]  ? __pfx_hci_release_dev+0x10/0x10
[  206.949408][ T5240]  ? srso_alias_return_thunk+0x5/0xfbef5
[  206.955044][ T5240]  ? rcu_is_watching+0x15/0xb0
[  206.959817][ T5240]  ? device_release+0x66/0x1c0
[  206.964589][ T5240]  bt_host_release+0x83/0x90
[  206.969191][ T5240]  ? __pfx_bt_host_release+0x10/0x10
[  206.974489][ T5240]  device_release+0x9b/0x1c0
[  206.979089][ T5240]  kobject_put+0x231/0x480
[  206.983523][ T5240]  ? process_scheduled_works+0x945/0x1830
[  206.989248][ T5240]  process_scheduled_works+0xa2e/0x1830
[  206.994825][ T5240]  ? __pfx_process_scheduled_works+0x10/0x10
[  207.000815][ T5240]  ? assign_work+0x364/0x3d0
[  207.005417][ T5240]  worker_thread+0x86d/0xd40
[  207.010027][ T5240]  ? __kthread_parkme+0x169/0x1d0
[  207.015061][ T5240]  ? __pfx_worker_thread+0x10/0x10
[  207.020179][ T5240]  kthread+0x2f2/0x390
[  207.024260][ T5240]  ? __pfx_worker_thread+0x10/0x10
[  207.029376][ T5240]  ? __pfx_kthread+0x10/0x10
[  207.033979][ T5240]  ret_from_fork+0x4d/0x80
[  207.038403][ T5240]  ? __pfx_kthread+0x10/0x10
[  207.043004][ T5240]  ret_from_fork_asm+0x1a/0x30
[  207.047793][ T5240]  </TASK>
[  207.069506][ T6696] Symlink component flag not implemented (122)
[  207.100143][ T6697] ISOFS: Interleaved files not (yet) supported.
[  207.581745][ T6697] ISOFS: File unit size != 0 for ISO file (1856).
[  207.600525][ T5448] udevd[5448]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  207.626154][ T6697] ISOFS: Interleaved files not (yet) supported.
[  207.633295][ T6697] ISOFS: File unit size != 0 for ISO file (1856).
[  207.673542][ T6697] ISOFS: Interleaved files not (yet) supported.
[  207.682133][ T6697] ISOFS: File unit size != 0 for ISO file (1856).
[  208.338577][ T1057] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.505875][ T1057] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.630686][ T5692] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.715390][ T1057] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.804113][ T1057] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.043256][ T6469] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  209.056668][ T1057] bridge_slave_1: left allmulticast mode
[  209.062330][ T1057] bridge_slave_1: left promiscuous mode
[  209.074347][ T1057] bridge0: port 2(bridge_slave_1) entered disabled state
[  209.083794][ T1057] bridge_slave_0: left allmulticast mode
[  209.089574][ T1057] bridge_slave_0: left promiscuous mode
[  209.096150][ T1057] bridge0: port 1(bridge_slave_0) entered disabled state
[  209.314824][ T1057] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  209.326363][ T1057] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  209.340605][ T1057] bond0 (unregistering): Released all slaves
[  209.356636][ T6469] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  209.387277][ T6469] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  209.423793][ T6469] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  209.459208][ T1057] tipc: Left network mode
[  209.700054][ T1057] hsr_slave_0: left promiscuous mode
[  209.713974][ T1057] hsr_slave_1: left promiscuous mode
[  209.728005][ T1057] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  209.749416][ T1057] batman_adv: batadv0: Removing interface: batadv_slave_0
[  209.764016][ T1057] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  209.771596][ T1057] batman_adv: batadv0: Removing interface: batadv_slave_1
[  209.796558][ T1057] veth1_macvtap: left promiscuous mode
[  209.802102][ T1057] veth0_macvtap: left promiscuous mode
[  209.825185][ T1057] veth1_vlan: left promiscuous mode
[  209.830523][ T1057] veth0_vlan: left promiscuous mode
[  210.150466][ T1057] team0 (unregistering): Port device team_slave_1 removed
[  210.171285][ T1057] team0 (unregistering): Port device team_slave_0 removed
[  210.389911][ T6469] 8021q: adding VLAN 0 to HW filter on device bond0
[  210.438151][ T6469] 8021q: adding VLAN 0 to HW filter on device team0
[  210.471085][ T5338] bridge0: port 1(bridge_slave_0) entered blocking state
[  210.478438][ T5338] bridge0: port 1(bridge_slave_0) entered forwarding state
[  210.536267][ T5338] bridge0: port 2(bridge_slave_1) entered blocking state
[  210.543647][ T5338] bridge0: port 2(bridge_slave_1) entered forwarding state
[  210.959493][ T6469] 8021q: adding VLAN 0 to HW filter on device batadv0
[  211.050142][ T6469] veth0_vlan: entered promiscuous mode
[  211.071041][ T6469] veth1_vlan: entered promiscuous mode
[  211.117160][ T6469] veth0_macvtap: entered promiscuous mode
[  211.137892][ T6469] veth1_macvtap: entered promiscuous mode
[  211.162587][ T6469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  211.179392][ T6469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  211.189954][ T6469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  211.215315][ T6469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  211.229447][ T6469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  211.242374][ T6469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  211.253320][ T6469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  211.286936][ T6469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  211.306870][ T6469] batman_adv: batadv0: Interface activated: batadv_slave_0
[  211.335875][ T6469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  211.363295][ T6469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  211.373109][ T6469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  211.403265][ T6469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  211.413083][ T6469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  211.453287][ T6469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  211.473303][ T6469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  211.493287][ T6469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  211.514895][ T6469] batman_adv: batadv0: Interface activated: batadv_slave_1
[  211.546788][ T6469] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  211.563351][ T6469] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  211.572062][ T6469] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  211.603264][ T6469] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  211.696228][ T6469] ieee80211 phy26: Selected rate control algorithm 'minstrel_ht'
[  211.762507][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  211.777235][ T6469] ieee80211 phy27: Selected rate control algorithm 'minstrel_ht'
[  211.795679][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  211.859875][ T2921] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  211.875551][ T2921] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50