last executing test programs:

3m57.455984529s ago: executing program 5 (id=90):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=ANY=[@ANYBLOB="44000000100000000000000000000000000000009ef983b4d7b24b64992710872f6789e8af73e19d97", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128089fc0100626f6e64000000001400028005000e000000000005000d0000000000"], 0x44}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000fc0ef720c4108a81d39901020301090212000100000000090400000003"], 0x0)
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x14444, &(0x7f0000000380)=ANY=[], 0xfe, 0xc2a, &(0x7f0000001440)="$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")
mknod$loop(&(0x7f0000000040)='./file0\x00', 0xffe, 0x0)
chown(0x0, 0xee01, 0xee00)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000030c0), 0x200)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_open_dev$usbmon(&(0x7f00000000c0), 0x7, 0x161080)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
r4 = syz_open_procfs(0x0, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r5 = socket$packet(0x11, 0x2, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wg0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x8, &(0x7f0000000340)=ANY=[@ANYRES32=r5, @ANYRES32=0x0], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x90)
mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r3])
syz_open_dev$usbfs(0x0, 0x20000007d, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$inet(r7, &(0x7f0000008940), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000140)=0x5)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="60000000020601000000000000000000000000000e0003006269746d61703a697000000005000400000000000900dfff73797a320000000018000780000300800000000c00018008000140ac141400050005000200000005000100060000"], 0x60}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4800000010001f", @ANYRES16=r1], 0x3}}, 0x0)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
close(r8)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0xfffffd95)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000bf9800000000d42cc69427dffba00000560800"], &(0x7f0000000980)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, 0x0, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90)

3m35.94590138s ago: executing program 3 (id=73):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0)
openat$cgroup_devices(r1, &(0x7f00000003c0)='devices.deny\x00', 0x2, 0x0)
fcntl$setlease(r0, 0x400, 0x2)
fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000040), 0x0, 0x0, 0x0)
fremovexattr(r2, &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00')
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000200)={0x0, 0x5e, &(0x7f00000007c0)={&(0x7f0000000080)={0x48, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x2c, 0x33, @action={{{}, {}, @broadcast}, @sp_mp_close={0xf, 0x3, {{0x72, 0x6}, {0x75, 0x4, {0x0, 0x0, @void, @void, @void}}}}}}]}, 0x48}}, 0x0)
socket$packet(0x11, 0x3, 0x300)
bpf$PROG_LOAD_XDP(0x21, &(0x7f00000001c0)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r5)
sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r8, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7, 0x12}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0x10)

3m20.897384876s ago: executing program 5 (id=90):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=ANY=[@ANYBLOB="44000000100000000000000000000000000000009ef983b4d7b24b64992710872f6789e8af73e19d97", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128089fc0100626f6e64000000001400028005000e000000000005000d0000000000"], 0x44}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000fc0ef720c4108a81d39901020301090212000100000000090400000003"], 0x0)
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x14444, &(0x7f0000000380)=ANY=[], 0xfe, 0xc2a, &(0x7f0000001440)="$eJzs3UFsHNd9B+D/Gy3FldxWTJyodhsXm7ZIZcVyZUkxFatwVzXNNoAsC6GYWwCuxJW6MEUSJNXIRtoyvfTQQ4Ci6CEnAq1RIEUDoymCHtnWBZKLD0VOPREtbARFD2wRICeDwcy+FZcUZdEmRZH299mr3+zMe7PvzaxnaIFvXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEb/38sXTz6VH3QoAYC9dHvvq6TPu/wDwiXLV//8DAAAAAAAAAAAAAMB+l6KIxyPF7OXVNFG976pf6kzfvjM+Mrp1tSOpqnmoKl++6s+dOXvuS88Pn+/lB9ffbU/Gq2NXLzZemrk1O9een29PNsanO9dnJtvb3sNO6292sjoAjVuv3Z68cWO+cebZsxs23xl6b/Cx40MXhp8+9VSv7PjI6OhYX5nawEf+9Hvcb4TH4SjiVKR45ns/Sa2IKGLnx+IB352H7UjViZNVJ8ZHRquOTHVa0wvlxiu9A1FENPoqNXvHaA/OxY40IxbL5pcNPll2b2y2Nde6NtVuXGnNLXQWOjPTV1K3tWV/GlHE+RSxFBErg/fubiCKqEWK7xxbTdci4lDvOHyxGhh8/3YUD7GP21C2szEQsVQcgHO2jw1GEa9Eip++XcT18pjlV3wh4pUyfxDxZpkvRqTyi3Eu4t0tvkccTLUo4i/K839hNU1W14PedeXS1xpfmb4x01e2d1058PeHvbTPr031KKJVXfFX00f/YQcAAAAAAAAAAAAAAACA3XYkingyUrz8H39UjSuOalz6sQvDvz/0i/1jxp94wH7Kss9GxGKxvTG5h/MQ4ivpSkqPeCzxJ1k9ivjjPP7vW4+6MQAAAAAAAAAAAAAAAAAAAJ9oRfw4Urzwzom0FP1zinembzautq5NdWeF7c3925szfW1tba2RutnMOZFzscqBu+WW8/qVnFHk+jmbOSdyLuZcyrmccyVnHMr1czZzTuRczLmUcznnSs6o5fo5mzknci7mXMq5nHMlZ+yTuXsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD5Oiiji/Ujx7W+spkgR0YyYiG4uD/bKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACP0mAq4vuRovEHzbvrahGRqn+7TpR/nIvm4TI/Hc3hMl+M5sWcrSprzW89gvazMwOpiB9FisH6W3dPeD7/A913d78G8eY319/9Sq2bh3obh94bfOz4sQvDo7/2xP2W01YNOHmpM337TmN8ZHR0rG91LX/6p/vWDeXPLXan60TE/OtvvNaammrPbbkwEPfdZOFgLtS6C7XYJ+3Zq4V8vYr90p7NC8390Yz1hUd8YWJPlPf/dyPFb7/zn70bfu/+/wvdd3fv8PGzP1m//7+weUcP6f7/eN+6F/JPIwO1iPrCrdmB4xH1+dffONW51brZvtmePnf69JeHh7989vTA4Yj6jc5Uu29px4cKAAAAAAAAAAAAAAAAYG+lIn43UrR+tJoaEXGnGq81dGH46VNPHYpD1XirDeO2Xh27erHx0syt2bn2/Hx7sjE+3bk+M9ne7sfVq+Fe4yOjfePK9tCR3Wv/1vuvvzQz+/pc5+YfLmy5/Wj94rX5hbnW9a03x5EoIpr9a05WDR4fGa0aPdVpTVdVr2w5mO7DG0hF/FekuH6ukT6f1+Xxf5tH+G8Y/7+4eUcPafzfp/rWlZ+ZUhE/ixS/9ZdPxOerdh6Ne45ZLve3keLk+c/lcnG4LNdrQ/e5At2RgWXZ/4sU//j+xrK98ZCPr5d9btsH9oAoz/+xSPH9P/9u/Hpet/H5D1uf/6Obd/SQzv9n+tYd3fC8gh13nXz+T0WKFx9/K34jr/ug538Usba29qcRJ3Lhu8/neEjn/7N964ai+7m/uXvdBwAAAAAAAAAAOLAGUhF/FymeGq2l5/O67fz+3+TmHW3j97+2nLfpAb//9ct96yYfOF/R7izs+KACAAAAwD4xkIr4caS4ufDW3THUG8d/943//J31uddH0qat1d/z/VL13IDdHP/Zbyh/7sTOuw0AAAAAAAAAAAAAAAAAAAD7SkpFPJ/nU594wHzqy5Hi5f95JpdLx8tyvXngh6o/65dnpk9dnJqaud5aaF2bajfGZlvX22Xdz0SK1b/5XK5bVPOr9+ab787xXl/rzcU+FylG/75XtjsXe29u8u584N252Muyn4oU//0PG8v25rH+7HrZM2XZv44UX//nrcseXy97tiz73Ujxw683emWPlmV7z0ftPpO0Xoup9rPXZ6bueRQqAAAAAAAAAAAAAAAAAAAAfFgDqYg/ixT/e2spFvOw/zz/f28G/lqv7Jvf7Jvvf5M71Tz/Q9X8//db/ijz/w/tWk8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODgSFHEG5Fi9vJqWh4s33fVL3Wmb98ZHxndutqRVNU8VJUvX/Xnzpw996Xnh8/38oPr77Yn49WxqxcbL83cmp1rz8+3Jxvj053rM5Ptbe9hp/XXD13XyeoANG69dnvyxo35xplnz27YfGfovcHHjg9dGH761FO9suMjo6NjfWVqAx/i0z9U49YdjiL+KlI8872fpH8ZjChi58fiAd+dh+1I1YmTVSfGR0arjkx1WtML5cYr9VyqiGj0VWr2jtEenIsdaUYsls0vG3yy7N7YbGuudW2q3bjSmlvoLHRmpq+kbmvL/jSiiPMpYikiVgbv3d1AFPFapPjOsdX0r4MRh3rH4YuXx756+sz921E8xD5uQ9nOxkDEUnEAztk+NhhF/FOk+OnbJ+LfBiNq0X3FFyJeKfMHEW+W+WJEKr8Y5yLe3eJ7xMFUiyL+vzz/F1bT24Pl9aB3Xbn0tcZXpm/M9JXtXVcO/P1hL+3za1M9ivhhdcVfTf/uv2sAAAAAAAAAAAAAAACAfaSIX40UL7xzIlXjg++OKe5M32xcbV2b6g7r6439642ZXltbW2ukbjZzTuRczLmUcznnSs4ocv2czZwTORdzLuVczrmSMw7l+jmbOSdyLuZcyrmccyVn1HL9nM2cEzkXcy7lXM65kjP2ydg9AAAAAAAAAAAAAAAAAADg46Wo/knx7W+sprXB7vzSE9HNZfOBfuz9PAAA//94Y/m1")
mknod$loop(&(0x7f0000000040)='./file0\x00', 0xffe, 0x0)
chown(0x0, 0xee01, 0xee00)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000030c0), 0x200)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_open_dev$usbmon(&(0x7f00000000c0), 0x7, 0x161080)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
r4 = syz_open_procfs(0x0, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r5 = socket$packet(0x11, 0x2, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wg0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x8, &(0x7f0000000340)=ANY=[@ANYRES32=r5, @ANYRES32=0x0], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x90)
mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r3])
syz_open_dev$usbfs(0x0, 0x20000007d, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$inet(r7, &(0x7f0000008940), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000140)=0x5)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="60000000020601000000000000000000000000000e0003006269746d61703a697000000005000400000000000900dfff73797a320000000018000780000300800000000c00018008000140ac141400050005000200000005000100060000"], 0x60}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4800000010001f", @ANYRES16=r1], 0x3}}, 0x0)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
close(r8)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0xfffffd95)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000bf9800000000d42cc69427dffba00000560800"], &(0x7f0000000980)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, 0x0, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90)

2m48.665780363s ago: executing program 3 (id=73):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0)
openat$cgroup_devices(r1, &(0x7f00000003c0)='devices.deny\x00', 0x2, 0x0)
fcntl$setlease(r0, 0x400, 0x2)
fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000040), 0x0, 0x0, 0x0)
fremovexattr(r2, &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00')
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000200)={0x0, 0x5e, &(0x7f00000007c0)={&(0x7f0000000080)={0x48, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x2c, 0x33, @action={{{}, {}, @broadcast}, @sp_mp_close={0xf, 0x3, {{0x72, 0x6}, {0x75, 0x4, {0x0, 0x0, @void, @void, @void}}}}}}]}, 0x48}}, 0x0)
socket$packet(0x11, 0x3, 0x300)
bpf$PROG_LOAD_XDP(0x21, &(0x7f00000001c0)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r5)
sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r8, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7, 0x12}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0x10)

2m41.91553809s ago: executing program 5 (id=90):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=ANY=[@ANYBLOB="44000000100000000000000000000000000000009ef983b4d7b24b64992710872f6789e8af73e19d97", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128089fc0100626f6e64000000001400028005000e000000000005000d0000000000"], 0x44}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000fc0ef720c4108a81d39901020301090212000100000000090400000003"], 0x0)
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x14444, &(0x7f0000000380)=ANY=[], 0xfe, 0xc2a, &(0x7f0000001440)="$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")
mknod$loop(&(0x7f0000000040)='./file0\x00', 0xffe, 0x0)
chown(0x0, 0xee01, 0xee00)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000030c0), 0x200)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_open_dev$usbmon(&(0x7f00000000c0), 0x7, 0x161080)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
r4 = syz_open_procfs(0x0, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r5 = socket$packet(0x11, 0x2, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wg0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x8, &(0x7f0000000340)=ANY=[@ANYRES32=r5, @ANYRES32=0x0], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x90)
mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r3])
syz_open_dev$usbfs(0x0, 0x20000007d, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$inet(r7, &(0x7f0000008940), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000140)=0x5)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="60000000020601000000000000000000000000000e0003006269746d61703a697000000005000400000000000900dfff73797a320000000018000780000300800000000c00018008000140ac141400050005000200000005000100060000"], 0x60}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4800000010001f", @ANYRES16=r1], 0x3}}, 0x0)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
close(r8)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0xfffffd95)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000bf9800000000d42cc69427dffba00000560800"], &(0x7f0000000980)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, 0x0, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90)

2m19.130932635s ago: executing program 3 (id=73):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0)
openat$cgroup_devices(r1, &(0x7f00000003c0)='devices.deny\x00', 0x2, 0x0)
fcntl$setlease(r0, 0x400, 0x2)
fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000040), 0x0, 0x0, 0x0)
fremovexattr(r2, &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00')
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000200)={0x0, 0x5e, &(0x7f00000007c0)={&(0x7f0000000080)={0x48, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x2c, 0x33, @action={{{}, {}, @broadcast}, @sp_mp_close={0xf, 0x3, {{0x72, 0x6}, {0x75, 0x4, {0x0, 0x0, @void, @void, @void}}}}}}]}, 0x48}}, 0x0)
socket$packet(0x11, 0x3, 0x300)
bpf$PROG_LOAD_XDP(0x21, &(0x7f00000001c0)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r5)
sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r8, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7, 0x12}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0x10)

2m4.718875882s ago: executing program 5 (id=90):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=ANY=[@ANYBLOB="44000000100000000000000000000000000000009ef983b4d7b24b64992710872f6789e8af73e19d97", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128089fc0100626f6e64000000001400028005000e000000000005000d0000000000"], 0x44}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000fc0ef720c4108a81d39901020301090212000100000000090400000003"], 0x0)
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x14444, &(0x7f0000000380)=ANY=[], 0xfe, 0xc2a, &(0x7f0000001440)="$eJzs3UFsHNd9B+D/Gy3FldxWTJyodhsXm7ZIZcVyZUkxFatwVzXNNoAsC6GYWwCuxJW6MEUSJNXIRtoyvfTQQ4Ci6CEnAq1RIEUDoymCHtnWBZKLD0VOPREtbARFD2wRICeDwcy+FZcUZdEmRZH299mr3+zMe7PvzaxnaIFvXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEb/38sXTz6VH3QoAYC9dHvvq6TPu/wDwiXLV//8DAAAAAAAAAAAAAMB+l6KIxyPF7OXVNFG976pf6kzfvjM+Mrp1tSOpqnmoKl++6s+dOXvuS88Pn+/lB9ffbU/Gq2NXLzZemrk1O9een29PNsanO9dnJtvb3sNO6292sjoAjVuv3Z68cWO+cebZsxs23xl6b/Cx40MXhp8+9VSv7PjI6OhYX5nawEf+9Hvcb4TH4SjiVKR45ns/Sa2IKGLnx+IB352H7UjViZNVJ8ZHRquOTHVa0wvlxiu9A1FENPoqNXvHaA/OxY40IxbL5pcNPll2b2y2Nde6NtVuXGnNLXQWOjPTV1K3tWV/GlHE+RSxFBErg/fubiCKqEWK7xxbTdci4lDvOHyxGhh8/3YUD7GP21C2szEQsVQcgHO2jw1GEa9Eip++XcT18pjlV3wh4pUyfxDxZpkvRqTyi3Eu4t0tvkccTLUo4i/K839hNU1W14PedeXS1xpfmb4x01e2d1058PeHvbTPr031KKJVXfFX00f/YQcAAAAAAAAAAAAAAACA3XYkingyUrz8H39UjSuOalz6sQvDvz/0i/1jxp94wH7Kss9GxGKxvTG5h/MQ4ivpSkqPeCzxJ1k9ivjjPP7vW4+6MQAAAAAAAAAAAAAAAAAAAJ9oRfw4Urzwzom0FP1zinembzautq5NdWeF7c3925szfW1tba2RutnMOZFzscqBu+WW8/qVnFHk+jmbOSdyLuZcyrmccyVnHMr1czZzTuRczLmUcznnSs6o5fo5mzknci7mXMq5nHMlZ+yTuXsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD5Oiiji/Ujx7W+spkgR0YyYiG4uD/bKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACP0mAq4vuRovEHzbvrahGRqn+7TpR/nIvm4TI/Hc3hMl+M5sWcrSprzW89gvazMwOpiB9FisH6W3dPeD7/A913d78G8eY319/9Sq2bh3obh94bfOz4sQvDo7/2xP2W01YNOHmpM337TmN8ZHR0rG91LX/6p/vWDeXPLXan60TE/OtvvNaammrPbbkwEPfdZOFgLtS6C7XYJ+3Zq4V8vYr90p7NC8390Yz1hUd8YWJPlPf/dyPFb7/zn70bfu/+/wvdd3fv8PGzP1m//7+weUcP6f7/eN+6F/JPIwO1iPrCrdmB4xH1+dffONW51brZvtmePnf69JeHh7989vTA4Yj6jc5Uu29px4cKAAAAAAAAAAAAAAAAYG+lIn43UrR+tJoaEXGnGq81dGH46VNPHYpD1XirDeO2Xh27erHx0syt2bn2/Hx7sjE+3bk+M9ne7sfVq+Fe4yOjfePK9tCR3Wv/1vuvvzQz+/pc5+YfLmy5/Wj94rX5hbnW9a03x5EoIpr9a05WDR4fGa0aPdVpTVdVr2w5mO7DG0hF/FekuH6ukT6f1+Xxf5tH+G8Y/7+4eUcPafzfp/rWlZ+ZUhE/ixS/9ZdPxOerdh6Ne45ZLve3keLk+c/lcnG4LNdrQ/e5At2RgWXZ/4sU//j+xrK98ZCPr5d9btsH9oAoz/+xSPH9P/9u/Hpet/H5D1uf/6Obd/SQzv9n+tYd3fC8gh13nXz+T0WKFx9/K34jr/ug538Usba29qcRJ3Lhu8/neEjn/7N964ai+7m/uXvdBwAAAAAAAAAAOLAGUhF/FymeGq2l5/O67fz+3+TmHW3j97+2nLfpAb//9ct96yYfOF/R7izs+KACAAAAwD4xkIr4caS4ufDW3THUG8d/943//J31uddH0qat1d/z/VL13IDdHP/Zbyh/7sTOuw0AAAAAAAAAAAAAAAAAAAD7SkpFPJ/nU594wHzqy5Hi5f95JpdLx8tyvXngh6o/65dnpk9dnJqaud5aaF2bajfGZlvX22Xdz0SK1b/5XK5bVPOr9+ab787xXl/rzcU+FylG/75XtjsXe29u8u584N252Muyn4oU//0PG8v25rH+7HrZM2XZv44UX//nrcseXy97tiz73Ujxw683emWPlmV7z0ftPpO0Xoup9rPXZ6bueRQqAAAAAAAAAAAAAAAAAAAAfFgDqYg/ixT/e2spFvOw/zz/f28G/lqv7Jvf7Jvvf5M71Tz/Q9X8//db/ijz/w/tWk8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODgSFHEG5Fi9vJqWh4s33fVL3Wmb98ZHxndutqRVNU8VJUvX/Xnzpw996Xnh8/38oPr77Yn49WxqxcbL83cmp1rz8+3Jxvj053rM5Ptbe9hp/XXD13XyeoANG69dnvyxo35xplnz27YfGfovcHHjg9dGH761FO9suMjo6NjfWVqAx/i0z9U49YdjiL+KlI8872fpH8ZjChi58fiAd+dh+1I1YmTVSfGR0arjkx1WtML5cYr9VyqiGj0VWr2jtEenIsdaUYsls0vG3yy7N7YbGuudW2q3bjSmlvoLHRmpq+kbmvL/jSiiPMpYikiVgbv3d1AFPFapPjOsdX0r4MRh3rH4YuXx756+sz921E8xD5uQ9nOxkDEUnEAztk+NhhF/FOk+OnbJ+LfBiNq0X3FFyJeKfMHEW+W+WJEKr8Y5yLe3eJ7xMFUiyL+vzz/F1bT24Pl9aB3Xbn0tcZXpm/M9JXtXVcO/P1hL+3za1M9ivhhdcVfTf/uv2sAAAAAAAAAAAAAAACAfaSIX40UL7xzIlXjg++OKe5M32xcbV2b6g7r6439642ZXltbW2ukbjZzTuRczLmUcznnSs4ocv2czZwTORdzLuVczrmSMw7l+jmbOSdyLuZcyrmccyVn1HL9nM2cEzkXcy7lXM65kjP2ydg9AAAAAAAAAAAAAAAAAADg46Wo/knx7W+sprXB7vzSE9HNZfOBfuz9PAAA//94Y/m1")
mknod$loop(&(0x7f0000000040)='./file0\x00', 0xffe, 0x0)
chown(0x0, 0xee01, 0xee00)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000030c0), 0x200)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_open_dev$usbmon(&(0x7f00000000c0), 0x7, 0x161080)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
r4 = syz_open_procfs(0x0, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r5 = socket$packet(0x11, 0x2, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wg0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x8, &(0x7f0000000340)=ANY=[@ANYRES32=r5, @ANYRES32=0x0], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x90)
mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r3])
syz_open_dev$usbfs(0x0, 0x20000007d, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$inet(r7, &(0x7f0000008940), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000140)=0x5)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="60000000020601000000000000000000000000000e0003006269746d61703a697000000005000400000000000900dfff73797a320000000018000780000300800000000c00018008000140ac141400050005000200000005000100060000"], 0x60}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4800000010001f", @ANYRES16=r1], 0x3}}, 0x0)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
close(r8)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0xfffffd95)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000bf9800000000d42cc69427dffba00000560800"], &(0x7f0000000980)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, 0x0, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90)

1m26.206185431s ago: executing program 3 (id=73):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0)
openat$cgroup_devices(r1, &(0x7f00000003c0)='devices.deny\x00', 0x2, 0x0)
fcntl$setlease(r0, 0x400, 0x2)
fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000040), 0x0, 0x0, 0x0)
fremovexattr(r2, &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00')
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000200)={0x0, 0x5e, &(0x7f00000007c0)={&(0x7f0000000080)={0x48, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x2c, 0x33, @action={{{}, {}, @broadcast}, @sp_mp_close={0xf, 0x3, {{0x72, 0x6}, {0x75, 0x4, {0x0, 0x0, @void, @void, @void}}}}}}]}, 0x48}}, 0x0)
socket$packet(0x11, 0x3, 0x300)
bpf$PROG_LOAD_XDP(0x21, &(0x7f00000001c0)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r5)
sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r8, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7, 0x12}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0x10)

1m11.30201627s ago: executing program 5 (id=90):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=ANY=[@ANYBLOB="44000000100000000000000000000000000000009ef983b4d7b24b64992710872f6789e8af73e19d97", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128089fc0100626f6e64000000001400028005000e000000000005000d0000000000"], 0x44}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000fc0ef720c4108a81d39901020301090212000100000000090400000003"], 0x0)
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x14444, &(0x7f0000000380)=ANY=[], 0xfe, 0xc2a, &(0x7f0000001440)="$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")
mknod$loop(&(0x7f0000000040)='./file0\x00', 0xffe, 0x0)
chown(0x0, 0xee01, 0xee00)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000030c0), 0x200)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_open_dev$usbmon(&(0x7f00000000c0), 0x7, 0x161080)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
r4 = syz_open_procfs(0x0, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r5 = socket$packet(0x11, 0x2, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wg0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x8, &(0x7f0000000340)=ANY=[@ANYRES32=r5, @ANYRES32=0x0], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x90)
mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r3])
syz_open_dev$usbfs(0x0, 0x20000007d, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$inet(r7, &(0x7f0000008940), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000140)=0x5)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="60000000020601000000000000000000000000000e0003006269746d61703a697000000005000400000000000900dfff73797a320000000018000780000300800000000c00018008000140ac141400050005000200000005000100060000"], 0x60}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4800000010001f", @ANYRES16=r1], 0x3}}, 0x0)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
close(r8)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0xfffffd95)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000bf9800000000d42cc69427dffba00000560800"], &(0x7f0000000980)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, 0x0, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90)

44.584913037s ago: executing program 3 (id=73):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0)
openat$cgroup_devices(r1, &(0x7f00000003c0)='devices.deny\x00', 0x2, 0x0)
fcntl$setlease(r0, 0x400, 0x2)
fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000040), 0x0, 0x0, 0x0)
fremovexattr(r2, &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00')
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000200)={0x0, 0x5e, &(0x7f00000007c0)={&(0x7f0000000080)={0x48, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x2c, 0x33, @action={{{}, {}, @broadcast}, @sp_mp_close={0xf, 0x3, {{0x72, 0x6}, {0x75, 0x4, {0x0, 0x0, @void, @void, @void}}}}}}]}, 0x48}}, 0x0)
socket$packet(0x11, 0x3, 0x300)
bpf$PROG_LOAD_XDP(0x21, &(0x7f00000001c0)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r5)
sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r8, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7, 0x12}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0x10)

30.8062881s ago: executing program 5 (id=90):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=ANY=[@ANYBLOB="44000000100000000000000000000000000000009ef983b4d7b24b64992710872f6789e8af73e19d97", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128089fc0100626f6e64000000001400028005000e000000000005000d0000000000"], 0x44}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000fc0ef720c4108a81d39901020301090212000100000000090400000003"], 0x0)
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x14444, &(0x7f0000000380)=ANY=[], 0xfe, 0xc2a, &(0x7f0000001440)="$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")
mknod$loop(&(0x7f0000000040)='./file0\x00', 0xffe, 0x0)
chown(0x0, 0xee01, 0xee00)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000030c0), 0x200)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_open_dev$usbmon(&(0x7f00000000c0), 0x7, 0x161080)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
r4 = syz_open_procfs(0x0, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r5 = socket$packet(0x11, 0x2, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wg0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x8, &(0x7f0000000340)=ANY=[@ANYRES32=r5, @ANYRES32=0x0], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x90)
mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r3])
syz_open_dev$usbfs(0x0, 0x20000007d, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$inet(r7, &(0x7f0000008940), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000140)=0x5)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="60000000020601000000000000000000000000000e0003006269746d61703a697000000005000400000000000900dfff73797a320000000018000780000300800000000c00018008000140ac141400050005000200000005000100060000"], 0x60}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4800000010001f", @ANYRES16=r1], 0x3}}, 0x0)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
close(r8)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0xfffffd95)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000bf9800000000d42cc69427dffba00000560800"], &(0x7f0000000980)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, 0x0, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90)

7.486462904s ago: executing program 2 (id=2174):
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000740)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f31000000170a001700000000040037000a00030001632564b758b9a64411f6bb744dc48f57", 0x39}], 0x1)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00')
r2 = memfd_create(&(0x7f00000002c0)='D\xa3\xd5Wj\x00\x00\x8b\x14\xc2\xac\x1a\x1a\vG\xa9~vB\xbc\t\x00\x00\x00VoA\xaa\xbc\xee[\xe1\xa2\xe0\xff\x04\x00\x9b\x12\x0eW\xcf\t\xb0\xa9 +H/\xfd\xa4\xcaN\x84\xadS\x8bqE\x99\x01t\xb1\x1f|\x99PL\x92\x8f\xc2y\xcd\x8cj\x03X\x05\x17mwI\xf0\x01\xe5z\xcdJ)\xc7\xfa)\xaa}\xef\xde\xf5\xcd\xb1o5\x18\xd6\v\x85q\x98\x9bB\xb9\xea\xe7\xff\x7f\x00\x00T\xc0\xd2\t?\bpBl\xf4\x86\xd4\xc9\xe3\x8f\xd9\x9f\x15\x1e\xf2\x18\r\xad\b\xe0\x96NH\x85\r+\xfc\xb3\xdd\xddhg(\x03\xa7\x92\xe5\x00+h\xb7@#K\x9cMY\xd3\x9b\b-G\xb1\xdaS\x81\xb2\x93\xb83\x8a\x94*\x8d\\\b\xff/\xf8A\xaf\\\xaa\xf5u\xde\xfa\xa1\xc0\xf9&gR\x81.\xff\x83k\xe6\rDa\x16\xbd\x1a\xb2w\b\x00'/244, 0x0)
write(r2, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0)
r3 = dup3(r1, r2, 0x0)
fchdir(r3)
r4 = inotify_init1(0x0)
inotify_add_watch(r4, &(0x7f0000000040)='.\x00', 0x80000200)

6.710033194s ago: executing program 2 (id=2178):
sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="24001803b6a2dbba57861cccf15c4f"], 0x24}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x40, 0x20}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r0}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, &(0x7f0000000140)=""/83, &(0x7f0000000080), &(0x7f0000000080), 0x6, r0}, 0x38)

6.061338717s ago: executing program 2 (id=2180):
rseq(&(0x7f0000000200), 0x20, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r0, r0, 0x2f, 0x0, 0x0, @prog_fd}, 0x20)

5.592803792s ago: executing program 2 (id=2182):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, 0x0}, 0x90)
io_setup(0x5, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x4)
process_vm_readv(0x0, &(0x7f0000001b00)=[{0x0}, {0x0}, {&(0x7f0000001a00)=""/208, 0xd0}], 0x3, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], 0x2, 0x9e8, &(0x7f0000000440)="$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")
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10)
socketpair(0x23, 0x5, 0x0, &(0x7f0000000040))
r1 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000340)={0x24, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000780)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0})
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000001c0)="2e00000010008188040f46ecdb4cb9cca7480ef40f000000e3bd6efb010509000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0), 0x0, 0x6}}, 0x20)
socket$kcm(0x10, 0x2, 0x0)

3.949704739s ago: executing program 4 (id=2192):
sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="24001803b6a2dbba57861cccf15c4f"], 0x24}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x40, 0x20}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r0}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, &(0x7f0000000140)=""/83, &(0x7f0000000080), &(0x7f0000000080), 0x6, r0}, 0x38)

3.687573239s ago: executing program 1 (id=2194):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@bridge_newvlan={0x28, 0x76, 0x709, 0x0, 0x0, {0x7, 0x2}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8}}}]}, 0x28}, 0x1, 0x5502000000000000}, 0x0)

3.407832031s ago: executing program 1 (id=2195):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)="92")
syz_open_dev$vcsn(&(0x7f00000009c0), 0x0, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4, 0x0, 0x0, 0x2)

3.276973939s ago: executing program 4 (id=2197):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r3=>0x0})
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000240)={r3, 0x5, 0x6, @multicast}, 0x10)
setsockopt$packet_add_memb(r1, 0x107, 0x2, &(0x7f0000000080)={r3, 0x5, 0x6, @multicast}, 0x10)

3.042273657s ago: executing program 1 (id=2198):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@jqfmt_vfsv1}, {}, {@barrier_val}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x0, 0x55f, &(0x7f0000001040)="$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")
lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000e00), 0x24, 0x0)
chmod(&(0x7f0000000980)='./file1\x00', 0x144)

2.847648128s ago: executing program 4 (id=2199):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000001500)=""/4075, 0xfeb}], 0x1}, 0x0)

2.783854052s ago: executing program 0 (id=2200):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x0, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0xc0185879, &(0x7f00000006c0)=@v2={0x2, @aes256, 0x0, '\x00', @a})

2.524819383s ago: executing program 4 (id=2201):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xff, 0xfffffffffffffffc}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000000c0)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0x2)

2.496268552s ago: executing program 1 (id=2202):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0xfffffffffffffffe, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$link(0x15, r1, 0x0)
mkdir(&(0x7f0000000240)='./file0\x00', 0x0)
mount$9p_unix(&(0x7f0000001280)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000002280))
add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc1}, &(0x7f0000000200)={0x0, "7ec4155ca1c1b0a93e63800b111c5548e2cbadf594d7b5198523b2c86ba2466b40b6393c99ad76792b92aa2e9311f1dbf8c14f78b3552688a2c84b7498cabe61", 0x2f}, 0x48, r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x0, 0x6)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2)

2.467418104s ago: executing program 0 (id=2203):
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
r0 = syz_io_uring_setup(0x2cdb, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x34, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f00000000c0), 0x10f)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000005, 0x10012, r3, 0x0)
io_uring_enter(r0, 0x5b43, 0x0, 0x0, 0x0, 0x0)

2.377150616s ago: executing program 2 (id=2204):
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20}, 0x1c)
listen(r0, 0x80080400)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @remote}, 0x10)
getsockopt$inet_int(r1, 0x10d, 0xa4, &(0x7f0000000000), &(0x7f0000000080)=0x4)

2.335385824s ago: executing program 3 (id=73):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0)
openat$cgroup_devices(r1, &(0x7f00000003c0)='devices.deny\x00', 0x2, 0x0)
fcntl$setlease(r0, 0x400, 0x2)
fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000040), 0x0, 0x0, 0x0)
fremovexattr(r2, &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00')
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000200)={0x0, 0x5e, &(0x7f00000007c0)={&(0x7f0000000080)={0x48, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x2c, 0x33, @action={{{}, {}, @broadcast}, @sp_mp_close={0xf, 0x3, {{0x72, 0x6}, {0x75, 0x4, {0x0, 0x0, @void, @void, @void}}}}}}]}, 0x48}}, 0x0)
socket$packet(0x11, 0x3, 0x300)
bpf$PROG_LOAD_XDP(0x21, &(0x7f00000001c0)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r5)
sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r8, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7, 0x12}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0x10)

2.315146747s ago: executing program 0 (id=2205):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockname(r1, &(0x7f00000014c0)=@ll={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80)
sendmsg$nl_route_sched(r0, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000009380)={&(0x7f0000000140)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0)

381.789616ms ago: executing program 0 (id=2206):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d00001000000000000000000000000800120002000200000000000000000010006c4d09000000000000000000000000000000000000000000000000000000fc020000000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0)

380.055255ms ago: executing program 1 (id=2207):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@bridge_newvlan={0x28, 0x76, 0x709, 0x0, 0x0, {0x7, 0x2}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8}}}]}, 0x28}, 0x1, 0x5502000000000000}, 0x0)

365.936221ms ago: executing program 2 (id=2208):
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000003c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x3})
syz_io_uring_setup(0x0, &(0x7f0000000280), &(0x7f0000c57000), 0x0)
ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa01, &(0x7f0000000380)={{&(0x7f00007db000/0x2000)=nil, 0x2000}})

365.207772ms ago: executing program 4 (id=2209):
sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="24001803b6a2dbba57861cccf15c4f"], 0x24}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x40, 0x20}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r0}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, &(0x7f0000000140)=""/83, &(0x7f0000000080), &(0x7f0000000080), 0x6, r0}, 0x38)

225.599207ms ago: executing program 0 (id=2210):
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.state\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, "fee8a3ab78fc179fd1fca0e91ddaaca7bd64c6a4b4e00d9683d9a1affda79de2b7fb0ae20000000000cc000003000000009f000000000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd0000000000f0ffffff00"}})

180.936511ms ago: executing program 1 (id=2211):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
pipe2(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
splice(r1, 0x0, r0, 0x0, 0x6, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x3ff)
socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x7c00)
write$cgroup_type(r0, &(0x7f00000001c0), 0x9)
dup3(r1, r0, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000002060103000003000000000000000000"], 0x14}}, 0x0)

571.538µs ago: executing program 0 (id=2212):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10)
listen(r0, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
socket$packet(0x11, 0x3, 0x300)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000040)={<r3=>0x0})
socket(0x2c, 0x3, 0x0)
ppoll(&(0x7f0000000180)=[{r1}, {r0}], 0x2, &(0x7f0000000100)={r3}, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3, &(0x7f0000000000), 0x1, 0x625, &(0x7f0000001400)="$eJzs3c9rXNUeAPDvncnvvPeShsd7r2/xXkC0BW3SpK0UEWwRXJVSfywEN45NWmqnP2gimlppAnUjiBsXgisX1oX/gxYEV/4DLty4kkoR6UYpOnInd8ZpMjeZxMxMm/l8YDr33HNzz7nJfHvOnDnnTgA9azL9pxCxNyIuJxETDXl9kWVOrh539+drp9NHEpXKiz8lce16stx4riR7Ho2INOO3sUi+joiJ4vpyF5auni+Vy/NXsvT04oXL0wtLVw+cu1A6O392/uLsk7NHjxw+cnTmYMNPnXluq9e3p2H7xI3X3xx77+Qrn358L5n57LuTSRyrVzq9rq2eezOTMRmVTOP+9Pd6dKcL65Ji/XXyp2TtjrWebWOF2JLa368/Iv4dY1Fs+GuOxbvPd7VyQFtVkqi3UUCvScQ/9KhaP6D23r6198EDbe6VAJ1w53jEY/X474+I1fg/NpuNDcZQdWxg5G5y3zhPEhEHd6D8tIxvvjp5I31Em8bhgOaWVwazIfC17X9Sjc3xGKqmRu4W7ov/QjaMO56NH76wcTFjeRmTa9JZ+YPbvR6gdcsrEfGfZv3/zeP/1ew53f/aNsvPiX8AAAAAAABgG24dj4gnmn3+V6jP/xloMv9nNCKO7UD5m3/+V7i9A8UATdw5HvF00/m/hdoh48Us9ffqfID+5My58vzBiPhHROyP/sE0PdN40s8bfjoiDrw/8VFe+Y3z/9JHWn5tLmBWj9t9a2YDzZUWSztw6dDz7qxE/Lcvf/5P2v4nTdr/NL4vt1jGxKM3T+XlbR7/QLtUPonY17T9T+rHJBvfn2O62h+YrvUK1vvf2x98kVe++IfuSdv/kY3jfzBpvF/PwtbOPxARh5b6Knn52+3/DyQvFaNhJeJbpcXFKzMRA8mJ9ftnt1ZneJgMtX7oOxFRjYdavKTxv/+Rjcf/6v3/hjgczu7x1Yp//T76fV6e9h+6J43/uY3b//H72/+tb8zeHP8yr/xTLbX/h6tt+v5sj/E/2FirAdrtegIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAw6gQEX+LpDBV3y4UpqYiRiPinzFSKF9aWHz8zKU3Ls6ledXv/y/Uvul3bDWd1L7/f7whPbsmfSgi9kTEh8Xhanrq9KXyXLcvHgAAAAAAAAAAAAAAAAAAAB4Qo6tP69b/p34odrVqQCf0Zc/iHXpPX7crAHSN+IfeJf6hd+XH/y/3KlUdrQ7QQa22/5Xrba4I0HHb7P/7uAB2Ae//oVf1t3bYULvrAXSD9h8AAAAAAHaVPf+/9W0SEctPDVcfqYEsr/7B4HC3age0UyEvY7Cz9QA6zxxe6F2m/kDvanHyL7CLJfWtX5su9s+f/Z+0p0IAAAAAAAAAAAAAwDr79raw/h/YlXLX/wO73gbr/5st7HG7ANhFrP+H3uU2X0Cts5/3Tf/W/wMAAAAAAAAAAADAA2Do6vlSuTx/ZWGp5Y3rWzn4r2/8GHlZz9Q2VjpQjUpxZ86zXOrcr+4h3+iPiDVZlbHVl+35Uvnl6Gx9ahHTibIGOlhWzkaX/j8CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADW+SMAAP//fSQouA==")
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x400000, &(0x7f0000000100)={[{}, {@noblock_validity}, {@quota}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@nogrpid}, {@nogrpid}, {@noinit_itable}, {}, {@resuid, 0x32}]}, 0x1b, 0x4e4, &(0x7f0000000540)="$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")
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x1b40402, &(0x7f0000001300)={[], [{@smackfshat={'smackfshat', 0x3d, '%-,,&%@'}}, {@smackfshat={'smackfshat', 0x3d, '-]CZH\xa6\x12\x10\xbe\xd4=\x1f\x17\x18\xc3\x9bR3S@\x90\x98\xa48\x9c\x93\x80\xaa\xf8M\xee\xe4\xe2\xb3\xb7R\x87\x15\xc1\xdf\xa0\xe5\xed\xbbgD&'}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@context={'context', 0x3d, 'root'}}]}, 0x1, 0x49b, &(0x7f0000000100)="$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")
r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000002800)='syz1\x00', 0x200002, 0x0)
mkdirat$cgroup(r4, &(0x7f0000002840)='syz1\x00', 0x1ff)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x24, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f00800632f77fbac141416ac14141686089ffe4d2f8702860c", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f008004c6ce6b18987f7c57ee005000000000002", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f00000003c0)={[{@dioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@quota}, {@noinit_itable}, {@errors_continue}, {@errors_continue}, {@errors_remount}, {@delalloc}, {@auto_da_alloc}, {@norecovery}, {@errors_continue}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}]}, 0xee, 0x442, &(0x7f0000000d00)="$eJzs281vG0UbAPBn10n6vv1KKKW0oYVAQUR8JE1aoAcuIJA4gIQEh3IMSVqFug1qgkSrCAJC5YgqcUcckfgLOMEFASckrnBHlSqIkFo4Ba29m9punObDrkP9+0nbznjHnnk8O97xTBxA1xrK/kkidkfErxHRX83WFxiq/ndjaWHy76WFySSWl9/4I6mUu760MFkULZ63K88MpxHpJ0leSb25i5fOTpTL0xfy/Oj8uXdH5y5eenrm3MSZ6TPT58dPnjxxfOy5Z8efaUmcWVzXBz+YPXzolbeuvDZ56srbP36dtffAker52jhaZSgL/M/lisZzj7W6sg7bU5NOejrYEDakFBFZd/VWxn9/lOJm5/XHyx93tHFAW2X3ph3NTy8uA3exJDrdAqAziht99v23OO7Q1GNbuPZC9QtQFveN/Kie6Yk0L9PbxvqHIuLU4j9fZEe0aR0CAKDWt9n856nV5n9pHKgptzffQxmIiHsiYl9E3BsR+yPivohK2fsj4uAG62/cGrp1/pNe3VRg65TN/57P97bq53/F7C8GSnluTyX+3uT0THn6WP6eDEfvjiw/tkYd3730y2fNztXO/7Ijq7+YC+btuNrTsEA3NTE/0apJ6bWPIgZ7Vos/WdkJSCLiUEQMbuyl9xaJmSe+Otys0O3jX0ML9pmWv4x4vNr/i9EQfyFZe39y9H9Rnj42WlwVt/rp58uvN6t/S/G3QNb/O+uv/4YS/X8ltfu1cxuv4/Jvnzb9TrPZ678vebOyZ92XP/b+xPz8hbGIvuTVSr7u8fGbzy3yRfks/uGjq4//fflzsvgfiIjsIj4SEQ9GxEN52x+OiEci4uga8f/w4qPvbD7+9srin1r182/l+h+o7/+NJ0pnv/+mWf3r6/8TldRw/kjl8+821tvArbx3AAAA8F+RRsTuSNKRlXSajoxU/4Z/f+xMy7Nz80+enn3v/FT1NwID0ZsWK139NeuhY8li/orV/Hi+VlycP56vG39e+n8lPzI5W57qcOzQ7XY1Gf+Z30udbh3Qdn6vBd2rcfynHWoHcOe5/0P3Mv6hexn/0L1WG/8fNuTtBcDdyf0fupfxD93L+IfuZfxDV9rK7/olujkR6bZoRrsScXBbNKNziU5/MgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALTGvwEAAP//KivtwQ==")
r6 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r7, &(0x7f0000000240), 0x208e24b)
ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r6, 0x40184150, &(0x7f00000012c0)={0x0, &(0x7f0000001280)="e20c97a6995e888220c6f9407e727a64b9c8895494120d934dfb9c88bfb9496908f0d7da0e2e1d10b8dcc6d07f238982ceb33c49d2361487f9a3a5d7d387", 0x3e})
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x202, &(0x7f00000001c0))
mount(&(0x7f0000001180)=@md0, &(0x7f00000011c0)='./bus\x00', &(0x7f0000001200)='ncpfs\x00', 0x80a, 0x0)

0s ago: executing program 4 (id=2213):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x4, 0xfff, 0x7}, 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x11}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x80)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0)
write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040041e1d113c812e5d601adda05c7b5d27c9"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TCSETAF(r1, 0x5408, &(0x7f00000003c0)={0x222, 0x6, 0x143, 0x6, 0x0, "dd529babae0ba6eb"})
dup3(r2, r1, 0x0)
io_setup(0xba, &(0x7f0000000340))

kernel console output (not intermixed with test programs):

rt 6081 - 0
[  531.399975][ T2444] bridge_slave_1: left allmulticast mode
[  531.405689][ T2444] bridge_slave_1: left promiscuous mode
[  531.456193][ T2444] bridge0: port 2(bridge_slave_1) entered disabled state
[  531.518611][ T2444] bridge_slave_0: left allmulticast mode
[  531.524352][ T2444] bridge_slave_0: left promiscuous mode
[  531.563046][ T2444] bridge0: port 1(bridge_slave_0) entered disabled state
[  531.851170][ T5099] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  531.873658][ T5099] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  531.888986][ T5099] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  531.898546][ T5099] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  531.906596][ T5099] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  531.920461][ T5099] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  532.400857][ T2444] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  532.417909][ T2444] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  532.431479][ T2444] bond0 (unregistering): Released all slaves
[  532.542796][T10771] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  532.575228][T10852] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  532.837897][T10771] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  533.002700][ T5279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  533.058608][ T5279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  533.081152][ T5099] Bluetooth: hci6: command tx timeout
[  533.323958][ T2813] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  533.362590][ T2444] hsr_slave_0: left promiscuous mode
[  533.369612][ T2813] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  533.387409][ T2444] hsr_slave_1: left promiscuous mode
[  533.403798][ T2444] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  533.424018][ T2444] batman_adv: batadv0: Removing interface: batadv_slave_0
[  533.439807][ T2444] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  533.447656][ T2444] batman_adv: batadv0: Removing interface: batadv_slave_1
[  533.485988][ T2444] veth1_macvtap: left promiscuous mode
[  533.506215][ T2444] veth0_macvtap: left promiscuous mode
[  533.511943][ T2444] veth1_vlan: left promiscuous mode
[  533.533886][ T2444] veth0_vlan: left promiscuous mode
[  534.037875][ T5099] Bluetooth: hci1: command tx timeout
[  534.148082][T10878] loop2: detected capacity change from 0 to 40427
[  534.188542][T10878] F2FS-fs (loop2): Found nat_bits in checkpoint
[  534.318568][T10878] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  534.401026][T10139] syz-executor: attempt to access beyond end of device
[  534.401026][T10139] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  534.415408][T10139] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  534.612046][ T2444] team0 (unregistering): Port device team_slave_1 removed
[  534.705661][ T2444] team0 (unregistering): Port device team_slave_0 removed
[  535.601261][T10538] veth0_vlan: entered promiscuous mode
[  535.779873][T10538] veth1_vlan: entered promiscuous mode
[  536.010480][T10771] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  536.019572][T10902] syz.2.1685[10902] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  536.019777][T10902] syz.2.1685[10902] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  536.120327][T10771] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  536.121859][ T5099] Bluetooth: hci1: command tx timeout
[  536.201724][T10771] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  536.291179][T10771] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  536.520293][T10538] veth0_macvtap: entered promiscuous mode
[  536.635912][T10912] loop2: detected capacity change from 0 to 1024
[  536.699014][T10538] veth1_macvtap: entered promiscuous mode
[  537.605919][T10538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  537.631414][T10538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  537.653644][T10538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  537.688045][T10538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  537.724709][T10538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  537.755912][T10538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  537.785680][T10538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  537.826515][T10538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  537.856492][T10538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  537.877487][T10538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  537.890132][T10898] loop4: detected capacity change from 0 to 32768
[  537.890969][T10538] batman_adv: batadv0: Interface activated: batadv_slave_0
[  537.929537][T10538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  537.958281][T10538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  537.968444][T10538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  537.984419][T10538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  538.013316][T10538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  538.784847][T10538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  538.836685][T10538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  538.847564][ T5099] Bluetooth: hci1: command tx timeout
[  538.927221][T10538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  538.966229][T10538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  538.993946][T10538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  539.051399][T10538] batman_adv: batadv0: Interface activated: batadv_slave_1
[  539.127442][T10538] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  539.166135][T10538] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  539.174957][T10538] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  539.204079][T10538] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  539.244687][T10860] chnl_net:caif_netlink_parms(): no params data found
[  540.520235][T10860] bridge0: port 1(bridge_slave_0) entered blocking state
[  540.568293][T10860] bridge0: port 1(bridge_slave_0) entered disabled state
[  540.575622][T10860] bridge_slave_0: entered allmulticast mode
[  540.587861][T10860] bridge_slave_0: entered promiscuous mode
[  540.715914][T10860] bridge0: port 2(bridge_slave_1) entered blocking state
[  540.745820][T10860] bridge0: port 2(bridge_slave_1) entered disabled state
[  540.754486][T10860] bridge_slave_1: entered allmulticast mode
[  540.774407][T10860] bridge_slave_1: entered promiscuous mode
[  540.916128][ T5099] Bluetooth: hci1: command tx timeout
[  540.972218][T10860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  541.008153][T10860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  541.512949][T10860] team0: Port device team_slave_0 added
[  541.524193][T10860] team0: Port device team_slave_1 added
[  542.390178][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  542.468699][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  542.582324][T10860] batman_adv: batadv0: Adding interface: batadv_slave_0
[  542.612058][T10860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  542.746988][T10860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  542.776924][T10860] batman_adv: batadv0: Adding interface: batadv_slave_1
[  542.794139][T10860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  542.882597][T10860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  542.935268][T10963] loop2: detected capacity change from 0 to 1024
[  543.001950][T10771] 8021q: adding VLAN 0 to HW filter on device bond0
[  543.014603][T10963] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  543.031994][T10956] loop4: detected capacity change from 0 to 32768
[  543.204926][   T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  543.213843][ T2474] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  543.227640][T10771] 8021q: adding VLAN 0 to HW filter on device team0
[  543.244542][   T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  543.244986][ T2474] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28
[  543.284916][ T2474] EXT4-fs (loop2): This should not happen!! Data will be lost
[  543.284916][ T2474] 
[  543.306131][ T2474] EXT4-fs (loop2): Total free blocks count 0
[  543.320101][T10860] hsr_slave_0: entered promiscuous mode
[  543.326097][ T2474] EXT4-fs (loop2): Free/Dirty block details
[  543.334358][ T2474] EXT4-fs (loop2): free_blocks=68451041280
[  543.344855][T10860] hsr_slave_1: entered promiscuous mode
[  543.350861][ T2474] EXT4-fs (loop2): dirty_blocks=64
[  543.358300][T10860] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  543.365919][T10860] Cannot create hsr debugfs directory
[  543.376112][ T2474] EXT4-fs (loop2): Block reservation details
[  543.382406][ T2474] EXT4-fs (loop2): i_reserved_data_blocks=4
[  543.410475][T10139] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  543.598561][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[  543.605926][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[  543.668629][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  543.675908][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  543.752042][T10971] loop2: detected capacity change from 0 to 64
[  543.906575][T10971] loop2: detected capacity change from 64 to 0
[  543.928090][T10972] syz.2.1708: attempt to access beyond end of device
[  543.928090][T10972] loop2: rw=0, sector=7, nr_sectors = 1 limit=0
[  544.015769][T10972] syz.2.1708: attempt to access beyond end of device
[  544.015769][T10972] loop2: rw=0, sector=8, nr_sectors = 1 limit=0
[  544.135191][T10139] syz-executor: attempt to access beyond end of device
[  544.135191][T10139] loop2: rw=0, sector=7, nr_sectors = 1 limit=0
[  544.166525][T10139] syz-executor: attempt to access beyond end of device
[  544.166525][T10139] loop2: rw=0, sector=8, nr_sectors = 1 limit=0
[  544.256198][   T11] kworker/u8:0: attempt to access beyond end of device
[  544.256198][   T11] loop2: rw=0, sector=1, nr_sectors = 1 limit=0
[  544.305760][   T11] BFS-fs: find_inode(): Unable to read inode loop2:00000001
[  544.346293][   T11] kworker/u8:0: attempt to access beyond end of device
[  544.346293][   T11] loop2: rw=0, sector=1, nr_sectors = 1 limit=0
[  544.426558][   T11] BFS-fs: find_inode(): Unable to read inode loop2:00000000
[  544.447367][   T11] kworker/u8:0: attempt to access beyond end of device
[  544.447367][   T11] loop2: rw=0, sector=1, nr_sectors = 1 limit=0
[  544.499498][   T11] BFS-fs: find_inode(): Unable to read inode loop2:00000002
[  544.511475][ T2813] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  544.910315][ T2813] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  545.155720][ T2813] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  545.469617][ T2813] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  546.014657][T10771] 8021q: adding VLAN 0 to HW filter on device batadv0
[  546.143459][T10540] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  546.159340][T10540] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  546.178793][T10540] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  546.197307][T10540] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  546.217324][T10540] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  546.224866][T10540] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  546.397103][ T5099] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  546.411320][ T5099] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  546.426476][ T5099] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  546.437462][ T5099] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  546.447591][ T5099] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  546.458518][ T5099] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  546.697264][ T2813] bridge_slave_1: left allmulticast mode
[  546.702968][ T2813] bridge_slave_1: left promiscuous mode
[  546.726349][ T2813] bridge0: port 2(bridge_slave_1) entered disabled state
[  546.774311][ T2813] bridge_slave_0: left allmulticast mode
[  546.786242][ T2813] bridge_slave_0: left promiscuous mode
[  546.792101][ T2813] bridge0: port 1(bridge_slave_0) entered disabled state
[  546.829205][T11004] 9pnet: p9_errstr2errno: server reported unknown error 2ë	o`â­¸
[  547.566987][   T29] audit: type=1326 audit(1720046558.218:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11019 comm="syz.4.1728" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4590975bd9 code=0x0
[  548.096618][ T2813] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  548.133454][ T2813] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  548.158318][ T2813] bond0 (unregistering): Released all slaves
[  548.277807][T10540] Bluetooth: hci3: command tx timeout
[  548.359602][T10771] veth0_vlan: entered promiscuous mode
[  548.517523][T10540] Bluetooth: hci5: command tx timeout
[  548.602253][T10771] veth1_vlan: entered promiscuous mode
[  548.908106][T11029] loop4: detected capacity change from 0 to 512
[  548.927714][T11029] EXT4-fs: Ignoring removed bh option
[  548.944815][T11029] EXT4-fs: Ignoring removed i_version option
[  548.967264][T11029] EXT4-fs (loop4): bad geometry: block count 2304 exceeds size of device (256 blocks)
[  549.164776][T11029] loop4: detected capacity change from 0 to 2048
[  549.200314][T11029] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  549.222018][T11029] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  549.251679][T11029] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 1)!
[  549.273052][T11029] EXT4-fs (loop4): group descriptors corrupted!
[  549.285421][T10860] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  549.406276][T10860] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  549.426896][T10860] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  549.479662][T11039] syz.0.1735[11039] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  549.479851][T11039] syz.0.1735[11039] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  549.485729][T10771] veth0_macvtap: entered promiscuous mode
[  549.653779][T10860] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  549.694415][ T2813] hsr_slave_0: left promiscuous mode
[  549.727428][ T2813] hsr_slave_1: left promiscuous mode
[  549.744115][ T2813] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  549.752224][ T2813] batman_adv: batadv0: Removing interface: batadv_slave_0
[  549.767617][ T2813] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  549.775057][ T2813] batman_adv: batadv0: Removing interface: batadv_slave_1
[  549.842449][ T2813] veth1_macvtap: left promiscuous mode
[  549.856682][ T2813] veth0_macvtap: left promiscuous mode
[  549.872601][ T2813] veth1_vlan: left promiscuous mode
[  549.886285][ T2813] veth0_vlan: left promiscuous mode
[  550.363515][T10540] Bluetooth: hci3: command tx timeout
[  550.617574][T10540] Bluetooth: hci5: command tx timeout
[  550.785425][T11057] loop4: detected capacity change from 0 to 128
[  550.853139][T11057] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  550.926543][T11057] ext4 filesystem being mounted at /22/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  551.048219][T10520] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  552.119850][T11069] loop4: detected capacity change from 0 to 1024
[  552.436526][T10540] Bluetooth: hci3: command tx timeout
[  552.686466][T10540] Bluetooth: hci5: command tx timeout
[  553.408874][ T2813] team0 (unregistering): Port device team_slave_1 removed
[  553.553232][T11088] loop4: detected capacity change from 0 to 1024
[  553.568435][ T2813] team0 (unregistering): Port device team_slave_0 removed
[  553.580521][T11088] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  553.777796][  T942] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  553.793415][  T942] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28
[  553.807081][  T942] EXT4-fs (loop4): This should not happen!! Data will be lost
[  553.807081][  T942] 
[  553.816947][  T942] EXT4-fs (loop4): Total free blocks count 0
[  553.822976][  T942] EXT4-fs (loop4): Free/Dirty block details
[  553.828942][  T942] EXT4-fs (loop4): free_blocks=68451041280
[  553.834791][  T942] EXT4-fs (loop4): dirty_blocks=64
[  553.848971][  T942] EXT4-fs (loop4): Block reservation details
[  553.854996][  T942] EXT4-fs (loop4): i_reserved_data_blocks=4
[  553.874172][T10520] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  554.025498][T11096] loop4: detected capacity change from 0 to 128
[  554.080065][T11096] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  554.113538][T11096] ext4 filesystem being mounted at /28/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  554.203728][T10520] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  554.536768][T10540] Bluetooth: hci3: command tx timeout
[  554.587639][T11103] loop4: detected capacity change from 0 to 512
[  554.609772][T11103] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found
[  554.617462][T11103] UDF-fs: Scanning with blocksize 512 failed
[  554.666482][T11103] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found
[  554.673997][T11103] UDF-fs: Scanning with blocksize 1024 failed
[  554.731943][T11103] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found
[  554.745412][T11103] UDF-fs: Scanning with blocksize 2048 failed
[  554.757728][T10540] Bluetooth: hci5: command tx timeout
[  554.764730][T11103] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  554.788102][T11103] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  554.878741][T10771] veth1_macvtap: entered promiscuous mode
[  555.045594][T10771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  555.108067][T10771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  555.126158][T10771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  555.144618][T10771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  555.154664][T10771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  555.193167][T10771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  555.204020][T10771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  555.220701][T10771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  555.220735][T10771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  555.220756][T10771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  555.275433][T10771] batman_adv: batadv0: Interface activated: batadv_slave_0
[  555.441233][T10771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  555.494239][T10771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  555.524630][T10771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  555.554445][T10771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  555.576204][T10771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  555.596931][T10771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  555.616229][T10771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  555.643319][T10771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  555.666077][T10771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  555.687748][T10771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  555.749924][T10771] batman_adv: batadv0: Interface activated: batadv_slave_1
[  555.845737][T10990] chnl_net:caif_netlink_parms(): no params data found
[  555.920406][T10771] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  555.941130][T11124] loop4: detected capacity change from 0 to 128
[  555.952122][T10771] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  555.971391][T10771] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  555.990079][T10771] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  555.991333][T11124] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  556.050806][T11124] ext4 filesystem being mounted at /36/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  556.123153][T10994] chnl_net:caif_netlink_parms(): no params data found
[  556.271212][T10520] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  556.724109][T11136] loop4: detected capacity change from 0 to 512
[  556.795862][T11136] EXT4-fs warning (device loop4): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  556.816556][T11136] EXT4-fs warning (device loop4): dx_probe:880: Enable large directory feature to access it
[  556.831908][T11136] EXT4-fs warning (device loop4): dx_probe:965: inode #2: comm syz.4.1769: Corrupt directory, running e2fsck is recommended
[  556.851607][T11136] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2
[  556.860005][T11136] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #15: comm syz.4.1769: corrupted in-inode xattr: invalid ea_ino
[  556.880804][T11136] EXT4-fs (loop4): Remounting filesystem read-only
[  556.889079][T11136] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  557.367330][T10994] bridge0: port 1(bridge_slave_0) entered blocking state
[  557.497206][T10994] bridge0: port 1(bridge_slave_0) entered disabled state
[  557.601993][T10994] bridge_slave_0: entered allmulticast mode
[  557.749449][T10994] bridge_slave_0: entered promiscuous mode
[  557.786181][T10994] bridge0: port 2(bridge_slave_1) entered blocking state
[  557.813908][T10994] bridge0: port 2(bridge_slave_1) entered disabled state
[  557.828453][T10994] bridge_slave_1: entered allmulticast mode
[  557.838618][T11136] EXT4-fs warning (device loop4): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  557.869304][T10994] bridge_slave_1: entered promiscuous mode
[  557.887401][T11136] EXT4-fs warning (device loop4): dx_probe:880: Enable large directory feature to access it
[  557.898054][T11136] EXT4-fs warning (device loop4): dx_probe:965: inode #2: comm syz.4.1769: Corrupt directory, running e2fsck is recommended
[  557.942333][  T957] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  557.963717][  T957] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  557.982422][T10990] bridge0: port 1(bridge_slave_0) entered blocking state
[  557.996272][T10990] bridge0: port 1(bridge_slave_0) entered disabled state
[  558.004237][T10990] bridge_slave_0: entered allmulticast mode
[  558.012715][T10990] bridge_slave_0: entered promiscuous mode
[  558.060746][T11150] REISERFS warning (device nullb0): super-6502 reiserfs_getopt: unknown mount option "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  558.160395][T10520] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  558.160446][T10860] 8021q: adding VLAN 0 to HW filter on device bond0
[  558.357193][T10990] bridge0: port 2(bridge_slave_1) entered blocking state
[  558.364405][T10990] bridge0: port 2(bridge_slave_1) entered disabled state
[  558.566541][T10990] bridge_slave_1: entered allmulticast mode
[  558.574447][T10990] bridge_slave_1: entered promiscuous mode
[  558.585873][T10994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  559.278556][ T2813] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  559.423535][ T2813] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  559.482347][T11154] netdevsim netdevsim0: Direct firmware load for ng failed with error -2
[  559.507434][T11154] netdevsim netdevsim0: Falling back to sysfs fallback for: ng
[  559.657424][T10994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  559.835323][ T2813] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  559.854226][T10990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  560.736568][T11172] ceph: No mds server is up or the cluster is laggy
[  560.820024][ T5281] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  560.832135][T10860] 8021q: adding VLAN 0 to HW filter on device team0
[  560.879969][ T5281] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  560.902357][T11169] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1780'.
[  560.936844][T11169] gretap0: entered promiscuous mode
[  560.998474][T10990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  561.037761][ T2813] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  561.091311][T10994] team0: Port device team_slave_0 added
[  561.139507][T10994] team0: Port device team_slave_1 added
[  561.319148][T11183] REISERFS warning (device nullb0): super-6502 reiserfs_getopt: unknown mount option "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  561.352998][T10990] team0: Port device team_slave_0 added
[  562.814988][T11193] sched: RT throttling activated
[  563.043747][ T1244] ieee802154 phy0 wpan0: encryption failed: -22
[  563.050375][ T1244] ieee802154 phy1 wpan1: encryption failed: -22
[  563.465705][T11198] loop4: detected capacity change from 0 to 4096
[  563.510725][T11198] ntfs3: Unknown parameter 'id'
[  563.943969][T11198] overlayfs: overlapping lowerdir path
[  564.260006][ T5198] bridge0: port 1(bridge_slave_0) entered blocking state
[  564.267315][ T5198] bridge0: port 1(bridge_slave_0) entered forwarding state
[  564.316568][ T5198] bridge0: port 2(bridge_slave_1) entered blocking state
[  564.323953][ T5198] bridge0: port 2(bridge_slave_1) entered forwarding state
[  564.687858][T10990] team0: Port device team_slave_1 added
[  565.163247][T10994] batman_adv: batadv0: Adding interface: batadv_slave_0
[  565.207536][T10994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  565.777985][T10994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  565.894939][T11207] netdevsim netdevsim0: Direct firmware load for ng failed with error -2
[  565.902735][T10994] batman_adv: batadv0: Adding interface: batadv_slave_1
[  565.916315][T11207] netdevsim netdevsim0: Falling back to sysfs fallback for: ng
[  565.986160][T10994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  566.025756][T10994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  566.046480][T10990] batman_adv: batadv0: Adding interface: batadv_slave_0
[  566.053739][T10990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  566.134237][T10990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  566.188879][T10990] batman_adv: batadv0: Adding interface: batadv_slave_1
[  566.195884][T10990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  566.306165][T10990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  566.528767][T11226] loop4: detected capacity change from 0 to 512
[  566.570720][T11226] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  566.588797][T10990] hsr_slave_0: entered promiscuous mode
[  566.614526][T10990] hsr_slave_1: entered promiscuous mode
[  566.640672][T10990] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  566.656282][T10990] Cannot create hsr debugfs directory
[  566.783685][T10520] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  566.799592][T10994] hsr_slave_0: entered promiscuous mode
[  566.808426][T10994] hsr_slave_1: entered promiscuous mode
[  566.836916][T10994] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  566.844546][T10994] Cannot create hsr debugfs directory
[  567.069153][T11235] REISERFS warning (device nullb0): super-6502 reiserfs_getopt: unknown mount option "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  567.216959][ T2813] bridge_slave_1: left allmulticast mode
[  567.406397][ T2813] bridge_slave_1: left promiscuous mode
[  567.415013][ T2813] bridge0: port 2(bridge_slave_1) entered disabled state
[  567.434278][ T2813] bridge_slave_0: left allmulticast mode
[  567.443114][ T2813] bridge_slave_0: left promiscuous mode
[  567.459564][ T2813] bridge0: port 1(bridge_slave_0) entered disabled state
[  567.764925][T11247] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1801'.
[  568.724479][ T2813] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  568.747003][ T2813] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  568.771516][ T2813] bond0 (unregistering): Released all slaves
[  568.957955][T11257] (unnamed net_device) (uninitialized): up delay (3) is not a multiple of miimon (6516), value rounded to 0 ms
[  569.416271][T11261] netdevsim netdevsim1: Direct firmware load for ng failed with error -2
[  569.425869][T11261] netdevsim netdevsim1: Falling back to sysfs fallback for: ng
[  570.026803][T11269] loop4: detected capacity change from 0 to 512
[  570.102537][T11269] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  570.313109][T10520] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  570.496353][ T5197] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  570.707892][ T5197] usb 2-1: Using ep0 maxpacket: 16
[  570.732434][ T5197] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  570.776183][ T5197] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  570.797394][ T5197] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  570.820657][ T2813] hsr_slave_0: left promiscuous mode
[  570.830284][ T5197] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  570.844812][ T2813] hsr_slave_1: left promiscuous mode
[  570.846803][ T5197] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  570.874306][ T5197] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  570.874428][ T2813] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  570.895201][ T5197] usb 2-1: Product: syz
[  570.901280][ T5197] usb 2-1: Manufacturer: syz
[  570.906636][ T5197] usb 2-1: SerialNumber: syz
[  570.913966][ T2813] batman_adv: batadv0: Removing interface: batadv_slave_0
[  570.924860][ T5197] cdc_ncm 2-1:1.0: skipping garbage
[  570.931396][ T5197] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found
[  570.938377][ T5197] cdc_ncm 2-1:1.0: bind() failure
[  570.975885][ T2813] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  571.008388][ T2813] batman_adv: batadv0: Removing interface: batadv_slave_1
[  571.055029][ T2813] veth1_macvtap: left promiscuous mode
[  571.062372][ T2813] veth0_macvtap: left promiscuous mode
[  571.166741][ T5197] usb 2-1: USB disconnect, device number 13
[  571.199117][ T2813] veth1_vlan: left promiscuous mode
[  571.230431][ T2813] veth0_vlan: left promiscuous mode
[  572.285633][T11292] No such timeout policy "syz0"
[  572.435494][  T779] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  572.668443][  T779] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  572.702363][  T779] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  572.713811][  T779] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  572.728657][  T779] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  572.761155][  T779] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  572.784271][  T779] usb 5-1: config 0 descriptor??
[  573.238625][  T779] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0
[  573.256216][  T779] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0
[  573.307239][  T779] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving
[  573.407022][  T779] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  573.637772][ T5158] usb 5-1: USB disconnect, device number 11
[  574.081897][ T2813] team0 (unregistering): Port device team_slave_1 removed
[  574.208868][ T2813] team0 (unregistering): Port device team_slave_0 removed
[  574.911344][T11309] loop4: detected capacity change from 0 to 2048
[  575.099818][T11309] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  575.702479][T10520] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  576.221702][T11318] loop4: detected capacity change from 0 to 512
[  576.298073][T11318] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #15: comm syz.4.1822: casefold flag without casefold feature
[  576.338936][T11318] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.1822: couldn't read orphan inode 15 (err -117)
[  576.354149][T11318] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  576.821705][T11304] (unnamed net_device) (uninitialized): up delay (3) is not a multiple of miimon (6516), value rounded to 0 ms
[  576.986919][T11318] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1822'.
[  577.017151][T11321] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1822'.
[  577.499754][T11331] IPVS: wrr: SCTP 127.0.0.1:0 - no destination available
[  578.065338][T10520] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  578.136666][ T5158] IPVS: starting estimator thread 0...
[  578.188380][T10860] 8021q: adding VLAN 0 to HW filter on device batadv0
[  578.252289][T11333] IPVS: using max 20 ests per chain, 48000 per kthread
[  578.842640][T10860] veth0_vlan: entered promiscuous mode
[  578.910678][T10860] veth1_vlan: entered promiscuous mode
[  578.997065][ T5092] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  579.005397][T10994] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  579.032337][T10994] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  579.249295][T10994] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  579.256977][ T5092] usb 5-1: config 0 has an invalid interface number: 156 but max is 0
[  579.275829][ T5092] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  579.295772][ T5092] usb 5-1: config 0 has no interface number 0
[  579.300117][T11363] (unnamed net_device) (uninitialized): up delay (3) is not a multiple of miimon (6516), value rounded to 0 ms
[  579.304006][ T5092] usb 5-1: New USB device found, idVendor=257a, idProduct=2609, bcdDevice=7e.22
[  579.365616][ T5092] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  579.386572][ T5092] usb 5-1: config 0 descriptor??
[  579.395138][ T5092] option 5-1:0.156: GSM modem (1-port) converter detected
[  579.435483][T10994] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  579.585559][T10860] veth0_macvtap: entered promiscuous mode
[  579.631310][T10860] veth1_macvtap: entered promiscuous mode
[  579.861384][T10860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  579.899747][T10860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  579.921306][T10860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  579.939032][T10860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  579.961340][T10860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  579.980673][T10860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  580.000531][T10860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  580.022687][T10860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  580.042771][T10860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  580.065276][T10860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  580.118142][T10860] batman_adv: batadv0: Interface activated: batadv_slave_0
[  580.150039][T10860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  580.164982][T10860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  580.193738][T10860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  580.242860][T10860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  580.284556][T10860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  580.327245][T10860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  580.438474][T10860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  580.483406][T10860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  580.521133][T10860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  580.538381][T10860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  580.569222][T10860] batman_adv: batadv0: Interface activated: batadv_slave_1
[  581.615703][T10860] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  581.650849][T10860] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  581.660269][T10860] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  581.669086][T10860] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  581.841550][    T8] usb 5-1: USB disconnect, device number 12
[  581.869817][    T8] option 5-1:0.156: device disconnected
[  581.974137][ T5281] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  582.005576][ T5281] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  582.036529][  T928] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  582.097081][ T5281] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  582.105202][ T5281] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  582.112556][T10994] 8021q: adding VLAN 0 to HW filter on device bond0
[  582.133363][T10990] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  582.155611][T10990] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  582.182903][T10990] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  582.202592][T10994] 8021q: adding VLAN 0 to HW filter on device team0
[  582.212568][T10990] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  582.238714][  T928] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7
[  582.268433][  T928] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC6 has an invalid bInterval 51, changing to 9
[  582.274767][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[  582.286905][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[  582.311067][  T928] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC6 has invalid maxpacket 33540, setting to 1024
[  582.319609][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[  582.329627][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[  582.337734][  T928] usb 1-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice=65.8c
[  582.349934][  T928] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  582.368893][  T928] usb 1-1: config 0 descriptor??
[  582.400709][  T928] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input20
[  582.475039][    C0] appletouch 1-1:0.0: atp_complete: usb_submit_urb failed with result -1
[  582.646051][    T8] usb 1-1: USB disconnect, device number 11
[  582.792670][    T8] appletouch 1-1:0.0: input: appletouch disconnected
[  582.918771][ T5279] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  583.348861][ T5279] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  583.540055][ T5279] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  583.740719][ T5279] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  583.773970][T10990] 8021q: adding VLAN 0 to HW filter on device bond0
[  583.840171][T10990] 8021q: adding VLAN 0 to HW filter on device team0
[  583.862467][ T5197] bridge0: port 1(bridge_slave_0) entered blocking state
[  583.870129][ T5197] bridge0: port 1(bridge_slave_0) entered forwarding state
[  583.895646][T10994] 8021q: adding VLAN 0 to HW filter on device batadv0
[  583.921966][ T5158] bridge0: port 2(bridge_slave_1) entered blocking state
[  583.929216][ T5158] bridge0: port 2(bridge_slave_1) entered forwarding state
[  584.122606][T10990] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  584.227572][ T5279] bridge_slave_1: left allmulticast mode
[  584.235161][ T5279] bridge_slave_1: left promiscuous mode
[  584.260191][ T5279] bridge0: port 2(bridge_slave_1) entered disabled state
[  584.281124][ T5279] bridge_slave_0: left allmulticast mode
[  584.307225][ T5279] bridge_slave_0: left promiscuous mode
[  584.313032][ T5279] bridge0: port 1(bridge_slave_0) entered disabled state
[  585.165157][ T5099] Bluetooth: hci0: command 0x0406 tx timeout
[  586.150456][T11445] loop4: detected capacity change from 0 to 256
[  586.265394][T11445] exFAT-fs (loop4): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d)
[  586.411003][ T5099] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  586.434994][ T5099] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  586.448109][ T5099] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  586.480054][ T5099] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  586.488274][ T5099] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  586.495690][ T5099] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  586.831193][ T5279] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  586.845974][ T5279] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  586.862283][ T5279] bond0 (unregistering): Released all slaves
[  586.895454][T11430] netdevsim netdevsim1: Direct firmware load for ng failed with error -2
[  586.913516][T11430] netdevsim netdevsim1: Falling back to sysfs fallback for: ng
[  586.946306][  T779] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  587.218421][  T779] usb 5-1: config 0 has an invalid interface number: 156 but max is 0
[  587.228981][  T779] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  587.249612][  T779] usb 5-1: config 0 has no interface number 0
[  587.280753][  T779] usb 5-1: New USB device found, idVendor=257a, idProduct=2609, bcdDevice=7e.22
[  587.295299][  T779] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  587.328425][  T779] usb 5-1: config 0 descriptor??
[  587.348485][T10990] 8021q: adding VLAN 0 to HW filter on device batadv0
[  587.353002][  T779] option 5-1:0.156: GSM modem (1-port) converter detected
[  587.357666][T10994] veth0_vlan: entered promiscuous mode
[  587.515747][T10994] veth1_vlan: entered promiscuous mode
[  587.631386][ T5279] hsr_slave_0: left promiscuous mode
[  587.640344][ T5279] hsr_slave_1: left promiscuous mode
[  587.653268][ T5279] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  587.661796][ T5158] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  587.674103][ T5279] batman_adv: batadv0: Removing interface: batadv_slave_0
[  587.694454][ T5279] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  587.722365][ T5279] batman_adv: batadv0: Removing interface: batadv_slave_1
[  587.812554][ T5279] veth1_macvtap: left promiscuous mode
[  587.836228][ T5279] veth0_macvtap: left promiscuous mode
[  587.842000][ T5279] veth1_vlan: left promiscuous mode
[  587.848714][ T5158] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7
[  587.877015][ T5279] veth0_vlan: left promiscuous mode
[  587.886237][ T5158] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC6 has an invalid bInterval 51, changing to 9
[  587.914898][ T5158] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC6 has invalid maxpacket 33540, setting to 1024
[  587.932791][ T5158] usb 1-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice=65.8c
[  587.942283][ T5158] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  587.954215][ T5158] usb 1-1: config 0 descriptor??
[  587.982503][ T5158] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input22
[  588.417371][    C1] appletouch 1-1:0.0: atp_complete: usb_submit_urb failed with result -1
[  588.658968][T10540] Bluetooth: hci1: command tx timeout
[  589.133010][ T5197] usb 1-1: USB disconnect, device number 12
[  589.205882][ T5197] appletouch 1-1:0.0: input: appletouch disconnected
[  589.323313][T10540] Bluetooth: hci6: link tx timeout
[  589.330429][T10540] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa
[  590.766865][ T5099] Bluetooth: hci1: command tx timeout
[  591.454908][ T5099] Bluetooth: hci6: command 0x0406 tx timeout
[  591.949638][ T5279] team0 (unregistering): Port device team_slave_1 removed
[  592.004280][ T5279] team0 (unregistering): Port device team_slave_0 removed
[  592.823359][T11494] netdevsim netdevsim0: Direct firmware load for ng failed with error -2
[  592.844908][T11494] netdevsim netdevsim0: Falling back to sysfs fallback for: ng
[  592.852598][T10540] Bluetooth: hci1: command tx timeout
[  592.881149][T10994] veth0_macvtap: entered promiscuous mode
[  592.940243][ T5092] usb 5-1: USB disconnect, device number 13
[  593.002207][ T5092] option 5-1:0.156: device disconnected
[  593.111085][T10994] veth1_macvtap: entered promiscuous mode
[  593.564283][T11517] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1884'.
[  593.634263][T10990] veth0_vlan: entered promiscuous mode
[  593.708872][T10994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  593.744567][T10994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  593.779263][T10994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  593.799577][T10994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  593.824387][T10994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  593.845578][T10994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  593.865441][T10994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  593.876891][T10994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  593.887078][T10994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  593.904854][T10994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  593.932228][T10994] batman_adv: batadv0: Interface activated: batadv_slave_0
[  594.005842][T10990] veth1_vlan: entered promiscuous mode
[  594.032658][T11450] chnl_net:caif_netlink_parms(): no params data found
[  594.319420][T10994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  594.366063][T10994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  594.375948][T10994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  594.387150][T10994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  594.398627][T10994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  594.427562][T10994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  594.459503][T10994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  594.486155][T10994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  594.499379][T10994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  594.516550][T10994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  594.548496][T10994] batman_adv: batadv0: Interface activated: batadv_slave_1
[  594.609970][T10994] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  594.624060][T10994] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  594.654583][T10994] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  594.692640][T10994] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  594.728198][T11541] loop4: detected capacity change from 0 to 128
[  594.756771][    T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  594.769579][T11541] FAT-fs (loop4): invalid media value (0x00)
[  594.775666][T11541] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; no bootstrapping code
[  594.790772][T11541] FAT-fs (loop4): Can't find a valid FAT filesystem
[  594.916769][T10540] Bluetooth: hci1: command tx timeout
[  594.986577][T11541] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1893'.
[  594.997022][    T9] usb 2-1: Using ep0 maxpacket: 8
[  595.026322][T10990] veth0_macvtap: entered promiscuous mode
[  595.052328][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  595.067642][T11450] bridge0: port 1(bridge_slave_0) entered blocking state
[  595.074883][T11450] bridge0: port 1(bridge_slave_0) entered disabled state
[  595.096177][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  595.103092][T11450] bridge_slave_0: entered allmulticast mode
[  595.116144][    T9] usb 2-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.91
[  595.133718][T11450] bridge_slave_0: entered promiscuous mode
[  595.136314][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  595.167759][    T9] usb 2-1: config 0 descriptor??
[  595.185247][T11450] bridge0: port 2(bridge_slave_1) entered blocking state
[  595.213636][T11450] bridge0: port 2(bridge_slave_1) entered disabled state
[  595.239691][T11450] bridge_slave_1: entered allmulticast mode
[  595.252020][T11450] bridge_slave_1: entered promiscuous mode
[  595.389182][T10990] veth1_macvtap: entered promiscuous mode
[  595.444646][T11450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  595.468593][T10990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  595.491071][T10990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  595.500995][T10990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  595.511647][T10990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  595.521665][T10990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  595.532726][T10990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  595.543067][T10990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  595.553586][T10990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  595.568767][T10990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  595.581676][T10990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  595.591923][T10990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  595.614110][T10990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  595.616119][    T9] lenovo 0003:17EF:60EE.000E: hidraw0: USB HID v0.00 Device [HID 17ef:60ee] on usb-dummy_hcd.1-1/input0
[  595.628562][T10990] batman_adv: batadv0: Interface activated: batadv_slave_0
[  595.701163][T11450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  595.755424][T10990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  595.820278][T10990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  595.850500][T10990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  595.882917][T10990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  595.904212][T10990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  595.926388][T10990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  595.964077][T10990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  595.994926][T10990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  596.011354][T10990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  596.022984][T10990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  596.033946][T10990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  596.044851][T10990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  596.090811][T10990] batman_adv: batadv0: Interface activated: batadv_slave_1
[  596.189291][T11536] netlink: 'syz.1.1892': attribute type 10 has an invalid length.
[  596.325020][T11555] syz_tun: entered promiscuous mode
[  596.362871][T11555] syz_tun: left promiscuous mode
[  596.494689][    T8] usb 2-1: USB disconnect, device number 14
[  596.563489][T11450] team0: Port device team_slave_0 added
[  596.612764][   T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  596.642875][   T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  596.668576][T10990] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  596.678757][T11565] loop4: detected capacity change from 0 to 2048
[  596.693102][T10990] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  596.704510][T10990] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  596.732860][T11565] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  596.733710][T10990] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  596.764086][T11450] team0: Port device team_slave_1 added
[  596.839076][   T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  596.850031][   T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  596.946371][T11450] batman_adv: batadv0: Adding interface: batadv_slave_0
[  596.953475][T11450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  596.995957][T11450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  597.049744][T11450] batman_adv: batadv0: Adding interface: batadv_slave_1
[  597.057142][T11450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  597.116643][T11450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  597.409433][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  597.426670][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  597.495646][T11450] hsr_slave_0: entered promiscuous mode
[  597.533776][T11450] hsr_slave_1: entered promiscuous mode
[  597.546145][T11450] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  597.577174][T11450] Cannot create hsr debugfs directory
[  597.881576][T11571] loop4: detected capacity change from 0 to 32768
[  597.889855][ T2444] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  598.037245][T11571] bcachefs (loop4): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names
[  598.051805][T11571] bcachefs (loop4): recovering from clean shutdown, journal seq 7
[  598.101885][   T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  598.119481][   T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  598.134659][T11571] bcachefs (loop4): alloc_read... done
[  598.142119][T11571] bcachefs (loop4): stripes_read... done
[  598.148255][T11571] bcachefs (loop4): snapshots_read... done
[  598.170670][T11571] bcachefs (loop4): journal_replay... done
[  598.189033][T11571] bcachefs (loop4): resume_logged_ops... done
[  598.195376][T11571] bcachefs (loop4): going read-write
[  598.240639][T11571] bcachefs (loop4): done starting filesystem
[  598.327463][ T2444] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  598.463334][T10520] bcachefs (loop4): shutting down
[  598.470439][T10520] bcachefs (loop4): going read-only
[  598.477926][T10520] bcachefs (loop4): finished waiting for writes to stop
[  598.528400][T10520] bcachefs (loop4): flushing journal and stopping allocators, journal seq 8
[  598.572686][ T2444] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  598.578916][T10520] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 9
[  598.619348][T10520] bcachefs (loop4): shutdown complete, journal seq 10
[  598.650124][T10520] bcachefs (loop4): marking filesystem clean
[  598.678977][ T2444] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  598.749773][T10520] bcachefs (loop4): shutdown complete
[  599.061904][ T2444] bridge_slave_1: left allmulticast mode
[  599.068174][ T2444] bridge_slave_1: left promiscuous mode
[  599.073947][ T2444] bridge0: port 2(bridge_slave_1) entered disabled state
[  599.089999][ T2444] bridge_slave_0: left allmulticast mode
[  599.095654][ T2444] bridge_slave_0: left promiscuous mode
[  599.118106][ T2444] bridge0: port 1(bridge_slave_0) entered disabled state
[  600.217298][T10540] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  600.231379][T10540] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  600.244875][T10540] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  600.263101][T10540] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  600.279319][T10540] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  600.288795][T10540] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  600.741166][T11612] loop4: detected capacity change from 0 to 64
[  601.570502][T11612] hfs: invalid catalog max_key_len 7
[  601.576753][T11612] hfs: unable to open catalog tree
[  601.809330][ T5310] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  602.208548][ T2444] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  602.247343][ T2444] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  602.306607][ T5157] usb 5-1: new full-speed USB device number 14 using dummy_hcd
[  602.309945][ T2444] bond0 (unregistering): Released all slaves
[  602.366929][ T5099] Bluetooth: hci5: command tx timeout
[  602.528342][ T5157] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  602.561829][ T5157] usb 5-1: New USB device found, idVendor=0572, idProduct=0320, bcdDevice= 1.85
[  602.581895][ T5157] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  602.603411][ T5157] usb 5-1: Product: syz
[  602.607859][ T5157] usb 5-1: Manufacturer: syz
[  602.613083][ T5157] usb 5-1: SerialNumber: syz
[  602.649267][ T5157] usb 5-1: config 0 descriptor??
[  602.686953][ T5157] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  602.736598][ T5157] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  602.760224][ T5157] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  602.855861][  T779] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  602.908780][ T5157] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  602.915275][ T5157] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  603.012639][ T5157] usb 5-1: dvb_usb_v2: found a 'DVBSky T330' in warm state
[  603.069724][ T5157] usb 5-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter)
[  603.096469][  T779] usb 3-1: Using ep0 maxpacket: 8
[  603.122558][  T779] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  603.152690][  T779] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  603.166424][  T779] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  603.184431][  T779] usb 3-1: config 0 descriptor??
[  604.144394][ T5157] usb 5-1: USB disconnect, device number 14
[  604.414023][  T779] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  604.436256][ T5099] Bluetooth: hci5: command tx timeout
[  604.532793][ T2444] hsr_slave_0: left promiscuous mode
[  604.553233][ T2444] hsr_slave_1: left promiscuous mode
[  604.584595][ T2444] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  604.606493][ T2444] batman_adv: batadv0: Removing interface: batadv_slave_0
[  604.647415][ T2444] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  604.670095][ T2444] batman_adv: batadv0: Removing interface: batadv_slave_1
[  604.751640][ T2444] veth1_macvtap: left promiscuous mode
[  604.780001][T11652] loop4: detected capacity change from 0 to 16
[  604.786602][ T2444] veth0_macvtap: left promiscuous mode
[  604.792289][ T2444] veth1_vlan: left promiscuous mode
[  604.801897][T11652] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  604.818888][ T2444] veth0_vlan: left promiscuous mode
[  605.007928][ T5157] usb 3-1: USB disconnect, device number 10
[  605.039076][ T5157] iowarrior 3-1:0.0: I/O-Warror #0 now disconnected
[  605.482534][T11664] xt_NFQUEUE: number of total queues is 0
[  605.563114][T11664] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1935'.
[  605.576910][T11664] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1935'.
[  606.117966][    T8] usb 1-1: new full-speed USB device number 13 using dummy_hcd
[  606.458524][    T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  606.577022][ T5099] Bluetooth: hci5: command tx timeout
[  607.173132][    T8] usb 1-1: New USB device found, idVendor=0572, idProduct=0320, bcdDevice= 1.85
[  607.185250][    T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  607.244353][    T8] usb 1-1: Product: syz
[  607.248643][    T8] usb 1-1: Manufacturer: syz
[  607.253262][    T8] usb 1-1: SerialNumber: syz
[  607.306913][    T8] usb 1-1: config 0 descriptor??
[  607.318493][    T8] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  607.360118][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  607.384953][    T8] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  607.408255][    T8] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  607.555563][    T8] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  607.580752][    T8] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  607.661855][    T8] usb 1-1: dvb_usb_v2: found a 'DVBSky T330' in warm state
[  607.700311][    T8] usb 1-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter)
[  607.785439][    T8] usb 1-1: USB disconnect, device number 13
[  607.836827][ T5146] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  608.069103][ T5146] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  608.091536][ T5146] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  608.102509][ T2444] team0 (unregistering): Port device team_slave_1 removed
[  608.128335][ T5146] usb 3-1: config 1 has no interface number 0
[  608.142650][ T5146] usb 3-1: config 1 interface 1 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[  608.157241][ T5146] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  608.174036][ T5146] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  608.185715][ T5146] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  608.224461][ T5146] usb 3-1: Product: syz
[  608.244829][ T5146] usb 3-1: Manufacturer: syz
[  608.260620][ T5146] usb 3-1: SerialNumber: syz
[  608.291619][ T5146] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[  608.316210][ T5146] cdc_ncm 3-1:1.1: bind() failure
[  608.385981][ T2444] team0 (unregistering): Port device team_slave_0 removed
[  608.599328][ T5099] Bluetooth: hci5: command tx timeout
[  609.519916][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  609.634586][ T5146] usb 3-1: USB disconnect, device number 11
[  609.874258][T11723] loop4: detected capacity change from 0 to 1024
[  610.007768][T11723] syz.4.1960: attempt to access beyond end of device
[  610.007768][T11723] loop4: rw=0, sector=201326592, nr_sectors = 2 limit=1024
[  610.029131][T11723] Buffer I/O error on dev loop4, logical block 100663296, async page read
[  610.045524][T11723] syz.4.1960: attempt to access beyond end of device
[  610.045524][T11723] loop4: rw=0, sector=201326592, nr_sectors = 2 limit=1024
[  610.083167][T11723] Buffer I/O error on dev loop4, logical block 100663296, async page read
[  610.590596][T11726] loop4: detected capacity change from 0 to 256
[  610.601791][T11726] exfat: Deprecated parameter 'utf8'
[  610.603177][T11728] overlay: Unknown parameter 'reiser\s\R'
[  610.652211][T11726] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xba7df490, utbl_chksum : 0xe619d30d)
[  611.006189][ T5197] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  611.165137][T11704] netdevsim netdevsim0: Direct firmware load for ng failed with error -2
[  611.206277][T11704] netdevsim netdevsim0: Falling back to sysfs fallback for: ng
[  611.239379][ T5197] usb 5-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=91.3d
[  611.287062][ T5197] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  611.295121][ T5197] usb 5-1: Product: syz
[  611.366334][ T5197] usb 5-1: Manufacturer: syz
[  611.375407][ T5197] usb 5-1: SerialNumber: syz
[  611.433581][ T5197] usb 5-1: config 0 descriptor??
[  611.449081][T11603] chnl_net:caif_netlink_parms(): no params data found
[  611.600279][T11450] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  611.659921][T11450] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  611.806647][T11450] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  611.822987][ T5197] msi2500 5-1:0.0: Registered as swradio16
[  611.829301][ T5197] msi2500 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  611.845604][ T5197] usb 5-1: USB disconnect, device number 15
[  611.977535][T11450] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  612.119967][T11765] overlay: Unknown parameter 'reiser\s\R'
[  612.142021][T11603] bridge0: port 1(bridge_slave_0) entered blocking state
[  612.151529][T11603] bridge0: port 1(bridge_slave_0) entered disabled state
[  612.160230][T11603] bridge_slave_0: entered allmulticast mode
[  612.169317][T11603] bridge_slave_0: entered promiscuous mode
[  612.211362][T11603] bridge0: port 2(bridge_slave_1) entered blocking state
[  612.226483][T11603] bridge0: port 2(bridge_slave_1) entered disabled state
[  612.241526][T11603] bridge_slave_1: entered allmulticast mode
[  612.264276][T11603] bridge_slave_1: entered promiscuous mode
[  612.548410][T11603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  612.587915][T11769] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  612.592551][T11603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  612.665023][T11771] loop2: detected capacity change from 0 to 1764
[  612.878543][T11603] team0: Port device team_slave_0 added
[  612.897598][T11773] netlink: 'syz.1.1980': attribute type 5 has an invalid length.
[  612.939278][T11603] team0: Port device team_slave_1 added
[  613.195001][T11603] batman_adv: batadv0: Adding interface: batadv_slave_0
[  613.214768][T11603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  613.261642][T11603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  613.330015][T11603] batman_adv: batadv0: Adding interface: batadv_slave_1
[  613.338292][T11603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  613.381711][T11603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  613.624842][T11603] hsr_slave_0: entered promiscuous mode
[  613.648532][T11603] hsr_slave_1: entered promiscuous mode
[  613.671127][T11603] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  613.706366][T11603] Cannot create hsr debugfs directory
[  614.079483][T11780] loop2: detected capacity change from 0 to 32768
[  614.093511][T11796] loop4: detected capacity change from 0 to 1764
[  614.113609][T11450] 8021q: adding VLAN 0 to HW filter on device bond0
[  614.158592][T11780] XFS (loop2): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  614.196041][T11796] iso9660: Corrupted directory entry in block 2 of inode 1920
[  614.389364][T11780] XFS (loop2): Ending clean mount
[  614.529650][T11814] overlay: Unknown parameter 'reiser\s\R'
[  615.125400][T11450] 8021q: adding VLAN 0 to HW filter on device team0
[  615.474739][T11824] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  615.546979][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[  615.554207][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[  615.577305][T10990] XFS (loop2): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  615.699754][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[  615.707099][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[  615.850149][ T5197] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  616.066686][ T5197] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7
[  616.092517][ T5197] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC6 has an invalid bInterval 51, changing to 9
[  616.099825][T11832] netdevsim netdevsim4: Direct firmware load for ng failed with error -2
[  616.165787][T11832] netdevsim netdevsim4: Falling back to sysfs fallback for: ng
[  616.173545][ T5197] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC6 has invalid maxpacket 33540, setting to 1024
[  616.221930][ T5197] usb 2-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice=65.8c
[  616.279792][ T5197] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  616.708931][ T5197] usb 2-1: config 0 descriptor??
[  616.833102][ T5197] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input24
[  617.310526][T11603] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  617.394130][T11450] 8021q: adding VLAN 0 to HW filter on device batadv0
[  617.465603][T11603] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  617.467765][ T5157] usb 2-1: USB disconnect, device number 15
[  617.540989][T11603] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  617.618132][T11603] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  617.661581][ T5157] appletouch 2-1:0.0: input: appletouch disconnected
[  617.860228][T11450] veth0_vlan: entered promiscuous mode
[  618.177229][T11450] veth1_vlan: entered promiscuous mode
[  620.556546][T11859] overlay: Unknown parameter 'reiser\s\R'
[  621.043990][T11861] loop2: detected capacity change from 0 to 4096
[  621.054344][T11861] ntfs3: Unknown parameter 'id'
[  621.196166][T11860] overlayfs: overlapping lowerdir path
[  621.245102][T11603] 8021q: adding VLAN 0 to HW filter on device bond0
[  621.321215][T11450] veth0_macvtap: entered promiscuous mode
[  621.357916][T11867] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  621.389933][T11603] 8021q: adding VLAN 0 to HW filter on device team0
[  621.419723][T11863] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  621.475164][T11450] veth1_macvtap: entered promiscuous mode
[  621.510745][ T5092] bridge0: port 1(bridge_slave_0) entered blocking state
[  621.518048][ T5092] bridge0: port 1(bridge_slave_0) entered forwarding state
[  621.538387][ T5092] bridge0: port 2(bridge_slave_1) entered blocking state
[  621.545556][ T5092] bridge0: port 2(bridge_slave_1) entered forwarding state
[  621.674638][T11871] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2011'.
[  621.695055][T11450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  621.735481][T11871] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2011'.
[  621.745780][T11874] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2014'.
[  621.755008][T11450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  621.765208][T11450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  621.787929][T11450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  621.807352][T11450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  621.840756][T11450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  621.863933][T11450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  621.891877][T11450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  621.910701][T11450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  621.929749][T11450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  621.986092][T11450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  621.996879][T11450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  622.011405][T11450] batman_adv: batadv0: Interface activated: batadv_slave_0
[  622.102172][T11874] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  622.105173][T11450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  622.149681][T11874] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  622.188827][T11450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  622.233716][T11450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  622.261898][T11450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  622.287967][T11450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  622.308851][T11450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  622.341690][T11450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  622.371730][T11450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  622.407531][T11450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  622.451013][T11450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  622.484103][T11450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  622.524848][T11450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  622.556488][T11450] batman_adv: batadv0: Interface activated: batadv_slave_1
[  622.574715][T11891] netlink: 'syz.2.2021': attribute type 5 has an invalid length.
[  622.645301][T11450] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  622.706086][T11450] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  622.737730][T11450] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  622.754047][T11450] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  623.005659][T11903] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  623.089046][T11902] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  623.277327][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  623.317592][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  623.438565][T11910] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2028'.
[  623.474146][T11910] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2028'.
[  623.534711][T11437] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  623.559195][T11437] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  623.743097][T11913] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2029'.
[  623.800445][T11889] loop4: detected capacity change from 0 to 32768
[  623.846222][T11603] 8021q: adding VLAN 0 to HW filter on device batadv0
[  623.993663][T11889] XFS (loop4): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6
[  624.049734][ T1244] ieee802154 phy0 wpan0: encryption failed: -22
[  624.071589][ T1244] ieee802154 phy1 wpan1: encryption failed: -22
[  624.252175][T11889] XFS (loop4): Ending clean mount
[  624.280164][T11889] XFS (loop4): Quotacheck needed: Please wait.
[  624.440635][T11889] XFS (loop4): Quotacheck: Done.
[  624.628197][T11437] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  625.476566][T10520] XFS (loop4): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6
[  625.604257][T11437] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  625.791727][T11437] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  625.981394][T11437] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  626.025240][T11603] veth0_vlan: entered promiscuous mode
[  626.090229][T11603] veth1_vlan: entered promiscuous mode
[  626.352818][T11603] veth0_macvtap: entered promiscuous mode
[  626.388486][T11437] bridge_slave_1: left allmulticast mode
[  626.394519][T11437] bridge_slave_1: left promiscuous mode
[  626.402909][T11437] bridge0: port 2(bridge_slave_1) entered disabled state
[  626.428679][T11437] bridge_slave_0: left allmulticast mode
[  626.434476][T11437] bridge_slave_0: left promiscuous mode
[  626.441641][T11437] bridge0: port 1(bridge_slave_0) entered disabled state
[  627.149754][T11437] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  627.178280][T11437] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  627.240497][T11437] bond0 (unregistering): Released all slaves
[  627.309050][T11944] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2035'.
[  627.321583][T11603] veth1_macvtap: entered promiscuous mode
[  627.408353][T11950] xt_NFQUEUE: number of total queues is 0
[  627.436854][T11944] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  627.473065][T11948] loop4: detected capacity change from 0 to 1024
[  627.499784][T11944] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  627.520819][T11603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  627.640304][T11603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  627.681739][T11603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  627.764430][T11603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  627.790677][T11950] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2033'.
[  627.795278][T11603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  627.824400][T11950] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2033'.
[  627.893485][T11603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  627.916205][T11603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  627.967050][T11603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  628.012434][T11603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  628.035354][T11961] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  628.049190][T11603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  628.085314][T11603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  628.125573][T11603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  628.145399][T10540] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  628.161686][T10540] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  628.171467][T10540] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  628.181743][T11603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  628.216182][T10540] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  628.226137][T11603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  628.236975][T10540] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  628.244665][T10540] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  628.253975][T11965] syz.0.2041: attempt to access beyond end of device
[  628.253975][T11965] nbd0: rw=0, sector=64, nr_sectors = 1 limit=0
[  628.255624][T11603] batman_adv: batadv0: Interface activated: batadv_slave_0
[  628.267645][T11965] syz.0.2041: attempt to access beyond end of device
[  628.267645][T11965] nbd0: rw=0, sector=256, nr_sectors = 1 limit=0
[  628.288549][T11965] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256
[  628.291042][T11603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  628.298936][T11965] syz.0.2041: attempt to access beyond end of device
[  628.298936][T11965] nbd0: rw=0, sector=512, nr_sectors = 1 limit=0
[  628.322033][T11965] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512
[  628.334873][T11965] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found
[  628.342535][T11965] UDF-fs: Scanning with blocksize 512 failed
[  628.349732][T11965] syz.0.2041: attempt to access beyond end of device
[  628.349732][T11965] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0
[  628.365613][T11965] syz.0.2041: attempt to access beyond end of device
[  628.365613][T11965] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0
[  628.378630][T11965] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256
[  628.388521][T11965] syz.0.2041: attempt to access beyond end of device
[  628.388521][T11965] nbd0: rw=0, sector=1024, nr_sectors = 2 limit=0
[  628.401627][T11965] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512
[  628.411196][T11965] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found
[  628.418954][T11965] UDF-fs: Scanning with blocksize 1024 failed
[  628.427142][T11965] syz.0.2041: attempt to access beyond end of device
[  628.427142][T11965] nbd0: rw=0, sector=64, nr_sectors = 4 limit=0
[  628.442140][T11965] syz.0.2041: attempt to access beyond end of device
[  628.442140][T11965] nbd0: rw=0, sector=1024, nr_sectors = 4 limit=0
[  628.455184][T11965] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256
[  628.465115][T11965] syz.0.2041: attempt to access beyond end of device
[  628.465115][T11965] nbd0: rw=0, sector=2048, nr_sectors = 4 limit=0
[  628.478174][T11965] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512
[  628.487687][T11965] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found
[  628.495270][T11965] UDF-fs: Scanning with blocksize 2048 failed
[  628.502149][T11965] syz.0.2041: attempt to access beyond end of device
[  628.502149][T11965] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0
[  628.515326][T11965] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256
[  628.530314][T11965] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512
[  628.542829][T11965] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found
[  628.550471][T11965] UDF-fs: Scanning with blocksize 4096 failed
[  628.556727][T11965] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1)
[  628.579963][T11603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  628.591444][T11603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  628.635591][T11603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  628.645764][T11603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  628.701357][T11603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  628.774712][T11603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  628.843302][T11603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  628.853644][T11603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  628.864689][T11603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  628.935827][T11603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  629.100467][T11603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  629.249010][T11603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  629.276097][T11603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  629.368177][T11603] batman_adv: batadv0: Interface activated: batadv_slave_1
[  629.503704][T11974] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2042'.
[  629.513191][T11974] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2042'.
[  629.515915][T11603] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  629.606066][T11603] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  629.634449][T11603] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  629.682582][T11603] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  629.949200][T11986] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2043'.
[  631.029820][T10540] Bluetooth: hci1: command tx timeout
[  631.323492][T10540] Bluetooth: hci2: command 0x0406 tx timeout
[  631.653834][T12002] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  631.764066][T11437] hsr_slave_0: left promiscuous mode
[  631.795124][T11437] hsr_slave_1: left promiscuous mode
[  631.810853][T11437] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  631.851376][T11437] batman_adv: batadv0: Removing interface: batadv_slave_0
[  631.889859][T11437] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  631.925422][T11437] batman_adv: batadv0: Removing interface: batadv_slave_1
[  631.957376][T12008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2056'.
[  632.015653][T12011] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2057'.
[  632.021123][T11437] veth1_macvtap: left promiscuous mode
[  632.044403][T12011] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2057'.
[  632.054883][T11437] veth0_macvtap: left promiscuous mode
[  632.100281][T11437] veth1_vlan: left promiscuous mode
[  632.114122][T11437] veth0_vlan: left promiscuous mode
[  633.084013][ T5099] Bluetooth: hci1: command tx timeout
[  633.390909][T12017] loop4: detected capacity change from 0 to 40427
[  633.402024][T12017] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  633.412777][T12017] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  633.423896][T12017] F2FS-fs (loop4): invalid crc value
[  633.433260][T12017] F2FS-fs (loop4): Found nat_bits in checkpoint
[  633.460547][T12024] loop2: detected capacity change from 0 to 1024
[  633.561027][T12017] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  633.565924][T12024] bio_check_eod: 2 callbacks suppressed
[  633.565943][T12024] syz.2.2062: attempt to access beyond end of device
[  633.565943][T12024] loop2: rw=0, sector=201326592, nr_sectors = 2 limit=1024
[  633.580164][T12017] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  633.616393][T12024] Buffer I/O error on dev loop2, logical block 100663296, async page read
[  633.653440][T12024] syz.2.2062: attempt to access beyond end of device
[  633.653440][T12024] loop2: rw=0, sector=201326592, nr_sectors = 2 limit=1024
[  633.698150][   T29] audit: type=1800 audit(1720046644.348:130): pid=12017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2058" name="bus" dev="loop4" ino=455 res=0 errno=0
[  633.742678][T12024] Buffer I/O error on dev loop2, logical block 100663296, async page read
[  633.810329][T12017] syz.4.2058: attempt to access beyond end of device
[  633.810329][T12017] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  633.951653][   T12] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  633.986535][   T12] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  634.091371][T12033] loop2: detected capacity change from 0 to 128
[  634.143027][T12033] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  634.186547][T12033] ext4 filesystem being mounted at /36/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  634.355748][T10990] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  634.453238][T11437] team0 (unregistering): Port device team_slave_1 removed
[  634.756147][T11437] team0 (unregistering): Port device team_slave_0 removed
[  635.156230][ T5099] Bluetooth: hci1: command tx timeout
[  636.270040][T12008] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  636.299831][T12008] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  636.302342][T12020] ipvlan2: entered promiscuous mode
[  636.326522][T12020] ipvlan2: entered allmulticast mode
[  636.333206][T12020] veth0: entered allmulticast mode
[  636.439353][T12041] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2063'.
[  636.641588][T12049] loop4: detected capacity change from 0 to 2048
[  636.664359][T12049] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  636.795935][ T5279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  636.869850][ T5279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  637.236233][ T5099] Bluetooth: hci1: command tx timeout
[  637.238442][T12057] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2071'.
[  637.283326][ T2444] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  637.291836][ T2444] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  637.342634][T12057] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2071'.
[  637.369143][T11962] chnl_net:caif_netlink_parms(): no params data found
[  637.604673][T12064] netlink: 'syz.4.2074': attribute type 11 has an invalid length.
[  637.625900][T12064] netlink: 211132 bytes leftover after parsing attributes in process `syz.4.2074'.
[  638.437716][T11962] bridge0: port 1(bridge_slave_0) entered blocking state
[  638.445526][T11962] bridge0: port 1(bridge_slave_0) entered disabled state
[  638.464048][T11962] bridge_slave_0: entered allmulticast mode
[  638.473136][T11962] bridge_slave_0: entered promiscuous mode
[  639.739925][   T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  639.837302][T11962] bridge0: port 2(bridge_slave_1) entered blocking state
[  639.844530][T11962] bridge0: port 2(bridge_slave_1) entered disabled state
[  639.879688][T11962] bridge_slave_1: entered allmulticast mode
[  639.891748][T11962] bridge_slave_1: entered promiscuous mode
[  639.907189][T12067] loop4: detected capacity change from 0 to 32768
[  639.930310][T12067] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2076 (12067)
[  640.011339][T12067] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  640.066330][T12067] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm
[  640.096322][T12067] BTRFS info (device loop4): using free-space-tree
[  640.132132][   T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  640.349160][T12067] BTRFS info (device loop4): rebuilding free space tree
[  640.401014][   T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  640.457365][T11962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  640.498240][   T29] audit: type=1804 audit(1720046651.168:131): pid=12067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2076" name="/newroot/130/bus/bus" dev="loop4" ino=263 res=1 errno=0
[  640.583601][   T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  640.628588][T11962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  640.811513][T11962] team0: Port device team_slave_0 added
[  640.852982][T11962] team0: Port device team_slave_1 added
[  640.963901][T11962] batman_adv: batadv0: Adding interface: batadv_slave_0
[  641.005814][T11962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  641.037925][T11962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  641.213059][T11962] batman_adv: batadv0: Adding interface: batadv_slave_1
[  641.244040][T11962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  641.315819][T11962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  641.596629][T10520] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  641.669554][   T12] bridge_slave_1: left allmulticast mode
[  641.675260][   T12] bridge_slave_1: left promiscuous mode
[  641.707064][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  641.752184][   T12] bridge_slave_0: left allmulticast mode
[  641.770162][   T12] bridge_slave_0: left promiscuous mode
[  641.808015][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  641.815884][    T8] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  641.864549][T10540] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  641.891933][T10540] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  641.901643][T10540] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  641.919586][T10540] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  641.933476][T10540] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  641.941283][T10540] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  642.056198][    T8] usb 1-1: Using ep0 maxpacket: 8
[  642.081322][    T8] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  642.096551][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  642.121701][    T8] usb 1-1: config 0 descriptor??
[  642.900529][T12110] loop4: detected capacity change from 0 to 32768
[  642.927848][T12110] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2084 (12110)
[  642.999603][T12110] BTRFS info (device loop4): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  643.020969][T12110] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  643.031905][T12110] BTRFS info (device loop4): using free-space-tree
[  643.337191][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  643.361985][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  643.398641][   T12] bond0 (unregistering): Released all slaves
[  643.423849][T12101] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2081'.
[  643.457741][T10520] BTRFS info (device loop4): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  643.505420][T11962] hsr_slave_0: entered promiscuous mode
[  643.543440][T11962] hsr_slave_1: entered promiscuous mode
[  643.577346][T11962] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  643.596244][T11962] Cannot create hsr debugfs directory
[  643.599352][    T8] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  643.646525][    T8] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  643.677265][    T8] asix 1-1:0.0: probe with driver asix failed with error -71
[  643.717966][    T8] usb 1-1: USB disconnect, device number 14
[  644.036599][T10540] Bluetooth: hci5: command tx timeout
[  644.260950][T12139] netdevsim netdevsim4: Direct firmware load for ng failed with error -2
[  644.269800][T12139] netdevsim netdevsim4: Falling back to sysfs fallback for: ng
[  645.417399][T12134] loop2: detected capacity change from 0 to 40427
[  645.806139][T12134] F2FS-fs (loop2): Found nat_bits in checkpoint
[  646.028593][   T12] hsr_slave_0: left promiscuous mode
[  646.041928][   T12] hsr_slave_1: left promiscuous mode
[  646.086514][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  646.096167][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  646.117394][T10540] Bluetooth: hci5: command tx timeout
[  646.143620][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  646.174262][T12134] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  646.196187][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  646.498633][   T12] veth1_macvtap: left promiscuous mode
[  646.504260][   T12] veth0_macvtap: left promiscuous mode
[  647.418702][   T12] veth1_vlan: left promiscuous mode
[  647.424055][   T12] veth0_vlan: left promiscuous mode
[  647.440942][   T29] audit: type=1800 audit(1720046657.298:132): pid=12165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2088" name="file2" dev="loop2" ino=10 res=0 errno=0
[  647.503691][T10990] syz-executor: attempt to access beyond end of device
[  647.503691][T10990] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  647.578417][T10990] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  648.197741][T10540] Bluetooth: hci5: command tx timeout
[  648.767903][T12167] loop4: detected capacity change from 0 to 40427
[  648.778546][T12167] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  648.792998][T12167] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  648.806553][T12167] F2FS-fs (loop4): invalid crc value
[  648.850852][T12167] F2FS-fs (loop4): Found nat_bits in checkpoint
[  649.023917][T12180] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2102'.
[  649.065093][T12167] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  649.108636][T12167] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  649.226238][T12190] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2103'.
[  649.243153][   T29] audit: type=1800 audit(1720046659.908:133): pid=12167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2097" name="bus" dev="loop4" ino=455 res=0 errno=0
[  649.244010][T12167] syz.4.2097: attempt to access beyond end of device
[  649.244010][T12167] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  649.554672][ T2444] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  649.613978][ T2444] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  649.707957][T12199] loop2: detected capacity change from 0 to 512
[  649.797930][T12199] EXT4-fs (loop2): 1 truncate cleaned up
[  649.805118][T12199] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  649.952097][T10990] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  650.316367][T10540] Bluetooth: hci5: command tx timeout
[  650.396286][   T12] team0 (unregistering): Port device team_slave_1 removed
[  650.482224][T10540] Bluetooth: hci3: Malformed LE Event: 0x02
[  650.758701][   T12] team0 (unregistering): Port device team_slave_0 removed
[  653.602661][T12103] chnl_net:caif_netlink_parms(): no params data found
[  653.835561][T12232] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2116'.
[  654.047231][T12244] loop4: detected capacity change from 0 to 47
[  654.256645][T12103] bridge0: port 1(bridge_slave_0) entered blocking state
[  654.263868][T12103] bridge0: port 1(bridge_slave_0) entered disabled state
[  654.293301][T12103] bridge_slave_0: entered allmulticast mode
[  654.301231][T12103] bridge_slave_0: entered promiscuous mode
[  654.370571][T12103] bridge0: port 2(bridge_slave_1) entered blocking state
[  654.384476][T12103] bridge0: port 2(bridge_slave_1) entered disabled state
[  654.408662][T12103] bridge_slave_1: entered allmulticast mode
[  654.409776][T12257] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2125'.
[  654.421228][T12103] bridge_slave_1: entered promiscuous mode
[  654.988359][T11962] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  655.483704][T11962] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  655.586703][T11962] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  655.677458][T12103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  655.697130][T11962] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  655.734556][T12103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  655.995491][T12103] team0: Port device team_slave_0 added
[  656.062113][T12103] team0: Port device team_slave_1 added
[  656.129086][T12285] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2134'.
[  656.196454][T12289] loop4: detected capacity change from 0 to 47
[  656.210434][T12283] netlink: 'syz.0.2136': attribute type 10 has an invalid length.
[  656.270966][T12283] team0: Port device netdevsim0 added
[  656.316317][T12286] netlink: 'syz.0.2136': attribute type 10 has an invalid length.
[  656.362425][T12103] batman_adv: batadv0: Adding interface: batadv_slave_0
[  656.398431][T12103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  656.466047][T12103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  656.559409][T12298] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2141'.
[  656.571158][T12103] batman_adv: batadv0: Adding interface: batadv_slave_1
[  656.601453][T12103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  656.690471][T12103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  656.992335][T12103] hsr_slave_0: entered promiscuous mode
[  657.020231][T12103] hsr_slave_1: entered promiscuous mode
[  657.041307][T12103] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  657.056185][T12103] Cannot create hsr debugfs directory
[  657.277992][T12322] loop4: detected capacity change from 0 to 47
[  657.808451][T12328] loop2: detected capacity change from 0 to 1764
[  659.230318][T11962] 8021q: adding VLAN 0 to HW filter on device bond0
[  659.363077][T12328] netlink: 'syz.2.2154': attribute type 10 has an invalid length.
[  659.384509][T12328] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2154'.
[  659.410801][T12328] bond0: entered promiscuous mode
[  659.416791][T12328] bond_slave_0: entered promiscuous mode
[  659.436485][T12328] bond_slave_1: entered promiscuous mode
[  659.458161][T12328] bridge0: port 3(bond0) entered blocking state
[  659.465319][T12328] bridge0: port 3(bond0) entered disabled state
[  659.472820][T12328] bond0: entered allmulticast mode
[  659.479320][T12328] bond_slave_0: entered allmulticast mode
[  659.485622][T12328] bond_slave_1: entered allmulticast mode
[  659.527329][T12345] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2158'.
[  659.543672][T12328] bridge0: port 3(bond0) entered blocking state
[  659.550243][T12328] bridge0: port 3(bond0) entered forwarding state
[  659.719720][T11962] 8021q: adding VLAN 0 to HW filter on device team0
[  659.964309][ T5146] bridge0: port 1(bridge_slave_0) entered blocking state
[  659.971625][ T5146] bridge0: port 1(bridge_slave_0) entered forwarding state
[  660.093648][ T5146] bridge0: port 2(bridge_slave_1) entered blocking state
[  660.100960][ T5146] bridge0: port 2(bridge_slave_1) entered forwarding state
[  661.145414][T12103] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  661.205830][T12103] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  661.243272][T12382] 9pnet_fd: p9_fd_create_unix (12382): address too long: ./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  661.282624][T12103] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  661.614921][T12385] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2174'.
[  661.633820][T12385] 0·X: renamed from hsr0 (while UP)
[  661.657646][T12385] 0·X: entered allmulticast mode
[  661.675008][T12385] hsr_slave_0: entered allmulticast mode
[  661.869750][T12385] hsr_slave_1: entered allmulticast mode
[  661.901465][T12385] A link change request failed with some changes committed already. Interface 
c0·X may have been left with an inconsistent configuration, please check.
[  661.985467][T12103] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  662.178812][T11962] 8021q: adding VLAN 0 to HW filter on device batadv0
[  662.501088][T11962] veth0_vlan: entered promiscuous mode
[  662.590234][T11962] veth1_vlan: entered promiscuous mode
[  662.892184][T11962] veth0_macvtap: entered promiscuous mode
[  663.027661][T11962] veth1_macvtap: entered promiscuous mode
[  663.127564][T12103] 8021q: adding VLAN 0 to HW filter on device bond0
[  663.245811][T12103] 8021q: adding VLAN 0 to HW filter on device team0
[  663.398992][ T5157] bridge0: port 1(bridge_slave_0) entered blocking state
[  663.406318][ T5157] bridge0: port 1(bridge_slave_0) entered forwarding state
[  663.461527][T11962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  663.514203][T11962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  663.573951][T11962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  663.626449][T11962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  663.632773][T12409] loop2: detected capacity change from 0 to 1764
[  663.687569][T11962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  663.728438][T11962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  663.770909][T11962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  663.793009][T11962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  663.820129][T11962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  663.866045][T11962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  663.890111][T11962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  663.923504][T11962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  663.961861][T11962] batman_adv: batadv0: Interface activated: batadv_slave_0
[  664.019617][T11962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  664.043723][T11962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  664.075240][T11962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  664.106654][T11962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  664.136340][T11962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  664.181059][T11962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  664.207862][T11962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  664.251531][T11962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  664.283612][T11962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  664.305163][T11962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  664.344011][T11962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  664.379497][T11962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  664.449460][T11962] batman_adv: batadv0: Interface activated: batadv_slave_1
[  664.482223][T12414] netlink: 'syz.2.2182': attribute type 10 has an invalid length.
[  664.505075][T12424] 9pnet_fd: p9_fd_create_unix (12424): address too long: ./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  664.506381][T12414] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2182'.
[  664.681314][ T5108] bridge0: port 2(bridge_slave_1) entered blocking state
[  664.688537][ T5108] bridge0: port 2(bridge_slave_1) entered forwarding state
[  664.770361][T11962] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  664.796866][T11962] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  664.809846][T11962] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  664.821709][T11962] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  665.334530][T12440] netlink: 'syz.1.2194': attribute type 1 has an invalid length.
[  665.551264][ T2813] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  665.610345][ T2813] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  665.721176][T12446] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2196'.
[  665.765964][T12446] 0·X: renamed from hsr0 (while UP)
[  665.820083][T12446] 0·X: entered allmulticast mode
[  665.856218][T12446] hsr_slave_0: entered allmulticast mode
[  665.863661][T12446] hsr_slave_1: entered allmulticast mode
[  665.879226][T12446] A link change request failed with some changes committed already. Interface 
c0·X may have been left with an inconsistent configuration, please check.
[  665.907707][ T5281] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  665.931736][ T5281] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  666.573914][T12465] 9pnet_fd: p9_fd_create_unix (12465): address too long: ./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  666.982925][ T2444] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  667.148674][T12103] 8021q: adding VLAN 0 to HW filter on device batadv0
[  667.254613][ T2444] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  667.560387][ T2444] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  667.635392][ T2444] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  667.683655][T12103] veth0_vlan: entered promiscuous mode
[  667.700038][T12103] veth1_vlan: entered promiscuous mode
[  667.740835][T12103] veth0_macvtap: entered promiscuous mode
[  667.768819][T12103] veth1_macvtap: entered promiscuous mode
[  667.831261][T12103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  667.843075][T12103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  667.855081][T12103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  667.865654][T12103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  667.886270][T12103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  667.897472][T12103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  667.907802][T12103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  667.918557][T12103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  667.928538][T12103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  667.939564][T12103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  667.951332][T12103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  667.964373][T12103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  667.974677][T12103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  667.985290][T12103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  667.998162][T12103] batman_adv: batadv0: Interface activated: batadv_slave_0
[  668.048991][T12103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  668.068321][T12103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  668.079055][T12103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  668.089589][T12103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  668.099608][T12103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  668.110675][T12103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  668.121291][T12103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  668.131855][T12103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  668.142359][T12103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  668.152859][T12103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  668.165137][T12103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  668.176102][T12103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  668.185957][T12103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  668.200187][T12103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  668.212406][T12103] batman_adv: batadv0: Interface activated: batadv_slave_1
[  668.243184][ T2444] bridge_slave_1: left allmulticast mode
[  668.249391][ T2444] bridge_slave_1: left promiscuous mode
[  668.255260][ T2444] bridge0: port 2(bridge_slave_1) entered disabled state
[  668.278336][ T2444] bridge_slave_0: left allmulticast mode
[  668.284059][ T2444] bridge_slave_0: left promiscuous mode
[  668.296378][ T2444] bridge0: port 1(bridge_slave_0) entered disabled state
[  668.837012][   T30] INFO: task syz.1.1600:10634 blocked for more than 143 seconds.
[  668.853012][   T30]       Not tainted 6.10.0-rc6-syzkaller-00067-g8a9c6c40432e #0
SYZFAIL: failed to recv rpc
fd=3 want=4 sent=0 n=0 (errno 9: Bad file descriptor)
[  668.877486][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  668.897650][   T30] task:syz.1.1600      state:D stack:23632 pid:10634 tgid:10620 ppid:10116  flags:0x00004004
[  668.919162][   T30] Call Trace:
[  668.934668][   T30]  <TASK>
[  668.942570][   T30]  __schedule+0x17e8/0x4a20
[  668.961243][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  668.974511][   T30]  ? __pfx___schedule+0x10/0x10
[  668.999066][   T30]  ? __pfx_lock_release+0x10/0x10
[  669.028049][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  669.073937][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  669.102709][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  669.139461][   T30]  ? schedule+0x90/0x320
[  669.143818][   T30]  schedule+0x14b/0x320
[  669.174907][   T30]  io_schedule+0x8d/0x110
[  669.189507][   T30]  folio_wait_bit_common+0x882/0x12b0
[  669.195023][   T30]  ? __pfx_folio_wait_bit_common+0x10/0x10
[  669.226148][   T30]  ? __pfx_wake_page_function+0x10/0x10
[  669.231808][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  669.264908][   T30]  ? jfs_error+0x21d/0x2e0
[  669.276113][   T30]  ? __pfx_folio_mark_accessed+0x10/0x10
[  669.281844][   T30]  ? __get_metapage+0x555/0x1050
[  669.299600][   T30]  release_metapage+0x8c/0x870
[  669.304466][   T30]  ? __pfx_metapage_read_folio+0x10/0x10
[  669.314655][   T30]  __get_metapage+0xb1d/0x1050
[  669.322674][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[  669.328196][   T30]  jfs_readdir+0x2945/0x4660
[  669.332877][   T30]  ? __pfx_jfs_readdir+0x10/0x10
[  669.337941][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  669.343634][   T30]  ? __pfx___down_write_common+0x10/0x10
[  669.349390][   T30]  ? end_current_label_crit_section+0x14e/0x180
[  669.355754][   T30]  ? __pfx_jfs_readdir+0x10/0x10
[  669.360785][   T30]  wrap_directory_iterator+0x96/0xe0
[  669.366224][   T30]  iterate_dir+0x57c/0x810
[  669.370681][   T30]  __se_sys_getdents64+0x20d/0x4f0
[  669.375828][   T30]  ? __pfx___se_sys_getdents64+0x10/0x10
[  669.399283][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  669.405363][   T30]  ? __pfx_filldir64+0x10/0x10
[  669.416116][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  669.422512][   T30]  ? do_syscall_64+0x100/0x230
[  669.437224][   T30]  ? do_syscall_64+0xb6/0x230
[  669.441972][   T30]  do_syscall_64+0xf3/0x230
[  669.446770][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  669.452771][   T30] RIP: 0033:0x7faf5d375bd9
[  669.457333][   T30] RSP: 002b:00007faf5e1f3048 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[  669.465764][   T30] RAX: ffffffffffffffda RBX: 00007faf5d504038 RCX: 00007faf5d375bd9
[  669.473768][   T30] RDX: 0000000000001000 RSI: 0000000020000f80 RDI: 0000000000000007
[  669.482582][   T30] RBP: 00007faf5d3e4a98 R08: 0000000000000000 R09: 0000000000000000
[  669.496743][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  669.504775][   T30] R13: 000000000000006e R14: 00007faf5d504038 R15: 00007ffeaad8b0f8
[  669.512965][   T30]  </TASK>
[  669.516154][   T30] 
[  669.516154][   T30] Showing all locks held in the system:
[  669.523936][   T30] 1 lock held by khungtaskd/30:
[  669.531627][   T30]  #0: ffffffff8e333f20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0
[  669.541754][   T30] 3 locks held by kworker/1:2/928:
[  669.557257][   T30]  #0: ffff888015078948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830
[  669.569465][   T30]  #1: ffffc900041a7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830
[  669.580565][   T30]  #2: ffffffff8f5e6ec8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60
[  669.589890][   T30] 5 locks held by kworker/u8:7/2444:
[  669.597675][   T30]  #0: ffff888015ed5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830
[  669.608808][   T30]  #1: ffffc9000931fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830
[  669.619507][   T30]  #2: ffffffff8f5da690 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0
[  669.629574][   T30]  #3: ffffffff8f5e6ec8 (rtnl_mutex){+.+.}-{3:3}, at: cleanup_net+0x6af/0xcc0
[  669.639297][   T30]  #4: ffffffff8e3392f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830
[  669.650464][   T30] 3 locks held by kworker/u8:10/2813:
[  669.655873][   T30]  #0: ffff88802a778148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830
[  669.670738][   T30]  #1: ffffc90009c2fd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830
[  669.683790][   T30]  #2: ffffffff8f5e6ec8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0
[  669.695979][   T30] 2 locks held by getty/4850:
[  669.701141][   T30]  #0: ffff88802b0b50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  669.711064][   T30]  #1: ffffc90002efe2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10
[  669.721365][   T30] 3 locks held by kworker/1:6/5197:
[  669.727015][   T30]  #0: ffff888015078948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830
[  669.738095][   T30]  #1: ffffc90003877d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830
[  669.749308][   T30]  #2: ffffffff8f5e6ec8 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20
[  669.760142][   T30] 2 locks held by syz.1.1600/10634:
[  669.765331][   T30]  #0: ffff88802cbac5c8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x24e/0x310
[  669.774688][   T30]  #1: ffff88805e7c1800 (&type->i_mutex_dir_key#22){++++}-{3:3}, at: wrap_directory_iterator+0x5d/0xe0
[  669.788728][   T30] 1 lock held by syz-executor/12103:
[  669.794127][   T30]  #0: ffffffff8f5e6ec8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x842/0x1180
[  669.806997][   T30] 
[  669.809354][   T30] =============================================
[  669.809354][   T30] 
[  669.878477][   T30] NMI backtrace for cpu 0
[  669.882875][   T30] CPU: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc6-syzkaller-00067-g8a9c6c40432e #0
[  669.892801][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  669.902877][   T30] Call Trace:
[  669.906168][   T30]  <TASK>
[  669.909108][   T30]  dump_stack_lvl+0x241/0x360
[  669.913811][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[  669.919024][   T30]  ? __pfx__printk+0x10/0x10
[  669.923691][   T30]  ? vprintk_emit+0x631/0x770
[  669.928445][   T30]  ? __pfx_vprintk_emit+0x10/0x10
[  669.933507][   T30]  nmi_cpu_backtrace+0x49c/0x4d0
[  669.938499][   T30]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  669.943961][   T30]  ? _printk+0xd5/0x120
[  669.948129][   T30]  ? __pfx__printk+0x10/0x10
[  669.952734][   T30]  ? __wake_up_klogd+0xcc/0x110
[  669.957610][   T30]  ? __pfx__printk+0x10/0x10
[  669.962238][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  669.967879][   T30]  ? __rcu_read_unlock+0xa1/0x110
[  669.972922][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  669.978937][   T30]  nmi_trigger_cpumask_backtrace+0x198/0x320
[  669.984929][   T30]  watchdog+0xfde/0x1020
[  669.989199][   T30]  ? watchdog+0x1ea/0x1020
[  669.993631][   T30]  ? __pfx_watchdog+0x10/0x10
[  669.998313][   T30]  kthread+0x2f2/0x390
[  670.002400][   T30]  ? __pfx_watchdog+0x10/0x10
[  670.007087][   T30]  ? __pfx_kthread+0x10/0x10
[  670.011688][   T30]  ret_from_fork+0x4d/0x80
[  670.016120][   T30]  ? __pfx_kthread+0x10/0x10
[  670.020719][   T30]  ret_from_fork_asm+0x1a/0x30
[  670.025549][   T30]  </TASK>
[  670.031009][   T30] Sending NMI from CPU 0 to CPUs 1:
[  670.038263][    C1] NMI backtrace for cpu 1
[  670.038277][    C1] CPU: 1 PID: 12496 Comm: syz.1.2211 Not tainted 6.10.0-rc6-syzkaller-00067-g8a9c6c40432e #0
[  670.038302][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  670.038316][    C1] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x8/0x90
[  670.038349][    C1] Code: 44 0a 20 e9 f5 14 1a 0a 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 4c 8b 04 24 <65> 48 8b 0c 25 c0 d4 03 00 65 8b 05 80 a8 6d 7e a9 00 01 ff 00 74
[  670.038369][    C1] RSP: 0018:ffffc9000953f538 EFLAGS: 00000246
[  670.038390][    C1] RAX: ffffffff81325ae6 RBX: ffffffff81325ae6 RCX: ffff88806d310000
[  670.038408][    C1] RDX: 0000000000000000 RSI: ffffffff81325ae6 RDI: 0000000000000000
[  670.038424][    C1] RBP: ffffc9000953f5d0 R08: ffffffff81376f12 R09: ffffffff8141095f
[  670.038441][    C1] R10: 0000000000000003 R11: ffff88806d310000 R12: ffff88806d310000
[  670.038458][    C1] R13: ffffffff8181dd30 R14: ffffc9000953f620 R15: ffffc9000953f540
[  670.038480][    C1] FS:  0000000000000000(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000
[  670.038500][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  670.038523][    C1] CR2: 0000001b2d21eff8 CR3: 000000000e132000 CR4: 0000000000350ef0
[  670.038542][    C1] Call Trace:
[  670.038551][    C1]  <NMI>
[  670.038561][    C1]  ? nmi_cpu_backtrace+0x3c2/0x4d0
[  670.038589][    C1]  ? __pfx_lock_acquire+0x10/0x10
[  670.038618][    C1]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  670.038643][    C1]  ? nmi_handle+0x2a/0x5a0
[  670.038724][    C1]  ? nmi_cpu_backtrace_handler+0xc/0x20
[  670.038753][    C1]  ? nmi_handle+0x151/0x5a0
[  670.038788][    C1]  ? nmi_handle+0x2a/0x5a0
[  670.038825][    C1]  ? __sanitizer_cov_trace_const_cmp8+0x8/0x90
[  670.038851][    C1]  ? default_do_nmi+0x63/0x160
[  670.038879][    C1]  ? exc_nmi+0x123/0x1f0
[  670.038904][    C1]  ? end_repeat_nmi+0xf/0x53
[  670.038941][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  670.038984][    C1]  ? arch_do_signal_or_restart+0x96/0x860
[  670.039014][    C1]  ? unwind_next_frame+0x196f/0x2a00
[  670.039046][    C1]  ? arch_stack_walk+0x132/0x1b0
[  670.039081][    C1]  ? arch_do_signal_or_restart+0x96/0x860
[  670.039110][    C1]  ? arch_do_signal_or_restart+0x96/0x860
[  670.039140][    C1]  ? __sanitizer_cov_trace_const_cmp8+0x8/0x90
[  670.039168][    C1]  ? __sanitizer_cov_trace_const_cmp8+0x8/0x90
[  670.039197][    C1]  ? __sanitizer_cov_trace_const_cmp8+0x8/0x90
[  670.039224][    C1]  </NMI>
[  670.039233][    C1]  <TASK>
[  670.039241][    C1]  arch_stack_walk+0x132/0x1b0
[  670.039281][    C1]  ? arch_do_signal_or_restart+0x96/0x860
[  670.039315][    C1]  stack_trace_save+0x118/0x1d0
[  670.039354][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  670.039394][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  670.039426][    C1]  save_stack+0xfb/0x1f0
[  670.039467][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  670.039492][    C1]  ? __pfx_save_stack+0x10/0x10
[  670.039530][    C1]  ? free_unref_page+0xd22/0xea0
[  670.039567][    C1]  ? vfree+0x186/0x2e0
[  670.039587][    C1]  ? kcov_close+0x2b/0x50
[  670.039610][    C1]  ? __fput+0x24c/0x8a0
[  670.039635][    C1]  ? task_work_run+0x251/0x310
[  670.039665][    C1]  ? do_exit+0xa27/0x27e0
[  670.039697][    C1]  ? do_group_exit+0x207/0x2c0
[  670.039726][    C1]  ? get_signal+0x16a1/0x1740
[  670.039769][    C1]  ? page_ext_get+0x20/0x2a0
[  670.039802][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  670.039830][    C1]  __reset_page_owner+0x75/0x3f0
[  670.039864][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  670.039887][    C1]  ? mod_memcg_page_state+0x4ae/0x770
[  670.039916][    C1]  free_unref_page+0xd22/0xea0
[  670.039952][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  670.039979][    C1]  vfree+0x186/0x2e0
[  670.040004][    C1]  kcov_close+0x2b/0x50
[  670.040028][    C1]  ? __pfx_kcov_close+0x10/0x10
[  670.040052][    C1]  __fput+0x24c/0x8a0
[  670.040084][    C1]  task_work_run+0x251/0x310
[  670.040122][    C1]  ? __pfx_task_work_run+0x10/0x10
[  670.040156][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  670.040179][    C1]  ? kmem_cache_free+0x145/0x350
[  670.040219][    C1]  do_exit+0xa27/0x27e0
[  670.040254][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  670.040279][    C1]  ? __pfx_do_exit+0x10/0x10
[  670.040315][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  670.040337][    C1]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  670.040365][    C1]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  670.040389][    C1]  ? cgroup_freezing+0x2a8/0x350
[  670.040418][    C1]  do_group_exit+0x207/0x2c0
[  670.040448][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  670.040524][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  670.040547][    C1]  ? lockdep_hardirqs_on+0x99/0x150
[  670.040581][    C1]  get_signal+0x16a1/0x1740
[  670.040626][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  670.040652][    C1]  ? __pfx_get_signal+0x10/0x10
[  670.040695][    C1]  arch_do_signal_or_restart+0x96/0x860
[  670.040727][    C1]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  670.040755][    C1]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  670.040792][    C1]  ? syscall_exit_to_user_mode+0xa3/0x360
[  670.040827][    C1]  syscall_exit_to_user_mode+0xc9/0x360
[  670.040863][    C1]  do_syscall_64+0x100/0x230
[  670.040901][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  670.040934][    C1] RIP: 0033:0x7f56d3375bd9
[  670.040953][    C1] Code: Unable to access opcode bytes at 0x7f56d3375baf.
[  670.040964][    C1] RSP: 002b:00007f56d2dbd0f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  670.040987][    C1] RAX: fffffffffffffe00 RBX: 00007f56d3504118 RCX: 00007f56d3375bd9
[  670.041004][    C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f56d3504118
[  670.041020][    C1] RBP: 00007f56d3504110 R08: 00007f56d2dbd6c0 R09: 00007f56d2dbd6c0
[  670.041037][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f56d350411c
[  670.041052][    C1] R13: 000000000000006e R14: 00007ffec250e1a0 R15: 00007ffec250e288
[  670.041083][    C1]  </TASK>
[  670.789078][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[  670.795999][   T30] CPU: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc6-syzkaller-00067-g8a9c6c40432e #0
[  670.805985][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  670.816071][   T30] Call Trace:
[  670.819363][   T30]  <TASK>
[  670.822307][   T30]  dump_stack_lvl+0x241/0x360
[  670.827047][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[  670.832261][   T30]  ? __pfx__printk+0x10/0x10
[  670.836869][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  670.842873][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  670.848518][   T30]  ? vscnprintf+0x5d/0x90
[  670.852864][   T30]  panic+0x349/0x860
[  670.856775][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  670.862427][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  670.869994][   T30]  ? __pfx_panic+0x10/0x10
[  670.874434][   T30]  ? tick_nohz_tick_stopped+0x82/0xb0
[  670.879829][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  670.885469][   T30]  ? __irq_work_queue_local+0x137/0x410
[  670.891066][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  670.896706][   T30]  ? preempt_schedule_thunk+0x1a/0x30
[  670.902095][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  670.908258][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d4/0x320
[  670.914424][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  670.920535][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d9/0x320
[  670.926760][   T30]  watchdog+0x101d/0x1020
[  670.931114][   T30]  ? watchdog+0x1ea/0x1020
[  670.935549][   T30]  ? __pfx_watchdog+0x10/0x10
[  670.940236][   T30]  kthread+0x2f2/0x390
[  670.944321][   T30]  ? __pfx_watchdog+0x10/0x10
[  670.949007][   T30]  ? __pfx_kthread+0x10/0x10
[  670.953610][   T30]  ret_from_fork+0x4d/0x80
[  670.958039][   T30]  ? __pfx_kthread+0x10/0x10
[  670.962642][   T30]  ret_from_fork_asm+0x1a/0x30
[  670.967441][   T30]  </TASK>
[  670.970565][   T30] Kernel Offset: disabled
[  670.974911][   T30] Rebooting in 86400 seconds..