last executing test programs:

14.16599391s ago: executing program 1 (id=321):
mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$key(0xf, 0x3, 0x2)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x13f}}, 0x20)
openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0)
openat$vicodec1(0xffffff9c, &(0x7f0000000080), 0x2, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)

12.837294297s ago: executing program 0 (id=327):
syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[], 0x1, 0x14fe, &(0x7f0000002ac0)="$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")
socket$inet_tcp(0x2, 0x1, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x803, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_open_dev$sndctrl(0x0, 0x400, 0x105000)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0))
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x6)
socket$nl_route(0x10, 0x3, 0x0)
open(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20000, 0x105)

12.690396937s ago: executing program 4 (id=328):
syz_usb_connect(0x3, 0x4f, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000a6ff0540cdabeecdb9050000000109023d0c02000000000904"], 0x0)
r0 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)

10.884563017s ago: executing program 1 (id=331):
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x80, &(0x7f0000000900)=ANY=[@ANYBLOB="747970653d142606372c6e6c733d63703835302c626172726965722c6769643d", @ANYRESHEX=0x0, @ANYRES32=0x0, @ANYRESHEX=0x0, @ANYRES8], 0x1, 0x6e8, &(0x7f00000001c0)="$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")
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x2000000000000087}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000008c0)=0x2, 0x4)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x3)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f000000e0c0), 0x10010)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000b00)=@ccm_128={{0x303}, "0000090800000003", "73b59657269ef929ee540a8a0a86c5d0", '\f\x00', "21be0dd9f7f3c312"}, 0x28)
sendfile(r3, r4, &(0x7f0000000100)=0x10, 0x10001)

10.18918995s ago: executing program 0 (id=334):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, 0x0, 0x0)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, 0x0, 0x110)
futex(0x0, 0x5, 0x100000, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000880)='sched_switch\x00', r1}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
openat$tun(0xffffff9c, 0x0, 0x0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x803, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
pipe2$9p(0x0, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000500), 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0202000311000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb000000000000000002000100000000000000000b000000000200090000000000000000000000000005000600000000000a00000000000000fe8800000000000000000000000000010000000000000000010014"], 0x88}}, 0x0)

9.139191215s ago: executing program 1 (id=335):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/19], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0)

8.992233926s ago: executing program 4 (id=336):
r0 = socket$nl_route(0x10, 0x3, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0)

8.321292359s ago: executing program 2 (id=337):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000000)=0x4, 0x4)

8.053023791s ago: executing program 3 (id=338):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100))
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x26e1, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r2}, 0x6)
ioctl$SIOCSIFHWADDR(r1, 0x89f0, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'})

7.856113551s ago: executing program 2 (id=339):
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x67d0, 0x4)
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x2d, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)=0xbbc, 0x4)
recvmmsg(0xffffffffffffffff, &(0x7f0000003dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x45833af92e4b39bd, 0x0)

7.645797623s ago: executing program 0 (id=340):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0)
ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, &(0x7f0000000080)=0x7)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$SNDCTL_DSP_GETISPACE(r4, 0xc0045003, &(0x7f0000001100))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
keyctl$dh_compute(0x17, &(0x7f0000000100), 0x0, 0x0, 0x0)
r5 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@my=0x1})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0)

7.616961693s ago: executing program 3 (id=341):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_to_team\x00'})
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f00000000c0)=0x60)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x3, &(0x7f0000000180)=ANY=[@ANYRES64=r5], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe7d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_open_dev$dri(0x0, 0x2, 0x8000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r7}, 0x18)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r8 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r8, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
r9 = fsopen(&(0x7f00000000c0)='gadgetfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r9, 0x6, 0x0, 0x0, 0x0)
close(r9)
ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0)
sendmsg$nl_route_sched(r0, 0x0, 0x0)

6.962860896s ago: executing program 1 (id=342):
r0 = io_uring_setup(0x1951, &(0x7f0000000140)={0x0, 0x1e98, 0x0, 0x2, 0x2b2})
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0xdca6, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x7, 0x9fd, 0x84, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x52, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
read$usbmon(r1, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

6.960344906s ago: executing program 4 (id=343):
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xb, 0x9, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64, @ANYBLOB="0000000000000000b70200001400f400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x6, 0x2c1, &(0x7f00000005c0)="$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")
r3 = open(&(0x7f0000000180)='./bus\x00', 0x14967e, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f4)
r4 = open(&(0x7f0000007f80)='./bus\x00', 0x145142, 0x0)
sendfile(r4, r3, 0x0, 0x3000)

3.421222693s ago: executing program 1 (id=344):
syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[], 0x1, 0x14fe, &(0x7f0000002ac0)="$eJzs3QuYjtX6MPB1r7UexjTxNslhWPe6H940WCZJckiSQ5IkSZJTQtIkSUJiyCkJSchxkhyGkBwmJo3z+ZBz0mRLkiSnnML6rqndtve//b/s/e39//y/Pffvutb1rvtaz72etd6beZ/nuebwQ9fhtZrUrt6IiMS/BH57SRFCxAghBgkh8gkhAiFE+fjy8dnjeRSk/GsnYf9ej6Zd6xWwa4nrn7Nx/XM2rn/OxvXP2bj+ORvXP2fj+udsXH/GcrKtMwvfwC3ntn/9+X/Mby/8/P//Q/z5n7Nx/f/TnM7zzxzN9f9Pctl7/89lcP1zNq5/zsb1z9m4/jkb1z9n4/ozlpNd6+fP3K5tu9b//hhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOM5Qzn/BVaCPF7/1qvizHGGGOMMcYYY/8+Pve1XgFjjDHGGGOMMcb+54GQQgktApFL5BYxIo+IFdeJOHG9yCvyiYi4QcSLG0V+cZMoIAqKQqKwSBBFRFFhBAorSISimCguouJmUULcIhJFSVFKlBZOlBFJ4lZRVtwmyonbRXlxh6gg7hQVRSVRWVQRd4mq4m5RTdwjqot7RQ1RU9QStcV9oo64X9QVD4h64kFRXzwkGoiHRUPxiGgkHhWNxWOiiXhcNBVPiGaiuWghWopW/1f5r4ie4lXRS/QWKaKP6CteE/1EfzFADBSDxOtisHhDDBFviqFimBgu3hIjxNtipHhHjBKjxRjxrhgrxonxYoKYKCaJVPGemCzeF1PEB2KqmCamixkiTcwUs8SHYraYI+aKj8Q88bGYLxaIhWKRSBefiMViicgQn4ql4jORKZaJ5WKFWClWidVijVgr1on1YoPYKDaJzWKL2Co+F9vEdrFD7BS7xG6xR3wh9oovxT7xlcgSX/+T+Wf/S343ECBAggQNGnJBLoiBGIiFWIiDOMgLeSECEYiHeMgP+aEAFIBCUAgSIAGKQlFAQCAgKAbFIApRKAElIBESoRSUAgcOkiAJysJtUA7KQXkoDxWgAlSESlAJqkAVqApVoRpUg+pQHWpADagFteA+uA/uh7pQF+pBPagP9aEBNICG0BAaQSNoDI2hCTSBptAUmkEzaAEtoBW0gtbQGtpAG2gH7aA9tIcO0AGSIRk6QkfoBJ2gM3SGLtAFukJX6AbdoTu8Aq/Aq/Aq9IYasg/0hb7QD/rBABgIA+F1GAxvwBvwJgyFYTAc3oK34G0YCWdgFIyGMTAGqspxMB4mAMlJkAqpMBkmwxSYAlNhGkyDGZAGM2EWzILZMAfmwEcwDz6Gj2EBLIBFkA7psBiWQAZkwFI4C5mwDJbDClgJq2AlrIG1sAbWwwZYD5tgE2yBLfA5fA7bYTvshJ2wG3bDF/AFfAlfwlDIgizYD/vhAByAg3AQDsEhOAyH4QgcgaNwFI7BMTgOJ+AknIDTcBrOwFk4B+fgAlyAi3ARLsPl7P/8MpuWWuaSuWSMjJGxMlbGyTiZV+aVERmR8TJe5pf5ZQFZQBaShWSCTJBFZVGJEiXJUBaTxWRURmUJWUImykRZSpaSTjqZJJNkWVlWlpPlZHl5h6wg75QVZSXZ1lWRVWRV2c5Vk/fI6rK6rCFrylqytqwt68g6sq6sK+vJerK+rC8byIdlQ9kHBsCjMrsyTeQwaCqHQzPZXLaQLeXb8KRsLUdCG9lWtpNPy9EwCjrI1i5ZPic7yvHQSb4gJ8CLsoucBF3ly7Kb7C57yFdkT9nG9ZK95VToI/vKGdBP9pcD5EA5G2rK7IrVkm/KoXKYHC7fkovgbTlSviNHydFyjHxXjpXj5Hg5QU6Uk2SqfE9Olu/LKfIDOVVOk9PlDJkmZ8pZ8kM5W86Rc+VHcp78WM6XC+RCuUimy0/kYrlEZshP5VL5mcyUy+RyuUKulKvkarlGrpXr5Hq5QW6Um+RmuUVulZ/LbXK73CF3yl1yt9wjv5B75Zdyn/xKZsmv5X75J3lAfiMPym/lIfmdPCy/l0fkD/Ko/FEekz/J4/KEPClPydPyZ3lGnpXn5Hl5Qf4iL8pL8rL0UihQUimlVaByqdwqRuVRseo6FaeuV3lVPhVRN6h4daPKr25SBVRBVUgVVgmqiCqqjEJlFalQFVPFVVTdrEqoW1SiKqlKqdLKqTIqSd2qyqrbVDl1uyqv7lAV1J2qoqqkKqsq6i5VVd2tqql7VHV1r6qhaqpaqra6T9VR96u66gFVTz2o6quHVAP1sGqoHlGN1KOqsXpMNVGPq6bqCdVMNVctVEvVSj2pWqunVBvVVrVTT6v26hnVQT2rktVzqqN6XnVSL6jO6kXVRb2kuqqXVTfVXfVQl9Rl5VUv1VulqD6qr3pN9VP91QA1UA1Sr6vB6g01RL2phqpharh6S41Qb6uR6h01So1WY9S7aqwap8arCWqimqRS1XtqsnpfTVEfqKlqmpquZqg0NVMN+PNMc/+B/Pf/Tv6QX8++RW1Vn6ttarvaoXaqXWq32qP2qL1qr9qn9qkslaX2q/3qgDqgDqqD6pA6pA6rw+qIOqKOqqPqmDqmjqsT6rw6pU6rn9UZdVadVefVBXVBXfzzeyA0aKmV1jrQuXRuHaPz6Fh9nY7T1+u8Op+O6Bt0vL5R59c36QK6oC6kC+sEXUQX1Uajtpp0qIvp4jqqb9Yl9C06UZfUpXRp7XQZnaRv/Zfzr7a+VrqVbq1b6za6jW6n2+n2ur3uoDvoZJ2sO+qOupPupDvrzrqL7qK76q66m+6me+geuqfuqb0QIkWn6L76Nd1P99cD9EA9SL+uB+vBeogeoofqoXq4Hq5H6BF6pB6pR+lReoweo8fqsXq8Hq8n6ok6VafqyXqynqKn6Kl6qp6up+s0naZn6Vl6tp6t5+q5ep6ep+fr+XqhXqjTdbperBfrDJ2hl+qlOlMv08v0Cr1Cr9Kr9Bq9Rq/T6/QGvUFv0pt0pv79GzR36B16l96l9+g9eq/eq/fpfTpLZ+n9er8+oA/og/qgPqQP6cP6sD6ij+ij+qg+po/p4/q4PqlP6tP6tD6jz+hz+py+oC/oi/qivqwvZ1/2BTKQgQ50kCvIFcQEMUFsEBvEBXFB3iBvEAkiQXwQH+QPbgoKBAWDQkHhICEoEhQNTICBDSgIg2JB8SAa3ByUCG4JEoOSQamgdOCCMkFScGtQNrgtKBfcHpQP7ggqBHcGFYNKQeWgSnBXUDW4O6gW3BNUD+4NagQ1g1pB7eC+oE5wf1A3eCCoFzwY1A8eChoEDwcNg0eCRsGjQePgsaBJ8HjQNHgiaBY0D1oELYNW/9b5vT9T8CnXy/Q2KaaP6WteM/1MfzPADDSDzOtmsHnDDDFvmqFmmBlu3jIjzNtmpHnHjDKjzRjzrhlrxpnxZoKZaCaZVPOemWzeN1PMB2aqmWammxkmzcw0s8yHZraZY+aaj8w887GZbxaYhWaRSTefmMVmickwn5ql5jOTaZaZ5WaFWWlWmdVmjVlr1pn1ZoPZaDaZzWaL2Wo+N9vMdrPD7DS7zG6zx3xh9povzT7zlckyX5v95k/mgPnGHDTfmkPmO3PYfG+OmB/MUfOjOWZ+MsfNCXPSnDKnzc/mjDlrzpnz5oL5xVw0l8xl47Mv7rM/3lGjxlyYC2MwBmMxFuMwDvNiXoxgBOMxHvNjfiyABbAQFsIETMCiWBSzERIWw2IYxSiWwBKYiIlYCkuhQ4dJmIRlsSyWw3JYHstjBayAFbEiVsbs+5G78G68G+/Be/BevBdrYk2sjbWxDtbBulgX62E9rI/1sQE2wIbYEBthI2yMjbEJNsGm2BSbYTNsgS2wFbbC1tga22AbbIftsD22xw7YAZMxGTtiR+yEnbAzdsYu2AW7Ylfsht2wB/bAntgTe2EvTMEU7It9sR/2wwE4AAfhIByMg3EIDsGhOBSH43AcgSNwJI7EUTgax+C7OBbH4XicgBNxEqZiKk7GyTgFp+BUnIrTcTqmYRrOwlk4G2fjXJyL83Aezsf5uBAXYjqm42JcjBmYgUtxKWZiJi7H5bgSV+JqXI1rcS2ux/W4ETfiZtyMW3ErbsNtuAN34C7chXtwD+7FvbgP92EWZuF+3I8H8AAexIN4CA/hYTyMR/AIHsWjeAyP4XE8DifxJJ7G03gGz+A5PIcX8Be8iJfwMnqMsXlsrL3OxtnrbV6bz8bYPL2FEH+JC9nCNsEWsUWtsQVswb+J0VqbaEvaUra0dbaMTbK3/iGuaCvZyraKvctWtXfban+I69j7bV37gK1nH7S17X1/E9e3D9kG9nHb0D5hG9nmtrFtaZvYx21T+4RtZpvbFralbW+fsR3sszbZPmc72uf/EC+2S+xau86utxvsXvulPWfP2yP2B3vB/mJ72d52kH3dDrZv2CH2TTvUDvtDPMa+a8facXa8nWAn2kl/iKfbGTbNzrSz7Id2tp3zhzjdfmLn2Qw73y6wC+2iX+PsNWXYT+1S+5nNtMvscrvCrrSr7Gq75i9rXWE32c12i91jv7Db7Ha7w+60u+zuX+PsfeyzX9ks+7U9bL+3B+w39qA9ag/Z736Ns/d31P5oj9mf7HF7wp60p+xp+7M9Y8/+uv/svZ+yl+xl660gIEmKNAWUi3JTDOWhWLqO4uh6ykv5KEI3UDzdSPnpJipABakQFaYEKkJFyRCSJaKQilFxitLNVIJuoUQqSaWoNDkqQ0l0K5Wl26gc3U7l6Q6qQHdSRapElakK3UVV6W6qRvdQdbqXalBNqkW16T6qQ/dTXXqA6tGDVJ8eogb0MDWkR6gRPUqN6TFqQo9TU3qCmlFzakEtqRU9Sa3pKWpDbakdPU3t6RnqQM9SMj1HHel56kQvUGd6kbrQS9SVXqZu1J160CvUk16lXtSbUqgP9aXXqB/1pwE0kAbR6zSY3qAh9CYNpWE0nN6iEfQ2jaR3aBSNpjH0Lo2lcTSeJtBEmkSp9B5NpvdpCn1AU2kaTacZlEYzaRZ9SLNpDs2lj2gefUzzaQEtpEWUTp/QYlpCGfQpLaXPKJOW0XJaQStpFa2mNbSW1tF62kAbaRNtpi20lT6nbbSddtBO2kW7aQ99QXvpS9pHX1EWfU376U90gL6hg/QtHaLv6DB9T0foBzpKP9Ix+omO0wk6SafoNP1MZ+gsnaPzdIF+oYt0iS6TJxFCKEMV6jAIc4W5w5gwTxgbXhfGhdeHecN8YSS8IYwPbwzzhzeFBcKCYaGwcJgQFgmLhibE0IYUhmGxsHgYDW8OS4S3hIlhybBUWDp0YZkwKbw1LBveFpYLbw/Lh3eEFcI7w4phpbByWCW8K6wa3h1WC+8Jq4f3hjXCmmGtsHZ4X1gnvD+sGz4Q1gsfDMuFD4UNwofDhuEjYaPw0bBx+FjYJHw8bBo+ETYLm4ctwpZhq/DJsHX4VNgmbBu2C58O24fPhB3CZ8Pk8LmwY/j8VcdTwj5h3/C18LXQ+wfUwuiiaHr0k+ji6JJoRvTT6NLoZ9HM6LLo8uiK6Mroqujq6Jro2ui66ProhujG6Kbo5uiWqPe1cwsHTjrltAtcLpfbxbg8LtZd5+Lc9S6vy+ci7gYX7250+d1NroAr6Aq5wi7BFXFFnXHorCMXumKuuIu6m10Jd4tLdCVdKVfaOVfGJbmWrpVr5Vq7p1wb19a1c0+7p90z7hn3rHvWPec6uuddJ/eC6+xedF3cS+4l97Lr5rq7Hu4V19O96nq53i7Fpbi+rq/r5/q5AW6AG+QGucFusBvihrihbqgb7oa7EW6EG+lGulFulBvjxrixbqwb78a7iW6iS3WpbrKb7Ka4KW6qm+qmu+kuzaW5WW6Wm+1mu7lurpvn5rn5br5b6Ba6dJfuFrvFLsNluKVuqct0mW65W+5WupVutVvt1rq1br1b7za6jW6z2+y2uq1um9vmdrgdbpfb5fa4PW6v2+v2uX0uy2W5/W6/O+AOuIPuW3fIfecOu+/dEfeDO+p+dMfcT+64O+FOulPutPvZnXFn3Tl33l1wv7iL7pK77LxLjbwXmRx5PzIl8kFkamRaZHpkRiQtMjMyK/JhZHZkTmRu5KPIvMjHkfmRBZGFkUWR9MgnkcWRJZGMyKeRpZHPIpmRZZHlkRWRlZFVEe+LbAt9MV/cR/3NvoS/xSf6kr6UL+2dL+OT/K2+rL/Nl/O3+/L+Dl/B3+kr+kq+sn/CN/PNfQvf0rfyT/rW/infxrf17fzTvr1/xnfwz/pk/5zv6J/3nfwLvrN/0XfxL/mu/mXfzXf3Pfwrvqd/1ffyvX2K7+P7+td8P9/fD/AD/SD/uh/s3/BD/Jt+qB/mh/u3/Aj/th/p3/Gj/Gg/xr/rx/pxfryf4Cf6ST7Vv+cn+/f9FP+Bn+qn+el+hk/zM/0s/6Gf7ef4uf4jP89/7Of7BX6hX+TT/Sd+sV/iM/ynfqn/zGf6ZX65X+FX+lV+tV/j1/p1fr3f4Df6TX6z3+K3+s/9Nr/d7/A7/S6/2+/xX/i9/ku/z3/ls/zXfr//kz/gv/EH/bf+kP/OH/bf+yP+B3/U/+iP+Z/8cX/Cn/Sn/Gn/sz/jz/pz/ry/4H/xF/0lf5l/Zo0xxhhj7B+irjLe57/JkX/u9xVCXL+98KH/Or6xwG/9/rkT2keEEM/17vro761GjZSUlD8fm6lEUHyBECJyJT+XuBIvE+3EMyJZtBVl/zIe81fn6i+7X6CrzB+9Q4jYv8rJzv89vjL/bX93//3luHlXnX+BEInFr+TkEVfiK/OX+2/mL9j6KvPn+SZViDZ/lRMnrsRX5k8ST4nnRfLfHMkYY4wxxhhjjP2mv6zc+Wr3t9n35wn6Sk5ucSX+e/fnjDHGGGOMMcYY+9/lxe49nn0yObltZ+78T3V8vt/e6v8t6+EOd/6BzrX+ysQYY4wxxhj7d7ty0X+tV8IYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjOVc/y9+ndjv57ra3xpkjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHG/lP9nwAAAP//sjE7Eg==")
socket$inet_tcp(0x2, 0x1, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x803, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_open_dev$sndctrl(0x0, 0x400, 0x105000)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0))
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x6)
socket$nl_route(0x10, 0x3, 0x0)
open(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20000, 0x105)

3.420797523s ago: executing program 2 (id=345):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
r1 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
listen(r1, 0x101)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$inet(0x2, 0x3, 0x8d)
getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc)
socket(0xa, 0x1, 0x0)
r6 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
r7 = accept4(r1, 0x0, 0x0, 0x0)
close(r0)
recvmmsg(r7, &(0x7f0000003940)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x10000, 0x0)
r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
close_range(r8, 0xffffffffffffffff, 0x0)

3.418610123s ago: executing program 0 (id=346):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000280))
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000080)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x400, 0x9, 0x0, 0x0, 0x0, 0x400000, 0x15e}, {0x0, 0x4}, 0x0, 0x6e6bb1, 0x1, 0x0, 0x2}, {{@in=@multicast1, 0x4d5, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x1f}, 0x0, 0x2, 0x1, 0xf}}, 0xe8)
sendmmsg(r1, &(0x7f0000000180), 0x400000000000077, 0x0)
stat(&(0x7f00000000c0)='./file0\x00', &(0x7f00000003c0))
syz_mount_image$jfs(&(0x7f0000000100), &(0x7f00000001c0)='./file0\x00', 0x101c002, &(0x7f00000008c0)=ANY=[], 0x23, 0x6204, &(0x7f0000001f80)="$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")
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
syz_mount_image$hfs(&(0x7f0000000180), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='umask=00000000000000000016404,dir_umask=00000000000000000000006,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c756d61736b3d30313737370000373737373737373737373737373737332c696f636861727365743563703836352c636f6465706167653d6b6f69382d72750c00cae2aaeeeedb8dc5c45ed9cfe17a2a9bd16ef28a3179aa7eff4288b001ff551ce0544b6d0070091d31754005bb7e4d38403911690b90925981d16b0f3670e41cebe81296d0c5483489"], 0x1, 0x2f5, &(0x7f00000005c0)="$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")
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000240)={0x0, 0x2e, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000002d0000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}}, 0x0)

3.373520174s ago: executing program 3 (id=347):
r0 = syz_io_uring_setup(0x82e, &(0x7f00000005c0)={0x0, 0x20000020, 0x10100, 0x1, 0xfffffffd}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000000)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="b70200000d000000bfa300000000000005000000000000007a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000050404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf27fb6d2c643db7e2d5fb4b0936cdf827fb43a431ca711fcd0cdfa146ed3d09a6175037958e27106e225b7937f02008b5e5a076d83923dd29c034055b67d5b310efcfa89147a7fb0a93d035f2f206d2ef831ab7ea0c34f17e3ad6eecbb622003b538dfd8e012e79578e51bc53099e90f4580d7be3e8c254a5cba117cbdb9cd38bdb2ca8e050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e6a9f65f1328d6704902cbe7bc04b82d2789cb132b8667c214733a18c8b6619f28d996d60a17e3c184b751c51160100000000000080148b9a31ee8dc8b544f3c4a532e60a0ac346dfebd31a08060000000200000000000000334d83239dd20100008000000000d858e8327ef01fb6c86acac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e957bc73ddc4eabba08a406f99f7b1e1ad828267d4eadd3964663e085354133f7130856f756436303767d2e24f29e5dad9796edb697a6ea0183babc190ae2ebf8aad34732181feb28cb0bae7c34dc5e7c805210600000000000000c3dec04b25df45d4f71ab158c36657b7218baa07a99bd50499ccc421ace5e845885efb5b9964e4beba3da8223fe5308e4e65ee93e107000000f8ddebf70132a4d01776839b8eccf707882042e716df9b57b290c661d4e85031086197bcc5cb0e221a0c34323c129102b6ff0100002e88a1940b3c02ed9c92d6f64b1282dc51bb0015982730711c599e1c72ffa11ed8be1a6830d7507005154c46bd3ca96318c570f0721fc7aa2a5836ba99fe1f86468694f22cdf550ef091a78098534f0d973059594119d06d5ea9a8d0857382ec6e2a071474cfc12346e47ad97f4ead7cf70a9d1cdac944779dc08a705414888700a30e2366c6a06b3367a389ca39059787790017b0689a173db9c24db65c1e00015c1d093dab18fd0699fe3304000000323e9c707fe81436b024c2574980397bc49d70c060d57bc88fbe3bbaa058b040362ab926150763fb099408885afc2bf9a46a076b7babfcddeff8c35030669ea69f5e4be1b8e0d6697e97186f9ae97d5670dba6623279f73db9dec75070cd9ab0fda6b069ef6d2857ca3e4e6068f1bf710d133d541da86e0477e4a6cc999dc21c3ef408e6b178e7c9f274d7fafc8d757d33dfa35aa2b2ff7f9a7d365e63845f3e1092f8dde8af3904ea0f4b82649b83ed4fa0f873339c4cadecc13219ba7518aa4f7db34ead13484742067ab743c1d82a5687f2ed690000010000000000000000000000000000000000000099d4fa0000000000003f0ecdc7c82e72919c91d2039afe17e95edef8ba72205beff7771bcb293747b88486cacee403000000a2919a4b09e168e4e4d5ff2ed893f2e314679fa69fc7e0cf761f91b18725704a01c56009a9f748e5aaf30a10bd8c409b1870c1f75e26b45264e3d3f8e0048e55ae289c2f884d0766cddc76eb7f601110ff39053c262279f4ef00fbdb8c328615a9ec84f27a9f3938ae736138b8c1ec220c1540bf3d162dc1c27fa30f0dc60b9f257db5d1c7ed2efce676a93110904d5e055af44664b53c764d61443f73552195c7ccfbf9f03c44432eaa3b7501d4239354da8de21eada75d3a3afb2c76ff0700007976694b6a0f0e946766f57544ff52cef0dd811bec4e3c0a30f2d7d19d26d201721b8eded3bc475958dd498ee2b2d6146e33fc0de1dc2e0516ac565ddb1d4ae89e671282a2d3066ac968c7d7d7db195f255b1b4a85eb9ee0a3b68c9e209756623adf685dd715d68ed1274b4d5502f512493af8f98c615cac3666c58f785c3f758be352a71871d5c081197d37980e4f4e26b5476fb20407ff7098b7174bef66fa03a99b5c0c20b378065fac4ef9ac2d0d804b9400000060e5d3f1749f6aecf69ba83a71caa9bdddc679f1b826f74b6563a4be1fd82b73c8c2bc65f63982"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x0, r3, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}})
io_uring_enter(r0, 0x5b43, 0x0, 0x0, 0x0, 0x0)

2.399821078s ago: executing program 4 (id=348):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
r3 = syz_open_procfs$namespace(0x0, &(0x7f00000012c0)='ns/net\x00')
ioctl$NS_GET_USERNS(r3, 0xb701, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x19)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
io_setup(0x7f, &(0x7f0000000100)=<r7=>0x0)
io_submit(r7, 0x0, &(0x7f0000000380))
r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r9 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
r10 = socket$pppl2tp(0x18, 0x1, 0x1)
close(0xffffffffffffffff)
connect$pppl2tp(r10, &(0x7f0000000940)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4, 0x0, {0xa, 0x4e20, 0xe61, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}}}, 0x3a)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r9}, 0x10)
io_submit(r7, 0x5, &(0x7f00000008c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x6, 0x3ff, r2, &(0x7f0000000440)="93b77454cfda2a73e7195dfc201fc1541da28e0cb66633aa319c69e428dfd7d0199df7b6e770f7d8743853e0ec7abf0bbef6a756d085c4df75ff6f0e316b8ddce736c8504039c9f6e24827b8ff27afaf31632463f997b34bc5e9f0f623a052b9177f887d74b5a8b5960853790ceb31cbe7f1affdd8f9d96c00b84b31540fe980b96a787e288f932292664d", 0x8b, 0x4, 0x0, 0x2, r6}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x16, r5, &(0x7f0000000580)="330a6ce65213a2bb2a71e8e4baeee23259ac3d743c0fca40271f288c51b1e4da41412947a00c955a319ab1fe0bc0f7e121749d76d3d6a2e96d38a63d44c642ccaeb5e64fd2d8d6ce7036e7dc425d9c99a5170ebb467213f30904f352333d03a4d2cedbd4e1", 0x65, 0x6, 0x0, 0x0, r8}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x8, r4, &(0x7f0000000600)="668ba6b445b0d5785f6cd14969bf3abd9d54feadf042fb49e2f8861127cdb17d64e2fca8e1357517332750c726b25613df6a71fc41e559988b7b5fc3e565939e3f124b2404c328206b9f3fc9760c6a6879f3853c9a51068f9609351c52843ff24cf7733bbae0835e5433c1530d93f1bf73e1dc923dc3587bf0a0364aa8e2f6d6a53decf2d62ee1a4fc0db5ace46dbc81687c74ca33b7c94be80b4ea7fe1571ac740587f3dcfbc2201a5d906f2523e9dea8abba00bfdb24cfae7316c04b10497b217ca24382d231e7193558a48234f80d899ddab380e16fac132208fd0837bf9d150964e8f1a972", 0xe7, 0xa11, 0x0, 0x2, r6}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x5, r4, &(0x7f0000000700), 0x0, 0x9f, 0x0, 0x2, r4}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000800)="5d921d900dd69f5a21e1bc0d415edef8ab4836f5d2ba58b41a63b828a90dc34535bbc76ed228c97ad7b4496fa84ba6fcff33ca1d9be5a802c68700a59daf4f4ea6b69d1094680b6ed4aff2c50d9238eb20876e44125fc8c83e7885dde876dde43ab04e", 0x63, 0x2, 0x0, 0x3, r9}])
open(&(0x7f0000000000)='./bus\x00', 0x60342, 0x0)
clock_adjtime(0xffffffd3, &(0x7f0000000340)={0x6})

2.398714038s ago: executing program 2 (id=349):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)

2.311898199s ago: executing program 0 (id=350):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, 0x0, 0x0)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, 0x0, 0x110)
futex(0x0, 0x5, 0x100000, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000880)='sched_switch\x00', r1}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
openat$tun(0xffffff9c, 0x0, 0x0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x803, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
pipe2$9p(0x0, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000500), 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0202000311000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb000000000000000002000100000000000000000b000000000200090000000000000000000000000005000600000000000a00000000000000fe8800000000000000000000000000010000000000000000010014"], 0x88}}, 0x0)

2.300911609s ago: executing program 3 (id=351):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100))
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x26e1, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x26e1, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r2}, 0x6)
ioctl$SIOCSIFHWADDR(r1, 0x89f0, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'})

2.172275299s ago: executing program 3 (id=352):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/19], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0)

1.118234084s ago: executing program 2 (id=353):
epoll_create1(0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4)
pselect6(0x40, &(0x7f0000000300)={0x5, 0x4000000000000000, 0x0, 0x1, 0x0, 0x0, 0x6, 0x10000000000}, &(0x7f0000000000)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000002, 0xdd83}, 0x0, 0x0, 0x0)

600.176257ms ago: executing program 0 (id=354):
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x19)
clock_nanosleep(0x9, 0x0, &(0x7f0000000000)={0x0, 0x989680}, 0x0)

549.998037ms ago: executing program 3 (id=355):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x13, &(0x7f0000000580)=@framed={{}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x20008000}, {0x85, 0x0, 0x0, 0x72}}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf}}]}, &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x10, 0x38, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

207.204879ms ago: executing program 2 (id=356):
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x67d0, 0x4)
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x2d, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)=0xbbc, 0x4)
recvmmsg(0xffffffffffffffff, &(0x7f0000003dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x45833af92e4b39bd, 0x0)

110.98489ms ago: executing program 4 (id=357):
r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$apparmor_exec(r0, &(0x7f0000000600)={'exec ', ':\x00N\xff8A\xf5G\x16\x8eQhj\x1b\x04\xe5\x8d\xa1\xc2\xaa-\xc7gD#\x03\x9c\x01\xaa\xdd\x80\x9e\xff\x19{S\x15\xfe\xbaO\xae\xa1z,\xde-\x8fKN\x86g\x9b\xe4\xfe\xae/\x90\xd8^O\x86\x81\x84\xabq\xeb\x8b;F\xe9\xee\xc8\xd1\xb4Q\x05\x14\xe7\xa9c(0D7[\xccB\xe1Y\x99\x05\xae\xba\x00\xc4\b1\x84\xd6\b\xb0\xf0\x9a\x98\x85;\xffUq9:\xaf\xa2\x83\x88d\xc0\xe5\xcfF\x144}\x02\xb9\xb1\x85\x7fx\xe6\'\x8c\x898\'ej\xde;+\n1\xd4\x15\xf9Q\xacw\xcfS\xed\x80\fkt\xed\xdb|\x10\xbd\xbe\xf1\x94\x99\xe1?\x10\xda\xc7\xed[\x8bN$\x18\x01\r\xdd\xf0|\xd9\xab\xa4>\xb6\xaemx,\xfb\x8e\xd69z\x10\xf1\x1ax\x98\x84Kd\x88\xe7\f\xe4v\xb1$5k\xe4\xa9\xe8\xc4\xc94\xe1\xa0\x00a|W\xcc\xd5\x9d\x86~\"1\xeau\xfbv\xe3\xf5[\x8c\xf6\xde\xaf\xe6S\x9e\xd5\xeb4\xcf\xdf'}, 0xfe)

109.568629ms ago: executing program 1 (id=358):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000bc0)={'wpan0\x00', <r2=>0x0})
r3 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r7, &(0x7f0000000000)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
mount(&(0x7f0000000300), &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000080)='mountstats\x00')
lseek(r8, 0x7fffffffffffffff, 0x0)
fadvise64(r3, 0x0, 0x0, 0x1)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x8, 0x2, 0x200, 0x0, 0x43, 0xa0, 0x1b0, 0x98, 0x300, 0x178, 0x178, 0x300, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x70, 0x90, 0x0, {0x0, 0x7a010000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x260)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000002c0)={0x3c, r1, 0x1, 0x70bd29, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x20, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}]}]}, 0x3c}}, 0x0)

0s ago: executing program 4 (id=359):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x8241, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0)
writev(r2, &(0x7f0000000400)=[{&(0x7f00000002c0)="a609a8", 0x3}], 0x1)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0)
ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f0000000000)=0x3)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.30' (ED25519) to the list of known hosts.
[   49.598715][ T4154] cgroup: Unknown subsys name 'net'
[   49.746610][ T4154] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   51.012287][ T4154] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k FS
[   52.198326][ T4177] chnl_net:caif_netlink_parms(): no params data found
[   52.276386][ T4166] chnl_net:caif_netlink_parms(): no params data found
[   52.341228][ T4165] chnl_net:caif_netlink_parms(): no params data found
[   52.397453][ T4177] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.404716][ T4177] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.413786][ T4177] device bridge_slave_0 entered promiscuous mode
[   52.434884][ T4167] chnl_net:caif_netlink_parms(): no params data found
[   52.449239][ T4177] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.456668][ T4177] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.464821][ T4177] device bridge_slave_1 entered promiscuous mode
[   52.480838][ T4171] chnl_net:caif_netlink_parms(): no params data found
[   52.566104][ T4177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   52.575613][ T4166] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.582807][ T4166] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.591434][ T4166] device bridge_slave_0 entered promiscuous mode
[   52.601621][ T4165] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.608680][ T4165] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.617343][ T4165] device bridge_slave_0 entered promiscuous mode
[   52.630838][ T4177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   52.640823][ T4166] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.647877][ T4166] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.656691][ T4166] device bridge_slave_1 entered promiscuous mode
[   52.666515][ T4165] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.673603][ T4165] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.681783][ T4165] device bridge_slave_1 entered promiscuous mode
[   52.743213][ T4166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   52.764258][ T4171] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.771422][ T4171] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.779016][ T4171] device bridge_slave_0 entered promiscuous mode
[   52.788630][ T4177] team0: Port device team_slave_0 added
[   52.796048][ T4166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   52.812038][ T4167] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.819081][ T4167] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.829260][ T4167] device bridge_slave_0 entered promiscuous mode
[   52.840974][ T4165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   52.850469][ T4171] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.857518][ T4171] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.865422][ T4171] device bridge_slave_1 entered promiscuous mode
[   52.874019][ T4177] team0: Port device team_slave_1 added
[   52.893469][ T4167] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.900711][ T4167] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.908557][ T4167] device bridge_slave_1 entered promiscuous mode
[   52.923810][ T4165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   52.951967][ T4166] team0: Port device team_slave_0 added
[   52.959317][ T4171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   52.989663][ T4166] team0: Port device team_slave_1 added
[   52.996857][ T4171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.015690][ T4167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.030969][ T4177] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.041412][ T4177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.067665][ T4177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.094721][ T4167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.106108][ T4165] team0: Port device team_slave_0 added
[   53.114294][ T4165] team0: Port device team_slave_1 added
[   53.120832][ T4177] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.127774][ T4177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.157655][ T4177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.178442][ T4171] team0: Port device team_slave_0 added
[   53.209173][ T4166] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.216157][ T4166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.244017][ T4166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.256773][ T4171] team0: Port device team_slave_1 added
[   53.277884][ T4165] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.285514][ T4165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.311449][ T4165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.323560][ T4166] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.335130][ T4166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.363244][ T4166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.381888][ T4167] team0: Port device team_slave_0 added
[   53.395794][ T4165] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.403040][ T4165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.429056][ T4165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.456003][ T4167] team0: Port device team_slave_1 added
[   53.472709][ T4177] device hsr_slave_0 entered promiscuous mode
[   53.479341][ T4177] device hsr_slave_1 entered promiscuous mode
[   53.495288][ T4171] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.502484][ T4171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.528587][ T4171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.565046][ T4171] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.572120][ T4171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.598457][ T4171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.622672][ T4167] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.629631][ T4167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.658295][ T4167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.672920][ T4165] device hsr_slave_0 entered promiscuous mode
[   53.679728][ T4165] device hsr_slave_1 entered promiscuous mode
[   53.686703][ T4165] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   53.694718][ T4165] Cannot create hsr debugfs directory
[   53.712569][ T4166] device hsr_slave_0 entered promiscuous mode
[   53.719107][ T4166] device hsr_slave_1 entered promiscuous mode
[   53.725748][ T4166] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   53.734273][ T4166] Cannot create hsr debugfs directory
[   53.741056][ T4167] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.747996][ T4167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.774183][ T4167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.871225][ T4167] device hsr_slave_0 entered promiscuous mode
[   53.877774][ T4167] device hsr_slave_1 entered promiscuous mode
[   53.884592][ T4167] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   53.892347][ T4167] Cannot create hsr debugfs directory
[   53.914885][ T4171] device hsr_slave_0 entered promiscuous mode
[   53.921750][ T4171] device hsr_slave_1 entered promiscuous mode
[   53.928166][ T4171] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   53.938271][ T4171] Cannot create hsr debugfs directory
[   53.971206][ T1108] Bluetooth: hci1: command 0x0409 tx timeout
[   53.971206][ T4156] Bluetooth: hci3: command 0x0409 tx timeout
[   53.971715][ T1108] Bluetooth: hci2: command 0x0409 tx timeout
[   53.977359][ T4156] Bluetooth: hci4: command 0x0409 tx timeout
[   53.995566][ T4156] Bluetooth: hci0: command 0x0409 tx timeout
[   54.217840][ T4165] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   54.230822][ T4165] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   54.250814][ T4165] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   54.259307][ T4165] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   54.305353][ T4177] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   54.317767][ T4177] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   54.329934][ T4177] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   54.347456][ T4177] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   54.419346][ T4166] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   54.431635][ T4166] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   54.449238][ T4166] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   54.469781][ T4166] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   54.485331][ T4165] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.515229][ T4171] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   54.524948][ T4171] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   54.547374][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   54.557010][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   54.566092][ T4171] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   54.580090][ T4171] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   54.599670][ T4165] 8021q: adding VLAN 0 to HW filter on device team0
[   54.627316][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   54.638836][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   54.648296][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.655509][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.678666][ T4177] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.689221][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   54.713484][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   54.722738][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   54.732486][  T154] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.741951][  T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.753867][ T4167] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   54.763756][ T4167] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   54.776702][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   54.795005][ T4167] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   54.806046][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   54.819390][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   54.827449][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   54.839405][ T4167] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   54.856433][ T4177] 8021q: adding VLAN 0 to HW filter on device team0
[   54.869141][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   54.878183][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   54.887049][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   54.895872][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   54.904571][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.911664][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.919403][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   54.927726][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   54.963101][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   54.972096][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   54.991676][ T4166] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.998866][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   55.008691][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   55.017640][ T1214] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.024733][ T1214] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.032969][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   55.071824][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   55.082402][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   55.091778][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   55.100025][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   55.108684][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   55.117225][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   55.132425][ T4165] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   55.148218][ T4166] 8021q: adding VLAN 0 to HW filter on device team0
[   55.160124][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   55.169184][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   55.185305][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   55.194703][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   55.203752][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   55.213890][ T1214] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.220975][ T1214] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.229730][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   55.239340][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   55.268590][ T4171] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.277753][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   55.293332][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   55.307821][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   55.317447][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   55.326085][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.333328][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.344612][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   55.352950][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   55.361628][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   55.370120][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   55.378539][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   55.389112][ T4177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   55.425682][  T498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   55.448174][ T4167] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.465052][ T4171] 8021q: adding VLAN 0 to HW filter on device team0
[   55.476743][  T498] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   55.485223][  T498] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   55.493897][  T498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   55.503335][  T498] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   55.512461][  T498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   55.520053][  T498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   55.528285][  T498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   55.537967][  T498] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   55.547153][  T498] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.554248][  T498] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.574190][ T4165] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.591292][  T498] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   55.604156][  T498] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   55.617208][  T498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   55.628026][  T498] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   55.637700][  T498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   55.647047][  T498] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   55.656049][  T498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   55.663979][  T498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   55.672807][  T498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   55.681478][  T498] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   55.689686][  T498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   55.698723][  T498] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   55.707571][  T498] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.714671][  T498] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.722509][  T498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   55.735628][  T498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   55.747871][ T4166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   55.762284][ T4167] 8021q: adding VLAN 0 to HW filter on device team0
[   55.784344][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   55.797383][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   55.811400][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   55.818863][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   55.840047][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   55.849118][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   55.858598][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   55.867546][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   55.877483][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   55.893194][ T4177] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.904457][ T4171] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   55.931343][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   55.960574][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   55.970229][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   55.985627][ T1214] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.992802][ T1214] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.001276][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   56.009545][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   56.018005][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   56.027211][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   56.036424][ T1214] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.043622][ T1214] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.051752][ T4212] Bluetooth: hci4: command 0x041b tx timeout
[   56.056256][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   56.057776][ T4212] Bluetooth: hci2: command 0x041b tx timeout
[   56.066033][ T4215] Bluetooth: hci0: command 0x041b tx timeout
[   56.072899][ T4212] Bluetooth: hci3: command 0x041b tx timeout
[   56.078931][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   56.084435][ T4212] Bluetooth: hci1: command 0x041b tx timeout
[   56.098160][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   56.106784][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   56.115417][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   56.123376][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   56.169967][ T4167] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   56.185115][ T4167] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   56.198640][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   56.215736][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   56.230001][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   56.243096][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   56.251789][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   56.259969][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   56.268714][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   56.277273][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   56.285852][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   56.293631][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   56.308653][ T4166] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.330010][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   56.355984][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   56.372179][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   56.397397][ T4165] device veth0_vlan entered promiscuous mode
[   56.417062][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   56.425841][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   56.455079][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   56.474390][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   56.496380][ T4165] device veth1_vlan entered promiscuous mode
[   56.518218][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   56.527562][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   56.538890][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   56.547538][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   56.556788][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   56.564650][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   56.576518][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   56.584378][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   56.604196][ T4177] device veth0_vlan entered promiscuous mode
[   56.612044][ T4166] device veth0_vlan entered promiscuous mode
[   56.618504][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   56.627387][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   56.636892][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   56.644804][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   56.666142][ T4167] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.680888][ T4166] device veth1_vlan entered promiscuous mode
[   56.687425][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   56.697003][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   56.704912][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   56.717446][ T4171] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.733342][ T4177] device veth1_vlan entered promiscuous mode
[   56.752411][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   56.762309][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   56.770186][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   56.780143][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   56.790652][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   56.799134][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   56.809494][ T4165] device veth0_macvtap entered promiscuous mode
[   56.821832][ T4165] device veth1_macvtap entered promiscuous mode
[   56.853884][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   56.863444][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   56.872867][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   56.881805][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   56.890098][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   56.904165][ T4167] device veth0_vlan entered promiscuous mode
[   56.913277][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   56.922649][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   56.937805][ T4177] device veth0_macvtap entered promiscuous mode
[   56.948724][ T4166] device veth0_macvtap entered promiscuous mode
[   56.964818][ T4165] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.973603][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   56.985482][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   56.993320][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   57.001930][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   57.012178][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   57.020757][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   57.029178][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   57.038030][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   57.051532][ T4177] device veth1_macvtap entered promiscuous mode
[   57.061137][ T4166] device veth1_macvtap entered promiscuous mode
[   57.071474][ T4165] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.079239][ T4167] device veth1_vlan entered promiscuous mode
[   57.090480][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   57.098320][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   57.106968][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   57.116481][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   57.125149][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   57.134032][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   57.142757][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   57.158690][ T4165] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.167699][ T4165] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.177360][ T4165] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.186915][ T4165] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.217086][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   57.229357][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   57.244023][ T4177] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.279211][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   57.287690][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   57.296780][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   57.305666][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   57.314648][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   57.325451][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   57.335281][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   57.347383][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   57.357948][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   57.369065][ T4177] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.377609][ T4171] device veth0_vlan entered promiscuous mode
[   57.385396][ T4167] device veth0_macvtap entered promiscuous mode
[   57.396274][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   57.405753][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   57.414857][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   57.423643][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   57.434952][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   57.444667][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   57.455467][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   57.465557][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   57.476588][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   57.488320][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.506356][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   57.517137][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   57.527199][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   57.539147][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   57.551566][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.561342][ T4177] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.570041][ T4177] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.579804][ T4177] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.589416][ T4177] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.606364][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   57.615205][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   57.624285][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   57.633356][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   57.645636][ T4166] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.657129][ T4166] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.666063][ T4166] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.675059][ T4166] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.688226][ T4167] device veth1_macvtap entered promiscuous mode
[   57.724713][ T4171] device veth1_vlan entered promiscuous mode
[   57.755244][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   57.765997][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   57.776242][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   57.786832][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   57.796709][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   57.807156][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   57.818636][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.844533][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   57.855516][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   57.876996][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   57.888419][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   57.900168][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   57.911139][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   57.921107][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   57.931604][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   57.942608][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.986882][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   57.998093][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   58.009956][ T4167] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.019706][ T4167] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.028444][ T4167] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.038796][ T4167] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.055928][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.064622][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.087735][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   58.096037][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   58.104992][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   58.123166][ T4171] device veth0_macvtap entered promiscuous mode
[   58.130714][   T26] Bluetooth: hci1: command 0x040f tx timeout
[   58.130918][ T1106] Bluetooth: hci3: command 0x040f tx timeout
[   58.153315][ T1106] Bluetooth: hci0: command 0x040f tx timeout
[   58.159409][ T1106] Bluetooth: hci2: command 0x040f tx timeout
[   58.166460][ T1106] Bluetooth: hci4: command 0x040f tx timeout
[   58.177992][ T4171] device veth1_macvtap entered promiscuous mode
[   58.216139][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.228316][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.279144][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   58.287872][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   58.297316][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   58.308042][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.316743][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   58.328721][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.331391][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.350757][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.351773][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   58.370558][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.375206][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.382215][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.387717][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.400695][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   58.413274][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.427559][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   58.440601][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.454294][ T4171] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.468657][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   58.478284][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.487168][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   58.489324][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.495218][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   58.510579][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   58.518980][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   58.535761][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   58.554173][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.564968][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   58.575667][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.585741][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   58.596437][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.606506][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   58.618224][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.630548][ T4171] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.649612][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   58.669870][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   58.682260][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   58.698280][ T4171] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.713301][ T4171] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.722492][ T4171] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.731801][ T4171] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.758071][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.783528][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.784354][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.824474][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.862088][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   58.891565][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   58.954541][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.978320][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.029106][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   59.049855][ T4239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.064932][ T4239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.197733][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   59.753439][ T4260] netlink: 277 bytes leftover after parsing attributes in process `syz.1.2'.
[   60.211987][ T4212] Bluetooth: hci1: command 0x0419 tx timeout
[   60.934056][   T13] Bluetooth: hci4: command 0x0419 tx timeout
[   60.950427][   T13] Bluetooth: hci2: command 0x0419 tx timeout
[   60.966064][   T13] Bluetooth: hci0: command 0x0419 tx timeout
[   60.972763][   T13] Bluetooth: hci3: command 0x0419 tx timeout
[   61.080765][ T4248] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   61.880222][ T4269] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'.
[   62.086934][ T4248] usb 3-1: Using ep0 maxpacket: 16
[   62.167374][ T4285] loop3: detected capacity change from 0 to 256
[   62.260409][ T4210] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   62.260536][ T4248] usb 3-1: unable to read config index 0 descriptor/start: -71
[   62.305169][ T4248] usb 3-1: can't read configurations, error -71
[   62.419694][ T4289] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore
[   62.429357][ T4289] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[   63.278600][   T25] audit: type=1800 audit(1731531547.618:2): pid=4293 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.11" name="file1" dev="loop3" ino=1048590 res=0 errno=0
[   63.410776][ T4210] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   63.452591][ T4210] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   64.070411][ T4210] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[   64.089782][ T4210] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   64.112239][ T4210] usb 1-1: config 0 descriptor??
[   64.141573][ T4298] loop2: detected capacity change from 0 to 512
[   64.207135][ T4298] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   64.244053][ T4303] loop4: detected capacity change from 0 to 256
[   64.267955][ T4298] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   64.282013][ T4305] loop1: detected capacity change from 0 to 2048
[   64.338087][ T4298] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.14: iget: bad extended attribute block 512
[   64.357590][ T4298] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.14: couldn't read orphan inode 15 (err -117)
[   64.493983][ T4298] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   66.080758][ T4305]  loop1: p3 < > p4 < >
[   66.119292][ T4319] loop3: detected capacity change from 0 to 512
[   66.187320][ T3544]  loop1: p3 < > p4 < >
[   66.202294][ T4319] =======================================================
[   66.202294][ T4319] WARNING: The mand mount option has been deprecated and
[   66.202294][ T4319]          and is ignored by this kernel. Remove the mand
[   66.202294][ T4319]          option from the mount to silence this warning.
[   66.202294][ T4319] =======================================================
[   66.255014][ T4319] EXT4-fs (loop3): 1 truncate cleaned up
[   66.267001][ T4319] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none.
[   66.311941][ T4210] usbhid 1-1:0.0: can't add hid device: -71
[   66.318102][ T4210] usbhid: probe of 1-1:0.0 failed with error -71
[   66.337087][ T4319] EXT4-fs error (device loop3): ext4_add_entry:2486: inode #2: comm syz.3.18: Directory hole found for htree leaf block 0
[   66.346591][ T4210] usb 1-1: USB disconnect, device number 2
[   66.376233][ T4319] EXT4-fs (loop3): Remounting filesystem read-only
[   66.825569][ T4319] EXT4-fs error (device loop3): ext4_add_entry:2486: inode #2: comm syz.3.18: Directory hole found for htree leaf block 0
[   66.909087][ T4319] EXT4-fs (loop3): Remounting filesystem read-only
[   66.956137][ T4306] udevd[4306]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[   66.974404][ T4245] udevd[4245]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[   67.072568][ T4306] udevd[4306]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[   67.086331][ T4247] udevd[4247]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[   67.630666][ T4210] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   67.630710][   T26] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[   68.330356][ T4210] usb 1-1: Using ep0 maxpacket: 16
[   68.340733][   T26] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[   68.352319][   T26] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[   68.366963][   T26] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   68.541235][ T4210] usb 1-1: config 0 has no interfaces?
[   68.548828][ T4210] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   68.643934][ T4210] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   68.653124][   T26] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   68.702264][   T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   68.812408][ T4210] usb 1-1: config 0 descriptor??
[   68.821175][   T26] usb 2-1: Product: syz
[   68.865465][   T26] usb 2-1: Manufacturer: syz
[   68.968199][   T26] usb 2-1: SerialNumber: syz
[   69.122699][ T4212] usb 1-1: USB disconnect, device number 3
[   69.173124][ T4349] loop4: detected capacity change from 0 to 512
[   69.490662][ T4356] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   69.702250][   T26] usb 2-1: 0:2 : does not exist
[   69.807423][ T4349] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   69.951468][ T4349] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   69.995557][   T26] usb 2-1: USB disconnect, device number 2
[   70.151674][ T4361] netlink: 8 bytes leftover after parsing attributes in process `syz.2.28'.
[   71.440206][ T4363] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[   71.662482][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[   71.669029][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[   71.872013][ T4247] udevd[4247]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   73.050326][ T4215] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   73.275186][ T4384] loop1: detected capacity change from 0 to 8192
[   73.369525][ T4388] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   74.058871][ T4215] usb 1-1: Using ep0 maxpacket: 16
[   74.200717][ T4215] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   74.211163][ T4215] usb 1-1: config 0 has no interfaces?
[   74.216650][ T4215] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   74.240304][ T4215] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   74.257500][ T4215] usb 1-1: config 0 descriptor??
[   74.940116][ T4380] udc-core: couldn't find an available UDC or it's busy
[   74.967766][ T4380] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   75.171798][ T4396] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   75.272507][ T4246] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   75.382136][ T4400] loop1: detected capacity change from 0 to 256
[   75.533351][ T4215] usb 1-1: USB disconnect, device number 4
[   75.653631][ T4390] loop3: detected capacity change from 0 to 40427
[   75.697333][ T4246] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   75.751280][ T4246] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[   76.803122][ T4390] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[   77.067486][ T4390] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   77.154015][ T4390] F2FS-fs (loop3): invalid crc value
[   77.176561][ T4390] F2FS-fs (loop3): Failed to start F2FS issue_checkpoint_thread (-12)
[   77.359010][    T7] cfg80211: failed to load regulatory.db
[   77.410542][ T4246] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   77.435775][ T4246] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   77.493973][ T4246] usb 5-1: can't set config #1, error -71
[   77.506323][ T4246] usb 5-1: USB disconnect, device number 2
[   77.658705][ T4414] loop4: detected capacity change from 0 to 8192
[   77.674890][ T4421] loop2: detected capacity change from 0 to 1024
[   77.734687][ T4421] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   78.151910][ T4421] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,dioread_nolock,nogrpid,min_batch_time=0x0000000000000005,,errors=continue. Quota mode: none.
[   78.580397][ T4215] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   78.656034][ T4414] loop4: detected capacity change from 0 to 512
[   78.689273][ T4414] EXT4-fs (loop4): Unrecognized mount option "=" or missing value
[   79.401526][ T4437] loop1: detected capacity change from 0 to 128
[   79.980558][ T4215] usb 1-1: Using ep0 maxpacket: 16
[   80.191631][ T4215] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   80.214586][ T4215] usb 1-1: config 0 has no interfaces?
[   80.267777][ T4215] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   80.337603][ T4442] loop3: detected capacity change from 0 to 256
[   80.346373][ T4215] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   81.132399][ T4215] usb 1-1: config 0 descriptor??
[   81.203925][ T4215] usb 1-1: can't set config #0, error -71
[   81.217353][ T4213] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   81.231311][ T4215] usb 1-1: USB disconnect, device number 5
[   81.259483][ T4213] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   84.043483][ T4156] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   84.076508][ T4490] binder: 4483:4490 ioctl c0306201 0 returned -14
[   84.310498][ T4156] usb 5-1: Using ep0 maxpacket: 16
[   84.336907][ T4506] loop0: detected capacity change from 0 to 16
[   84.342351][ T4504] loop3: detected capacity change from 0 to 512
[   84.405030][ T4498] kvm: pic: level sensitive irq not supported
[   84.405367][ T4498] kvm: pic: non byte read
[   84.409177][ T4504] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[   84.460111][ T4506] erofs: (device loop0): mounted with root inode @ nid 36.
[   84.468473][ T4156] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   84.491561][ T4504] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #17: comm syz.3.66: iget: bad i_size value: -6917529027641081756
[   84.505108][ T4156] usb 5-1: config 0 has no interfaces?
[   84.510902][ T4156] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   84.519942][ T4156] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   84.530620][ T4213] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   84.531076][ T4156] usb 5-1: config 0 descriptor??
[   84.558484][ T4506] 9pnet: p9_errstr2errno: server reported unknown error 1844674407370
[   84.572196][ T4504] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.66: couldn't read orphan inode 17 (err -117)
[   84.604621][ T4504] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,bsddf,nouid32,,errors=continue. Quota mode: writeback.
[   84.698040][ T4513] loop0: detected capacity change from 0 to 256
[   84.781703][ T4213] usb 2-1: Using ep0 maxpacket: 16
[   84.865732][ T4513] FAT-fs (loop0): Directory bread(block 64) failed
[   84.892920][ T4513] FAT-fs (loop0): Directory bread(block 65) failed
[   84.899530][ T4513] FAT-fs (loop0): Directory bread(block 66) failed
[   84.906410][ T4513] FAT-fs (loop0): Directory bread(block 67) failed
[   84.910611][ T4213] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[   84.913030][ T4513] FAT-fs (loop0): Directory bread(block 68) failed
[   84.931667][ T4513] FAT-fs (loop0): Directory bread(block 69) failed
[   84.940586][ T4211] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   84.941461][ T4513] FAT-fs (loop0): Directory bread(block 70) failed
[   84.956233][ T4513] FAT-fs (loop0): Directory bread(block 71) failed
[   85.054177][ T4513] FAT-fs (loop0): Directory bread(block 72) failed
[   85.217793][ T4513] FAT-fs (loop0): Directory bread(block 73) failed
[   85.709956][ T4213] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[   85.720001][ T4213] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576
[   85.730746][ T4213] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 22
[   85.820570][ T4213] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   85.838103][ T4213] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   85.854518][ T4213] usb 2-1: SerialNumber: syz
[   85.880736][ T4495] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   85.901477][ T4213] cdc_acm 2-1:1.0: Control and data interfaces are not separated!
[   85.915434][ T4213] cdc_acm 2-1:1.0: This needs exactly 3 endpoints
[   85.929176][ T4213] cdc_acm: probe of 2-1:1.0 failed with error -22
[   85.950350][ T4211] usb 4-1: Using ep0 maxpacket: 16
[   86.062621][ T4213] usb 5-1: USB disconnect, device number 3
[   86.080434][ T4211] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   86.101666][ T4211] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   86.139624][ T4211] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   86.159890][ T4211] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   86.189034][ T4211] usb 4-1: config 0 descriptor??
[   86.203068][ T4439] usb 2-1: USB disconnect, device number 3
[   86.439373][ T4524] loop0: detected capacity change from 0 to 128
[   86.507503][   T25] audit: type=1800 audit(1731531571.118:3): pid=4524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.73" name="bus" dev="loop0" ino=1048594 res=0 errno=0
[   86.546198][   T25] audit: type=1800 audit(1731531571.118:4): pid=4524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.73" name="bus" dev="loop0" ino=1048594 res=0 errno=0
[   86.571289][ T4524] attempt to access beyond end of device
[   86.571289][ T4524] loop0: rw=0, want=240, limit=128
[   86.683658][ T4211] microsoft 0003:045E:07DA.0002: invalid report_count 60852
[   86.708209][ T4211] microsoft 0003:045E:07DA.0002: item 0 2 1 9 parsing failed
[   86.719080][ T4211] microsoft 0003:045E:07DA.0002: parse failed
[   86.730000][ T4211] microsoft: probe of 0003:045E:07DA.0002 failed with error -22
[   86.950479][ T4531] binder: 4529:4531 ioctl c0306201 0 returned -14
[   86.986956][ T4246] usb 4-1: USB disconnect, device number 2
[   87.583380][ T4544] loop1: detected capacity change from 0 to 256
[   87.703883][ T4544] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[   87.896379][ T4544] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512
[   87.925607][ T4544] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[   87.959327][ T4544] UDF-fs: Scanning with blocksize 512 failed
[   88.858141][ T4544] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[   88.910114][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!!
[   88.919169][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!!
[   88.950262][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!!
[   88.961883][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #288!!!
[   88.981139][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #288!!!
[   89.007296][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #288!!!
[   89.018978][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!!
[   89.030271][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!!
[   89.043699][ T4568] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   89.050294][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!!
[   89.066683][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!!
[   89.607157][ T4544] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   89.842900][ T4578] binder: 4577:4578 ioctl c0306201 0 returned -14
[   89.984583][ T4583] sch_tbf: burst 65535 is lower than device lo mtu (65550) !
[   93.606625][ T4614] 9pnet: Insufficient options for proto=fd
[   93.648255][ T4619] loop3: detected capacity change from 0 to 1024
[   93.738797][ T4619] hfsplus: failed to load root directory
[   93.920724][ T4211] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   94.300618][ T4211] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   94.336047][ T4211] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[   94.417974][ T4605] loop0: detected capacity change from 0 to 32768
[   94.451310][ T4211] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   94.486565][ T4211] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   94.487000][ T4628] binder: 4625:4628 ioctl c0306201 0 returned -14
[   94.526874][ T4211] usb 5-1: SerialNumber: syz
[   94.681668][ T4630] sg_write: data in/out 231/14 bytes for SCSI command 0x0-- guessing data in;
[   94.681668][ T4630]    program syz.2.106 not setting count and/or reply_len properly
[   94.694036][ T4605] JBD2: Ignoring recovery information on journal
[   94.829967][ T4605] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   94.944778][ T4211] usb 5-1: 0:2 : does not exist
[   94.949754][ T4211] usb 5-1: unit 255 not found!
[   95.028063][ T4637] netlink: 4 bytes leftover after parsing attributes in process `syz.3.107'.
[   96.945895][ T4166] ocfs2: Unmounting device (7,0) on (node local)
[   96.953511][ T4637] team0 (unregistering): Port device team_slave_0 removed
[   97.060725][ T4211] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5)
[   97.112565][ T4637] team0 (unregistering): Port device team_slave_1 removed
[   97.166079][ T4211] usb 5-1: USB disconnect, device number 4
[   97.260199][ T4655] Zero length message leads to an empty skb
[   97.284784][ T4659] xt_connbytes: Forcing CT accounting to be enabled
[   97.305550][ T4659] x_tables: ip_tables: osf match: only valid for protocol 6
[   97.383257][ T4662] binder: 4660:4662 ioctl c0306201 0 returned -14
[   97.480149][ T4306] udevd[4306]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   97.851794][ T4676] loop2: detected capacity change from 0 to 512
[   97.883521][ T4681] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   97.929039][ T4676] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   97.961785][ T4676] EXT4-fs (loop2): 1 truncate cleaned up
[   97.969835][ T4676] EXT4-fs (loop2): mounted filesystem without journal. Opts: data=journal,jqfmt=vfsv0,errors=continue,nodelalloc,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none.
[   98.510502][ T4156] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   98.836417][ T4704] loop2: detected capacity change from 0 to 256
[   98.914374][ T4705] binder: 4701:4705 ioctl c0306201 0 returned -14
[  100.741309][ T4156] usb 2-1: config 0 has no interfaces?
[  101.095715][ T4690] loop4: detected capacity change from 0 to 32768
[  101.200674][ T4690] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.126 (4690)
[  101.258730][ T4698] loop0: detected capacity change from 0 to 32768
[  101.310738][ T4690] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  101.355182][ T4690] BTRFS info (device loop4): using free space tree
[  101.400510][ T4690] BTRFS info (device loop4): has skinny extents
[  101.440064][ T4698] JBD2: Ignoring recovery information on journal
[  101.701649][ T4698] JBD2: recovery failed
[  101.729758][ T4698] (syz.0.130,4698,0):ocfs2_journal_load:1083 ERROR: Failed to load journal!
[  101.770346][ T4698] (syz.0.130,4698,1):ocfs2_check_volume:2429 ERROR: ocfs2 journal load failed! -5
[  101.779607][ T4698] (syz.0.130,4698,1):ocfs2_check_volume:2485 ERROR: status = -5
[  101.806881][ T4690] BTRFS error (device loop4): open_ctree failed
[  101.834826][ T4710] loop2: detected capacity change from 0 to 32768
[  101.858910][ T4698] (syz.0.130,4698,0):ocfs2_mount_volume:1824 ERROR: status = -5
[  101.893584][ T4710] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.134 (4710)
[  101.946177][ T4698] (syz.0.130,4698,0):ocfs2_fill_super:1177 ERROR: status = -5
[  101.998396][ T4710] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  102.042980][ T4710] BTRFS info (device loop2): using free space tree
[  102.101455][ T4710] BTRFS info (device loop2): has skinny extents
[  102.170508][ T4156] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  102.199987][ T4156] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.244064][ T4156] usb 2-1: config 0 descriptor??
[  102.310507][ T4156] usb 2-1: can't set config #0, error -71
[  102.507849][ T4156] usb 2-1: USB disconnect, device number 4
[  103.049521][ T4710] BTRFS info (device loop2): enabling ssd optimizations
[  103.334040][ T4783] binder: 4782:4783 ioctl c0306201 0 returned -14
[  105.347770][ T4248] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  105.378349][ T4248] Bluetooth: hci3: Injecting HCI hardware error event
[  105.387796][ T4174] Bluetooth: hci3: hardware error 0x00
[  105.445047][ T4809] loop4: detected capacity change from 0 to 256
[  105.635794][ T4809] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  105.816564][ T4817] netlink: 277 bytes leftover after parsing attributes in process `syz.1.153'.
[  106.762963][ T4824] binder: 4823:4824 ioctl c0306201 0 returned -14
[  106.884229][ T4827] loop4: detected capacity change from 0 to 512
[  107.084263][ T4834] loop1: detected capacity change from 0 to 256
[  108.425150][ T4837] ODEBUG: Out of memory. ODEBUG disabled
[  108.697233][ T4827] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  108.901778][ T4827] EXT4-fs (loop4): 1 truncate cleaned up
[  108.945423][ T4827] EXT4-fs (loop4): mounted filesystem without journal. Opts: data=journal,jqfmt=vfsv0,errors=continue,nodelalloc,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none.
[  109.050703][ T4846] loop1: detected capacity change from 0 to 1024
[  110.574516][ T4846] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  111.930831][ T4872] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore
[  111.940572][ T4872] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  112.305826][ T4870] binder: 4869:4870 ioctl c0306201 0 returned -14
[  113.458573][ T4887] loop4: detected capacity change from 0 to 256
[  114.050232][    C0] sched: RT throttling activated
[  115.273365][ T4911] binder: 4909:4911 ioctl c0306201 0 returned -14
[  117.619610][ T4933] loop1: detected capacity change from 0 to 256
[  117.670322][ T4246] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  117.704387][ T4933] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  117.779973][ T4937] loop2: detected capacity change from 0 to 256
[  118.542145][ T4246] usb 1-1: Using ep0 maxpacket: 8
[  118.694262][ T4246] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  118.728104][ T4246] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  119.439419][ T4246] usb 1-1: config 0 descriptor??
[  119.573059][ T4957] binder: 4956:4957 ioctl c0306201 0 returned -14
[  119.672902][ T4963] loop2: detected capacity change from 0 to 128
[  119.812825][ T4963] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  119.833765][ T4963] ext4 filesystem being mounted at /47/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  120.221831][ T4973] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore
[  120.234400][ T4973] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  120.424145][ T4963] syz.2.198 (pid 4963) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  120.494698][ T4963] fscrypt: key with description 'fscrypt:e8dab99234bb312e' is too short (got 28 bytes, need 32+ bytes)
[  120.521639][ T4963] fscrypt: key with description 'fscrypt:e8dab99234bb312e' is too short (got 28 bytes, need 32+ bytes)
[  120.993643][ T4983] loop4: detected capacity change from 0 to 256
[  122.640446][ T4246] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  122.714466][ T4246] asix: probe of 1-1:0.0 failed with error -71
[  123.359656][ T4994] netlink: 277 bytes leftover after parsing attributes in process `syz.0.205'.
[  123.877392][ T4246] usb 1-1: USB disconnect, device number 6
[  124.246291][ T5006] binder: 5001:5006 ioctl c0306201 0 returned -14
[  125.432612][ T5026] sp0: Synchronizing with TNC
[  126.607732][ T5036] netlink: 277 bytes leftover after parsing attributes in process `syz.3.218'.
[  127.341177][ T4439] Bluetooth: hci1: command 0x0406 tx timeout
[  127.683193][ T5045] binder: 5044:5045 ioctl c0306201 0 returned -14
[  130.061599][ T5070] tmpfs: Unknown parameter 'usrquota'
[  130.775562][ T5076] netlink: 277 bytes leftover after parsing attributes in process `syz.0.229'.
[  131.532243][ T5091] binder: 5086:5091 ioctl c0306201 0 returned -14
[  132.741838][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  132.750155][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  134.919834][ T5098] loop1: detected capacity change from 0 to 4096
[  135.015182][ T5098] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512)
[  135.744447][ T5098] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  135.914764][ T5134] capability: warning: `syz.4.246' uses 32-bit capabilities (legacy support in use)
[  135.976318][ T5136] binder: 5128:5136 ioctl c0306201 0 returned -14
[  136.052240][ T4167] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22.
[  138.390668][ T5174] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5
[  140.597565][ T5197] binder: 5191:5197 ioctl c0306201 0 returned -14
[  141.275998][ T5204] loop0: detected capacity change from 0 to 512
[  141.637106][ T5202] loop3: detected capacity change from 0 to 1024
[  141.667124][ T5204] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  141.686564][ T5204] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  144.282513][ T1214] hfsplus: b-tree write err: -5, ino 4
[  144.510333][ T4246] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  144.669457][ T5243] binder: 5234:5243 ioctl c0306201 0 returned -14
[  145.560409][ T4246] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  145.584784][ T4246] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  145.611472][ T4246] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  145.634525][ T4246] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  145.823109][ T5252] Cannot find set identified by id 0 to match
[  146.473923][ T4246] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  146.483299][ T4246] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  146.494704][ T4246] usb 5-1: Manufacturer: syz
[  146.501073][ T4246] usb 5-1: config 0 descriptor??
[  146.520557][ T4246] usb 5-1: can't set config #0, error -71
[  146.529002][ T4246] usb 5-1: USB disconnect, device number 5
[  146.793858][ T5241] loop0: detected capacity change from 0 to 32768
[  146.923120][ T5241] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 scanned by syz.0.272 (5241)
[  147.264654][ T5277] netlink: 277 bytes leftover after parsing attributes in process `syz.2.285'.
[  148.704976][ T5284] binder: 5280:5284 ioctl c0306201 0 returned -14
[  148.810753][ T5241] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  148.870492][ T5241] BTRFS info (device loop0): force zlib compression, level 3
[  148.920400][ T5241] BTRFS info (device loop0): max_inline at 4096
[  148.930454][ T1108] Bluetooth: hci2: command 0x0409 tx timeout
[  148.970374][ T5241] BTRFS info (device loop0): using free space tree
[  149.009743][ T5241] BTRFS info (device loop0): has skinny extents
[  149.329739][ T5241] BTRFS error (device loop0): open_ctree failed
[  150.448004][ T5286] loop4: detected capacity change from 0 to 32768
[  150.738449][ T5286] XFS (loop4): Mounting V5 Filesystem
[  150.812511][ T4156] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  151.270957][ T4156] usb 3-1: config 0 has no interfaces?
[  151.360893][ T4156] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  151.405339][ T4156] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  151.478741][ T4156] usb 3-1: SerialNumber: syz
[  151.516551][ T4156] usb 3-1: config 0 descriptor??
[  151.653638][ T5286] XFS (loop4): Ending clean mount
[  151.673267][ T5286] XFS (loop4): Quotacheck needed: Please wait.
[  152.796164][ T4246] usb 3-1: USB disconnect, device number 4
[  152.948043][ T5286] XFS (loop4): Quotacheck: Done.
[  152.992715][ T4177] XFS (loop4): Unmounting Filesystem
[  153.440725][ T5353] netlink: 277 bytes leftover after parsing attributes in process `syz.3.304'.
[  153.904329][ T5349] binder: 5347:5349 ioctl c0306201 0 returned -14
[  154.022634][ T5359] loop1: detected capacity change from 0 to 128
[  154.057206][ T5361] loop0: detected capacity change from 0 to 256
[  154.263480][ T5361] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  154.568909][   T25] audit: type=1804 audit(1731531639.178:5): pid=5369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.308" name="/newroot/68/file0/bus" dev="loop1" ino=1048604 res=1 errno=0
[  156.529010][   T25] audit: type=1800 audit(1731531640.948:6): pid=5369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.308" name="bus" dev="loop1" ino=1048604 res=0 errno=0
[  157.438091][ T5393] syz.1.316[5393] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  157.438185][ T5393] syz.1.316[5393] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  158.107912][ T5404] netlink: 277 bytes leftover after parsing attributes in process `syz.0.317'.
[  158.690867][ T5395] binder: 5394:5395 ioctl c0306201 0 returned -14
[  160.215045][ T5430] loop0: detected capacity change from 0 to 256
[  161.188283][ T5438] loop3: detected capacity change from 0 to 256
[  161.860253][    T7] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  162.077438][ T5430] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  162.220433][ T5446] loop1: detected capacity change from 0 to 1024
[  162.863135][    T7] usb 5-1: config index 0 descriptor too short (expected 3133, got 61)
[  162.876117][    T7] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  162.886354][    T7] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2
[  162.896692][    T7] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[  162.905899][    T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  162.918565][    T7] usb 5-1: config 0 descriptor??
[  163.900459][    T7] usb 5-1: can't set config #0, error -71
[  163.906840][ T4233] hfsplus: b-tree write err: -5, ino 4
[  163.918392][    T7] usb 5-1: USB disconnect, device number 6
[  163.986364][ T5462] syz.3.332[5462] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  163.986800][ T5462] syz.3.332[5462] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  164.665909][ T5463] binder: 5460:5463 ioctl c0306201 0 returned -14
[  165.248902][ T5476] netlink: 277 bytes leftover after parsing attributes in process `syz.1.335'.
[  166.185566][ T5487] netlink: 4 bytes leftover after parsing attributes in process `syz.0.340'.
[  168.801855][ T5493] loop4: detected capacity change from 0 to 256
[  169.520592][ T5497] loop1: detected capacity change from 0 to 256
[  170.855053][ T5548] binder: 5547:5548 ioctl c0306201 0 returned -14
[  171.009612][ T5564] syz.4.348[5564] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  171.009696][ T5564] syz.4.348[5564] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  171.910040][ T5571] netlink: 277 bytes leftover after parsing attributes in process `syz.3.352'.
[  172.242941][ T5497] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  173.581540][ T4174] ------------[ cut here ]------------
[  173.594681][ T4174] WARNING: CPU: 1 PID: 4174 at net/bluetooth/hci_conn.c:443 hci_conn_timeout+0x250/0x450
[  173.606433][ T4174] Modules linked in:
[  173.613350][ T4174] CPU: 1 PID: 4174 Comm: kworker/u5:3 Not tainted 5.15.171-syzkaller #0
[  173.622623][ T4174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  173.633943][ T4174] Workqueue: hci1 hci_conn_timeout
[  173.639307][ T4174] RIP: 0010:hci_conn_timeout+0x250/0x450
[  173.645263][ T4174] Code: e9 8d e8 d3 d0 77 f8 48 8b 35 64 ec 96 04 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d5 48 00 f8 e8 20 f9 2d f8 <0f> 0b e9 34 fe ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd ff
[  173.743031][ T4174] RSP: 0018:ffffc90002f57c28 EFLAGS: 00010293
[  173.749137][ T4174] RAX: ffffffff89527a90 RBX: ffff88802ae6e138 RCX: ffff8880273d8000
[  173.757163][ T4174] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000
[  173.765255][ T4174] RBP: 00000000ffffffff R08: ffffffff895278a1 R09: ffffed10055cdc03
[  173.773395][ T4174] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000
[  173.798837][ T4174] R13: ffff88801bfb6328 R14: ffff88802ae6e000 R15: ffff88801bfb6318
[  173.807004][ T4174] FS:  0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000
[  173.816141][ T4174] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  173.822942][ T4174] CR2: 0000001b30314ff8 CR3: 0000000061407000 CR4: 00000000003506e0
[  173.832241][ T4174] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  173.841217][ T4174] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  173.850706][ T4215] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  174.001071][ T4174] Call Trace:
[  174.004879][ T4174]  <TASK>
[  174.008128][ T4174]  ? __warn+0x15b/0x300
[  174.016880][ T4174]  ? hci_conn_timeout+0x250/0x450
[  174.075831][ T4174]  ? report_bug+0x1b7/0x2e0
[  174.080440][ T4174]  ? handle_bug+0x3d/0x70
[  174.084776][ T4174]  ? exc_invalid_op+0x16/0x40
[  174.089501][ T4174]  ? asm_exc_invalid_op+0x16/0x20
[  174.095195][ T4174]  ? hci_conn_timeout+0x61/0x450
[  174.100163][ T4174]  ? hci_conn_timeout+0x250/0x450
[  174.105328][ T4174]  ? hci_conn_timeout+0x250/0x450
[  174.110423][ T4174]  ? hci_conn_timeout+0x250/0x450
[  174.115512][ T4174]  process_one_work+0x8a1/0x10c0
[  174.120486][ T4174]  ? worker_detach_from_pool+0x260/0x260
[  174.126191][ T4174]  ? _raw_spin_lock_irqsave+0x120/0x120
[  174.131808][ T4174]  ? kthread_data+0x4e/0xc0
[  174.137505][ T4174]  ? wq_worker_running+0x97/0x170
[  174.142575][ T4174]  worker_thread+0xaca/0x1280
[  174.147345][ T4174]  kthread+0x3f6/0x4f0
[  174.151479][ T4174]  ? rcu_lock_release+0x20/0x20
[  174.156328][ T4174]  ? kthread_blkcg+0xd0/0xd0
[  174.161005][ T4174]  ret_from_fork+0x1f/0x30
[  174.165436][ T4174]  </TASK>
[  174.168462][ T4174] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  174.175732][ T4174] CPU: 0 PID: 4174 Comm: kworker/u5:3 Not tainted 5.15.171-syzkaller #0
[  174.184048][ T4174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  174.194097][ T4174] Workqueue: hci1 hci_conn_timeout
[  174.199212][ T4174] Call Trace:
[  174.202489][ T4174]  <TASK>
[  174.205414][ T4174]  dump_stack_lvl+0x1e3/0x2d0
[  174.210094][ T4174]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  174.215730][ T4174]  ? panic+0x860/0x860
[  174.219803][ T4174]  ? hci_conn_timeout+0x1c0/0x450
[  174.225259][ T4174]  ? hci_conn_timeout+0x1c0/0x450
[  174.230281][ T4174]  panic+0x318/0x860
[  174.234177][ T4174]  ? __warn+0x16a/0x300
[  174.238329][ T4174]  ? fb_is_primary_device+0xd0/0xd0
[  174.243535][ T4174]  ? ret_from_fork+0x1f/0x30
[  174.248122][ T4174]  ? hci_conn_timeout+0x250/0x450
[  174.253148][ T4174]  __warn+0x2b2/0x300
[  174.257128][ T4174]  ? hci_conn_timeout+0x250/0x450
[  174.262144][ T4174]  report_bug+0x1b7/0x2e0
[  174.266476][ T4174]  handle_bug+0x3d/0x70
[  174.270629][ T4174]  exc_invalid_op+0x16/0x40
[  174.275127][ T4174]  asm_exc_invalid_op+0x16/0x20
[  174.279974][ T4174] RIP: 0010:hci_conn_timeout+0x250/0x450
[  174.285605][ T4174] Code: e9 8d e8 d3 d0 77 f8 48 8b 35 64 ec 96 04 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d5 48 00 f8 e8 20 f9 2d f8 <0f> 0b e9 34 fe ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd ff
[  174.305207][ T4174] RSP: 0018:ffffc90002f57c28 EFLAGS: 00010293
[  174.311271][ T4174] RAX: ffffffff89527a90 RBX: ffff88802ae6e138 RCX: ffff8880273d8000
[  174.319241][ T4174] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000
[  174.327213][ T4174] RBP: 00000000ffffffff R08: ffffffff895278a1 R09: ffffed10055cdc03
[  174.335182][ T4174] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000
[  174.343146][ T4174] R13: ffff88801bfb6328 R14: ffff88802ae6e000 R15: ffff88801bfb6318
[  174.351110][ T4174]  ? hci_conn_timeout+0x61/0x450
[  174.356035][ T4174]  ? hci_conn_timeout+0x250/0x450
[  174.361044][ T4174]  ? hci_conn_timeout+0x250/0x450
[  174.366157][ T4174]  process_one_work+0x8a1/0x10c0
[  174.371093][ T4174]  ? worker_detach_from_pool+0x260/0x260
[  174.376720][ T4174]  ? _raw_spin_lock_irqsave+0x120/0x120
[  174.382270][ T4174]  ? kthread_data+0x4e/0xc0
[  174.386773][ T4174]  ? wq_worker_running+0x97/0x170
[  174.391790][ T4174]  worker_thread+0xaca/0x1280
[  174.396473][ T4174]  kthread+0x3f6/0x4f0
[  174.400540][ T4174]  ? rcu_lock_release+0x20/0x20
[  174.405386][ T4174]  ? kthread_blkcg+0xd0/0xd0
[  174.409960][ T4174]  ret_from_fork+0x1f/0x30
[  174.414371][ T4174]  </TASK>
[  174.417563][ T4174] Kernel Offset: disabled
[  174.422245][ T4174] Rebooting in 86400 seconds..