last executing test programs:

1m12.572460181s ago: executing program 1 (id=2361):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)

1m12.140027636s ago: executing program 1 (id=2363):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x38ac1a, &(0x7f00000002c0)={[], [{@uid_gt}, {@fsname={'fsname', 0x3d, 'smackfshat'}}]}, 0x1, 0x4b8, &(0x7f0000004700)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
capset(&(0x7f0000000180)={0x0, r1}, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
sched_setaffinity(0x0, 0x0, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
sendmmsg(r3, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/mdstat\x00', 0x0, 0x0)
poll(0x0, 0x0, 0x8c)
modify_ldt$write(0x1, &(0x7f0000000000)={0x0, 0x20000800}, 0x10)
modify_ldt$write(0x1, &(0x7f0000001700), 0x10)
ioctl$SOUND_PCM_READ_BITS(r0, 0x80045005, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0)
mkdirat(0xffffffffffffffff, 0x0, 0x0)

1m11.385163611s ago: executing program 1 (id=2365):
r0 = syz_io_uring_setup(0x2928, &(0x7f0000000080), &(0x7f0000000040), &(0x7f00000001c0))
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000040))
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$SG_BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xc}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000001340)=""/102378, 0x7706c522012798af)
io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x8, &(0x7f00000022c0)=[{0x0, 0x0, 0x0, &(0x7f0000000540), 0x0}], 0x1)

1m10.641716284s ago: executing program 1 (id=2368):
socket$nl_route(0x10, 0x3, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
getpid()
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
syz_open_procfs(0x0, 0x0)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x10)
socket$alg(0x26, 0x5, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000440)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34cf2645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6424923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff0000f5620000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe656c9c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"})
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1m10.240072838s ago: executing program 0 (id=2369):
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200))
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_io_uring_setup(0x6908, 0x0, 0x0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000400))
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0x0, 0x0, 0x0})
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x3cb, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
mlock2(&(0x7f00006f7000/0x1000)=nil, 0x1000, 0x0)
madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x14)

1m9.939780598s ago: executing program 2 (id=2371):
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
mkdir(0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x5411, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000080)=0x7f)
ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000000c0))
read$dsp(r3, &(0x7f00000011c0)=""/4117, 0x200021d5)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x7, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x8, 0x2}]}]}, {0x0, [0x5f, 0x30, 0x2e, 0x0, 0x0]}}, &(0x7f00000003c0)=""/3, 0x33, 0x3, 0x1, 0x9}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xa, 0x0, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000440)={0x2, 0xffffffff}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0x0, 0x9, 0xfffffffc}, 0x10}, 0x90)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x1f2f, 0x0, 0x0, 0x0, 0x0, 0x177, 0x0, 0x0, 0x13, 0x0, &(0x7f0000000100)="9ef99c7569af3551c96010e5e3cab4184e5e82"}, 0x50)
r7 = socket$packet(0x11, 0x2, 0x300)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000300)={'batadv0\x00', <r9=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000280)=ANY=[@ANYBLOB="400000006800010000000000000000000a0000000000000018000880340001000000000000000000000004000000000008000500", @ANYRES32=r9, @ANYBLOB="0600070003"], 0x40}}, 0x0)

1m8.882348358s ago: executing program 0 (id=2372):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000002c0)={'wpan1\x00', <r3=>0x0})
sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r1, 0x301, 0x0, 0x0, {0x2b}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0)
read$msr(0xffffffffffffffff, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = dup(0xffffffffffffffff)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
openat(0xffffffffffffff9c, 0x0, 0xa4601, 0x0)
ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r5, 0x4068aea3, &(0x7f00000004c0)={0xa8, 0x0, 0x1})
read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r8 = socket$inet(0x2, 0x0, 0x84)
sendto$inet(r8, &(0x7f00000000c0)="18", 0x1, 0x0, 0x0, 0x0)
io_setup(0x22, 0x0)
r9 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r9, &(0x7f0000000180)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24)
listen(r9, 0x0)
listen(r9, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)

1m6.045003303s ago: executing program 4 (id=2373):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)

1m5.041434309s ago: executing program 4 (id=2375):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./bus\x00', 0x300000a, &(0x7f00000002c0)={[{@nodatacow}, {@compress_force_algo={'compress-force', 0x3d, 'lzo'}}, {@nodiscard}, {@metadata_ratio={'metadata_ratio', 0x3d, 0x8}}, {@ref_verify}, {@metadata_ratio={'metadata_ratio', 0x3d, 0x8001}}, {@nobarrier}, {@thread_pool={'thread_pool', 0x3d, 0x8}}, {@nodiscard}, {@enospc_debug}, {@ssd_spread}, {@barrier}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$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")
r0 = open(&(0x7f0000000040)='./bus\x00', 0x46b42, 0x0)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfd14)
sendfile(r0, r0, 0x0, 0x80000001)

1m2.788933326s ago: executing program 2 (id=2376):
syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x35d, &(0x7f0000000f00)="$eJzs3c1rO0UYwPEnaZImKW1yEEVBOtiLXpY2ehaDtCAELG0jtoKwbTcasiYlG6oRse3Jq3j3JHgovVnwUND+A71404sI3noRPNiDurJvyeatLzFpfr/2+4GSycw8u7OZSXk27WYv3/3yo0rJ0kp6Q6JJJRERkSuRrEQlEPEfo245IWGH8srMnz+/uL5ZTHoVaiW/8WpOKTU3/8PHn6X8bmfTcpF9//KP3O8Xz148f/nvxodlS5UtVa01lK62a7829G3TULtlq6IptWoaumWoctUy6l77d/52zNreXlPp1d3Z9F7dsCylV5uqYjRVo6Ya9abSP9DLVaVpmppNC25SPF5b0/NDBu+MeDAYk3o9r0+JSKqnpXg8kQEBAICJ6s7/o05KP0z+vyVzhcLymnI6t/P/k5fOGzPvnM75+f9Zol/+/9ov3rY68n/ndKKd/9e884PSzfn/13KH/L83I3pchs7/s2MYDIYzn+ipinQ8c/L/tP/+dR29d7LoFsj/AQAAAAAAAAAAAAAAAAAAAAB4GlzZdsa27UzwGPy0LyHwn+NBGjT/0yKSdGbfZv4fsvXNLUm6F+45c2x+sV/cL3qPfodzETHF+Mfu5qyN4Moj5cjKj+aBH3+wX5xyW/IlKTvxsiQZybrrKRRv2ytvFZaXlMePb12mlA7H5yQjz4Tjv3dXpxOf64z395+QlxdC8Zpk5KcdqYkpu25ke/+fLyn15tuFrviU209Efrv3SQEAAAAAYMQ01dL3/F3TBrV73zKSL7kfExmyKBn5u//5/WLf8/NY5oXYpI8eAAAAAIDHwWp+WtElatTdgmn2K6RkYNMICrGOmriI9O2c6KqJX7flqdAR3nY8CfHuYPJ/j+ub4FW9S1TwjxTOwFtN/h1VZLjxBMfv1kRiw09T5FDcBXAYborKLcJj3YOfdypU384LA7dz5B9Iqyb42Cgx4HWW1d7tRK9ZCfGeGjsy3AJ47qtv/xrdG+T1U38FfHJz5yPTsA/kNpPSVXB20dsUH/svHgAAAAD3rp30BzVvhJvDNxIJ3yyHv9wDAAAAAAAAAAAAAAAAAAAAAAAAAAAAADBCY/lKv67CpI8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFL8FwAA//8GuPOT")
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080))
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket(0x10, 0x0, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
socket(0x2, 0x0, 0x0)
socket$inet(0x2, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0)
r1 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000100)={0x0, 0x103, 0x3, 0x1, 0xfffffffe})
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0)
read$midi(r1, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x50}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[], 0x6c}}, 0x4000800)
sendmsg$NFT_MSG_GETSET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x14}}, 0x0)
ioctl$SNDCTL_SEQ_PANIC(r2, 0x5100)
ioctl$SNDCTL_SEQ_RESET(r2, 0x5100)

1m1.003298542s ago: executing program 4 (id=2377):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)={0x2, 0x18, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}]}, 0x38}}, 0x0)

1m0.264919969s ago: executing program 4 (id=2380):
syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
fcntl$dupfd(r0, 0x0, r0)
r1 = socket$igmp(0x2, 0x3, 0x2)
r2 = openat$sysfs(0xffffff9c, 0x0, 0x0, 0x131)
socket$inet_sctp(0x2, 0x0, 0x84)
getsockname$netlink(r2, 0x0, &(0x7f00000000c0))
sendfile(0xffffffffffffffff, r2, 0x0, 0x7)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000780)={'gre0\x00', 0x0})
connect$packet(r2, &(0x7f00000009c0)={0x11, 0x1b, 0x0, 0x1, 0x13, 0x6, @remote}, 0x14)
r3 = socket$nl_sock_diag(0x10, 0x3, 0x4)
write$P9_RLCREATE(r3, &(0x7f0000000080)={0x18, 0xf, 0x2, {{0x0, 0x3}}}, 0x18)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x13, 0x0, 0x38)

58.946292201s ago: executing program 4 (id=2381):
creat(0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_HWPT_ALLOC$NONE(r4, 0x3b89, &(0x7f0000000200)={0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000280)="c5"})
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYRES16=r4], 0xb)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000080)=0x10000, 0x4)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000002c0), 0x111}}, 0x20)
prlimit64(0x0, 0x0, 0x0, 0x0)
getpid()
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r6, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
r7 = userfaultfd(0x1)
ioctl$UFFDIO_API(r7, 0xc018aa3f, 0x0)
socket$kcm(0x29, 0x5, 0x0)

11.258412972s ago: executing program 1 (id=2379):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000940)={0x60, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {0x10001}})

10.516404509s ago: executing program 1 (id=2407):
r0 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0)
r1 = openat$fb0(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
read$fb(r1, 0x0, 0x0)
fstat(r0, &(0x7f0000000580))
r2 = socket(0x1e, 0x4, 0x0)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
r5 = socket(0x0, 0xa, 0x0)
getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x220000, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x2, 0x0, 0x4a)
syz_io_uring_submit(0x0, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000040))
pselect6(0x40, &(0x7f0000000900), 0x0, &(0x7f0000000680)={0xff}, 0x0, 0x0)
sched_setaffinity(0x0, 0xffffffffffffff84, &(0x7f0000000080)=0x6)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, 0x0, 0x0)
sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
map_shadow_stack(&(0x7f00004fd000/0x4000)=nil, 0x4000, 0x0)
r8 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f0000000180))
connect$can_bcm(r8, &(0x7f0000000480), 0x10)
syz_mount_image$reiserfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x800c, &(0x7f00000000c0), 0x0, 0x111d, &(0x7f0000001480)="$eJzs2LFqFEEcBvBv9k7NobBy6RcLCwsJkbNWUyhca6uNSipT5SpFMA9jY+eDaCr7kF6LPMHK3eayCOFUkrPQ3w+Wmf3PNzsz5U4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgbph8K8lmlYyXtSpJSZrmcHqcpFnWb34eVCl5ujudPd6fPJl1sVQpz5Iyn5Xy8UGXnYwn43vj+5s7t7/M3rx9/WJvb3d/MfDyekmTo5NLPcUop3sZrAjNN7hxlgYAAID/R3th9e8t9OnGmtYHAAAAfuVybxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/lxb9/2ry06VpCRNczg9TtKcM+/KX9ofAAAAcHElVZ7X59W7a4De3Xyty1m97Tyssp0PdUaLyLBPV6sWXTkIAAAA/7z22qK5lXLQ/yaX933gToZ9fZEcZmurez9t8n0nGeRgY/vnb48eJTk6efdq/pR2sO6zAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP9iBYwEAAAAAYf7WaXRsAAAAAAAAAAAAAAAAAAAAAAAAAADAXgEAAP//1gXd9g==")

7.37558058s ago: executing program 0 (id=2382):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000440)={[{@nombcache}, {@grpid}, {@init_itable_val={'init_itable', 0x3d, 0x5}}, {@data_journal}, {@nombcache}]}, 0x8, 0x5fa, &(0x7f00000004c0)="$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")
mount$bind(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x2001095, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000840)='./file0\x00', 0x10a1b4, &(0x7f0000000e00)={[{@nouid32}, {@nodiscard}, {@data_err_abort}, {@noauto_da_alloc}, {@noinit_itable}, {@lazytime}, {@usrquota}, {@errors_continue}, {@data_err_ignore}, {@nobarrier}, {@dioread_nolock}, {@jqfmt_vfsold}]}, 0x11, 0x472, &(0x7f0000000240)="$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")
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10)
renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x11, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
r6 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCSPTLCK(r6, 0x5423, &(0x7f0000000040)=0x1)
write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8)
ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, &(0x7f00000002c0))

6.62443882s ago: executing program 3 (id=2412):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@remote, @local, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x84, 0x0, @empty, @dev}}}}}}, 0x2e)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0)

5.678292671s ago: executing program 3 (id=2413):
syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000ec0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000180)={[{@uid_forget}, {@shortad}, {@iocharset={'iocharset', 0x3d, 'cp775'}}, {@gid_ignore}, {@dmode={'dmode', 0x3d, 0x42efa2f8}}, {@noadinicb}, {@longad}, {@fileset={'fileset', 0x3d, 0x4}}, {@mode={'mode', 0x3d, 0x4}}]}, 0xfe, 0xc39, &(0x7f0000000240)="$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")
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000000040)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

4.39226594s ago: executing program 2 (id=2386):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x48, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TYPE(r5, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000000d060108000c000000000000000200000905000500010000002adb1218124b707f24e5854a2ed67ede7f950db9f22c66e0ef7c86f1bbb4744017a42f0d5f8502dd5787010d0b99e13876bd1d206402ca62f60771f7d95461a26797db99415b385460a1ab1c7776c88f72d8d0698eb4b2034c799dee5a87ed4e72703cf30ef591089b11e452b40d2212f44f35631fdcf1c4a0e9a71b979349c4000000000000000052664fcff19a158c175c0dbb9b0afe61e74cb420ff5ed7d017291c9021ddec917cbe748b383ddcb2ea7eac4e98c350948c34f1fac060de562668124f0c8dea6a2ccc2b312ac5c50a98c892f472d9fbacf2c3114645d02ac06394977553b0596dd9baa16ef53693"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000)
setsockopt$inet_mreqsrc(r0, 0x0, 0x2, &(0x7f0000000200)={@loopback, @remote, @local}, 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x42)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0xfefc)
r6 = syz_open_dev$dmmidi(&(0x7f00000019c0), 0x200, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r6, 0xc0245720, &(0x7f0000000000)={0x1})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x38, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x38}}, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, 0xffffffffffffffff, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)

3.77337976s ago: executing program 3 (id=2414):
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340))
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = dup(r2)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r4, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x0, 0xfffffffffffffffd})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x14, 0x0, &(0x7f0000000440)=[@increfs_done], 0x0, 0x0, 0x0})
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_256={{}, "76f7bc3e4ae1c84c", "af193cff4810ba5ac120d096eb00b40752095b4285514ca312c52e3a08756735", "5d09da4d", "bc3a20b10f4ad11e"}, 0x38)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5)
futex(&(0x7f0000000040), 0x88, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0xc018aec0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil})
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
fcntl$addseals(0xffffffffffffffff, 0x409, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001800010000000000000000000a00009f08a0987f2b3f64d220513438d6d0fba7b272ab3ee9489d9c355c1600000000", @ANYRES32=0x0, @ANYBLOB="14000500fe8000"/20], 0x3c}}, 0x0)

3.315875332s ago: executing program 2 (id=2415):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
connect$unix(r0, 0x0, 0x0)

2.747748754s ago: executing program 0 (id=2416):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181)
write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @ext={0x1, &(0x7f0000000080)="1b"}}], 0x1c)

2.567316671s ago: executing program 2 (id=2417):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f000000e0c0), 0x10010)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, "41328ac36b12d2a7", "e8582492a0ce0500046d832f001ad89b6800000002080000110000ebff00", "75249783", "dfa27021fe106750"}, 0x38)
sendfile(r0, r1, &(0x7f0000000100), 0x10001)

2.517626001s ago: executing program 3 (id=2418):
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
read$FUSE(r0, &(0x7f000000c3c0)={0x2020}, 0x2056)

2.118522787s ago: executing program 0 (id=2419):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r1 = socket$inet6(0xa, 0x3, 0x88)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@private0, 0x0, 0x32}, 0x0, @in=@multicast1, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)

1.79031762s ago: executing program 2 (id=2420):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002078020000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000f000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x1010082, &(0x7f0000001980)=ANY=[@ANYBLOB='discard,discard,umask=00000000000000000047345,discard,discard,fmask=00000000000000000000002,uid=', @ANYRESHEX=0x0, @ANYBLOB=',uid=', @ANYRESHEX=0x0, @ANYBLOB="2c696f636861727365743d6370ddc0b6b2e856d3cc1a3835372c6572726f72733d72656d6f756e742d726f2c00"], 0x3, 0x1507, &(0x7f0000000440)="$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")

1.467706945s ago: executing program 3 (id=2421):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x4, 0x8, 0x408}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
r3 = dup(r1)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x4, 0x0, 0x0)

1.065006634s ago: executing program 0 (id=2422):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10)
futex(&(0x7f0000004000), 0x5, 0x0, 0x0, 0x0, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x1003000, 0x0, 0x0, 0x0, &(0x7f0000000300))
mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always,size=0'])
chdir(&(0x7f0000000140)='./file0\x00')
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0)
ftruncate(r4, 0x8979)
writev(r4, &(0x7f0000002940)=[{0x0}], 0x1)
ftruncate(r3, 0x8979)
write$binfmt_elf64(r4, &(0x7f0000000400)=ANY=[], 0xffffff66)

118.822897ms ago: executing program 4 (id=2390):
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000002cc0), 0x0, 0x0)
r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00'], 0x1, 0x17a, &(0x7f0000000480)="$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")
chdir(&(0x7f0000000300)='./file0\x00')
mount(0x0, &(0x7f0000001a00)='./file1\x00', 0x0, 0x0, 0x0)
r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = fanotify_init(0x0, 0x0)
fanotify_mark(r3, 0x1, 0x4800003e, r2, 0x0)
getdents(r1, &(0x7f00000001c0)=""/233, 0xe9)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r4}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = getpid()
process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
dup(0xffffffffffffffff)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f0000000680)={[{@data_err_abort}, {@noblock_validity}, {@block_validity}, {@init_itable}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@nouid32}, {@max_batch_time={'max_batch_time', 0x3d, 0x8}}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x84, 0x4b9, &(0x7f0000000c80)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000640)='./file1\x00', 0x40000, 0x48)
open(0x0, 0x0, 0x0)
pipe(&(0x7f0000000080))
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getpeername(r6, 0x0, &(0x7f0000000280))
r7 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0})
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r7, 0xc1105518, &(0x7f0000000040)={{0x0, 0x3, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x440b, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xcee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc]})
syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000a80)='./file1\x00', 0x41c, &(0x7f00000001c0)=ANY=[@ANYBLOB='nodiscard,order=strict,nobarrier,norecovery,discard,discard,nobrrrier,nobarrier,nobarrier,\x00'], 0x1, 0xa88, &(0x7f0000001540)="$eJzs3V2IXNXhAPBzZ3c2X+s/E/9JXTVqWlu0H+66MWm1qSZioJRCCPShoH0JMaYha1oakSpCow+lL6Ig5qkPsfSlL0pbivpSgg9FCkopLUKfrPQ1BaEPUtApO3PO7OzJDHcm2d07s/P7wZ0z554795w7c+fOnXvPRwAmVq31eODA1hDCq2+/cvS21959aXnO4c4SjdbjdFesHkIoYnw6W9+HU+3w04+fO9krLML+1mOKh2NXOq/dEUK4EPaFy6ERXnzs4vQHbx57//Vw9unjR997a322fkWx3hkAAMAIOH750IE9//zLrbv++8btR8KWzvx0ft6I8dl43n8kniin8+VaWB0vuqZuM9ly03GqZctN9ViuO596ttx0n/xnsvXW+yy3pST/qa55vbYbxlnajxuhqM2vitdq8/Pt/+Sh9b9+ppg/d2bpifMVFRRYc/+5I4Swz2QyTeLU3Fn1EQigLb9feJULa3unrrO26cHyv/Jwrffru9TXtIRMhK3tYKP3/9zI57/Od+pHfft//byaCqydTbg3/e2Gru1K36PZGM/vI+T1l4b9/qf15fcjBj0H6HcfYVzuL/Qr59QGl+Na9St/vl9sVg/GML0PD2Xp8XvQup2Wf6bj8hkDvX3i+r/JtCbTzUX1ZRh2alZ9AAJGVl5vrhml9LxeX56+pSR9a0n6tpL07SXpO0rSYZL9/qmXwsvFyvWu/D/9sNfDZrNV/N+Q5cmvRw6bf17vd1jXm39enxhG2o4/Xbz/8Uf/2q7/X3T2/8/i/r4vxhvxu3U5LpCuF+bX1Tt1/xurs6n1We7GrDg39Fi+9Xz36uWK3SvrCV3Hmc76i3gFdy69oh3f2a+8e1evv5Etty1OW7Py5ucn27PXpfOPdFCcXVWale2tZ9sxk5UjHVd2xTAvB1yLtD+urv+/vPe16v93bmPNhXrxxJmlU/fGeNpP352qb1mev7jRBQeu26Dtf+bC6vY/s5359Vr3cWHnyvyi+7jQyObv7zP/vhhPv3M/nNrWmj9/8kdLj6/1xsOEO//Ms2dPLC2d+okno/YkXAhhBIrhySQ9SceFE0vVHpeA9bfw1JM/Xjj/zLP3nHnyxOlTp0+dWzy4eP8DBxcXv/7AQuu8fqH77H4zVheGybXy6191SQAAAAAAAAAAAIBBnf5o4dLf3/nGP9rt/1fa/6X2/6nmb2r//4us/X/WzL9TQTi1A0zt+K5qb591sDqTLVeP0/9n69+d5bMne93nYtgZxy+2/0/Z5f26pvLclM3P++9Ny81l8/P+UmayPkiK8PPt3eX7QgxfiOGvAlSo2NZ7dgzL+rdO+3rqn0K/FOMpfW5pb0j9mKT236m9d+qvJPX/kI7/uzagjKy9jWhXWPU2Ar39ezP3/51OYqouh6mSqdXP6wiUY5SnZtMoHsBoqHr8z3TdM4Xn/vidrctTWuzKw6uPl3n/pXA9Rn38SflXPv7nmg4v3Bn/buDjXzZiXn4DaECHXvjuv7qyDbcMmn8+/mnqB3r3cPl/K+aftuauMFj+zdey/PMbQgN6MMt/+4D5X7X9e68t/4di/ultu/vOQfNvl7iorS5Hft043f9L142/n+V/ONv+1Lfn0Nt/jQM1Hon5wyQbl3FmhzUu4//2k9fDOBjj6UCY6jnk450MW/5UvyL9DuzJ1l+U/L5twvF/mz9rNn85KeO4fDOGZd+H2fiZpv2x0SNe64rXe7y3m/VYA+Pqw818/880/tO2ESjD9U/tn9XueenHcOPL8nx3vNlsVtqnrw6Fq1X1+1/1/4Sq86/6/S+Tj/+bn8Pn4//m6fn4v9/L0vPxf/PX5+Pr5en5+L/5+5mP/5un35StNx8feK4k/eaS9FtK0m8tSd9bkn5bSfrnS9JvL0m/oyT9xpL0O0vSv1iS/qX+6Z90L9rv9XeXrP/LJembXWqPMqnbD5Msb5/n+w+TI93/6ff9312SDoyvi28sPvLo737QaLf/n+lcD0n38Y7EeD3+d/5pjOf3vUNXfDntnRj/KEsf9esdMEny/jPy3/e7StKB8ZXqefl+wwQqevfYk99v69dvVb/zfMbLV2L41Rh+LYb3xHA+hgsxXIzh/g0qH+vjkd/+4dDLxcr//Z1Z+qD1yfP2QHk/UfcNWJ78+sCw9dnzfvyGdb35X2NzMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgMrUWo8HDswVIbz69itHL/35279ZnnO4s0Sj9TjdFat3XhfCvTGciuGl+OTTj5872R1+FsMi7A9FKDrzw7ErnZx2hBAuhH3hcmiEFx+7OP3Bm8fefz2cffr40ffeWr93oK1Y7wwAAACgQv8LAAD//57oEoE=")
mount$fuse(0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000580)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize}]}})

0s ago: executing program 3 (id=2424):
socket$inet_sctp(0x2, 0x5, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x48, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.172' (ED25519) to the list of known hosts.
[  159.022304][ T5156] cgroup: Unknown subsys name 'net'
[  159.193258][ T5156] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[  204.309892][ T5156] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[  209.470662][ T5175] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  209.480660][ T5175] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  209.490054][ T5175] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  209.539278][ T5181] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  209.547895][ T5181] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  209.560025][ T5181] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  209.568513][ T5181] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  209.577524][ T5181] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  209.587528][ T5187] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  209.597561][ T5187] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  209.607089][ T5187] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  209.618234][ T5187] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  209.622164][ T5181] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  209.627657][ T5187] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  209.634570][ T5181] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  209.650197][ T5190] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  209.656851][ T5181] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  209.666207][ T5192] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  209.677917][ T5189] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  209.678321][ T5190] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  209.695987][ T5189] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  209.707249][ T5181] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  209.719327][ T5181] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  209.728010][ T5190] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  209.732098][ T5189] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  209.737202][ T5190] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  209.747384][ T5189] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  209.769131][ T5189] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  209.795682][ T5190] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  209.807028][ T5190] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  211.121689][ T5177] chnl_net:caif_netlink_parms(): no params data found
[  211.262496][ T5180] chnl_net:caif_netlink_parms(): no params data found
[  211.681501][ T5178] chnl_net:caif_netlink_parms(): no params data found
[  211.811393][ T5174] chnl_net:caif_netlink_parms(): no params data found
[  211.845947][ T5185] Bluetooth: hci2: command tx timeout
[  211.851695][ T5189] Bluetooth: hci3: command tx timeout
[  211.855948][ T5190] Bluetooth: hci1: command tx timeout
[  211.859442][ T5189] Bluetooth: hci0: command tx timeout
[  211.924635][ T5189] Bluetooth: hci4: command tx timeout
[  212.117451][ T5188] chnl_net:caif_netlink_parms(): no params data found
[  212.145750][ T5180] bridge0: port 1(bridge_slave_0) entered blocking state
[  212.153513][ T5180] bridge0: port 1(bridge_slave_0) entered disabled state
[  212.161510][ T5180] bridge_slave_0: entered allmulticast mode
[  212.170896][ T5180] bridge_slave_0: entered promiscuous mode
[  212.231740][ T5180] bridge0: port 2(bridge_slave_1) entered blocking state
[  212.239742][ T5180] bridge0: port 2(bridge_slave_1) entered disabled state
[  212.247812][ T5180] bridge_slave_1: entered allmulticast mode
[  212.256902][ T5180] bridge_slave_1: entered promiscuous mode
[  212.458444][ T5180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  212.527117][ T5180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  212.762604][ T5180] team0: Port device team_slave_0 added
[  212.852790][ T5180] team0: Port device team_slave_1 added
[  212.868881][ T5177] bridge0: port 1(bridge_slave_0) entered blocking state
[  212.878404][ T5177] bridge0: port 1(bridge_slave_0) entered disabled state
[  212.886271][ T5177] bridge_slave_0: entered allmulticast mode
[  212.895369][ T5177] bridge_slave_0: entered promiscuous mode
[  213.029733][ T5177] bridge0: port 2(bridge_slave_1) entered blocking state
[  213.037881][ T5177] bridge0: port 2(bridge_slave_1) entered disabled state
[  213.045700][ T5177] bridge_slave_1: entered allmulticast mode
[  213.053787][ T5177] bridge_slave_1: entered promiscuous mode
[  213.129654][ T5174] bridge0: port 1(bridge_slave_0) entered blocking state
[  213.139432][ T5174] bridge0: port 1(bridge_slave_0) entered disabled state
[  213.147330][ T5174] bridge_slave_0: entered allmulticast mode
[  213.156395][ T5174] bridge_slave_0: entered promiscuous mode
[  213.170190][ T5180] batman_adv: batadv0: Adding interface: batadv_slave_0
[  213.177623][ T5180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  213.203916][ T5180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  213.409616][ T5174] bridge0: port 2(bridge_slave_1) entered blocking state
[  213.418234][ T5174] bridge0: port 2(bridge_slave_1) entered disabled state
[  213.426073][ T5174] bridge_slave_1: entered allmulticast mode
[  213.434035][ T5174] bridge_slave_1: entered promiscuous mode
[  213.445457][ T5180] batman_adv: batadv0: Adding interface: batadv_slave_1
[  213.452731][ T5180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  213.479788][ T5180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  213.501229][ T5177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  213.512044][ T5188] bridge0: port 1(bridge_slave_0) entered blocking state
[  213.520436][ T5188] bridge0: port 1(bridge_slave_0) entered disabled state
[  213.528231][ T5188] bridge_slave_0: entered allmulticast mode
[  213.537427][ T5188] bridge_slave_0: entered promiscuous mode
[  213.548432][ T5178] bridge0: port 1(bridge_slave_0) entered blocking state
[  213.556281][ T5178] bridge0: port 1(bridge_slave_0) entered disabled state
[  213.563971][ T5178] bridge_slave_0: entered allmulticast mode
[  213.572952][ T5178] bridge_slave_0: entered promiscuous mode
[  213.666431][ T5177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  213.685629][ T5174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  213.698164][ T5188] bridge0: port 2(bridge_slave_1) entered blocking state
[  213.706074][ T5188] bridge0: port 2(bridge_slave_1) entered disabled state
[  213.713816][ T5188] bridge_slave_1: entered allmulticast mode
[  213.723482][ T5188] bridge_slave_1: entered promiscuous mode
[  213.732367][ T5178] bridge0: port 2(bridge_slave_1) entered blocking state
[  213.740305][ T5178] bridge0: port 2(bridge_slave_1) entered disabled state
[  213.748144][ T5178] bridge_slave_1: entered allmulticast mode
[  213.757331][ T5178] bridge_slave_1: entered promiscuous mode
[  213.807464][ T5174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  213.934465][ T5189] Bluetooth: hci0: command tx timeout
[  213.935509][ T5185] Bluetooth: hci2: command tx timeout
[  213.940069][ T5189] Bluetooth: hci1: command tx timeout
[  213.947165][   T51] Bluetooth: hci3: command tx timeout
[  214.016859][   T51] Bluetooth: hci4: command tx timeout
[  214.065531][ T5178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  214.085717][ T5178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  214.108321][ T5177] team0: Port device team_slave_0 added
[  214.155483][ T5188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  214.170958][ T5174] team0: Port device team_slave_0 added
[  214.248488][ T5177] team0: Port device team_slave_1 added
[  214.297288][ T5174] team0: Port device team_slave_1 added
[  214.313829][ T5188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  214.336028][ T5180] hsr_slave_0: entered promiscuous mode
[  214.345364][ T5180] hsr_slave_1: entered promiscuous mode
[  214.422072][ T5178] team0: Port device team_slave_0 added
[  214.526445][ T5177] batman_adv: batadv0: Adding interface: batadv_slave_0
[  214.533612][ T5177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  214.559982][ T5177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  214.579646][ T5178] team0: Port device team_slave_1 added
[  214.589354][ T5177] batman_adv: batadv0: Adding interface: batadv_slave_1
[  214.599005][ T5177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  214.625366][ T5177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  214.703431][ T5188] team0: Port device team_slave_0 added
[  214.763893][ T5174] batman_adv: batadv0: Adding interface: batadv_slave_0
[  214.771653][ T5174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  214.798100][ T5174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  214.831338][ T5188] team0: Port device team_slave_1 added
[  214.919150][ T5178] batman_adv: batadv0: Adding interface: batadv_slave_0
[  214.927769][ T5178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  214.954211][ T5178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  214.968816][ T5174] batman_adv: batadv0: Adding interface: batadv_slave_1
[  214.976237][ T5174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  215.002468][ T5174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  215.110737][ T5178] batman_adv: batadv0: Adding interface: batadv_slave_1
[  215.118067][ T5178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  215.144599][ T5178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  215.239405][ T5188] batman_adv: batadv0: Adding interface: batadv_slave_0
[  215.246801][ T5188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  215.273580][ T5188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  215.290292][ T5188] batman_adv: batadv0: Adding interface: batadv_slave_1
[  215.297782][ T5188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  215.324331][ T5188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  215.432735][ T5177] hsr_slave_0: entered promiscuous mode
[  215.442406][ T5177] hsr_slave_1: entered promiscuous mode
[  215.451191][ T5177] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  215.460232][ T5177] Cannot create hsr debugfs directory
[  215.600403][ T5174] hsr_slave_0: entered promiscuous mode
[  215.611745][ T5174] hsr_slave_1: entered promiscuous mode
[  215.620352][ T5174] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  215.628286][ T5174] Cannot create hsr debugfs directory
[  215.815464][ T5178] hsr_slave_0: entered promiscuous mode
[  215.827552][ T5178] hsr_slave_1: entered promiscuous mode
[  215.836274][ T5178] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  215.843971][ T5178] Cannot create hsr debugfs directory
[  216.004733][   T51] Bluetooth: hci3: command tx timeout
[  216.010629][   T51] Bluetooth: hci2: command tx timeout
[  216.014565][ T5190] Bluetooth: hci1: command tx timeout
[  216.016688][ T5185] Bluetooth: hci0: command tx timeout
[  216.091013][ T5185] Bluetooth: hci4: command tx timeout
[  216.171877][ T5188] hsr_slave_0: entered promiscuous mode
[  216.182156][ T5188] hsr_slave_1: entered promiscuous mode
[  216.191848][ T5188] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  216.199825][ T5188] Cannot create hsr debugfs directory
[  216.487491][ T5180] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  216.603005][ T5180] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  216.743162][ T5180] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  216.805001][ T5180] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  217.238203][ T5177] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  217.279792][ T5177] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  217.311123][ T5177] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  217.347973][ T5177] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  217.474554][ T5174] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  217.508820][ T5174] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  217.535814][ T5174] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  217.561686][ T5174] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  217.796572][ T5178] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  217.890029][ T5178] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  217.930299][ T5188] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  217.953934][ T5188] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  217.993832][ T5188] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  218.034809][ T5178] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  218.057447][ T5178] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  218.095306][ T5185] Bluetooth: hci0: command tx timeout
[  218.100955][ T5185] Bluetooth: hci2: command tx timeout
[  218.106806][ T5189] Bluetooth: hci1: command tx timeout
[  218.112587][ T5189] Bluetooth: hci3: command tx timeout
[  218.128892][ T5188] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  218.166312][ T5189] Bluetooth: hci4: command tx timeout
[  218.527811][ T5180] 8021q: adding VLAN 0 to HW filter on device bond0
[  218.758376][ T5180] 8021q: adding VLAN 0 to HW filter on device team0
[  218.881977][ T5177] 8021q: adding VLAN 0 to HW filter on device bond0
[  218.953992][ T1063] bridge0: port 1(bridge_slave_0) entered blocking state
[  218.961842][ T1063] bridge0: port 1(bridge_slave_0) entered forwarding state
[  219.054347][ T1063] bridge0: port 2(bridge_slave_1) entered blocking state
[  219.062030][ T1063] bridge0: port 2(bridge_slave_1) entered forwarding state
[  219.109067][ T5177] 8021q: adding VLAN 0 to HW filter on device team0
[  219.140959][ T1245] ieee802154 phy0 wpan0: encryption failed: -22
[  219.147844][ T1245] ieee802154 phy1 wpan1: encryption failed: -22
[  219.170170][ T1063] bridge0: port 1(bridge_slave_0) entered blocking state
[  219.177992][ T1063] bridge0: port 1(bridge_slave_0) entered forwarding state
[  219.310429][ T1063] bridge0: port 2(bridge_slave_1) entered blocking state
[  219.318321][ T1063] bridge0: port 2(bridge_slave_1) entered forwarding state
[  219.633738][ T5174] 8021q: adding VLAN 0 to HW filter on device bond0
[  219.700740][ T5178] 8021q: adding VLAN 0 to HW filter on device bond0
[  219.824728][ T5188] 8021q: adding VLAN 0 to HW filter on device bond0
[  219.941603][ T5174] 8021q: adding VLAN 0 to HW filter on device team0
[  220.031310][ T5188] 8021q: adding VLAN 0 to HW filter on device team0
[  220.108748][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[  220.116598][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[  220.160023][ T5178] 8021q: adding VLAN 0 to HW filter on device team0
[  220.211963][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[  220.219893][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[  220.239023][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[  220.246821][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[  220.483821][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[  220.491657][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[  220.513829][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[  220.521658][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[  220.547509][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[  220.555434][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[  220.700003][ T5188] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  220.710853][ T5188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  220.741843][ T5174] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  220.754979][ T5174] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  221.935305][ T5177] 8021q: adding VLAN 0 to HW filter on device batadv0
[  222.221731][ T5180] 8021q: adding VLAN 0 to HW filter on device batadv0
[  222.459710][ T5177] veth0_vlan: entered promiscuous mode
[  222.608391][ T5177] veth1_vlan: entered promiscuous mode
[  222.670283][ T5188] 8021q: adding VLAN 0 to HW filter on device batadv0
[  222.979361][ T5174] 8021q: adding VLAN 0 to HW filter on device batadv0
[  223.068789][ T5177] veth0_macvtap: entered promiscuous mode
[  223.143194][ T5177] veth1_macvtap: entered promiscuous mode
[  223.221833][ T5188] veth0_vlan: entered promiscuous mode
[  223.409789][ T5188] veth1_vlan: entered promiscuous mode
[  223.433627][ T5177] batman_adv: batadv0: Interface activated: batadv_slave_0
[  223.506979][ T5178] 8021q: adding VLAN 0 to HW filter on device batadv0
[  223.631682][ T5177] batman_adv: batadv0: Interface activated: batadv_slave_1
[  223.701324][ T5177] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  223.710582][ T5177] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  223.719990][ T5177] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  223.729264][ T5177] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  223.936904][ T5188] veth0_macvtap: entered promiscuous mode
[  223.957725][ T5174] veth0_vlan: entered promiscuous mode
[  224.066639][ T5188] veth1_macvtap: entered promiscuous mode
[  224.178599][ T5174] veth1_vlan: entered promiscuous mode
[  224.341027][ T5188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  224.353048][ T5188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  224.368631][ T5188] batman_adv: batadv0: Interface activated: batadv_slave_0
[  224.456670][ T5178] veth0_vlan: entered promiscuous mode
[  224.552823][ T5174] veth0_macvtap: entered promiscuous mode
[  224.588659][ T5188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  224.600504][ T5188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  224.618810][ T5188] batman_adv: batadv0: Interface activated: batadv_slave_1
[  224.643729][ T5178] veth1_vlan: entered promiscuous mode
[  224.669112][ T5174] veth1_macvtap: entered promiscuous mode
[  224.728743][ T5188] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  224.737971][ T5188] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  224.747199][ T5188] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  224.756329][ T5188] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  224.958674][ T5174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  224.970738][ T5174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  224.981000][ T5174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  224.991811][ T5174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.007171][ T5174] batman_adv: batadv0: Interface activated: batadv_slave_0
[  225.169580][ T5174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  225.180456][ T5174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.190647][ T5174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  225.201436][ T5174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.216811][ T5174] batman_adv: batadv0: Interface activated: batadv_slave_1
[  225.261529][ T5178] veth0_macvtap: entered promiscuous mode
[  225.312061][ T5178] veth1_macvtap: entered promiscuous mode
[  225.490809][ T5180] veth0_vlan: entered promiscuous mode
[  225.520453][ T5174] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  225.532210][ T5174] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  225.542326][ T5174] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  225.551556][ T5174] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  225.579497][ T5178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  225.590429][ T5178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.602315][ T5178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  225.616430][ T5178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.627937][ T5178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  225.638812][ T5178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.654028][ T5178] batman_adv: batadv0: Interface activated: batadv_slave_0
[  225.735367][ T5180] veth1_vlan: entered promiscuous mode
[  225.903023][ T5178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  225.913850][ T5178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.924850][ T5178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  225.935591][ T5178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.946192][ T5178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  225.957064][ T5178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.972211][ T5178] batman_adv: batadv0: Interface activated: batadv_slave_1
[  226.162763][ T5178] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  226.179097][ T5178] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  226.190277][ T5178] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  226.200991][ T5178] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  226.243074][ T5180] veth0_macvtap: entered promiscuous mode
[  226.313125][ T5180] veth1_macvtap: entered promiscuous mode
[  226.529906][ T5180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  226.540973][ T5180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  226.551242][ T5180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  226.562075][ T5180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  226.576435][ T5180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  226.589018][ T5180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  226.599209][ T5180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  226.610062][ T5180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  226.629934][ T5180] batman_adv: batadv0: Interface activated: batadv_slave_0
[  226.723447][ T5180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  226.735513][ T5180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  226.750643][ T5180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  226.762070][ T5180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  226.772348][ T5180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  226.783202][ T5180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  226.793526][ T5180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  226.808449][ T5180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  226.825322][ T5180] batman_adv: batadv0: Interface activated: batadv_slave_1
[  226.877359][ T5180] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  226.887424][ T5180] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  226.897239][ T5180] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  226.906450][ T5180] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  230.557464][ T4307] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  230.566330][ T4307] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  230.798752][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  230.809368][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  231.305626][ T3552] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  231.313762][ T3552] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  231.550220][ T4531] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  231.559494][ T4531] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  232.581415][ T4531] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  232.589615][ T4531] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  233.010749][ T4531] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  233.019314][ T4531] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  233.030371][ T2526] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  233.038446][ T2526] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  233.103766][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  233.112569][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  233.427442][ T2526] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  233.435974][ T2526] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  233.444003][ T4531] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  233.452325][ T4531] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  241.497041][ T5465] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  241.631168][ T5465] fuse: Unknown parameter '$`'
[  242.369660][ T5480] =======================================================
[  242.369660][ T5480] WARNING: The mand mount option has been deprecated and
[  242.369660][ T5480]          and is ignored by this kernel. Remove the mand
[  242.369660][ T5480]          option from the mount to silence this warning.
[  242.369660][ T5480] =======================================================
[  242.814766][ T5487] syz.1.52[5487] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  242.815681][ T5487] syz.1.52[5487] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  244.257808][ T5510] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  248.486730][ T5569] syzkaller0: entered promiscuous mode
[  248.526287][ T5567] syzkaller0: left promiscuous mode
[  252.065339][ T1063] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  252.337304][ T1063] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  252.348754][ T1063] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  252.359151][ T1063] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  252.368745][ T1063] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  252.455482][ T1063] usb 4-1: config 0 descriptor??
[  252.498598][ T5628] loop1: detected capacity change from 0 to 64
[  252.674349][    C0] hrtimer: interrupt took 204140 ns
[  252.710470][ T5628] minix_free_block (loop1:2): bit already cleared
[  252.717746][ T5628] minix_free_block (loop1:3): bit already cleared
[  252.724619][ T5628] minix_free_block (loop1:4): bit already cleared
[  252.859311][ T5628] minix_free_block (loop1:2): bit already cleared
[  252.866419][ T5628] minix_free_block (loop1:3): bit already cleared
[  252.873051][ T5628] minix_free_block (loop1:4): bit already cleared
[  252.988450][ T1063] usbhid 4-1:0.0: can't add hid device: -71
[  252.995285][ T1063] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  253.108160][ T1063] usb 4-1: USB disconnect, device number 2
[  253.494712][ T4883] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  253.764731][ T4883] usb 1-1: Using ep0 maxpacket: 16
[  253.805876][ T4883] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  253.817277][ T4883] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  253.827584][ T4883] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  253.848611][ T4883] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  253.861188][ T4883] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  253.872124][ T4883] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[  253.957158][ T4883] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  253.966677][ T4883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  253.975126][ T4883] usb 1-1: Product: syz
[  253.979529][ T4883] usb 1-1: Manufacturer: syz
[  253.984532][ T4883] usb 1-1: SerialNumber: syz
[  254.280773][ T4883] cdc_ncm 1-1:1.0: bind() failure
[  254.297727][ T4883] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found
[  254.305018][ T4883] cdc_ncm 1-1:1.1: bind() failure
[  254.465677][ T4883] usb 1-1: USB disconnect, device number 2
[  254.512224][ T5650] Zero length message leads to an empty skb
[  255.648139][ T5665] loop4: detected capacity change from 0 to 64
[  255.906387][ T5665] minix_free_block (loop4:2): bit already cleared
[  255.913066][ T5665] minix_free_block (loop4:3): bit already cleared
[  255.919963][ T5665] minix_free_block (loop4:4): bit already cleared
[  256.013962][ T5665] minix_free_block (loop4:2): bit already cleared
[  256.020852][ T5665] minix_free_block (loop4:3): bit already cleared
[  256.027746][ T5665] minix_free_block (loop4:4): bit already cleared
[  256.405450][ T1680] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  256.644927][ T1680] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  256.656401][ T1680] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  256.666635][ T1680] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  256.676149][ T1680] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  256.752169][ T1680] usb 4-1: config 0 descriptor??
[  257.261643][ T1680] usbhid 4-1:0.0: can't add hid device: -71
[  257.268452][ T1680] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  257.356681][ T1680] usb 4-1: USB disconnect, device number 3
[  258.506852][ T5702] loop3: detected capacity change from 0 to 64
[  258.711349][ T5702] minix_free_block (loop3:2): bit already cleared
[  258.718281][ T5702] minix_free_block (loop3:3): bit already cleared
[  258.729273][ T5702] minix_free_block (loop3:4): bit already cleared
[  260.169825][ T4883] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  260.476968][ T4883] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  260.492541][ T4883] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  260.504557][ T4883] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  260.513902][ T4883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  260.598117][ T4883] usb 2-1: config 0 descriptor??
[  260.732766][ T5736] loop0: detected capacity change from 0 to 64
[  261.086713][ T4883] usbhid 2-1:0.0: can't add hid device: -71
[  261.093378][ T4883] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  261.177804][ T4883] usb 2-1: USB disconnect, device number 2
[  261.188432][ T5736] minix_free_block (loop0:2): bit already cleared
[  261.195429][ T5736] minix_free_block (loop0:3): bit already cleared
[  261.202053][ T5736] minix_free_block (loop0:4): bit already cleared
[  263.300542][ T5773] loop2: detected capacity change from 0 to 64
[  263.512415][ T5773] minix_free_block (loop2:2): bit already cleared
[  263.519890][ T5773] minix_free_block (loop2:3): bit already cleared
[  263.527810][ T5773] minix_free_block (loop2:4): bit already cleared
[  263.810549][   T25] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  264.081248][   T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  264.092650][   T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  264.102956][   T25] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  264.112411][   T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  264.204423][   T25] usb 1-1: config 0 descriptor??
[  264.701864][   T25] usbhid 1-1:0.0: can't add hid device: -71
[  264.709715][   T25] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  264.779157][   T25] usb 1-1: USB disconnect, device number 3
[  265.706083][ T5805] loop2: detected capacity change from 0 to 64
[  265.834186][ T5805] minix_free_block (loop2:2): bit already cleared
[  265.841219][ T5805] minix_free_block (loop2:3): bit already cleared
[  265.848083][ T5805] minix_free_block (loop2:4): bit already cleared
[  267.957670][ T4883] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  268.078501][ T5837] netlink: 892 bytes leftover after parsing attributes in process `syz.3.213'.
[  268.246959][ T4883] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  268.258344][ T4883] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  268.268646][ T4883] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  268.282100][ T4883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  268.345984][ T4883] usb 3-1: config 0 descriptor??
[  268.883561][ T4883] usbhid 3-1:0.0: can't add hid device: -71
[  268.897072][ T4883] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  268.951786][ T4883] usb 3-1: USB disconnect, device number 2
[  269.165133][   T25] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  269.394582][   T25] usb 4-1: device descriptor read/64, error -71
[  269.713487][   T25] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  269.787053][ T5853] capability: warning: `syz.0.219' uses deprecated v2 capabilities in a way that may be insecure
[  269.885016][   T25] usb 4-1: device descriptor read/64, error -71
[  270.033721][   T25] usb usb4-port1: attempt power cycle
[  270.505112][   T25] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  270.603954][   T25] usb 4-1: device descriptor read/8, error -71
[  270.905357][   T25] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  270.972719][ T5866] netlink: 892 bytes leftover after parsing attributes in process `syz.0.226'.
[  270.990400][   T25] usb 4-1: device descriptor read/8, error -71
[  271.008725][ T5868] syz.1.227 uses obsolete (PF_INET,SOCK_PACKET)
[  271.153554][   T25] usb usb4-port1: unable to enumerate USB device
[  271.966578][ T4883] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  272.210989][ T4883] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  272.222501][ T4883] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  272.232817][ T4883] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  272.242454][ T4883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  272.291325][ T4883] usb 5-1: config 0 descriptor??
[  272.815065][ T4883] usbhid 5-1:0.0: can't add hid device: -71
[  272.821876][ T4883] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  272.902503][ T4883] usb 5-1: USB disconnect, device number 2
[  273.479632][ T5892] netlink: 892 bytes leftover after parsing attributes in process `syz.2.238'.
[  274.654982][ T1680] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  274.845587][ T1680] usb 3-1: device descriptor read/64, error -71
[  275.165191][ T1680] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  275.395354][ T1680] usb 3-1: device descriptor read/64, error -71
[  275.556993][ T1680] usb usb3-port1: attempt power cycle
[  276.058375][ T1680] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  276.142784][ T1680] usb 3-1: device descriptor read/8, error -71
[  276.455865][ T1680] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  276.586141][ T1680] usb 3-1: device descriptor read/8, error -71
[  276.742312][ T1680] usb usb3-port1: unable to enumerate USB device
[  277.114620][ T5239] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  277.359258][ T5239] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  277.372476][ T5239] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  277.382782][ T5239] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  277.396173][ T5239] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  277.528023][ T5239] usb 5-1: config 0 descriptor??
[  278.459992][ T5239] usbhid 5-1:0.0: can't add hid device: -71
[  278.467000][ T5239] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  278.583318][ T5239] usb 5-1: USB disconnect, device number 3
[  280.608008][ T1245] ieee802154 phy0 wpan0: encryption failed: -22
[  280.614852][ T1245] ieee802154 phy1 wpan1: encryption failed: -22
[  284.522465][ T5972] fuse: Unknown parameter 'gdÃ0x0000000000000008'
[  286.309586][   T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  286.330865][   T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  286.340217][   T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  286.362387][   T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  286.388291][   T51] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  286.435674][   T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  288.145947][ T5990] chnl_net:caif_netlink_parms(): no params data found
[  288.566556][ T5189] Bluetooth: hci5: command tx timeout
[  288.746853][ T6020] loop1: detected capacity change from 0 to 64
[  289.169186][ T6020] minix_free_block (loop1:2): bit already cleared
[  289.176092][ T6020] minix_free_block (loop1:3): bit already cleared
[  289.182879][ T6020] minix_free_block (loop1:4): bit already cleared
[  289.258693][   T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  289.421912][ T6027] minix_free_block (loop1:2): bit already cleared
[  289.429100][ T6027] minix_free_block (loop1:3): bit already cleared
[  289.436122][ T6027] minix_free_block (loop1:4): bit already cleared
[  289.488734][   T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  289.710932][   T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  289.900856][   T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  290.260805][ T5990] bridge0: port 1(bridge_slave_0) entered blocking state
[  290.268761][ T5990] bridge0: port 1(bridge_slave_0) entered disabled state
[  290.277140][ T5990] bridge_slave_0: entered allmulticast mode
[  290.293797][ T5990] bridge_slave_0: entered promiscuous mode
[  290.478845][ T5990] bridge0: port 2(bridge_slave_1) entered blocking state
[  290.487320][ T5990] bridge0: port 2(bridge_slave_1) entered disabled state
[  290.501843][ T5990] bridge_slave_1: entered allmulticast mode
[  290.511497][ T5990] bridge_slave_1: entered promiscuous mode
[  290.644616][ T5189] Bluetooth: hci5: command tx timeout
[  290.847841][   T13] bridge_slave_1: left allmulticast mode
[  290.853735][   T13] bridge_slave_1: left promiscuous mode
[  290.860851][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  290.967092][   T13] bridge_slave_0: left allmulticast mode
[  290.972997][   T13] bridge_slave_0: left promiscuous mode
[  290.979868][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  291.896035][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  291.961298][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  292.006622][   T13] bond0 (unregistering): Released all slaves
[  292.080558][ T5990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  292.166876][ T5990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  292.697300][ T5990] team0: Port device team_slave_0 added
[  292.734691][ T5189] Bluetooth: hci5: command tx timeout
[  292.960664][ T5990] team0: Port device team_slave_1 added
[  293.188637][ T6064] loop1: detected capacity change from 0 to 64
[  293.500389][ T5990] batman_adv: batadv0: Adding interface: batadv_slave_0
[  293.507778][ T5990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  293.535366][ T5990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  293.700214][ T6064] minix_free_block (loop1:2): bit already cleared
[  293.707118][ T6064] minix_free_block (loop1:3): bit already cleared
[  293.713810][ T6064] minix_free_block (loop1:4): bit already cleared
[  293.816364][   T13] hsr_slave_0: left promiscuous mode
[  293.850373][   T13] hsr_slave_1: left promiscuous mode
[  293.895168][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  293.903042][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  293.968023][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  293.979310][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  293.986382][ T6074] netlink: 4 bytes leftover after parsing attributes in process `syz.2.306'.
[  294.104998][   T13] veth1_macvtap: left promiscuous mode
[  294.110778][   T13] veth0_macvtap: left promiscuous mode
[  294.116813][   T13] veth1_vlan: left promiscuous mode
[  294.125190][   T13] veth0_vlan: left promiscuous mode
[  294.805799][ T5189] Bluetooth: hci5: command tx timeout
[  295.417187][   T13] team0 (unregistering): Port device team_slave_1 removed
[  295.470507][   T13] team0 (unregistering): Port device team_slave_0 removed
[  296.107129][ T5990] batman_adv: batadv0: Adding interface: batadv_slave_1
[  296.114690][ T5990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  296.146258][ T5990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  296.797692][ T5990] hsr_slave_0: entered promiscuous mode
[  296.897258][ T5990] hsr_slave_1: entered promiscuous mode
[  296.924501][ T5990] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  296.932413][ T5990] Cannot create hsr debugfs directory
[  298.322222][ T6116] loop1: detected capacity change from 0 to 64
[  299.046827][ T6125] netlink: 4 bytes leftover after parsing attributes in process `syz.4.324'.
[  299.110952][ T6123] minix_free_block (loop1:2): bit already cleared
[  299.117810][ T6123] minix_free_block (loop1:3): bit already cleared
[  299.124991][ T6123] minix_free_block (loop1:4): bit already cleared
[  299.535119][ T5990] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  299.645400][ T5990] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  299.820527][ T5990] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  299.965315][ T5990] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  301.646760][ T5990] 8021q: adding VLAN 0 to HW filter on device bond0
[  301.915924][ T5990] 8021q: adding VLAN 0 to HW filter on device team0
[  302.070065][ T5227] bridge0: port 1(bridge_slave_0) entered blocking state
[  302.077857][ T5227] bridge0: port 1(bridge_slave_0) entered forwarding state
[  302.093810][ T5227] bridge0: port 2(bridge_slave_1) entered blocking state
[  302.101624][ T5227] bridge0: port 2(bridge_slave_1) entered forwarding state
[  302.296729][ T6160] netlink: 4 bytes leftover after parsing attributes in process `syz.2.336'.
[  302.591197][ T6163] loop1: detected capacity change from 0 to 64
[  304.807559][ T5990] 8021q: adding VLAN 0 to HW filter on device batadv0
[  305.435534][ T6204] netlink: 4 bytes leftover after parsing attributes in process `syz.2.349'.
[  305.495533][ T5990] veth0_vlan: entered promiscuous mode
[  305.602351][ T5990] veth1_vlan: entered promiscuous mode
[  306.099975][ T5990] veth0_macvtap: entered promiscuous mode
[  306.217013][ T5990] veth1_macvtap: entered promiscuous mode
[  306.454021][ T5990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  306.468594][ T5990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  306.479687][ T5990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  306.490520][ T5990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  306.500696][ T5990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  306.511578][ T5990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  306.521803][ T5990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  306.532599][ T5990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  306.547857][ T5990] batman_adv: batadv0: Interface activated: batadv_slave_0
[  306.928840][ T5990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  306.941351][ T5990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  306.952586][ T5990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  306.965094][ T5990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  306.975890][ T5990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  306.990031][ T5990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.001150][ T5990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  307.011878][ T5990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.027141][ T5990] batman_adv: batadv0: Interface activated: batadv_slave_1
[  307.456296][ T5990] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  307.467435][ T5990] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  307.477978][ T5990] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  307.487309][ T5990] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  307.859054][ T6231] loop1: detected capacity change from 0 to 64
[  308.478400][ T6231] minix_free_block (loop1:2): bit already cleared
[  308.485836][ T6231] minix_free_block (loop1:3): bit already cleared
[  308.492464][ T6231] minix_free_block (loop1:4): bit already cleared
[  308.632364][ T6243] netlink: 4 bytes leftover after parsing attributes in process `syz.0.361'.
[  311.238665][ T6280] netlink: 4 bytes leftover after parsing attributes in process `syz.2.372'.
[  314.066798][ T6325] netlink: 4 bytes leftover after parsing attributes in process `syz.4.385'.
[  315.818973][ T4438] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  315.827113][ T4438] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  316.255113][ T3552] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  316.263205][ T3552] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  316.966844][ T6358] netlink: 4 bytes leftover after parsing attributes in process `syz.2.397'.
[  318.080112][ T6374] input: syz0 as /devices/virtual/input/input6
[  318.780186][ T6387] netlink: 4 bytes leftover after parsing attributes in process `syz.4.410'.
[  321.134655][ T6424] netlink: 4 bytes leftover after parsing attributes in process `syz.4.424'.
[  333.935460][ T5185] Bluetooth: hci0: command 0x0406 tx timeout
[  333.944065][ T5190] Bluetooth: hci1: command 0x0406 tx timeout
[  333.951582][ T5185] Bluetooth: hci3: command 0x0406 tx timeout
[  333.958312][ T5190] Bluetooth: hci2: command 0x0406 tx timeout
[  334.620873][ T6560] netlink: 8 bytes leftover after parsing attributes in process `syz.2.480'.
[  335.849532][ T6580] raw_sendmsg: syz.2.489 forgot to set AF_INET. Fix it!
[  337.060181][ T6595] netlink: 4 bytes leftover after parsing attributes in process `syz.1.494'.
[  337.975079][ T6610] misc userio: The device must be registered before sending interrupts
[  339.389607][    C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies.
[  340.195140][ T6645] serio: Serial port pts0
[  342.094419][ T1245] ieee802154 phy0 wpan0: encryption failed: -22
[  342.103717][ T1245] ieee802154 phy1 wpan1: encryption failed: -22
[  347.345321][   T44] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  347.375544][ T6767] serio: Serial port pts0
[  347.590470][   T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  347.602063][   T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  347.612325][   T44] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  347.621766][   T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  347.702891][   T44] usb 3-1: config 0 descriptor??
[  348.415271][   T44] usbhid 3-1:0.0: can't add hid device: -71
[  348.421913][   T44] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  348.515479][   T44] usb 3-1: USB disconnect, device number 7
[  348.527790][ T5655] udevd[5655]: setting owner of /dev/bus/usb/003/007 to uid=0, gid=0 failed: No such file or directory
[  350.954750][    T8] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  351.246577][    T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  351.258075][    T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  351.268454][    T8] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  351.277975][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  351.308246][    T8] usb 1-1: config 0 descriptor??
[  352.023010][    T8] usbhid 1-1:0.0: can't add hid device: -71
[  352.029924][    T8] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  352.114153][    T8] usb 1-1: USB disconnect, device number 4
[  354.586086][ T6869] binder: 6868:6869 ioctl c0306201 0 returned -14
[  355.055652][    T8] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  355.297211][    T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  355.308675][    T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  355.322297][    T8] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  355.333114][    T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  355.396770][    T8] usb 3-1: config 0 descriptor??
[  355.856827][    C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies.
[  356.047468][    T8] usbhid 3-1:0.0: can't add hid device: -71
[  356.053916][    T8] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  356.144512][    T8] usb 3-1: USB disconnect, device number 8
[  359.016063][ T5227] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  359.293399][ T5227] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  359.308795][ T5227] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  359.320102][ T5227] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  359.329599][ T5227] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  359.427133][ T5227] usb 2-1: config 0 descriptor??
[  360.091138][ T5227] usbhid 2-1:0.0: can't add hid device: -71
[  360.098798][ T5227] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  360.155777][ T5227] usb 2-1: USB disconnect, device number 3
[  361.919262][ T6973] serio: Serial port pts0
[  361.946315][ T6974] netlink: 900 bytes leftover after parsing attributes in process `syz.3.663'.
[  362.559537][ T6981] random: crng reseeded on system resumption
[  363.097456][ T5227] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  363.356342][ T5227] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  363.367887][ T5227] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  363.378309][ T5227] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  363.387764][ T5227] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  363.487126][ T5227] usb 4-1: config 0 descriptor??
[  363.940268][ T5227] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x0
[  363.997337][ T5227] arvo 0003:1E7D:30D4.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.3-1/input0
[  364.143535][ T5227] arvo 0003:1E7D:30D4.0001: couldn't init struct arvo_device
[  364.151614][ T5227] arvo 0003:1E7D:30D4.0001: couldn't install keyboard
[  364.229579][ T5227] arvo 0003:1E7D:30D4.0001: probe with driver arvo failed with error -71
[  364.365159][ T5227] usb 4-1: USB disconnect, device number 8
[  367.477573][ T5227] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  367.735148][ T5227] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  367.746543][ T5227] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  367.756814][ T5227] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  367.766299][ T5227] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  367.837423][ T5227] usb 4-1: config 0 descriptor??
[  368.291402][ T5227] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0
[  368.347113][ T5227] arvo 0003:1E7D:30D4.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.3-1/input0
[  368.568702][ T5227] arvo 0003:1E7D:30D4.0002: couldn't init struct arvo_device
[  368.576765][ T5227] arvo 0003:1E7D:30D4.0002: couldn't install keyboard
[  368.619750][ T5227] arvo 0003:1E7D:30D4.0002: probe with driver arvo failed with error -71
[  368.681625][ T5227] usb 4-1: USB disconnect, device number 9
[  370.290445][ T7066] misc userio: Invalid payload size
[  372.052801][ T7097] misc userio: Invalid payload size
[  374.070380][ T7132] misc userio: Invalid payload size
[  375.518283][ T7151] netlink: 828 bytes leftover after parsing attributes in process `syz.4.741'.
[  378.090862][ T7192] netlink: 900 bytes leftover after parsing attributes in process `syz.0.756'.
[  380.691244][ T7226] serio: Serial port pts1
[  385.729341][ T7296] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  388.155720][ T7333] sctp: [Deprecated]: syz.0.820 (pid 7333) Use of struct sctp_assoc_value in delayed_ack socket option.
[  388.155720][ T7333] Use struct sctp_sack_info instead
[  391.245470][ T7380] serio: Serial port pts0
[  392.095068][ T1063] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  392.329509][ T1063] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  392.340984][ T1063] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  392.351266][ T1063] usb 4-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00
[  392.360722][ T1063] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  392.442694][ T1063] usb 4-1: config 0 descriptor??
[  392.967624][ T1063] belkin 0003:1020:0006.0003: item fetching failed at offset 2/5
[  393.036983][ T1063] belkin 0003:1020:0006.0003: parse failed
[  393.043309][ T1063] belkin 0003:1020:0006.0003: probe with driver belkin failed with error -22
[  393.176490][ T5237] usb 4-1: USB disconnect, device number 10
[  403.459798][ T1245] ieee802154 phy0 wpan0: encryption failed: -22
[  403.466793][ T1245] ieee802154 phy1 wpan1: encryption failed: -22
[  405.336250][ T7588] serio: Serial port pts0
[  409.142924][ T7637] serio: Serial port pts0
[  410.645921][ T5185] Bluetooth: hci5: command 0x0406 tx timeout
[  414.595153][   T29] audit: type=1107 audit(1722777896.425:2): pid=7718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='EáÍ;
[  414.595153][   T29] zÍ­wÕ™@fNÎBIíž_yuP Õ	mJ-5ædÍ@¿H&4Ê|�iÛO\·1Ûxe\�´ÝK(]X A.ÁïkìzÍ;Œ-ÿ¤j˜qªØ�)ì�m
[  414.595153][   T29] 8CªÓËtõ1ÿ<’Ù”5z’F1Qå}~ôo16U9Âæ†lÒT=ŠG+ã[û1[ÿäÒ'
[  414.637149][ T7722] bridge0: port 2(bridge_slave_1) entered disabled state
[  415.027546][ T7730] serio: Serial port pts1
[  419.895876][    C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies.
[  431.157879][ T7962] serio: Serial port pts0
[  440.984717][    T8] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  441.204567][    T8] usb 4-1: Using ep0 maxpacket: 8
[  441.260861][    T8] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  441.270035][    T8] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  441.280719][    T8] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  441.365435][    T8] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  441.375083][    T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  441.383349][    T8] usb 4-1: Product: syz
[  441.387965][    T8] usb 4-1: Manufacturer: syz
[  441.392801][    T8] usb 4-1: SerialNumber: syz
[  441.785781][    T8] usb 4-1: 0:2 : does not exist
[  441.915570][    T8] usb 4-1: USB disconnect, device number 11
[  442.632253][ T5395] udevd[5395]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  444.140121][ T8153] serio: Serial port pts0
[  450.368286][   T29] audit: type=1400 audit(1722777932.105:3): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=8252 comm="syz.1.1231"
[  452.975325][ T8296] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1251'.
[  457.407599][   T44] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  457.656328][   T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  457.667846][   T44] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  457.681632][   T44] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  457.691216][   T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  457.760190][   T44] usb 1-1: config 0 descriptor??
[  458.275997][   T44] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving
[  458.319277][   T44] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  459.127112][ T1063] usb 1-1: USB disconnect, device number 5
[  459.826668][ T8388] binder: BINDER_SET_CONTEXT_MGR already set
[  459.832877][ T8388] binder: 8387:8388 ioctl 40046207 0 returned -16
[  464.907362][ T1245] ieee802154 phy0 wpan0: encryption failed: -22
[  464.914057][ T1245] ieee802154 phy1 wpan1: encryption failed: -22
[  469.214633][ T1680] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  469.470677][ T1680] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  469.483106][ T1680] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  469.498327][ T1680] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  469.509547][ T1680] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  469.523565][ T1680] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  469.533104][ T1680] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  469.603575][ T1680] usb 4-1: config 0 descriptor??
[  470.159474][ T1680] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving
[  470.252557][ T1680] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  471.075213][ T1063] usb 4-1: USB disconnect, device number 12
[  471.604642][ T1680] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  471.845742][ T1680] usb 2-1: Using ep0 maxpacket: 8
[  471.884838][ T1680] usb 2-1: config 0 has no interfaces?
[  471.890689][ T1680] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  471.900464][ T1680] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  471.973692][ T1680] usb 2-1: config 0 descriptor??
[  472.225915][ T1680] usb 2-1: USB disconnect, device number 4
[  472.855701][ T1680] usb 2-1: new low-speed USB device number 5 using dummy_hcd
[  473.107845][ T1680] usb 2-1: config 0 has no interfaces?
[  473.113796][ T1680] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  473.123395][ T1680] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  473.166048][ T1680] usb 2-1: config 0 descriptor??
[  473.401388][ T5237] usb 2-1: USB disconnect, device number 5
[  477.546403][ T1680] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  477.823723][ T1680] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  477.904067][ T1680] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  477.914952][ T1680] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  477.923258][ T1680] usb 1-1: SerialNumber: syz
[  477.998150][ T1680] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22
[  478.337632][ T1063] usb 1-1: USB disconnect, device number 6
[  479.947324][ T8679] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  480.744502][ T8685] serio: Serial port pts0
[  487.246217][ T8768] serio: Serial port pts0
[  491.440752][    C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies.
[  497.867858][ T5185] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  497.878217][ T5185] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  497.892909][ T5185] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  497.921121][ T5185] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  497.941347][ T5185] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  497.967453][ T5185] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  499.596283][ T8898] chnl_net:caif_netlink_parms(): no params data found
[  500.008281][ T5185] Bluetooth: hci4: command tx timeout
[  501.190263][ T8898] bridge0: port 1(bridge_slave_0) entered blocking state
[  501.199364][ T8898] bridge0: port 1(bridge_slave_0) entered disabled state
[  501.209921][ T8898] bridge_slave_0: entered allmulticast mode
[  501.219391][ T8898] bridge_slave_0: entered promiscuous mode
[  501.252146][ T8898] bridge0: port 2(bridge_slave_1) entered blocking state
[  501.262858][ T8898] bridge0: port 2(bridge_slave_1) entered disabled state
[  501.270953][ T8898] bridge_slave_1: entered allmulticast mode
[  501.283514][ T8898] bridge_slave_1: entered promiscuous mode
[  501.700587][ T8898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  501.803516][ T8898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  502.085639][ T5185] Bluetooth: hci4: command tx timeout
[  502.211048][ T8898] team0: Port device team_slave_0 added
[  502.285621][ T8898] team0: Port device team_slave_1 added
[  502.659146][ T8898] batman_adv: batadv0: Adding interface: batadv_slave_0
[  502.671935][ T8898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  502.700293][ T8898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  502.849159][ T8898] batman_adv: batadv0: Adding interface: batadv_slave_1
[  502.856707][ T8898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  502.887120][ T8898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  503.491244][ T8898] hsr_slave_0: entered promiscuous mode
[  503.546094][ T8898] hsr_slave_1: entered promiscuous mode
[  503.597314][ T8898] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  503.605468][ T8898] Cannot create hsr debugfs directory
[  504.164464][ T5185] Bluetooth: hci4: command tx timeout
[  504.913212][ T8898] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  505.148048][ T8898] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  505.323435][ T8898] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  505.545184][ T8898] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  506.257290][ T5185] Bluetooth: hci4: command tx timeout
[  506.317613][ T8898] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  506.416323][ T8898] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  506.513630][ T8898] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  506.636037][ T8898] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  508.125335][ T8898] 8021q: adding VLAN 0 to HW filter on device bond0
[  508.353408][ T8898] 8021q: adding VLAN 0 to HW filter on device team0
[  508.460656][ T5237] bridge0: port 1(bridge_slave_0) entered blocking state
[  508.468488][ T5237] bridge0: port 1(bridge_slave_0) entered forwarding state
[  508.589621][ T5237] bridge0: port 2(bridge_slave_1) entered blocking state
[  508.597396][ T5237] bridge0: port 2(bridge_slave_1) entered forwarding state
[  509.051806][ T8898] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  511.220053][ T8898] 8021q: adding VLAN 0 to HW filter on device batadv0
[  514.446631][ T8898] veth0_vlan: entered promiscuous mode
[  514.570764][ T8898] veth1_vlan: entered promiscuous mode
[  514.987431][ T8898] veth0_macvtap: entered promiscuous mode
[  515.074907][ T8898] veth1_macvtap: entered promiscuous mode
[  515.289506][ T8898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  515.300431][ T8898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  515.310745][ T8898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  515.321559][ T8898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  515.331779][ T8898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  515.342738][ T8898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  515.358373][ T8898] batman_adv: batadv0: Interface activated: batadv_slave_0
[  515.646627][ T8898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  515.657946][ T8898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  515.672773][ T8898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  515.684909][ T8898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  515.704337][ T8898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  515.715303][ T8898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  515.725595][ T8898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  515.736411][ T8898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  515.746617][ T8898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  515.757822][ T8898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  515.786272][ T8898] batman_adv: batadv0: Interface activated: batadv_slave_1
[  516.058018][ T8898] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  516.067495][ T8898] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  516.076719][ T8898] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  516.098883][ T8898] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  524.148434][ T3552] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  524.156744][ T3552] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  524.240820][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  524.249091][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  526.355453][ T1245] ieee802154 phy0 wpan0: encryption failed: -22
[  526.362120][ T1245] ieee802154 phy1 wpan1: encryption failed: -22
[  530.347775][ T9313] serio: Serial port pts0
[  530.470549][ T9317] sctp: [Deprecated]: syz.1.1667 (pid 9317) Use of struct sctp_assoc_value in delayed_ack socket option.
[  530.470549][ T9317] Use struct sctp_sack_info instead
[  532.533908][ T9344] fuse: Bad value for 'fd'
[  534.063616][ T4531] bridge_slave_1: left allmulticast mode
[  534.069966][ T4531] bridge_slave_1: left promiscuous mode
[  534.076695][ T4531] bridge0: port 2(bridge_slave_1) entered disabled state
[  534.158422][ T4531] bridge_slave_0: left allmulticast mode
[  534.164946][ T4531] bridge_slave_0: left promiscuous mode
[  534.171499][ T4531] bridge0: port 1(bridge_slave_0) entered disabled state
[  534.245702][ T9362] usb usb1: usbfs: process 9362 (syz.2.1687) did not claim interface 0 before use
[  534.606360][ T9370] fuse: Bad value for 'fd'
[  535.346364][ T4531] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  535.398517][ T4531] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  535.507813][ T4531] bond0 (unregistering): Released all slaves
[  536.538817][ T4531] hsr_slave_0: left promiscuous mode
[  536.580578][ T4531] hsr_slave_1: left promiscuous mode
[  536.620265][ T4531] batman_adv: batadv0: Removing interface: batadv_slave_0
[  536.678103][ T4531] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  536.686701][ T4531] batman_adv: batadv0: Removing interface: batadv_slave_1
[  536.807824][ T4531] veth1_macvtap: left promiscuous mode
[  536.813791][ T4531] veth0_macvtap: left promiscuous mode
[  536.820728][ T4531] veth1_vlan: left promiscuous mode
[  536.826448][ T4531] veth0_vlan: left promiscuous mode
[  537.220371][ T9403] fuse: Bad value for 'fd'
[  538.546333][ T4531] team0 (unregistering): Port device team_slave_1 removed
[  538.667319][ T4531] team0 (unregistering): Port device team_slave_0 removed
[  542.692701][ T9464] process 'syz.3.1731' launched '/dev/fd/4/./file0' with NULL argv: empty string added
[  556.595932][ T9665] serio: Serial port pts1
[  567.358694][ T9817] serio: Serial port pts0
[  567.443452][ T9819] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1887'.
[  576.150400][ T9974] random: crng reseeded on system resumption
[  583.841147][ T4883] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  584.069353][ T4883] usb 4-1: Using ep0 maxpacket: 32
[  584.114837][ T4883] usb 4-1: config index 0 descriptor too short (expected 29220, got 36)
[  584.123605][ T4883] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  584.132825][ T4883] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81
[  584.142777][ T4883] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  584.152886][ T4883] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  584.162990][ T4883] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  584.179111][ T4883] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  584.189435][ T4883] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  584.268957][ T4883] usb 4-1: config 0 descriptor??
[  584.573936][ T4883] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  584.635874][ T4883] usb 4-1: USB disconnect, device number 13
[  584.717875][ T4883] usblp0: removed
[  585.223327][ T4883] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  585.444527][ T4883] usb 4-1: Using ep0 maxpacket: 32
[  585.495601][ T4883] usb 4-1: config index 0 descriptor too short (expected 29220, got 36)
[  585.504671][ T4883] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  585.517089][ T4883] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81
[  585.526620][ T4883] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  585.536705][ T4883] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  585.546781][ T4883] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  585.560344][ T4883] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  585.569848][ T4883] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  585.671582][ T4883] usb 4-1: config 0 descriptor??
[  586.146522][ T4883] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  586.231925][ T4883] usb 4-1: USB disconnect, device number 14
[  586.293055][ T4883] usblp0: removed
[  587.802172][ T1245] ieee802154 phy0 wpan0: encryption failed: -22
[  587.809059][ T1245] ieee802154 phy1 wpan1: encryption failed: -22
[  592.822303][T10213] serio: Serial port pts0
[  594.837069][T10248] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2063'.
[  605.684707][   T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  605.981959][   T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 170, changing to 11
[  606.031692][   T10] usb 2-1: New USB device found, idVendor=5543, idProduct=0045, bcdDevice= 0.40
[  606.041342][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  606.049820][   T10] usb 2-1: Product: syz
[  606.054569][   T10] usb 2-1: Manufacturer: syz
[  606.059401][   T10] usb 2-1: SerialNumber: syz
[  606.480782][   T10] usbhid 2-1:1.0: can't add hid device: -22
[  606.491272][   T10] usbhid 2-1:1.0: probe with driver usbhid failed with error -22
[  606.550365][   T10] usb 2-1: USB disconnect, device number 6
[  610.208165][T10473] netlink: 7784 bytes leftover after parsing attributes in process `syz.0.2161'.
[  611.386267][T10490] fuse: Bad value for 'fd'
[  613.470773][T10525] fuse: Bad value for 'fd'
[  613.604368][   T44] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  613.834503][   T44] usb 4-1: Using ep0 maxpacket: 32
[  613.876617][   T44] usb 4-1: config 0 has an invalid descriptor of length 124, skipping remainder of the config
[  613.887417][   T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  613.898774][   T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  613.908981][   T44] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  613.922311][   T44] usb 4-1: New USB device found, idVendor=1b96, idProduct=9f0a, bcdDevice= 0.15
[  613.931797][   T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  614.008109][   T44] usb 4-1: config 0 descriptor??
[  614.463967][   T44] hid-generic 0003:1B96:9F0A.0006: unknown main item tag 0x0
[  614.472034][   T44] hid-generic 0003:1B96:9F0A.0006: unknown main item tag 0x0
[  614.479996][   T44] hid-generic 0003:1B96:9F0A.0006: unknown main item tag 0x0
[  614.495745][   T44] hid-generic 0003:1B96:9F0A.0006: unknown main item tag 0x0
[  614.503468][   T44] hid-generic 0003:1B96:9F0A.0006: unknown main item tag 0x0
[  614.603946][   T44] hid-generic 0003:1B96:9F0A.0006: hidraw0: USB HID v0.00 Device [HID 1b96:9f0a] on usb-dummy_hcd.3-1/input0
[  615.075907][   T10] usb 4-1: USB disconnect, device number 15
[  615.587420][T10556] fuse: Bad value for 'fd'
[  617.275411][T10589] fuse: Bad value for 'fd'
[  617.975390][   T29] audit: type=1800 audit(1722778099.755:4): pid=10586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.1.2214" name="/newroot/423/bus" dev="tmpfs" ino=2204 res=0 errno=0
[  619.363998][T10616] capability: warning: `syz.1.2226' uses 32-bit capabilities (legacy support in use)
[  620.565243][ T5190] Bluetooth: hci4: command 0x0406 tx timeout
[  624.143996][T10694] fuse: Invalid rootmode
[  626.247107][T10725] fuse: Bad value for 'rootmode'
[  628.345502][T10757] fuse: Bad value for 'rootmode'
[  629.463031][T10776] loop4: detected capacity change from 0 to 764
[  630.385246][T10780] loop0: detected capacity change from 0 to 2048
[  630.476989][T10780] EXT4-fs (loop0): bad geometry: first data block 0 is beyond end of filesystem (0)
[  631.075626][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  632.406374][    T0] NOHZ tick-stop error: local softirq work is pending, handler #2c2!!!
[  632.475386][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  633.036743][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  633.057441][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  633.231450][    T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!!
[  633.461478][T10795] fuse: Bad value for 'rootmode'
[  634.418116][T10807] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2308'.
[  634.566383][T10807] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2308'.
[  634.946320][T10812] input: syz1 as /devices/virtual/input/input8
[  635.384232][T10820] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  636.780008][T10841] loop4: detected capacity change from 0 to 512
[  636.874521][T10841] EXT4-fs (loop4): blocks per group (255) and clusters per group (8192) inconsistent
[  637.065114][T10843] evm: overlay not supported
[  637.421355][   T29] audit: type=1326 audit(1722778119.185:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10838 comm="syz.4.2322" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75579 code=0x7fc00000
[  637.450207][   T29] audit: type=1326 audit(1722778119.185:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10838 comm="syz.4.2322" exe="/root/syz-executor" sig=0 arch=40000003 syscall=248 compat=1 ip=0xf7f75579 code=0x7fc00000
[  637.473620][   T29] audit: type=1326 audit(1722778119.195:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10838 comm="syz.4.2322" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75579 code=0x7fc00000
[  637.496743][   T29] audit: type=1326 audit(1722778119.195:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10838 comm="syz.4.2322" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75579 code=0x7fc00000
[  637.519440][   T29] audit: type=1326 audit(1722778119.195:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10838 comm="syz.4.2322" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75579 code=0x7fc00000
[  637.546424][   T29] audit: type=1326 audit(1722778119.195:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10838 comm="syz.4.2322" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75579 code=0x7fc00000
[  637.570201][   T29] audit: type=1326 audit(1722778119.195:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10838 comm="syz.4.2322" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75579 code=0x7fc00000
[  637.592735][   T29] audit: type=1326 audit(1722778119.195:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10838 comm="syz.4.2322" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75579 code=0x7fc00000
[  637.615187][   T29] audit: type=1326 audit(1722778119.195:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10838 comm="syz.4.2322" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75579 code=0x7fc00000
[  637.642051][   T29] audit: type=1326 audit(1722778119.195:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10838 comm="syz.4.2322" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75579 code=0x7fc00000
[  638.597302][T10850] loop2: detected capacity change from 0 to 2048
[  638.796713][T10850] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  639.353311][ T5174] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  640.489462][T10867] netlink: 'syz.4.2332': attribute type 2 has an invalid length.
[  640.585132][   T25] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  640.810256][   T25] usb 3-1: Using ep0 maxpacket: 8
[  640.841192][   T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  640.853008][   T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  640.863791][   T25] usb 3-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.00
[  640.873308][   T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  640.965531][   T25] usb 3-1: config 0 descriptor??
[  641.484949][T10865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  641.495024][T10865] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  641.549370][T10865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  641.559502][T10865] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  641.684563][   T25] aquacomputer_d5next 0003:0C70:F014.0007: hidraw0: USB HID v0.00 Device [HID 0c70:f014] on usb-dummy_hcd.2-1/input0
[  642.964691][   T25] usb 3-1: reset high-speed USB device number 9 using dummy_hcd
[  643.903246][   T44] usb 3-1: USB disconnect, device number 9
[  644.259200][T10897] loop2: detected capacity change from 0 to 512
[  644.354565][T10897] EXT4-fs (loop2): blocks per group (255) and clusters per group (8192) inconsistent
[  644.525757][   T29] kauditd_printk_skb: 2 callbacks suppressed
[  644.525835][   T29] audit: type=1326 audit(1722778126.335:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10896 comm="syz.2.2345" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739d579 code=0x7fc00000
[  649.031310][T10940] loop1: detected capacity change from 0 to 512
[  649.226662][ T1245] ieee802154 phy0 wpan0: encryption failed: -22
[  649.233446][ T1245] ieee802154 phy1 wpan1: encryption failed: -22
[  649.635196][T10945] loop4: detected capacity change from 0 to 64
[  651.893861][T10966] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2371'.
[  652.275154][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  652.840866][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  653.605123][    T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!!
[  653.613899][    T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!!
[  658.551796][T10982] loop2: detected capacity change from 0 to 128
[  661.360975][T11001] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  661.370944][T11001] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  661.398986][T11001] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  661.419674][T11001] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  661.432273][T11001] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  661.443890][T11001] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  662.471781][T11000] chnl_net:caif_netlink_parms(): no params data found
[  663.526216][T11001] Bluetooth: hci3: command tx timeout
[  664.087513][T11000] bridge0: port 1(bridge_slave_0) entered blocking state
[  664.095899][T11000] bridge0: port 1(bridge_slave_0) entered disabled state
[  664.103670][T11000] bridge_slave_0: entered allmulticast mode
[  664.112093][T11000] bridge_slave_0: entered promiscuous mode
[  664.211052][ T5190] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  664.222120][ T5190] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  664.231616][ T5190] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  664.244761][ T5190] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  664.259465][ T5190] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  664.268637][ T5190] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  664.628025][T11000] bridge0: port 2(bridge_slave_1) entered blocking state
[  664.635572][T11000] bridge0: port 2(bridge_slave_1) entered disabled state
[  664.643130][T11000] bridge_slave_1: entered allmulticast mode
[  664.651432][T11000] bridge_slave_1: entered promiscuous mode
[  665.079059][T11000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  665.221760][T11000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  665.575376][T11000] team0: Port device team_slave_0 added
[  665.633847][ T5190] Bluetooth: hci3: command tx timeout
[  665.737522][T11000] team0: Port device team_slave_1 added
[  665.846948][T11021] veth0_vlan: entered allmulticast mode
[  666.241621][T11023] veth0_vlan: left promiscuous mode
[  666.249911][T11023] veth0_vlan: entered promiscuous mode
[  666.268877][T11015] chnl_net:caif_netlink_parms(): no params data found
[  666.325303][ T5190] Bluetooth: hci6: command tx timeout
[  666.548441][T11000] batman_adv: batadv0: Adding interface: batadv_slave_0
[  666.555776][T11000] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  666.582154][T11000] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  667.123816][T11000] batman_adv: batadv0: Adding interface: batadv_slave_1
[  667.131255][T11000] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  667.157915][T11000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  667.697112][ T5190] Bluetooth: hci3: command tx timeout
[  667.797372][T11000] hsr_slave_0: entered promiscuous mode
[  667.945754][T11000] hsr_slave_1: entered promiscuous mode
[  668.425514][ T5190] Bluetooth: hci6: command tx timeout
[  668.715675][T11015] bridge0: port 1(bridge_slave_0) entered blocking state
[  668.723135][T11015] bridge0: port 1(bridge_slave_0) entered disabled state
[  668.731306][T11015] bridge_slave_0: entered allmulticast mode
[  668.739517][T11015] bridge_slave_0: entered promiscuous mode
[  668.921526][T11015] bridge0: port 2(bridge_slave_1) entered blocking state
[  668.929562][T11015] bridge0: port 2(bridge_slave_1) entered disabled state
[  668.937326][T11015] bridge_slave_1: entered allmulticast mode
[  668.945611][T11015] bridge_slave_1: entered promiscuous mode
[  669.148679][T11000] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  669.429318][T11000] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  669.766367][ T5190] Bluetooth: hci3: command tx timeout
[  669.788832][T11015] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  669.862159][T11000] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  669.982044][T11015] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  670.157721][T11000] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  670.213759][T11001] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  670.222729][T11001] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  670.233616][T11001] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  670.250437][T11001] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  670.262995][T11001] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  670.273230][T11001] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  670.495047][T11001] Bluetooth: hci6: command tx timeout
[  670.857858][T11015] team0: Port device team_slave_0 added
[  671.149163][T11036] loop3: detected capacity change from 0 to 4096
[  671.173820][T11000] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  671.247178][T11015] team0: Port device team_slave_1 added
[  671.386463][T11000] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  671.475391][T11036] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  671.665957][T11000] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  671.872901][ T5990] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  671.886570][T11015] batman_adv: batadv0: Adding interface: batadv_slave_0
[  671.893638][T11015] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  671.919977][T11015] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  671.951316][T11015] batman_adv: batadv0: Adding interface: batadv_slave_1
[  671.959114][T11015] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  671.986116][T11015] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  672.040243][T11000] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  672.324481][T11001] Bluetooth: hci7: command tx timeout
[  672.448699][T11015] hsr_slave_0: entered promiscuous mode
[  672.574375][T11001] Bluetooth: hci6: command tx timeout
[  672.617170][T11015] hsr_slave_1: entered promiscuous mode
[  672.861494][T11015] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  672.869480][T11015] Cannot create hsr debugfs directory
[  672.942128][T11037] chnl_net:caif_netlink_parms(): no params data found
[  674.011611][T11050] loop3: detected capacity change from 0 to 128
[  674.055400][T11050] VFS: Found a Xenix FS (block size = 512) on device loop3
[  674.175304][T11050] syz.3.2391: attempt to access beyond end of device
[  674.175304][T11050] loop3: rw=0, sector=8767744, nr_sectors = 1 limit=128
[  674.191564][T11050] Buffer I/O error on dev loop3, logical block 8767744, async page read
[  674.200816][T11050] syz.3.2391: attempt to access beyond end of device
[  674.200816][T11050] loop3: rw=0, sector=13269809, nr_sectors = 1 limit=128
[  674.214727][T11050] Buffer I/O error on dev loop3, logical block 13269809, async page read
[  674.223283][T11050] syz.3.2391: attempt to access beyond end of device
[  674.223283][T11050] loop3: rw=0, sector=1157, nr_sectors = 1 limit=128
[  674.236873][T11050] Buffer I/O error on dev loop3, logical block 1157, async page read
[  674.245212][T11050] syz.3.2391: attempt to access beyond end of device
[  674.245212][T11050] loop3: rw=0, sector=3211264, nr_sectors = 1 limit=128
[  674.259210][T11050] Buffer I/O error on dev loop3, logical block 3211264, async page read
[  674.268015][T11050] syz.3.2391: attempt to access beyond end of device
[  674.268015][T11050] loop3: rw=0, sector=8768635, nr_sectors = 1 limit=128
[  674.282656][T11050] Buffer I/O error on dev loop3, logical block 8768635, async page read
[  674.296662][T11050] syz.3.2391: attempt to access beyond end of device
[  674.296662][T11050] loop3: rw=0, sector=13466417, nr_sectors = 1 limit=128
[  674.311823][T11050] Buffer I/O error on dev loop3, logical block 13466417, async page read
[  674.335373][T11050] syz.3.2391: attempt to access beyond end of device
[  674.335373][T11050] loop3: rw=0, sector=209285, nr_sectors = 1 limit=128
[  674.349514][T11050] Buffer I/O error on dev loop3, logical block 209285, async page read
[  674.367096][T11050] syz.3.2391: attempt to access beyond end of device
[  674.367096][T11050] loop3: rw=0, sector=8767744, nr_sectors = 1 limit=128
[  674.367246][T11050] Buffer I/O error on dev loop3, logical block 8767744, async page read
[  674.367357][T11050] syz.3.2391: attempt to access beyond end of device
[  674.367357][T11050] loop3: rw=0, sector=13269809, nr_sectors = 1 limit=128
[  674.367490][T11050] Buffer I/O error on dev loop3, logical block 13269809, async page read
[  674.367599][T11050] syz.3.2391: attempt to access beyond end of device
[  674.367599][T11050] loop3: rw=0, sector=1157, nr_sectors = 1 limit=128
[  674.367731][T11050] Buffer I/O error on dev loop3, logical block 1157, async page read
[  674.418880][T11001] Bluetooth: hci7: command tx timeout
[  674.531910][   T29] audit: type=1800 audit(1722778156.205:18): pid=11050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2391" name="/" dev="loop3" ino=2 res=0 errno=0
[  674.668680][ T5190] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  674.678198][ T5190] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  674.689278][ T5190] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  674.776269][ T5190] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  674.781354][ T5190] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[  674.783989][ T5190] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  674.832043][T11015] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  675.351466][T11015] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  675.751666][T11015] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  675.841682][T11000] 8021q: adding VLAN 0 to HW filter on device bond0
[  676.108050][T11015] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  676.489752][ T5190] Bluetooth: hci7: command tx timeout
[  676.753045][T11050] syz.3.2391 (11050) used greatest stack depth: 3600 bytes left
[  676.863916][T11053] syz.3.2391 (11053): drop_caches: 2
[  676.889477][ T5190] Bluetooth: hci8: command tx timeout
[  677.058330][T11000] 8021q: adding VLAN 0 to HW filter on device team0
[  677.112486][T11037] bridge0: port 1(bridge_slave_0) entered blocking state
[  677.120614][T11037] bridge0: port 1(bridge_slave_0) entered disabled state
[  677.128421][T11037] bridge_slave_0: entered allmulticast mode
[  677.136707][T11037] bridge_slave_0: entered promiscuous mode
[  677.306402][T11037] bridge0: port 2(bridge_slave_1) entered blocking state
[  677.313866][T11037] bridge0: port 2(bridge_slave_1) entered disabled state
[  677.321979][T11037] bridge_slave_1: entered allmulticast mode
[  677.330455][T11037] bridge_slave_1: entered promiscuous mode
[  677.342373][T11015] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  677.477758][ T1680] bridge0: port 1(bridge_slave_0) entered blocking state
[  677.485573][ T1680] bridge0: port 1(bridge_slave_0) entered forwarding state
[  677.496468][T11015] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  677.953696][T11015] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  678.020187][T11054] chnl_net:caif_netlink_parms(): no params data found
[  678.246899][ T1680] bridge0: port 2(bridge_slave_1) entered blocking state
[  678.254690][ T1680] bridge0: port 2(bridge_slave_1) entered forwarding state
[  678.316549][T11044] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  678.363807][ T5990] sysv_free_block: trying to free block not in datazone
[  678.405412][ T5990] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  678.442881][T11037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  678.572500][ T5190] Bluetooth: hci7: command tx timeout
[  678.607960][T11044] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  678.675540][T11015] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  678.807066][T11044] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  678.964893][ T5190] Bluetooth: hci8: command tx timeout
[  678.976861][T11044] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  679.146218][T11037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  680.075438][T11037] team0: Port device team_slave_0 added
[  680.162801][T11037] team0: Port device team_slave_1 added
[  680.171098][T11044] bridge_slave_1: left allmulticast mode
[  680.177316][T11044] bridge_slave_1: left promiscuous mode
[  680.183604][T11044] bridge0: port 2(bridge_slave_1) entered disabled state
[  680.296710][T11044] bridge_slave_0: left allmulticast mode
[  680.302519][T11044] bridge_slave_0: left promiscuous mode
[  680.309270][T11044] bridge0: port 1(bridge_slave_0) entered disabled state
[  680.665838][ T5234] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  680.771150][T11044] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  680.793671][T11044] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  680.816575][T11044] bond0 (unregistering): Released all slaves
[  681.014480][ T5234] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11
[  681.027174][ T5234] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024
[  681.039040][ T5234] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  681.051892][ T5234] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  681.070572][ T5190] Bluetooth: hci8: command tx timeout
[  681.078607][T11067] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  681.276110][T11037] batman_adv: batadv0: Adding interface: batadv_slave_0
[  681.283257][T11037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  681.310428][T11037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  681.715641][T11037] batman_adv: batadv0: Adding interface: batadv_slave_1
[  681.723305][T11037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  681.751091][T11037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  682.026459][T11044] hsr_slave_0: left promiscuous mode
[  682.050252][ T5234] aiptek 4-1:17.0: Aiptek using 400 ms programming speed
[  682.060668][ T5234] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input9
[  682.218272][T11044] hsr_slave_1: left promiscuous mode
[  682.261744][T11044] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  682.270683][T11044] batman_adv: batadv0: Removing interface: batadv_slave_0
[  682.416727][T11044] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  682.425071][T11044] batman_adv: batadv0: Removing interface: batadv_slave_1
[  682.555493][   T25] usb 4-1: USB disconnect, device number 16
[  682.555568][    C0] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[  682.610226][T11044] veth1_macvtap: left promiscuous mode
[  682.616032][T11044] veth0_macvtap: left promiscuous mode
[  682.621726][T11044] veth1_vlan: left promiscuous mode
[  682.627484][T11044] veth0_vlan: left promiscuous mode
[  683.124537][ T5190] Bluetooth: hci8: command tx timeout
[  683.436755][T11044] team0 (unregistering): Port device team_slave_1 removed
[  683.460063][T11044] team0 (unregistering): Port device team_slave_0 removed
[  684.595746][T11054] bridge0: port 1(bridge_slave_0) entered blocking state
[  684.603514][T11054] bridge0: port 1(bridge_slave_0) entered disabled state
[  684.612943][T11054] bridge_slave_0: entered allmulticast mode
[  684.622625][T11054] bridge_slave_0: entered promiscuous mode
[  685.001725][T11054] bridge0: port 2(bridge_slave_1) entered blocking state
[  685.009441][T11054] bridge0: port 2(bridge_slave_1) entered disabled state
[  685.017288][T11054] bridge_slave_1: entered allmulticast mode
[  685.025497][T11054] bridge_slave_1: entered promiscuous mode
[  685.120423][T11037] hsr_slave_0: entered promiscuous mode
[  685.256761][T11037] hsr_slave_1: entered promiscuous mode
[  685.315204][T11037] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  685.323008][T11037] Cannot create hsr debugfs directory
[  685.820976][T11054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  685.983305][T11054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  686.025020][T11044] bridge_slave_1: left allmulticast mode
[  686.030909][T11044] bridge_slave_1: left promiscuous mode
[  686.039562][T11044] bridge0: port 2(bridge_slave_1) entered disabled state
[  686.105442][T11044] bridge_slave_0: left allmulticast mode
[  686.111838][T11044] bridge_slave_0: left promiscuous mode
[  686.121441][T11044] bridge0: port 1(bridge_slave_0) entered disabled state
[  687.045084][T11044] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  687.111576][T11044] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  687.142090][T11044] bond0 (unregistering): Released all slaves
[  687.159350][   T25] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  687.476852][   T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  687.488279][   T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  687.501405][   T25] usb 4-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00
[  687.512002][   T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  687.633706][   T25] usb 4-1: config 0 descriptor??
[  687.935179][T11054] team0: Port device team_slave_0 added
[  688.094494][   T25] elo 0003:04E7:0030.0008: item fetching failed at offset 2/5
[  688.124358][   T25] elo 0003:04E7:0030.0008: parse failed
[  688.130697][   T25] elo 0003:04E7:0030.0008: probe with driver elo failed with error -22
[  688.197299][T11054] team0: Port device team_slave_1 added
[  688.320742][ T4883] usb 4-1: USB disconnect, device number 17
[  688.365349][T11044] hsr_slave_0: left promiscuous mode
[  688.407457][T11044] hsr_slave_1: left promiscuous mode
[  688.431354][T11044] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  688.439452][T11044] batman_adv: batadv0: Removing interface: batadv_slave_0
[  688.459292][T11044] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  688.467177][T11044] batman_adv: batadv0: Removing interface: batadv_slave_1
[  688.494313][T11044] veth1_macvtap: left promiscuous mode
[  688.500095][T11044] veth0_macvtap: left promiscuous mode
[  688.506187][T11044] veth1_vlan: left promiscuous mode
[  688.511758][T11044] veth0_vlan: left promiscuous mode
[  689.185580][T11044] team0 (unregistering): Port device team_slave_1 removed
[  689.314269][T11044] team0 (unregistering): Port device team_slave_0 removed
[  689.695734][T11000] 8021q: adding VLAN 0 to HW filter on device batadv0
[  689.956463][T11102] tipc: Enabling of bearer <ib:syzkaller0> rejected, failed to enable media
[  690.174210][T11054] batman_adv: batadv0: Adding interface: batadv_slave_0
[  690.181378][T11054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  690.208379][T11054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  690.232776][T11015] 8021q: adding VLAN 0 to HW filter on device bond0
[  690.398155][T11054] batman_adv: batadv0: Adding interface: batadv_slave_1
[  690.405407][T11054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  690.432033][T11054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  690.559910][T11015] 8021q: adding VLAN 0 to HW filter on device team0
[  690.692823][ T5234] bridge0: port 1(bridge_slave_0) entered blocking state
[  690.700447][ T5234] bridge0: port 1(bridge_slave_0) entered forwarding state
[  690.809463][T11037] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  690.911774][ T5234] bridge0: port 2(bridge_slave_1) entered blocking state
[  690.919384][ T5234] bridge0: port 2(bridge_slave_1) entered forwarding state
[  691.052679][T11037] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  691.462522][T11037] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  691.720020][T11044] bridge_slave_1: left allmulticast mode
[  691.726345][T11044] bridge_slave_1: left promiscuous mode
[  691.732884][T11044] bridge0: port 2(bridge_slave_1) entered disabled state
[  691.805106][T11044] bridge_slave_0: left allmulticast mode
[  691.811111][T11044] bridge_slave_0: left promiscuous mode
[  691.817907][T11044] bridge0: port 1(bridge_slave_0) entered disabled state
[  692.446653][T11044] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  692.515081][T11044] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  692.596682][T11044] bond0 (unregistering): Released all slaves
[  692.767177][T11037] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  692.937092][T11054] hsr_slave_0: entered promiscuous mode
[  693.005993][T11054] hsr_slave_1: entered promiscuous mode
[  693.042578][T11054] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  693.050703][T11054] Cannot create hsr debugfs directory
[  693.507798][T11000] veth0_vlan: entered promiscuous mode
[  693.722086][T11037] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  693.798932][T11037] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  693.929420][T11037] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  694.020074][T11044] hsr_slave_0: left promiscuous mode
[  694.068246][T11044] hsr_slave_1: left promiscuous mode
[  694.100396][T11044] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  694.108347][T11044] batman_adv: batadv0: Removing interface: batadv_slave_0
[  694.146875][T11044] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  694.155443][T11044] batman_adv: batadv0: Removing interface: batadv_slave_1
[  694.235899][T11044] veth1_macvtap: left promiscuous mode
[  694.241755][T11044] veth0_macvtap: left promiscuous mode
[  694.248055][T11044] veth1_vlan: left promiscuous mode
[  694.255021][T11044] veth0_vlan: left promiscuous mode
[  695.167682][T11044] team0 (unregistering): Port device team_slave_1 removed
[  695.220750][T11044] team0 (unregistering): Port device team_slave_0 removed
[  695.534708][T11037] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  695.664969][T11000] veth1_vlan: entered promiscuous mode
[  696.983972][T11000] veth0_macvtap: entered promiscuous mode
[  697.394155][T11000] veth1_macvtap: entered promiscuous mode
[  697.483379][T11129] loop3: detected capacity change from 0 to 128
[  697.788145][T11000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  697.799378][T11000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  697.814751][T11000] batman_adv: batadv0: Interface activated: batadv_slave_0
[  697.853560][T11129] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  697.915919][T11054] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  698.009958][T11129] ext4 filesystem being mounted at /413/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  698.025609][T11000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  698.036693][T11000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  698.050182][T11000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  698.061787][T11000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  698.076858][T11000] batman_adv: batadv0: Interface activated: batadv_slave_1
[  698.096231][T11054] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  698.212861][T11054] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  698.353375][T11054] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  698.437246][T11000] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  698.446769][T11000] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  698.459420][T11000] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  698.470164][T11000] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  698.760613][T11015] 8021q: adding VLAN 0 to HW filter on device batadv0
[  698.876443][T11037] 8021q: adding VLAN 0 to HW filter on device bond0
[  699.313127][T11037] 8021q: adding VLAN 0 to HW filter on device team0
[  699.414946][ T4438] bridge_slave_1: left allmulticast mode
[  699.420849][ T4438] bridge_slave_1: left promiscuous mode
[  699.427976][ T4438] bridge0: port 2(bridge_slave_1) entered disabled state
[  699.485907][ T4438] bridge_slave_0: left allmulticast mode
[  699.491826][ T4438] bridge_slave_0: left promiscuous mode
[  699.498613][ T4438] bridge0: port 1(bridge_slave_0) entered disabled state
[  700.056404][ T4438] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  700.080073][ T4438] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  700.111533][ T4438] bond0 (unregistering): Released all slaves
[  700.209344][ T5234] bridge0: port 1(bridge_slave_0) entered blocking state
[  700.217174][ T5234] bridge0: port 1(bridge_slave_0) entered forwarding state
[  700.310625][ T5234] bridge0: port 2(bridge_slave_1) entered blocking state
[  700.318423][ T5234] bridge0: port 2(bridge_slave_1) entered forwarding state
[  700.547367][T11015] veth0_vlan: entered promiscuous mode
[  700.897482][T11015] veth1_vlan: entered promiscuous mode
[  701.302876][ T4438] hsr_slave_0: left promiscuous mode
[  701.340776][ T4438] hsr_slave_1: left promiscuous mode
[  701.357039][ T4438] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  701.367056][ T4438] batman_adv: batadv0: Removing interface: batadv_slave_0
[  701.420117][ T4438] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  701.430348][ T4438] batman_adv: batadv0: Removing interface: batadv_slave_1
[  701.488337][ T4438] veth1_macvtap: left promiscuous mode
[  701.494301][ T4438] veth0_macvtap: left promiscuous mode
[  701.500374][ T4438] veth1_vlan: left promiscuous mode
[  701.506802][ T4438] veth0_vlan: left promiscuous mode
[  701.966312][ T5990] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  702.603030][ T4438] team0 (unregistering): Port device team_slave_1 removed
[  702.641616][ T4438] team0 (unregistering): Port device team_slave_0 removed
[  703.326447][T11054] 8021q: adding VLAN 0 to HW filter on device bond0
[  703.366460][T11015] veth0_macvtap: entered promiscuous mode
[  703.502239][T11015] veth1_macvtap: entered promiscuous mode
[  703.588360][T11054] 8021q: adding VLAN 0 to HW filter on device team0
[  703.769913][ T1063] bridge0: port 1(bridge_slave_0) entered blocking state
[  703.777798][ T1063] bridge0: port 1(bridge_slave_0) entered forwarding state
[  703.811479][T11015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  703.822890][T11015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  703.838353][T11015] batman_adv: batadv0: Interface activated: batadv_slave_0
[  703.950840][ T1063] bridge0: port 2(bridge_slave_1) entered blocking state
[  703.958632][ T1063] bridge0: port 2(bridge_slave_1) entered forwarding state
[  704.112343][T11015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  704.123263][T11015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  704.133483][T11015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  704.145277][T11015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  704.160315][T11015] batman_adv: batadv0: Interface activated: batadv_slave_1
[  704.321615][T11054] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  704.448902][T11015] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  704.459764][T11015] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  704.470570][T11015] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  704.481812][T11015] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  705.390035][T11037] 8021q: adding VLAN 0 to HW filter on device batadv0
[  706.049346][T11037] veth0_vlan: entered promiscuous mode
[  706.211180][T11037] veth1_vlan: entered promiscuous mode
[  706.268744][T11054] 8021q: adding VLAN 0 to HW filter on device batadv0
[  706.610353][T11037] veth0_macvtap: entered promiscuous mode
[  706.681652][T11037] veth1_macvtap: entered promiscuous mode
[  706.888135][T11037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  706.899331][T11037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  706.909612][T11037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  706.920503][T11037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  706.935964][T11037] batman_adv: batadv0: Interface activated: batadv_slave_0
[  707.130931][T11037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  707.141925][T11037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  707.153804][T11037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  707.166148][T11037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  707.176844][T11037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  707.187782][T11037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  707.202973][T11037] batman_adv: batadv0: Interface activated: batadv_slave_1
[  707.278375][T11037] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  707.292234][T11037] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  707.303511][T11037] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  707.312741][T11037] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  708.918601][ T4531] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  708.926709][ T4531] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  709.150471][ T3021] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  709.158656][ T3021] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  709.349624][T11054] veth0_vlan: entered promiscuous mode
[  709.502233][T11054] veth1_vlan: entered promiscuous mode
[  709.959000][T11054] veth0_macvtap: entered promiscuous mode
[  710.120463][T11054] veth1_macvtap: entered promiscuous mode
[  710.385712][T11054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  710.396532][T11054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  710.406870][T11054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  710.417634][T11054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  710.427775][T11054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  710.441697][T11054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  710.457955][T11054] batman_adv: batadv0: Interface activated: batadv_slave_0
[  710.691576][ T1245] ieee802154 phy0 wpan0: encryption failed: -22
[  710.699457][ T1245] ieee802154 phy1 wpan1: encryption failed: -22
[  710.764614][T11054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  710.775576][T11054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  710.785754][T11054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  710.796530][T11054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  710.806700][T11054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  710.817627][T11054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  710.827931][T11054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  710.838704][T11054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  710.855327][T11054] batman_adv: batadv0: Interface activated: batadv_slave_1
[  711.202820][T11054] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  711.212758][T11054] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  711.222634][T11054] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  711.232057][T11054] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  712.764498][ T3021] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  712.772536][ T3021] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  713.033070][ T3021] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  713.041344][ T3021] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  714.126474][T11283] loop0: detected capacity change from 0 to 1024
[  714.192640][T11283] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  714.246551][T11283] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[  714.257361][T11283] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  714.394777][T11283] JBD2: no valid journal superblock found
[  714.400812][T11283] EXT4-fs (loop0): Could not load journal inode
[  714.738677][T11283] loop0: detected capacity change from 0 to 512
[  715.923762][ T3552] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  715.932480][ T3552] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  716.155416][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  716.163555][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  716.388795][T11297] loop3: detected capacity change from 0 to 2048
[  716.530338][T11297] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  716.603051][T11297] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  717.037875][T11305] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2386'.
[  718.994749][T11327] fuse: Bad value for 'fd'
[  719.893829][T11090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  719.902257][T11090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  720.022093][ T3021] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  720.030480][ T3021] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  721.091440][T11343] loop4: detected capacity change from 0 to 8
[  721.201272][T11343] =====================================================
[  721.209217][T11343] BUG: KMSAN: uninit-value in pick_link+0xd8c/0x1690
[  721.216770][T11343]  pick_link+0xd8c/0x1690
[  721.221300][T11343]  step_into+0x156f/0x1640
[  721.225939][T11343]  walk_component+0x54c/0x650
[  721.230723][T11343]  path_lookupat+0x27d/0x6f0
[  721.235540][T11343]  filename_lookup+0x22f/0x750
[  721.240418][T11343]  user_path_at+0x85/0x390
[  721.245060][T11343]  __se_sys_mount+0x668/0x810
[  721.249830][T11343]  __ia32_sys_mount+0xe3/0x150
[  721.254845][T11343]  ia32_sys_call+0x2530/0x40d0
[  721.259727][T11343]  __do_fast_syscall_32+0xb0/0x110
[  721.265703][T11343]  do_fast_syscall_32+0x38/0x80
[  721.270771][T11343]  do_SYSENTER_32+0x1f/0x30
[  721.275685][T11343]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  721.282329][T11343] 
[  721.286907][T11343] Uninit was created at:
[  721.296753][T11343]  __alloc_pages_noprof+0x9d6/0xe70
[  721.303835][T11343]  alloc_pages_mpol_noprof+0x299/0x990
[  721.309797][T11343]  folio_alloc_noprof+0x1db/0x310
[  721.317047][T11343]  filemap_alloc_folio_noprof+0xa6/0x440
[  721.322891][T11343]  do_read_cache_folio+0x12a/0xfd0
[  721.328789][T11343]  read_cache_page+0x63/0x1d0
[  721.333675][T11343]  page_get_link+0x73/0xab0
[  721.338735][T11343]  pick_link+0xd6c/0x1690
[  721.343426][T11343]  step_into+0x156f/0x1640
[  721.348514][T11343]  walk_component+0x54c/0x650
[  721.353629][T11343]  path_lookupat+0x27d/0x6f0
[  721.358796][T11343]  filename_lookup+0x22f/0x750
[  721.363897][T11343]  user_path_at+0x85/0x390
[  721.368662][T11343]  __se_sys_mount+0x668/0x810
[  721.373547][T11343]  __ia32_sys_mount+0xe3/0x150
[  721.378671][T11343]  ia32_sys_call+0x2530/0x40d0
[  721.383664][T11343]  __do_fast_syscall_32+0xb0/0x110
[  721.389142][T11343]  do_fast_syscall_32+0x38/0x80
[  721.399104][T11343]  do_SYSENTER_32+0x1f/0x30
[  721.403812][T11343]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  721.412071][T11343] 
[  721.415546][T11343] CPU: 0 UID: 0 PID: 11343 Comm: syz.4.2390 Not tainted 6.11.0-rc1-syzkaller-00293-gdefaf1a2113a #0
[  721.426694][T11343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  721.437082][T11343] =====================================================
[  721.444447][T11343] Disabling lock debugging due to kernel taint
[  721.450680][T11343] Kernel panic - not syncing: kmsan.panic set ...
[  721.457164][T11343] CPU: 0 UID: 0 PID: 11343 Comm: syz.4.2390 Tainted: G    B              6.11.0-rc1-syzkaller-00293-gdefaf1a2113a #0
[  721.469519][T11343] Tainted: [B]=BAD_PAGE
[  721.473716][T11343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  721.483954][T11343] Call Trace:
[  721.487302][T11343]  <TASK>
[  721.490369][T11343]  dump_stack_lvl+0x216/0x2d0
[  721.495176][T11343]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  721.501192][T11343]  dump_stack+0x1e/0x30
[  721.505472][T11343]  panic+0x4e2/0xcd0
[  721.509568][T11343]  ? kmsan_get_metadata+0x91/0x1c0
[  721.514929][T11343]  kmsan_report+0x2c7/0x2d0
[  721.519665][T11343]  ? kmsan_get_metadata+0x13e/0x1c0
[  721.525068][T11343]  ? __msan_warning+0x95/0x120
[  721.529939][T11343]  ? pick_link+0xd8c/0x1690
[  721.534546][T11343]  ? step_into+0x156f/0x1640
[  721.539241][T11343]  ? walk_component+0x54c/0x650
[  721.544196][T11343]  ? path_lookupat+0x27d/0x6f0
[  721.549087][T11343]  ? filename_lookup+0x22f/0x750
[  721.554175][T11343]  ? user_path_at+0x85/0x390
[  721.558909][T11343]  ? __se_sys_mount+0x668/0x810
[  721.563861][T11343]  ? __ia32_sys_mount+0xe3/0x150
[  721.568893][T11343]  ? ia32_sys_call+0x2530/0x40d0
[  721.573951][T11343]  ? __do_fast_syscall_32+0xb0/0x110
[  721.579379][T11343]  ? do_fast_syscall_32+0x38/0x80
[  721.584496][T11343]  ? do_SYSENTER_32+0x1f/0x30
[  721.589265][T11343]  ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  721.595916][T11343]  ? do_read_cache_folio+0xc00/0xfd0
[  721.601405][T11343]  ? __pfx_squashfs_symlink_read_folio+0x10/0x10
[  721.607877][T11343]  ? kmsan_get_metadata+0x13e/0x1c0
[  721.613194][T11343]  ? kmsan_get_shadow_origin_ptr+0x38/0xb0
[  721.619120][T11343]  ? kmsan_get_metadata+0x13e/0x1c0
[  721.624427][T11343]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  721.630353][T11343]  ? page_get_link+0x4dd/0xab0
[  721.635219][T11343]  ? kmsan_get_metadata+0x13e/0x1c0
[  721.640524][T11343]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  721.646448][T11343]  __msan_warning+0x95/0x120
[  721.651133][T11343]  pick_link+0xd8c/0x1690
[  721.655583][T11343]  step_into+0x156f/0x1640
[  721.660109][T11343]  ? kmsan_get_metadata+0x13e/0x1c0
[  721.665420][T11343]  walk_component+0x54c/0x650
[  721.670205][T11343]  ? kmsan_get_metadata+0x13e/0x1c0
[  721.675516][T11343]  path_lookupat+0x27d/0x6f0
[  721.680229][T11343]  filename_lookup+0x22f/0x750
[  721.685111][T11343]  ? __pfx_page_put_link+0x10/0x10
[  721.690321][T11343]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  721.696254][T11343]  user_path_at+0x85/0x390
[  721.700781][T11343]  ? __se_sys_mount+0x644/0x810
[  721.705792][T11343]  ? __ia32_sys_mount+0xe3/0x150
[  721.710828][T11343]  __se_sys_mount+0x668/0x810
[  721.715597][T11343]  ? kmsan_get_metadata+0x13e/0x1c0
[  721.720920][T11343]  __ia32_sys_mount+0xe3/0x150
[  721.725782][T11343]  ia32_sys_call+0x2530/0x40d0
[  721.730670][T11343]  __do_fast_syscall_32+0xb0/0x110
[  721.735879][T11343]  ? irqentry_exit+0x16/0x60
[  721.740551][T11343]  do_fast_syscall_32+0x38/0x80
[  721.745585][T11343]  do_SYSENTER_32+0x1f/0x30
[  721.750179][T11343]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  721.756629][T11343] RIP: 0023:0xf7fd2579
[  721.760772][T11343] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  721.780488][T11343] RSP: 002b:00000000f578657c EFLAGS: 00000206 ORIG_RAX: 0000000000000015
[  721.788991][T11343] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000020001a00
[  721.797033][T11343] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  721.805102][T11343] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  721.813194][T11343] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  721.821235][T11343] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  721.829289][T11343]  </TASK>
[  721.832618][T11343] Kernel Offset: disabled
[  721.837003][T11343] Rebooting in 86400 seconds..