last executing test programs:

12m5.484212624s ago: executing program 2 (id=446):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x7a}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000bc0)='GPL\x00', 0x1, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

12m4.419819986s ago: executing program 2 (id=447):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r1, 0x1, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0x0, @loopback, 0x10000bff}, @ib={0x1b, 0xd9, 0x100fff, {"4a50abf0c8ed50f638facd57de629163"}, 0x8000000000000001, 0x2, 0x3}}}, 0x118)

12m4.114056722s ago: executing program 2 (id=449):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
socket$nl_crypto(0x10, 0x3, 0x15)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$apparmor_current(r1, &(0x7f0000000040)=@profile={'permprofile ', '&\x00\x00\x02'}, 0x10)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
syz_open_dev$media(0x0, 0x34, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0)
sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff0100"/78], 0x64}}, 0x4800)
ioctl$MEDIA_REQUEST_IOC_QUEUE(0xffffffffffffffff, 0x7c80, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_LEAVE_IBSS(r4, 0x0, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x89}]}}}, {0xfffffffffffffcfd, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa4}, 0x1, 0x0, 0x0, 0xc000}, 0x0)

12m2.581769808s ago: executing program 2 (id=452):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680))
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
write$tcp_mem(0xffffffffffffffff, 0x0, 0x0)
r1 = eventfd2(0x1, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000})
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, 0x0)

11m58.961796927s ago: executing program 2 (id=459):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x4885, 0x100, 0x3, 0x1d}, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000600)=<r3=>0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000040)={&(0x7f0000002000)={[{0x0, 0x0, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r0, 0x0, 0x0, 0x0, 0x40002202, 0x1, {0x1}})
io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0)

11m55.96786285s ago: executing program 2 (id=464):
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x11, 0xa, 0x0)
getsockname$packet(r2, 0x0, &(0x7f00000001c0))
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000200)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x40}}, @in6={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @remote}, 0x4}, @in6={0xa, 0x4e22, 0x8, @private0}, @in={0x2, 0x4e22, @empty}, @in6={0xa, 0x4e23, 0x7, @loopback, 0x7}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e22, 0x6bb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}, @in={0x2, 0x4e20, @loopback}], 0xc0)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2)
read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102392, 0x18ff8)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc))
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), r4)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, 0x0, 0x0)
r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$FS_IOC_SETFLAGS(r5, 0x40186f40, &(0x7f0000000440)=0x20000)
ioctl$FS_IOC_SETFLAGS(r0, 0x40046f41, &(0x7f0000000440)=0x10)

11m41.165670654s ago: executing program 32 (id=464):
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x11, 0xa, 0x0)
getsockname$packet(r2, 0x0, &(0x7f00000001c0))
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000200)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x40}}, @in6={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @remote}, 0x4}, @in6={0xa, 0x4e22, 0x8, @private0}, @in={0x2, 0x4e22, @empty}, @in6={0xa, 0x4e23, 0x7, @loopback, 0x7}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e22, 0x6bb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}, @in={0x2, 0x4e20, @loopback}], 0xc0)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2)
read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102392, 0x18ff8)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc))
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), r4)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, 0x0, 0x0)
r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$FS_IOC_SETFLAGS(r5, 0x40186f40, &(0x7f0000000440)=0x20000)
ioctl$FS_IOC_SETFLAGS(r0, 0x40046f41, &(0x7f0000000440)=0x10)

5m40.73996451s ago: executing program 3 (id=1308):
listen(0xffffffffffffffff, 0x80000001)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0)
write$sndseq(r0, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x5}, {}, @addr={0x3}}, {0x0, 0x0, 0x3, 0x0, @time={0xffffffff}, {0x0, 0x8}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0x70)

5m40.524088547s ago: executing program 3 (id=1309):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x20, 0x5e}, {0x0, 0x800, 0x0, 0x7, 0x0, 0x0, 0x3, 0x7}, {0x0, 0x0, 0x3}}, [@tmpl={0x184, 0x5, [{{@in=@remote, 0x0, 0x6c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x8}, 0x0, 0x0, 0x0, 0x56, 0x0, 0xfffffffd, 0x1}, {{@in6=@private2, 0x0, 0x32}, 0x0, @in=@broadcast, 0x3502}, {{@in6=@mcast1, 0x0, 0x3c}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x44}, 0x0, 0x1, 0x3}, {{@in6=@mcast2, 0x4d3, 0x3c}, 0x2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in=@empty, 0x0, 0x32}, 0x2, @in6=@private0, 0xffffffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x32}, 0xa, @in6=@mcast2, 0x0, 0x4}]}]}, 0x23c}}, 0x0)

5m40.369365842s ago: executing program 3 (id=1310):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
ptrace(0x10, r0)
ptrace$peeksig(0x4209, r0, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f00000001c0)=[{}])
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000300)='smb3\x00', 0x10, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ptrace$getsig(0x4202, r0, 0x9, &(0x7f0000000140))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f00000001c0)=0x7)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0xfffffffc, 0x0, 'syz0\x00'}, 0x6, 0x20000000, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0})
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xa, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x4)
write(r5, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff00000007", 0x1d)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

5m39.165055862s ago: executing program 3 (id=1315):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0)
write$bt_hci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0xb)

5m38.551946349s ago: executing program 3 (id=1319):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040))
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
r1 = dup2(r0, r0)
creat(0x0, 0x0)
read$FUSE(r1, &(0x7f0000000bc0)={0x2020}, 0x2020)
pselect6(0x40, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x1, 0x10000000}, 0x0, &(0x7f0000000240)={0x1f, 0x1000002, 0x0, 0x20000000000000, 0x0, 0xffffffffffffffff, 0x0, 0x400}, 0x0, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1)

5m37.38372329s ago: executing program 3 (id=1322):
syz_mount_image$bcachefs(&(0x7f0000000000), &(0x7f00000000c0)='./file2\x00', 0x8000, &(0x7f0000000340)=ANY=[], 0x1, 0x6739, &(0x7f00000067c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x42, 0x18)
fallocate(r0, 0x0, 0x0, 0x8ffff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x8000, 0x0)
ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000240)={0x66, 0x293a50000000000, 0x0, 0x7})

5m21.901985132s ago: executing program 33 (id=1322):
syz_mount_image$bcachefs(&(0x7f0000000000), &(0x7f00000000c0)='./file2\x00', 0x8000, &(0x7f0000000340)=ANY=[], 0x1, 0x6739, &(0x7f00000067c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x42, 0x18)
fallocate(r0, 0x0, 0x0, 0x8ffff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x8000, 0x0)
ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000240)={0x66, 0x293a50000000000, 0x0, 0x7})

4m3.282893128s ago: executing program 4 (id=1570):
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/mnt\x00')
ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfa11, 0xffffffff}, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
set_mempolicy(0x3, &(0x7f00000000c0)=0x3, 0x5)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)

3m58.83216642s ago: executing program 5 (id=1579):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112})
socket$xdp(0x2c, 0x3, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000001280), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005000100040020000800"], 0x4c}}, 0x20000000)
r4 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0)
sendfile(r3, r5, 0x0, 0x104)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket(0x5, 0x800, 0x100000)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x390000, 0x1000001000, 0x4d}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0x9)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
sendmsg$nl_route(r7, 0x0, 0x4054)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000480)={0x8, 0x3, 0x0, 0x10000, 0x1a, "4415264a88b82c521113fb235902af2556c6b6"})

3m58.817128342s ago: executing program 4 (id=1581):
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$tty20(0xc, 0x4, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000500), 0x42, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x53, 0x3, 0x8, 0x2, 0xb, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0)

3m57.803810308s ago: executing program 4 (id=1583):
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
shutdown(r1, 0x1)
splice(r1, 0x0, r0, 0x0, 0x2, 0x0)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000a80))
mount$tmpfs(0x0, 0x0, &(0x7f0000000580), 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)
fsopen(&(0x7f0000000040)='afs\x00', 0x0)
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, 0x0, 0x0)
keyctl$session_to_parent(0x12)
keyctl$session_to_parent(0x12)

3m57.184763526s ago: executing program 5 (id=1584):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x161141)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0xd, @val=@perf_event={0x9}}, 0x18)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
r3 = eventfd(0xc)
ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3)
ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3})
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000006c0)={0x0, 0x1, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000840)={0x2, 0x0, [{0xf000, 0x86, &(0x7f0000000740)=""/134}, {0x2, 0x7, &(0x7f0000000640)=""/7}]})
ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3})
ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000680)=0x41)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x207c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x36, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8a}, 0x94)

3m56.837063576s ago: executing program 4 (id=1586):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2049c1, 0x40)
mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x8)
chdir(&(0x7f00000003c0)='./bus\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x2080, 0x0)
io_setup(0x4, &(0x7f0000010440)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f00000019c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0xfdfe, 0x100000000000000}])

3m54.828963187s ago: executing program 4 (id=1593):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0xc8641, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
socket$kcm(0x2, 0xa, 0x2)
r1 = socket(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@broadcast, @dev, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @local, @empty, @empty, @local}}}}, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
get_mempolicy(0xffffffffffffffff, 0x0, 0x2000400000043ff, &(0x7f0000ff9000/0x2000)=nil, 0x2)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r5, 0x0, 0x0)
r6 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x200}, 0xc)
r7 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f922240685", 0x14}], 0x1}, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
sendmsg$nl_route_sched(r1, 0x0, 0x0)

3m54.65174846s ago: executing program 5 (id=1594):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000002640)=0x1, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000012000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400350076657468315f746f5f7665616d000000"], 0x34}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0xfdf8)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000003c0)=[@mss={0x2, 0x8}, @window={0x3, 0xe, 0x7ff}, @timestamp, @sack_perm, @window={0x3, 0x8000, 0xfffc}, @sack_perm, @sack_perm, @window={0x3, 0xfff, 0x4}, @window={0x3, 0x5}], 0x9)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0xc7)
sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'tunl0\x00'})
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={&(0x7f0000000000)="b7dc9e5f10373364cb7a15d27c31e5d75ec803f8bc42a7b9b320bdb9a0acc1b6a6095ff8", &(0x7f0000000140)="92774f4f42745c6006bf4b4101b4118c0e782762ca1e412581a845bba0d4e3486a49d8852a25c8890b47647957a5c9057c46408889425d513e37f03e9b1ab88397fd5293f3b566ba230b15d81cb95bb883a83864a7ac81fec185d90d9e14a5149584b095ec3c1bcba9232bf19749907c27c262e090e32bdc94158526dbf413b4c5d3bce6611ac3a9ba99c9f4fa01796cd8bb6555217d5233f869bf78738d74822b"}}, &(0x7f0000000100)=<r5=>0x0)
timer_settime(r5, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)

3m53.979478881s ago: executing program 5 (id=1597):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x20000804)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xfff3, 0x10}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x10}}]}}]}, 0x4c}}, 0x20004804)

3m52.682547461s ago: executing program 4 (id=1600):
openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x404000, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x14, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0xe}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19})
bind$alg(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[], 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_io_uring_setup(0x2cea, &(0x7f0000000180)={0x0, 0x7a71, 0x40, 0x0, 0x385}, &(0x7f0000000080), &(0x7f0000000240))
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040)=0x2, 0xffffffb4)
syz_emit_ethernet(0x0, 0x0, 0x0)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
prctl$PR_SET_KEEPCAPS(0x59616d61, 0x1ffffffffffffff)
madvise(&(0x7f000018a000/0x2000)=nil, 0x2000, 0x12)
close(0xffffffffffffffff)
bpf$MAP_CREATE(0x0, 0x0, 0x1d)

3m51.034350977s ago: executing program 5 (id=1602):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0)
landlock_restrict_self(r0, 0x6)
open(&(0x7f0000000100)='.\x00', 0x591002, 0x50f)

3m49.667793873s ago: executing program 5 (id=1608):
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0xfffffffffffffffd, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0)
ioctl$SNDCTL_DSP_GETBLKSIZE(r1, 0xc0045004, &(0x7f0000000240))
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x1000, 0x3}, &(0x7f0000000100)=<r5=>0x0, &(0x7f0000000000)=<r6=>0x0)
r7 = landlock_create_ruleset(&(0x7f00000000c0)={0x501b, 0x2, 0x1}, 0x18, 0x0)
landlock_restrict_self(r7, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80})
io_uring_enter(r4, 0x3516, 0xf3f, 0x0, 0x0, 0xfffffdcf)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000040)={0x1})

3m36.266039266s ago: executing program 34 (id=1600):
openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x404000, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x14, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0xe}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19})
bind$alg(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[], 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_io_uring_setup(0x2cea, &(0x7f0000000180)={0x0, 0x7a71, 0x40, 0x0, 0x385}, &(0x7f0000000080), &(0x7f0000000240))
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040)=0x2, 0xffffffb4)
syz_emit_ethernet(0x0, 0x0, 0x0)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
prctl$PR_SET_KEEPCAPS(0x59616d61, 0x1ffffffffffffff)
madvise(&(0x7f000018a000/0x2000)=nil, 0x2000, 0x12)
close(0xffffffffffffffff)
bpf$MAP_CREATE(0x0, 0x0, 0x1d)

3m35.159060059s ago: executing program 35 (id=1608):
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0xfffffffffffffffd, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0)
ioctl$SNDCTL_DSP_GETBLKSIZE(r1, 0xc0045004, &(0x7f0000000240))
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x1000, 0x3}, &(0x7f0000000100)=<r5=>0x0, &(0x7f0000000000)=<r6=>0x0)
r7 = landlock_create_ruleset(&(0x7f00000000c0)={0x501b, 0x2, 0x1}, 0x18, 0x0)
landlock_restrict_self(r7, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80})
io_uring_enter(r4, 0x3516, 0xf3f, 0x0, 0x0, 0xfffffdcf)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000040)={0x1})

1m48.241605577s ago: executing program 1 (id=1875):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
ptrace(0x10, r0)
ptrace$peeksig(0x4209, r0, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f00000001c0)=[{}])
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000300)='smb3\x00', 0x10, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ptrace$getsig(0x4202, r0, 0x9, &(0x7f0000000140))
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f00000001c0)=0x7)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0xfffffffc, 0x0, 'syz0\x00'}, 0x6, 0x20000000, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0})
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xa, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x4)
write(r5, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff00000007", 0x1d)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

1m45.739751774s ago: executing program 1 (id=1882):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0)
landlock_restrict_self(r0, 0x6)
open(&(0x7f0000000100)='.\x00', 0x591002, 0x50f)

1m45.603009968s ago: executing program 1 (id=1886):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee0, 0x810, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r4 = eventfd2(0x8, 0x0)
write$eventfd(r4, &(0x7f0000000140)=0xfffffffffffffffc, 0x8)

1m42.565945676s ago: executing program 1 (id=1891):
socket(0x10, 0x803, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000340)=0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x4, 0x6, 0x4, 0x0, 0xffffffffffffffff, 0x3}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x15, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3b, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$BPF_GET_MAP_INFO(0x3, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, 0x0, 0x4008840)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(r5, 0x0, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4)
sendto$unix(0xffffffffffffffff, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0)
recvfrom(0xffffffffffffffff, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x1, 0x0, 0xffffffffffffffb5)
sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)="eb", 0x1}, 0x1, 0x0, 0x0, 0x8008040}, 0x30008080)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000002a40)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40004}], 0x1, 0x0)
ioprio_set$uid(0x3, 0x0, 0x0)

1m41.506136829s ago: executing program 1 (id=1895):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0)
mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0)
mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$9p_unix(&(0x7f0000000440)='./file0\x00', &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x121b008, 0x0)
mount$bind(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xa06006, 0x0)

1m41.136610613s ago: executing program 1 (id=1898):
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00')
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000005c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000001040)={0x3, {{0x2, 0x0, @multicast1}}}, 0x88)
getsockopt$inet_buf(r3, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf)
getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000080), &(0x7f00000001c0)=0x8)
ioctl$TCFLSH(r5, 0x400455c8, 0x4)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0x32)
socket$inet_udplite(0x2, 0x2, 0x88)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000000020"], &(0x7f0000000300)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
syz_open_procfs(0x0, 0x0)
connect$pppl2tp(r6, 0x0, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0x2eb4, 0x2000007ff)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x4c, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xd8}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x20000080)

1m26.68608585s ago: executing program 36 (id=1898):
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00')
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000005c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000001040)={0x3, {{0x2, 0x0, @multicast1}}}, 0x88)
getsockopt$inet_buf(r3, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf)
getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000080), &(0x7f00000001c0)=0x8)
ioctl$TCFLSH(r5, 0x400455c8, 0x4)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0x32)
socket$inet_udplite(0x2, 0x2, 0x88)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000000020"], &(0x7f0000000300)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
syz_open_procfs(0x0, 0x0)
connect$pppl2tp(r6, 0x0, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0x2eb4, 0x2000007ff)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x4c, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xd8}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x20000080)

48.169556983s ago: executing program 7 (id=1991):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
ptrace(0x10, r0)
ptrace$peeksig(0x4209, r0, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f00000001c0)=[{}])
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000300)='smb3\x00', 0x10, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f00000001c0)=0x7)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0xfffffffc, 0x0, 'syz0\x00'}, 0x6, 0x20000000, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0})
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xa, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x4)
write(r5, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff00000007", 0x1d)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

47.099948076s ago: executing program 7 (id=1995):
ptrace(0x10, 0x0)
r0 = socket(0x10, 0x2, 0x0)
ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f00000000c0))
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000300)={0x0, <r1=>0x0})
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000340)=r1)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x20002, 0x0)
semget$private(0x0, 0x1, 0x398)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r4 = dup(r3)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2], 0x40}}, 0x0)
ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000140))
r5 = io_uring_setup(0x3403, &(0x7f0000000240)={0x0, 0xfbe4, 0x400, 0x1, 0x3b2, 0x0, r4})
r6 = syz_io_uring_setup(0x8d5, &(0x7f0000000380)={0x0, 0xf478, 0x100, 0x3, 0x1c7, 0x0, r5}, &(0x7f0000000400)=<r7=>0x0, &(0x7f00000001c0))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r8, &(0x7f00000001c0)={0xa, 0x4e21, 0x1, @remote, 0x4}, 0x1c)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000811}, 0x4040)
sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000800)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000440)={0x344, 0x14, 0x104, 0x70bd2b, 0x25dfdbff, {0x27, 0x1}, [@INET_DIAG_REQ_BYTECODE={0xf, 0x1, "077d69892458a03049e6c8"}, @INET_DIAG_REQ_BYTECODE={0xe8, 0x1, "c41675e885d50147c13a4ec5d900f230d1685b2a946d76514447fd3194c6c9dc24df7d0bac01d5bc085e13c762c28badabb364c6b818c6d50d4e169a6b7358f14dd73218620620e2067f7295a7f68f9ad022b9a410526a10f162c9aac7c39edcf95421477c48d04eb7bb1c8f96e25c251c4c35694c20ccc1bbfc3532af3bb146459f06d82cb17b6f1d2e6e78fd3b85f44f4591cffe9f72513bb2882ae89011358e720b5a4f844b027e6ae0fc33653734d7c6265fb7ce36fc179bbd2bdceaa31ea4028dbc670343ebebca33b6e020bd323260e46ab0dc8ed7c8e609ea93a7118cd5105c3e"}, @INET_DIAG_REQ_BYTECODE={0x101, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x52, 0x1, "259c5653d51dbd3d0c69a9080f5cdf676025416c29892d904a078250b9e29856838775fd1bac4b945e28c19e91d00b484af35e446c441bd6f002654803239a57474dbdb2cdaa9a7a8c6fc1c17572"}, @INET_DIAG_REQ_BYTECODE={0xde, 0x1, "372cc779adaa0c01489c60fefba10f8211394e09d9e59bde5cb3484bd759353e2d1d81da23255adc5ecde6d111e1708937a2d8cea78c2987c18edd010895e0e4b6112959ce2598eb5666f5f2e89cde5b3cb1916710da9d8b5a59d80d24a7942ad8370ae628c4508f8356b2e3f9c41b3ffe6cdb6887a751689da5146bb46c28dbc4f4297ba55c7a68038a2eef0f53d4e3eae270ddeed4a6eff43d47098ab9fbc0be9165131a037d7c49b6ab3826f5ed5fbbfdfcca369ef98491a696a25f5a2ac95f2f6c41890ee814e90c90449f95fd07928940fbc6471e1d0ee4"}]}, 0x344}, 0x1, 0x0, 0x0, 0x40000004}, 0x10)
r9 = io_uring_setup(0xbbc, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x0, 0x15a})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0)
io_uring_enter(r9, 0x100000, 0x2, 0xf, &(0x7f0000000000), 0x8)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
recvmsg(r11, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0)
io_uring_enter(r6, 0x47ba, 0x3e80, 0x0, 0x0, 0x0)

42.226443104s ago: executing program 7 (id=2000):
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0)
landlock_restrict_self(r0, 0x6)
open(&(0x7f0000000100)='.\x00', 0x591002, 0x50f)

41.859264875s ago: executing program 7 (id=2003):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r4=>0x0})
bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4, 0x0, {0x1, 0xff, 0x4}}, 0x18)
sendmsg$nl_route_sched(r0, 0x0, 0x20000050)

40.92929316s ago: executing program 7 (id=2008):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d80000001c0081044e81f782db44b9040a1d080214000000020003a118000c000300000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5d", 0xc1}], 0x1, 0x0, 0x0, 0x7400}, 0x20000080)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0)

40.081479176s ago: executing program 7 (id=2011):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee0, 0x810, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r5 = eventfd2(0x8, 0x0)
write$eventfd(r5, &(0x7f0000000140)=0xfffffffffffffffc, 0x8)
read(r5, &(0x7f0000000180)=""/78, 0xfffffeab)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = syz_open_procfs(r2, &(0x7f0000000180)='smaps_rollup\x00')
setgroups(0x0, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x60, 0x1412, 0x10, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40012}, 0xc0)
lseek(r6, 0x10000000005, 0x0)
openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)

25.19950664s ago: executing program 37 (id=2011):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee0, 0x810, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r5 = eventfd2(0x8, 0x0)
write$eventfd(r5, &(0x7f0000000140)=0xfffffffffffffffc, 0x8)
read(r5, &(0x7f0000000180)=""/78, 0xfffffeab)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = syz_open_procfs(r2, &(0x7f0000000180)='smaps_rollup\x00')
setgroups(0x0, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x60, 0x1412, 0x10, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40012}, 0xc0)
lseek(r6, 0x10000000005, 0x0)
openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)

8.501605647s ago: executing program 0 (id=2069):
openat$rfkill(0xffffffffffffff9c, 0x0, 0x80040, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94)
ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0)
fspick(0xffffffffffffff9c, 0x0, 0xf)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x0)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdir(0x0, 0x0)
sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400120}, 0xc, &(0x7f00000000c0)={&(0x7f0000000880)={0x14, 0x0, 0x8, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYBLOB="020200090d00000000000000000000000200081c08002000fd00000000000000020001000000000000000500000000a0030006000000000002000000ac1414ff0000000000000000030005000000000002000000000000000000000000000000010014009b71000000"], 0x68}, 0x1, 0x7}, 0x0)

7.391870302s ago: executing program 0 (id=2070):
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040)=0x3)
r3 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000440), 0x0, 0x0)
close(r3)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0)

7.222881932s ago: executing program 0 (id=2071):
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010"], 0x0)
syz_open_dev$midi(&(0x7f0000000040), 0x3, 0xa041)
syz_io_uring_setup(0x46af, &(0x7f0000000100)={0x0, 0x8538, 0x800, 0x3, 0x67}, &(0x7f0000000080), &(0x7f0000000180))
openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
truncate(0x0, 0x100081c)
sendfile(r0, r0, 0x0, 0xe0000000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./file1\x00', 0x143042, 0x2a0)
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
lseek(r1, 0x2, 0x4)

5.891267352s ago: executing program 0 (id=2073):
creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x4800)
write$P9_RVERSION(r1, &(0x7f0000000600)=ANY=[@ANYRES8=r1], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x40000000, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, &(0x7f00000000c0)=0x32)
ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, &(0x7f00000002c0)=0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="44000000190001090000000000000000021800000002fd060000000008000100ac14140008000500ac1e0101100016800c0000150001a6f30000000000001b000000b58d532bfffba31ccf259e3874300000"], 0x44}}, 0x844)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000d80)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000084010000000000"], 0x0, 0x26, 0x0, 0x1}, 0x28)
bpf$BPF_BTF_GET_NEXT_ID(0x17, 0xfffffffffffffffe, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
bind$isdn(0xffffffffffffffff, &(0x7f0000000100)={0x22, 0x1, 0xec, 0x9, 0xb3}, 0x6)
sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x4008800)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xe)
ioctl$TCSETSW2(r4, 0x5408, &(0x7f0000000240)={0x300, 0xfffffffd, 0x9, 0x9, 0x0, "2920b28037aa82dc1ecf00000000000000fb88", 0x5, 0xfffffffc})
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000002380)={{0x0, 0x1}, 0x1, 0x1ff, 0x2, {0x4, 0x1}, 0x3, 0x800})
ioctl$TIOCGPGRP(r4, 0x5437, 0x0)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138)
mount$9p_fd(0x0, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',cachetag=rfdno,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB="2c483e8de735779efa31790ab1bcfc95c76b85f9581be6e17b755b1b46e2230c1d1f018ad95323c5f3b589d0110ed6ee53646d078ebaa58b16c1952f8f8b8d4f367e07cbf983c5f4de99b00ce43a8be4a66bf0dc70eddd8ab28048da377050afcde47a8d805f8dea5a0ff9d2234987a2cdd322d931685086f52a207aa6f513de7a6aa92b942c8f8c521c854c434a3c2e310e"])

4.125649652s ago: executing program 6 (id=2074):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x800)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0)
ptrace$cont(0x9, r0, 0x331b8f99, 0xfffffffffffffffb)
r4 = fanotify_init(0xf00, 0x1000)
fanotify_mark(r4, 0x105, 0x5000003a, r3, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2)
readv(r4, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
timer_create(0x5, &(0x7f0000000200)={0x0, 0x80005, 0x0, @tid=r0}, &(0x7f0000000300))
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
vmsplice(r8, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0)
write$binfmt_script(r8, &(0x7f0000000400)={'#! ', './file0'}, 0xb)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xffff, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r6, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c00)=ANY=[@ANYRES16=r7, @ANYBLOB="01002cbd7000fedbdf0c01"], 0x28}, 0x1, 0x0, 0x0, 0x24004080}, 0x4000000)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000280)={'gretap0\x00', 0x0})

3.736874324s ago: executing program 0 (id=2075):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x701203, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x4000100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {}, {0x6, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

2.961423191s ago: executing program 6 (id=2076):
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x2000008, {0x0, 0x324077a77c0d1c8c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)

2.707750323s ago: executing program 6 (id=2077):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6d4e9a1d78ad62ceef18843080078bb3fb7dbfcebd1f85fc171f748a7b5373a3126", 0x0, 0xffffffff, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0}, 0x50)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000040)={0x1, 0x9})
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_io_uring_setup(0x10d, &(0x7f00000006c0)={0x0, 0x1885, 0x80, 0x2}, &(0x7f0000000340)=<r3=>0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x0)
fchdir(r5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80)
r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r7, 0xffffffffffffffff, 0x0)
rmdir(&(0x7f0000000640)='./file0\x00')

1.676721126s ago: executing program 6 (id=2078):
openat$rfkill(0xffffffffffffff9c, 0x0, 0x80040, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94)
ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0)
fspick(0xffffffffffffff9c, 0x0, 0xf)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x0)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdir(0x0, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYBLOB="020200090d00000000000000000000000200081c08002000fd00000000000000020001000000000000000500000000a0030006000000000002000000ac1414ff0000000000000000030005000000000002000000000000000000000000000000010014009b71000000"], 0x68}, 0x1, 0x7}, 0x0)

1.451324644s ago: executing program 0 (id=2079):
socket$l2tp(0x2, 0x2, 0x73)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$loop(&(0x7f0000000040), 0x7, 0x20080)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xff}, 0x18)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil)
syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x8000)
munlockall()
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
dup(r2)
r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r4, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8)
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r1, 0x0, 0x0, 0x200000000})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x2000000)
syz_usb_disconnect(0xffffffffffffffff)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000180)=ANY=[@ANYRES32=0x0], 0x0)

458.557617ms ago: executing program 6 (id=2080):
r0 = dup(0xffffffffffffffff)
write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x200c008, &(0x7f0000000300)='usrquota')
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000000306010100000000008a0000000000000500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={<r2=>0x0, 0x7, 0x4b1abdb9639668d3}, &(0x7f0000000240)=0xc)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000002c0)={r2, 0x1f, "8c516ba80e559b4fff13df1dae27559c805d63354d7ffb115c54d27e7d4dc9"}, &(0x7f0000000340)=0x27)
r3 = socket$netlink(0x10, 0x3, 0x9)
bind$netlink(r3, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x20}, 0xc)
sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000029888e59f2257924", @ANYRES16=0x0, @ANYBLOB="00012abd7000fcdbdf2517000000"], 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x4000)
chdir(&(0x7f0000000280)='./file1\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
r4 = epoll_create1(0x0)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f00000000c0)={0xe000001d})
read$char_usb(r5, &(0x7f0000000100)=""/169, 0xa9)
epoll_pwait(r4, &(0x7f0000000200)=[{}], 0x1, 0x0, 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x1812c1, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(0xffffffffffffffff, 0x2ded, 0xef92, 0x0, 0x0, 0x0)
clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0)

0s ago: executing program 6 (id=2081):
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010"], 0x0)
syz_open_dev$midi(&(0x7f0000000040), 0x3, 0xa041)
syz_io_uring_setup(0x46af, &(0x7f0000000100)={0x0, 0x8538, 0x800, 0x3, 0x67}, &(0x7f0000000080), &(0x7f0000000180))
openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
truncate(0x0, 0x100081c)
sendfile(r0, r0, 0x0, 0xe0000000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./file1\x00', 0x143042, 0x2a0)
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
lseek(r1, 0x2, 0x4)

kernel console output (not intermixed with test programs):

79][T11219]  ? __pfx_bch2_fs_journal_start+0x10/0x10
[  655.912918][T11219]  ? __pfx_bch2_journal_log_msg+0x10/0x10
[  655.912946][T11219]  ? srso_alias_return_thunk+0x5/0xfbef5
[  655.912973][T11219]  ? bch2_fs_resize_on_mount+0x404/0x4d0
[  655.913019][T11219]  bch2_fs_recovery+0x2298/0x3a50
[  655.913071][T11219]  ? __pfx_bch2_fs_recovery+0x10/0x10
[  655.913113][T11219]  ? srso_alias_return_thunk+0x5/0xfbef5
[  655.913140][T11219]  ? __lock_acquire+0xab9/0xd20
[  655.913190][T11219]  ? srso_alias_return_thunk+0x5/0xfbef5
[  655.913217][T11219]  ? __mutex_trylock_common+0x153/0x260
[  655.913248][T11219]  ? __pfx___mutex_trylock_common+0x10/0x10
[  655.913279][T11219]  ? srso_alias_return_thunk+0x5/0xfbef5
[  655.913307][T11219]  ? rcu_is_watching+0x15/0xb0
[  655.913337][T11219]  ? srso_alias_return_thunk+0x5/0xfbef5
[  655.913364][T11219]  ? __lock_acquire+0xab9/0xd20
[  655.913425][T11219]  ? srso_alias_return_thunk+0x5/0xfbef5
[  655.913456][T11219]  ? bch2_fs_start+0xa0f/0xda0
[  655.913493][T11219]  ? up_write+0x1c4/0x420
[  655.913518][T11219]  ? bch2_fs_start+0x5e7/0xda0
[  655.913554][T11219]  bch2_fs_start+0xaaf/0xda0
[  655.913588][T11219]  ? bch2_fs_start+0x5e7/0xda0
[  655.913627][T11219]  ? __pfx_bch2_fs_start+0x10/0x10
[  655.913685][T11219]  ? srso_alias_return_thunk+0x5/0xfbef5
[  655.913712][T11219]  ? sget+0x267/0x620
[  655.913750][T11219]  bch2_fs_get_tree+0xb39/0x1520
[  655.913813][T11219]  ? __pfx_bch2_fs_get_tree+0x10/0x10
[  655.913866][T11219]  ? vfs_parse_fs_string+0x101/0x170
[  655.913902][T11219]  ? srso_alias_return_thunk+0x5/0xfbef5
[  655.913937][T11219]  ? __pfx_vfs_parse_comma_sep+0x10/0x10
[  655.913980][T11219]  ? srso_alias_return_thunk+0x5/0xfbef5
[  655.914012][T11219]  ? srso_alias_return_thunk+0x5/0xfbef5
[  655.914045][T11219]  ? srso_alias_return_thunk+0x5/0xfbef5
[  655.914078][T11219]  vfs_get_tree+0x92/0x2b0
[  655.914115][T11219]  do_new_mount+0x2a2/0x9e0
[  655.914155][T11219]  ? srso_alias_return_thunk+0x5/0xfbef5
[  655.914189][T11219]  ? ns_capable+0x8a/0xf0
[  655.914212][T11219]  ? __pfx_do_new_mount+0x10/0x10
[  655.914246][T11219]  ? srso_alias_return_thunk+0x5/0xfbef5
[  655.914274][T11219]  ? path_mount+0x61c/0xfe0
[  655.914307][T11219]  ? srso_alias_return_thunk+0x5/0xfbef5
[  655.914348][T11219]  __se_sys_mount+0x317/0x410
[  655.914393][T11219]  ? __pfx___se_sys_mount+0x10/0x10
[  655.914428][T11219]  ? srso_alias_return_thunk+0x5/0xfbef5
[  655.914463][T11219]  ? srso_alias_return_thunk+0x5/0xfbef5
[  655.914490][T11219]  ? __x64_sys_mount+0x20/0xc0
[  655.914531][T11219]  do_syscall_64+0xfa/0x3b0
[  655.914557][T11219]  ? lockdep_hardirqs_on+0x9c/0x150
[  655.914581][T11219]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  655.914604][T11219]  ? srso_alias_return_thunk+0x5/0xfbef5
[  655.914632][T11219]  ? exc_page_fault+0x9f/0xf0
[  655.914658][T11219]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  655.914681][T11219] RIP: 0033:0x7f14fc19034a
[  655.914702][T11219] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  655.914723][T11219] RSP: 002b:00007f14fd081e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  655.914747][T11219] RAX: ffffffffffffffda RBX: 00007f14fd081ef0 RCX: 00007f14fc19034a
[  655.914766][T11219] RDX: 0000200000000000 RSI: 00002000000000c0 RDI: 00007f14fd081eb0
[  655.914783][T11219] RBP: 0000200000000000 R08: 00007f14fd081ef0 R09: 0000000000008000
[  655.914800][T11219] R10: 0000000000008000 R11: 0000000000000246 R12: 00002000000000c0
[  655.914816][T11219] R13: 00007f14fd081eb0 R14: 0000000000006739 R15: 0000200000000340
[  655.914853][T11219]  </TASK>
[  656.427196][    C0] vkms_vblank_simulate: vblank timer overrun
[  656.457679][T11219] Mem-Info:
[  656.460799][T11219] active_anon:12287 inactive_anon:0 isolated_anon:0
[  656.460799][T11219]  active_file:4558 inactive_file:49860 isolated_file:0
[  656.460799][T11219]  unevictable:768 dirty:64 writeback:0
[  656.460799][T11219]  slab_reclaimable:11285 slab_unreclaimable:105942
[  656.460799][T11219]  mapped:35168 shmem:6978 pagetables:1733
[  656.460799][T11219]  sec_pagetables:0 bounce:0
[  656.460799][T11219]  kernel_misc_reclaimable:0
[  656.460799][T11219]  free:1274944 free_pcp:17602 free_cma:0
[  656.570582][T11219] Node 0 active_anon:57412kB inactive_anon:0kB active_file:18232kB inactive_file:199308kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:140708kB dirty:280kB writeback:0kB shmem:34596kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13684kB pagetables:6864kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  656.602487][    C0] vkms_vblank_simulate: vblank timer overrun
[  656.609474][T11219] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  656.639294][    C0] vkms_vblank_simulate: vblank timer overrun
[  656.651096][T11219] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  656.679930][    C0] vkms_vblank_simulate: vblank timer overrun
[  656.686229][T11219] lowmem_reserve[]: 0 2497 2499 2499 2499
[  656.692018][T11219] Node 0 DMA32 free:1203936kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:58564kB inactive_anon:0kB active_file:18232kB inactive_file:197724kB unevictable:1536kB writepending:280kB present:3129332kB managed:2557412kB mlocked:0kB bounce:0kB free_pcp:31832kB local_pcp:19984kB free_cma:0kB
[  656.724349][    C0] vkms_vblank_simulate: vblank timer overrun
[  657.094968][T11219] lowmem_reserve[]: 0 0 1 1 1
[  657.138429][T11219] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1584kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB
[  657.488533][T11219] lowmem_reserve[]: 0 0 0 0 0
[  657.493636][T11219] Node 1 Normal free:3871848kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:39028kB local_pcp:19628kB free_cma:0kB
[  657.526749][T11219] lowmem_reserve[]: 0 0 0 0 0
[  657.532831][T11219] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  657.546030][T11219] Node 0 DMA32: 478*4kB (UME) 401*8kB (UME) 321*16kB (UM) 334*32kB (UM) 124*64kB (UME) 54*128kB (M) 35*256kB (UME) 8*512kB (M) 5*1024kB (UM) 6*2048kB (UME) 277*4096kB (M) = 1200848kB
[  657.564857][T11219] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  657.576682][T11219] Node 1 Normal: 85*4kB (UM) 53*8kB (UME) 38*16kB (UM) 116*32kB (UME) 37*64kB (UME) 15*128kB (UME) 6*256kB (UME) 5*512kB (UM) 2*1024kB (UM) 1*2048kB (E) 941*4096kB (M) = 3871900kB
[  657.664965][T11219] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  657.672147][T11256] loop0: detected capacity change from 0 to 32768
[  657.678500][T11219] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[  657.692222][T11219] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  657.729683][T11256] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1329 (11256)
[  657.778651][T11219] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  657.790928][T11219] 65392 total pagecache pages
[  657.807033][T11219] 0 pages in swap cache
[  657.824372][T11219] Free swap  = 124996kB
[  657.834437][T11219] Total swap = 124996kB
[  657.848511][T11219] 2097051 pages RAM
[  657.863698][T11219] 0 pages HighMem/MovableOnly
[  657.876081][T11219] 425672 pages reserved
[  657.890210][T11219] 0 pages cma reserved
[  657.898602][T11256] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  657.943354][T11256] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  657.958475][T11219] bcachefs (loop3): error reallocating journal fifo (32768 open entries)
[  657.969475][T11256] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  658.000033][T11219] bcachefs (loop3): error in recovery: ENOMEM_journal_pin_fifo
[  658.000053][T11219]   emergency read only at seq 0
[  658.788069][T11256] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR
[  658.789684][T11256] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR
[  658.790201][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  658.790664][T11256] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR
[  658.791618][T11256] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR
[  659.033092][T11256] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR
[  659.033420][T11256] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR
[  659.033721][T11256] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR
[  659.033963][T11256] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR
[  659.034216][T11256] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR
[  659.034465][T11256] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR
[  659.034719][T11256] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR
[  659.036060][T11256] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[  659.036307][T11256] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[  659.037797][T11256] BTRFS error (device loop0): open_ctree failed: -12
[  660.654047][T11219] bcachefs (loop3): bch2_fs_start(): error starting filesystem ENOMEM_journal_pin_fifo
[  660.663990][T11219] bcachefs (loop3): shutting down
[  660.690169][T11319] binder: 11318:11319 unknown command 0
[  660.696859][T11219] bcachefs (loop3): shutdown complete
[  660.700747][   T13] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  660.702318][T11319] binder: 11318:11319 ioctl c0306201 200000000080 returned -22
[  660.704681][T11319] binder: 11318:11319 ioctl c0306201 0 returned -14
[  662.394307][T11334] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  662.729581][ T5884] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  662.894418][ T5884] usb 1-1: config 0 has no interfaces?
[  662.900245][ T5884] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  662.939297][ T5884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  662.994963][ T5884] usb 1-1: config 0 descriptor??
[  663.224785][   T30] audit: type=1400 audit(1758086372.916:65): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=11358 comm="syz.4.1352"
[  663.282268][T11360] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1352'.
[  664.775042][T11370] openvswitch: : Dropping previously announced user features
[  664.879588][T11370] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10)
[  664.886208][T11370] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  664.893788][T11370] vhci_hcd vhci_hcd.0: Device attached
[  665.753638][   T24] usb 1-1: USB disconnect, device number 12
[  665.836775][ T6005] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  665.862183][ T5884] usb 41-1: new low-speed USB device number 5 using vhci_hcd
[  666.004994][ T6005] usb 5-1: Using ep0 maxpacket: 16
[  666.146027][T11388] loop5: detected capacity change from 0 to 1024
[  667.015890][ T6005] usb 5-1: config 128 has too many interfaces: 252, using maximum allowed: 32
[  667.053026][ T6005] usb 5-1: config 128 has 0 interfaces, different from the descriptor's value: 252
[  668.046376][ T6301] Bluetooth: hci4: Frame reassembly failed (-84)
[  668.160356][ T6005] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  668.196899][   T59] hfsplus: b-tree write err: -5, ino 4
[  668.209176][ T6005] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  668.687850][T11395] 9pnet_fd: Insufficient options for proto=fd
[  668.945925][T11397] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1364'.
[  669.084494][T11371] vhci_hcd: connection reset by peer
[  669.084524][ T6005] usb 5-1: string descriptor 0 read error: -71
[  669.240488][ T6303] vhci_hcd: stop threads
[  669.254266][ T6303] vhci_hcd: release socket
[  669.280791][ T6005] usb 5-1: USB disconnect, device number 5
[  669.284606][ T6303] vhci_hcd: disconnect device
[  669.966371][ T9956] Bluetooth: hci4: command 0x1003 tx timeout
[  669.973665][ T5886] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  670.093048][T11219] bcachefs: bch2_fs_get_tree() error: ENOMEM_journal_pin_fifo
[  670.560299][ T9956] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  670.571819][T11394] loop6: detected capacity change from 0 to 32768
[  670.586521][T11414] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  670.588446][ T9956] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  670.613243][ T9956] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  670.652025][ T9956] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  670.661373][ T9956] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  670.703048][T11394] XFS (loop6): Invalid device [./file0], error=-15
[  670.717987][ T5884] vhci_hcd: vhci_device speed not set
[  670.729421][T11412] lo speed is unknown, defaulting to 1000
[  671.184575][    T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  671.387254][    T9] usb 1-1: config 0 has no interfaces?
[  671.392806][    T9] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  671.411376][T11399] loop5: detected capacity change from 0 to 32768
[  671.493359][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  671.503438][T11399] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1365 (11399)
[  671.575004][    T9] usb 1-1: config 0 descriptor??
[  671.690260][T11399] BTRFS info (device loop5): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  671.784295][T11399] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm
[  671.926841][ T5884] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  672.090591][ T5884] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  672.125231][ T5884] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  672.210026][T11412] chnl_net:caif_netlink_parms(): no params data found
[  672.219706][ T5884] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  672.338255][ T5884] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  672.367694][T11399] BTRFS error (device loop5): open_ctree failed: -4
[  672.417845][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  672.477545][ T5884] usb 2-1: config 0 descriptor??
[  672.575290][ T6061] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  672.635259][ T5886] Bluetooth: hci4: command tx timeout
[  672.674384][ T6005] usb 1-1: USB disconnect, device number 13
[  672.754892][T11458] 9pnet_fd: Insufficient options for proto=fd
[  672.951007][ T5884] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  673.150834][T11464] delete_channel: no stack
[  673.347978][ T5884] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  673.555313][ T5884] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  673.562736][ T5884] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  673.602649][ T5884] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  673.641329][ T5884] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  673.666405][ T5884] usb 2-1: USB disconnect, device number 10
[  673.853219][ T6061] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  674.316353][T11469] fido_id[11469]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  674.370349][T11471] wlan0 speed is unknown, defaulting to 1000
[  674.380223][T11471] wlan0 speed is unknown, defaulting to 1000
[  674.501785][T11487] overlayfs: missing 'lowerdir'
[  674.612960][ T6061] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  674.615538][ T5886] Bluetooth: hci4: command tx timeout
[  674.761276][T11471] wlan0 speed is unknown, defaulting to 1000
[  674.836831][T11471] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  675.088863][ T6061] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  675.144469][T11471] wlan0 speed is unknown, defaulting to 1000
[  675.144646][T11412] bridge0: port 1(bridge_slave_0) entered blocking state
[  675.175051][T11412] bridge0: port 1(bridge_slave_0) entered disabled state
[  675.203858][T11412] bridge_slave_0: entered allmulticast mode
[  675.244035][T11412] bridge_slave_0: entered promiscuous mode
[  675.286122][T11412] bridge0: port 2(bridge_slave_1) entered blocking state
[  675.310511][T11412] bridge0: port 2(bridge_slave_1) entered disabled state
[  675.356444][T11412] bridge_slave_1: entered allmulticast mode
[  675.397546][T11412] bridge_slave_1: entered promiscuous mode
[  675.446673][T11471] wlan0 speed is unknown, defaulting to 1000
[  675.600089][T11471] wlan0 speed is unknown, defaulting to 1000
[  675.616300][T11412] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  675.700587][T11412] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  675.704457][T11489] loop4: detected capacity change from 0 to 32768
[  675.758968][T11489] XFS (loop4): Invalid device [./file0], error=-15
[  675.777207][T11505] 9pnet_fd: Insufficient options for proto=fd
[  675.809632][T11471] wlan0 speed is unknown, defaulting to 1000
[  676.100631][T11471] wlan0 speed is unknown, defaulting to 1000
[  676.433092][T11471] wlan0 speed is unknown, defaulting to 1000
[  676.441898][T11519] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  676.531041][T11412] team0: Port device team_slave_0 added
[  676.550724][T11412] team0: Port device team_slave_1 added
[  676.593043][ T5886] Bluetooth: hci4: command tx timeout
[  676.743587][T11471] wlan0 speed is unknown, defaulting to 1000
[  676.839812][   T24] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  677.068633][   T24] usb 2-1: config 0 has no interfaces?
[  677.077836][   T24] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  677.116869][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  677.206392][   T24] usb 2-1: config 0 descriptor??
[  677.242175][ T6061] bridge_slave_1: left allmulticast mode
[  677.401641][ T6061] bridge_slave_1: left promiscuous mode
[  677.468614][ T6061] bridge0: port 2(bridge_slave_1) entered disabled state
[  677.666277][T11544] delete_channel: no stack
[  678.291474][ T6061] bridge_slave_0: left allmulticast mode
[  678.330365][ T6061] bridge_slave_0: left promiscuous mode
[  678.380161][ T6061] bridge0: port 1(bridge_slave_0) entered disabled state
[  678.540861][T11554] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  678.573668][ T5886] Bluetooth: hci4: command tx timeout
[  678.610831][T11554] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  679.773307][T11568] 9pnet: p9_errstr2errno: server reported unknown error �@cƒF	S+¼ÿÿ
[  680.284406][   T30] audit: type=1400 audit(1758086390.835:66): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=11579 comm="syz.4.1407"
[  680.303391][    C0] vkms_vblank_simulate: vblank timer overrun
[  680.340089][T11585] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1407'.
[  681.422201][T11594] loop4: detected capacity change from 0 to 64
[  682.209255][T11602] delete_channel: no stack
[  683.220461][ T6061] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  683.938246][T11616] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  684.003426][T11616] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  684.111851][ T6061] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  684.140726][ T6061] bond0 (unregistering): Released all slaves
[  684.184762][ T6061] bond1 (unregistering): Released all slaves
[  684.233486][T11412] batman_adv: batadv0: Adding interface: batadv_slave_0
[  684.246837][T11412] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  684.272763][    C0] vkms_vblank_simulate: vblank timer overrun
[  684.319559][T11412] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  684.341649][T11412] batman_adv: batadv0: Adding interface: batadv_slave_1
[  684.349759][T11412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  685.218583][T11412] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  685.245135][T11580] vxcan1: entered allmulticast mode
[  685.268046][ T5960] usb 2-1: USB disconnect, device number 11
[  685.303503][ T6061] : left promiscuous mode
[  685.840370][T11412] hsr_slave_0: entered promiscuous mode
[  685.866318][ T9912] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  685.899808][T11412] hsr_slave_1: entered promiscuous mode
[  685.929729][T11412] debugfs: 'hsr0' already exists in 'hsr'
[  685.963155][T11412] Cannot create hsr debugfs directory
[  686.111882][T11649] delete_channel: no stack
[  686.152063][ T9912] usb 7-1: Using ep0 maxpacket: 16
[  686.171741][ T9912] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  686.184161][ T9912] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  686.215023][ T9912] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  686.276814][ T9912] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  686.296126][ T9912] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  686.452175][ T9912] usb 7-1: config 0 descriptor??
[  687.353773][ T9912] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.0005/input/input32
[  687.370613][ T9912] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0
[  687.409402][T11662] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  687.515722][T11662] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  687.796490][T11674] delete_channel: no stack
[  687.990208][T11677] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  688.514041][ T9912] usb 7-1: reset high-speed USB device number 4 using dummy_hcd
[  688.551322][   T24] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  688.559604][ T6061] hsr_slave_0: left promiscuous mode
[  688.594580][ T6061] hsr_slave_1: left promiscuous mode
[  688.627825][ T6061] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  688.635238][ T6061] batman_adv: batadv0: Removing interface: batadv_slave_0
[  688.713617][ T6061] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  688.721019][ T6061] batman_adv: batadv0: Removing interface: batadv_slave_1
[  688.724587][   T24] usb 6-1: config 0 has no interfaces?
[  688.761392][   T24] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  688.798396][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  688.849054][ T6061] veth1_macvtap: left promiscuous mode
[  688.854588][ T6061] veth0_macvtap: left promiscuous mode
[  688.867833][   T24] usb 6-1: config 0 descriptor??
[  688.912992][ T6061] veth1_vlan: left promiscuous mode
[  688.918318][ T6061] veth0_vlan: left promiscuous mode
[  689.381703][ T6061] pim6reg (unregistering): left allmulticast mode
[  689.563983][ T5960] usb 7-1: USB disconnect, device number 4
[  689.843083][T11691] loop4: detected capacity change from 0 to 32768
[  690.289800][T11691] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,checksum_err_retry_nr=12,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,degraded=yes,nojournal_transaction_names
[  690.289838][T11691]   allowing incompatible features above 0.0: (unknown version)
[  690.289853][T11691]   features: lz4
[  690.349357][T11691] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0
[  690.363119][T11691] bcachefs (loop4): initializing new filesystem
[  690.531172][T11691] bcachefs (loop4): going read-write
[  690.582560][T11691] bcachefs (loop4): marking superblocks
[  690.620516][T11691] bcachefs (loop4): initializing freespace
[  690.637469][T11691] bcachefs (loop4): done initializing freespace
[  690.667698][T11691] bcachefs (loop4): reading snapshots table
[  690.674099][T11691] bcachefs (loop4): reading snapshots done
[  690.732230][T11729] binder: 11720:11729 ioctl 4018620d 0 returned -22
[  691.321329][T11691] bcachefs (loop4): done starting filesystem
[  691.503674][T11691] syz.4.1432 (11691) used greatest stack depth: 15864 bytes left
[  691.520638][ T5868] bcachefs (loop4): shutting down
[  691.529045][ T5868] bcachefs (loop4): going read-only
[  691.536504][ T5868] bcachefs (loop4): finished waiting for writes to stop
[  691.551331][ T5868] bcachefs (loop4): flushing journal and stopping allocators, journal seq 2
[  691.602121][ T6061] team0 (unregistering): Port device team_slave_1 removed
[  691.632772][ T5868] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 3
[  691.650040][ T5868] bcachefs (loop4): clean shutdown complete, journal seq 4
[  691.658256][ T6061] team0 (unregistering): Port device team_slave_0 removed
[  691.658830][ T5868] bcachefs (loop4): marking filesystem clean
[  691.754878][ T5868] bcachefs (loop4): shutdown complete
[  692.184775][   T10] lo speed is unknown, defaulting to 1000
[  692.232706][   T10] syz0: Port: 1 Link DOWN
[  692.324129][   T10] usb 6-1: USB disconnect, device number 10
[  692.566583][T11739] overlayfs: missing 'lowerdir'
[  693.307373][T11412] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  693.431471][T11412] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  693.518216][T11412] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  693.723709][T11412] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  694.951867][T11776] delete_channel: no stack
[  695.339344][T11412] 8021q: adding VLAN 0 to HW filter on device bond0
[  695.419808][T11412] 8021q: adding VLAN 0 to HW filter on device team0
[  695.541286][ T3540] bridge0: port 1(bridge_slave_0) entered blocking state
[  695.548484][ T3540] bridge0: port 1(bridge_slave_0) entered forwarding state
[  695.686225][ T6301] bridge0: port 2(bridge_slave_1) entered blocking state
[  695.693398][ T6301] bridge0: port 2(bridge_slave_1) entered forwarding state
[  697.371484][T11818] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1458'.
[  697.405017][T11819] mkiss: ax0: crc mode is auto.
[  700.830104][T11412] 8021q: adding VLAN 0 to HW filter on device batadv0
[  701.099502][   T30] audit: type=1326 audit(1758086412.702:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11847 comm="syz.6.1466" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f515338eba9 code=0x0
[  701.195336][T11857] delete_channel: no stack
[  701.387291][T11853] CIFS mount error: No usable UNC path provided in device string!
[  701.387291][T11853] 
[  701.820378][T11853] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  704.021740][T11903] loop5: detected capacity change from 0 to 1024
[  704.667333][T11903] hfsplus: trying to free free bnode 0(1)
[  704.704935][T11906] hfsplus: catalog searching failed
[  706.170769][ T6327] hfsplus: b-tree write err: -5, ino 4
[  706.348506][T11412] veth0_vlan: entered promiscuous mode
[  706.710798][T11412] veth1_vlan: entered promiscuous mode
[  708.410361][T11412] veth0_macvtap: entered promiscuous mode
[  708.917529][T11924] mkiss: ax0: crc mode is auto.
[  708.939213][T11412] veth1_macvtap: entered promiscuous mode
[  709.068485][T11412] batman_adv: batadv0: Interface activated: batadv_slave_0
[  709.148257][T11412] batman_adv: batadv0: Interface activated: batadv_slave_1
[  709.228019][ T6310] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  709.281238][ T6310] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  709.341318][ T6310] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  709.364720][ T6310] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  711.633428][T11970] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1486'.
[  713.042634][T11984] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  713.067828][T11984] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  714.385465][T11985] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  714.439565][T11985] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  716.633947][T12024] delete_channel: no stack
[  716.825132][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  717.189019][T12023] netlink: 'syz.5.1497': attribute type 10 has an invalid length.
[  717.359826][T12023] bridge0: port 2(bridge_slave_1) entered disabled state
[  717.367308][T12023] bridge0: port 1(bridge_slave_0) entered disabled state
[  717.481825][T12023] bridge0: port 2(bridge_slave_1) entered blocking state
[  717.489043][T12023] bridge0: port 2(bridge_slave_1) entered forwarding state
[  717.496581][T12023] bridge0: port 1(bridge_slave_0) entered blocking state
[  717.503771][T12023] bridge0: port 1(bridge_slave_0) entered forwarding state
[  718.333878][T12031] siw: device registration error -23
[  719.140324][T12023] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  719.255328][T12041] siw: device registration error -23
[  720.574357][T12056] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1506'.
[  720.943644][T12060] wlan0 speed is unknown, defaulting to 1000
[  725.126475][T12104] wlan0 speed is unknown, defaulting to 1000
[  727.426684][T12099] mkiss: ax0: crc mode is auto.
[  727.442516][T12109] siw: device registration error -23
[  728.169695][T12124] netlink: 'syz.1.1524': attribute type 4 has an invalid length.
[  728.277474][T12122] loop5: detected capacity change from 0 to 4096
[  728.663134][T12122] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  729.184649][T12122] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  731.984500][   T30] audit: type=1400 audit(1758086445.135:68): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=12150 comm="syz.0.1531"
[  732.038361][T12158] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1531'.
[  733.031647][ T5867] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  734.253689][T12173] siw: device registration error -23
[  736.118226][   T24] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  736.359445][   T24] usb 7-1: Using ep0 maxpacket: 16
[  736.513046][   T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  736.641142][   T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  736.712965][   T24] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  736.957364][   T24] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  736.967890][   T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  737.003731][   T24] usb 7-1: config 0 descriptor??
[  737.773903][   T24] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.0006/input/input33
[  737.895004][   T24] microsoft 0003:045E:07DA.0006: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0
[  737.992462][   T30] audit: type=1400 audit(1758086451.437:69): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=12215 comm="syz.1.1547"
[  738.042227][T12221] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1547'.
[  739.521287][   T24] usb 7-1: USB disconnect, device number 5
[  741.552904][T12220] fido_id[12220]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory
[  741.863479][T12244] siw: device registration error -23
[  745.800900][   T10] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  746.829813][   T10] usb 7-1: Using ep0 maxpacket: 16
[  746.862730][   T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  746.880528][   T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  746.923794][   T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  747.066081][   T10] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  747.493053][   T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  747.647221][   T10] usb 7-1: config 0 descriptor??
[  748.453408][   T10] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.0007/input/input34
[  748.547996][   T10] microsoft 0003:045E:07DA.0007: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0
[  748.611506][T12318] siw: device registration error -23
[  748.680275][T12316] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  749.476617][   T10] usb 7-1: USB disconnect, device number 6
[  749.823131][T12322] fido_id[12322]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[  752.402586][T12343] delete_channel: no stack
[  752.969989][T12352] siw: device registration error -23
[  753.826445][T12371] overlayfs: failed to resolve './file1': -2
[  755.257617][T12383] loop0: detected capacity change from 0 to 256
[  755.276697][T12382] wlan0 speed is unknown, defaulting to 1000
[  755.379435][   T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  755.481413][T12390] syz.4.1593 uses obsolete (PF_INET,SOCK_PACKET)
[  755.528898][T12383] FAT-fs (loop0): Directory bread(block 64) failed
[  755.543050][T12383] FAT-fs (loop0): Directory bread(block 65) failed
[  755.553644][T12383] FAT-fs (loop0): Directory bread(block 66) failed
[  755.560912][T12383] FAT-fs (loop0): Directory bread(block 67) failed
[  755.567907][T12383] FAT-fs (loop0): Directory bread(block 68) failed
[  755.575831][   T10] usb 2-1: Using ep0 maxpacket: 16
[  755.582477][T12383] FAT-fs (loop0): Directory bread(block 69) failed
[  755.593418][T12383] FAT-fs (loop0): Directory bread(block 70) failed
[  755.601464][T12383] FAT-fs (loop0): Directory bread(block 71) failed
[  755.608489][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  755.619531][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  755.630373][   T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  755.643346][   T10] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  755.652448][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  755.663552][T12383] FAT-fs (loop0): Directory bread(block 72) failed
[  755.705545][T12383] FAT-fs (loop0): Directory bread(block 73) failed
[  755.802850][   T10] usb 2-1: config 0 descriptor??
[  756.582734][   T10] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0008/input/input35
[  756.903117][   T10] microsoft 0003:045E:07DA.0008: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0
[  758.072979][T12425] siw: device registration error -23
[  758.490089][   T10] usb 2-1: USB disconnect, device number 12
[  763.668035][T12469] loop6: detected capacity change from 0 to 1024
[  765.634553][T12469] EXT4-fs: inline encryption not supported
[  765.640378][T12469] EXT4-fs: Ignoring removed i_version option
[  773.688250][T12469] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  773.744224][T12469] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR
[  773.795061][T12469] EXT4-fs: failed to create workqueue
[  773.951656][T12469] EXT4-fs (loop6): mount failed
[  775.565341][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  775.916890][ T5886] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  775.939886][ T5886] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  775.954895][ T5886] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  775.965247][ T5886] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  775.982273][ T5886] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  776.250610][T12507] wlan0 speed is unknown, defaulting to 1000
[  777.123849][ T9956] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  777.137519][ T9956] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  777.146122][ T9956] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  777.164199][ T9956] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  777.178350][ T9956] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  777.973091][ T9956] Bluetooth: hci5: command tx timeout
[  778.057553][T12507] chnl_net:caif_netlink_parms(): no params data found
[  779.229525][ T9956] Bluetooth: hci3: command tx timeout
[  779.953385][ T9956] Bluetooth: hci5: command tx timeout
[  780.547441][T12566] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1636'.
[  781.182194][ T9956] Bluetooth: hci3: command tx timeout
[  781.876575][T12507] bridge0: port 1(bridge_slave_0) entered blocking state
[  781.915081][T12507] bridge0: port 1(bridge_slave_0) entered disabled state
[  781.923031][T12507] bridge_slave_0: entered allmulticast mode
[  781.932053][T12507] bridge_slave_0: entered promiscuous mode
[  781.938146][ T9956] Bluetooth: hci5: command tx timeout
[  781.957666][T12526] wlan0 speed is unknown, defaulting to 1000
[  782.177658][ T1109] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  782.245871][ T1109] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  782.567289][T12507] bridge0: port 2(bridge_slave_1) entered blocking state
[  782.626098][T12507] bridge0: port 2(bridge_slave_1) entered disabled state
[  782.843186][T12507] bridge_slave_1: entered allmulticast mode
[  782.877548][T12507] bridge_slave_1: entered promiscuous mode
[  783.050443][ T1109] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  783.060954][ T1109] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  783.152257][ T9956] Bluetooth: hci3: command tx timeout
[  783.992267][ T9956] Bluetooth: hci5: command tx timeout
[  784.030949][T12507] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  785.133007][ T9956] Bluetooth: hci3: command tx timeout
[  785.443067][T12507] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  785.715254][ T1109] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  785.745315][ T1109] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  785.996154][T12617] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1652'.
[  786.134880][ T1109] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  786.160776][ T1109] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  786.317718][T12507] team0: Port device team_slave_0 added
[  786.462727][T12629] siw: device registration error -23
[  786.617047][T12507] team0: Port device team_slave_1 added
[  787.036711][ T9956] Bluetooth: hci4: command 0x0406 tx timeout
[  788.499470][T12507] batman_adv: batadv0: Adding interface: batadv_slave_0
[  788.533469][T12507] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  788.667209][T12507] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  788.805489][T12507] batman_adv: batadv0: Adding interface: batadv_slave_1
[  788.852667][T12507] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  788.958882][T12507] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  790.507241][T12658] delete_channel: no stack
[  791.099909][T12507] hsr_slave_0: entered promiscuous mode
[  791.202884][T12507] hsr_slave_1: entered promiscuous mode
[  791.236437][T12507] debugfs: 'hsr0' already exists in 'hsr'
[  791.242276][T12507] Cannot create hsr debugfs directory
[  791.779966][ T1109] bridge_slave_1: left allmulticast mode
[  791.794553][T12676] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1665'.
[  791.816345][ T1109] bridge_slave_1: left promiscuous mode
[  791.840528][ T1109] bridge0: port 2(bridge_slave_1) entered disabled state
[  791.903839][ T1109] bridge_slave_0: left allmulticast mode
[  791.956577][ T1109] bridge_slave_0: left promiscuous mode
[  791.976680][T12681] siw: device registration error -23
[  791.977593][ T1109] bridge0: port 1(bridge_slave_0) entered disabled state
[  796.441841][ T1109] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  796.571161][ T1109] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  796.581995][ T1109] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  796.592846][ T1109] bond0 (unregistering): Released all slaves
[  796.610509][ T1109] bond1 (unregistering): Released all slaves
[  796.800944][ T1109] tipc: Left network mode
[  797.402638][T12526] chnl_net:caif_netlink_parms(): no params data found
[  798.071233][T12728] delete_channel: no stack
[  803.479263][ T1109] hsr_slave_0: left promiscuous mode
[  803.833118][ T1109] hsr_slave_1: left promiscuous mode
[  803.839040][ T1109] batman_adv: batadv0: Removing interface: batadv_slave_0
[  803.941176][ T1109] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  803.989794][ T1109] batman_adv: batadv0: Removing interface: batadv_slave_1
[  804.146536][ T1109] veth1_macvtap: left promiscuous mode
[  804.152123][ T1109] veth0_macvtap: left promiscuous mode
[  804.722074][ T1109] pim6reg (unregistering): left allmulticast mode
[  804.839319][T12787] delete_channel: no stack
[  806.800128][ T1109] team0 (unregistering): Port device team_slave_1 removed
[  806.849687][ T1109] team0 (unregistering): Port device team_slave_0 removed
[  808.519568][T12828] sp0: Synchronizing with TNC
[  808.519721][T12526] bridge0: port 1(bridge_slave_0) entered blocking state
[  808.533852][T12828] [U] è
[  808.536783][T12526] bridge0: port 1(bridge_slave_0) entered disabled state
[  808.543966][T12526] bridge_slave_0: entered allmulticast mode
[  808.625320][T12526] bridge_slave_0: entered promiscuous mode
[  808.658582][T12526] bridge0: port 2(bridge_slave_1) entered blocking state
[  808.666576][T12835] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1703'.
[  809.193903][T12526] bridge0: port 2(bridge_slave_1) entered disabled state
[  809.201184][T12526] bridge_slave_1: entered allmulticast mode
[  809.372398][T12526] bridge_slave_1: entered promiscuous mode
[  811.311828][T12526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  811.446164][T12526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  811.741940][T12507] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  811.959282][T12526] team0: Port device team_slave_0 added
[  811.990832][T12507] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  812.040636][T12526] team0: Port device team_slave_1 added
[  812.073934][T12507] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  812.274667][T12507] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  813.100239][T12526] batman_adv: batadv0: Adding interface: batadv_slave_0
[  813.139025][T12526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  813.177074][T12880] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1709'.
[  813.201190][   T30] audit: type=1400 audit(1758086530.420:70): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=12876 comm="syz.1.1709"
[  813.282670][T12526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  813.296041][T12526] batman_adv: batadv0: Adding interface: batadv_slave_1
[  813.302987][T12526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  813.372196][T12526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  814.426988][T12900] autofs: Unknown parameter './file0'
[  814.743894][T12526] hsr_slave_0: entered promiscuous mode
[  814.764165][T12526] hsr_slave_1: entered promiscuous mode
[  815.152746][T12908] overlayfs: missing 'lowerdir'
[  816.923715][T12922] sp0: Synchronizing with TNC
[  817.024288][T12930] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1726'.
[  817.596326][T12917] [U] è
[  817.615394][T12934] loop0: detected capacity change from 0 to 128
[  817.695767][T12934] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  817.732002][T12934] hpfs: filesystem error: improperly stopped
[  817.810599][T12934] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  817.844373][T12934] hpfs: You really don't want any checks? You are crazy...
[  817.903270][T12934] hpfs: hpfs_map_sector(): read error
[  817.941491][T12934] hpfs: code page support is disabled
[  818.001809][T12934] hpfs: hpfs_map_4sectors(): unaligned read
[  818.022804][T12934] hpfs: hpfs_map_4sectors(): unaligned read
[  818.228097][T12934] hpfs: filesystem error: unable to find root dir
[  818.311800][T12934] hpfs: hpfs_map_4sectors(): unaligned read
[  818.616030][T12947] hpfs: hpfs_map_4sectors(): unaligned read
[  819.454488][T12507] 8021q: adding VLAN 0 to HW filter on device bond0
[  819.485373][T12951] autofs: Unknown parameter './file0'
[  819.739888][T12507] 8021q: adding VLAN 0 to HW filter on device team0
[  819.814721][ T1109] bridge0: port 1(bridge_slave_0) entered blocking state
[  819.821912][ T1109] bridge0: port 1(bridge_slave_0) entered forwarding state
[  820.076857][T12956] overlayfs: missing 'lowerdir'
[  820.102947][ T6301] bridge0: port 2(bridge_slave_1) entered blocking state
[  820.110085][ T6301] bridge0: port 2(bridge_slave_1) entered forwarding state
[  820.752593][T12526] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  820.796664][T12526] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  821.053574][T12526] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  821.156586][T12526] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  822.898241][T12526] 8021q: adding VLAN 0 to HW filter on device bond0
[  822.915409][T12994] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1738'.
[  823.255050][T12526] 8021q: adding VLAN 0 to HW filter on device team0
[  823.344347][ T6303] bridge0: port 1(bridge_slave_0) entered blocking state
[  823.351482][ T6303] bridge0: port 1(bridge_slave_0) entered forwarding state
[  823.409659][ T6303] bridge0: port 2(bridge_slave_1) entered blocking state
[  823.416788][ T6303] bridge0: port 2(bridge_slave_1) entered forwarding state
[  823.605534][T13004] loop7: detected capacity change from 0 to 128
[  824.388764][T12507] 8021q: adding VLAN 0 to HW filter on device batadv0
[  824.426509][T13004] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  824.457576][T13004] hpfs: filesystem error: improperly stopped
[  824.668927][T13004] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  824.808409][T13010] autofs: Unknown parameter './file0'
[  824.859128][T13004] hpfs: You really don't want any checks? You are crazy...
[  825.045217][T13004] hpfs: hpfs_map_sector(): read error
[  825.146758][T13004] hpfs: code page support is disabled
[  825.209840][T13004] hpfs: hpfs_map_4sectors(): unaligned read
[  825.219191][T13004] hpfs: hpfs_map_4sectors(): unaligned read
[  825.225095][T13004] hpfs: filesystem error: unable to find root dir
[  825.242772][T13004] hpfs: hpfs_map_4sectors(): unaligned read
[  825.534287][T13016] hpfs: hpfs_map_4sectors(): unaligned read
[  825.995599][T12526] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  826.149780][T12526] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  826.243833][T13021] overlayfs: missing 'lowerdir'
[  826.598707][T13030] sp0: Synchronizing with TNC
[  826.700631][T13030] [U] è
[  827.517137][T13050] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1750'.
[  830.176883][T12507] veth0_vlan: entered promiscuous mode
[  830.382081][T12507] veth1_vlan: entered promiscuous mode
[  830.652092][T12526] 8021q: adding VLAN 0 to HW filter on device batadv0
[  830.653866][T13061] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  830.748736][T12507] veth0_macvtap: entered promiscuous mode
[  831.875940][T12507] veth1_macvtap: entered promiscuous mode
[  832.126244][T13077] loop0: detected capacity change from 0 to 128
[  832.198727][T13077] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  832.281478][T13077] hpfs: filesystem error: improperly stopped
[  832.287504][T13077] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  832.454371][T13077] hpfs: You really don't want any checks? You are crazy...
[  832.589679][T13077] hpfs: hpfs_map_sector(): read error
[  832.595069][T13077] hpfs: code page support is disabled
[  832.600671][T13077] hpfs: hpfs_map_4sectors(): unaligned read
[  832.683248][T13077] hpfs: hpfs_map_4sectors(): unaligned read
[  832.689152][T13077] hpfs: filesystem error: unable to find root dir
[  832.998838][T13077] hpfs: hpfs_map_4sectors(): unaligned read
[  833.019033][T13094] bridge0: entered allmulticast mode
[  833.252853][T13094] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1760'.
[  833.337781][T13097] hpfs: hpfs_map_4sectors(): unaligned read
[  833.366731][T13094] bridge_slave_1: left allmulticast mode
[  833.580689][T13094] bridge_slave_1: left promiscuous mode
[  833.624051][T13094] bridge0: port 2(bridge_slave_1) entered disabled state
[  833.820357][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  833.874149][T13094] bridge_slave_0: left allmulticast mode
[  833.927579][T13094] bridge_slave_0: left promiscuous mode
[  833.961565][T13094] bridge0: port 1(bridge_slave_0) entered disabled state
[  834.282024][T13094] bridge0 (unregistering): left allmulticast mode
[  834.577016][ T9956] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  834.587231][ T9956] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  834.605060][ T9956] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  834.613952][ T9956] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  834.622538][ T9956] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  834.688880][ T9956] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  834.712785][ T9956] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  834.728428][ T9956] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  834.739454][ T9956] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  834.747366][ T9956] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  836.204620][   T90] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  836.546345][   T90] usb 1-1: Using ep0 maxpacket: 32
[  836.749113][ T9956] Bluetooth: hci1: command tx timeout
[  836.749152][ T5886] Bluetooth: hci3: command tx timeout
[  836.760953][   T90] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  836.770536][   T90] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  836.787777][   T90] usb 1-1: config 0 descriptor??
[  836.802337][   T90] gspca_main: nw80x-2.14.0 probing 055f:d001
[  836.986895][T13117] wlan0 speed is unknown, defaulting to 1000
[  837.721341][   T24] usb 1-1: USB disconnect, device number 14
[  837.740685][T13111] wlan0 speed is unknown, defaulting to 1000
[  837.915340][T13134] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  837.926163][T13134] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  838.682996][ T5886] Bluetooth: hci1: command tx timeout
[  838.683009][ T9956] Bluetooth: hci3: command tx timeout
[  839.779705][T13168] ubi31: attaching mtd0
[  839.804189][T13168] ubi31: scanning is finished
[  840.681881][ T9956] Bluetooth: hci3: command tx timeout
[  841.196476][ T5886] Bluetooth: hci1: command tx timeout
[  841.373436][T13168] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4
[  841.619098][ T6307] bridge_slave_1: left allmulticast mode
[  841.649731][ T6307] bridge_slave_1: left promiscuous mode
[  841.666103][ T6307] bridge0: port 2(bridge_slave_1) entered disabled state
[  841.759705][T13180] siw: device registration error -23
[  841.775161][ T6307] bridge_slave_0: left allmulticast mode
[  841.780802][ T6307] bridge_slave_0: left promiscuous mode
[  841.860590][ T6307] bridge0: port 1(bridge_slave_0) entered disabled state
[  843.174112][ T9956] Bluetooth: hci3: command tx timeout
[  843.179578][ T5886] Bluetooth: hci1: command tx timeout
[  844.377416][T13220] loop0: detected capacity change from 0 to 128
[  844.388890][T13220] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  844.475829][T13220] hpfs: filesystem error: improperly stopped
[  844.489444][T13220] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  844.544366][T13220] hpfs: You really don't want any checks? You are crazy...
[  844.563918][T13220] hpfs: hpfs_map_sector(): read error
[  844.569562][T13220] hpfs: code page support is disabled
[  844.639599][T13220] hpfs: hpfs_map_4sectors(): unaligned read
[  844.645531][T13220] hpfs: hpfs_map_4sectors(): unaligned read
[  844.711938][T13220] hpfs: filesystem error: unable to find root dir
[  844.764788][T13220] hpfs: hpfs_map_4sectors(): unaligned read
[  845.055828][T13230] hpfs: hpfs_map_4sectors(): unaligned read
[  846.463520][T13249] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  846.875391][ T6307] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  846.909164][ T6307] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  846.945765][ T6307] bond0 (unregistering): Released all slaves
[  847.280026][T13117] chnl_net:caif_netlink_parms(): no params data found
[  848.411908][T13263] loop0: detected capacity change from 0 to 8
[  848.440086][T13263] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  848.480033][ T6307] hsr_slave_0: left promiscuous mode
[  848.595190][ T6307] hsr_slave_1: left promiscuous mode
[  849.090053][ T6307] batman_adv: batadv0: Removing interface: batadv_slave_0
[  849.238877][ T6307] batman_adv: batadv0: Removing interface: batadv_slave_1
[  849.440092][ T6307] veth1_macvtap: left promiscuous mode
[  849.470001][ T6307] veth0_macvtap: left promiscuous mode
[  849.499721][ T6307] veth1_vlan: left promiscuous mode
[  849.523455][ T6307] veth0_vlan: left promiscuous mode
[  849.533033][T13274] loop7: detected capacity change from 0 to 128
[  849.661139][T13274] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  849.886628][T13274] hpfs: filesystem error: improperly stopped
[  849.977543][T13274] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  850.112834][T13274] hpfs: You really don't want any checks? You are crazy...
[  850.249446][T13274] hpfs: hpfs_map_sector(): read error
[  850.381487][T13274] hpfs: code page support is disabled
[  850.420073][T13274] hpfs: hpfs_map_4sectors(): unaligned read
[  850.463667][T13274] hpfs: hpfs_map_4sectors(): unaligned read
[  850.506869][T13274] hpfs: filesystem error: unable to find root dir
[  850.549593][T13274] hpfs: hpfs_map_4sectors(): unaligned read
[  850.940206][T13280] hpfs: hpfs_map_4sectors(): unaligned read
[  856.119280][ T6307] team0 (unregistering): Port device team_slave_1 removed
[  856.131655][T12209] usb 2-1: new low-speed USB device number 13 using dummy_hcd
[  856.187359][ T6307] team0 (unregistering): Port device team_slave_0 removed
[  856.297887][T12209] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  856.318790][T12209] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  856.380584][ T6075] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  856.408256][T12209] usb 2-1: config 0 descriptor??
[  856.564496][ T6075] usb 1-1: Using ep0 maxpacket: 16
[  856.630541][ T6075] usb 1-1: unable to get BOS descriptor or descriptor too short
[  856.640404][T12209] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[  856.684820][ T6075] usb 1-1: config 229 has an invalid interface number: 152 but max is 1
[  856.702661][ T6075] usb 1-1: config 229 has an invalid interface number: 12 but max is 1
[  856.723152][ T6075] usb 1-1: config 229 has no interface number 0
[  856.742720][ T6075] usb 1-1: config 229 has no interface number 1
[  856.776238][ T6075] usb 1-1: config 229 interface 152 has no altsetting 0
[  856.795968][ T6075] usb 1-1: config 229 interface 12 has no altsetting 0
[  856.833071][ T6075] usb 1-1: New USB device found, idVendor=413c, idProduct=81a3, bcdDevice=25.ca
[  856.843189][ T6075] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  856.855912][ T6075] usb 1-1: Product: syz
[  856.863711][ T6075] usb 1-1: Manufacturer: syz
[  856.873394][ T6075] usb 1-1: SerialNumber: syz
[  858.882861][T13111] chnl_net:caif_netlink_parms(): no params data found
[  859.162578][T13350] 9pnet_virtio: no channels available for device syz
[  859.843160][T13117] bridge0: port 1(bridge_slave_0) entered blocking state
[  859.850721][T13117] bridge0: port 1(bridge_slave_0) entered disabled state
[  859.922031][T13117] bridge_slave_0: entered allmulticast mode
[  859.933793][T13117] bridge_slave_0: entered promiscuous mode
[  859.949558][ T6075] usb 1-1: USB disconnect, device number 15
[  860.015473][T12209] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71
[  860.126197][T12209] asix 2-1:0.0: probe with driver asix failed with error -71
[  860.320122][T12209] usb 2-1: USB disconnect, device number 13
[  861.430816][T13356] Bluetooth: hci0: invalid length 0, exp 2 for type 0
[  861.976754][T13117] bridge0: port 2(bridge_slave_1) entered blocking state
[  862.039454][T13370] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1830'.
[  862.066164][   T30] audit: type=1400 audit(1758086581.727:71): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=13369 comm="syz.1.1830"
[  862.082150][T13117] bridge0: port 2(bridge_slave_1) entered disabled state
[  862.136725][T13117] bridge_slave_1: entered allmulticast mode
[  862.160130][T13117] bridge_slave_1: entered promiscuous mode
[  862.719893][    T9] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  862.909348][T13117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  862.920250][    T9] usb 7-1: Using ep0 maxpacket: 8
[  862.937407][T13396] vxcan1: entered allmulticast mode
[  862.949253][    T9] usb 7-1: unable to get BOS descriptor or descriptor too short
[  862.999733][    T9] usb 7-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[  863.031400][T13111] bridge0: port 1(bridge_slave_0) entered blocking state
[  863.034000][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  863.047885][T13111] bridge0: port 1(bridge_slave_0) entered disabled state
[  863.081601][    T9] usb 7-1: Product: syz
[  863.094169][    T9] usb 7-1: Manufacturer: syz
[  863.130875][T13111] bridge_slave_0: entered allmulticast mode
[  863.134187][   T10] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  863.138685][T13111] bridge_slave_0: entered promiscuous mode
[  863.158229][    T9] usb 7-1: SerialNumber: syz
[  863.254445][T13111] bridge0: port 2(bridge_slave_1) entered blocking state
[  863.332223][T13111] bridge0: port 2(bridge_slave_1) entered disabled state
[  863.398521][   T10] usb 1-1: Using ep0 maxpacket: 16
[  863.440431][T13111] bridge_slave_1: entered allmulticast mode
[  863.448775][T13111] bridge_slave_1: entered promiscuous mode
[  863.466455][    T9] usblp 7-1:1.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 2 vid 0x04B8 pid 0x0202
[  863.477968][   T10] usb 1-1: unable to get BOS descriptor or descriptor too short
[  863.480464][T13117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  863.501835][   T10] usb 1-1: config 229 has an invalid interface number: 152 but max is 1
[  863.516119][   T10] usb 1-1: config 229 has an invalid interface number: 12 but max is 1
[  863.549101][    T9] usb 7-1: USB disconnect, device number 7
[  863.557747][   T10] usb 1-1: config 229 has no interface number 0
[  863.563994][   T10] usb 1-1: config 229 has no interface number 1
[  863.587922][    T9] usblp0: removed
[  863.614032][   T10] usb 1-1: config 229 interface 152 has no altsetting 0
[  863.634347][   T10] usb 1-1: config 229 interface 12 has no altsetting 0
[  863.650216][   T10] usb 1-1: New USB device found, idVendor=413c, idProduct=81a3, bcdDevice=25.ca
[  863.670272][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  863.690408][   T10] usb 1-1: Product: syz
[  863.700061][   T10] usb 1-1: Manufacturer: syz
[  863.721656][   T10] usb 1-1: SerialNumber: syz
[  863.752007][T13411] 9pnet_virtio: no channels available for device syz
[  865.383461][T13111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  865.412599][T13111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  865.485498][T13117] team0: Port device team_slave_0 added
[  865.574136][T13117] team0: Port device team_slave_1 added
[  866.214568][   T10] usb 1-1: USB disconnect, device number 16
[  866.369284][   T30] audit: type=1400 audit(1758086586.285:72): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=13437 comm="syz.0.1843"
[  866.390112][T13438] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1843'.
[  866.411073][T13111] team0: Port device team_slave_0 added
[  866.474891][T13111] team0: Port device team_slave_1 added
[  866.514393][T13117] batman_adv: batadv0: Adding interface: batadv_slave_0
[  866.521958][T13117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  866.547841][    C0] vkms_vblank_simulate: vblank timer overrun
[  866.586599][T13117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  866.617332][T13117] batman_adv: batadv0: Adding interface: batadv_slave_1
[  866.631898][T13117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  866.657825][    C0] vkms_vblank_simulate: vblank timer overrun
[  866.836902][T13117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  867.203171][T13450] 9pnet_virtio: no channels available for device syz
[  869.456646][ T5886] Bluetooth: hci6: unexpected event for opcode 0x9103
[  870.142543][T13111] batman_adv: batadv0: Adding interface: batadv_slave_0
[  870.156206][T13111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  870.188164][T13111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  870.250821][T13111] batman_adv: batadv0: Adding interface: batadv_slave_1
[  870.258112][T13111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  870.322708][T13111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  871.596273][T13117] hsr_slave_0: entered promiscuous mode
[  871.654443][T13117] hsr_slave_1: entered promiscuous mode
[  872.516768][T13117] debugfs: 'hsr0' already exists in 'hsr'
[  872.526668][T13117] Cannot create hsr debugfs directory
[  873.249993][T13497] 9pnet_virtio: no channels available for device syz
[  873.346407][ T5886] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0
[  873.355068][ T5886] Bluetooth: hci6: Injecting HCI hardware error event
[  873.365746][ T5886] Bluetooth: hci6: hardware error 0x00
[  873.668850][T13111] hsr_slave_0: entered promiscuous mode
[  873.704969][T13111] hsr_slave_1: entered promiscuous mode
[  873.746057][T13111] debugfs: 'hsr0' already exists in 'hsr'
[  873.752970][T13111] Cannot create hsr debugfs directory
[  875.478915][ T5886] Bluetooth: hci6: Opcode 0x0c03 failed: -110
[  875.614715][ T6307] bridge_slave_1: left allmulticast mode
[  875.620407][ T6307] bridge_slave_1: left promiscuous mode
[  875.687482][ T6307] bridge0: port 2(bridge_slave_1) entered disabled state
[  877.997358][ T6307] bridge_slave_0: left allmulticast mode
[  878.063313][ T6307] bridge_slave_0: left promiscuous mode
[  878.182531][ T6307] bridge0: port 1(bridge_slave_0) entered disabled state
[  880.102146][T13552] 9pnet_virtio: no channels available for device syz
[  881.540099][ T6307] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  881.549970][T13570] loop0: detected capacity change from 0 to 1024
[  881.564917][ T6307] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  881.579233][ T6307] bond0 (unregistering): Released all slaves
[  881.590956][T13570] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  881.635702][T13570] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.1874: Invalid block bitmap block 0 in block_group 0
[  881.660160][T13570] Quota error (device loop0): write_blk: dquota write failed
[  881.668863][T13570] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  881.689059][T13570] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.1874: Failed to acquire dquot type 0
[  881.700849][T13570] EXT4-fs error (device loop0): ext4_free_blocks:6696: comm syz.0.1874: Freeing blocks not in datazone - block = 0, count = 4096
[  881.730647][T13570] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.1874: Invalid inode bitmap blk 0 in block_group 0
[  881.751571][ T1109] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-7
[  881.770430][T13570] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem
[  881.808937][ T1109] EXT4-fs error (device loop0): ext4_release_dquot:6973: comm kworker/u8:7: Failed to release dquot type 0
[  881.829280][T13570] EXT4-fs (loop0): 1 orphan inode deleted
[  881.836863][T13570] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  881.908901][ T6307] hsr_slave_0: left promiscuous mode
[  881.928661][ T6307] hsr_slave_1: left promiscuous mode
[  881.991623][ T6307] batman_adv: batadv0: Removing interface: batadv_slave_0
[  882.064162][ T6307] batman_adv: batadv0: Removing interface: batadv_slave_1
[  882.120572][   T30] audit: type=1326 audit(1758086602.827:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13574 comm="syz.1.1875" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4a0e78eba9 code=0x0
[  882.238674][T13575] CIFS mount error: No usable UNC path provided in device string!
[  882.238674][T13575] 
[  882.264177][T13575] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  883.360050][ T5865] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  884.386885][T13600] overlayfs: failed to resolve './file1': -2
[  886.406451][ T6307] team0 (unregistering): Port device team_slave_1 removed
[  886.709775][ T6307] team0 (unregistering): Port device team_slave_0 removed
[  887.055514][T13635] loop6: detected capacity change from 0 to 1024
[  887.099328][T13635] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  887.146043][T13635] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.1890: Invalid block bitmap block 0 in block_group 0
[  887.186390][T13635] Quota error (device loop6): write_blk: dquota write failed
[  887.196136][T13635] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota
[  887.207851][T13635] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.1890: Failed to acquire dquot type 0
[  887.220300][T13635] EXT4-fs error (device loop6): ext4_free_blocks:6696: comm syz.6.1890: Freeing blocks not in datazone - block = 0, count = 4096
[  887.239197][T13635] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.1890: Invalid inode bitmap blk 0 in block_group 0
[  887.253106][T13635] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem
[  887.259326][ T6301] Quota error (device loop6): do_check_range: Getting block 0 out of range 1-7
[  887.262489][T13635] EXT4-fs (loop6): 1 orphan inode deleted
[  887.278318][T13635] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  887.292145][ T6301] EXT4-fs error (device loop6): ext4_release_dquot:6973: comm kworker/u8:13: Failed to release dquot type 0
[  888.702115][ T9443] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  888.882670][   T30] audit: type=1326 audit(1758086609.927:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13647 comm="syz.7.1894" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb41ef8eba9 code=0x0
[  888.921204][T13655] CIFS mount error: No usable UNC path provided in device string!
[  888.921204][T13655] 
[  888.934857][T13655] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  889.973472][   T30] audit: type=1326 audit(1758086611.072:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13661 comm="syz.6.1896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f515338eba9 code=0x7ffc0000
[  891.753404][   T30] audit: type=1326 audit(1758086611.104:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13661 comm="syz.6.1896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f515338eba9 code=0x7ffc0000
[  891.776407][   T30] audit: type=1326 audit(1758086611.996:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13661 comm="syz.6.1896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f515338eba9 code=0x7ffc0000
[  891.800113][   T30] audit: type=1326 audit(1758086611.996:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13661 comm="syz.6.1896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f515338eba9 code=0x7ffc0000
[  891.823134][   T30] audit: type=1326 audit(1758086611.996:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13661 comm="syz.6.1896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f515338eba9 code=0x7ffc0000
[  891.872526][   T30] audit: type=1326 audit(1758086611.996:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13661 comm="syz.6.1896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f515338eba9 code=0x7ffc0000
[  892.112630][   T30] audit: type=1326 audit(1758086611.996:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13661 comm="syz.6.1896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f515338eba9 code=0x7ffc0000
[  892.254279][   T30] audit: type=1326 audit(1758086611.996:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13661 comm="syz.6.1896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f515338eba9 code=0x7ffc0000
[  892.347530][T13669] Bluetooth: received HCILL_WAKE_UP_IND in state 2
[  892.359880][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  892.419664][ T3540] Bluetooth: hci5: Frame reassembly failed (-84)
[  892.551151][   T30] audit: type=1326 audit(1758086611.996:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13661 comm="syz.6.1896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f515338eba9 code=0x7ffc0000
[  892.759476][   T30] audit: type=1326 audit(1758086611.996:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13661 comm="syz.6.1896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f515338eba9 code=0x7ffc0000
[  892.972389][   T30] audit: type=1326 audit(1758086611.996:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13661 comm="syz.6.1896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f515338eba9 code=0x7ffc0000
[  893.349166][   T30] audit: type=1326 audit(1758086611.996:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13661 comm="syz.6.1896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f515338eba9 code=0x7ffc0000
[  893.379154][   T30] audit: type=1326 audit(1758086611.996:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13661 comm="syz.6.1896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f515338eba9 code=0x7ffc0000
[  893.456600][   T30] audit: type=1326 audit(1758086611.996:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13661 comm="syz.6.1896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f515338eba9 code=0x7ffc0000
[  893.567707][   T30] audit: type=1326 audit(1758086611.996:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13661 comm="syz.6.1896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f515338eba9 code=0x7ffc0000
[  893.628161][   T30] audit: type=1326 audit(1758086612.994:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13661 comm="syz.6.1896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f515338eba9 code=0x7ffc0000
[  894.831174][ T5886] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  895.522100][T13707] loop7: detected capacity change from 0 to 1024
[  896.892386][T13707] hfsplus: failed to load extents file
[  897.467404][ T5886] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  897.492582][ T5886] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  897.510184][ T5886] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  897.552294][ T5886] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  897.561327][ T5886] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  899.476003][ T9956] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  899.500193][   T30] kauditd_printk_skb: 6 callbacks suppressed
[  899.500210][   T30] audit: type=1326 audit(1758086621.060:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13723 comm="syz.0.1911" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2bfad8eba9 code=0x0
[  899.528156][ T9956] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  899.542509][ T9956] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  899.550358][T13725] CIFS mount error: No usable UNC path provided in device string!
[  899.550358][T13725] 
[  899.566977][T13725] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  899.585906][ T9956] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  899.601375][ T9956] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  900.299503][ T9956] Bluetooth: hci5: command tx timeout
[  901.518229][ T9956] Bluetooth: hci7: command tx timeout
[  902.174727][T13717] wlan0 speed is unknown, defaulting to 1000
[  902.279965][ T9956] Bluetooth: hci5: command tx timeout
[  902.352651][T13728] wlan0 speed is unknown, defaulting to 1000
[  902.715048][   T30] audit: type=1326 audit(1758086624.432:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13738 comm="syz.0.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bfad8eba9 code=0x7ffc0000
[  902.756677][ T6310] Bluetooth: hci1: Frame reassembly failed (-84)
[  902.773722][ T6307] bridge_slave_1: left allmulticast mode
[  902.794547][   T30] audit: type=1326 audit(1758086624.432:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13738 comm="syz.0.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bfad8eba9 code=0x7ffc0000
[  902.825298][   T30] audit: type=1326 audit(1758086624.484:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13738 comm="syz.0.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2bfad8eba9 code=0x7ffc0000
[  902.850221][   T30] audit: type=1326 audit(1758086624.484:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13738 comm="syz.0.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bfad8eba9 code=0x7ffc0000
[  902.882620][ T6307] bridge_slave_1: left promiscuous mode
[  902.894626][   T30] audit: type=1326 audit(1758086624.484:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13738 comm="syz.0.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bfad8eba9 code=0x7ffc0000
[  902.932470][ T6307] bridge0: port 2(bridge_slave_1) entered disabled state
[  903.149278][   T30] audit: type=1326 audit(1758086624.484:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13738 comm="syz.0.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f2bfad8eba9 code=0x7ffc0000
[  903.190925][ T6307] bridge_slave_0: left allmulticast mode
[  903.221422][ T6307] bridge_slave_0: left promiscuous mode
[  903.240337][ T6307] bridge0: port 1(bridge_slave_0) entered disabled state
[  903.469309][   T30] audit: type=1326 audit(1758086624.484:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13738 comm="syz.0.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bfad8eba9 code=0x7ffc0000
[  903.494060][   T30] audit: type=1326 audit(1758086624.484:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13738 comm="syz.0.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bfad8eba9 code=0x7ffc0000
[  903.542910][ T5886] Bluetooth: hci7: command tx timeout
[  903.549564][   T30] audit: type=1326 audit(1758086624.484:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13738 comm="syz.0.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f2bfad8eba9 code=0x7ffc0000
[  904.441635][ T5886] Bluetooth: hci5: command tx timeout
[  904.718054][ T9956] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  906.763281][ T5886] Bluetooth: hci7: command tx timeout
[  906.768935][ T5886] Bluetooth: hci5: command tx timeout
[  908.013035][ T6307] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  908.227765][ T6307] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  908.339330][ T6307] bond0 (unregistering): Released all slaves
[  908.345934][ T5886] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  908.355945][ T5886] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  908.369165][ T5886] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  908.377402][ T5886] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  908.396509][T13787] loop0: detected capacity change from 0 to 1024
[  908.405854][ T5886] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  908.754572][ T5886] Bluetooth: hci7: command tx timeout
[  909.124649][ T6322] hfsplus: b-tree write err: -5, ino 4
[  909.187921][ T6307] hsr_slave_0: left promiscuous mode
[  909.223676][ T6307] hsr_slave_1: left promiscuous mode
[  909.243005][ T6307] batman_adv: batadv0: Removing interface: batadv_slave_0
[  909.263059][ T6307] batman_adv: batadv0: Removing interface: batadv_slave_1
[  910.357234][ T5886] Bluetooth: hci1: command tx timeout
[  911.822468][   T30] kauditd_printk_skb: 11 callbacks suppressed
[  911.822490][   T30] audit: type=1326 audit(1758086634.032:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13821 comm="syz.6.1936" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f515338eba9 code=0x0
[  911.885531][T13824] CIFS mount error: No usable UNC path provided in device string!
[  911.885531][T13824] 
[  911.920880][T13824] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  912.335060][ T5886] Bluetooth: hci1: command tx timeout
[  913.625580][ T6307] team0 (unregistering): Port device team_slave_1 removed
[  913.705167][ T6307] team0 (unregistering): Port device team_slave_0 removed
[  914.315079][ T5886] Bluetooth: hci1: command tx timeout
[  914.472543][T13838] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  915.689505][T13785] wlan0 speed is unknown, defaulting to 1000
[  916.296670][ T5886] Bluetooth: hci1: command tx timeout
[  916.758352][T13874] netlink: 'syz.6.1950': attribute type 1 has an invalid length.
[  917.785453][T13717] chnl_net:caif_netlink_parms(): no params data found
[  918.127800][T13898] netlink: 116 bytes leftover after parsing attributes in process `syz.6.1954'.
[  918.358770][T13905] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1955'.
[  918.368191][T13905] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1955'.
[  918.819386][T13905] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1955'.
[  918.879438][T13905] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1955'.
[  919.092592][ T6307] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  919.146343][ T6307] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  919.558463][T13728] chnl_net:caif_netlink_parms(): no params data found
[  919.710082][ T6307] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  919.755000][ T6307] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  920.143229][ T6307] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  920.201425][ T6307] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  920.244815][T13717] bridge0: port 1(bridge_slave_0) entered blocking state
[  920.443276][T13717] bridge0: port 1(bridge_slave_0) entered disabled state
[  920.468036][T13717] bridge_slave_0: entered allmulticast mode
[  921.114815][T13717] bridge_slave_0: entered promiscuous mode
[  921.180758][T13717] bridge0: port 2(bridge_slave_1) entered blocking state
[  921.192323][T13717] bridge0: port 2(bridge_slave_1) entered disabled state
[  921.201390][T13717] bridge_slave_1: entered allmulticast mode
[  921.209682][T13717] bridge_slave_1: entered promiscuous mode
[  921.365745][T13947] loop0: detected capacity change from 0 to 128
[  921.416430][T13947] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  921.440830][ T6307] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  921.457682][T13947] hpfs: filesystem error: improperly stopped
[  921.486478][ T6307] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  921.503224][T13947] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  921.540201][T13947] hpfs: You really don't want any checks? You are crazy...
[  921.576165][T13947] hpfs: hpfs_map_sector(): read error
[  921.613289][T13947] hpfs: code page support is disabled
[  921.664498][T13947] hpfs: hpfs_map_4sectors(): unaligned read
[  921.725140][T13947] hpfs: hpfs_map_4sectors(): unaligned read
[  921.756485][T13947] hpfs: filesystem error: unable to find root dir
[  921.770882][T13785] chnl_net:caif_netlink_parms(): no params data found
[  921.799582][T13947] hpfs: hpfs_map_4sectors(): unaligned read
[  922.953249][T13957] hpfs: hpfs_map_4sectors(): unaligned read
[  923.117843][T13961] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1965'.
[  925.555110][T13717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  926.173835][T13975] siw: device registration error -23
[  926.371824][T13728] bridge0: port 1(bridge_slave_0) entered blocking state
[  926.396161][T13728] bridge0: port 1(bridge_slave_0) entered disabled state
[  926.418789][T13728] bridge_slave_0: entered allmulticast mode
[  926.488514][T13728] bridge_slave_0: entered promiscuous mode
[  927.361166][T13717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  927.439465][T13728] bridge0: port 2(bridge_slave_1) entered blocking state
[  927.447500][T13728] bridge0: port 2(bridge_slave_1) entered disabled state
[  927.492088][T13728] bridge_slave_1: entered allmulticast mode
[  927.562715][T13728] bridge_slave_1: entered promiscuous mode
[  931.563679][T13717] team0: Port device team_slave_0 added
[  932.291829][T14008] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  932.880560][T13717] team0: Port device team_slave_1 added
[  932.896785][   T30] audit: type=1326 audit(1758086656.140:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14016 comm="syz.7.1978" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb41ef8eba9 code=0x0
[  932.934824][T14021] CIFS mount error: No usable UNC path provided in device string!
[  932.934824][T14021] 
[  932.977561][T14021] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  933.046169][T13728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  934.397641][ T5884] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  934.597540][T13785] bridge0: port 1(bridge_slave_0) entered blocking state
[  934.613322][T13785] bridge0: port 1(bridge_slave_0) entered disabled state
[  934.620822][T13785] bridge_slave_0: entered allmulticast mode
[  934.628740][T13785] bridge_slave_0: entered promiscuous mode
[  934.640204][ T5884] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  934.684649][T13717] batman_adv: batadv0: Adding interface: batadv_slave_0
[  934.699554][ T5884] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  934.704540][T13717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  934.728153][ T5884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  934.735802][T13717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  934.754324][ T6307] bridge_slave_1: left allmulticast mode
[  934.764047][ T6307] bridge_slave_1: left promiscuous mode
[  934.784700][ T6307] bridge0: port 2(bridge_slave_1) entered disabled state
[  934.796365][ T5884] usb 1-1: config 0 descriptor??
[  934.805185][ T6307] bridge_slave_0: left allmulticast mode
[  934.810287][ T5884] pwc: Askey VC010 type 2 USB webcam detected.
[  934.814182][ T6307] bridge_slave_0: left promiscuous mode
[  934.822652][ T6307] bridge0: port 1(bridge_slave_0) entered disabled state
[  934.841508][ T6307] bridge_slave_1: left allmulticast mode
[  934.850293][ T6307] bridge_slave_1: left promiscuous mode
[  934.900089][ T6307] bridge0: port 2(bridge_slave_1) entered disabled state
[  934.911496][ T6307] bridge_slave_0: left allmulticast mode
[  934.917129][ T6307] bridge_slave_0: left promiscuous mode
[  934.938764][ T6307] bridge0: port 1(bridge_slave_0) entered disabled state
[  935.204721][ T5884] pwc: recv_control_msg error -32 req 02 val 2b00
[  935.220241][ T5884] pwc: recv_control_msg error -32 req 02 val 2700
[  935.238170][ T5884] pwc: recv_control_msg error -32 req 02 val 2c00
[  935.252587][ T5884] pwc: recv_control_msg error -32 req 04 val 1000
[  935.264565][ T5884] pwc: recv_control_msg error -32 req 04 val 1300
[  935.281867][ T5884] pwc: recv_control_msg error -32 req 04 val 1400
[  935.288880][ T6307] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  935.290860][ T5884] pwc: recv_control_msg error -32 req 02 val 2000
[  935.315574][ T6307] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  935.320228][ T5884] pwc: recv_control_msg error -32 req 02 val 2100
[  935.333105][ T6307] bond0 (unregistering): Released all slaves
[  935.337592][ T5884] pwc: recv_control_msg error -32 req 04 val 1500
[  935.351341][ T5884] pwc: recv_control_msg error -32 req 02 val 2500
[  935.553336][ T5884] pwc: recv_control_msg error -71 req 02 val 2600
[  935.576560][ T5884] pwc: recv_control_msg error -71 req 02 val 2900
[  935.601646][ T5884] pwc: recv_control_msg error -71 req 02 val 2800
[  935.622323][ T5884] pwc: recv_control_msg error -71 req 04 val 1100
[  935.647738][ T5884] pwc: recv_control_msg error -71 req 04 val 1200
[  935.678826][ T5884] pwc: Registered as video103.
[  935.701805][ T5884] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input37
[  935.799606][ T5884] usb 1-1: USB disconnect, device number 17
[  937.351153][ T6307] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  937.542632][ T6307] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  937.665084][ T6307] bond0 (unregistering): Released all slaves
[  938.823445][ T6307] bond1 (unregistering): Released all slaves
[  940.843223][ T6307] bond2 (unregistering): Released all slaves
[  940.872718][ T6307] bond3 (unregistering): Released all slaves
[  940.967151][T13728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  941.121787][T13785] bridge0: port 2(bridge_slave_1) entered blocking state
[  941.150489][T13785] bridge0: port 2(bridge_slave_1) entered disabled state
[  941.168149][T13785] bridge_slave_1: entered allmulticast mode
[  941.209964][T13785] bridge_slave_1: entered promiscuous mode
[  941.439111][T13717] batman_adv: batadv0: Adding interface: batadv_slave_1
[  941.643338][T13717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  941.743754][T13717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  941.858320][T14089] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1990'.
[  942.007343][   T30] audit: type=1326 audit(1758086665.730:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14090 comm="syz.7.1991" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb41ef8eba9 code=0x0
[  942.052666][T13785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  942.072166][T13785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  942.086453][T14094] CIFS mount error: No usable UNC path provided in device string!
[  942.086453][T14094] 
[  942.099638][T14094] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  942.184323][T13728] team0: Port device team_slave_0 added
[  943.027009][T14102] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1995'.
[  943.062251][T13728] team0: Port device team_slave_1 added
[  943.134113][T13785] team0: Port device team_slave_0 added
[  943.388186][T13785] team0: Port device team_slave_1 added
[  943.428876][T14112] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1996'.
[  943.493654][T13717] hsr_slave_0: entered promiscuous mode
[  943.506972][T13717] hsr_slave_1: entered promiscuous mode
[  943.619517][T13728] batman_adv: batadv0: Adding interface: batadv_slave_0
[  943.635968][T13728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  943.674090][T13728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  943.740121][ T6307] hsr_slave_0: left promiscuous mode
[  943.773788][ T6307] hsr_slave_1: left promiscuous mode
[  943.823164][ T6307] batman_adv: batadv0: Removing interface: batadv_slave_0
[  943.852758][ T6307] batman_adv: batadv0: Removing interface: batadv_slave_1
[  943.942798][ T6307] hsr_slave_0: left promiscuous mode
[  944.134286][ T6307] hsr_slave_1: left promiscuous mode
[  944.544535][ T6307] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  944.551948][ T6307] batman_adv: batadv0: Removing interface: batadv_slave_0
[  944.592866][ T6307] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  944.618352][ T6307] batman_adv: batadv0: Removing interface: batadv_slave_1
[  945.112824][ T6307] veth1_macvtap: left promiscuous mode
[  945.135426][ T6307] veth0_macvtap: left promiscuous mode
[  945.157221][ T6307] veth1_vlan: left promiscuous mode
[  945.162494][ T6307] veth0_vlan: left promiscuous mode
[  946.415383][ T6307] team0 (unregistering): Port device team_slave_1 removed
[  946.443823][ T6307] team0 (unregistering): Port device team_slave_0 removed
[  946.625677][ T6307] pim6reg (unregistering): left allmulticast mode
[  946.972524][ T6307] team0 (unregistering): Port device team_slave_1 removed
[  947.018134][ T6307] team0 (unregistering): Port device team_slave_0 removed
[  947.453676][T13785] batman_adv: batadv0: Adding interface: batadv_slave_0
[  947.462523][T13785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  947.488511][T13785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  947.501425][T13785] batman_adv: batadv0: Adding interface: batadv_slave_1
[  947.508426][T13785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  947.537673][T13785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  947.598186][T13728] batman_adv: batadv0: Adding interface: batadv_slave_1
[  947.605918][T13728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  947.641791][T13728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  948.002068][T14129] overlayfs: failed to resolve './file0': -2
[  948.029733][ T9956] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  948.044291][ T9956] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  948.052844][ T9956] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  948.063128][ T9956] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  948.070855][ T9956] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  948.246136][T14139] netlink: 'syz.0.2001': attribute type 16 has an invalid length.
[  948.314396][T14139] netlink: 'syz.0.2001': attribute type 17 has an invalid length.
[  948.512169][T14139] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  948.568661][    C0] vcan0: j1939_tp_rxtimer: 0xffff88802f823400: rx timeout, send abort
[  948.594819][T13785] hsr_slave_0: entered promiscuous mode
[  948.620466][T13785] hsr_slave_1: entered promiscuous mode
[  948.637174][T13785] debugfs: 'hsr0' already exists in 'hsr'
[  948.701646][T13785] Cannot create hsr debugfs directory
[  949.045174][    C0] vcan0: j1939_tp_rxtimer: 0xffff888054637400: rx timeout, send abort
[  949.053830][    C0] vcan0: j1939_tp_rxtimer: 0xffff88802f823400: abort rx timeout. Force session deactivation
[  949.233677][T14130] wlan0 speed is unknown, defaulting to 1000
[  949.529757][    C0] vcan0: j1939_tp_rxtimer: 0xffff888054637400: abort rx timeout. Force session deactivation
[  950.051868][ T9956] Bluetooth: hci2: command tx timeout
[  950.817275][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  952.058365][ T9956] Bluetooth: hci2: command tx timeout
[  953.201224][ T5886] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  953.212227][ T5886] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  953.220291][ T5886] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  953.233184][ T5886] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  953.241237][ T5886] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  953.388386][T14207] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2017'.
[  953.406534][   T30] audit: type=1400 audit(1758086677.672:121): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=14206 comm="syz.6.2017"
[  953.561352][ T9912] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  953.746327][ T9912] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  953.765617][ T9912] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  953.828673][ T9912] usb 1-1: config 0 descriptor??
[  953.998805][ T9956] Bluetooth: hci2: command tx timeout
[  954.039396][ T9912] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  954.127417][T14130] chnl_net:caif_netlink_parms(): no params data found
[  954.231608][ T9912] [drm:udl_init] *ERROR* Selecting channel failed
[  954.295733][ T9912] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2
[  954.322470][ T9912] [drm] Initialized udl on minor 2
[  954.340139][ T9912] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  954.363793][ T9912] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[  954.388094][ T5960] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  954.413479][ T9912] usb 1-1: USB disconnect, device number 18
[  954.434620][ T5960] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[  954.548254][T14199] wlan0 speed is unknown, defaulting to 1000
[  955.080935][T14130] bridge0: port 1(bridge_slave_0) entered blocking state
[  955.093933][T14130] bridge0: port 1(bridge_slave_0) entered disabled state
[  955.101117][T14130] bridge_slave_0: entered allmulticast mode
[  955.109322][T14130] bridge_slave_0: entered promiscuous mode
[  955.150735][T14130] bridge0: port 2(bridge_slave_1) entered blocking state
[  955.164757][T14130] bridge0: port 2(bridge_slave_1) entered disabled state
[  955.174248][T14130] bridge_slave_1: entered allmulticast mode
[  955.187080][T14130] bridge_slave_1: entered promiscuous mode
[  955.217859][ T9956] Bluetooth: hci3: command tx timeout
[  955.291761][T14130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  955.323048][T13785] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  955.386857][T14130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  955.400429][T13785] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  955.482898][T13785] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  955.516271][T14130] team0: Port device team_slave_0 added
[  955.537786][T13785] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  955.568368][T14130] team0: Port device team_slave_1 added
[  955.978851][ T9956] Bluetooth: hci2: command tx timeout
[  956.013787][T14130] batman_adv: batadv0: Adding interface: batadv_slave_0
[  956.769500][T14130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  956.848865][T14130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  957.142040][T14130] batman_adv: batadv0: Adding interface: batadv_slave_1
[  957.149451][T14130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  957.176087][T14130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  957.197785][ T9956] Bluetooth: hci3: command tx timeout
[  957.508702][T14130] hsr_slave_0: entered promiscuous mode
[  957.516432][T14130] hsr_slave_1: entered promiscuous mode
[  957.523317][T14130] debugfs: 'hsr0' already exists in 'hsr'
[  957.529084][T14130] Cannot create hsr debugfs directory
[  957.539535][T14199] chnl_net:caif_netlink_parms(): no params data found
[  958.036729][ T6307] bridge_slave_1: left allmulticast mode
[  958.042412][ T6307] bridge_slave_1: left promiscuous mode
[  958.057989][ T6307] bridge0: port 2(bridge_slave_1) entered disabled state
[  958.069279][ T6307] bridge_slave_0: left allmulticast mode
[  958.080221][ T6307] bridge_slave_0: left promiscuous mode
[  958.104918][ T6307] bridge0: port 1(bridge_slave_0) entered disabled state
[  959.178429][ T9956] Bluetooth: hci3: command tx timeout
[  959.257501][ T6307] bridge_slave_1: left allmulticast mode
[  959.283883][ T6307] bridge_slave_1: left promiscuous mode
[  959.292584][ T6307] bridge0: port 2(bridge_slave_1) entered disabled state
[  959.323365][ T6307] bridge_slave_0: left allmulticast mode
[  959.329081][ T6307] bridge_slave_0: left promiscuous mode
[  959.336727][ T6307] bridge0: port 1(bridge_slave_0) entered disabled state
[  959.546050][ T6307] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  959.558668][ T6307] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  959.569790][ T6307] bond0 (unregistering): Released all slaves
[  959.667813][ T6307] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  959.679631][ T6307] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  959.690493][ T6307] bond0 (unregistering): Released all slaves
[  959.783932][T14199] bridge0: port 1(bridge_slave_0) entered blocking state
[  959.813271][T14199] bridge0: port 1(bridge_slave_0) entered disabled state
[  959.822515][T14199] bridge_slave_0: entered allmulticast mode
[  959.841866][T14199] bridge_slave_0: entered promiscuous mode
[  959.859765][T14199] bridge0: port 2(bridge_slave_1) entered blocking state
[  959.883272][T14199] bridge0: port 2(bridge_slave_1) entered disabled state
[  959.893012][T14199] bridge_slave_1: entered allmulticast mode
[  959.917477][T14199] bridge_slave_1: entered promiscuous mode
[  960.126497][T13785] 8021q: adding VLAN 0 to HW filter on device bond0
[  960.189172][ T6307] hsr_slave_0: left promiscuous mode
[  960.195087][ T6307] hsr_slave_1: left promiscuous mode
[  960.203063][ T6307] batman_adv: batadv0: Removing interface: batadv_slave_0
[  960.212079][ T6307] batman_adv: batadv0: Removing interface: batadv_slave_1
[  960.220880][ T6307] batman_adv: batadv0: Removing interface: batadv_slave_0
[  960.228813][ T6307] batman_adv: batadv0: Removing interface: batadv_slave_1
[  960.995632][ T6307] team0 (unregistering): Port device team_slave_1 removed
[  961.168243][ T9956] Bluetooth: hci3: command tx timeout
[  961.204242][ T6307] team0 (unregistering): Port device team_slave_0 removed
[  962.009865][ T5886] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  962.020121][ T5886] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  962.028107][ T5886] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  962.029122][ T6307] team0 (unregistering): Port device team_slave_1 removed
[  962.090429][ T6307] team0 (unregistering): Port device team_slave_0 removed
[  962.109430][ T5886] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  962.120091][ T5886] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  963.287746][T14199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  963.354095][T14199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  963.521865][T14199] team0: Port device team_slave_0 added
[  963.580213][T14130] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  963.641610][T14199] team0: Port device team_slave_1 added
[  963.770643][T14130] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  964.285445][ T9956] Bluetooth: hci5: command tx timeout
[  964.425275][T14130] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  964.971733][T14303] wlan0 speed is unknown, defaulting to 1000
[  964.973328][T14199] batman_adv: batadv0: Adding interface: batadv_slave_0
[  965.062577][T14199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  965.864883][T14199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  966.047434][T14130] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  966.201914][T14199] batman_adv: batadv0: Adding interface: batadv_slave_1
[  966.262428][ T9956] Bluetooth: hci5: command tx timeout
[  966.271978][T14199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  966.364874][T14199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  967.026979][ T5886] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  967.040113][ T5886] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  967.050770][ T5886] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  967.061682][ T5886] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  967.083883][ T5886] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  967.706287][T14199] hsr_slave_0: entered promiscuous mode
[  967.720020][T14199] hsr_slave_1: entered promiscuous mode
[  968.251792][ T9956] Bluetooth: hci5: command tx timeout
[  968.282941][T14351] wlan0 speed is unknown, defaulting to 1000
[  969.084170][ T9956] Bluetooth: hci1: command tx timeout
[  969.814333][ T6307] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  969.927127][T14303] chnl_net:caif_netlink_parms(): no params data found
[  970.217225][ T6307] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  970.232132][ T9956] Bluetooth: hci5: command tx timeout
[  971.061209][ T9956] Bluetooth: hci1: command tx timeout
[  971.174294][ T6307] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  972.164980][ T6307] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  972.242805][T14303] bridge0: port 1(bridge_slave_0) entered blocking state
[  972.249999][T14303] bridge0: port 1(bridge_slave_0) entered disabled state
[  972.265862][T14303] bridge_slave_0: entered allmulticast mode
[  972.274420][T14303] bridge_slave_0: entered promiscuous mode
[  972.361440][T14303] bridge0: port 2(bridge_slave_1) entered blocking state
[  972.371099][T14303] bridge0: port 2(bridge_slave_1) entered disabled state
[  972.393886][T14303] bridge_slave_1: entered allmulticast mode
[  972.401975][T14303] bridge_slave_1: entered promiscuous mode
[  972.432497][ T9912] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  972.550258][T14303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  972.561659][T14351] chnl_net:caif_netlink_parms(): no params data found
[  972.578730][T14303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  972.609475][ T9912] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  972.621608][ T9912] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  972.631449][ T9912] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  972.648537][ T9912] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  972.682533][ T9912] usb 7-1: config 0 descriptor??
[  972.706402][T14130] 8021q: adding VLAN 0 to HW filter on device bond0
[  972.717394][ T5960] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  972.745090][T14303] team0: Port device team_slave_0 added
[  972.754001][T14303] team0: Port device team_slave_1 added
[  972.906703][ T5960] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  972.918783][ T5960] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  972.927993][T14303] batman_adv: batadv0: Adding interface: batadv_slave_0
[  972.935840][ T5960] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  972.947854][T14303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  972.973928][ T5960] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  972.976468][T14303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  973.005427][ T5960] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  973.041167][ T9956] Bluetooth: hci1: command tx timeout
[  973.049044][ T5960] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  973.059081][ T5960] usb 1-1: invalid MIDI out EP 0
[  973.098627][ T9912] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0
[  973.115043][ T9912] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0
[  973.132552][ T9912] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0
[  973.139576][ T9912] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0
[  973.147278][ T9912] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0
[  973.158791][ T9912] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0
[  973.172981][ T9912] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0
[  973.179071][T14077] udevd[14077]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  973.215322][ T5960] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22
[  973.233380][ T9912] cp2112 0003:10C4:EA90.0009: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.6-1/input0
[  973.259140][T14303] batman_adv: batadv0: Adding interface: batadv_slave_1
[  973.276347][T14303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  973.305581][ T6075] usb 1-1: USB disconnect, device number 19
[  973.310085][T14303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  973.325628][ T9912] cp2112 0003:10C4:EA90.0009: Part Number: 0x44 Device Version: 0x08
[  973.439044][T14351] bridge0: port 1(bridge_slave_0) entered blocking state
[  973.447653][T14351] bridge0: port 1(bridge_slave_0) entered disabled state
[  973.461742][T14351] bridge_slave_0: entered allmulticast mode
[  973.470065][T14351] bridge_slave_0: entered promiscuous mode
[  973.548279][T14351] bridge0: port 2(bridge_slave_1) entered blocking state
[  973.555989][T14351] bridge0: port 2(bridge_slave_1) entered disabled state
[  973.563165][T14351] bridge_slave_1: entered allmulticast mode
[  973.570989][T14351] bridge_slave_1: entered promiscuous mode
[  973.589166][T14130] 8021q: adding VLAN 0 to HW filter on device team0
[  973.696455][T14303] hsr_slave_0: entered promiscuous mode
[  973.704324][T14303] hsr_slave_1: entered promiscuous mode
[  973.712688][T14303] debugfs: 'hsr0' already exists in 'hsr'
[  973.725637][T14303] Cannot create hsr debugfs directory
[  973.790923][T14351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  973.810017][T14351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  973.823248][T14199] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  973.964256][T14199] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  973.987316][T14199] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  974.008676][T11985] bridge0: port 1(bridge_slave_0) entered blocking state
[  974.015814][T11985] bridge0: port 1(bridge_slave_0) entered forwarding state
[  974.056699][T14351] team0: Port device team_slave_0 added
[  974.063025][T14199] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  974.108816][ T6301] bridge0: port 2(bridge_slave_1) entered blocking state
[  974.115941][ T6301] bridge0: port 2(bridge_slave_1) entered forwarding state
[  974.132585][   T90] usb 7-1: USB disconnect, device number 8
[  974.153432][T14351] team0: Port device team_slave_1 added
[  974.275832][T14351] batman_adv: batadv0: Adding interface: batadv_slave_0
[  974.284000][T14351] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  974.314079][T14351] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  974.399508][T14351] batman_adv: batadv0: Adding interface: batadv_slave_1
[  974.411961][T14351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  974.484214][T14351] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  975.060067][ T9956] Bluetooth: hci1: command tx timeout
[  975.463100][T14351] hsr_slave_0: entered promiscuous mode
[  975.488722][T14444] fuse: Unknown parameter 'group_i00000000000000000000'
[  975.507451][T14351] hsr_slave_1: entered promiscuous mode
[  975.545113][T14351] debugfs: 'hsr0' already exists in 'hsr'
[  975.550826][T14351] Cannot create hsr debugfs directory
[  975.851418][ T6307] bridge_slave_1: left allmulticast mode
[  975.864999][ T6307] bridge_slave_1: left promiscuous mode
[  975.871047][ T6307] bridge0: port 2(bridge_slave_1) entered disabled state
[  975.898767][ T6307] bridge_slave_0: left allmulticast mode
[  975.925923][ T6307] bridge_slave_0: left promiscuous mode
[  975.953025][ T6307] bridge0: port 1(bridge_slave_0) entered disabled state
[  978.974706][ T6307] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  978.996662][ T6307] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  979.040828][ T6307] bond0 (unregistering): Released all slaves
[  979.479063][   T24] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  979.724398][ T6307] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  979.734494][   T24] usb 7-1: Using ep0 maxpacket: 8
[  979.757044][   T24] usb 7-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config
[  979.767615][   T24] usb 7-1: config 6 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  979.783530][   T24] usb 7-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[  979.793530][ T6307] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  979.794860][   T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  979.812324][ T6307] bond0 (unregistering): Released all slaves
[  979.815519][   T24] usb 7-1: Product: syz
[  979.823014][   T24] usb 7-1: Manufacturer: syz
[  979.828835][   T24] usb 7-1: SerialNumber: syz
[  979.862516][   T24] hso 7-1:6.0: Can't find BULK IN endpoint
[  980.095622][   T24] usb 7-1: USB disconnect, device number 9
[  980.760683][T14475] fuse: Unknown parameter 'group_i00000000000000000000'
[  980.899695][ T6307] hsr_slave_0: left promiscuous mode
[  980.949857][ T6307] hsr_slave_1: left promiscuous mode
[  980.963907][ T6307] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  980.971308][ T6307] batman_adv: batadv0: Removing interface: batadv_slave_0
[  980.992167][ T6307] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  981.010252][ T6307] batman_adv: batadv0: Removing interface: batadv_slave_1
[  981.075087][ T6307] hsr_slave_0: left promiscuous mode
[  981.209347][ T6307] hsr_slave_1: left promiscuous mode
[  981.216776][ T6307] batman_adv: batadv0: Removing interface: batadv_slave_0
[  981.298471][ T6301] Bluetooth: hci4: Frame reassembly failed (-84)
[  981.311047][   T30] audit: type=1326 audit(1758086706.922:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14479 comm="syz.6.2067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f515338eba9 code=0x7ffc0000
[  981.354023][ T6307] batman_adv: batadv0: Removing interface: batadv_slave_1
[  981.362791][   T30] audit: type=1326 audit(1758086706.922:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14479 comm="syz.6.2067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f515338eba9 code=0x7ffc0000
[  981.385567][   T30] audit: type=1326 audit(1758086706.922:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14479 comm="syz.6.2067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f515338eba9 code=0x7ffc0000
[  981.410292][   T30] audit: type=1326 audit(1758086706.922:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14479 comm="syz.6.2067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f515338eba9 code=0x7ffc0000
[  981.441519][   T30] audit: type=1326 audit(1758086706.922:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14479 comm="syz.6.2067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f515338eba9 code=0x7ffc0000
[  981.473767][   T30] audit: type=1326 audit(1758086706.922:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14479 comm="syz.6.2067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f515338eba9 code=0x7ffc0000
[  981.484671][ T6307] veth1_macvtap: left promiscuous mode
[  981.519214][   T30] audit: type=1326 audit(1758086706.922:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14479 comm="syz.6.2067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f515338eba9 code=0x7ffc0000
[  981.563295][ T6307] veth0_macvtap: left promiscuous mode
[  981.568989][ T6307] veth1_vlan: left promiscuous mode
[  981.580411][ T6307] veth0_vlan: left promiscuous mode
[  982.620847][   T30] audit: type=1326 audit(1758086706.922:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14479 comm="syz.6.2067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f515338eba9 code=0x7ffc0000
[  982.658931][   T30] audit: type=1326 audit(1758086706.922:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14479 comm="syz.6.2067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f515338eba9 code=0x7ffc0000
[  982.691165][   T30] audit: type=1326 audit(1758086706.922:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14479 comm="syz.6.2067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f515338eba9 code=0x7ffc0000
[  983.124078][ T5884] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  983.175177][ T6307] team0 (unregistering): Port device team_slave_1 removed
[  983.217597][ T6307] team0 (unregistering): Port device team_slave_0 removed
[  983.247824][ T5886] Bluetooth: hci4: command 0x1003 tx timeout
[  983.253892][ T9956] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  983.296907][ T5884] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  983.313512][ T5884] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  983.324682][ T5884] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  983.338313][ T5884] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  983.348785][ T5884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  983.382690][ T5884] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  983.392307][ T5884] usb 1-1: invalid MIDI out EP 0
[  983.539868][ T5884] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22
[  983.622493][ T5884] usb 1-1: USB disconnect, device number 20
[  984.822894][ T6307] team0 (unregistering): Port device team_slave_1 removed
[  984.893211][ T6307] team0 (unregistering): Port device team_slave_0 removed
[  985.735118][T14199] 8021q: adding VLAN 0 to HW filter on device bond0
[  986.011119][T14130] 8021q: adding VLAN 0 to HW filter on device batadv0
[  986.091122][T14199] 8021q: adding VLAN 0 to HW filter on device team0
[  987.063496][T14199] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  987.074104][T14199] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  987.098422][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  987.105581][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  987.145149][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  987.152320][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  987.173616][T14303] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  987.203494][T14303] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  987.210656][T14518] fuse: Unknown parameter 'group_id00000000000000000000'
[  987.442482][T14513] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  987.689721][T14303] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  987.924560][T14303] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  988.150624][T14514] syzkaller0: entered promiscuous mode
[  988.206294][T14514] syzkaller0: entered allmulticast mode
[  988.237089][T14524] tipc: Resetting bearer <eth:syzkaller0>
[  988.325450][T14510] tipc: Resetting bearer <eth:syzkaller0>
[  988.357370][T14510] tipc: Disabling bearer <eth:syzkaller0>
[  990.029113][T14199] 8021q: adding VLAN 0 to HW filter on device batadv0
[  990.182512][T14549] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  990.310057][T14130] veth0_vlan: entered promiscuous mode
[  990.344629][T14130] veth1_vlan: entered promiscuous mode
[  990.401067][ T6005] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  990.582054][T13670] wlan0 speed is unknown, defaulting to 1000
[  990.588084][T13670] syz2: Port: 1 Link DOWN
[  990.606962][ T6005] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  990.627612][ T6005] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  990.672364][ T6005] usb 7-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  990.691918][T14551] ------------[ cut here ]------------
[  990.697703][T14551] WARNING: CPU: 1 PID: 14551 at net/mac80211/tx.c:6202 ieee80211_tx_skb_tid+0x380/0x420
[  990.707496][T14551] Modules linked in:
[  990.711551][T14551] CPU: 1 UID: 0 PID: 14551 Comm: syz.0.2079 Not tainted syzkaller #0 PREEMPT(full) 
[  990.720958][T14551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  990.731064][T14551] RIP: 0010:ieee80211_tx_skb_tid+0x380/0x420
[  990.737088][T14551] Code: a9 a3 f6 e9 b1 fe ff ff e8 3d ce c5 f6 90 0f 0b 90 e9 1f fe ff ff e8 2f ce c5 f6 90 0f 0b 90 e9 2a fe ff ff e8 21 ce c5 f6 90 <0f> 0b 90 e8 58 e2 fd ff 31 ff 48 8b 34 24 ba 02 00 00 00 48 83 c4
[  990.756766][T14551] RSP: 0018:ffffc90002e872d8 EFLAGS: 00010287
[  990.762877][T14551] RAX: ffffffff8af9ef3f RBX: ffffffff8af9ebef RCX: 0000000000080000
[  990.770885][T14551] RDX: ffffc90013040000 RSI: 000000000002d764 RDI: 000000000002d765
[  990.778886][T14551] RBP: 00000000ffffffff R08: 0000000000000000 R09: ffffffff8af9ebef
[  990.786858][T14551] R10: dffffc0000000000 R11: ffffed100a1f70de R12: ffff88804f364d80
[  990.794869][T14551] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000
[  990.798125][ T9912] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  990.802868][T14551] FS:  00007f2bfbc326c0(0000) GS:ffff888125d15000(0000) knlGS:0000000000000000
[  990.819331][T14551] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  990.825914][T14551] CR2: 00007f62c2650e9c CR3: 00000000605c7000 CR4: 0000000000350ef0
[  990.833923][T14551] Call Trace:
[  990.837232][T14551]  <TASK>
[  990.840168][T14551]  mesh_plink_frame_tx+0x734/0xc10
[  990.845347][T14551]  ? __pfx_mesh_plink_frame_tx+0x10/0x10
[  990.850999][T14551]  ? ieee80211_mps_set_sta_local_pm+0xb1/0x310
[  990.857202][T14551]  ? srso_alias_return_thunk+0x5/0xfbef5
[  990.862856][T14551]  mesh_plink_deactivate+0x18e/0x2f0
[  990.868188][T14551]  ? srso_alias_return_thunk+0x5/0xfbef5
[  990.873871][T14551]  mesh_sta_cleanup+0x42/0x150
[  990.878654][T14551]  cleanup_single_sta+0x40f/0x660
[  990.883729][T14551]  __sta_info_flush+0x5e4/0x710
[  990.888601][T14551]  ? __pfx___sta_info_flush+0x10/0x10
[  990.894018][T14551]  ? srso_alias_return_thunk+0x5/0xfbef5
[  990.899669][T14551]  ieee80211_do_stop+0x399/0x1fb0
[  990.904730][T14551]  ? srso_alias_return_thunk+0x5/0xfbef5
[  990.910368][T14551]  ? __lock_acquire+0xab9/0xd20
[  990.915266][T14551]  ? srso_alias_return_thunk+0x5/0xfbef5
[  990.920895][T14551]  ? do_raw_spin_lock+0x121/0x290
[  990.925970][T14551]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  990.931393][T14551]  ? __pfx_ieee80211_do_stop+0x10/0x10
[  990.936866][T14551]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  990.942831][T14551]  ? srso_alias_return_thunk+0x5/0xfbef5
[  990.948473][T14551]  ? lockdep_hardirqs_on+0x9c/0x150
[  990.953716][T14551]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  990.960099][T14551]  ? wiphy_work_cancel+0x1eb/0x3c0
[  990.965235][T14551]  ieee80211_stop+0x1b1/0x240
[  990.969962][T14551]  ? __pfx_ieee80211_stop+0x10/0x10
[  990.975171][T14551]  __dev_close_many+0x364/0x6f0
[  990.980072][T14551]  ? __pfx___dev_close_many+0x10/0x10
[  990.985441][T14551]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  990.991382][T14551]  ? lockdep_hardirqs_on+0x9c/0x150
[  990.996597][T14551]  ? srso_alias_return_thunk+0x5/0xfbef5
[  991.002268][T14551]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  991.008213][T14551]  netif_close_many+0x225/0x410
[  991.013067][T14551]  ? srso_alias_return_thunk+0x5/0xfbef5
[  991.018743][T14551]  ? __pfx_netif_close_many+0x10/0x10
[  991.024115][T14551]  ? __mutex_lock+0xd3b/0x1350
[  991.028916][T14551]  ? srso_alias_return_thunk+0x5/0xfbef5
[  991.034564][T14551]  ? __lock_acquire+0xab9/0xd20
[  991.039471][T14551]  ? __mutex_lock+0x5bb/0x1350
[  991.044243][T14551]  netif_close+0x158/0x210
[  991.048697][T14551]  ? __pfx_netif_close+0x10/0x10
[  991.053643][T14551]  ? __pfx___mutex_lock+0x10/0x10
[  991.058711][T14551]  dev_close+0x10a/0x220
[  991.062973][T14551]  cfg80211_shutdown_all_interfaces+0xd4/0x220
[  991.069165][T14551]  ? __pfx_cfg80211_rfkill_set_block+0x10/0x10
[  991.075360][T14551]  cfg80211_rfkill_set_block+0x2d/0x50
[  991.080825][T14551]  rfkill_set_block+0x1d2/0x440
[  991.085725][T14551]  rfkill_fop_write+0x44b/0x570
[  991.090587][T14551]  ? __pfx_rfkill_fop_write+0x10/0x10
[  991.096003][T14551]  ? srso_alias_return_thunk+0x5/0xfbef5
[  991.101640][T14551]  ? __pfx_security_file_permission+0x10/0x10
[  991.107757][T14551]  ? srso_alias_return_thunk+0x5/0xfbef5
[  991.113432][T14551]  ? rw_verify_area+0x255/0x4d0
[  991.118291][T14551]  ? __lock_acquire+0xab9/0xd20
[  991.123179][T14551]  ? __pfx_rfkill_fop_write+0x10/0x10
[  991.128561][T14551]  vfs_write+0x27e/0xb30
[  991.132863][T14551]  ? __pfx_vfs_write+0x10/0x10
[  991.137636][T14551]  ? srso_alias_return_thunk+0x5/0xfbef5
[  991.143313][T14551]  ? __fget_files+0x2a/0x420
[  991.147917][T14551]  ? __fget_files+0x2a/0x420
[  991.152538][T14551]  ? srso_alias_return_thunk+0x5/0xfbef5
[  991.158173][T14551]  ? __fget_files+0x3a0/0x420
[  991.162883][T14551]  ? __fget_files+0x2a/0x420
[  991.167472][T14551]  ? srso_alias_return_thunk+0x5/0xfbef5
[  991.173136][T14551]  ksys_write+0x145/0x250
[  991.177496][T14551]  ? __pfx_ksys_write+0x10/0x10
[  991.182376][T14551]  ? rcu_is_watching+0x15/0xb0
[  991.187145][T14551]  ? do_syscall_64+0xbe/0x3b0
[  991.191855][T14551]  do_syscall_64+0xfa/0x3b0
[  991.196360][T14551]  ? lockdep_hardirqs_on+0x9c/0x150
[  991.201584][T14551]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  991.207687][T14551]  ? srso_alias_return_thunk+0x5/0xfbef5
[  991.213339][T14551]  ? exc_page_fault+0x9f/0xf0
[  991.218059][T14551]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  991.223949][T14551] RIP: 0033:0x7f2bfad8eba9
[  991.228403][T14551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  991.248033][T14551] RSP: 002b:00007f2bfbc32038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  991.255175][ T9912] usb 1-1: device descriptor read/64, error -71
[  991.256480][T14551] RAX: ffffffffffffffda RBX: 00007f2bfafd6360 RCX: 00007f2bfad8eba9
[  991.270631][T14551] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 000000000000000b
[  991.278623][T14551] RBP: 00007f2bfae11e19 R08: 0000000000000000 R09: 0000000000000000
[  991.286624][T14551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  991.294625][T14551] R13: 00007f2bfafd63f8 R14: 00007f2bfafd6360 R15: 00007ffef4adc938
[  991.302654][T14551]  </TASK>
[  991.305667][T14551] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  991.312926][T14551] CPU: 1 UID: 0 PID: 14551 Comm: syz.0.2079 Not tainted syzkaller #0 PREEMPT(full) 
[  991.322294][T14551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  991.332328][T14551] Call Trace:
[  991.335586][T14551]  <TASK>
[  991.338503][T14551]  dump_stack_lvl+0x99/0x250
[  991.343087][T14551]  ? __asan_memcpy+0x40/0x70
[  991.347664][T14551]  ? __pfx_dump_stack_lvl+0x10/0x10
[  991.352854][T14551]  ? __pfx__printk+0x10/0x10
[  991.357449][T14551]  ? srso_alias_return_thunk+0x5/0xfbef5
[  991.363079][T14551]  vpanic+0x281/0x750
[  991.367072][T14551]  ? __pfx__printk+0x10/0x10
[  991.371670][T14551]  ? __pfx_vpanic+0x10/0x10
[  991.376162][T14551]  ? srso_alias_return_thunk+0x5/0xfbef5
[  991.381783][T14551]  ? is_bpf_text_address+0x292/0x2b0
[  991.387072][T14551]  panic+0xb9/0xc0
[  991.390779][T14551]  ? __pfx_panic+0x10/0x10
[  991.395196][T14551]  __warn+0x31b/0x4b0
[  991.399165][T14551]  ? ieee80211_tx_skb_tid+0x380/0x420
[  991.404533][T14551]  ? ieee80211_tx_skb_tid+0x380/0x420
[  991.409902][T14551]  report_bug+0x2be/0x4f0
[  991.414225][T14551]  ? ieee80211_tx_skb_tid+0x380/0x420
[  991.419589][T14551]  ? ieee80211_tx_skb_tid+0x380/0x420
[  991.424949][T14551]  ? ieee80211_tx_skb_tid+0x382/0x420
[  991.430313][T14551]  handle_bug+0x84/0x160
[  991.434543][T14551]  exc_invalid_op+0x1a/0x50
[  991.439035][T14551]  asm_exc_invalid_op+0x1a/0x20
[  991.443865][T14551] RIP: 0010:ieee80211_tx_skb_tid+0x380/0x420
[  991.449836][T14551] Code: a9 a3 f6 e9 b1 fe ff ff e8 3d ce c5 f6 90 0f 0b 90 e9 1f fe ff ff e8 2f ce c5 f6 90 0f 0b 90 e9 2a fe ff ff e8 21 ce c5 f6 90 <0f> 0b 90 e8 58 e2 fd ff 31 ff 48 8b 34 24 ba 02 00 00 00 48 83 c4
[  991.469421][T14551] RSP: 0018:ffffc90002e872d8 EFLAGS: 00010287
[  991.475472][T14551] RAX: ffffffff8af9ef3f RBX: ffffffff8af9ebef RCX: 0000000000080000
[  991.483425][T14551] RDX: ffffc90013040000 RSI: 000000000002d764 RDI: 000000000002d765
[  991.491374][T14551] RBP: 00000000ffffffff R08: 0000000000000000 R09: ffffffff8af9ebef
[  991.499323][T14551] R10: dffffc0000000000 R11: ffffed100a1f70de R12: ffff88804f364d80
[  991.507281][T14551] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000
[  991.515247][T14551]  ? ieee80211_tx_skb_tid+0x2f/0x420
[  991.520522][T14551]  ? ieee80211_tx_skb_tid+0x2f/0x420
[  991.525802][T14551]  ? ieee80211_tx_skb_tid+0x37f/0x420
[  991.531193][T14551]  ? ieee80211_tx_skb_tid+0x37f/0x420
[  991.536564][T14551]  mesh_plink_frame_tx+0x734/0xc10
[  991.541676][T14551]  ? __pfx_mesh_plink_frame_tx+0x10/0x10
[  991.547303][T14551]  ? ieee80211_mps_set_sta_local_pm+0xb1/0x310
[  991.553456][T14551]  ? srso_alias_return_thunk+0x5/0xfbef5
[  991.559097][T14551]  mesh_plink_deactivate+0x18e/0x2f0
[  991.564391][T14551]  ? srso_alias_return_thunk+0x5/0xfbef5
[  991.570031][T14551]  mesh_sta_cleanup+0x42/0x150
[  991.574808][T14551]  cleanup_single_sta+0x40f/0x660
[  991.579833][T14551]  __sta_info_flush+0x5e4/0x710
[  991.584697][T14551]  ? __pfx___sta_info_flush+0x10/0x10
[  991.590104][T14551]  ? srso_alias_return_thunk+0x5/0xfbef5
[  991.595752][T14551]  ieee80211_do_stop+0x399/0x1fb0
[  991.600763][T14551]  ? srso_alias_return_thunk+0x5/0xfbef5
[  991.606400][T14551]  ? __lock_acquire+0xab9/0xd20
[  991.611260][T14551]  ? srso_alias_return_thunk+0x5/0xfbef5
[  991.616897][T14551]  ? do_raw_spin_lock+0x121/0x290
[  991.621921][T14551]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  991.627301][T14551]  ? __pfx_ieee80211_do_stop+0x10/0x10
[  991.632756][T14551]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  991.638651][T14551]  ? srso_alias_return_thunk+0x5/0xfbef5
[  991.644287][T14551]  ? lockdep_hardirqs_on+0x9c/0x150
[  991.649485][T14551]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  991.655835][T14551]  ? wiphy_work_cancel+0x1eb/0x3c0
[  991.660950][T14551]  ieee80211_stop+0x1b1/0x240
[  991.665626][T14551]  ? __pfx_ieee80211_stop+0x10/0x10
[  991.670832][T14551]  __dev_close_many+0x364/0x6f0
[  991.675688][T14551]  ? __pfx___dev_close_many+0x10/0x10
[  991.681061][T14551]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  991.686955][T14551]  ? lockdep_hardirqs_on+0x9c/0x150
[  991.692145][T14551]  ? srso_alias_return_thunk+0x5/0xfbef5
[  991.697770][T14551]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  991.703672][T14551]  netif_close_many+0x225/0x410
[  991.708514][T14551]  ? srso_alias_return_thunk+0x5/0xfbef5
[  991.714144][T14551]  ? __pfx_netif_close_many+0x10/0x10
[  991.719504][T14551]  ? __mutex_lock+0xd3b/0x1350
[  991.724260][T14551]  ? srso_alias_return_thunk+0x5/0xfbef5
[  991.729888][T14551]  ? __lock_acquire+0xab9/0xd20
[  991.734742][T14551]  ? __mutex_lock+0x5bb/0x1350
[  991.739502][T14551]  netif_close+0x158/0x210
[  991.743910][T14551]  ? __pfx_netif_close+0x10/0x10
[  991.748857][T14551]  ? __pfx___mutex_lock+0x10/0x10
[  991.753883][T14551]  dev_close+0x10a/0x220
[  991.758121][T14551]  cfg80211_shutdown_all_interfaces+0xd4/0x220
[  991.764270][T14551]  ? __pfx_cfg80211_rfkill_set_block+0x10/0x10
[  991.770419][T14551]  cfg80211_rfkill_set_block+0x2d/0x50
[  991.775869][T14551]  rfkill_set_block+0x1d2/0x440
[  991.780731][T14551]  rfkill_fop_write+0x44b/0x570
[  991.785577][T14551]  ? __pfx_rfkill_fop_write+0x10/0x10
[  991.790938][T14551]  ? srso_alias_return_thunk+0x5/0xfbef5
[  991.796567][T14551]  ? __pfx_security_file_permission+0x10/0x10
[  991.802630][T14551]  ? srso_alias_return_thunk+0x5/0xfbef5
[  991.808252][T14551]  ? rw_verify_area+0x255/0x4d0
[  991.813102][T14551]  ? __lock_acquire+0xab9/0xd20
[  991.817951][T14551]  ? __pfx_rfkill_fop_write+0x10/0x10
[  991.823324][T14551]  vfs_write+0x27e/0xb30
[  991.827574][T14551]  ? __pfx_vfs_write+0x10/0x10
[  991.832336][T14551]  ? srso_alias_return_thunk+0x5/0xfbef5
[  991.837965][T14551]  ? __fget_files+0x2a/0x420
[  991.842546][T14551]  ? __fget_files+0x2a/0x420
[  991.847126][T14551]  ? srso_alias_return_thunk+0x5/0xfbef5
[  991.852751][T14551]  ? __fget_files+0x3a0/0x420
[  991.857416][T14551]  ? __fget_files+0x2a/0x420
[  991.862004][T14551]  ? srso_alias_return_thunk+0x5/0xfbef5
[  991.867638][T14551]  ksys_write+0x145/0x250
[  991.871970][T14551]  ? __pfx_ksys_write+0x10/0x10
[  991.876816][T14551]  ? rcu_is_watching+0x15/0xb0
[  991.881578][T14551]  ? do_syscall_64+0xbe/0x3b0
[  991.886253][T14551]  do_syscall_64+0xfa/0x3b0
[  991.890747][T14551]  ? lockdep_hardirqs_on+0x9c/0x150
[  991.895932][T14551]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  991.901996][T14551]  ? srso_alias_return_thunk+0x5/0xfbef5
[  991.907618][T14551]  ? exc_page_fault+0x9f/0xf0
[  991.912290][T14551]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  991.918173][T14551] RIP: 0033:0x7f2bfad8eba9
[  991.922580][T14551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  991.942178][T14551] RSP: 002b:00007f2bfbc32038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  991.950591][T14551] RAX: ffffffffffffffda RBX: 00007f2bfafd6360 RCX: 00007f2bfad8eba9
[  991.958551][T14551] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 000000000000000b
[  991.966508][T14551] RBP: 00007f2bfae11e19 R08: 0000000000000000 R09: 0000000000000000
[  991.974464][T14551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  991.982418][T14551] R13: 00007f2bfafd63f8 R14: 00007f2bfafd6360 R15: 00007ffef4adc938
[  991.990398][T14551]  </TASK>
[  991.993595][T14551] Kernel Offset: disabled
[  991.997910][T14551] Rebooting in 86400 seconds..