last executing test programs:

6m14.501667854s ago: executing program 32 (id=2):
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'})
syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x181603, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f00000001c0)=@e={0xff, 0xa, 0xc, 0x2, @generic=0x1f, 0x8, 0x7, 0x4})

6m9.993043085s ago: executing program 33 (id=8):
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9}, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_delroute={0x40, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_SRC={0x8, 0x3, @multicast2}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0)

5m51.715331603s ago: executing program 34 (id=38):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r1 = dup(r0)
sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x4801)

5m51.286302686s ago: executing program 35 (id=25):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000000c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd27, 0x0, {{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x20, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x4}, [@migrate={0x50, 0x11, [{@in=@local, @in=@broadcast, @in=@multicast2, @in6=@local, 0x3c, 0x4, 0x0, 0x2, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
io_uring_setup(0x2e34, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = socket(0x10, 0x3, 0x0)
write(r2, &(0x7f00000000c0)="1800000016005f02c17721f8070066000e00000000000000", 0x18)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2)

4m58.21605743s ago: executing program 36 (id=55):
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)

4m11.808246577s ago: executing program 37 (id=90):
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
keyctl$read(0xb, r2, 0x0, 0x0)
keyctl$read(0xb, r2, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc1}, 0x24018004)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x14, r0, 0x6a98047402e98331, 0x70bd21, 0xffa1}, 0x14}, 0x1, 0x0, 0x0, 0x24004041}, 0x4008800)

4m5.445038827s ago: executing program 38 (id=110):
syz_mount_image$cramfs(&(0x7f00000001c0), &(0x7f00000003c0)='./file2\x00', 0x10080, &(0x7f0000000180)=ANY=[], 0x2, 0x15f, &(0x7f0000000200)="$eJzsj79rE1EcwD/3w0Q0MQdGiA4qOngYYi4X4iZixGDAeKC4OIhgThQSExKQjP7AzcE/IENMoFPIUDqW0qZd0iZQ0n+iS6BDoWPLu3ctdO38PsvB5/u59973xZOZjQUGkueNerPlt9t+9e4br1J6u7yyek34KBaXg6LebIm4Kvv1Z/BFfE1Y/JR6Mw6fv9b8R58atSqYorNZ2y9eFV7HQbZXgGJStlro7PswviGdGzj9nMuH3S0TignpxHnH/+EBoCNdDjjkXrjV6+mknHm49MHgTzl957oGnW56NNw2An/b/+uWbg5iqd/AVj9Ys9Pdy04yu9nRcD6bVl55FW+Wd93HeSfnOIW5tzMtF378w3wZ+w7vz86T90QiwDv4pUFXg2EwX2xocWDc64eP4uCbBZqciF96R5CIJk8n4h0fU5cGT5OWjmGjoVAoFAqFQqFQKBQKxQU5CQAA//8SzGGC")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
keyctl$session_to_parent(0x12)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x82000, 0x0)

3m51.372257417s ago: executing program 39 (id=132):
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$alg(0x26, 0x5, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_delroute={0x40, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_SRC={0x8, 0x3, @multicast2}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0)

3m43.527310548s ago: executing program 40 (id=141):
r0 = socket$key(0xf, 0x3, 0x2)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r2=>0x0})
r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, 0x0)
r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
r5 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, 0x0, 0x0)
write$dsp(0xffffffffffffffff, 0x0, 0x0)
mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8)
fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0)
r7 = fsmount(r4, 0x0, 0x0)
r8 = openat$cgroup_subtree(r7, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000280)=ANY=[@ANYBLOB="2b72646d6120accf1dbe7909239f8eb702133329b4239b6c52836d6a0434b2c9d7a6a3d2f93e0e737163ea1b0951b7c06ae8638e16c47f3fa9721aa2e0eeff16a1eb014e4c3cca9c4154fcb56b3b1362c9ff60b349b145c44957f6f75698"], 0x6)
socket$inet6(0xa, 0x800000000000002, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d80)=@ipv4_newaddr={0x28, 0x14, 0x509, 0x0, 0x0, {0x2, 0x1, 0x0, 0xfe, r2}, [@IFA_FLAGS={0x8, 0x8, 0x466}, @IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x41}}]}, 0x28}}, 0x0)
r9 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0)
ioctl$I2C_SMBUS(r9, 0x720, &(0x7f00000000c0)={0x1, 0x0, 0x5, &(0x7f0000000080)={0x3, "90f541a5e60000000003f1fbbc2bd3c9f144d76e44c7b2986eb5e52829e7cb8393"}})
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x400008a, 0x0)
sendmsg$key(r0, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2, 0x9, 0x0, 0x9, 0x2, 0x0, 0x0, 0x25dfdbfe}, 0x10}}, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d)

3m25.834460552s ago: executing program 1 (id=157):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xe3, 0xdd, 0xef, 0x20, 0x1d50, 0x60a1, 0xa14f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9d, 0x14, 0x4e}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

3m24.173189748s ago: executing program 1 (id=158):
r0 = socket$inet(0x2, 0x1, 0x100)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, &(0x7f00000012c0)='\t&', 0x2, 0x4, 0x0, 0x0)

3m20.514622369s ago: executing program 41 (id=158):
r0 = socket$inet(0x2, 0x1, 0x100)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, &(0x7f00000012c0)='\t&', 0x2, 0x4, 0x0, 0x0)

2m20.142442689s ago: executing program 0 (id=272):
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
pipe2$9p(&(0x7f0000000000), 0x0)
r2 = creat(0x0, 0x0)
mount$9p_fd(0x0, 0x0, &(0x7f0000000100), 0x4000, 0x0)
connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x0, 0x0, 0x3, 0x3, {0xa, 0x4e24, 0x6, @loopback, 0x29d}}}, 0x32)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f00000021c0)=@multiplanar_mmap={0x5, 0xd, 0x4, 0x40, 0x7, {}, {0x1, 0x1, 0x2, 0x10, 0x4, 0x4, "e104baf5"}, 0x9, 0x1, {0x0}, 0x6})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0)
ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0)

2m19.232281522s ago: executing program 0 (id=276):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}}, 0x0)

2m18.573289929s ago: executing program 0 (id=279):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r1}, 0x10)
io_submit(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000080)={0x0, 0x0, 0x2, 0x2, 0x2, 0xffffffffffffffff, 0x0}])
write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="33fe0000240013"], 0xfe33)

2m17.583036592s ago: executing program 0 (id=281):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000003780), r0)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000003980)={&(0x7f0000003900)={0x14, r1, 0xbc9116c6c3710e2d, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x20000080)

2m16.861447333s ago: executing program 0 (id=284):
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r1 = dup2(r0, r0)
socket$inet_tcp(0x2, 0x1, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0)
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10})
socket$igmp6(0xa, 0x3, 0x2)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x6, 0x87}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$alg(0x26, 0x5, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0)

2m16.045112976s ago: executing program 3 (id=286):
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
pipe2$9p(&(0x7f0000000000), 0x0)
r2 = creat(0x0, 0x0)
mount$9p_fd(0x0, 0x0, &(0x7f0000000100), 0x4000, 0x0)
connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x0, 0x0, 0x3, 0x3, {0xa, 0x4e24, 0x6, @loopback, 0x29d}}}, 0x32)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f00000021c0)=@multiplanar_mmap={0x5, 0xd, 0x4, 0x40, 0x7, {}, {0x1, 0x1, 0x2, 0x10, 0x4, 0x4, "e104baf5"}, 0x9, 0x1, {0x0}, 0x6})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0)
ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0)

2m14.562253078s ago: executing program 3 (id=288):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14)
getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000700)={'bridge_slave_1\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000540001000000000000c4000007008209", @ANYBLOB="20000100", @ANYRES32=r4, @ANYBLOB="00000000e000030000000000000000000000000008"], 0x38}}, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

2m13.661584059s ago: executing program 3 (id=290):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan0\x00'})
sendmsg$NL802154_CMD_SET_TX_POWER(r1, 0x0, 0x40000f0)

2m12.796937562s ago: executing program 3 (id=293):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x18, 0x6, 0x7e, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@sack={0x5, 0x2}]}}}}}}}}, 0x0)

2m12.106141915s ago: executing program 3 (id=295):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b00010000000009"], 0x0)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0)

2m9.871680678s ago: executing program 3 (id=299):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='hpfs\x00', 0x1c443, 0x0)

2m1.266095057s ago: executing program 42 (id=284):
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r1 = dup2(r0, r0)
socket$inet_tcp(0x2, 0x1, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0)
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10})
socket$igmp6(0xa, 0x3, 0x2)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x6, 0x87}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$alg(0x26, 0x5, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0)

1m53.912212162s ago: executing program 43 (id=299):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='hpfs\x00', 0x1c443, 0x0)

1m46.268497876s ago: executing program 2 (id=341):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080000000000000010000009400000007ad4160850000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'hsr0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005", @ANYRES32=r2, @ANYBLOB="0500060001000000050007000000000005000300df00000008000200", @ANYRES32=r2], 0x68}}, 0x0)

1m44.598576726s ago: executing program 2 (id=344):
quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000040)=@rnullb, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x802)
ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000040)=""/185)

1m42.904429364s ago: executing program 2 (id=347):
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x458, 0x501b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0xff, 0x21, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x800, 0x5, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x8, 0x2, 0x3}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xa, '\x00\x00\x00@'}]}}, 0x0}, 0x0)

1m39.854394884s ago: executing program 2 (id=350):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r2=>0x0})
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d80ff0008", @ANYRES16=r1, @ANYRES32=r3], 0x44}}, 0x0)

1m38.082538456s ago: executing program 2 (id=352):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080000000000000010000009400000007ad4160850000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'hsr0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005", @ANYRES32=r2, @ANYBLOB="0500060001000000050007000000000005000300df00000008000200", @ANYRES32=r2], 0x68}}, 0x0)

1m37.039258127s ago: executing program 2 (id=353):
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000040), 0xfffffffffffffe9a)
socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$inet6_int(r2, 0x29, 0x12, 0x0, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast1, 0x4e23, 0x2, 'dh\x00', 0x1, 0x5, 0x16}, 0x2c)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
fcntl$notify(r4, 0x402, 0x6)
r6 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
write$binfmt_misc(r6, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000000c0), 0x0, 0x36)
openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)

1m32.885823628s ago: executing program 6 (id=357):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x1bc60, 0x1a704}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x2}, @IFLA_BOND_MIIMON={0x8, 0x3, 0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x11}, 0x4040044)

1m31.108664407s ago: executing program 6 (id=359):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x29, 0x4, 0xffffffff85000014, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x4b)
syz_fuse_handle_req(r0, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f00000067c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b00", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="780000000000000002000000000000040000000000000000000000000000000004"], 0x0, 0x0, 0x0, 0x0})
getdents(r2, &(0x7f0000000700)=""/90, 0x20000)

1m29.452978342s ago: executing program 6 (id=361):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080000000000000010000009400000007ad4160850000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'hsr0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c0002800600050001800000", @ANYRES32=r2, @ANYBLOB="0500060001000000050007000000000005000300df00000008000200", @ANYRES32=r2], 0x68}}, 0x0)

1m28.480192634s ago: executing program 6 (id=363):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10)
close(r0)

1m27.417806128s ago: executing program 6 (id=364):
r0 = creat(&(0x7f0000000340)='./file0\x00', 0x28)
close(r0)
r1 = getpid()
openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
r2 = syz_pidfd_open(r1, 0x0)
mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])

1m25.370488975s ago: executing program 6 (id=365):
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
io_uring_register$IORING_REGISTER_MEM_REGION(0xffffffffffffffff, 0x22, &(0x7f0000000280)={&(0x7f0000000240)={0x0, 0x0, 0x1, 0xe28, 0xfffffffffffffff2}}, 0x1)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/4082, 0xff2}], 0x1}, 0x5}], 0x40000000000000d, 0x2000, 0x0)

1m20.877657852s ago: executing program 44 (id=353):
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000040), 0xfffffffffffffe9a)
socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$inet6_int(r2, 0x29, 0x12, 0x0, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast1, 0x4e23, 0x2, 'dh\x00', 0x1, 0x5, 0x16}, 0x2c)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
fcntl$notify(r4, 0x402, 0x6)
r6 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
write$binfmt_misc(r6, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000000c0), 0x0, 0x36)
openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)

1m13.083600836s ago: executing program 7 (id=380):
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xa, '\x00\x00\x00@'}]}}, 0x0}, 0x0)

1m12.101861771s ago: executing program 7 (id=381):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080000000000000010000009400000007ad4160850000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'hsr0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c0002800600050001800000", @ANYRES32=r2, @ANYBLOB="0500060001000000050007000000000005000300df00000008000200", @ANYRES32=r2], 0x68}}, 0x0)

1m11.182367762s ago: executing program 7 (id=382):
r0 = syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000003a40), 0x0, 0x559e, &(0x7f0000005680)="$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")
ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f00000001c0)={0x1})
ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000040)={0x2, 0x9})

1m8.880558034s ago: executing program 45 (id=365):
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
io_uring_register$IORING_REGISTER_MEM_REGION(0xffffffffffffffff, 0x22, &(0x7f0000000280)={&(0x7f0000000240)={0x0, 0x0, 0x1, 0xe28, 0xfffffffffffffff2}}, 0x1)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/4082, 0xff2}], 0x1}, 0x5}], 0x40000000000000d, 0x2000, 0x0)

1m6.433346652s ago: executing program 7 (id=388):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r2=>0x0})
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d80ff00080002", @ANYRES16=r1, @ANYRES32=r3], 0x44}}, 0x0)

1m4.868201927s ago: executing program 7 (id=390):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080000000000000010000009400000007ad4160850000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'hsr0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c00028006000500018000000800", @ANYRES32=r2, @ANYBLOB="0500060001000000050007000000000005000300df00000008000200", @ANYRES32=r2], 0x68}}, 0x0)

1m3.896815528s ago: executing program 7 (id=392):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0xfffffffffffffffe)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r3 = socket$kcm(0x10, 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x200, 0x0)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xfe80, &(0x7f00000005c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in=@empty}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0)
openat$random(0xffffffffffffff9c, &(0x7f0000000340), 0x40, 0x0)

1m3.126926364s ago: executing program 5 (id=393):
syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./bus\x00', 0x1800840, &(0x7f0000000000)={[{@shortname_lower}, {@shortname_winnt}, {@fat=@quiet}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'cp855'}}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@shortname_mixed}, {@numtail}, {@fat=@flush}, {@fat=@gid}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp855'}}]}, 0x1, 0x369, &(0x7f0000000c80)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)

1m0.980516154s ago: executing program 5 (id=396):
syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_mode_change={{0x14, 0x6}, {0x4, 0xc8, 0xb9}}}, 0x9)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)

58.257375867s ago: executing program 5 (id=399):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x458, 0x501b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0xff, 0x21, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x800, 0x5, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x8, 0x2, 0x3}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xa, '\x00\x00\x00@'}]}}, 0x0}, 0x0)

55.003340293s ago: executing program 5 (id=401):
bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TCFLSH(r0, 0x400455c8, 0x4)
syz_usb_connect(0x5, 0x0, 0x0, 0x0)

51.433528826s ago: executing program 5 (id=405):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TCFLSH(r1, 0x400455c8, 0x4)
syz_usb_connect(0x5, 0x0, 0x0, 0x0)
ioctl$TIOCVHANGUP(r1, 0x5437, 0x0)

47.832898637s ago: executing program 46 (id=392):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0xfffffffffffffffe)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r3 = socket$kcm(0x10, 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x200, 0x0)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xfe80, &(0x7f00000005c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in=@empty}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0)
openat$random(0xffffffffffffff9c, &(0x7f0000000340), 0x40, 0x0)

47.429466329s ago: executing program 5 (id=407):
socket(0x80000000000000a, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
socket$inet_tcp(0x2, 0x1, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000000c0)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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")
r5 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r5, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a})
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r6, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @adiantum, 0x1, '\x00', @a})
chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00')
symlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00')

31.370599433s ago: executing program 47 (id=407):
socket(0x80000000000000a, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
socket$inet_tcp(0x2, 0x1, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000000c0)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=")
r5 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r5, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a})
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r6, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @adiantum, 0x1, '\x00', @a})
chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00')
symlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00')

13.473508592s ago: executing program 9 (id=443):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x138, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}, 0x1, 0x0, 0x0, 0x4}, 0x20000040)

12.842590647s ago: executing program 4 (id=444):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x51, 0x0, &(0x7f0000000b80)="648678210790aef789014d2950e053689eccf789ca22d52f003429a35ee198865ddbc79fdf08b2803880dca70ebfbb08514bb5107c999f3c3ec9cdd8bfa6d977863f4278649f9b9433d8879fd6c523b481"})

12.517770005s ago: executing program 8 (id=445):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r2=>0x0})
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d80ff0008000200", @ANYRES16=r1, @ANYRES32=r3], 0x44}}, 0x0)

12.265673462s ago: executing program 9 (id=446):
bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TCFLSH(r0, 0x400455c8, 0x4)
syz_usb_connect(0x5, 0x0, 0x0, 0x0)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)

11.789036887s ago: executing program 4 (id=447):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d34, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x8000, 0x3, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x0, 0x4}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000005ec0)={0x24, 0x0, 0x0, &(0x7f0000005e40)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xb, "4181c608"}]}}, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

11.483513128s ago: executing program 8 (id=448):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x458, 0x501b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0xff, 0x21, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x800, 0x5, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x8, 0x2, 0x3}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

9.488195311s ago: executing program 1 (id=406):
syz_usb_connect(0x6, 0x24, 0x0, 0x0)
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)=0x5)
read$dsp(r0, &(0x7f00000002c0)=""/4096, 0x1000)

8.878099501s ago: executing program 4 (id=449):
quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000040)=@rnullb, 0x0, 0x0)
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x802)
ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000040)=""/185)

8.681767965s ago: executing program 8 (id=450):
socket$netlink(0x10, 0x3, 0x10)
syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b9b66040ac0501b300e4090203010902120001000000000904000000ff01"], 0x0)

8.59121037s ago: executing program 9 (id=451):
r0 = socket$inet6(0xa, 0x3, 0x5)
sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x4000000, @remote, 0x9, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000900)=[{0x18, 0x29, 0xb, "0004"}], 0x18}}], 0x2, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file4\x00', 0x1018000, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file4'}}], [], 0x2c})

7.847390813s ago: executing program 9 (id=452):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TCFLSH(r1, 0x400455c8, 0x4)
syz_usb_connect(0x5, 0x0, 0x0, 0x0)

6.32155388s ago: executing program 8 (id=453):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet6_mtu(r0, 0x29, 0x17, 0x0, &(0x7f00000004c0))

5.817524162s ago: executing program 8 (id=454):
syz_pidfd_open(0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00')
r1 = memfd_create(&(0x7f00000000c0)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x02\x00\x00\x006w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\xf0\x8f\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYS', 0x0)
write(r1, &(0x7f0000002140)="6963e65843ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
readlinkat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000019240)=""/102393, 0x18ff9)

5.374460988s ago: executing program 1 (id=455):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x51, 0x0, &(0x7f0000000b80)="648678210790aef789014d2950e053689eccf789ca22d52f003429a35ee198865ddbc79fdf08b2803880dca70ebfbb08514bb5107c999f3c3ec9cdd8bfa6d977863f4278649f9b9433d8879fd6c523b481"})

5.263481534s ago: executing program 4 (id=456):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r2=>0x0})
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d80ff0008000200", @ANYRES16=r1, @ANYRES32=r3], 0x44}}, 0x0)

5.130177861s ago: executing program 8 (id=457):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000800)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xd1)
lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000400)='system.posix_acl_default\x00', &(0x7f0000000540)=ANY=[], 0x2c, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019640)=""/102392, 0x18ff8)
r2 = openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x80000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x41)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f00000000c0)="1c0000001e005f0214fffffffffffff807000000000000000000000008", 0x1d)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x1)
ioctl$SIOCAX25ADDUID(r4, 0x89e1, 0x0)
request_key(&(0x7f0000000340)='asymmetric\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000440)='/dev/cpu/#/msr\x00', 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x112})
ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, 0xffffffffffffffff)

4.40141688s ago: executing program 1 (id=458):
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000140)={{0x1, 0x2, 0x276, 0x3, 0x6}})
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402)
syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0xaaa43, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x1e1102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet(0xa, 0x800, 0x84)
capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040))
r2 = getpid()
r3 = syz_pidfd_open(r2, 0x0)
r4 = pidfd_getfd(r3, r3, 0x0)
setns(r4, 0x20000000)
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed4040, &(0x7f0000001000)={[{@grpid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100000}}, {@nolazytime}, {@noacl}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@noquota}, {@prjquota}, {@usrjquota_path={'usrjquota', 0x3d, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}}, {@errors_remount}, {@dioread_nolock}]}, 0xf5, 0x47a, &(0x7f0000000ac0)="$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")
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/16, @ANYRES32=r5], 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
recvmsg(r7, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x40000000)
syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x810410, &(0x7f0000001a00)=ANY=[], 0x1, 0x1f3, &(0x7f0000000680)="$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")

4.282743772s ago: executing program 9 (id=459):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x458, 0x501b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0xff, 0x21, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x800, 0x5, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x8, 0x2, 0x3}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

4.246740318s ago: executing program 4 (id=460):
bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TCFLSH(r0, 0x400455c8, 0x4)
syz_usb_connect(0x5, 0x0, 0x0, 0x0)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)

1.462441182s ago: executing program 1 (id=461):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f00000005c0)={[{@errors_remount}, {@acl}]}, 0x1, 0x7bc, &(0x7f0000001740)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

972.208374ms ago: executing program 9 (id=462):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20000000)
syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c92012000e00050014010a"], 0x17)

383.36896ms ago: executing program 4 (id=463):
syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x4000, &(0x7f0000000100)=ANY=[@ANYRES16=0x0, @ANYRES64=0x0, @ANYRESHEX], 0xfb, 0x28a, &(0x7f0000000700)="$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")
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x1001bfc)

0s ago: executing program 0 (id=422):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0x0, 0x101, 0x100}})

kernel console output (not intermixed with test programs):

interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  394.162287][ T6819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  394.379180][ T5103] Bluetooth: hci5: command tx timeout
[  394.429348][ T6819] batman_adv: batadv0: Adding interface: batadv_slave_1
[  394.436446][ T6819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  394.463002][ T6819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  395.090640][ T6819] hsr_slave_0: entered promiscuous mode
[  395.099395][ T6819] hsr_slave_1: entered promiscuous mode
[  395.106910][ T6819] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  395.114729][ T6819] Cannot create hsr debugfs directory
[  395.153135][ T6776] 8021q: adding VLAN 0 to HW filter on device bond0
[  395.182161][ T6846] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  395.352131][ T6776] 8021q: adding VLAN 0 to HW filter on device team0
[  395.517626][ T4095] bridge0: port 1(bridge_slave_0) entered blocking state
[  395.525130][ T4095] bridge0: port 1(bridge_slave_0) entered forwarding state
[  395.695158][ T4095] bridge0: port 2(bridge_slave_1) entered blocking state
[  395.702595][ T4095] bridge0: port 2(bridge_slave_1) entered forwarding state
[  396.225029][ T6776] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  398.286220][ T6819] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  398.376515][ T6819] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  398.541688][ T6819] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  398.647835][ T6819] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  400.167190][ T5823] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  400.176433][ T5823] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  400.233111][ T5823] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  400.264520][ T5823] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  400.277614][ T5823] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  401.430462][ T6776] 8021q: adding VLAN 0 to HW filter on device batadv0
[  401.702220][ T6819] 8021q: adding VLAN 0 to HW filter on device bond0
[  401.857237][ T6819] 8021q: adding VLAN 0 to HW filter on device team0
[  402.000926][ T4095] bridge0: port 1(bridge_slave_0) entered blocking state
[  402.008277][ T4095] bridge0: port 1(bridge_slave_0) entered forwarding state
[  402.156792][ T4095] bridge0: port 2(bridge_slave_1) entered blocking state
[  402.164232][ T4095] bridge0: port 2(bridge_slave_1) entered forwarding state
[  402.381860][ T5103] Bluetooth: hci6: command tx timeout
[  402.736358][ T6776] veth0_vlan: entered promiscuous mode
[  402.851586][ T6855] chnl_net:caif_netlink_parms(): no params data found
[  402.904778][ T6776] veth1_vlan: entered promiscuous mode
[  403.623753][ T6776] veth0_macvtap: entered promiscuous mode
[  403.721402][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  403.727928][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  403.769291][ T6776] veth1_macvtap: entered promiscuous mode
[  403.873716][ T6776] batman_adv: batadv0: Interface activated: batadv_slave_0
[  403.944479][ T6776] batman_adv: batadv0: Interface activated: batadv_slave_1
[  404.069381][ T6776] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  404.078292][ T6776] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  404.087411][ T6776] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  404.096359][ T6776] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  404.486224][   T49] Bluetooth: hci6: command tx timeout
[  405.676657][ T6855] bridge0: port 1(bridge_slave_0) entered blocking state
[  405.690841][ T6855] bridge0: port 1(bridge_slave_0) entered disabled state
[  405.698401][ T6855] bridge_slave_0: entered allmulticast mode
[  405.706996][ T6855] bridge_slave_0: entered promiscuous mode
[  405.744136][ T5103] Bluetooth: hci2: command 0x0406 tx timeout
[  405.750816][ T5103] Bluetooth: hci7: command 0x0406 tx timeout
[  406.001245][ T6855] bridge0: port 2(bridge_slave_1) entered blocking state
[  406.008596][ T6855] bridge0: port 2(bridge_slave_1) entered disabled state
[  406.016282][ T6855] bridge_slave_1: entered allmulticast mode
[  406.024600][ T6855] bridge_slave_1: entered promiscuous mode
[  406.559118][   T49] Bluetooth: hci6: command tx timeout
[  406.681017][ T6855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  406.832248][ T6855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  407.386204][ T6855] team0: Port device team_slave_0 added
[  407.496011][ T6855] team0: Port device team_slave_1 added
[  408.307567][ T6855] batman_adv: batadv0: Adding interface: batadv_slave_0
[  408.314999][ T6855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  408.349869][ T6855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  408.540417][ T4295] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  408.560617][ T5938] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  408.593776][ T6855] batman_adv: batadv0: Adding interface: batadv_slave_1
[  408.602635][ T6855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  408.630793][ T6855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  408.677095][   T49] Bluetooth: hci6: command tx timeout
[  408.694603][ T5823] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  408.703801][ T5823] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  408.716814][ T5823] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  408.730231][ T5823] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  408.739303][ T5938] usb 7-1: Using ep0 maxpacket: 32
[  408.746959][ T5823] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  408.774499][ T5938] usb 7-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  408.787720][ T5938] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  408.797657][ T5938] usb 7-1: Product: syz
[  408.802288][ T5938] usb 7-1: Manufacturer: syz
[  408.806998][ T5938] usb 7-1: SerialNumber: syz
[  408.872606][ T4295] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  408.911889][ T5938] usb 7-1: config 0 descriptor??
[  409.020312][ T6819] 8021q: adding VLAN 0 to HW filter on device batadv0
[  409.078645][ T4295] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  409.333456][ T5938] airspy 7-1:0.0: Board ID: 00
[  409.338634][ T5938] airspy 7-1:0.0: Firmware version: 
[  409.464956][ T4295] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  409.695719][ T6855] hsr_slave_0: entered promiscuous mode
[  409.705636][ T6855] hsr_slave_1: entered promiscuous mode
[  409.714177][ T6855] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  409.722020][ T6855] Cannot create hsr debugfs directory
[  409.909648][ T5938] airspy 7-1:0.0: usb_control_msg() failed -71 request 0e
[  409.950145][ T5938] airspy 7-1:0.0: Registered as swradio24
[  409.956240][ T5938] airspy 7-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  410.139462][ T5938] usb 7-1: USB disconnect, device number 3
[  410.869820][   T49] Bluetooth: hci7: command tx timeout
[  411.893953][ T4295] bridge_slave_1: left allmulticast mode
[  411.900030][ T4295] bridge_slave_1: left promiscuous mode
[  411.906325][ T4295] bridge0: port 2(bridge_slave_1) entered disabled state
[  412.157538][ T4295] bridge_slave_0: left allmulticast mode
[  412.164093][ T4295] bridge_slave_0: left promiscuous mode
[  412.170849][ T4295] bridge0: port 1(bridge_slave_0) entered disabled state
[  412.969719][   T49] Bluetooth: hci7: command tx timeout
[  413.097339][ T4295] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  413.183348][ T6918] netlink: 40 bytes leftover after parsing attributes in process `syz.6.152'.
[  413.264520][ T4295] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  413.287918][ T4295] bond0 (unregistering): Released all slaves
[  414.456414][ T4295] hsr_slave_0: left promiscuous mode
[  414.511129][ T4295] hsr_slave_1: left promiscuous mode
[  414.520593][ T4295] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  414.528660][ T4295] batman_adv: batadv0: Removing interface: batadv_slave_0
[  414.682268][ T4295] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  414.695399][ T4295] batman_adv: batadv0: Removing interface: batadv_slave_1
[  414.843292][ T4295] veth1_macvtap: left promiscuous mode
[  414.849271][ T4295] veth0_macvtap: left promiscuous mode
[  414.854987][ T4295] veth1_vlan: left promiscuous mode
[  414.860593][ T4295] veth0_vlan: left promiscuous mode
[  415.092694][   T49] Bluetooth: hci7: command tx timeout
[  416.015369][ T4295] team0 (unregistering): Port device team_slave_1 removed
[  416.046420][ T4295] team0 (unregistering): Port device team_slave_0 removed
[  416.525002][ T6886] chnl_net:caif_netlink_parms(): no params data found
[  416.666919][ T6819] veth0_vlan: entered promiscuous mode
[  416.696787][ T6855] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  416.962663][ T6855] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  416.984782][ T6819] veth1_vlan: entered promiscuous mode
[  417.051251][ T6855] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  417.188966][   T49] Bluetooth: hci7: command tx timeout
[  417.256440][ T6855] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  417.622603][ T6819] veth0_macvtap: entered promiscuous mode
[  417.768476][ T6819] veth1_macvtap: entered promiscuous mode
[  418.017003][ T6819] batman_adv: batadv0: Interface activated: batadv_slave_0
[  418.200011][ T6819] batman_adv: batadv0: Interface activated: batadv_slave_1
[  418.365585][ T6819] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  418.375239][ T6819] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  418.390504][ T6819] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  418.401533][ T6819] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  419.544793][ T6886] bridge0: port 1(bridge_slave_0) entered blocking state
[  419.552674][ T6886] bridge0: port 1(bridge_slave_0) entered disabled state
[  419.560398][ T6886] bridge_slave_0: entered allmulticast mode
[  419.568523][ T6886] bridge_slave_0: entered promiscuous mode
[  419.717836][ T6855] 8021q: adding VLAN 0 to HW filter on device bond0
[  419.726838][ T6886] bridge0: port 2(bridge_slave_1) entered blocking state
[  419.734509][ T6886] bridge0: port 2(bridge_slave_1) entered disabled state
[  419.743019][ T6886] bridge_slave_1: entered allmulticast mode
[  419.752478][ T6886] bridge_slave_1: entered promiscuous mode
[  420.351594][ T6886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  420.374330][ T4295] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  420.382482][ T4295] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  420.508556][ T6886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  420.624984][ T6855] 8021q: adding VLAN 0 to HW filter on device team0
[  420.637123][ T4005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  420.645451][ T4005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  421.103055][ T6886] team0: Port device team_slave_0 added
[  421.180841][ T6886] team0: Port device team_slave_1 added
[  421.335799][ T4095] bridge0: port 1(bridge_slave_0) entered blocking state
[  421.343245][ T4095] bridge0: port 1(bridge_slave_0) entered forwarding state
[  421.538447][ T6957] netlink: 4 bytes leftover after parsing attributes in process `syz.6.155'.
[  421.589537][ T6956] netlink: 4 bytes leftover after parsing attributes in process `syz.6.155'.
[  421.614841][ T4095] bridge0: port 2(bridge_slave_1) entered blocking state
[  421.622281][ T4095] bridge0: port 2(bridge_slave_1) entered forwarding state
[  421.660678][ T6886] batman_adv: batadv0: Adding interface: batadv_slave_0
[  421.667865][ T6886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  421.694512][ T6886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  422.052616][ T6886] batman_adv: batadv0: Adding interface: batadv_slave_1
[  422.059890][ T6886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  422.090035][ T6886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  422.188298][ T6959] loop1: detected capacity change from 0 to 1024
[  422.736397][ T6959] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  423.165915][ T6886] hsr_slave_0: entered promiscuous mode
[  423.176263][ T6886] hsr_slave_1: entered promiscuous mode
[  423.186239][ T6886] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  423.197745][ T6886] Cannot create hsr debugfs directory
[  423.707741][ T4749] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  423.836695][ T4749] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  424.080964][ T4749] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  424.235741][ T4749] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  424.657053][ T6776] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 11
[  424.883397][ T6776] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 11
[  425.526912][ T6776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  425.555995][ T4749] bridge_slave_1: left allmulticast mode
[  425.562310][ T4749] bridge_slave_1: left promiscuous mode
[  425.568956][ T4749] bridge0: port 2(bridge_slave_1) entered disabled state
[  425.747727][ T4749] bridge_slave_0: left allmulticast mode
[  425.759790][ T4749] bridge_slave_0: left promiscuous mode
[  425.766119][ T4749] bridge0: port 1(bridge_slave_0) entered disabled state
[  426.591400][ T4749] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  426.686268][ T4749] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  426.724836][ T4749] bond0 (unregistering): Released all slaves
[  426.912516][ T6855] 8021q: adding VLAN 0 to HW filter on device batadv0
[  427.785505][ T4749] hsr_slave_0: left promiscuous mode
[  427.839339][ T4749] hsr_slave_1: left promiscuous mode
[  427.847178][ T4749] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  427.856337][ T4749] batman_adv: batadv0: Removing interface: batadv_slave_0
[  427.967925][ T4749] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  427.975758][ T4749] batman_adv: batadv0: Removing interface: batadv_slave_1
[  428.121037][ T4749] veth1_macvtap: left promiscuous mode
[  428.127095][ T4749] veth0_macvtap: left promiscuous mode
[  428.133834][ T4749] veth1_vlan: left promiscuous mode
[  428.139390][ T4749] veth0_vlan: left promiscuous mode
[  429.580882][ T4749] team0 (unregistering): Port device team_slave_1 removed
[  429.702224][ T4749] team0 (unregistering): Port device team_slave_0 removed
[  431.353024][ T5823] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  431.370306][ T5823] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  431.386100][ T5823] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  431.405201][ T5823] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  431.416185][ T5823] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  431.544811][ T4749] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  431.705022][ T6855] veth0_vlan: entered promiscuous mode
[  431.801480][ T4749] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  432.040572][ T4749] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  432.284591][ T4749] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  432.531689][ T6855] veth1_vlan: entered promiscuous mode
[  432.699895][ T6886] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  433.069400][ T6886] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  433.290620][ T6886] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  433.394796][ T6886] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  433.510827][ T5823] Bluetooth: hci0: command tx timeout
[  433.624382][ T6855] veth0_macvtap: entered promiscuous mode
[  433.691720][ T4749] bridge_slave_1: left allmulticast mode
[  433.697539][ T4749] bridge_slave_1: left promiscuous mode
[  433.704159][ T4749] bridge0: port 2(bridge_slave_1) entered disabled state
[  433.813133][ T4749] bridge_slave_0: left allmulticast mode
[  433.819589][ T4749] bridge_slave_0: left promiscuous mode
[  433.826104][ T4749] bridge0: port 1(bridge_slave_0) entered disabled state
[  434.466729][ T4749] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  434.510544][ T4749] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  434.532816][ T4749] bond0 (unregistering): Released all slaves
[  434.692699][ T6855] veth1_macvtap: entered promiscuous mode
[  435.416221][ T6855] batman_adv: batadv0: Interface activated: batadv_slave_0
[  435.557035][ T4749] hsr_slave_0: left promiscuous mode
[  435.581911][ T4749] hsr_slave_1: left promiscuous mode
[  435.585515][ T5823] Bluetooth: hci0: command tx timeout
[  435.590899][ T4749] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  435.600693][ T4749] batman_adv: batadv0: Removing interface: batadv_slave_0
[  435.652509][ T4749] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  435.662535][ T4749] batman_adv: batadv0: Removing interface: batadv_slave_1
[  435.764507][ T4749] veth1_macvtap: left promiscuous mode
[  435.770478][ T4749] veth0_macvtap: left promiscuous mode
[  435.776394][ T4749] veth1_vlan: left promiscuous mode
[  435.782586][ T4749] veth0_vlan: left promiscuous mode
[  436.450198][ T4749] team0 (unregistering): Port device team_slave_1 removed
[  436.493559][ T4749] team0 (unregistering): Port device team_slave_0 removed
[  436.887814][ T7034] netlink: 4 bytes leftover after parsing attributes in process `syz.6.163'.
[  436.919927][ T6855] batman_adv: batadv0: Interface activated: batadv_slave_1
[  436.966592][ T7006] chnl_net:caif_netlink_parms(): no params data found
[  436.989229][ T7037] netlink: 4 bytes leftover after parsing attributes in process `syz.6.163'.
[  437.024330][ T6855] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  437.033665][ T6855] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  437.042833][ T6855] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  437.051921][ T6855] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  437.302014][ T3065] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  437.310250][ T3065] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  437.611107][ T3065] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  437.621159][ T3065] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  437.668912][ T5823] Bluetooth: hci0: command tx timeout
[  437.864189][ T6886] 8021q: adding VLAN 0 to HW filter on device bond0
[  437.965825][ T4749] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  438.103250][ T4749] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  438.123949][ T5163] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  438.300060][ T5163] usb 7-1: Using ep0 maxpacket: 8
[  438.311570][ T4749] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  438.333868][ T5163] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  438.345982][ T5163] usb 7-1: config 0 has no interfaces?
[  438.353205][ T5163] usb 7-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  438.362739][ T5163] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  438.394579][ T6886] 8021q: adding VLAN 0 to HW filter on device team0
[  438.512686][ T5163] usb 7-1: config 0 descriptor??
[  438.536398][ T4749] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  438.742671][ T7006] bridge0: port 1(bridge_slave_0) entered blocking state
[  438.750399][ T7006] bridge0: port 1(bridge_slave_0) entered disabled state
[  438.765405][ T7006] bridge_slave_0: entered allmulticast mode
[  438.774796][ T7006] bridge_slave_0: entered promiscuous mode
[  438.807926][   T11] usb 7-1: USB disconnect, device number 4
[  438.822196][ T3065] bridge0: port 1(bridge_slave_0) entered blocking state
[  438.829890][ T3065] bridge0: port 1(bridge_slave_0) entered forwarding state
[  438.885431][ T3065] bridge0: port 2(bridge_slave_1) entered blocking state
[  438.893067][ T3065] bridge0: port 2(bridge_slave_1) entered forwarding state
[  438.910997][ T7006] bridge0: port 2(bridge_slave_1) entered blocking state
[  438.918539][ T7006] bridge0: port 2(bridge_slave_1) entered disabled state
[  438.926649][ T7006] bridge_slave_1: entered allmulticast mode
[  438.936022][ T7006] bridge_slave_1: entered promiscuous mode
[  439.345282][ T7006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  439.468510][ T7006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  439.640586][ T5868] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  439.744289][ T4749] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  439.746791][ T5823] Bluetooth: hci0: command tx timeout
[  439.854081][ T5868] usb 5-1: Using ep0 maxpacket: 32
[  439.949833][ T5868] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  439.960141][ T5868] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  439.968392][ T5868] usb 5-1: Product: syz
[  439.973359][ T5868] usb 5-1: Manufacturer: syz
[  439.978183][ T5868] usb 5-1: SerialNumber: syz
[  440.020230][ T5868] usb 5-1: config 0 descriptor??
[  440.155784][ T4749] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  440.206686][ T7065] netlink: 65039 bytes leftover after parsing attributes in process `syz.6.166'.
[  440.238197][ T7006] team0: Port device team_slave_0 added
[  440.320603][ T4749] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  440.430989][ T7006] team0: Port device team_slave_1 added
[  440.484168][ T5868] airspy 5-1:0.0: Board ID: 00
[  440.489384][ T5868] airspy 5-1:0.0: Firmware version: 
[  440.518471][ T4749] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  440.900214][ T5868] airspy 5-1:0.0: usb_control_msg() failed -71 request 0e
[  440.928954][ T5868] airspy 5-1:0.0: Registered as swradio24
[  440.935000][ T5868] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  440.965296][ T7006] batman_adv: batadv0: Adding interface: batadv_slave_0
[  440.972703][ T7006] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  440.999752][ T7006] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  441.076959][ T5868] usb 5-1: USB disconnect, device number 2
[  441.311981][ T7006] batman_adv: batadv0: Adding interface: batadv_slave_1
[  441.321320][ T7006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  441.348891][ T7006] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  441.453670][ T4749] bridge_slave_1: left allmulticast mode
[  441.460899][ T4749] bridge_slave_1: left promiscuous mode
[  441.467567][ T4749] bridge0: port 2(bridge_slave_1) entered disabled state
[  441.484672][ T4749] bridge_slave_0: left allmulticast mode
[  441.490831][ T4749] bridge_slave_0: left promiscuous mode
[  441.497485][ T4749] bridge0: port 1(bridge_slave_0) entered disabled state
[  441.562652][ T4749] bridge_slave_1: left allmulticast mode
[  441.568560][ T4749] bridge_slave_1: left promiscuous mode
[  441.575478][ T4749] bridge0: port 2(bridge_slave_1) entered disabled state
[  441.713243][ T4749] bridge_slave_0: left allmulticast mode
[  441.719706][ T4749] bridge_slave_0: left promiscuous mode
[  441.728589][ T4749] bridge0: port 1(bridge_slave_0) entered disabled state
[  442.500578][ T4749] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  442.540457][ T4749] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  442.573216][ T4749] bond0 (unregistering): Released all slaves
[  442.909976][ T4749] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  442.936196][ T4749] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  442.964622][ T4749] bond0 (unregistering): Released all slaves
[  443.028581][ T7088] netlink: 4 bytes leftover after parsing attributes in process `syz.4.170'.
[  443.129067][ T7089] netlink: 4 bytes leftover after parsing attributes in process `syz.4.170'.
[  443.517074][ T7006] hsr_slave_0: entered promiscuous mode
[  443.527245][ T7006] hsr_slave_1: entered promiscuous mode
[  443.536005][ T7006] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  443.543935][ T7006] Cannot create hsr debugfs directory
[  444.001087][   T11] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  444.215625][   T11] usb 7-1: config index 0 descriptor too short (expected 23569, got 27)
[  444.225124][   T11] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  444.276985][   T11] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  444.289351][   T11] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  444.297632][   T11] usb 7-1: Manufacturer: syz
[  444.330559][   T11] usb 7-1: config 0 descriptor??
[  444.368494][ T6886] 8021q: adding VLAN 0 to HW filter on device batadv0
[  444.746733][ T4749] hsr_slave_0: left promiscuous mode
[  444.789853][ T4749] hsr_slave_1: left promiscuous mode
[  444.799182][ T4749] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  444.807053][ T4749] batman_adv: batadv0: Removing interface: batadv_slave_0
[  444.808876][   T11] rc_core: IR keymap rc-hauppauge not found
[  444.820541][   T11] Registered IR keymap rc-empty
[  444.828035][   T11] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0
[  444.842260][   T11] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input6
[  444.882609][ T4749] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  444.890671][ T4749] batman_adv: batadv0: Removing interface: batadv_slave_1
[  444.989429][ T4749] hsr_slave_0: left promiscuous mode
[  444.993619][    C0] igorplugusb 7-1:0.0: Error: urb status = -32
[  445.004972][ T4749] hsr_slave_1: left promiscuous mode
[  445.016510][ T4749] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  445.024795][ T4749] batman_adv: batadv0: Removing interface: batadv_slave_0
[  445.126831][ T4749] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  445.135085][ T4749] batman_adv: batadv0: Removing interface: batadv_slave_1
[  445.150085][ T1862] usb 7-1: USB disconnect, device number 5
[  445.179405][ T5868] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  445.304367][ T4749] veth1_macvtap: left promiscuous mode
[  445.312143][ T4749] veth0_macvtap: left promiscuous mode
[  445.318235][ T4749] veth1_vlan: left promiscuous mode
[  445.324037][ T4749] veth0_vlan: left promiscuous mode
[  445.359711][ T4749] veth1_macvtap: left promiscuous mode
[  445.365721][ T4749] veth0_macvtap: left promiscuous mode
[  445.373500][ T4749] veth1_vlan: left promiscuous mode
[  445.379356][ T4749] veth0_vlan: left promiscuous mode
[  445.387495][ T5868] usb 5-1: Using ep0 maxpacket: 8
[  445.420706][ T5868] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  445.431482][ T5868] usb 5-1: config 0 has no interfaces?
[  445.437237][ T5868] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  445.446804][ T5868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  445.995537][ T5868] usb 5-1: config 0 descriptor??
[  446.357598][ T7121] binder_alloc: 7120: pid 7120 spamming oneway? 1 buffers allocated for a total size of 4096
[  446.472631][ T4749] team0 (unregistering): Port device team_slave_1 removed
[  446.593019][ T4749] team0 (unregistering): Port device team_slave_0 removed
[  446.699093][   T49] Bluetooth: hci1: command 0x0406 tx timeout
[  447.368617][ T4749] team0 (unregistering): Port device team_slave_1 removed
[  447.398618][ T4749] team0 (unregistering): Port device team_slave_0 removed
[  447.885348][ T5938] usb 5-1: USB disconnect, device number 3
[  448.387376][ T6886] veth0_vlan: entered promiscuous mode
[  448.618661][ T6886] veth1_vlan: entered promiscuous mode
[  448.871961][ T3065] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  448.880672][ T3065] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  449.180658][   T11] usb 7-1: new low-speed USB device number 6 using dummy_hcd
[  449.197330][ T4295] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  449.208388][ T4295] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  449.227433][ T6886] veth0_macvtap: entered promiscuous mode
[  449.343218][ T6886] veth1_macvtap: entered promiscuous mode
[  449.413753][   T11] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  449.424907][   T11] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  449.443612][ T7006] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  449.481275][   T11] usb 7-1: config 0 descriptor??
[  449.514718][ T6886] batman_adv: batadv0: Interface activated: batadv_slave_0
[  449.559571][ T7006] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  449.622302][ T7006] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  449.691806][ T6886] batman_adv: batadv0: Interface activated: batadv_slave_1
[  449.764119][ T7006] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  449.840105][ T6886] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  449.849287][ T6886] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  449.858305][ T6886] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  449.867563][ T6886] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  450.214578][ T7143] netlink: 4 bytes leftover after parsing attributes in process `syz.4.179'.
[  450.301171][ T7143] netlink: 4 bytes leftover after parsing attributes in process `syz.4.179'.
[  450.351174][ T7146] loop3: detected capacity change from 0 to 128
[  450.460847][ T7146] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  451.286885][ T7146] overlayfs: failed to resolve './file1': -2
[  451.325799][ T7006] 8021q: adding VLAN 0 to HW filter on device bond0
[  451.566866][ T7006] 8021q: adding VLAN 0 to HW filter on device team0
[  451.644561][   T11] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  451.660887][   T11] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9
[  451.679547][   T11] asix 7-1:0.0: probe with driver asix failed with error -71
[  451.703031][ T3629] bridge0: port 1(bridge_slave_0) entered blocking state
[  451.710681][ T3629] bridge0: port 1(bridge_slave_0) entered forwarding state
[  451.725542][ T3629] bridge0: port 2(bridge_slave_1) entered blocking state
[  451.730348][   T11] usb 7-1: USB disconnect, device number 6
[  451.733094][ T3629] bridge0: port 2(bridge_slave_1) entered forwarding state
[  453.349041][ T5938] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  453.540679][ T5938] usb 4-1: Using ep0 maxpacket: 8
[  453.611339][ T5938] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  453.621995][ T5938] usb 4-1: config 0 has no interfaces?
[  453.627740][ T5938] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  453.637322][ T5938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  453.735578][ T7006] 8021q: adding VLAN 0 to HW filter on device batadv0
[  453.780454][ T5938] usb 4-1: config 0 descriptor??
[  454.104537][ T5868] usb 4-1: USB disconnect, device number 3
[  454.355551][ T7006] veth0_vlan: entered promiscuous mode
[  454.402374][ T7189] netlink: 4 bytes leftover after parsing attributes in process `syz.6.188'.
[  454.439668][ T7006] veth1_vlan: entered promiscuous mode
[  454.457024][ T7191] netlink: 4 bytes leftover after parsing attributes in process `syz.6.188'.
[  454.769646][ T7006] veth0_macvtap: entered promiscuous mode
[  454.806846][ T7006] veth1_macvtap: entered promiscuous mode
[  455.083578][ T7006] batman_adv: batadv0: Interface activated: batadv_slave_0
[  455.224679][ T7006] batman_adv: batadv0: Interface activated: batadv_slave_1
[  455.321054][ T7006] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  455.330280][ T7006] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  455.339601][ T7006] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  455.353579][ T7006] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  455.438345][ T7199] loop6: detected capacity change from 0 to 128
[  455.552984][ T7199] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[  456.131324][ T7199] overlayfs: failed to resolve './file1': -2
[  457.229224][ T5868] usb 7-1: new low-speed USB device number 7 using dummy_hcd
[  457.350733][ T4295] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  457.359588][ T4295] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  457.435382][ T5868] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  457.445127][ T5868] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  457.490396][ T5868] usb 7-1: config 0 descriptor??
[  457.690948][ T3604] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  457.703433][ T3604] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  459.446741][ T5868] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  459.457592][ T5868] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9
[  459.469685][ T5868] asix 7-1:0.0: probe with driver asix failed with error -71
[  459.630179][ T5868] usb 7-1: USB disconnect, device number 7
[  463.670363][   T11] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  463.879253][   T11] usb 5-1: Using ep0 maxpacket: 8
[  463.923301][   T11] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  463.934032][   T11] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  463.947776][   T11] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  463.958625][   T11] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  464.094657][   T11] usb 5-1: config 0 descriptor??
[  464.215640][ T7259] netlink: 4 bytes leftover after parsing attributes in process `syz.0.198'.
[  464.312327][ T7259] netlink: 4 bytes leftover after parsing attributes in process `syz.0.198'.
[  464.390527][ T5868] usb 5-1: USB disconnect, device number 4
[  465.075908][ T7271] loop3: detected capacity change from 0 to 128
[  465.157763][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  465.164700][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  465.205000][ T7271] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  465.256184][ T4749] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  465.264543][ T4749] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  465.618015][ T4095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  465.626512][ T4095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  465.769322][   T30] audit: type=1326 audit(1752347719.857:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7273 comm="syz.4.202" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000
[  465.798037][   T30] audit: type=1326 audit(1752347719.857:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7273 comm="syz.4.202" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000
[  465.836896][ T7271] overlayfs: failed to resolve './file1': -2
[  466.641164][ T7284] netlink: 40 bytes leftover after parsing attributes in process `syz.2.159'.
[  466.986346][ T7291] program syz.0.206 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  467.089123][ T5868] usb 4-1: new low-speed USB device number 4 using dummy_hcd
[  467.332200][ T5868] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  467.342616][ T5868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  467.412928][ T7294] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.207'.
[  467.437588][ T5868] usb 4-1: config 0 descriptor??
[  468.590991][ T1862] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  468.810433][ T1862] usb 5-1: Using ep0 maxpacket: 8
[  468.845180][ T1862] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  468.856694][ T1862] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  468.868335][ T1862] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  468.879299][ T1862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  469.090007][   T24] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  469.104132][ T1862] usb 5-1: config 0 descriptor??
[  469.206394][ T7315] loop2: detected capacity change from 0 to 512
[  469.258215][ T7315] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  469.279293][   T24] usb 1-1: config index 0 descriptor too short (expected 23569, got 27)
[  469.288200][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  469.332981][ T1862] usb 5-1: USB disconnect, device number 5
[  469.345868][ T7315] EXT4-fs (loop2): 1 truncate cleaned up
[  469.355886][ T7315] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  469.418331][   T24] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  469.428610][   T24] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  469.437241][   T24] usb 1-1: Manufacturer: syz
[  469.437419][ T7319] loop6: detected capacity change from 0 to 128
[  469.450666][ T5868] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  469.461180][ T5868] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9
[  469.476609][ T5868] asix 4-1:0.0: probe with driver asix failed with error -71
[  469.512288][ T7319] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[  469.542492][ T7315] syz.2.214 (pid 7315) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  469.559199][   T24] usb 1-1: config 0 descriptor??
[  469.595054][ T5868] usb 4-1: USB disconnect, device number 4
[  469.909885][ T7006] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  470.000206][   T24] rc_core: IR keymap rc-hauppauge not found
[  470.006588][   T24] Registered IR keymap rc-empty
[  470.017045][   T24] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  470.034501][   T24] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input7
[  470.193633][    C1] igorplugusb 1-1:0.0: Error: urb status = -32
[  470.286887][   T24] usb 1-1: USB disconnect, device number 3
[  470.311732][ T7319] overlay: ./file1 is not a directory
[  470.971159][ T7335] netlink: 72 bytes leftover after parsing attributes in process `syz.4.218'.
[  471.723021][ T7344] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.221'.
[  471.811769][   T24] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  472.009400][   T24] usb 7-1: Using ep0 maxpacket: 16
[  472.050742][   T24] usb 7-1: config 0 has an invalid interface number: 105 but max is 0
[  472.063110][   T24] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  472.074351][   T24] usb 7-1: config 0 has no interface number 0
[  472.170680][   T24] usb 7-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  472.180246][   T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  472.188504][   T24] usb 7-1: Product: syz
[  472.193343][   T24] usb 7-1: Manufacturer: syz
[  472.198163][   T24] usb 7-1: SerialNumber: syz
[  472.312127][   T24] usb 7-1: config 0 descriptor??
[  472.377882][   T24] usb 7-1: Found UVC 0.00 device syz (046d:08f3)
[  472.384747][   T24] usb 7-1: No valid video chain found.
[  472.532813][   T24] usb 7-1: USB disconnect, device number 8
[  473.101706][ T7359] loop3: detected capacity change from 0 to 8
[  473.480175][ T7359] SQUASHFS error: Unable to read inode 0x127
[  474.369765][ T5938] usb 1-1: new low-speed USB device number 4 using dummy_hcd
[  474.431770][ T7369] loop3: detected capacity change from 0 to 128
[  474.449411][    T9] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  474.485007][ T7369] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  474.569694][ T5938] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  474.579323][ T5938] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  474.630114][    T9] usb 7-1: Using ep0 maxpacket: 8
[  474.661061][    T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  474.671707][    T9] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  474.681211][    T9] usb 7-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  474.690674][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  474.727671][ T5938] usb 1-1: config 0 descriptor??
[  474.834849][    T9] usb 7-1: config 0 descriptor??
[  475.116305][   T24] usb 7-1: USB disconnect, device number 9
[  475.231397][ T7369] overlay: ./file1 is not a directory
[  476.379727][   T24] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  476.460894][ T7383] netlink: 72 bytes leftover after parsing attributes in process `syz.2.232'.
[  476.583749][   T24] usb 4-1: config index 0 descriptor too short (expected 23569, got 27)
[  476.592717][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  476.606507][ T5938] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  476.617159][ T5938] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9
[  476.634307][ T5938] asix 1-1:0.0: probe with driver asix failed with error -71
[  476.685934][   T24] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  476.695556][   T24] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  476.704112][   T24] usb 4-1: Manufacturer: syz
[  476.835665][ T5938] usb 1-1: USB disconnect, device number 4
[  476.887180][   T24] usb 4-1: config 0 descriptor??
[  477.283764][ T7384] loop6: detected capacity change from 0 to 4096
[  477.395174][ T7384] ntfs3: Unknown parameter '0xffffffffffffffff0x000000000000ee01'
[  477.409764][   T24] rc_core: IR keymap rc-hauppauge not found
[  477.416613][   T24] Registered IR keymap rc-empty
[  477.425535][   T24] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  477.440091][   T24] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input8
[  477.659478][    C1] igorplugusb 4-1:0.0: Error: urb status = -32
[  477.720491][   T24] usb 4-1: USB disconnect, device number 5
[  478.530817][ T7401] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.237'.
[  479.149347][ T5823] Bluetooth: hci5: unexpected event 0x03 length: 17 > 11
[  479.664137][ T5938] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  479.800688][ T7416] netlink: 72 bytes leftover after parsing attributes in process `syz.0.244'.
[  479.909112][ T5938] usb 3-1: Using ep0 maxpacket: 8
[  479.941580][ T5938] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  479.953365][ T5938] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  479.963758][ T5938] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  479.973395][ T5938] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  480.052636][ T5938] usb 3-1: config 0 descriptor??
[  480.314860][ T5938] usb 3-1: USB disconnect, device number 5
[  481.878303][    T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  482.089574][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  482.101230][    T9] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  482.110746][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  482.231432][    T9] usb 3-1: config 0 descriptor??
[  482.697810][    T9] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor
[  482.760602][    T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0002/input/input9
[  483.113489][    T9] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0
[  483.270658][    T9] usb 3-1: USB disconnect, device number 6
[  483.499375][   T24] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  483.541188][ T7448] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.254'.
[  483.753926][   T24] usb 4-1: config index 0 descriptor too short (expected 23569, got 27)
[  483.762981][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  483.819516][   T24] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  483.829461][   T24] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  483.837725][   T24] usb 4-1: Manufacturer: syz
[  483.968939][   T24] usb 4-1: config 0 descriptor??
[  483.995200][ T7449] fido_id[7449]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  484.580690][   T24] rc_core: IR keymap rc-hauppauge not found
[  484.586836][   T24] Registered IR keymap rc-empty
[  484.595141][   T24] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  484.662316][ T7460] netlink: 72 bytes leftover after parsing attributes in process `syz.4.256'.
[  484.761045][   T24] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input10
[  484.787247][    C1] igorplugusb 4-1:0.0: Error: urb status = -32
[  484.805410][   T24] usb 4-1: USB disconnect, device number 6
[  485.433996][ T5864] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  485.679918][ T5864] usb 7-1: Using ep0 maxpacket: 8
[  485.750873][ T5864] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  485.767191][ T5864] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  485.779010][ T5864] usb 7-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  485.788961][ T5864] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  486.013906][ T5864] usb 7-1: config 0 descriptor??
[  486.337657][   T24] usb 7-1: USB disconnect, device number 10
[  487.033053][   T30] audit: type=1326 audit(1752347741.107:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7487 comm="syz.2.265" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000
[  487.141479][   T30] audit: type=1326 audit(1752347741.187:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7487 comm="syz.2.265" exe="/root/syz-executor" sig=0 arch=40000003 syscall=356 compat=1 ip=0xf70fe539 code=0x7ffc0000
[  487.163997][   T30] audit: type=1326 audit(1752347741.187:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7487 comm="syz.2.265" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf70fe539 code=0x7ffc0000
[  487.449149][   T30] audit: type=1326 audit(1752347741.527:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7487 comm="syz.2.265" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf70fe539 code=0x7ffc0000
[  487.549303][   T24] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  487.783503][   T24] usb 1-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0
[  487.794048][   T24] usb 1-1: config 0 interface 0 has no altsetting 0
[  487.801299][   T24] usb 1-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00
[  487.813142][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  487.868098][ T7496] netlink: 65039 bytes leftover after parsing attributes in process `syz.6.267'.
[  487.967355][   T24] usb 1-1: config 0 descriptor??
[  488.080389][ T5864] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  488.279427][ T5864] usb 5-1: device descriptor read/64, error -71
[  488.349543][   T30] audit: type=1326 audit(1752347742.437:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7487 comm="syz.2.265" exe="/root/syz-executor" sig=0 arch=40000003 syscall=91 compat=1 ip=0xf70fe539 code=0x7ffc0000
[  488.423066][ T7489] loop2: detected capacity change from 0 to 8192
[  488.467282][   T30] audit: type=1326 audit(1752347742.497:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7487 comm="syz.2.265" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70fe539 code=0x7ffc0000
[  488.489915][   T30] audit: type=1326 audit(1752347742.517:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7487 comm="syz.2.265" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70fe539 code=0x7ffc0000
[  488.530917][   T24] apple 0003:05AC:027A.0003: hidraw0: USB HID v8.00 Device [HID 05ac:027a] on usb-dummy_hcd.0-1/input0
[  488.597929][ T5864] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  488.679381][   T24] usb 1-1: USB disconnect, device number 5
[  488.720875][   T30] audit: type=1326 audit(1752347742.607:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7487 comm="syz.2.265" exe="/root/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf70fe539 code=0x7ffc0000
[  488.745681][   T30] audit: type=1326 audit(1752347742.617:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7487 comm="syz.2.265" exe="/root/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf70fe539 code=0x7ffc0000
[  488.769060][   T30] audit: type=1326 audit(1752347742.617:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7487 comm="syz.2.265" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf70fe539 code=0x7ffc0000
[  488.837931][ T5864] usb 5-1: device descriptor read/64, error -71
[  488.951714][ T5864] usb usb5-port1: attempt power cycle
[  489.335314][ T5864] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  489.457968][ T5864] usb 5-1: device descriptor read/8, error -71
[  489.594826][ T7504] netlink: 72 bytes leftover after parsing attributes in process `syz.6.270'.
[  489.615153][ T7501] fido_id[7501]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  489.753211][ T5864] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  489.807249][ T5864] usb 5-1: device descriptor read/8, error -71
[  489.958825][ T5864] usb usb5-port1: unable to enumerate USB device
[  490.799060][ T5864] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  491.043009][ T5864] usb 7-1: config index 0 descriptor too short (expected 23569, got 27)
[  491.052154][ T5864] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  491.159826][ T5864] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  491.169575][ T5864] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  491.177827][ T5864] usb 7-1: Manufacturer: syz
[  491.263476][ T5864] usb 7-1: config 0 descriptor??
[  491.693375][ T5864] rc_core: IR keymap rc-hauppauge not found
[  491.710853][ T5864] Registered IR keymap rc-empty
[  491.718263][ T5864] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0
[  491.732566][ T5864] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input11
[  491.793190][ T7526] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.279'.
[  491.863663][ T5864] usb 7-1: USB disconnect, device number 11
[  491.868073][   T24] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  492.066113][   T24] usb 5-1: Using ep0 maxpacket: 8
[  492.117415][   T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  492.128327][   T24] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  492.137770][   T24] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  492.147356][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  492.275295][   T24] usb 5-1: config 0 descriptor??
[  492.544719][   T24] usb 5-1: USB disconnect, device number 10
[  493.346665][ T7544] netlink: 72 bytes leftover after parsing attributes in process `syz.3.283'.
[  495.539540][ T5864] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  495.733311][ T7562] netlink: 4 bytes leftover after parsing attributes in process `syz.3.288'.
[  495.794834][ T7562] netlink: 4 bytes leftover after parsing attributes in process `syz.3.288'.
[  495.811365][ T5864] usb 5-1: unable to read config index 0 descriptor/start: -61
[  495.821220][ T5864] usb 5-1: can't read configurations, error -61
[  496.029245][ T5864] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  496.244895][ T5864] usb 5-1: unable to read config index 0 descriptor/start: -61
[  496.253414][ T5864] usb 5-1: can't read configurations, error -61
[  496.317687][ T5864] usb usb5-port1: attempt power cycle
[  496.699334][ T5864] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  496.776496][ T5864] usb 5-1: unable to read config index 0 descriptor/start: -61
[  496.785046][ T5864] usb 5-1: can't read configurations, error -61
[  496.887537][ T7572] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.291'.
[  497.041666][ T5864] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  497.155180][ T5864] usb 5-1: unable to read config index 0 descriptor/start: -61
[  497.163438][ T5864] usb 5-1: can't read configurations, error -61
[  497.213204][ T5864] usb usb5-port1: unable to enumerate USB device
[  497.519327][ T5864] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  497.730970][ T5864] usb 7-1: config index 0 descriptor too short (expected 23569, got 27)
[  497.746047][ T5864] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  497.811700][ T5864] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  497.821574][ T5864] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  497.830035][ T5864] usb 7-1: Manufacturer: syz
[  497.860736][ T5864] usb 7-1: config 0 descriptor??
[  498.292312][ T5864] rc_core: IR keymap rc-hauppauge not found
[  498.298362][ T5864] Registered IR keymap rc-empty
[  498.305396][ T5864] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0
[  498.317981][ T5864] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input12
[  498.401574][ T5864] usb 7-1: USB disconnect, device number 12
[  498.479402][   T11] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  498.639279][   T11] usb 4-1: Using ep0 maxpacket: 8
[  498.699632][   T11] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  498.710946][   T11] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  498.720979][   T11] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  498.730886][   T11] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  498.906714][   T11] usb 4-1: config 0 descriptor??
[  498.987354][ T7590] netlink: 60 bytes leftover after parsing attributes in process `syz.4.296'.
[  499.137232][   T11] usb 4-1: USB disconnect, device number 7
[  500.937613][ T7605] netlink: 4 bytes leftover after parsing attributes in process `syz.4.300'.
[  501.037348][ T7605] netlink: 4 bytes leftover after parsing attributes in process `syz.4.300'.
[  504.285728][ T7621] loop4: detected capacity change from 0 to 64
[  504.567679][ T7624] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.304'.
[  504.899028][   T11] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  505.173092][   T11] usb 7-1: unable to read config index 0 descriptor/start: -61
[  505.181797][   T11] usb 7-1: can't read configurations, error -61
[  505.380052][   T11] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  505.440767][ T7632] netlink: 60 bytes leftover after parsing attributes in process `syz.4.308'.
[  505.586745][   T11] usb 7-1: unable to read config index 0 descriptor/start: -61
[  505.595003][   T11] usb 7-1: can't read configurations, error -61
[  505.607586][ T5864] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  505.661254][   T11] usb usb7-port1: attempt power cycle
[  505.810288][ T5864] usb 3-1: config index 0 descriptor too short (expected 23569, got 27)
[  505.819284][ T5864] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  505.950384][ T5864] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  505.960409][ T5864] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  505.969534][ T5864] usb 3-1: Manufacturer: syz
[  506.057585][ T5864] usb 3-1: config 0 descriptor??
[  506.079625][   T11] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  506.154478][   T11] usb 7-1: unable to read config index 0 descriptor/start: -61
[  506.163168][   T11] usb 7-1: can't read configurations, error -61
[  506.414063][   T11] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  506.500627][   T11] usb 7-1: unable to read config index 0 descriptor/start: -61
[  506.508452][   T11] usb 7-1: can't read configurations, error -61
[  506.515602][ T5864] rc_core: IR keymap rc-hauppauge not found
[  506.521704][ T5864] Registered IR keymap rc-empty
[  506.528288][ T5864] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  506.550719][ T5864] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input13
[  506.612442][   T11] usb usb7-port1: unable to enumerate USB device
[  506.685797][ T5864] usb 3-1: USB disconnect, device number 7
[  507.049206][   T11] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  507.273284][   T11] usb 5-1: Using ep0 maxpacket: 8
[  507.307863][   T11] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  507.318533][   T11] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  507.328133][   T11] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  507.337535][   T11] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  507.459816][   T11] usb 5-1: config 0 descriptor??
[  507.694513][ T5864] usb 5-1: USB disconnect, device number 15
[  508.075873][ T7650] netlink: 56 bytes leftover after parsing attributes in process `syz.2.312'.
[  508.089654][ T7650] netlink: 56 bytes leftover after parsing attributes in process `syz.2.312'.
[  508.111865][ T7651] netlink: 4 bytes leftover after parsing attributes in process `syz.6.311'.
[  508.133410][ T7651] netlink: 4 bytes leftover after parsing attributes in process `syz.6.311'.
[  509.536828][   T49] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  509.548482][   T49] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  509.563615][   T49] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  509.579215][   T49] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  509.601663][   T49] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  510.428608][ T7668] loop6: detected capacity change from 0 to 64
[  510.762489][ T7671] loop4: detected capacity change from 0 to 64
[  511.271740][ T7674] netlink: 60 bytes leftover after parsing attributes in process `syz.2.319'.
[  511.659984][   T49] Bluetooth: hci2: command tx timeout
[  512.289652][   T11] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  512.442879][ T7661] chnl_net:caif_netlink_parms(): no params data found
[  512.543464][   T11] usb 5-1: unable to read config index 0 descriptor/start: -61
[  512.551439][   T11] usb 5-1: can't read configurations, error -61
[  512.749093][   T11] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  512.966134][   T11] usb 5-1: unable to read config index 0 descriptor/start: -61
[  512.974053][   T11] usb 5-1: can't read configurations, error -61
[  513.029192][   T11] usb usb5-port1: attempt power cycle
[  513.259636][   T49] Bluetooth: hci5: command 0x0406 tx timeout
[  513.430136][   T11] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  513.592821][   T11] usb 5-1: unable to read config index 0 descriptor/start: -61
[  513.605563][   T11] usb 5-1: can't read configurations, error -61
[  513.743601][ T5823] Bluetooth: hci2: command tx timeout
[  513.809443][   T11] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  513.853464][   T11] usb 5-1: unable to read config index 0 descriptor/start: -61
[  513.861470][   T11] usb 5-1: can't read configurations, error -61
[  513.911457][   T11] usb usb5-port1: unable to enumerate USB device
[  514.672767][ T7661] bridge0: port 1(bridge_slave_0) entered blocking state
[  514.681789][ T7661] bridge0: port 1(bridge_slave_0) entered disabled state
[  514.689463][ T7661] bridge_slave_0: entered allmulticast mode
[  514.697624][ T7661] bridge_slave_0: entered promiscuous mode
[  514.769221][   T11] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[  514.872815][ T7661] bridge0: port 2(bridge_slave_1) entered blocking state
[  514.880568][ T7661] bridge0: port 2(bridge_slave_1) entered disabled state
[  514.888092][ T7661] bridge_slave_1: entered allmulticast mode
[  514.897030][ T7661] bridge_slave_1: entered promiscuous mode
[  514.989653][   T11] usb 7-1: Using ep0 maxpacket: 8
[  515.078236][   T11] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  515.089022][   T11] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  515.098149][   T11] usb 7-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  515.107482][   T11] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  515.164770][   T11] usb 7-1: config 0 descriptor??
[  515.290569][ T7661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  515.364572][ T7661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  515.401217][   T11] usb 7-1: USB disconnect, device number 17
[  515.738035][ T7661] team0: Port device team_slave_0 added
[  515.819973][ T5823] Bluetooth: hci2: command tx timeout
[  515.855559][ T7661] team0: Port device team_slave_1 added
[  516.145335][ T7661] batman_adv: batadv0: Adding interface: batadv_slave_0
[  516.152634][ T7661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  516.183368][ T7661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  516.309442][ T7702] loop2: detected capacity change from 0 to 2048
[  516.353515][ T7661] batman_adv: batadv0: Adding interface: batadv_slave_1
[  516.361003][ T7661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  516.392647][ T7661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  516.739285][ T7705] loop6: detected capacity change from 0 to 64
[  516.800757][ T7705] hfs: unable to locate alternate MDB
[  516.806280][ T7705] hfs: continuing without an alternate MDB
[  516.935506][ T7705] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended.  mounting read-only.
[  516.973670][ T7702] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  517.037490][ T7661] hsr_slave_0: entered promiscuous mode
[  517.051602][ T7661] hsr_slave_1: entered promiscuous mode
[  517.076944][ T7705] hfs: bad catalog entry type 0
[  517.084457][ T7702] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  517.152267][ T7702] overlayfs: failed to verify upper root origin
[  517.360784][   T49] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  517.370644][   T49] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  517.393012][   T49] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  517.408634][   T49] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  517.420108][   T49] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  517.982493][   T49] Bluetooth: hci2: command tx timeout
[  517.999286][ T7714] netlink: 48 bytes leftover after parsing attributes in process `syz.4.331'.
[  518.037422][ T7006] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  518.412904][ T7716] loop6: detected capacity change from 0 to 64
[  519.515406][   T49] Bluetooth: hci3: command tx timeout
[  520.126396][ T7728] batadv_slave_0: entered promiscuous mode
[  520.285436][ T7728] batadv_slave_0: left promiscuous mode
[  520.837775][ T7727] sctp: failed to load transform for md5: -2
[  520.989417][ T5864] usb 5-1: new full-speed USB device number 20 using dummy_hcd
[  521.033208][ T7661] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  521.162437][ T7661] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  521.194526][ T5864] usb 5-1: too many endpoints for config 0 interface 0 altsetting 255: 33, using maximum allowed: 30
[  521.205815][ T5864] usb 5-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 33
[  521.219153][ T5864] usb 5-1: config 0 interface 0 has no altsetting 0
[  521.226014][ T5864] usb 5-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.00
[  521.235288][ T5864] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  521.332515][ T7661] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  521.471674][ T7661] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  521.483166][ T5864] usb 5-1: config 0 descriptor??
[  521.601001][ T5823] Bluetooth: hci3: command tx timeout
[  521.630053][ T7711] chnl_net:caif_netlink_parms(): no params data found
[  521.708317][   T11] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  521.882839][   T11] usb 3-1: Using ep0 maxpacket: 8
[  521.959337][ T5864] usbhid 5-1:0.0: can't add hid device: -71
[  521.966218][ T5864] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  521.993064][   T11] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  522.004222][   T11] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  522.019499][   T11] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  522.030268][   T11] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  522.139668][   T11] usb 3-1: config 0 descriptor??
[  522.171036][ T5864] usb 5-1: USB disconnect, device number 20
[  522.441356][ T5864] usb 3-1: USB disconnect, device number 8
[  523.510144][ T5823] Bluetooth: hci6: command 0x0406 tx timeout
[  523.658979][   T49] Bluetooth: hci3: command tx timeout
[  523.783701][ T7661] 8021q: adding VLAN 0 to HW filter on device bond0
[  524.030971][ T7661] 8021q: adding VLAN 0 to HW filter on device team0
[  524.224113][ T3629] bridge0: port 1(bridge_slave_0) entered blocking state
[  524.231556][ T3629] bridge0: port 1(bridge_slave_0) entered forwarding state
[  524.397683][ T3629] bridge0: port 2(bridge_slave_1) entered blocking state
[  524.405262][ T3629] bridge0: port 2(bridge_slave_1) entered forwarding state
[  524.567928][ T7751] netlink: 48 bytes leftover after parsing attributes in process `syz.2.341'.
[  524.768048][ T7753] loop4: detected capacity change from 0 to 64
[  524.881794][ T7711] bridge0: port 1(bridge_slave_0) entered blocking state
[  524.889664][ T7711] bridge0: port 1(bridge_slave_0) entered disabled state
[  524.897450][ T7711] bridge_slave_0: entered allmulticast mode
[  524.905946][ T7711] bridge_slave_0: entered promiscuous mode
[  525.120702][ T7711] bridge0: port 2(bridge_slave_1) entered blocking state
[  525.128134][ T7711] bridge0: port 2(bridge_slave_1) entered disabled state
[  525.138266][ T7711] bridge_slave_1: entered allmulticast mode
[  525.146655][ T7711] bridge_slave_1: entered promiscuous mode
[  525.739197][   T49] Bluetooth: hci3: command tx timeout
[  525.914971][ T7711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  526.135306][ T7711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  526.564946][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  526.571890][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  526.629884][ T7711] team0: Port device team_slave_0 added
[  526.667602][ T7711] team0: Port device team_slave_1 added
[  526.707349][ T7765] batadv_slave_0: entered promiscuous mode
[  526.729423][ T7765] batadv_slave_0: left promiscuous mode
[  527.347263][ T7711] batman_adv: batadv0: Adding interface: batadv_slave_0
[  527.354681][ T7711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  527.381446][ T7711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  527.720491][ T7711] batman_adv: batadv0: Adding interface: batadv_slave_1
[  527.727634][ T7711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  527.758375][ T7711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  527.846698][   T11] usb 3-1: new full-speed USB device number 9 using dummy_hcd
[  527.869111][ T4295] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  528.016018][   T11] usb 3-1: too many endpoints for config 0 interface 0 altsetting 255: 33, using maximum allowed: 30
[  528.027343][   T11] usb 3-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 33
[  528.043048][   T11] usb 3-1: config 0 interface 0 has no altsetting 0
[  528.055584][   T11] usb 3-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.00
[  528.066922][   T11] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  528.140487][ T4295] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  528.348129][   T11] usb 3-1: config 0 descriptor??
[  528.635806][ T4295] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  528.758442][ T7711] hsr_slave_0: entered promiscuous mode
[  528.777332][ T7711] hsr_slave_1: entered promiscuous mode
[  528.786534][ T7711] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  528.794367][ T7711] Cannot create hsr debugfs directory
[  528.855684][   T11] usbhid 3-1:0.0: can't add hid device: -71
[  528.865261][   T11] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  528.882635][    T9] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[  528.951720][   T11] usb 3-1: USB disconnect, device number 9
[  528.983986][ T4295] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  529.097047][    T9] usb 7-1: Using ep0 maxpacket: 8
[  529.160186][    T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  529.171037][    T9] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  529.184808][    T9] usb 7-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  529.195834][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  529.251132][    T9] usb 7-1: config 0 descriptor??
[  529.299479][ T7661] 8021q: adding VLAN 0 to HW filter on device batadv0
[  529.540335][    T9] usb 7-1: USB disconnect, device number 18
[  530.077333][ T4295] bridge_slave_1: left allmulticast mode
[  530.084007][ T4295] bridge_slave_1: left promiscuous mode
[  530.091473][ T4295] bridge0: port 2(bridge_slave_1) entered disabled state
[  530.267504][ T4295] bridge_slave_0: left allmulticast mode
[  530.274045][ T4295] bridge_slave_0: left promiscuous mode
[  530.280489][ T4295] bridge0: port 1(bridge_slave_0) entered disabled state
[  531.180797][ T4295] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  531.310365][ T4295] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  531.355379][ T4295] bond0 (unregistering): Released all slaves
[  532.338546][ T7800] netlink: 48 bytes leftover after parsing attributes in process `syz.2.352'.
[  532.613067][ T4295] hsr_slave_0: left promiscuous mode
[  532.660229][ T4295] hsr_slave_1: left promiscuous mode
[  532.667872][ T4295] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  532.675610][ T4295] batman_adv: batadv0: Removing interface: batadv_slave_0
[  532.829471][ T4295] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  532.837068][ T4295] batman_adv: batadv0: Removing interface: batadv_slave_1
[  532.983176][ T4295] veth1_macvtap: left promiscuous mode
[  532.989537][ T4295] veth0_macvtap: left promiscuous mode
[  532.995553][ T4295] veth1_vlan: left promiscuous mode
[  533.001320][ T4295] veth0_vlan: left promiscuous mode
[  533.813435][   T24] IPVS: starting estimator thread 0...
[  533.935622][ T7812] IPVS: using max 240 ests per chain, 12000 per kthread
[  534.354487][ T7806] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  534.376297][ T4295] team0 (unregistering): Port device team_slave_1 removed
[  534.596656][ T4295] team0 (unregistering): Port device team_slave_0 removed
[  535.669700][ T1862] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  535.860957][ T7661] veth0_vlan: entered promiscuous mode
[  535.971329][ T1862] usb 5-1: config index 0 descriptor too short (expected 23569, got 27)
[  535.980127][ T1862] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  536.110635][ T1862] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  536.120109][ T1862] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  536.128356][ T1862] usb 5-1: Manufacturer: syz
[  536.129677][ T4749] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  536.181692][ T1862] usb 5-1: config 0 descriptor??
[  536.221577][ T7711] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  536.280008][ T7661] veth1_vlan: entered promiscuous mode
[  536.299645][ T7711] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  536.382345][ T4749] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  536.421907][ T7823] batadv_slave_0: entered promiscuous mode
[  536.457820][ T7823] batadv_slave_0: left promiscuous mode
[  536.510601][ T7711] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  536.631103][ T4749] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  536.696726][ T7711] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  536.729483][ T1862] rc_core: IR keymap rc-hauppauge not found
[  536.735599][ T1862] Registered IR keymap rc-empty
[  536.743224][ T1862] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  536.760180][ T1862] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input14
[  536.851381][ T4749] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  537.037024][    C1] igorplugusb 5-1:0.0: Error: urb status = -32
[  537.096526][ T1862] usb 5-1: USB disconnect, device number 21
[  537.227963][ T7661] veth0_macvtap: entered promiscuous mode
[  537.324533][ T7661] veth1_macvtap: entered promiscuous mode
[  537.555480][ T7661] batman_adv: batadv0: Interface activated: batadv_slave_0
[  537.658093][ T4749] bridge_slave_1: left allmulticast mode
[  537.664220][ T4749] bridge_slave_1: left promiscuous mode
[  537.674125][ T4749] bridge0: port 2(bridge_slave_1) entered disabled state
[  537.747147][ T4749] bridge_slave_0: left allmulticast mode
[  537.753533][ T4749] bridge_slave_0: left promiscuous mode
[  537.760357][ T4749] bridge0: port 1(bridge_slave_0) entered disabled state
[  538.334941][ T4749] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  538.354490][ T4749] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  538.370638][ T4749] bond0 (unregistering): Released all slaves
[  538.412848][ T7661] batman_adv: batadv0: Interface activated: batadv_slave_1
[  538.618490][ T7661] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  538.627834][ T7661] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  538.637608][ T7661] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  538.646708][ T7661] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  538.660234][   T11] usb 5-1: new full-speed USB device number 22 using dummy_hcd
[  538.891256][   T11] usb 5-1: too many endpoints for config 0 interface 0 altsetting 255: 33, using maximum allowed: 30
[  538.906246][   T11] usb 5-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 33
[  538.920774][   T11] usb 5-1: config 0 interface 0 has no altsetting 0
[  538.927566][   T11] usb 5-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.00
[  538.937353][   T11] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  538.972101][   T11] usb 5-1: config 0 descriptor??
[  539.352434][ T4749] hsr_slave_0: left promiscuous mode
[  539.369692][ T4749] hsr_slave_1: left promiscuous mode
[  539.381147][ T4749] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  539.388998][ T4749] batman_adv: batadv0: Removing interface: batadv_slave_0
[  539.421471][   T11] usbhid 5-1:0.0: can't add hid device: -71
[  539.429130][   T11] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  539.487897][   T11] usb 5-1: USB disconnect, device number 22
[  539.530289][ T4749] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  539.537984][ T4749] batman_adv: batadv0: Removing interface: batadv_slave_1
[  539.605072][ T4749] veth1_macvtap: left promiscuous mode
[  539.610946][ T4749] veth0_macvtap: left promiscuous mode
[  539.620422][ T4749] veth1_vlan: left promiscuous mode
[  539.625844][ T4749] veth0_vlan: left promiscuous mode
[  540.361104][ T4749] team0 (unregistering): Port device team_slave_1 removed
[  540.471013][ T4749] team0 (unregistering): Port device team_slave_0 removed
[  541.044222][ T7711] 8021q: adding VLAN 0 to HW filter on device bond0
[  541.351259][ T7711] 8021q: adding VLAN 0 to HW filter on device team0
[  541.521962][ T7247] bridge0: port 1(bridge_slave_0) entered blocking state
[  541.529680][ T7247] bridge0: port 1(bridge_slave_0) entered forwarding state
[  541.675283][ T7247] bridge0: port 2(bridge_slave_1) entered blocking state
[  541.683146][ T7247] bridge0: port 2(bridge_slave_1) entered forwarding state
[  543.616784][ T5868] kernel read not supported for file /audio1 (pid: 5868 comm: kworker/1:4)
[  544.048511][ T7711] 8021q: adding VLAN 0 to HW filter on device batadv0
[  546.406635][ T7711] veth0_vlan: entered promiscuous mode
[  546.569786][ T7711] veth1_vlan: entered promiscuous mode
[  546.965994][ T7247] Bluetooth: hci4: Frame reassembly failed (-84)
[  547.031983][ T7711] veth0_macvtap: entered promiscuous mode
[  547.182340][ T7711] veth1_macvtap: entered promiscuous mode
[  547.665352][ T7711] batman_adv: batadv0: Interface activated: batadv_slave_0
[  547.758583][ T7711] batman_adv: batadv0: Interface activated: batadv_slave_1
[  547.807868][ T7711] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  547.819712][ T7711] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  547.828567][ T7711] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  547.838372][ T7711] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  548.523293][ T3065] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  548.533369][ T3065] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  548.591390][ T3960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  548.600118][ T3960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  549.019124][ T5823] Bluetooth: hci4: command 0x1003 tx timeout
[  549.025666][   T49] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  550.241685][ T7925] syz.4.369 uses obsolete (PF_INET,SOCK_PACKET)
[  550.253601][ T5823] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  550.263808][ T5823] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  550.290051][ T5823] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  550.304008][ T5823] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  550.326401][ T5823] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  551.590333][ T7926] chnl_net:caif_netlink_parms(): no params data found
[  552.379635][   T49] Bluetooth: hci4: command tx timeout
[  553.864661][ T7926] bridge0: port 1(bridge_slave_0) entered blocking state
[  553.873466][ T7926] bridge0: port 1(bridge_slave_0) entered disabled state
[  553.882024][ T7926] bridge_slave_0: entered allmulticast mode
[  553.890488][ T7926] bridge_slave_0: entered promiscuous mode
[  554.272905][ T5823] Bluetooth: hci0: command 0x0406 tx timeout
[  554.311497][ T7926] bridge0: port 2(bridge_slave_1) entered blocking state
[  554.320532][ T7926] bridge0: port 2(bridge_slave_1) entered disabled state
[  554.328037][ T7926] bridge_slave_1: entered allmulticast mode
[  554.336291][ T7926] bridge_slave_1: entered promiscuous mode
[  554.460784][   T49] Bluetooth: hci4: command tx timeout
[  554.544526][ T7926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  554.617690][ T7926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  555.018561][ T7926] team0: Port device team_slave_0 added
[  555.069595][ T7926] team0: Port device team_slave_1 added
[  555.131643][ T5823] Bluetooth: hci6: sending frame failed (-49)
[  555.138152][   T49] Bluetooth: hci6: Opcode 0x1003 failed: -49
[  555.427797][ T7926] batman_adv: batadv0: Adding interface: batadv_slave_0
[  555.435666][ T7926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  555.462754][ T7926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  555.565527][ T7926] batman_adv: batadv0: Adding interface: batadv_slave_1
[  555.572892][ T7926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  555.604545][ T7926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  556.109927][   T11] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  556.177653][ T7926] hsr_slave_0: entered promiscuous mode
[  556.186194][ T7926] hsr_slave_1: entered promiscuous mode
[  556.193898][ T7926] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  556.201662][ T7926] Cannot create hsr debugfs directory
[  556.293980][   T11] usb 5-1: Using ep0 maxpacket: 32
[  556.329749][   T11] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  556.340244][   T11] usb 5-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  556.426839][   T11] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  556.436365][   T11] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  556.445039][   T11] usb 5-1: Product: syz
[  556.449393][   T11] usb 5-1: Manufacturer: syz
[  556.539174][   T49] Bluetooth: hci4: command tx timeout
[  556.558503][   T11] hub 5-1:4.0: bad descriptor, ignoring hub
[  556.564847][   T11] hub 5-1:4.0: probe with driver hub failed with error -5
[  556.577110][   T11] usbhid 5-1:4.0: couldn't find an input interrupt endpoint
[  558.105131][ T7926] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  558.234644][ T7926] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  558.344361][ T7926] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  558.510790][ T7926] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  558.619715][   T49] Bluetooth: hci4: command tx timeout
[  559.289116][ T1862] usb 5-1: USB disconnect, device number 23
[  559.519782][ T4295] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  559.527813][ T4295] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  559.906949][ T4295] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  559.915169][ T4295] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  560.130638][ T7926] 8021q: adding VLAN 0 to HW filter on device bond0
[  560.472905][ T7926] 8021q: adding VLAN 0 to HW filter on device team0
[  560.733368][ T4295] bridge0: port 1(bridge_slave_0) entered blocking state
[  560.740784][ T4295] bridge0: port 1(bridge_slave_0) entered forwarding state
[  561.009979][ T4295] bridge0: port 2(bridge_slave_1) entered blocking state
[  561.017379][ T4295] bridge0: port 2(bridge_slave_1) entered forwarding state
[  562.633737][ T5823] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  562.668498][ T5823] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  562.680892][ T5823] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  562.722974][ T5823] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  562.736817][ T5823] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  563.488458][ T3604] Bluetooth: hci7: Frame reassembly failed (-84)
[  564.422484][ T8028] chnl_net:caif_netlink_parms(): no params data found
[  564.760254][ T7926] 8021q: adding VLAN 0 to HW filter on device batadv0
[  564.859153][ T5823] Bluetooth: hci6: command tx timeout
[  565.491321][ T8056] netlink: 'syz.7.390': attribute type 1 has an invalid length.
[  565.500865][   T49] Bluetooth: hci7: Opcode 0x1003 failed: -110
[  566.713983][ T8068] netlink: 'syz.7.392': attribute type 10 has an invalid length.
[  566.746970][ T8068] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  566.949372][   T49] Bluetooth: hci6: command tx timeout
[  567.315477][ T8073] loop5: detected capacity change from 0 to 256
[  567.691787][ T8028] bridge0: port 1(bridge_slave_0) entered blocking state
[  567.699318][ T8028] bridge0: port 1(bridge_slave_0) entered disabled state
[  567.706794][ T8028] bridge_slave_0: entered allmulticast mode
[  567.716174][ T8028] bridge_slave_0: entered promiscuous mode
[  567.921709][ T8028] bridge0: port 2(bridge_slave_1) entered blocking state
[  567.930303][ T8028] bridge0: port 2(bridge_slave_1) entered disabled state
[  567.937869][ T8028] bridge_slave_1: entered allmulticast mode
[  567.946338][ T8028] bridge_slave_1: entered promiscuous mode
[  568.265708][ T8073] FAT-fs (loop5): Directory bread(block 64) failed
[  568.272859][ T8073] FAT-fs (loop5): Directory bread(block 65) failed
[  568.280224][ T8073] FAT-fs (loop5): Directory bread(block 66) failed
[  568.286864][ T8073] FAT-fs (loop5): Directory bread(block 67) failed
[  568.300570][ T8073] FAT-fs (loop5): Directory bread(block 68) failed
[  568.307230][ T8073] FAT-fs (loop5): Directory bread(block 69) failed
[  568.314213][ T8073] FAT-fs (loop5): Directory bread(block 70) failed
[  568.321001][ T8073] FAT-fs (loop5): Directory bread(block 71) failed
[  568.327709][ T8073] FAT-fs (loop5): Directory bread(block 72) failed
[  568.334420][ T8073] FAT-fs (loop5): Directory bread(block 73) failed
[  568.610143][ T8028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  568.719521][ T8028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  569.022780][   T49] Bluetooth: hci6: command tx timeout
[  569.106682][ T8028] team0: Port device team_slave_0 added
[  569.199320][ T8028] team0: Port device team_slave_1 added
[  569.887126][ T7926] veth0_vlan: entered promiscuous mode
[  569.960063][ T8028] batman_adv: batadv0: Adding interface: batadv_slave_0
[  569.967393][ T8028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  569.995625][ T8028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  570.140104][ T8028] batman_adv: batadv0: Adding interface: batadv_slave_1
[  570.147182][ T8028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  570.174303][ T8028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  570.397135][ T7926] veth1_vlan: entered promiscuous mode
[  570.844087][ T8028] hsr_slave_0: entered promiscuous mode
[  570.860906][ T8028] hsr_slave_1: entered promiscuous mode
[  570.868440][ T8028] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  570.877185][ T8028] Cannot create hsr debugfs directory
[  571.099966][   T49] Bluetooth: hci6: command tx timeout
[  571.394100][ T7926] veth0_macvtap: entered promiscuous mode
[  571.498099][ T7926] veth1_macvtap: entered promiscuous mode
[  571.822052][ T7926] batman_adv: batadv0: Interface activated: batadv_slave_0
[  572.011476][ T7926] batman_adv: batadv0: Interface activated: batadv_slave_1
[  572.302423][ T7926] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  572.311596][ T7926] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  572.320602][ T7926] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  572.329633][ T7926] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  572.848332][   T11] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[  573.082362][   T11] usb 6-1: too many endpoints for config 0 interface 0 altsetting 255: 33, using maximum allowed: 30
[  573.093953][   T11] usb 6-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 33
[  573.111948][   T11] usb 6-1: config 0 interface 0 has no altsetting 0
[  573.121304][   T11] usb 6-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.00
[  573.130970][   T11] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  573.248876][   T11] usb 6-1: config 0 descriptor??
[  573.440022][ T5938] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  573.613033][ T5938] usb 5-1: Using ep0 maxpacket: 16
[  573.661030][ T5938] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  573.672895][ T5938] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  573.755388][   T11] kye 0003:0458:501B.0004: tablet report size too small, or kye_tablet_rdesc unexpectedly large
[  573.850054][ T5938] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  573.859459][ T5938] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  573.867650][ T5938] usb 5-1: Product: syz
[  573.872082][ T5938] usb 5-1: Manufacturer: syz
[  573.876797][ T5938] usb 5-1: SerialNumber: syz
[  573.888334][   T11] kye 0003:0458:501B.0004: unbalanced collection at end of report description
[  573.935317][   T11] kye 0003:0458:501B.0004: parse failed
[  573.943443][   T11] kye 0003:0458:501B.0004: probe with driver kye failed with error -22
[  573.961713][ T5938] usb 5-1: config 0 descriptor??
[  573.971183][   T11] usb 6-1: USB disconnect, device number 3
[  573.998942][ T5938] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  574.008453][ T5938] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class)
[  574.587376][ T5938] em28xx 5-1:0.0: unknown em28xx chip ID (0)
[  574.614580][ T5938] em28xx 5-1:0.0: Config register raw data: 0xfffffffb
[  574.841025][ T5938] em28xx 5-1:0.0: AC97 chip type couldn't be determined
[  574.857472][ T5938] em28xx 5-1:0.0: No AC97 audio processor
[  575.002886][ T5938] usb 5-1: USB disconnect, device number 24
[  575.022460][ T5938] em28xx 5-1:0.0: Disconnecting em28xx
[  575.157095][ T5938] em28xx 5-1:0.0: Freeing device
[  575.239097][ T8028] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  575.308288][ T8028] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  575.518224][ T7247] Bluetooth: hci7: Frame reassembly failed (-84)
[  575.541000][ T8028] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  575.731234][ T8028] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  577.184052][ T8028] 8021q: adding VLAN 0 to HW filter on device bond0
[  577.416225][ T8028] 8021q: adding VLAN 0 to HW filter on device team0
[  577.515822][ T3960] bridge0: port 1(bridge_slave_0) entered blocking state
[  577.523257][ T3960] bridge0: port 1(bridge_slave_0) entered forwarding state
[  577.589149][   T49] Bluetooth: hci7: Opcode 0x1003 failed: -110
[  577.745436][ T3960] bridge0: port 2(bridge_slave_1) entered blocking state
[  577.753070][ T3960] bridge0: port 2(bridge_slave_1) entered forwarding state
[  578.805692][ T4295] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  579.215035][ T4295] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  579.370287][ T4295] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  579.433181][ T7247] Bluetooth: hci0: Frame reassembly failed (-84)
[  579.574971][ T4295] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  580.204468][ T4295] bridge_slave_1: left allmulticast mode
[  580.212451][ T4295] bridge_slave_1: left promiscuous mode
[  580.219010][ T4295] bridge0: port 2(bridge_slave_1) entered disabled state
[  580.348661][ T4295] bridge_slave_0: left allmulticast mode
[  580.355382][ T4295] bridge_slave_0: left promiscuous mode
[  580.361851][ T4295] bridge0: port 1(bridge_slave_0) entered disabled state
[  581.130378][ T4295] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  581.172861][ T4295] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  581.246885][ T4295] bond0 (unregistering): Released all slaves
[  581.419445][ T5823] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  581.761773][ T8028] 8021q: adding VLAN 0 to HW filter on device batadv0
[  582.361018][ T4295] hsr_slave_0: left promiscuous mode
[  582.449888][ T4295] hsr_slave_1: left promiscuous mode
[  582.457795][ T4295] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  582.465905][ T4295] batman_adv: batadv0: Removing interface: batadv_slave_0
[  582.961937][ T4295] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  582.969893][ T4295] batman_adv: batadv0: Removing interface: batadv_slave_1
[  583.131687][ T8158] loop5: detected capacity change from 0 to 128
[  583.362121][ T4295] veth1_macvtap: left promiscuous mode
[  583.367912][ T4295] veth0_macvtap: left promiscuous mode
[  583.370071][ T5823] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  583.373895][ T4295] veth1_vlan: left promiscuous mode
[  583.386216][ T4295] veth0_vlan: left promiscuous mode
[  583.404237][ T8158] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  583.420943][ T5823] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  583.525540][ T5823] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  583.544899][ T5823] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  583.560608][ T5823] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  583.791484][ T8158] ext4 filesystem being mounted at /7/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  584.651175][ T8158] fscrypt: Error allocating hmac(sha512): -2
[  584.977709][ T4295] team0 (unregistering): Port device team_slave_1 removed
[  585.071960][ T4295] team0 (unregistering): Port device team_slave_0 removed
[  585.741608][   T49] Bluetooth: hci0: command tx timeout
[  586.673264][ T4295] IPVS: stop unused estimator thread 0...
[  586.839470][ T8162] chnl_net:caif_netlink_parms(): no params data found
[  587.821506][   T49] Bluetooth: hci0: command tx timeout
[  587.969166][   T11] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  588.003898][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  588.011144][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  588.210925][   T11] usb 5-1: Using ep0 maxpacket: 16
[  588.296190][   T11] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  588.308448][   T11] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  588.488272][   T11] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  588.498622][   T11] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  588.504733][ T8028] veth0_vlan: entered promiscuous mode
[  588.507069][   T11] usb 5-1: Product: syz
[  588.517435][   T11] usb 5-1: Manufacturer: syz
[  588.522247][   T11] usb 5-1: SerialNumber: syz
[  588.655799][ T7247] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  588.664200][ T7247] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  588.730877][   T11] usb 5-1: config 0 descriptor??
[  588.780498][   T11] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  588.790052][   T11] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class)
[  588.949071][ T8028] veth1_vlan: entered promiscuous mode
[  589.370040][ T4005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  589.378203][ T4005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  589.397140][   T11] em28xx 5-1:0.0: unknown em28xx chip ID (0)
[  589.440231][   T11] em28xx 5-1:0.0: Config register raw data: 0xfffffffb
[  589.460947][   T11] em28xx 5-1:0.0: AC97 chip type couldn't be determined
[  589.468119][   T11] em28xx 5-1:0.0: No AC97 audio processor
[  589.617607][   T11] usb 5-1: USB disconnect, device number 25
[  589.645224][   T11] em28xx 5-1:0.0: Disconnecting em28xx
[  589.680154][ T8028] veth0_macvtap: entered promiscuous mode
[  589.721609][   T11] em28xx 5-1:0.0: Freeing device
[  589.861423][ T8162] bridge0: port 1(bridge_slave_0) entered blocking state
[  589.869576][ T8162] bridge0: port 1(bridge_slave_0) entered disabled state
[  589.877174][ T8162] bridge_slave_0: entered allmulticast mode
[  589.885469][ T8162] bridge_slave_0: entered promiscuous mode
[  589.937931][   T49] Bluetooth: hci0: command tx timeout
[  589.957640][ T8028] veth1_macvtap: entered promiscuous mode
[  589.993539][ T8162] bridge0: port 2(bridge_slave_1) entered blocking state
[  590.008469][ T8162] bridge0: port 2(bridge_slave_1) entered disabled state
[  590.016798][ T8162] bridge_slave_1: entered allmulticast mode
[  590.025203][ T8162] bridge_slave_1: entered promiscuous mode
[  590.157216][   T57] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  590.267289][ T8028] batman_adv: batadv0: Interface activated: batadv_slave_0
[  590.674124][   T57] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  590.798161][ T8162] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  590.816060][ T8028] batman_adv: batadv0: Interface activated: batadv_slave_1
[  590.884751][ T8162] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  590.913571][ T8028] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  590.929714][ T8028] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  590.938675][ T8028] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  590.950757][ T8028] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  591.027084][   T57] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  591.365393][ T8162] team0: Port device team_slave_0 added
[  591.443603][   T57] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  591.585467][ T8162] team0: Port device team_slave_1 added
[  591.979382][   T49] Bluetooth: hci0: command tx timeout
[  592.055674][ T8162] batman_adv: batadv0: Adding interface: batadv_slave_0
[  592.063200][ T8162] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  592.089979][ T8162] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  592.207923][ T3960] Bluetooth: hci1: Frame reassembly failed (-84)
[  592.403577][ T8162] batman_adv: batadv0: Adding interface: batadv_slave_1
[  592.410912][ T8162] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  592.437599][ T8162] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  592.626247][   T57] bridge_slave_1: left allmulticast mode
[  592.632381][   T57] bridge_slave_1: left promiscuous mode
[  592.638626][   T57] bridge0: port 2(bridge_slave_1) entered disabled state
[  592.703655][   T57] bridge_slave_0: left allmulticast mode
[  592.711982][   T57] bridge_slave_0: left promiscuous mode
[  592.719385][   T57] bridge0: port 1(bridge_slave_0) entered disabled state
[  593.260153][   T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  593.292057][   T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  593.307120][   T57] bond0 (unregistering): Released all slaves
[  594.068107][ T8162] hsr_slave_0: entered promiscuous mode
[  594.082740][ T8162] hsr_slave_1: entered promiscuous mode
[  594.090463][ T8162] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  594.102356][ T8162] Cannot create hsr debugfs directory
[  594.220665][   T49] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  594.247036][   T57] hsr_slave_0: left promiscuous mode
[  594.267252][   T57] hsr_slave_1: left promiscuous mode
[  594.277337][   T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  594.285245][   T57] batman_adv: batadv0: Removing interface: batadv_slave_0
[  594.403388][   T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  594.411407][   T57] batman_adv: batadv0: Removing interface: batadv_slave_1
[  594.501180][   T57] veth1_macvtap: left promiscuous mode
[  594.507996][   T57] veth0_macvtap: left promiscuous mode
[  594.514191][   T57] veth1_vlan: left promiscuous mode
[  594.519847][   T57] veth0_vlan: left promiscuous mode
[  595.551665][   T57] team0 (unregistering): Port device team_slave_1 removed
[  595.571112][   T57] team0 (unregistering): Port device team_slave_0 removed
[  598.112204][ T8162] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  598.202655][ T8162] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  598.330633][ T8162] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  598.442353][ T8162] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  598.976828][ T8257] loop4: detected capacity change from 0 to 2048
[  599.252679][ T8257] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  599.434048][ T8257] overlayfs: failed to resolve './file4': -2
[  599.937290][ T5823] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  599.988069][ T8162] 8021q: adding VLAN 0 to HW filter on device bond0
[  600.007137][ T6819] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  600.041863][ T5823] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  600.061721][ T5823] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  600.115557][ T5823] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  600.134422][ T5823] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  600.632605][ T8162] 8021q: adding VLAN 0 to HW filter on device team0
[  600.707975][ T3629] bridge0: port 1(bridge_slave_0) entered blocking state
[  600.715623][ T3629] bridge0: port 1(bridge_slave_0) entered forwarding state
[  600.806364][   T57] Bluetooth: hci7: Frame reassembly failed (-84)
[  600.843080][ T3629] bridge0: port 2(bridge_slave_1) entered blocking state
[  600.850484][ T3629] bridge0: port 2(bridge_slave_1) entered forwarding state
[  602.220529][   T11] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  602.301767][   T49] Bluetooth: hci1: command tx timeout
[  602.383027][   T11] usb 10-1: Using ep0 maxpacket: 8
[  602.447943][   T11] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  602.458561][   T11] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  602.467998][   T11] usb 10-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  602.477350][   T11] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  602.555748][ T4005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  602.564760][ T4005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  602.667329][   T11] usb 10-1: config 0 descriptor??
[  602.740333][ T8267] chnl_net:caif_netlink_parms(): no params data found
[  602.869074][ T5823] Bluetooth: hci7: Opcode 0x1003 failed: -110
[  603.013785][   T11] usb 10-1: USB disconnect, device number 2
[  603.253879][   T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  603.263107][   T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  604.038193][ T8162] 8021q: adding VLAN 0 to HW filter on device batadv0
[  604.392320][ T5823] Bluetooth: hci1: command tx timeout
[  604.591257][   T57] Bluetooth: hci7: Frame reassembly failed (-84)
[  605.269975][ T8267] bridge0: port 1(bridge_slave_0) entered blocking state
[  605.277523][ T8267] bridge0: port 1(bridge_slave_0) entered disabled state
[  605.285398][ T8267] bridge_slave_0: entered allmulticast mode
[  605.294834][ T8267] bridge_slave_0: entered promiscuous mode
[  605.329635][ T8162] veth0_vlan: entered promiscuous mode
[  605.463522][ T8267] bridge0: port 2(bridge_slave_1) entered blocking state
[  605.471688][ T8267] bridge0: port 2(bridge_slave_1) entered disabled state
[  605.479545][ T8267] bridge_slave_1: entered allmulticast mode
[  605.489188][ T8267] bridge_slave_1: entered promiscuous mode
[  605.506713][ T8162] veth1_vlan: entered promiscuous mode
[  605.860345][ T8267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  605.917008][ T8267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  606.040255][ T8162] veth0_macvtap: entered promiscuous mode
[  606.111784][ T8162] veth1_macvtap: entered promiscuous mode
[  606.153076][ T8267] team0: Port device team_slave_0 added
[  606.194419][ T8267] team0: Port device team_slave_1 added
[  606.459737][   T49] Bluetooth: hci1: command tx timeout
[  606.622000][   T49] Bluetooth: hci7: command 0x1003 tx timeout
[  606.628610][ T5823] Bluetooth: hci7: Opcode 0x1003 failed: -110
[  607.034498][ T8267] batman_adv: batadv0: Adding interface: batadv_slave_0
[  607.041937][ T8267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  607.068595][ T8267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  607.142220][ T8162] batman_adv: batadv0: Interface activated: batadv_slave_0
[  607.221783][ T3960] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  607.256292][ T8314] loop9: detected capacity change from 0 to 2048
[  607.393227][ T8162] batman_adv: batadv0: Interface activated: batadv_slave_1
[  607.403159][ T8267] batman_adv: batadv0: Adding interface: batadv_slave_1
[  607.412639][ T8267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  607.439662][ T8267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  607.530881][ T8314] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  607.583968][ T3960] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  607.630492][ T8314] overlayfs: failed to resolve './file4': -2
[  607.737620][ T8162] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  607.748092][ T8162] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  607.757361][ T8162] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  607.766452][ T8162] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  607.875421][ T3960] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  608.056112][ T3960] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  608.111317][ T7926] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  608.248354][ T3629] Bluetooth: hci2: Frame reassembly failed (-84)
[  608.539193][   T49] Bluetooth: hci1: command tx timeout
[  608.596887][ T8267] hsr_slave_0: entered promiscuous mode
[  608.608288][ T8267] hsr_slave_1: entered promiscuous mode
[  608.616950][ T8267] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  608.624901][ T8267] Cannot create hsr debugfs directory
[  609.306357][ T3960] bridge_slave_1: left allmulticast mode
[  609.312888][ T3960] bridge_slave_1: left promiscuous mode
[  609.319718][ T3960] bridge0: port 2(bridge_slave_1) entered disabled state
[  609.404646][ T3960] bridge_slave_0: left allmulticast mode
[  609.410936][ T3960] bridge_slave_0: left promiscuous mode
[  609.417551][ T3960] bridge0: port 1(bridge_slave_0) entered disabled state
[  610.299266][   T49] Bluetooth: hci2: command 0x1003 tx timeout
[  610.299450][ T5823] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  610.329271][ T3960] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  610.361332][ T3960] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  610.404214][ T3960] bond0 (unregistering): Released all slaves
[  611.513017][ T3960] hsr_slave_0: left promiscuous mode
[  611.521255][   T11] usb 10-1: new full-speed USB device number 3 using dummy_hcd
[  611.559595][ T3960] hsr_slave_1: left promiscuous mode
[  611.567340][ T3960] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  611.575740][ T3960] batman_adv: batadv0: Removing interface: batadv_slave_0
[  611.643547][ T3960] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  611.653081][ T3960] batman_adv: batadv0: Removing interface: batadv_slave_1
[  611.769463][   T11] usb 10-1: too many endpoints for config 0 interface 0 altsetting 255: 33, using maximum allowed: 30
[  611.780833][   T11] usb 10-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 33
[  611.794451][   T11] usb 10-1: config 0 interface 0 has no altsetting 0
[  611.801626][   T11] usb 10-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.00
[  611.815525][   T11] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  611.853591][ T3960] veth1_macvtap: left promiscuous mode
[  611.859540][ T3960] veth0_macvtap: left promiscuous mode
[  611.865430][ T3960] veth1_vlan: left promiscuous mode
[  611.871104][ T3960] veth0_vlan: left promiscuous mode
[  612.211900][   T11] usb 10-1: config 0 descriptor??
[  612.223599][ T8352] loop8: detected capacity change from 0 to 4096
[  612.757377][ T3960] team0 (unregistering): Port device team_slave_1 removed
[  612.816315][   T11] usbhid 10-1:0.0: can't add hid device: -71
[  612.824782][   T11] usbhid 10-1:0.0: probe with driver usbhid failed with error -71
[  612.858041][   T11] usb 10-1: USB disconnect, device number 3
[  612.881160][ T3960] team0 (unregistering): Port device team_slave_0 removed
[  614.023524][ T4095] Bluetooth: hci2: Frame reassembly failed (-84)
[  614.342205][ T8267] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  614.392635][ T8267] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  614.445725][ T8267] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  614.514453][ T8267] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  615.429922][ T8369] loop9: detected capacity change from 0 to 2048
[  615.795242][ T8369] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  615.866241][ T8267] 8021q: adding VLAN 0 to HW filter on device bond0
[  615.946738][ T8369] overlayfs: failed to resolve './file4': -2
[  616.059181][   T49] Bluetooth: hci2: command 0x1003 tx timeout
[  616.065827][ T5823] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  616.218573][ T8267] 8021q: adding VLAN 0 to HW filter on device team0
[  616.304164][ T4295] bridge0: port 1(bridge_slave_0) entered blocking state
[  616.311873][ T4295] bridge0: port 1(bridge_slave_0) entered forwarding state
[  616.414165][ T7926] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  616.449325][ T4295] bridge0: port 2(bridge_slave_1) entered blocking state
[  616.456927][ T4295] bridge0: port 2(bridge_slave_1) entered forwarding state
[  616.649295][   T30] kauditd_printk_skb: 9 callbacks suppressed
[  616.649368][   T30] audit: type=1326 audit(1752347870.697:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8382 comm="syz.8.442" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000
[  616.678183][   T30] audit: type=1326 audit(1752347870.697:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8382 comm="syz.8.442" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000
[  616.700508][   T30] audit: type=1326 audit(1752347870.767:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8382 comm="syz.8.442" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf705e539 code=0x7ffc0000
[  616.722737][   T30] audit: type=1326 audit(1752347870.777:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8382 comm="syz.8.442" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000
[  616.746410][   T30] audit: type=1326 audit(1752347870.777:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8382 comm="syz.8.442" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000
[  616.769787][   T30] audit: type=1326 audit(1752347870.807:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8382 comm="syz.8.442" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf705e539 code=0x7ffc0000
[  617.458653][   T30] audit: type=1326 audit(1752347870.967:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8382 comm="syz.8.442" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000
[  617.481266][   T30] audit: type=1326 audit(1752347870.967:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8382 comm="syz.8.442" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000
[  617.503605][   T30] audit: type=1326 audit(1752347870.997:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8382 comm="syz.8.442" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf705e539 code=0x7ffc0000
[  617.525808][   T30] audit: type=1326 audit(1752347870.997:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8382 comm="syz.8.442" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000
[  618.179502][ T4295] Bluetooth: hci2: Frame reassembly failed (-84)
[  618.784110][ T1862] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  619.039550][ T1862] usb 5-1: Using ep0 maxpacket: 8
[  619.063525][ T1862] usb 5-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00
[  619.073071][ T1862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  619.106780][ T1862] usb 5-1: config 0 descriptor??
[  619.109154][   T11] usb 9-1: new full-speed USB device number 3 using dummy_hcd
[  619.141315][ T4295] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  619.149568][ T4295] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  619.381975][ T8267] 8021q: adding VLAN 0 to HW filter on device batadv0
[  619.424103][   T11] usb 9-1: too many endpoints for config 0 interface 0 altsetting 255: 33, using maximum allowed: 30
[  619.436210][   T11] usb 9-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 33
[  619.449884][   T11] usb 9-1: config 0 interface 0 has no altsetting 0
[  619.456766][   T11] usb 9-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.00
[  619.466336][   T11] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  619.529018][ T4295] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  619.537293][ T4295] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  619.633353][   T11] usb 9-1: config 0 descriptor??
[  619.823312][ T1862] hid-led 0003:1D34:000A.0005: hidraw0: USB HID v80.00 Device [HID 1d34:000a] on usb-dummy_hcd.4-1/input0
[  619.846945][ T1862] hid-led 0003:1D34:000A.0005: Dream Cheeky Webmail Notifier initialized
[  620.042528][ T1862] usb 5-1: USB disconnect, device number 26
[  620.127167][ T8267] veth0_vlan: entered promiscuous mode
[  620.175738][   T11] usbhid 9-1:0.0: can't add hid device: -71
[  620.182620][   T11] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[  620.220133][ T5823] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  620.242936][   T11] usb 9-1: USB disconnect, device number 3
[  620.338080][ T8267] veth1_vlan: entered promiscuous mode
[  620.764812][ T8267] veth0_macvtap: entered promiscuous mode
[  620.906422][ T8267] veth1_macvtap: entered promiscuous mode
[  621.045370][ T8413] fido_id[8413]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  621.216858][ T8267] batman_adv: batadv0: Interface activated: batadv_slave_0
[  621.330991][ T8267] batman_adv: batadv0: Interface activated: batadv_slave_1
[  621.476969][ T8267] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  621.486265][ T8267] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  621.495487][ T8267] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  621.505912][ T8267] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  621.670205][   T11] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  621.871944][   T11] usb 5-1: device descriptor read/64, error -71
[  622.119340][    T9] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  622.128114][   T11] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  622.319137][   T11] usb 5-1: device descriptor read/64, error -71
[  622.398980][    T9] usb 9-1: New USB device found, idVendor=05ac, idProduct=b301, bcdDevice=e4.00
[  622.408471][    T9] usb 9-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3
[  622.417030][    T9] usb 9-1: Product: syz
[  622.421536][    T9] usb 9-1: Manufacturer: syz
[  622.426362][    T9] usb 9-1: SerialNumber: syz
[  622.444221][   T11] usb usb5-port1: attempt power cycle
[  622.507414][    T9] usb 9-1: config 0 descriptor??
[  622.734240][ T3960] Bluetooth: hci2: Frame reassembly failed (-84)
[  622.737119][    T9] usb 9-1: USB disconnect, device number 4
[  622.819429][   T11] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  622.877800][   T11] usb 5-1: device descriptor read/8, error -71
[  623.129663][   T11] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  623.184733][   T11] usb 5-1: device descriptor read/8, error -71
[  623.321891][   T11] usb usb5-port1: unable to enumerate USB device
[  624.699490][ T5823] Bluetooth: hci2: command 0x1003 tx timeout
[  624.705824][   T49] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  625.151471][ T8457] binder: BINDER_SET_CONTEXT_MGR already set
[  625.157679][ T8457] binder: 8452:8457 ioctl 4018620d 80000040 returned -16
[  626.583509][ T4095] Bluetooth: hci2: Frame reassembly failed (-84)
[  626.919069][ T8344] usb 10-1: new full-speed USB device number 4 using dummy_hcd
[  627.195425][ T8478] loop1: detected capacity change from 0 to 512
[  627.280838][ T8344] usb 10-1: too many endpoints for config 0 interface 0 altsetting 255: 33, using maximum allowed: 30
[  627.292669][ T8344] usb 10-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 33
[  627.306240][ T8344] usb 10-1: config 0 interface 0 has no altsetting 0
[  627.313186][ T8344] usb 10-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.00
[  627.322570][ T8344] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  627.336311][ T8344] usb 10-1: config 0 descriptor??
[  627.929700][ T8344] usbhid 10-1:0.0: can't add hid device: -71
[  627.936485][ T8344] usbhid 10-1:0.0: probe with driver usbhid failed with error -71
[  628.111810][ T8344] usb 10-1: USB disconnect, device number 4
[  628.540230][ T5823] Bluetooth: hci2: command 0x1003 tx timeout
[  628.546793][   T49] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  628.965581][ T4095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  628.973987][ T4095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  629.091986][ T8173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  629.100761][ T8173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  629.143611][ T8490] loop1: detected capacity change from 0 to 2048
[  629.376996][ T8490] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  629.743894][ T8490] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.461: bg 0: block 408: padding at end of block bitmap is not set
[  629.805985][ T8490] EXT4-fs (loop1): Remounting filesystem read-only
[  629.887012][ T8501] loop4: detected capacity change from 0 to 64
[  630.334222][ T8501] =====================================================
[  630.341780][ T8501] BUG: KMSAN: uninit-value in hfs_find_set_zero_bits+0x74d/0xb60
[  630.355949][ T8501]  hfs_find_set_zero_bits+0x74d/0xb60
[  630.363824][ T8501]  hfs_vbm_search_free+0x13c/0x5b0
[  630.369143][ T8501]  hfs_extend_file+0x6a5/0x1b00
[  630.374209][ T8501]  hfs_get_block+0x435/0x1150
[  630.379354][ T8501]  __block_write_begin_int+0xa73/0x3030
[  630.385033][ T8501]  cont_write_begin+0x10e1/0x1bc0
[  630.390370][ T8501]  hfs_write_begin+0x85/0x130
[  630.395163][ T8501]  cont_write_begin+0x35d/0x1bc0
[  630.400383][ T8501]  hfs_write_begin+0x85/0x130
[  630.405176][ T8501]  hfs_file_truncate+0x1d6/0xe60
[  630.410342][ T8501]  hfs_inode_setattr+0x964/0xaa0
[  630.415466][ T8501]  notify_change+0x1990/0x1aa0
[  630.420465][ T8501]  do_truncate+0x28f/0x310
[  630.425035][ T8501]  vfs_truncate+0x921/0x9d0
[  630.429735][ T8501]  do_sys_truncate+0x103/0x240
[  630.434610][ T8501]  __ia32_compat_sys_truncate+0x77/0xc0
[  630.440840][ T8501]  ia32_sys_call+0xa11/0x42c0
[  630.452395][ T8501]  __do_fast_syscall_32+0xb0/0x150
[  630.459329][ T8501]  do_fast_syscall_32+0x38/0x80
[  630.464303][ T8501]  do_SYSENTER_32+0x1f/0x30
[  630.469268][ T8501]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  630.475740][ T8501] 
[  630.478101][ T8501] Uninit was created at:
[  630.482558][ T8501]  __kmalloc_cache_noprof+0x7f7/0xed0
[  630.488017][ T8501]  hfs_mdb_get+0x1cc8/0x2a90
[  630.492816][ T8501]  hfs_fill_super+0x3d0/0xb80
[  630.497571][ T8501]  get_tree_bdev_flags+0x6e6/0x920
[  630.503100][ T8501]  get_tree_bdev+0x38/0x50
[  630.507661][ T8501]  hfs_get_tree+0x35/0x40
[  630.512174][ T8501]  vfs_get_tree+0xb3/0x5c0
[  630.516695][ T8501]  do_new_mount+0x738/0x1610
[  630.521489][ T8501]  path_mount+0x6db/0x1e90
[  630.526044][ T8501]  __se_sys_mount+0x6eb/0x7d0
[  630.530991][ T8501]  __ia32_sys_mount+0xe2/0x150
[  630.535866][ T8501]  ia32_sys_call+0x2733/0x42c0
[  630.541670][ T8501]  __do_fast_syscall_32+0xb0/0x150
[  630.546901][ T8501]  do_fast_syscall_32+0x38/0x80
[  630.557229][ T8501]  do_SYSENTER_32+0x1f/0x30
[  630.563296][ T8501]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  630.569822][ T8501] 
[  630.572233][ T8501] CPU: 0 UID: 0 PID: 8501 Comm: syz.4.463 Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(none) 
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  630.584332][ T8501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  630.594642][ T8501] =====================================================
[  630.601792][ T8501] Disabling lock debugging due to kernel taint
[  630.608116][ T8501] Kernel panic - not syncing: kmsan.panic set ...
[  630.614694][ T8501] CPU: 0 UID: 0 PID: 8501 Comm: syz.4.463 Tainted: G    B               6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(none) 
[  630.628347][ T8501] Tainted: [B]=BAD_PAGE
[  630.632550][ T8501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  630.642688][ T8501] Call Trace:
[  630.646021][ T8501]  <TASK>
[  630.649004][ T8501]  __dump_stack+0x26/0x30
[  630.653480][ T8501]  dump_stack_lvl+0x53/0x270
[  630.658212][ T8501]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  630.664159][ T8501]  dump_stack+0x1e/0x25
[  630.668417][ T8501]  panic+0x4bd/0xd50
[  630.672450][ T8501]  kmsan_report+0x31c/0x320
[  630.677066][ T8501]  ? __msan_warning+0x1b/0x30
[  630.681845][ T8501]  ? hfs_find_set_zero_bits+0x74d/0xb60
[  630.687486][ T8501]  ? hfs_vbm_search_free+0x13c/0x5b0
[  630.692865][ T8501]  ? hfs_extend_file+0x6a5/0x1b00
[  630.697996][ T8501]  ? hfs_get_block+0x435/0x1150
[  630.702952][ T8501]  ? __block_write_begin_int+0xa73/0x3030
[  630.708819][ T8501]  ? cont_write_begin+0x10e1/0x1bc0
[  630.714211][ T8501]  ? hfs_write_begin+0x85/0x130
[  630.719180][ T8501]  ? cont_write_begin+0x35d/0x1bc0
[  630.724413][ T8501]  ? hfs_write_begin+0x85/0x130
[  630.729381][ T8501]  ? hfs_file_truncate+0x1d6/0xe60
[  630.734603][ T8501]  ? hfs_inode_setattr+0x964/0xaa0
[  630.739827][ T8501]  ? notify_change+0x1990/0x1aa0
[  630.744868][ T8501]  ? do_truncate+0x28f/0x310
[  630.749571][ T8501]  ? vfs_truncate+0x921/0x9d0
[  630.754381][ T8501]  ? do_sys_truncate+0x103/0x240
[  630.759515][ T8501]  ? __ia32_compat_sys_truncate+0x77/0xc0
[  630.765362][ T8501]  ? ia32_sys_call+0xa11/0x42c0
[  630.770294][ T8501]  ? __do_fast_syscall_32+0xb0/0x150
[  630.775700][ T8501]  ? do_fast_syscall_32+0x38/0x80
[  630.780837][ T8501]  ? do_SYSENTER_32+0x1f/0x30
[  630.785626][ T8501]  ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  630.792237][ T8501]  ? hfs_write_begin+0x85/0x130
[  630.797197][ T8501]  ? cont_write_begin+0x35d/0x1bc0
[  630.802429][ T8501]  ? hfs_write_begin+0x85/0x130
[  630.807386][ T8501]  ? hfs_file_truncate+0x1d6/0xe60
[  630.812606][ T8501]  ? hfs_inode_setattr+0x964/0xaa0
[  630.817835][ T8501]  ? notify_change+0x1990/0x1aa0
[  630.822872][ T8501]  ? do_truncate+0x28f/0x310
[  630.827579][ T8501]  ? vfs_truncate+0x921/0x9d0
[  630.832365][ T8501]  ? do_sys_truncate+0x103/0x240
[  630.837414][ T8501]  ? __ia32_compat_sys_truncate+0x77/0xc0
[  630.843252][ T8501]  ? ia32_sys_call+0xa11/0x42c0
[  630.848191][ T8501]  ? __do_fast_syscall_32+0xb0/0x150
[  630.853597][ T8501]  ? do_fast_syscall_32+0x38/0x80
[  630.858762][ T8501]  ? do_SYSENTER_32+0x1f/0x30
[  630.863644][ T8501]  ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  630.870264][ T8501]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  630.876199][ T8501]  ? kfree+0x121/0xec0
[  630.880342][ T8501]  ? filter_irq_stacks+0x49/0x190
[  630.885461][ T8501]  ? stack_depot_save_flags+0x35/0x7b0
[  630.891018][ T8501]  ? kmsan_get_metadata+0xfb/0x160
[  630.896256][ T8501]  __msan_warning+0x1b/0x30
[  630.900862][ T8501]  hfs_find_set_zero_bits+0x74d/0xb60
[  630.906336][ T8501]  ? kmsan_get_metadata+0xfb/0x160
[  630.911562][ T8501]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  630.917492][ T8501]  hfs_vbm_search_free+0x13c/0x5b0
[  630.922705][ T8501]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  630.928635][ T8501]  hfs_extend_file+0x6a5/0x1b00
[  630.933636][ T8501]  ? __mark_inode_dirty+0x371/0x1090
[  630.939025][ T8501]  hfs_get_block+0x435/0x1150
[  630.943818][ T8501]  ? kmsan_internal_unpoison_memory+0x14/0x20
[  630.949999][ T8501]  ? kmsan_get_metadata+0xfb/0x160
[  630.955238][ T8501]  __block_write_begin_int+0xa73/0x3030
[  630.960933][ T8501]  ? kmsan_get_metadata+0xfb/0x160
[  630.966182][ T8501]  ? __pfx_hfs_get_block+0x10/0x10
[  630.971426][ T8501]  cont_write_begin+0x10e1/0x1bc0
[  630.976577][ T8501]  ? kmsan_get_metadata+0xfb/0x160
[  630.981803][ T8501]  ? kmsan_get_metadata+0xfb/0x160
[  630.987036][ T8501]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  630.992984][ T8501]  hfs_write_begin+0x85/0x130
[  630.997769][ T8501]  ? __pfx_hfs_get_block+0x10/0x10
[  631.002992][ T8501]  ? __pfx_hfs_write_begin+0x10/0x10
[  631.008391][ T8501]  cont_write_begin+0x35d/0x1bc0
[  631.013493][ T8501]  hfs_write_begin+0x85/0x130
[  631.018302][ T8501]  ? __pfx_hfs_get_block+0x10/0x10
[  631.023534][ T8501]  hfs_file_truncate+0x1d6/0xe60
[  631.028581][ T8501]  ? kmsan_internal_unpoison_memory+0x14/0x20
[  631.034768][ T8501]  ? up_read+0x6a/0xf0
[  631.038941][ T8501]  ? truncate_setsize+0x13d/0x1c0
[  631.044064][ T8501]  hfs_inode_setattr+0x964/0xaa0
[  631.049141][ T8501]  ? __pfx_hfs_inode_setattr+0x10/0x10
[  631.054717][ T8501]  ? __pfx_hfs_inode_setattr+0x10/0x10
[  631.060325][ T8501]  notify_change+0x1990/0x1aa0
[  631.065287][ T8501]  do_truncate+0x28f/0x310
[  631.069838][ T8501]  vfs_truncate+0x921/0x9d0
[  631.074469][ T8501]  do_sys_truncate+0x103/0x240
[  631.079352][ T8501]  __ia32_compat_sys_truncate+0x77/0xc0
[  631.085024][ T8501]  ia32_sys_call+0xa11/0x42c0
[  631.089792][ T8501]  __do_fast_syscall_32+0xb0/0x150
[  631.095034][ T8501]  ? irqentry_exit_to_user_mode+0x82/0xa0
[  631.100879][ T8501]  do_fast_syscall_32+0x38/0x80
[  631.105849][ T8501]  do_SYSENTER_32+0x1f/0x30
[  631.110465][ T8501]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  631.116912][ T8501] RIP: 0023:0xf704e539
[  631.121049][ T8501] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  631.140765][ T8501] RSP: 002b:00000000f503e55c EFLAGS: 00000206 ORIG_RAX: 000000000000005c
[  631.149273][ T8501] RAX: ffffffffffffffda RBX: 0000000080000040 RCX: 0000000001001bfc
[  631.157319][ T8501] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  631.165388][ T8501] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  631.173472][ T8501] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  631.181513][ T8501] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  631.189574][ T8501]  </TASK>
[  631.192909][ T8501] Kernel Offset: disabled
[  631.197321][ T8501] Rebooting in 86400 seconds..