last executing test programs:

12m15.703128371s ago: executing program 2 (id=90):
syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0x10}, @l2cap_cid_signaling={{}, [@l2cap_conn_req={{0x2, 0x5}, {0x6, 0x4}}, @l2cap_disconn_rsp={{0x7, 0xb9}, {0x80ad, 0xffc4}}, @l2cap_disconn_req={{0x6, 0x5}, {0x5, 0x856}}]}}, 0x2)

12m15.033189269s ago: executing program 2 (id=92):
r0 = fsopen(&(0x7f0000000240)='tracefs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x1)
fchdir(r1)
r2 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50)
getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8)

12m14.504911306s ago: executing program 2 (id=94):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0x8, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]})
linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000)
renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0)
lsetxattr$trusted_overlay_origin(&(0x7f0000000240)='./cgroup\x00', &(0x7f0000000140), 0x0, 0x0, 0x1)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_udp_int(r4, 0x11, 0x67, 0x0, &(0x7f0000000040))
close(r0)

12m11.335676711s ago: executing program 2 (id=96):
syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f0000000040)='./file2\x00', 0x3200400, &(0x7f0000000c00)=ANY=[], 0x1, 0xa76, &(0x7f00000000c0)="$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")
open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a)
mount(&(0x7f0000000240)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]})
mount(0x0, 0x0, 0x0, 0xc22, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0185879, &(0x7f0000000080)={@desc={0x4100, 0x0, @desc3}})

12m4.800067823s ago: executing program 2 (id=101):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x1010000, &(0x7f0000000240)=ANY=[@ANYBLOB='iocharset=cp864,iocharset=ate=1,iocharset=cp857,dos1xfloppy,utf8=1,utf8=0,uni_xlate=1,uni_xlate=0,uni_xlate=1,shortname=winnt,codepage=1251,utf8=0,shortname=lower,utf8=0,check=strict,iocharset=cp936,\x00'/212], 0x1, 0x36b, &(0x7f0000000500)="$eJzs3U1oY0UcAPB/+tKkXdD2JgpC9CZo2e5NL7ZIFxZ7UQl+HMTgdlWSKrRYbA+b1oPiUfCoJ28KevAgHkVQxJsHr64gq+JB97bg4kjy8vGapN3uYivF3w+aTGfmP/N/HySv4WX6wlI0L07HpWvXrsbMTCnKS48txfVSzEcWfbsxrjKhDgA4Ha6nFH+m3GjbzOSQ0gmkBQAco+77/0sRUYv5vObNrw/rn7z7A8Cp1/v7f/awPgd8DhDx2rGkBAAcs7HP/+/f11zp/pT7v5YLdwUAAKfVU88+9/jyasSTtdpMxPrbW/WtejwybF++FK9EK9bibMzFjYj8QqHzUOo+nr+wunK2Vqu145f5qEfEVC+wnl8pLGfd+GosxlzM9+J7Vxsppez8Z6sri7WuiNhtd+eP9dJWfTrO9Ob/8UysDS88+oN0nyIurK6cq/UGqK/349sRe8MbFTr5L8RcfP/iYJiU+ncwrq5cXuwnPYzfqlfj4mAvHPgJCAAAAAAAAAAAAAAAAAAAAAAA3JaF2sD8YP2c1HnOV8pZWJjQ3l0fJ4/vrQ+0l68PlKopUvrjjYfq72Sxb32g0fV5tiwkCAAAAAAAAAAAAAAAAAAAAAOb25VotFprG5vbO81iob2xuT0VEZ2aV7/95KvZGO9zk0I5n6IaMZii1pt2p9lIWb9zyiLGw7PO5P2ajz4fZFzsUx1sxcQ0qgc3tVp33Pfz+8Oae7P+yH8P+2QxeQOzQhqPjoy8fmee0q3sqEHhXLGmOj77lZRSoeatYvjl58cHjFJE+dYP3E5zKg7ukzqFb66+fHd/7ze+TLkHHpx7+sp7H/7WbLQ6M0f3CFY2Nm+kZqPU73yE2XvDpe4hGJ4bpcgLpeKZUD5swL39NY3sh9+fuefd7462E1Kx5vXO+TzSJ8s359PR8Epe6KQ50jQ7DJ/ubURrbXrCyX+zwm0c07s++OLjlH769chTDE2NvWyU/p1XHwAAAAAAAAAAAAAAAAAAoKjwXfHel67becP0YVEPP3FC6QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAiRj+//9CYW83RmqOUvirPSGquraxGVH5rzcTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/uX8CAAD//3wwZok=")
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBTYPE(r1, 0x4b48, &(0x7f0000000040))
pipe2$watch_queue(0x0, 0x80)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0x7f)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x800)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c)
pipe(0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x406f413, 0x0)

11m55.652968193s ago: executing program 2 (id=107):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f00000007c0)={0xa, 0x4e23, 0x0, @loopback, 0x1170}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0xfefe)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "fb00080000528e46", "252432e72844858a068b92a5a810f4dc", "b5ab0900", "5aee41448c84afb7"}, 0x28)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r2, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000080)={0x1})
write$input_event(r2, 0x0, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0))
syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f0002000000"], 0x0)
close(0x3)

11m50.025128501s ago: executing program 32 (id=99):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00')
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298})
pread64(r0, &(0x7f000001a240)=""/102388, 0x18ff4, 0x100008)
dup(0xffffffffffffffff)

11m39.233463191s ago: executing program 33 (id=107):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f00000007c0)={0xa, 0x4e23, 0x0, @loopback, 0x1170}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0xfefe)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "fb00080000528e46", "252432e72844858a068b92a5a810f4dc", "b5ab0900", "5aee41448c84afb7"}, 0x28)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r2, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000080)={0x1})
write$input_event(r2, 0x0, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0))
syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f0002000000"], 0x0)
close(0x3)

7m3.908709303s ago: executing program 1 (id=519):
timer_settime(0x0, 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, 0x0)

7m3.267851503s ago: executing program 1 (id=520):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f00000003c0)={0x8})

7m2.853860922s ago: executing program 1 (id=522):
mmap$IORING_OFF_CQ_RING(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000007, 0x66031, 0xffffffffffffffff, 0x8000000)
shmat(0x0, &(0x7f0000fa8000/0x1000)=nil, 0x4000)

7m2.20280275s ago: executing program 1 (id=525):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

7m1.103803059s ago: executing program 1 (id=527):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0, 0xc000})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x3fb, 0x7fff})
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)}, 0x0)

6m57.82611737s ago: executing program 1 (id=529):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
shutdown(r0, 0x1)
move_pages(0x0, 0x1ffffffffffffc17, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0)
clock_gettime(0x0, &(0x7f00000002c0))
io_getevents(0x0, 0x100000000, 0x0, 0x0, &(0x7f0000000040)={0x77359400})
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@dev={0xfe, 0x80, '\x00', 0x32}, 0x800, 0x0, 0x1, 0x1}, 0x74)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x1, 0x1, 0x3, 0x2, 0x3d}, 0x20)
io_submit(0x0, 0x1, &(0x7f0000000880)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x4, r1, 0x0, 0x0, 0x7}])

6m52.165844227s ago: executing program 3 (id=536):
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)

6m47.796852214s ago: executing program 3 (id=539):
gettid()
timer_settime(0x0, 0x1, 0x0, 0x0)

6m46.01992651s ago: executing program 3 (id=541):
bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000080)=0x7, 0x4)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x6, &(0x7f00000002c0)=0x3f7, 0x4)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
move_pages(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000ffd000/0x3000)=nil], 0x0, 0x0, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

6m43.721735558s ago: executing program 3 (id=544):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
clock_adjtime(0x0, &(0x7f0000000380)={0x3ff, 0x8, 0x4101, 0x4000000000000b, 0x0, 0x9, 0x400000400, 0x80000000000a, 0x6, 0x100, 0x7, 0x0, 0xffffffffffffffff, 0x81, 0x20000000000009f, 0x2, 0xfffffffffffffffc, 0x6, 0x6, 0x9, 0x8001, 0x3, 0x0, 0x3, 0x72a3, 0xe})

6m41.940155403s ago: executing program 34 (id=529):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
shutdown(r0, 0x1)
move_pages(0x0, 0x1ffffffffffffc17, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0)
clock_gettime(0x0, &(0x7f00000002c0))
io_getevents(0x0, 0x100000000, 0x0, 0x0, &(0x7f0000000040)={0x77359400})
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@dev={0xfe, 0x80, '\x00', 0x32}, 0x800, 0x0, 0x1, 0x1}, 0x74)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x1, 0x1, 0x3, 0x2, 0x3d}, 0x20)
io_submit(0x0, 0x1, &(0x7f0000000880)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x4, r1, 0x0, 0x0, 0x7}])

6m38.181951702s ago: executing program 3 (id=547):
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)

6m28.942146771s ago: executing program 3 (id=554):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
clock_adjtime(0x0, &(0x7f0000000380)={0x3ff, 0x8, 0x4101, 0x4000000000000b, 0x0, 0x9, 0x400000400, 0x80000000000a, 0x6, 0x100, 0x7, 0x0, 0xffffffffffffffff, 0x81, 0x20000000000009f, 0x2, 0xfffffffffffffffc, 0x6, 0x6, 0x9, 0x8001, 0x3, 0x0, 0x3, 0x72a3, 0xe})

6m13.171679792s ago: executing program 35 (id=554):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
clock_adjtime(0x0, &(0x7f0000000380)={0x3ff, 0x8, 0x4101, 0x4000000000000b, 0x0, 0x9, 0x400000400, 0x80000000000a, 0x6, 0x100, 0x7, 0x0, 0xffffffffffffffff, 0x81, 0x20000000000009f, 0x2, 0xfffffffffffffffc, 0x6, 0x6, 0x9, 0x8001, 0x3, 0x0, 0x3, 0x72a3, 0xe})

4m18.193380136s ago: executing program 4 (id=613):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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")
mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
unlink(0x0)
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x10)
ftruncate(r0, 0x200004)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0185879, &(0x7f0000000040)={@desc={0x1, 0x0, @desc4}})

4m17.676057791s ago: executing program 4 (id=614):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x18, 0x3, "d67a8527f76ec1d39e537c4c3060c6a405106c72"}, @NFTA_MATCH_NAME={0xa, 0x1, 'owner\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x4048010)

4m17.105368511s ago: executing program 4 (id=615):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000400)=[@mss, @sack_perm, @window={0x3, 0x7, 0x4}, @sack_perm, @window={0x3, 0x0, 0x5}, @sack_perm, @sack_perm, @sack_perm], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)

4m16.012079983s ago: executing program 4 (id=616):
syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x538, &(0x7f0000003480)="$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")

4m15.790713937s ago: executing program 4 (id=617):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x21)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mkdir(&(0x7f0000000200)='./bus\x00', 0x10)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]})
chroot(&(0x7f0000000000)='./bus\x00')
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
fsync(r0)

4m15.44736587s ago: executing program 4 (id=618):
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)

4m0.178459853s ago: executing program 36 (id=618):
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)

1m37.581333926s ago: executing program 8 (id=1158):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x16, 0xfc0, 0x66, 0x0, 0xb, 0x73, 0x0, @private=0xa010100, @broadcast}, "3297e3ba0fa8a2e71bd9fe1a399b5110420b70460c0dad392d66248a43540df968e7fcaab34569c0e36170578c0d3c546a98b26295e2592f360905866eb4720fed03a977a3df4224895629fd6ccec64f13a999f18f518e3ee28798381975e862f1db9dccdb2f1c1fb60f5ffc7a339d40a8bd1f24cede8a32f186f142e194d4fb48224759faf813ea80e6a853e79b4fe27fe3e1aec5897b314a7f0d515b07b1835986b4885e9826d902c40f16cd77c58b6433ab039955ce9db11f36f459e7114ace6c9989eecea80a81fd39f339356c7c3391af83da2486503a7973f6db4806cf3e5ca94cf7e1f79fd00decd76100c18251a59d1474caabf4d3ca6a9a9885df710e68c5b0dc11832dbb5eecb5c88c2f8f02bdbd88569ad4a740359cbca8c378118220d73bdd1e661c3a74f77aa931b11cd38119b0f084bb96e84803fca6566c33ee1e4e34ab0253fbf24f9f5974af5e1fc2a43a4ec9dd9928a8f38a128ea27c429300ae5a6bd7740471f973d8224b2b07879f4fbe7dcbed776a72ebdc713bcf1d7aa45b01c32a1003e6670d58510bd79ba2fde5cb2b82cef2cc315648f4e9d96d848ba327949b8926253cbdef6888a8982108b6ac7a1108533dd3fe125002e2e286362d1055082a9d73ec5ac3080f2a501ff27250b62c8965f371cf92b32d6422d79f66261eb08a2f8fe50049e102c69ce703d116d0834208cc957d0f1376457a90245816d7642412897fdd2f982fdfbc3af65aa0446b00c767b79aec40e460887ea02188e3a0960eea39b144859467b881978378c9fd593259e0f63148179fe2c2f6d40987b63a6e384e63027f03d8039d707522942d5dc88fd842524d006290b6a65e9cc86cc5b401a60ec4aedfb3bf4d0447bb681810a16b9684b72c2f4593ef834a0203e78cd1d9dbc978e9ae8f3ab62c07f1e41d59470decee7b0cc41ac49e4b7589ab6da65849f62ec217bb39ed161e7d337822d96badbd74d66451ea9a74bed591dc9631bf639dcf7846ee428a9fa55bfceedf3b1c23642f3b58dd0a7273664c6c49c9160a4b9cc5b72d0210e305b94e2cb09ae1d4af9d365b5093851f229c8c30aef75d45ccdbab4b86d801a9ad3b27f26ba601d531c0743717aa7aae29d37f496fec7682c5a1abd321ad61941a2d23fcac6af1d1875e308c8d8c64a5152be47b59c09d293f46b857310a99f1885f0a49d432aa0d39a3e8fc885e75e66b63215133175a19267c8d0adf7d8f644e742ed5369d1405e99e63b78727f135e0243f24d9ce354a1562102ee8de4c191508343b86bf7e7519ddd770ce55e17e590561b2f437194c97ad46622a6ae3dd68d9993e6744954f4cd308bd6594fdccedc578e80aed274a65219697229059723ac37d535cca0e9c314e7941b4160bbd2ffba71f26ffe3228431bc81463078ad70583277ef18bce23ca2e5b9a00670956ea8e0e2c739c006106c8c9ee3f92ba728d8490742b74a9a18cbedfc4e69bb87e0da4c7dfb964374c28c837d4641fb99a19b233675f8526af395335e0185cf3934805442ac379980b687a7128e53284ba9e741b5fe9bc969bfbd55cbce76842915e076e2adf844338d16d3802c681bafdcc60465bd34dfc2d1c069ceee40060e0570fc1275ccabfe3f9be3e84ceedf72cd649c082232008e2b0c94594588c00e0fe911bbf1c12eb6c37ce05674a7597feecf27f5e051ffa824d9ff93638dfa9a84c77562aa2cf897f55a97b79c18544ad03480e1011b8f93e0ead9c2c6672448f585c5803ae99be777fbc662ef4450c1e936ed8b3c8047f00e72adc84561f417f8e5e1dde4967005d96a64fc75d9f486b3ebdb5904a0a56ec48542f0efce939f66fd69259e7376ad37e84434ea90f35b2d3bd63b5c36b267d8f2c7dc5a50b46e00ed086dff8b039e07b84c60611269d4f282ad04dc8e0b481eece2f8a614734be73617f0ad5be195446b09dca4cf1f32653dd3e188aece76f3014deb2ba61744835c0f735234b6a4637c948a7b4fd4203b286ca87d669e325d70277075b094f59eb1dff6c9c05c40d5e464c563df79486e1a32e6ed9bcf675aac7968b4e98dc4e210215b0d3b6a2525b2e3df11f3f1490eb39cabffbe32e23659121fde8e4e346e0f595aaf3666a5f6f118c1a1128039502ac04c40b85eb4c54e6c95b8d1c2aac74ae9e1c355ccde9d54d5d833293f5df09224482179e5bcd8e227c99172a6e14c2cd4e6462ceb0a905a1d64804840ce62e350c6efac10a7fcb029f84af64e2256d45afd3b3f59379895740e0cd2fd24c63264f785bb6e3f40ec72ed67d1a7d87dd264743d9c951cb5aa8bc6f1d1bc9b23303d5aa7f8f6f961326757456057000cb2bacf78cc229002777e932c2640b8dfa793846ca49fa93996db95104a8808a1906b19df17e754b90582b6c49efb3ddce067dd9292291cfd2bb0323ce8098f29e4fce0de31cf5c7e2e2da5d0d0996a8be776de8fecfd3ce68e80d21f1701f6b90ac51278abbd727d19415e0ebe001b990b177b8db0c592b18a4b5e4a6221902362e5b20e6e6f2131a5a5e03c1150b179ef40c933c2fef1b79de738652ec4c32565f5cf751a11db177099c4e2e5bd7616cd0dd501d5bfccf5691de3cca590365328648baf8a9487a3c212193c9bb837594460967e823067a9465eba7001eaf609a810488ef5c147aaa5e9e8c75b585ac3582b6915e20b5aa2f79b7a94857122988c56dbce1ea52de1a56652e839bb853be3ee16052b33fb83ca54d8e4e19440a5e81492107043a66286f63ca87a1f7b8a4e9547a7eb6005419cfd28cb37e9e374f4d0143973286e87070754025c1a6fccfdc6858eaca8c35ecb19584ce7141cc79a5bc813469161b87a19fc21f3373d1f25b3427916dd1be2a589b70ea3b39fcc7801e13beaf19b76164faf3dc4ab8faa5648d24eddd6caceaa0d5ac9cad633c19a4a4d059ee823a49b7cf82c5777d376c111f58ea8fd473429907852301a2c856f27bd0c687ab5be0e2bbef64ddee1601375a4440e3f59d60f57caebfe457f82432523ec4a61cdbb7f1e91e4b05fda892df131c274b19929d26f7a5a6d3ca487983f729601ed9bb4bf5c1cc3d453d406e9534688dec6a2dd0b9db149365c125a95e129565e62cc91f7d960abe1055b730ae0994e7eb08392d5745d0e4f529c4defc3d3e43d0815b0cc63effa88d20c13b14e780c2f6c89a1ee5e4db45a5c272186cc3e51b13dab3add5f467e8ca0f4c45a1fc76db2f0cbf794102946aafcd8cd8a3e935a606b9721645c4d550ae0907f345593736506efc626498c974753d474a73626041d3a54f8fb50de2a6335611a3779da3a02daceb2256d9b102d4d30dd3cd389a04b1a7a6076879f36534bb3379debb46ed1fa2c40096c752017dd024345c58313b43070ff7bef94dc3cafbe6ec20d59e5ea3c196ba3b783bfa87384407efc664cd350c80ac397516018e35371956e414755cde304d2a228c1540ba6fd6a7402d11c666964f024da4c016eb556ba2c5fab86c60c12efb1496295d80f0383526e8e0fc55a287bbd3cb966a916f57958d8b6ef97aa0c4b47f7746bab6b99698c1c96b25c4e2e084147866fe0970b109dd26984adc0758eb6442712cc46dcd8ed3038b0595252eed1b8a46525862662d1e67eba66ac341f8d27853eed54854f488f079bd48df6ce7a4be8b1b61fd23a2dc4d3ade0992011539cc63f80fcfc75008c20cb639348cb218f8f476a6d56917f4ca07e67fc20ea2e9642eaf2182b397e279f5f6c70438fb8aa39cba788588c181461ea7efe1a0dd5b95eb26f7158b91012f7ce0ee1b4e79ce4da377bea4551738a0f491a84f19b3be9827b4469c299527aa9c20b8bf12f919976a0356bba720fb91010763c79bcbb10d89280f0f97cdd19aa0d54828b308195fac170613cf4b515e340a9ef2c97f618a9f50b30ae34ebeed9a38b4c6969680accc740b154ecb014fb5d543a59ccb98a7de2823a2dec39f331cb503eb74fef61262c6d4050bc723caee834eb28c64ce007f6027375e936b62387cf1778970e88b0574a0106d4c855be7425767c551b2fa644d9d8a59f787e7610581b768057d229673344571c3d6e3f10975b2859f568398b1f38f89524d9ad0c1588617c3883a1227b714c81cdf28da54f33968c1c50f28da01c308eb31d319b3e77f96bec001c9300000000000000009cc0062283ac112868592619db14d629c47bfb793a723dcd2f7b07ae4ec14ca3ef4b955ea5b2b153a279b080f6236d418075b86850974c8850efb306d5c304e726bf2643b4403e6d46b0e0395b02e93308b4b2c3e957308d497dc51c753344a7878f1f0c91295fd76e3d1cc9ef813161c6b92b7ea6068ceb97d8f45a4ce57af7d7632d699951f7fe3c71c3a32b014c74425c67e5030546b10cf7edcec2eca5ba31dc62c08f83f35bc2e36b93f15f071bc2537ebe9ca19f86dce4e84272e10323d0ceaa2cc47fe4f6ad101d454c761f9863e94af91199ce5f12469bca7ba39314b84aa7efa4bdc18f7700c19511d48d6132450111d70401a8ac73565d5386ca12345e884d08b23f9c901000a95eb4167865e58c28b112f47c96beeaa6657c923e25e56529107c5c30e65bb485d5ed21b91332db4e09df7e59dcfa05c994570deb3f9b838e22ae4abbf9a9a8c319cc9112c8dba7c2278f78b9578b0254c46a4c04b8fa4fedad6bd275f70b1618971ef6503379bfb0a508c9944328af2c820091a89e3f75e68e7f980ddc9154d273f7f2ce7a6294aefe93136860786679b80e41f6636ff45efeacfb52e2ba2bd9bd9c9030079a46caca5c4b340c17d01ba8ecbc5c561b2038481a8321c009d12136a3ad5461881d998eeaac5236fdcd8f81fb5e53848bb096d9198fd0d38830d1809f2a632b31e2b67754140c907ed58aead048b2d8af9a1c407e48db815212cfdcca97222dabdfe01f311a73e1e82c3e189ec5add48d3f8190eb9e14b58e540f7f1388a7c687629eadb19fd8a133dc8177629270ecaabff79efb6c1f750d89b9e6c5f34c6238066f8e3e425e46a27b3c0d2e9e2ed3cffe2a6f39b8e0137ea5de689b94107fb4748a5feb3902f0feba64dae4c2e69bc8d86463575c6b0ef4a8a64fef41121e57a8c67eda07e9fc8f98299677de198ea0a649ef3c00591940b2c27ba1414aaa1633deb52e3a44cfa8d7a00d014317c026a7d7f42a34b97128e1bf9cda4d8315819ac73ed5061bf9b5631d07b09b85b78ff1b6eb86e9e8c4faa0f991cd6fa0b0eb71b39c20ca9bc7c156f3bd255a5b408df172396bafd7f0fb11c6eaf1eb0a06576d37bee00424bf699584b1dfed68f0d8d8a35f0427c783fe2d79b4373628971e87501a5e4bb05b5058d0b2132741f26e76065b6f4017d963c8ee5605c4c5b6eebb96fca0a41893cb6add3fb0d728abeb860f22cedbd36e464bdaf124a7041460f7af3d64b54e9ffd240b5afad9baf6e5dd8406bc1b205da5848f51fc9dd5197716e144e1b0386614bd3cfd5ddb80ada1e5ca74c8960093a553b1f6288aa7f53663cdd867f658e51b95772dc7a6fa45fa03e14988a33250e6c16fbf0351769080d64ddfbdbf77e1215563bf2e82ecc38a682846d7e2e2ac4e87d715f97f15e84c3df04affee49612a735907d3c4d310a54a6f609873ad56f29a138f4d5661f6865e030487"}}, 0xfce)

1m35.62716419s ago: executing program 8 (id=1168):
r0 = syz_open_dev$radio(0x0, 0x1, 0x2)
write$binfmt_script(r0, 0x0, 0x0)
close(0x3)
mkdir(0x0, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
connect$bt_l2cap(r1, 0x0, 0x0)
getpeername(r1, 0x0, &(0x7f0000000100))
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000100))
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0)
inotify_init()
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
socket$igmp(0x2, 0x3, 0x2)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
syz_emit_ethernet(0x7e, &(0x7f0000000300)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x48, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0x4e21, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "88c73b21f267636d01fca2712c1c941e1cdafbbb43f09c70", "e13808ca72381f41e5fff9620915b6f78670dfaf9a2038083179cf6b7931c9b4"}}}}}}}, 0x0)
ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$PPPIOCSFLAGS1(r3, 0x4004743a, &(0x7f0000000080)=0x200020)

1m34.224823287s ago: executing program 8 (id=1172):
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)={0x4a, r1, 0xb97534d5fe9704cf, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x6, 0xbd, [0x4]}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40080c3}, 0x24000000)

1m33.268387005s ago: executing program 8 (id=1176):
openat(0xffffffffffffff9c, 0x0, 0x103a42, 0x32)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000000000000000000000000000400000000", @ANYRES32=0x0, @ANYBLOB='\x00'/14, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000008f0000000000"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x50)

1m32.701397498s ago: executing program 8 (id=1180):
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000240)=ANY=[], 0xfdef)
recvfrom$packet(r0, &(0x7f0000004000)=""/4096, 0x1000, 0x22, 0x0, 0x0)

1m31.799104812s ago: executing program 8 (id=1184):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0xfd67, &(0x7f0000001400), 0x1}}], 0x4000210, 0x10002, 0x0)

1m16.587456015s ago: executing program 37 (id=1184):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0xfd67, &(0x7f0000001400), 0x1}}], 0x4000210, 0x10002, 0x0)

6.415816115s ago: executing program 0 (id=1529):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05000000050000000200000047"], 0x50)
close(0x3)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x48)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001"], 0x18}, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={0xffffffffffffffff, r0}, 0xc)

5.80355353s ago: executing program 0 (id=1533):
socket$inet_udp(0x2, 0x2, 0x0)
socket(0x10, 0x803, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb01801800000000000000c4000000c400000003000000020000000a000000000c00000000000010020000001000000000000012040000000400000000000001000000003500730110000000090000930c0000000d0000005f000000cf0000000b0000008f010000b00000000100000009000000d22800000c00000081000000018000"], &(0x7f0000000500)=""/53, 0x18, 0x35, 0x1, 0x81}, 0x28)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000040)="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", 0x4d9}], 0x1}, 0x240009bd)
bpf$PROG_LOAD(0x5, &(0x7f0000001e00)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014)

5.267384729s ago: executing program 9 (id=1536):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x41}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x5c}}, 0x20084884)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040007}, 0x0)

5.051184019s ago: executing program 0 (id=1537):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1070bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20048884)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x200400dc}, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r8, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0x2}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)

4.965696839s ago: executing program 6 (id=1538):
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r2, 0x0, &(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x1})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r2})

4.801935448s ago: executing program 5 (id=1539):
r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000200)={0x0, 0xa, 0x1, "ea"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000010c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0})

4.752847879s ago: executing program 9 (id=1540):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "03c0000000000500", "9e8ecc7bb535277672a2eff75b24866882519a85ef828f711330ff2bb17b5508", "dc5db43f", "a1034200000102a0"}, 0x38)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r0, 0x0, 0xffe)

4.421306015s ago: executing program 6 (id=1541):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00"], 0xfc}}, 0x20000000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3)
recvmmsg(r3, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0)
write$tun(r0, &(0x7f0000000840)=ANY=[@ANYBLOB='\b\x00\b\x00'], 0xfce)

4.362262373s ago: executing program 0 (id=1542):
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
r0 = socket$kcm(0xa, 0x2, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'lblc\x00', 0x1, 0xa7e, 0x70}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4f21, 0x3, 'lc\x00', 0x5, 0x8, 0x6c}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x10000, 0xcd, 0x1}}, 0x44)
sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)

4.140399613s ago: executing program 9 (id=1543):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00'})
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0)
sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_MAX_BE={0x5, 0x10, 0x1}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xfb}]}, 0x24}}, 0x20000004)

3.983322241s ago: executing program 7 (id=1544):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c00028006000500018000000800", @ANYRES32=r1, @ANYBLOB="0500060001000000050007000000000005000300df00000008000200", @ANYRES64=r0], 0x68}}, 0x0)

3.843330999s ago: executing program 5 (id=1545):
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}], 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffcb9}]})
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340))
ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f)
r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
read$dsp(r3, &(0x7f00000002c0)=""/4096, 0x1000)
write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)

3.822965822s ago: executing program 0 (id=1546):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x19, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0x8, 0x7100000})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f00000000c0)={'security\x00', 0x2, [{}, {}]}, 0x48)

3.565788223s ago: executing program 9 (id=1547):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="180200000000000000000000000000001800000001000010000000000a00000095"], &(0x7f00000005c0)='syzkaller\x00'}, 0x94)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

3.395250434s ago: executing program 5 (id=1548):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8, 0x2, 0xa406}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r3, {0x4}, {0xffff, 0xffff}, {0xe, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080)

3.391531281s ago: executing program 7 (id=1549):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180100002100ffff000000003b810000850000006d000000850000000700000095"], 0x0, 0x400, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x50, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

2.792445677s ago: executing program 6 (id=1550):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x41}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x5c}}, 0x20084884)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040007}, 0x0)

2.721729985s ago: executing program 7 (id=1551):
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r2, 0x0, &(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x1})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r2})

2.005661572s ago: executing program 6 (id=1552):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="01180200031100002c0012800e000100697036657273"], 0x4c}, 0x1, 0x0, 0x0, 0x4044001}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newlink={0x50, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, r1, 0x42024, 0x8d85}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LOCAL={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x21}}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040014}, 0x20004084)

1.980199228s ago: executing program 9 (id=1553):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "03c0000000000500", "9e8ecc7bb535277672a2eff75b24866882519a85ef828f711330ff2bb17b5508", "dc5db43f", "a1034200000102a0"}, 0x38)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r0, &(0x7f0000000140)=ANY=[], 0xffe)

1.933144823s ago: executing program 5 (id=1554):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
recvmmsg(r0, &(0x7f0000002800)=[{{0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000002080)=""/112, 0x70}, {0x0}, {&(0x7f0000002100)=""/212, 0xd4}], 0x3}, 0xa}], 0x1, 0x0, 0x0)

1.911681942s ago: executing program 7 (id=1555):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@jmp={0x5, 0x1, 0x1, 0xa, 0xa, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x87}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x100a, &(0x7f00000009c0)=""/4106, 0x41100, 0x2}, 0x94)

1.357163908s ago: executing program 7 (id=1556):
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
r0 = socket$kcm(0xa, 0x2, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4f21, 0x3, 'lc\x00', 0x5, 0x8, 0x6c}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x10000, 0xcd, 0x1}}, 0x44)
sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)

1.078015256s ago: executing program 6 (id=1557):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00'})
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0)
sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_MAX_BE={0x5, 0x10, 0x1}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xfb}]}, 0x24}}, 0x20000004)

965.244993ms ago: executing program 7 (id=1558):
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}], 0x1)
userfaultfd(0x80001)
r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffcb9}]})
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340))
ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f)
r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
read$dsp(r3, &(0x7f00000002c0)=""/4096, 0x1000)
write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)

647.982666ms ago: executing program 5 (id=1559):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c00028006000500018000000800", @ANYRES32=r1, @ANYBLOB="0500060001000000050007000000000005000300df00000008000200", @ANYRES64=r0], 0x68}}, 0x0)

647.623686ms ago: executing program 9 (id=1560):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00"], 0xfc}}, 0x20000000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3)
recvmmsg(r3, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0)
write$tun(r0, &(0x7f0000000840)=ANY=[@ANYBLOB='\b\x00\b\x00'], 0xfce)

334.555063ms ago: executing program 6 (id=1561):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001000)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0xc854}, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8849}, 0x20004804)
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x24, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff2}, {}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r7)

116.939693ms ago: executing program 0 (id=1562):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10)
sched_rr_get_interval(0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

0s ago: executing program 5 (id=1563):
syz_open_procfs(0x0, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
getpid()
sched_setaffinity(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setreuid(0xee00, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xfff3}}}, 0x24}}, 0x0)
close_range(r0, r0, 0x0)
io_setup(0x4fb, &(0x7f00000001c0))

kernel console output (not intermixed with test programs):

9 > 1
[  636.624157][ T8286] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  636.650883][ T8286] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  636.672484][ T8286] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  636.685608][ T8286] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  637.144442][   T74] bridge0: port 2(bridge_slave_1) entered blocking state
[  637.152082][   T74] bridge0: port 2(bridge_slave_1) entered forwarding state
[  637.522192][ T8364] chnl_net:caif_netlink_parms(): no params data found
[  638.760856][ T5779] Bluetooth: hci5: command tx timeout
[  640.354980][ T8286] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  640.372379][ T8286] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  640.393653][ T8286] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  640.410282][ T8286] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  640.427775][ T8286] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  640.840784][ T5779] Bluetooth: hci5: command tx timeout
[  642.469183][ T1114] bridge_slave_1: left allmulticast mode
[  642.510435][ T1114] bridge_slave_1: left promiscuous mode
[  642.516613][ T1114] bridge0: port 2(bridge_slave_1) entered disabled state
[  642.530277][ T5779] Bluetooth: hci0: command tx timeout
[  642.591255][ T1114] bridge_slave_0: left allmulticast mode
[  642.597096][ T1114] bridge_slave_0: left promiscuous mode
[  642.641745][ T1114] bridge0: port 1(bridge_slave_0) entered disabled state
[  642.944291][ T5779] Bluetooth: hci5: command tx timeout
[  643.512727][ T1114] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  643.601880][ T1114] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  643.753198][ T1114] bond0 (unregistering): Released all slaves
[  643.891406][ T8364] bridge0: port 1(bridge_slave_0) entered blocking state
[  643.898845][ T8364] bridge0: port 1(bridge_slave_0) entered disabled state
[  643.950943][ T8364] bridge_slave_0: entered allmulticast mode
[  643.983728][ T8364] bridge_slave_0: entered promiscuous mode
[  644.381396][ T8364] bridge0: port 2(bridge_slave_1) entered blocking state
[  644.401335][ T8364] bridge0: port 2(bridge_slave_1) entered disabled state
[  644.409038][ T8364] bridge_slave_1: entered allmulticast mode
[  644.468861][ T8364] bridge_slave_1: entered promiscuous mode
[  644.603307][ T5779] Bluetooth: hci0: command tx timeout
[  644.791548][ T1114] hsr_slave_0: left promiscuous mode
[  644.820992][ T1114] hsr_slave_1: left promiscuous mode
[  644.850431][ T1114] batman_adv: batadv0: Removing interface: batadv_slave_0
[  644.859565][ T1114] batman_adv: batadv0: Removing interface: batadv_slave_1
[  645.028665][ T5779] Bluetooth: hci5: command tx timeout
[  645.735284][ T8438] loop4: detected capacity change from 0 to 128
[  645.748209][ T1114] team0 (unregistering): Port device team_slave_1 removed
[  645.837968][ T8438] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  645.863357][ T1114] team0 (unregistering): Port device team_slave_0 removed
[  645.971539][ T8438] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  646.680407][ T5779] Bluetooth: hci0: command tx timeout
[  647.037468][ T8364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  647.156653][ T8364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  647.584834][ T8364] team0: Port device team_slave_0 added
[  647.636939][ T8364] team0: Port device team_slave_1 added
[  647.651351][ T8395] chnl_net:caif_netlink_parms(): no params data found
[  648.597465][ T8284] 8021q: adding VLAN 0 to HW filter on device bond0
[  648.760915][ T5779] Bluetooth: hci0: command tx timeout
[  648.798979][ T8364] batman_adv: batadv0: Adding interface: batadv_slave_0
[  648.820250][ T8364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  649.340473][ T8364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  652.133911][ T8364] batman_adv: batadv0: Adding interface: batadv_slave_1
[  652.170251][ T8364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  652.280141][ T8364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  652.526127][ T8412] chnl_net:caif_netlink_parms(): no params data found
[  652.735920][ T8395] bridge0: port 1(bridge_slave_0) entered blocking state
[  652.759034][ T8395] bridge0: port 1(bridge_slave_0) entered disabled state
[  652.784867][ T8395] bridge_slave_0: entered allmulticast mode
[  652.873318][ T8395] bridge_slave_0: entered promiscuous mode
[  653.082720][ T8395] bridge0: port 2(bridge_slave_1) entered blocking state
[  653.111156][ T8395] bridge0: port 2(bridge_slave_1) entered disabled state
[  653.118956][ T8395] bridge_slave_1: entered allmulticast mode
[  653.157533][ T8395] bridge_slave_1: entered promiscuous mode
[  653.367677][ T8284] 8021q: adding VLAN 0 to HW filter on device team0
[  653.788046][ T8364] hsr_slave_0: entered promiscuous mode
[  653.812778][ T8364] hsr_slave_1: entered promiscuous mode
[  653.861605][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[  653.869039][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[  653.927596][ T8395] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  653.978125][ T8395] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  654.284240][   T74] bridge0: port 2(bridge_slave_1) entered blocking state
[  654.291766][   T74] bridge0: port 2(bridge_slave_1) entered forwarding state
[  654.913269][ T8395] team0: Port device team_slave_0 added
[  655.301080][ T8395] team0: Port device team_slave_1 added
[  657.125834][ T8412] bridge0: port 1(bridge_slave_0) entered blocking state
[  657.157170][ T8412] bridge0: port 1(bridge_slave_0) entered disabled state
[  657.191963][ T8412] bridge_slave_0: entered allmulticast mode
[  657.233300][ T8412] bridge_slave_0: entered promiscuous mode
[  657.294181][ T8412] bridge0: port 2(bridge_slave_1) entered blocking state
[  657.341820][ T8412] bridge0: port 2(bridge_slave_1) entered disabled state
[  657.349603][ T8412] bridge_slave_1: entered allmulticast mode
[  657.422689][ T8412] bridge_slave_1: entered promiscuous mode
[  657.929011][ T8286] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  657.941883][ T8286] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  657.951536][ T8286] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  657.983675][ T8286] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  658.008195][ T8286] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  658.688411][ T8395] batman_adv: batadv0: Adding interface: batadv_slave_0
[  658.718332][ T8395] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  658.819504][ T8395] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  658.867755][ T8395] batman_adv: batadv0: Adding interface: batadv_slave_1
[  658.894430][ T8395] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  658.990352][ T8395] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  659.589827][ T8412] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  659.674244][ T8412] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  660.050342][ T5779] Bluetooth: hci6: command tx timeout
[  660.504806][ T8412] team0: Port device team_slave_0 added
[  660.674856][ T8395] hsr_slave_0: entered promiscuous mode
[  660.734220][ T8395] hsr_slave_1: entered promiscuous mode
[  660.763200][ T8395] debugfs: 'hsr0' already exists in 'hsr'
[  660.790232][ T8395] Cannot create hsr debugfs directory
[  660.805785][ T8412] team0: Port device team_slave_1 added
[  661.496722][ T8412] batman_adv: batadv0: Adding interface: batadv_slave_0
[  661.507148][ T8412] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  661.543615][ T8412] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  661.853099][ T8412] batman_adv: batadv0: Adding interface: batadv_slave_1
[  661.869809][ T8412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  661.916797][ T8412] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  662.120555][ T5779] Bluetooth: hci6: command tx timeout
[  662.611546][ T1114] bridge_slave_1: left allmulticast mode
[  662.617422][ T1114] bridge_slave_1: left promiscuous mode
[  662.641007][ T1114] bridge0: port 2(bridge_slave_1) entered disabled state
[  662.678972][ T1114] bridge_slave_0: left allmulticast mode
[  662.700386][ T1114] bridge_slave_0: left promiscuous mode
[  662.706818][ T1114] bridge0: port 1(bridge_slave_0) entered disabled state
[  662.767023][ T1114] bridge_slave_1: left allmulticast mode
[  662.786213][ T1114] bridge_slave_1: left promiscuous mode
[  662.805951][ T1114] bridge0: port 2(bridge_slave_1) entered disabled state
[  662.841703][ T1114] bridge_slave_0: left allmulticast mode
[  662.847533][ T1114] bridge_slave_0: left promiscuous mode
[  662.866548][ T1114] bridge0: port 1(bridge_slave_0) entered disabled state
[  663.673699][ T1114] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  663.721900][ T1114] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  663.740374][ T1114] bond0 (unregistering): Released all slaves
[  664.127917][ T1114] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  664.181831][ T1114] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  664.200402][ T5779] Bluetooth: hci6: command tx timeout
[  664.227782][ T1114] bond0 (unregistering): Released all slaves
[  664.396678][ T8412] hsr_slave_0: entered promiscuous mode
[  664.423282][ T8412] hsr_slave_1: entered promiscuous mode
[  664.453377][ T8412] debugfs: 'hsr0' already exists in 'hsr'
[  664.459289][ T8412] Cannot create hsr debugfs directory
[  664.910643][ T1114] hsr_slave_0: left promiscuous mode
[  664.918876][ T1114] hsr_slave_1: left promiscuous mode
[  664.935979][ T1114] batman_adv: batadv0: Removing interface: batadv_slave_0
[  664.965023][ T1114] batman_adv: batadv0: Removing interface: batadv_slave_1
[  665.004249][ T1114] hsr_slave_0: left promiscuous mode
[  665.012425][ T1114] hsr_slave_1: left promiscuous mode
[  665.029797][ T1114] batman_adv: batadv0: Removing interface: batadv_slave_0
[  665.040310][ T1114] batman_adv: batadv0: Removing interface: batadv_slave_1
[  665.810507][ T1114] team0 (unregistering): Port device team_slave_1 removed
[  665.849123][ T1114] team0 (unregistering): Port device team_slave_0 removed
[  666.340735][ T5779] Bluetooth: hci6: command tx timeout
[  668.872227][ T8500] syz.4.597 (8500): drop_caches: 2
[  675.021824][ T1114] team0 (unregistering): Port device team_slave_1 removed
[  675.092208][ T1114] team0 (unregistering): Port device team_slave_0 removed
[  678.671607][ T8364] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  678.749459][ T8483] chnl_net:caif_netlink_parms(): no params data found
[  678.928552][ T8364] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  679.080580][ T8364] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  679.405456][ T1114] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  679.467936][ T8364] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  679.602394][ T1114] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  679.823185][ T1114] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  679.948319][ T1114] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  680.292370][ T8483] bridge0: port 1(bridge_slave_0) entered blocking state
[  680.311264][ T8483] bridge0: port 1(bridge_slave_0) entered disabled state
[  680.318910][ T8483] bridge_slave_0: entered allmulticast mode
[  680.353327][ T8483] bridge_slave_0: entered promiscuous mode
[  680.385317][ T8483] bridge0: port 2(bridge_slave_1) entered blocking state
[  680.400749][ T8483] bridge0: port 2(bridge_slave_1) entered disabled state
[  680.408317][ T8483] bridge_slave_1: entered allmulticast mode
[  680.433819][ T8483] bridge_slave_1: entered promiscuous mode
[  680.753824][ T8483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  680.892391][ T8483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  680.925512][ T8395] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  681.402168][ T8395] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  681.660712][ T8395] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  681.729409][ T8395] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  681.852151][ T8483] team0: Port device team_slave_0 added
[  681.910982][ T8483] team0: Port device team_slave_1 added
[  682.714923][ T8483] batman_adv: batadv0: Adding interface: batadv_slave_0
[  682.737176][ T8483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  682.830214][ T8483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  682.988513][ T8483] batman_adv: batadv0: Adding interface: batadv_slave_1
[  683.008846][ T8483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  683.070432][ T8483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  683.776092][ T8412] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  683.822296][ T8412] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  683.968415][ T8483] hsr_slave_0: entered promiscuous mode
[  683.989265][ T8483] hsr_slave_1: entered promiscuous mode
[  684.011122][ T8483] debugfs: 'hsr0' already exists in 'hsr'
[  684.017023][ T8483] Cannot create hsr debugfs directory
[  684.032014][ T8412] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  684.084556][ T8412] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  685.050815][ T1114] bridge_slave_1: left allmulticast mode
[  685.056651][ T1114] bridge_slave_1: left promiscuous mode
[  685.291389][ T1114] bridge0: port 2(bridge_slave_1) entered disabled state
[  685.365184][ T1114] bridge_slave_0: left allmulticast mode
[  685.420237][ T1114] bridge_slave_0: left promiscuous mode
[  685.426761][ T1114] bridge0: port 1(bridge_slave_0) entered disabled state
[  685.466942][ T1114] bridge_slave_1: left allmulticast mode
[  685.480446][ T1114] bridge_slave_1: left promiscuous mode
[  685.528378][ T1114] bridge0: port 2(bridge_slave_1) entered disabled state
[  685.567679][ T8286] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  685.585445][ T8286] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  685.596837][ T8286] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  685.610900][ T8286] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  685.631847][ T8286] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  685.652840][ T1114] bridge_slave_0: left allmulticast mode
[  685.658746][ T1114] bridge_slave_0: left promiscuous mode
[  685.669056][ T1114] bridge0: port 1(bridge_slave_0) entered disabled state
[  686.584996][ T1114] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  686.615135][ T1114] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  686.639642][ T1114] bond0 (unregistering): Released all slaves
[  687.051746][ T1114] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  687.107263][ T1114] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  687.138449][ T1114] bond0 (unregistering): Released all slaves
[  687.470320][ T1114] tipc: Left network mode
[  687.720677][ T5779] Bluetooth: hci1: command tx timeout
[  688.071616][ T8395] 8021q: adding VLAN 0 to HW filter on device bond0
[  689.800144][ T5779] Bluetooth: hci1: command tx timeout
[  690.220634][ T1114] hsr_slave_0: left promiscuous mode
[  690.266459][ T1114] hsr_slave_1: left promiscuous mode
[  690.302457][ T1114] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  690.332193][ T1114] batman_adv: batadv0: Removing interface: batadv_slave_0
[  690.355006][ T1114] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  690.398166][ T1114] batman_adv: batadv0: Removing interface: batadv_slave_1
[  690.479356][ T1114] hsr_slave_0: left promiscuous mode
[  690.513571][ T1114] hsr_slave_1: left promiscuous mode
[  690.535702][ T1114] batman_adv: batadv0: Removing interface: batadv_slave_0
[  690.571325][ T1114] batman_adv: batadv0: Removing interface: batadv_slave_1
[  690.651377][ T1114] veth1_macvtap: left promiscuous mode
[  690.657088][ T1114] veth0_macvtap: left promiscuous mode
[  690.698949][ T1114] veth1_vlan: left promiscuous mode
[  690.712082][ T1114] veth0_vlan: left promiscuous mode
[  691.890279][ T5779] Bluetooth: hci1: command tx timeout
[  692.441670][ T1114] team0 (unregistering): Port device team_slave_1 removed
[  692.506302][ T1114] team0 (unregistering): Port device team_slave_0 removed
[  693.489753][ T1114] team0 (unregistering): Port device team_slave_1 removed
[  693.578088][ T1114] team0 (unregistering): Port device team_slave_0 removed
[  693.962008][ T5779] Bluetooth: hci1: command tx timeout
[  694.067656][ T8395] 8021q: adding VLAN 0 to HW filter on device team0
[  694.441082][ T8548] chnl_net:caif_netlink_parms(): no params data found
[  694.564842][ T6288] bridge0: port 1(bridge_slave_0) entered blocking state
[  694.572449][ T6288] bridge0: port 1(bridge_slave_0) entered forwarding state
[  694.865158][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  694.872552][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  695.218870][ T1114] IPVS: stop unused estimator thread 0...
[  695.506207][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  695.512884][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  695.735756][ T8412] 8021q: adding VLAN 0 to HW filter on device bond0
[  695.979863][ T8483] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  696.228659][ T8483] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  696.784900][ T8483] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  696.989473][ T8286] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  697.002266][ T8286] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  697.021050][ T8286] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  697.044985][ T8286] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  697.047591][ T8412] 8021q: adding VLAN 0 to HW filter on device team0
[  697.075595][ T8286] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  697.291190][ T8483] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  697.333852][ T8548] bridge0: port 1(bridge_slave_0) entered blocking state
[  697.380974][ T8548] bridge0: port 1(bridge_slave_0) entered disabled state
[  697.388650][ T8548] bridge_slave_0: entered allmulticast mode
[  697.424930][ T8548] bridge_slave_0: entered promiscuous mode
[  697.504565][ T8548] bridge0: port 2(bridge_slave_1) entered blocking state
[  697.570623][ T8548] bridge0: port 2(bridge_slave_1) entered disabled state
[  697.620778][ T8548] bridge_slave_1: entered allmulticast mode
[  697.657842][ T8548] bridge_slave_1: entered promiscuous mode
[  698.158773][ T6288] bridge0: port 1(bridge_slave_0) entered blocking state
[  698.166274][ T6288] bridge0: port 1(bridge_slave_0) entered forwarding state
[  698.361235][ T8548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  698.422109][ T8548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  698.478565][ T6288] bridge0: port 2(bridge_slave_1) entered blocking state
[  698.486051][ T6288] bridge0: port 2(bridge_slave_1) entered forwarding state
[  698.971865][ T8548] team0: Port device team_slave_0 added
[  699.004968][ T8548] team0: Port device team_slave_1 added
[  699.160491][ T5779] Bluetooth: hci2: command tx timeout
[  699.521651][ T8548] batman_adv: batadv0: Adding interface: batadv_slave_0
[  699.529193][ T8548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  699.624788][ T8548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  699.692717][ T1114] bridge_slave_1: left allmulticast mode
[  699.698545][ T1114] bridge_slave_1: left promiscuous mode
[  699.722584][ T1114] bridge0: port 2(bridge_slave_1) entered disabled state
[  699.739876][ T1114] bridge_slave_0: left allmulticast mode
[  699.779850][ T1114] bridge_slave_0: left promiscuous mode
[  699.821176][ T1114] bridge0: port 1(bridge_slave_0) entered disabled state
[  700.487102][ T1114] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  700.550371][ T8286] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  700.560964][ T8286] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  700.570901][ T8286] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  700.599787][ T1114] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  700.615415][ T8286] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  700.627192][ T8286] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  700.772346][ T1114] bond0 (unregistering): Released all slaves
[  700.842992][ T8548] batman_adv: batadv0: Adding interface: batadv_slave_1
[  700.855290][ T8548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  700.961236][ T8548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  701.121175][ T1114] hsr_slave_0: left promiscuous mode
[  701.129460][ T1114] hsr_slave_1: left promiscuous mode
[  701.176428][ T1114] batman_adv: batadv0: Removing interface: batadv_slave_0
[  701.201961][ T1114] batman_adv: batadv0: Removing interface: batadv_slave_1
[  701.240201][ T8286] Bluetooth: hci2: command tx timeout
[  701.641271][ T1114] team0 (unregistering): Port device team_slave_1 removed
[  701.747170][ T1114] team0 (unregistering): Port device team_slave_0 removed
[  702.590871][ T8548] hsr_slave_0: entered promiscuous mode
[  702.611990][ T8548] hsr_slave_1: entered promiscuous mode
[  702.760561][ T8286] Bluetooth: hci3: command tx timeout
[  703.349832][ T8286] Bluetooth: hci2: command tx timeout
[  706.447346][ T8619] syz.4.611 (8619): drop_caches: 2
[  706.580500][ T8286] Bluetooth: hci3: command tx timeout
[  706.586099][ T8286] Bluetooth: hci2: command tx timeout
[  707.001152][ T8483] 8021q: adding VLAN 0 to HW filter on device bond0
[  707.522554][ T8607] chnl_net:caif_netlink_parms(): no params data found
[  708.385397][ T8483] 8021q: adding VLAN 0 to HW filter on device team0
[  708.600217][ T5779] Bluetooth: hci3: command tx timeout
[  708.624944][ T6040] bridge0: port 1(bridge_slave_0) entered blocking state
[  708.632446][ T6040] bridge0: port 1(bridge_slave_0) entered forwarding state
[  708.867785][ T6040] bridge0: port 2(bridge_slave_1) entered blocking state
[  708.875397][ T6040] bridge0: port 2(bridge_slave_1) entered forwarding state
[  709.279586][ T8616] chnl_net:caif_netlink_parms(): no params data found
[  709.326208][ T8607] bridge0: port 1(bridge_slave_0) entered blocking state
[  709.351806][ T8607] bridge0: port 1(bridge_slave_0) entered disabled state
[  709.359497][ T8607] bridge_slave_0: entered allmulticast mode
[  709.370844][ T8607] bridge_slave_0: entered promiscuous mode
[  709.447460][ T8607] bridge0: port 2(bridge_slave_1) entered blocking state
[  709.457379][ T8607] bridge0: port 2(bridge_slave_1) entered disabled state
[  709.467735][ T8607] bridge_slave_1: entered allmulticast mode
[  709.478318][ T8607] bridge_slave_1: entered promiscuous mode
[  709.890494][ T8607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  709.911735][ T8607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  710.229196][ T8548] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  710.333391][ T8607] team0: Port device team_slave_0 added
[  710.350560][ T8548] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  710.372525][ T8548] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  710.432363][ T8548] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  710.576424][ T8658] loop4: detected capacity change from 0 to 128
[  710.680554][ T5779] Bluetooth: hci3: command tx timeout
[  710.690420][ T8607] team0: Port device team_slave_1 added
[  710.749396][ T8659] syz.4.613: attempt to access beyond end of device
[  710.749396][ T8659] loop4: rw=8388611, sector=913, nr_sectors = 7 limit=128
[  710.787220][ T8659] syz.4.613: attempt to access beyond end of device
[  710.787220][ T8659] loop4: rw=8390659, sector=920, nr_sectors = 121 limit=128
[  711.017619][ T8607] batman_adv: batadv0: Adding interface: batadv_slave_0
[  711.027250][ T8607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  711.064739][ T8607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  711.136528][ T8616] bridge0: port 1(bridge_slave_0) entered blocking state
[  711.146162][ T8616] bridge0: port 1(bridge_slave_0) entered disabled state
[  711.155177][ T8616] bridge_slave_0: entered allmulticast mode
[  711.166222][ T8616] bridge_slave_0: entered promiscuous mode
[  711.195312][ T8607] batman_adv: batadv0: Adding interface: batadv_slave_1
[  711.203352][ T8607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  711.235245][ T8607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  711.320904][ T1114] bridge_slave_1: left allmulticast mode
[  711.326735][ T1114] bridge_slave_1: left promiscuous mode
[  711.355550][ T1114] bridge0: port 2(bridge_slave_1) entered disabled state
[  711.393213][ T1114] bridge_slave_0: left allmulticast mode
[  711.403588][ T1114] bridge_slave_0: left promiscuous mode
[  711.410179][ T1114] bridge0: port 1(bridge_slave_0) entered disabled state
[  711.466394][ T1114] bridge_slave_1: left allmulticast mode
[  711.481220][ T1114] bridge_slave_1: left promiscuous mode
[  711.487624][ T1114] bridge0: port 2(bridge_slave_1) entered disabled state
[  711.518400][ T1114] bridge_slave_0: left allmulticast mode
[  711.530293][ T1114] bridge_slave_0: left promiscuous mode
[  711.536710][ T1114] bridge0: port 1(bridge_slave_0) entered disabled state
[  712.071519][ T1114] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  712.092679][ T1114] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  712.116617][ T1114] bond0 (unregistering): Released all slaves
[  712.307333][ T1114] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  712.322338][ T1114] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  712.347758][ T1114] bond0 (unregistering): Released all slaves
[  712.367067][ T8616] bridge0: port 2(bridge_slave_1) entered blocking state
[  712.376464][ T8616] bridge0: port 2(bridge_slave_1) entered disabled state
[  712.387372][ T8616] bridge_slave_1: entered allmulticast mode
[  712.397327][ T8616] bridge_slave_1: entered promiscuous mode
[  712.734249][ T8616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  712.764757][ T8670] loop4: detected capacity change from 0 to 164
[  712.822197][ T1114] hsr_slave_0: left promiscuous mode
[  712.839707][ T1114] hsr_slave_1: left promiscuous mode
[  712.864188][ T1114] batman_adv: batadv0: Removing interface: batadv_slave_0
[  712.884643][ T1114] batman_adv: batadv0: Removing interface: batadv_slave_1
[  712.970126][ T1114] hsr_slave_0: left promiscuous mode
[  713.001542][ T1114] hsr_slave_1: left promiscuous mode
[  713.008996][ T1114] batman_adv: batadv0: Removing interface: batadv_slave_0
[  713.053014][ T1114] batman_adv: batadv0: Removing interface: batadv_slave_1
[  713.092524][ T8672] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  713.670311][ T1114] team0 (unregistering): Port device team_slave_1 removed
[  713.726898][ T1114] team0 (unregistering): Port device team_slave_0 removed
[  714.458640][ T1114] team0 (unregistering): Port device team_slave_1 removed
[  714.515388][ T1114] team0 (unregistering): Port device team_slave_0 removed
[  714.892103][ T8607] hsr_slave_0: entered promiscuous mode
[  714.905796][ T8607] hsr_slave_1: entered promiscuous mode
[  714.914914][ T8607] debugfs: 'hsr0' already exists in 'hsr'
[  714.929257][ T8607] Cannot create hsr debugfs directory
[  714.968219][ T8616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  715.246559][ T8616] team0: Port device team_slave_0 added
[  715.279862][ T8483] 8021q: adding VLAN 0 to HW filter on device batadv0
[  715.412194][ T8616] team0: Port device team_slave_1 added
[  715.686913][ T8616] batman_adv: batadv0: Adding interface: batadv_slave_0
[  715.710121][ T8616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  715.745116][ T8616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  715.774839][ T8616] batman_adv: batadv0: Adding interface: batadv_slave_1
[  715.782325][ T8616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  715.810828][ T8616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  716.588920][ T8616] hsr_slave_0: entered promiscuous mode
[  716.632253][ T8616] hsr_slave_1: entered promiscuous mode
[  716.658317][ T8616] debugfs: 'hsr0' already exists in 'hsr'
[  716.670122][ T8616] Cannot create hsr debugfs directory
[  717.846888][ T8286] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  717.875082][ T8286] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  717.887155][ T8286] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  717.902379][ T8286] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  717.924581][ T8286] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  718.592624][ T8548] 8021q: adding VLAN 0 to HW filter on device bond0
[  718.900903][ T8548] 8021q: adding VLAN 0 to HW filter on device team0
[  718.954846][ T6040] bridge0: port 1(bridge_slave_0) entered blocking state
[  718.962346][ T6040] bridge0: port 1(bridge_slave_0) entered forwarding state
[  719.304356][ T6040] bridge0: port 2(bridge_slave_1) entered blocking state
[  719.311897][ T6040] bridge0: port 2(bridge_slave_1) entered forwarding state
[  719.419359][ T8607] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  719.477575][ T8607] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  719.621754][ T8607] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  719.664521][ T8607] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  719.973441][ T5779] Bluetooth: hci0: command tx timeout
[  720.708516][ T8691] chnl_net:caif_netlink_parms(): no params data found
[  721.620555][ T6038] bridge_slave_1: left allmulticast mode
[  721.626389][ T6038] bridge_slave_1: left promiscuous mode
[  721.663663][ T6038] bridge0: port 2(bridge_slave_1) entered disabled state
[  721.752737][ T6038] bridge_slave_0: left allmulticast mode
[  721.758562][ T6038] bridge_slave_0: left promiscuous mode
[  721.789060][ T6038] bridge0: port 1(bridge_slave_0) entered disabled state
[  722.040328][ T5779] Bluetooth: hci0: command tx timeout
[  722.402610][ T6038] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  722.420644][ T6038] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  722.467686][ T6038] bond0 (unregistering): Released all slaves
[  722.490914][ T8616] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  722.528484][ T8616] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  722.808413][ T6038] hsr_slave_0: left promiscuous mode
[  722.874676][ T6038] hsr_slave_1: left promiscuous mode
[  722.885333][ T6038] batman_adv: batadv0: Removing interface: batadv_slave_0
[  722.896017][ T6038] batman_adv: batadv0: Removing interface: batadv_slave_1
[  723.730212][ T6038] team0 (unregistering): Port device team_slave_1 removed
[  723.807194][ T6038] team0 (unregistering): Port device team_slave_0 removed
[  724.120323][ T5779] Bluetooth: hci0: command tx timeout
[  724.411921][ T8616] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  724.734263][ T8616] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  725.013225][ T8691] bridge0: port 1(bridge_slave_0) entered blocking state
[  725.057405][ T8691] bridge0: port 1(bridge_slave_0) entered disabled state
[  725.069395][ T8691] bridge_slave_0: entered allmulticast mode
[  725.135824][ T8691] bridge_slave_0: entered promiscuous mode
[  725.250769][ T8691] bridge0: port 2(bridge_slave_1) entered blocking state
[  725.272106][ T8691] bridge0: port 2(bridge_slave_1) entered disabled state
[  725.300664][ T8691] bridge_slave_1: entered allmulticast mode
[  725.319370][ T8691] bridge_slave_1: entered promiscuous mode
[  725.775835][ T8691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  725.817206][ T8548] 8021q: adding VLAN 0 to HW filter on device batadv0
[  725.977861][ T8691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  726.200287][ T5779] Bluetooth: hci0: command tx timeout
[  726.454225][ T8691] team0: Port device team_slave_0 added
[  726.506758][ T8691] team0: Port device team_slave_1 added
[  726.552664][ T8607] 8021q: adding VLAN 0 to HW filter on device bond0
[  726.886129][ T8691] batman_adv: batadv0: Adding interface: batadv_slave_0
[  726.920550][ T8691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  726.988251][ T8691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  727.090740][ T8691] batman_adv: batadv0: Adding interface: batadv_slave_1
[  727.097848][ T8691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  727.162703][ T8691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  727.366296][ T8607] 8021q: adding VLAN 0 to HW filter on device team0
[  727.437003][ T6038] bridge0: port 1(bridge_slave_0) entered blocking state
[  727.444505][ T6038] bridge0: port 1(bridge_slave_0) entered forwarding state
[  727.539277][ T6038] bridge0: port 2(bridge_slave_1) entered blocking state
[  727.546790][ T6038] bridge0: port 2(bridge_slave_1) entered forwarding state
[  727.957205][ T8691] hsr_slave_0: entered promiscuous mode
[  727.984115][ T8691] hsr_slave_1: entered promiscuous mode
[  728.002790][ T8691] debugfs: 'hsr0' already exists in 'hsr'
[  728.008677][ T8691] Cannot create hsr debugfs directory
[  729.091614][ T8286] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  729.100933][ T8286] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  729.110022][ T8286] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  729.122920][ T8286] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  729.133669][ T8286] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  729.918599][  T589] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  729.947002][ T8616] 8021q: adding VLAN 0 to HW filter on device bond0
[  730.095552][ T8548] veth0_vlan: entered promiscuous mode
[  730.144141][  T589] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  730.307534][  T589] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  730.376655][ T8616] 8021q: adding VLAN 0 to HW filter on device team0
[  730.494648][  T589] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  730.558491][ T8548] veth1_vlan: entered promiscuous mode
[  730.660127][ T6038] bridge0: port 1(bridge_slave_0) entered blocking state
[  730.667556][ T6038] bridge0: port 1(bridge_slave_0) entered forwarding state
[  730.900729][ T6038] bridge0: port 2(bridge_slave_1) entered blocking state
[  730.908116][ T6038] bridge0: port 2(bridge_slave_1) entered forwarding state
[  731.165337][ T8286] Bluetooth: hci5: command tx timeout
[  731.585250][ T8717] chnl_net:caif_netlink_parms(): no params data found
[  731.672055][  T589] bridge_slave_1: left allmulticast mode
[  731.677883][  T589] bridge_slave_1: left promiscuous mode
[  731.685716][  T589] bridge0: port 2(bridge_slave_1) entered disabled state
[  731.696303][  T589] bridge_slave_0: left allmulticast mode
[  731.702495][  T589] bridge_slave_0: left promiscuous mode
[  731.708681][  T589] bridge0: port 1(bridge_slave_0) entered disabled state
[  732.122991][  T589] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  732.141285][  T589] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  732.154113][  T589] bond0 (unregistering): Released all slaves
[  732.170569][ T8548] veth0_macvtap: entered promiscuous mode
[  732.316663][ T8691] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  732.386466][ T8607] 8021q: adding VLAN 0 to HW filter on device batadv0
[  732.472995][ T8691] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  732.550062][ T8548] veth1_macvtap: entered promiscuous mode
[  732.596716][ T8691] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  732.795905][ T8691] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  732.900392][ T8548] batman_adv: batadv0: Interface activated: batadv_slave_0
[  733.060469][  T589] hsr_slave_0: left promiscuous mode
[  733.075628][  T589] hsr_slave_1: left promiscuous mode
[  733.085661][  T589] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  733.098344][  T589] batman_adv: batadv0: Removing interface: batadv_slave_0
[  733.109017][  T589] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  733.118760][  T589] batman_adv: batadv0: Removing interface: batadv_slave_1
[  733.143106][  T589] veth1_macvtap: left promiscuous mode
[  733.148783][  T589] veth0_macvtap: left promiscuous mode
[  733.154996][  T589] veth1_vlan: left promiscuous mode
[  733.160806][  T589] veth0_vlan: left promiscuous mode
[  733.244429][ T8286] Bluetooth: hci5: command tx timeout
[  733.594405][  T589] team0 (unregistering): Port device team_slave_1 removed
[  733.636999][  T589] team0 (unregistering): Port device team_slave_0 removed
[  734.005419][ T8548] batman_adv: batadv0: Interface activated: batadv_slave_1
[  734.036890][ T8717] bridge0: port 1(bridge_slave_0) entered blocking state
[  734.056194][ T8717] bridge0: port 1(bridge_slave_0) entered disabled state
[  734.091254][ T8717] bridge_slave_0: entered allmulticast mode
[  734.108204][ T8717] bridge_slave_0: entered promiscuous mode
[  734.159821][ T8717] bridge0: port 2(bridge_slave_1) entered blocking state
[  734.168798][ T8717] bridge0: port 2(bridge_slave_1) entered disabled state
[  734.206085][ T8717] bridge_slave_1: entered allmulticast mode
[  734.230294][ T8717] bridge_slave_1: entered promiscuous mode
[  734.289529][  T589] IPVS: stop unused estimator thread 0...
[  734.295707][ T6290] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  734.295969][ T6290] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  734.296164][ T6290] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  734.296355][ T6290] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  734.437953][ T8717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  734.473774][ T8717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  734.759777][ T8717] team0: Port device team_slave_0 added
[  734.774732][ T8717] team0: Port device team_slave_1 added
[  734.951831][ T8616] 8021q: adding VLAN 0 to HW filter on device batadv0
[  734.988514][ T8717] batman_adv: batadv0: Adding interface: batadv_slave_0
[  735.000885][ T8717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  735.034438][ T8717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  735.052166][ T8717] batman_adv: batadv0: Adding interface: batadv_slave_1
[  735.059249][ T8717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  735.102288][ T8717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  735.331530][ T8286] Bluetooth: hci5: command tx timeout
[  735.517708][ T8717] hsr_slave_0: entered promiscuous mode
[  735.536766][ T8717] hsr_slave_1: entered promiscuous mode
[  735.562863][ T8717] debugfs: 'hsr0' already exists in 'hsr'
[  735.568752][ T8717] Cannot create hsr debugfs directory
[  735.640764][ T8607] veth0_vlan: entered promiscuous mode
[  735.725984][ T8691] 8021q: adding VLAN 0 to HW filter on device bond0
[  735.926029][ T8607] veth1_vlan: entered promiscuous mode
[  736.113511][ T8691] 8021q: adding VLAN 0 to HW filter on device team0
[  736.214277][ T1101] bridge0: port 1(bridge_slave_0) entered blocking state
[  736.221769][ T1101] bridge0: port 1(bridge_slave_0) entered forwarding state
[  736.394100][  T589] bridge0: port 2(bridge_slave_1) entered blocking state
[  736.401647][  T589] bridge0: port 2(bridge_slave_1) entered forwarding state
[  736.547505][ T8607] veth0_macvtap: entered promiscuous mode
[  736.742921][ T8607] veth1_macvtap: entered promiscuous mode
[  736.936216][ T8717] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  736.975907][ T8717] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  737.064425][ T8717] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  737.088962][ T8717] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  737.171868][ T8607] batman_adv: batadv0: Interface activated: batadv_slave_0
[  737.258869][ T8616] veth0_vlan: entered promiscuous mode
[  737.304715][ T8607] batman_adv: batadv0: Interface activated: batadv_slave_1
[  737.400646][ T8286] Bluetooth: hci5: command tx timeout
[  737.467948][   T53] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  737.491318][  T589] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  737.536177][  T589] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  737.562625][  T589] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  737.626185][ T8616] veth1_vlan: entered promiscuous mode
[  737.838655][   T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  737.887496][   T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  738.102105][ T1101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  738.115086][ T1101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  738.215109][ T8616] veth0_macvtap: entered promiscuous mode
[  738.323654][ T8616] veth1_macvtap: entered promiscuous mode
[  738.561818][ T8779] loop5: detected capacity change from 0 to 512
[  738.573224][ T8691] 8021q: adding VLAN 0 to HW filter on device batadv0
[  738.677876][ T8616] batman_adv: batadv0: Interface activated: batadv_slave_0
[  738.682551][ T8779] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  738.702462][ T8616] batman_adv: batadv0: Interface activated: batadv_slave_1
[  738.791762][ T8779] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  738.876103][ T8779] EXT4-fs warning (device loop5): ext4_empty_dir:3097: inode #12: comm syz.5.109: directory missing '..'
[  738.886206][ T1101] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  738.921493][ T1101] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  739.008252][ T1101] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  739.050264][ T6040] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  739.142464][ T8717] 8021q: adding VLAN 0 to HW filter on device bond0
[  739.258145][ T8548] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  739.374300][ T8717] 8021q: adding VLAN 0 to HW filter on device team0
[  739.477974][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[  739.485489][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[  739.594157][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[  739.601691][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[  739.954602][ T8794] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  740.056740][ T8796] loop5: detected capacity change from 0 to 128
[  741.595994][ T8691] veth0_vlan: entered promiscuous mode
[  741.794445][ T8691] veth1_vlan: entered promiscuous mode
[  742.268129][ T8691] veth0_macvtap: entered promiscuous mode
[  742.359781][ T8717] 8021q: adding VLAN 0 to HW filter on device batadv0
[  742.435265][ T8691] veth1_macvtap: entered promiscuous mode
[  742.708833][ T8691] batman_adv: batadv0: Interface activated: batadv_slave_0
[  742.825273][ T8691] batman_adv: batadv0: Interface activated: batadv_slave_1
[  742.987670][  T589] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  743.059227][  T589] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  743.107250][ T1101] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  743.196720][ T1101] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  743.968011][ T6040] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  744.032544][ T6040] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  744.266978][ T6290] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  744.313417][ T6290] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  745.094387][ T8854] loop7: detected capacity change from 0 to 16
[  745.161431][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  745.169441][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  745.182992][ T8717] veth0_vlan: entered promiscuous mode
[  745.194914][ T8854] erofs (device loop7): bogus i_mode (0) @ nid 3675667388432384
[  745.634341][ T8717] veth1_vlan: entered promiscuous mode
[  745.818833][   T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  745.885825][   T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  745.957287][ T8862] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  746.187158][ T8717] veth0_macvtap: entered promiscuous mode
[  746.350691][ T8717] veth1_macvtap: entered promiscuous mode
[  746.703070][ T8870] netlink: 'syz.5.628': attribute type 13 has an invalid length.
[  746.776801][ T8717] batman_adv: batadv0: Interface activated: batadv_slave_0
[  749.412862][ T8717] batman_adv: batadv0: Interface activated: batadv_slave_1
[  749.787557][   T13] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  749.907283][ T6040] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  749.919367][ T6040] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  749.941070][ T6040] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  751.978650][ T8907] bridge0: port 2(bridge_slave_1) entered disabled state
[  751.988141][ T8907] bridge0: port 1(bridge_slave_0) entered disabled state
[  752.867879][ T8907] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  752.966627][ T8907] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  754.554209][   T53] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  754.591260][   T53] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  755.387551][ T8958] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR
[  756.577664][   T53] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  756.675471][   T53] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  756.957352][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  756.974234][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  757.060718][   T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  757.068797][   T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  757.267654][ T8974] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  757.398181][ T1101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  757.470043][ T1101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  758.442157][ T8992] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  760.036550][ T9022] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  760.564435][ T9034] loop6: detected capacity change from 0 to 256
[  760.807807][   T29] audit: type=1804 audit(1771460322.800:14): pid=9034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.663" name="/newroot/syzcgroup/unified/syz6/file0/bus" dev="loop6" ino=1048642 res=1 errno=0
[  760.958774][   T29] audit: type=1800 audit(1771460322.800:15): pid=9034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.663" name="bus" dev="loop6" ino=1048642 res=0 errno=0
[  761.774771][ T9049] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  762.203865][ T9057] netlink: 12 bytes leftover after parsing attributes in process `syz.7.670'.
[  762.265027][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  762.290437][ T9060] netlink: 104 bytes leftover after parsing attributes in process `syz.7.670'.
[  762.323912][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  762.547964][ T6038] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  762.604463][ T6038] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  763.665377][ T9078] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  766.367686][ T9108] netlink: 4 bytes leftover after parsing attributes in process `syz.5.684'.
[  766.410855][ T9108] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  766.672574][ T9114] block nbd7: not configured, cannot reconfigure
[  766.736061][ T9108] batman_adv: batadv0: Removing interface: batadv_slave_1
[  768.967544][ T9150] netlink: 32 bytes leftover after parsing attributes in process `syz.6.694'.
[  769.241365][ T9157] netlink: 8 bytes leftover after parsing attributes in process `syz.9.697'.
[  769.278568][ T9156] netlink: 24 bytes leftover after parsing attributes in process `syz.7.695'.
[  769.326628][ T9157] team_slave_1: entered promiscuous mode
[  769.351608][ T9157] team_slave_1: left promiscuous mode
[  769.519592][ T9161] loop5: detected capacity change from 0 to 256
[  769.792094][   T29] audit: type=1804 audit(1771460331.790:16): pid=9161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.696" name="/newroot/syzcgroup/unified/syz5/file0/bus" dev="loop5" ino=1048651 res=1 errno=0
[  769.933448][   T29] audit: type=1800 audit(1771460331.790:17): pid=9161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.696" name="bus" dev="loop5" ino=1048651 res=0 errno=0
[  770.401354][ T9172] netlink: 'syz.9.699': attribute type 39 has an invalid length.
[  773.469720][ T9217] netlink: 8 bytes leftover after parsing attributes in process `syz.5.709'.
[  774.251560][ T9229] netlink: 4 bytes leftover after parsing attributes in process `syz.5.713'.
[  774.299276][ T9229] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  774.422233][ T9231] netlink: 12 bytes leftover after parsing attributes in process `syz.6.714'.
[  774.557055][ T9236] netlink: 48 bytes leftover after parsing attributes in process `syz.7.716'.
[  774.572141][ T9229] batman_adv: batadv0: Removing interface: batadv_slave_0
[  774.960616][ T9231] 8021q: adding VLAN 0 to HW filter on device batadv1
[  775.113498][ T9231] team0: Port device batadv1 added
[  775.513207][ T9254] syz.8.719 uses obsolete (PF_INET,SOCK_PACKET)
[  775.542766][ T9240] syzkaller0: entered promiscuous mode
[  775.548643][ T9240] syzkaller0: entered allmulticast mode
[  775.940891][ T9264] netlink: 8 bytes leftover after parsing attributes in process `syz.6.721'.
[  776.641583][ T9272] netlink: 8 bytes leftover after parsing attributes in process `syz.5.723'.
[  778.461634][ T9303] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  778.527714][ T9303] Cannot find add_set index 0 as target
[  779.296031][ T9312] netlink: 8 bytes leftover after parsing attributes in process `syz.8.736'.
[  781.203265][ T9353] netlink: 'syz.9.747': attribute type 1 has an invalid length.
[  781.245445][ T9353] netlink: 'syz.9.747': attribute type 2 has an invalid length.
[  781.256760][ T9353] netlink: 8 bytes leftover after parsing attributes in process `syz.9.747'.
[  781.292770][ T9353] netlink: 'syz.9.747': attribute type 1 has an invalid length.
[  781.358106][ T9353] netlink: 'syz.9.747': attribute type 2 has an invalid length.
[  781.401055][ T9353] netlink: 8 bytes leftover after parsing attributes in process `syz.9.747'.
[  781.727963][ T8909] IPVS: starting estimator thread 0...
[  781.780110][ T5826] usb 8-1: new full-speed USB device number 2 using dummy_hcd
[  781.820152][ T8292] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  781.870311][ T9365] IPVS: using max 240 ests per chain, 12000 per kthread
[  781.930089][ T5826] usb 8-1: device descriptor read/64, error -71
[  782.010371][ T8292] usb 6-1: too many configurations: 9, using maximum allowed: 8
[  782.061206][ T8292] usb 6-1: config index 0 descriptor too short (expected 57115, got 27)
[  782.105627][ T8292] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  782.133338][ T8292] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  782.164310][ T8292] usb 6-1: config 0 interface 0 has no altsetting 0
[  782.190206][ T5826] usb 8-1: new full-speed USB device number 3 using dummy_hcd
[  782.194494][ T8292] usb 6-1: config index 1 descriptor too short (expected 57115, got 27)
[  782.250400][ T8292] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  782.280791][ T8292] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  782.294283][ T9372] loop9: detected capacity change from 0 to 256
[  782.310202][ T8292] usb 6-1: config 0 interface 0 has no altsetting 0
[  782.338726][ T8292] usb 6-1: config index 2 descriptor too short (expected 57115, got 27)
[  782.350385][ T5826] usb 8-1: device descriptor read/64, error -71
[  782.380237][ T8292] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  782.430292][ T8292] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  782.506088][ T8292] usb 6-1: config 0 interface 0 has no altsetting 0
[  782.524934][ T5826] usb usb8-port1: attempt power cycle
[  782.541288][ T8292] usb 6-1: config index 3 descriptor too short (expected 57115, got 27)
[  782.581500][ T8292] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  782.615695][ T8292] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  782.661302][ T8292] usb 6-1: config 0 interface 0 has no altsetting 0
[  782.689547][ T8292] usb 6-1: config index 4 descriptor too short (expected 57115, got 27)
[  782.740008][ T8292] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  782.749195][ T8292] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  782.809470][ T8292] usb 6-1: config 0 interface 0 has no altsetting 0
[  782.836029][ T8292] usb 6-1: config index 5 descriptor too short (expected 57115, got 27)
[  782.879245][ T8292] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  782.912340][ T5826] usb 8-1: new full-speed USB device number 4 using dummy_hcd
[  782.926067][ T8292] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  782.984149][ T8292] usb 6-1: config 0 interface 0 has no altsetting 0
[  783.007224][ T8292] usb 6-1: config index 6 descriptor too short (expected 57115, got 27)
[  783.017413][ T5826] usb 8-1: device descriptor read/8, error -71
[  783.043740][ T8292] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  783.067775][ T8292] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  783.110149][ T8292] usb 6-1: config 0 interface 0 has no altsetting 0
[  783.125423][ T8292] usb 6-1: config index 7 descriptor too short (expected 57115, got 27)
[  783.159435][ T8292] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  783.198201][ T8292] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  783.230400][ T8292] usb 6-1: config 0 interface 0 has no altsetting 0
[  783.268849][ T8292] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  783.280376][ T5826] usb 8-1: new full-speed USB device number 5 using dummy_hcd
[  783.297717][ T8292] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  783.317438][ T8292] usb 6-1: Product: syz
[  783.333018][ T5826] usb 8-1: device descriptor read/8, error -71
[  783.360191][ T8292] usb 6-1: Manufacturer: syz
[  783.375749][ T8292] usb 6-1: SerialNumber: syz
[  783.397710][ T8292] usb 6-1: config 0 descriptor??
[  783.452057][ T5826] usb usb8-port1: unable to enumerate USB device
[  783.488360][ T8292] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0
[  783.717592][ T8292] usb 6-1: USB disconnect, device number 2
[  783.738914][ T8292] yurex 6-1:0.0: USB YUREX #0 now disconnected
[  785.994968][ T9417] netlink: 8 bytes leftover after parsing attributes in process `syz.6.763'.
[  786.227145][ T9419] syzkaller0: entered promiscuous mode
[  786.264187][ T9419] syzkaller0: entered allmulticast mode
[  788.028913][ T9454] fuse: Bad value for 'fd'
[  788.089241][ T8286] Bluetooth: Frame is too long (len 105, expected len 4)
[  789.674456][ T9478] syzkaller0: entered promiscuous mode
[  789.711976][ T9478] syzkaller0: entered allmulticast mode
[  790.943183][ T9491] IPVS: lblc: FWM 3 0x00000003 - no destination available
[  790.956804][ T5826] IPVS: starting estimator thread 0...
[  791.100333][ T9497] IPVS: using max 240 ests per chain, 12000 per kthread
[  791.907496][ T9505] fuse: Bad value for 'fd'
[  794.725385][ T9547] fuse: Bad value for 'fd'
[  796.141149][ T9571] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  796.200428][ T9571] block device autoloading is deprecated and will be removed.
[  796.510459][ T8286] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260
[  798.836839][ T9616] 9pnet_virtio: no channels available for device syz
[  799.912095][ T9639] netlink: 8 bytes leftover after parsing attributes in process `syz.8.831'.
[  800.433034][ T9649] tunl0: Caught tx_queue_len zero misconfig
[  800.527513][   T24] IPVS: starting estimator thread 0...
[  800.657727][ T9651] IPVS: using max 240 ests per chain, 12000 per kthread
[  802.887636][ T9685] syzkaller0: entered promiscuous mode
[  802.923230][ T9685] syzkaller0: entered allmulticast mode
[  804.924264][ T9725] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  805.172335][ T9729] xfrm1: entered allmulticast mode
[  805.743728][ T9739] syzkaller0: entered promiscuous mode
[  805.749387][ T9739] syzkaller0: entered allmulticast mode
[  807.864416][   T24] hid-generic 0103:0004:0000.0002: unknown main item tag 0x0
[  807.930436][   T24] hid-generic 0103:0004:0000.0002: unknown main item tag 0x0
[  807.938094][   T24] hid-generic 0103:0004:0000.0002: unknown main item tag 0x0
[  807.973835][   T24] hid-generic 0103:0004:0000.0002: unknown main item tag 0x0
[  807.985564][   T24] hid-generic 0103:0004:0000.0002: unknown main item tag 0x0
[  808.036864][   T24] hid-generic 0103:0004:0000.0002: unknown main item tag 0x0
[  808.054341][   T24] hid-generic 0103:0004:0000.0002: unknown main item tag 0x0
[  808.078592][   T24] hid-generic 0103:0004:0000.0002: unknown main item tag 0x0
[  808.108473][   T24] hid-generic 0103:0004:0000.0002: unknown main item tag 0x0
[  808.150594][   T24] hid-generic 0103:0004:0000.0002: unknown main item tag 0x0
[  808.240613][   T24] hid-generic 0103:0004:0000.0002: hidraw0: <UNKNOWN> HID v0.02 Device [syz0] on syz1
[  808.404763][ T9789] loop7: detected capacity change from 0 to 256
[  808.429499][ T9787] syzkaller0: entered promiscuous mode
[  808.450893][ T9787] syzkaller0: entered allmulticast mode
[  809.019463][ T9793] fido_id[9793]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  809.904870][ T9807] netlink: 4 bytes leftover after parsing attributes in process `syz.9.883'.
[  810.119431][ T9806] netlink: 4 bytes leftover after parsing attributes in process `syz.5.882'.
[  810.205441][ T5779] Bluetooth: hci1: command 0x0406 tx timeout
[  810.262261][  T795] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  810.390244][ T5834] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  810.450275][  T795] usb 9-1: Using ep0 maxpacket: 8
[  810.492659][  T795] usb 9-1: config index 0 descriptor too short (expected 301, got 45)
[  810.523386][  T795] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  810.557412][  T795] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  810.560700][ T5834] usb 7-1: Using ep0 maxpacket: 32
[  810.602049][  T795] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  810.639176][ T5834] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  810.658914][  T795] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  810.686831][ T5834] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  810.710764][ T5834] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  810.722746][  T795] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  810.774680][ T5834] usb 7-1: Product: syz
[  810.788303][  T795] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  810.818505][ T5834] usb 7-1: Manufacturer: syz
[  810.829345][ T5834] usb 7-1: SerialNumber: syz
[  810.865279][ T5834] usb 7-1: config 0 descriptor??
[  810.896987][ T9815] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  810.996648][ T5834] hub 7-1:0.0: bad descriptor, ignoring hub
[  811.023567][ T5834] hub 7-1:0.0: probe with driver hub failed with error -5
[  811.114205][  T795] usb 9-1: usb_control_msg returned -32
[  811.125584][  T795] usbtmc 9-1:16.0: can't read capabilities
[  811.335368][ T5834] usb 7-1: USB disconnect, device number 2
[  811.730381][ T5834] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  811.933930][ T5834] usb 7-1: Using ep0 maxpacket: 32
[  811.946595][ T5834] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  811.993977][ T5834] usb 7-1: string descriptor 0 read error: -22
[  812.031247][ T5834] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  812.064038][ T5834] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  812.100804][ T5834] usb 7-1: config 0 descriptor??
[  812.117976][ T9815] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  812.172877][ T5834] hub 7-1:0.0: bad descriptor, ignoring hub
[  812.204120][ T5834] hub 7-1:0.0: probe with driver hub failed with error -5
[  812.481118][  T795] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  812.481463][ T5834] usb 7-1: USB disconnect, device number 3
[  812.682548][  T795] usb 6-1: Using ep0 maxpacket: 16
[  812.705751][  T795] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  812.758605][  T795] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  812.800530][  T795] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  812.808718][  T795] usb 6-1: Product: syz
[  812.851650][  T795] usb 6-1: Manufacturer: syz
[  812.856464][  T795] usb 6-1: SerialNumber: syz
[  812.904815][  T795] usb 6-1: config 0 descriptor??
[  812.947998][  T795] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  812.990221][  T795] em28xx 6-1:0.0: DVB interface 0 found: bulk
[  813.436125][ T8721] usb 9-1: USB disconnect, device number 2
[  813.596842][  T795] em28xx 6-1:0.0: unknown em28xx chip ID (0)
[  814.048109][ T9856] netlink: 4 bytes leftover after parsing attributes in process `syz.7.896'.
[  814.070828][  T795] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  814.079041][  T795] em28xx 6-1:0.0: board has no eeprom
[  814.203120][ T8286] Bluetooth: hci3: ISO packet for unknown connection handle 0
[  814.400323][  T795] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  814.429237][  T795] em28xx 6-1:0.0: dvb set to bulk mode.
[  814.470475][ T8721] em28xx 6-1:0.0: Binding DVB extension
[  814.564219][  T795] usb 6-1: USB disconnect, device number 3
[  814.633241][  T795] em28xx 6-1:0.0: Disconnecting em28xx
[  815.000257][ T8721] em28xx 6-1:0.0: Registering input extension
[  815.023982][  T795] em28xx 6-1:0.0: Closing input extension
[  815.113793][  T795] em28xx 6-1:0.0: Freeing device
[  815.528361][ T9884] syzkaller0: entered promiscuous mode
[  815.562821][ T9884] syzkaller0: entered allmulticast mode
[  817.513084][ T9926] tap0: tun_chr_ioctl cmd 1074025675
[  817.559780][ T9926] tap0: persist enabled
[  817.601203][ T9921] tap0: tun_chr_ioctl cmd 1074025675
[  817.630640][ T9921] tap0: persist enabled
[  817.935677][ T9934] syzkaller0: entered promiscuous mode
[  817.981623][ T9934] syzkaller0: entered allmulticast mode
[  818.378985][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  818.387836][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  819.706425][ T9968] netlink: 8 bytes leftover after parsing attributes in process `syz.7.929'.
[  819.950941][ T9975] vcan0: tx drop: invalid da for name 0x0000000000000002
[  820.441511][ T5779] Bluetooth: hci2: command 0x0406 tx timeout
[  821.180903][ T9997] netlink: 12 bytes leftover after parsing attributes in process `syz.7.940'.
[  821.621863][T10006] syzkaller0: entered promiscuous mode
[  821.630127][T10006] syzkaller0: entered allmulticast mode
[  821.661342][T10007] netlink: 24 bytes leftover after parsing attributes in process `syz.6.941'.
[  822.775363][T10023] netlink: 8 bytes leftover after parsing attributes in process `syz.8.945'.
[  822.877641][T10020] syzkaller0: delete flow: hash 2181338671 index 1
[  823.391181][T10023] bridge0: port 2(bridge_slave_1) entered disabled state
[  823.400669][T10023] bridge0: port 1(bridge_slave_0) entered disabled state
[  824.563864][T10048] 9pnet_virtio: no channels available for device syz
[  825.560559][ T5779] Bluetooth: hci3: command 0x0406 tx timeout
[  825.582658][T10059] netlink: 24 bytes leftover after parsing attributes in process `syz.8.957'.
[  826.081479][ T5826] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  826.337219][ T5826] usb 8-1: config 128 has an invalid interface number: 148 but max is 0
[  826.367944][ T5826] usb 8-1: config 128 has no interface number 0
[  826.411341][ T5826] usb 8-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0
[  826.440421][ T5826] usb 8-1: config 128 interface 148 altsetting 9 endpoint 0x5 has an invalid bInterval 129, changing to 11
[  826.510406][ T5826] usb 8-1: config 128 interface 148 has no altsetting 0
[  826.559041][ T5826] usb 8-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f
[  826.595712][ T5826] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  826.640400][ T5826] usb 8-1: Product: syz
[  826.644770][ T5826] usb 8-1: Manufacturer: syz
[  826.649526][ T5826] usb 8-1: SerialNumber: syz
[  827.051134][ T5826] usb 8-1: USB disconnect, device number 6
[  827.547115][ T5826] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  827.760389][ T5826] usb 8-1: Using ep0 maxpacket: 8
[  827.813840][ T5826] usb 8-1: config index 0 descriptor too short (expected 301, got 45)
[  827.861472][ T5826] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  827.904307][ T5826] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  827.947667][ T5826] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 9
[  827.989405][ T5826] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  828.012936][T10088] loop8: detected capacity change from 0 to 256
[  828.052095][ T5826] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  828.077502][ T5826] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  828.130947][T10089] fuse: Bad value for 'fd'
[  828.362012][ T5826] usb 8-1: usb_control_msg returned -32
[  828.398903][ T5826] usbtmc 8-1:16.0: can't read capabilities
[  828.407436][T10088] FAT-fs (loop8): Directory bread(block 64) failed
[  828.456131][T10088] FAT-fs (loop8): Directory bread(block 65) failed
[  828.492737][T10088] FAT-fs (loop8): Directory bread(block 66) failed
[  828.520912][T10088] FAT-fs (loop8): Directory bread(block 67) failed
[  828.560382][T10088] FAT-fs (loop8): Directory bread(block 68) failed
[  828.567109][T10088] FAT-fs (loop8): Directory bread(block 69) failed
[  828.633369][T10088] FAT-fs (loop8): Directory bread(block 70) failed
[  828.662674][T10088] FAT-fs (loop8): Directory bread(block 71) failed
[  828.669633][T10088] FAT-fs (loop8): Directory bread(block 72) failed
[  828.738015][T10096] usbtmc 8-1:16.0: INITIATE_CLEAR returned 6a
[  828.744557][T10088] FAT-fs (loop8): Directory bread(block 73) failed
[  828.961722][ T5826] usb 8-1: USB disconnect, device number 7
[  829.343222][T10103] overlayfs: failed to clone upperpath
[  830.271278][ T8286] Bluetooth: hci0: Malformed HCI Event
[  830.282385][T10113] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  831.433930][T10131] tipc: Started in network mode
[  831.439076][T10131] tipc: Node identity 5289e9eda6ad, cluster identity 4711
[  831.516179][T10131] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  831.536305][T10131] syzkaller0: entered promiscuous mode
[  831.579713][T10131] syzkaller0: entered allmulticast mode
[  831.600262][ T5826] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  831.706161][T10128] tipc: Resetting bearer <eth:syzkaller0>
[  831.744142][T10128] tipc: Disabling bearer <eth:syzkaller0>
[  831.827018][ T5826] usb 8-1: config 128 has an invalid interface number: 148 but max is 0
[  831.865719][ T5826] usb 8-1: config 128 has no interface number 0
[  831.904158][ T5826] usb 8-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0
[  831.945553][ T5826] usb 8-1: config 128 interface 148 altsetting 9 endpoint 0x5 has an invalid bInterval 129, changing to 11
[  831.969347][ T5826] usb 8-1: config 128 interface 148 has no altsetting 0
[  832.001880][ T5826] usb 8-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f
[  832.020874][ T5826] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  832.029813][ T5826] usb 8-1: Product: syz
[  832.036222][ T5826] usb 8-1: Manufacturer: syz
[  832.059471][ T5826] usb 8-1: SerialNumber: syz
[  832.451252][ T5826] usb 8-1: USB disconnect, device number 8
[  832.952441][T10150] syzkaller0: entered promiscuous mode
[  832.973088][T10150] syzkaller0: entered allmulticast mode
[  832.973601][ T5826] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  833.180349][ T5826] usb 8-1: Using ep0 maxpacket: 8
[  833.201367][ T5826] usb 8-1: config index 0 descriptor too short (expected 301, got 45)
[  833.247515][ T5826] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  833.290788][ T5826] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  833.328444][ T5826] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 9
[  833.362928][ T5826] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  833.405923][ T5826] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  833.438190][ T5826] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  833.731447][ T5826] usb 8-1: usb_control_msg returned -32
[  833.737313][ T5826] usbtmc 8-1:16.0: can't read capabilities
[  834.441291][ T8286] Bluetooth: hci0: Invalid connection link type handle 0x00c8
[  834.471367][T10169] usbtmc 8-1:16.0: usb_control_msg returned -32
[  834.487767][T10166] fuse: Bad value for 'group_id'
[  834.550335][T10166] fuse: Bad value for 'group_id'
[  834.668571][ T5826] usb 8-1: USB disconnect, device number 9
[  835.843690][T10187] syzkaller0: entered promiscuous mode
[  835.864734][T10187] syzkaller0: entered allmulticast mode
[  836.770207][ T5826] usb 8-1: new full-speed USB device number 10 using dummy_hcd
[  837.002666][ T5826] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  837.024155][ T5826] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  837.093089][ T5826] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  837.154337][ T5826] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  837.526791][ T5826] usb 8-1: usb_control_msg returned -32
[  837.557213][ T5826] usbtmc 8-1:16.0: can't read capabilities
[  838.119126][   T24] usb 8-1: USB disconnect, device number 10
[  839.387166][T10237] syzkaller0: entered promiscuous mode
[  839.447652][T10237] syzkaller0: entered allmulticast mode
[  839.870331][   T24] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  840.081245][   T24] usb 9-1: Using ep0 maxpacket: 8
[  840.113379][   T24] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  840.167354][   T24] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  840.243079][   T24] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  840.275819][   T24] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  840.348502][   T24] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  840.388126][T10255] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 0, id = 0
[  840.410441][   T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  840.693720][   T24] usb 9-1: GET_CAPABILITIES returned 2f
[  840.699579][   T24] usbtmc 9-1:16.0: can't read capabilities
[  840.904722][   T24] usb 9-1: USB disconnect, device number 3
[  840.925561][ T5779] Bluetooth: hci0: command 0x0406 tx timeout
[  842.629530][T10287] syzkaller0: entered promiscuous mode
[  842.654298][T10287] syzkaller0: entered allmulticast mode
[  842.660442][ T8956] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[  842.843523][ T8956] usb 8-1: Using ep0 maxpacket: 8
[  842.867454][ T8956] usb 8-1: config index 0 descriptor too short (expected 301, got 45)
[  842.902969][ T8956] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  842.956993][ T8956] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  843.044143][ T8956] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  843.086009][ T8956] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  843.132606][ T8956] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  843.166675][ T8956] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  843.436836][ T8956] usb 8-1: usb_control_msg returned -32
[  843.490295][ T8956] usbtmc 8-1:16.0: can't read capabilities
[  843.860963][T10307] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  844.801522][T10321] netlink: 84 bytes leftover after parsing attributes in process `syz.8.1041'.
[  845.502405][T10332] syzkaller0: entered promiscuous mode
[  845.533654][T10332] syzkaller0: entered allmulticast mode
[  845.569046][ T1998] usb 8-1: USB disconnect, device number 11
[  845.970853][T10344] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  847.633494][T10367] syzkaller0: entered promiscuous mode
[  847.681766][T10367] syzkaller0: entered allmulticast mode
[  848.200419][ T8956] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  848.420138][ T8956] usb 9-1: Using ep0 maxpacket: 8
[  848.478649][ T8956] usb 9-1: config index 0 descriptor too short (expected 301, got 45)
[  848.510250][ T8956] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  848.546423][ T8956] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  848.595341][ T8956] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  848.647823][ T8956] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  848.672324][T10385] syzkaller0: entered promiscuous mode
[  848.695667][ T8956] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  848.737937][T10385] syzkaller0: entered allmulticast mode
[  848.750112][ T8956] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  849.133741][ T8956] usb 9-1: usb_control_msg returned -32
[  849.143630][ T8956] usbtmc 9-1:16.0: can't read capabilities
[  850.478934][T10410] syzkaller0: entered promiscuous mode
[  850.519742][T10410] syzkaller0: entered allmulticast mode
[  850.841498][T10419] fuse: Bad value for 'fd'
[  851.203327][ T8956] usb 9-1: USB disconnect, device number 4
[  851.386737][T10427] syzkaller0: entered promiscuous mode
[  851.488590][T10427] syzkaller0: entered allmulticast mode
[  852.291411][T10444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  852.435473][T10443] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  852.796422][T10457] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1078'.
[  853.730681][ T5826] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  853.920479][ T5826] usb 10-1: Using ep0 maxpacket: 8
[  853.967322][ T5826] usb 10-1: config index 0 descriptor too short (expected 301, got 45)
[  853.994971][ T5826] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  854.079716][ T5826] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  854.134145][ T5826] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  854.309496][ T5826] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  854.360600][ T5826] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  854.380081][ T5826] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  854.431536][T10483] syzkaller0: entered promiscuous mode
[  854.437198][T10483] syzkaller0: entered allmulticast mode
[  854.733520][ T5826] usb 10-1: usb_control_msg returned -32
[  854.760188][ T5826] usbtmc 10-1:16.0: can't read capabilities
[  856.138056][T10498] syzkaller0: entered promiscuous mode
[  856.198967][T10498] syzkaller0: entered allmulticast mode
[  858.114963][T10536] syzkaller0: entered promiscuous mode
[  858.141197][T10536] syzkaller0: entered allmulticast mode
[  860.232522][T10491] usbtmc 10-1:16.0: usb_control_msg returned -110
[  860.459675][ T5826] usb 10-1: USB disconnect, device number 2
[  860.471608][T10570] loop7: detected capacity change from 0 to 256
[  860.992941][T10570] FAT-fs (loop7): Directory bread(block 64) failed
[  861.020827][T10570] FAT-fs (loop7): Directory bread(block 65) failed
[  861.057107][T10570] FAT-fs (loop7): Directory bread(block 66) failed
[  861.171470][T10570] FAT-fs (loop7): Directory bread(block 67) failed
[  861.178358][T10570] FAT-fs (loop7): Directory bread(block 68) failed
[  861.269004][T10570] FAT-fs (loop7): Directory bread(block 69) failed
[  861.320600][T10570] FAT-fs (loop7): Directory bread(block 70) failed
[  861.327335][T10570] FAT-fs (loop7): Directory bread(block 71) failed
[  861.420865][T10570] FAT-fs (loop7): Directory bread(block 72) failed
[  861.427614][T10570] FAT-fs (loop7): Directory bread(block 73) failed
[  861.796491][T10593] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1115'.
[  861.916879][ T6040] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  861.917552][T10593] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1115'.
[  861.953879][   T82] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  862.012954][   T82] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  862.050473][   T82] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  862.990214][ T5826] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  863.171765][ T8956] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  863.226077][ T5826] usb 9-1: config 128 has an invalid interface number: 148 but max is 0
[  863.260363][ T5826] usb 9-1: config 128 has no interface number 0
[  863.266833][ T5826] usb 9-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0
[  863.321162][ T5826] usb 9-1: config 128 interface 148 altsetting 9 endpoint 0x5 has an invalid bInterval 129, changing to 11
[  863.360342][ T5826] usb 9-1: config 128 interface 148 has no altsetting 0
[  863.385784][ T5826] usb 9-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f
[  863.400619][ T8956] usb 7-1: Using ep0 maxpacket: 8
[  863.430201][ T8956] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[  863.438594][ T8956] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  863.449327][ T5826] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  863.474531][ T5826] usb 9-1: Product: syz
[  863.478874][ T5826] usb 9-1: Manufacturer: syz
[  863.490148][ T8956] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  863.510134][ T5826] usb 9-1: SerialNumber: syz
[  863.546367][ T8956] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  863.588949][ T8956] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  863.628373][ T8956] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  863.674358][ T8956] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  863.920367][ T5826] usb 9-1: USB disconnect, device number 5
[  863.971556][ T8956] usb 7-1: usb_control_msg returned -32
[  864.022818][ T8956] usbtmc 7-1:16.0: can't read capabilities
[  864.412407][ T5826] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  864.643506][ T5826] usb 9-1: Using ep0 maxpacket: 8
[  864.678922][ T5826] usb 9-1: config index 0 descriptor too short (expected 301, got 45)
[  864.703989][ T5826] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  864.734068][ T5826] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  864.806001][ T5826] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 9
[  864.857393][ T5826] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  864.903382][ T5826] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  864.943760][ T5826] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  865.239688][ T5826] usb 9-1: usb_control_msg returned -32
[  865.268431][ T5826] usbtmc 9-1:16.0: can't read capabilities
[  866.591740][T10659] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1134'.
[  867.112482][ T1998] usb 9-1: USB disconnect, device number 6
[  868.876696][T10690] ieee802154 phy0 wpan0: encryption failed: -22
[  869.401189][T10631] usbtmc 7-1:16.0: usb_control_msg returned -110
[  869.551495][ T1998] usb 7-1: USB disconnect, device number 4
[  869.959276][T10701] syzkaller0: entered promiscuous mode
[  869.988169][T10701] syzkaller0: entered allmulticast mode
[  870.344176][ T8286] Bluetooth: hci3: unexpected event for opcode 0x2042
[  870.450422][ T5826] usb 10-1: new full-speed USB device number 3 using dummy_hcd
[  870.647273][ T5826] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  870.710295][ T5826] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  870.754956][ T5826] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  870.820058][ T5826] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  871.002928][T10726] syzkaller0: entered promiscuous mode
[  871.010912][T10726] syzkaller0: entered allmulticast mode
[  871.143283][ T5826] usb 10-1: usb_control_msg returned -32
[  871.149237][ T5826] usbtmc 10-1:16.0: can't read capabilities
[  871.201065][T10732] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1157'.
[  871.731642][ T5826] usb 10-1: USB disconnect, device number 3
[  871.836776][T10743] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1160'.
[  871.915191][T10743] 8021q: adding VLAN 0 to HW filter on device batadv1
[  871.955857][T10743] team0: Port device batadv1 added
[  872.287300][T10735] syzkaller1: entered promiscuous mode
[  872.354259][T10735] syzkaller1: entered allmulticast mode
[  873.000411][T10761] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1164'.
[  873.596866][T10766] syzkaller0: entered promiscuous mode
[  873.603249][T10766] syzkaller0: entered allmulticast mode
[  874.360723][ T8286] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  874.375284][ T8286] Bluetooth: hci3: Injecting HCI hardware error event
[  874.383464][ T8286] Bluetooth: hci3: hardware error 0x00
[  875.067008][T10797] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1173'.
[  875.354454][T10797] 8021q: adding VLAN 0 to HW filter on device batadv2
[  875.439502][T10797] team0: Port device batadv2 added
[  875.590138][ T5826] usb 8-1: new full-speed USB device number 12 using dummy_hcd
[  875.819208][ T5826] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  875.851138][ T5826] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  875.882272][ T5826] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  875.899108][ T5826] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  876.169275][ T5826] usb 8-1: usb_control_msg returned -32
[  876.211305][ T5826] usbtmc 8-1:16.0: can't read capabilities
[  876.442904][ T8286] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  876.642232][T10824] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1181'.
[  876.706581][T10823] syzkaller0: entered promiscuous mode
[  876.738973][T10823] syzkaller0: entered allmulticast mode
[  876.771767][   T24] usb 8-1: USB disconnect, device number 12
[  876.792765][T10826] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  876.955619][T10821] tipc: Resetting bearer <eth:syzkaller0>
[  877.074754][T10821] tipc: Disabling bearer <eth:syzkaller0>
[  878.081239][T10840] syzkaller0: entered promiscuous mode
[  878.088813][T10840] syzkaller0: entered allmulticast mode
[  879.351547][T10862] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1194'.
[  879.826345][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  879.840263][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  879.918883][T10869] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  880.111450][   T24] usb 7-1: new full-speed USB device number 5 using dummy_hcd
[  880.320738][   T24] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  880.909040][T10882] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1200'.
[  880.954704][   T24] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  880.969459][   T24] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  881.933710][   T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  882.929702][   T24] usb 7-1: usb_control_msg returned -32
[  882.935658][   T24] usbtmc 7-1:16.0: can't read capabilities
[  883.997911][ T5826] usb 7-1: USB disconnect, device number 5
[  884.727009][T10924] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  885.233966][T10933] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1213'.
[  885.405956][T10933] 8021q: adding VLAN 0 to HW filter on device batadv1
[  885.542124][T10933] team0: Port device batadv1 added
[  887.345414][ T5826] usb 7-1: new full-speed USB device number 6 using dummy_hcd
[  887.560618][ T5826] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  887.604072][ T5826] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  887.662307][ T5826] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  887.729704][ T5826] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  888.032782][ T5826] usb 7-1: usb_control_msg returned -32
[  888.047214][ T5826] usbtmc 7-1:16.0: can't read capabilities
[  890.577397][   T24] usb 7-1: USB disconnect, device number 6
[  891.241550][T11000] syzkaller0: entered promiscuous mode
[  891.276668][T11000] syzkaller0: entered allmulticast mode
[  894.099964][ T5779] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  894.175199][ T5779] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  894.184750][ T5779] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  894.198275][ T5779] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  894.212974][ T5779] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  894.258305][T11047] syzkaller0: entered promiscuous mode
[  894.267169][T11047] syzkaller0: entered allmulticast mode
[  896.340046][ T5826] usb 8-1: new high-speed USB device number 13 using dummy_hcd
[  896.360646][ T5779] Bluetooth: hci4: command tx timeout
[  896.478466][T11041] chnl_net:caif_netlink_parms(): no params data found
[  896.535463][ T5826] usb 8-1: config 128 has an invalid interface number: 148 but max is 0
[  896.560152][ T5826] usb 8-1: config 128 has no interface number 0
[  896.580663][ T5826] usb 8-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0
[  896.634210][ T5826] usb 8-1: config 128 interface 148 altsetting 9 endpoint 0x5 has an invalid bInterval 129, changing to 11
[  896.670048][ T5826] usb 8-1: config 128 interface 148 has no altsetting 0
[  896.696375][ T5826] usb 8-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f
[  896.723953][ T5826] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  896.738027][ T5826] usb 8-1: Product: syz
[  896.743452][ T5826] usb 8-1: Manufacturer: syz
[  896.748216][ T5826] usb 8-1: SerialNumber: syz
[  897.121917][T11084] syzkaller0: entered promiscuous mode
[  897.127596][T11084] syzkaller0: entered allmulticast mode
[  897.162513][ T5826] usb 8-1: USB disconnect, device number 13
[  897.600737][ T5826] usb 8-1: new high-speed USB device number 14 using dummy_hcd
[  897.798572][ T5826] usb 8-1: Using ep0 maxpacket: 8
[  897.834162][ T5826] usb 8-1: config index 0 descriptor too short (expected 301, got 45)
[  897.862714][ T5826] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  897.909488][ T5826] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  897.960415][ T5826] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 9
[  898.012805][ T5826] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  898.098001][ T5826] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  898.158736][ T5826] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  898.310780][T11106] syzkaller0: entered promiscuous mode
[  898.354955][T11106] syzkaller0: entered allmulticast mode
[  898.443797][ T5779] Bluetooth: hci4: command tx timeout
[  898.444752][ T5826] usb 8-1: usb_control_msg returned -32
[  898.520324][ T5826] usbtmc 8-1:16.0: can't read capabilities
[  898.632895][T11041] bridge0: port 1(bridge_slave_0) entered blocking state
[  898.665426][T11041] bridge0: port 1(bridge_slave_0) entered disabled state
[  898.697175][T11041] bridge_slave_0: entered allmulticast mode
[  898.745436][T11041] bridge_slave_0: entered promiscuous mode
[  898.809969][T11041] bridge0: port 2(bridge_slave_1) entered blocking state
[  898.841515][T11041] bridge0: port 2(bridge_slave_1) entered disabled state
[  898.880626][T11041] bridge_slave_1: entered allmulticast mode
[  898.926194][T11041] bridge_slave_1: entered promiscuous mode
[  899.438849][T11041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  899.599301][T11041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  900.087390][T11041] team0: Port device team_slave_0 added
[  900.154688][T11041] team0: Port device team_slave_1 added
[  900.479443][T11041] batman_adv: batadv0: Adding interface: batadv_slave_0
[  900.499658][T11041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  900.530817][ T5779] Bluetooth: hci4: command tx timeout
[  900.570212][T11041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  900.595183][T11041] batman_adv: batadv0: Adding interface: batadv_slave_1
[  900.634312][T11041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  900.748381][T11041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  901.374004][T11041] hsr_slave_0: entered promiscuous mode
[  901.417354][T11041] hsr_slave_1: entered promiscuous mode
[  901.480496][T11041] debugfs: 'hsr0' already exists in 'hsr'
[  901.488233][T11041] Cannot create hsr debugfs directory
[  902.609998][ T5779] Bluetooth: hci4: command tx timeout
[  903.336677][T11154] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1282'.
[  903.939477][T11112] usbtmc 8-1:16.0: usb_control_msg returned -110
[  904.363064][ T1998] usb 8-1: USB disconnect, device number 14
[  904.481887][ T5779] Bluetooth: hci1: unexpected event for opcode 0x2042
[  905.020090][ T5406] usb 8-1: new high-speed USB device number 15 using dummy_hcd
[  905.266088][ T5406] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  905.298078][ T5406] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  905.330975][ T5406] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  905.405211][ T5406] usb 8-1: config 0 descriptor??
[  905.487326][ T5406] pwc: Askey VC010 type 2 USB webcam detected.
[  905.898958][ T5406] pwc: recv_control_msg error -32 req 02 val 2b00
[  905.938086][ T5406] pwc: recv_control_msg error -32 req 02 val 2700
[  905.973406][ T5406] pwc: recv_control_msg error -32 req 02 val 2c00
[  905.997381][ T5406] pwc: recv_control_msg error -32 req 04 val 1000
[  906.042140][ T5406] pwc: recv_control_msg error -32 req 04 val 1300
[  906.074394][ T5406] pwc: recv_control_msg error -32 req 04 val 1400
[  906.121745][ T5406] pwc: recv_control_msg error -32 req 02 val 2000
[  906.140548][ T5406] pwc: recv_control_msg error -32 req 02 val 2100
[  906.168694][ T5406] pwc: recv_control_msg error -32 req 04 val 1500
[  906.219396][ T5406] pwc: recv_control_msg error -32 req 02 val 2500
[  906.255942][T11041] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  906.265467][ T5406] pwc: recv_control_msg error -32 req 02 val 2400
[  906.322191][ T5406] pwc: recv_control_msg error -32 req 02 val 2600
[  906.365626][ T5406] pwc: recv_control_msg error -32 req 02 val 2900
[  906.408203][ T5406] pwc: recv_control_msg error -32 req 02 val 2800
[  906.438355][ T5406] pwc: recv_control_msg error -32 req 04 val 1100
[  906.516134][ T5406] pwc: Registered as video103.
[  906.595457][ T5406] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input10
[  906.867035][T11201] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1294'.
[  906.894621][ T5406] usb 8-1: USB disconnect, device number 15
[  907.127211][T11041] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  907.479133][T11041] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  907.699102][T11041] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  908.050951][ T5779] Bluetooth: hci2: unexpected event for opcode 0x2042
[  908.160146][   T24] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  908.195774][T11224] syzkaller0: entered promiscuous mode
[  908.217955][T11224] syzkaller0: entered allmulticast mode
[  908.355758][   T24] usb 7-1: config 128 has an invalid interface number: 148 but max is 0
[  908.388319][   T24] usb 7-1: config 128 has no interface number 0
[  908.401667][   T24] usb 7-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0
[  908.423573][   T24] usb 7-1: config 128 interface 148 altsetting 9 endpoint 0x5 has an invalid bInterval 129, changing to 11
[  908.450697][   T24] usb 7-1: config 128 interface 148 has no altsetting 0
[  908.484388][   T24] usb 7-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f
[  908.515413][   T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  908.531236][ T5779] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  908.541841][ T5779] Bluetooth: hci1: Injecting HCI hardware error event
[  908.549538][ T5779] Bluetooth: hci1: hardware error 0x00
[  908.570227][   T24] usb 7-1: Product: syz
[  908.577784][   T24] usb 7-1: Manufacturer: syz
[  908.594592][   T24] usb 7-1: SerialNumber: syz
[  909.002616][   T24] usb 7-1: USB disconnect, device number 7
[  909.323188][T11041] 8021q: adding VLAN 0 to HW filter on device bond0
[  909.460405][   T24] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  909.470228][ T5826] usb 10-1: new full-speed USB device number 4 using dummy_hcd
[  909.535930][T11041] 8021q: adding VLAN 0 to HW filter on device team0
[  909.618399][ T6038] bridge0: port 1(bridge_slave_0) entered blocking state
[  909.625949][ T6038] bridge0: port 1(bridge_slave_0) entered forwarding state
[  909.649751][   T24] usb 7-1: Using ep0 maxpacket: 8
[  909.686067][   T24] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[  909.726818][ T5826] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  909.742424][   T24] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  909.770342][ T5826] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  909.813843][   T24] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  909.833167][ T5826] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  909.852785][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[  909.860414][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[  909.864276][ T5826] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  909.912117][   T24] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 9
[  909.960582][   T24] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  910.068755][   T24] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  910.110180][   T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  910.257011][ T5826] usb 10-1: GET_CAPABILITIES returned a9
[  910.284424][ T5826] usbtmc 10-1:16.0: can't read capabilities
[  910.761075][ T5779] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  910.896117][T11244] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1305'.
[  912.116353][   T24] usb 7-1: can't set config #16, error -71
[  912.126207][   T24] usb 7-1: USB disconnect, device number 8
[  912.130839][ T5779] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  912.144092][ T5779] Bluetooth: hci2: Injecting HCI hardware error event
[  912.154981][T11229] Bluetooth: hci2: hardware error 0x00
[  913.497282][   T82] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  913.552674][   T82] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  913.819461][ T5779] Bluetooth: hci2: unexpected event for opcode 0x2042
[  913.842171][   T82] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  913.933811][   T82] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  914.345491][   T82] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  914.441009][T11229] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  914.450580][   T82] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  914.774857][   T82] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  914.831440][   T82] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  914.970593][T11280] tipc: Started in network mode
[  914.987575][T11280] tipc: Node identity 9e62d057bfad, cluster identity 4711
[  915.011256][T11280] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  915.113164][T11265] tipc: Disabling bearer <eth:syzkaller0>
[  915.490108][T11237] usbtmc 10-1:16.0: usbtmc_ioctl_request failed -110
[  915.797169][   T82] bridge_slave_1: left allmulticast mode
[  915.829524][   T82] bridge_slave_1: left promiscuous mode
[  915.839697][ T5826] usb 10-1: USB disconnect, device number 4
[  915.879156][   T82] bridge0: port 2(bridge_slave_1) entered disabled state
[  916.111621][   T82] bridge_slave_0: left allmulticast mode
[  916.117487][   T82] bridge_slave_0: left promiscuous mode
[  916.181153][   T82] bridge0: port 1(bridge_slave_0) entered disabled state
[  916.329086][T11305] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1317'.
[  917.274454][   T82] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  917.332848][   T82] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  917.368977][   T82] bond0 (unregistering): Released all slaves
[  917.681792][ T5406] usb 8-1: new high-speed USB device number 16 using dummy_hcd
[  917.874805][ T5406] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  917.920702][ T5406] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  917.947047][ T5406] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  917.966539][T11041] 8021q: adding VLAN 0 to HW filter on device batadv0
[  917.986911][ T5406] usb 8-1: config 0 descriptor??
[  918.028736][ T5406] pwc: Askey VC010 type 2 USB webcam detected.
[  918.177238][T11329] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  918.336940][   T82] hsr_slave_0: left promiscuous mode
[  918.357651][   T82] hsr_slave_1: left promiscuous mode
[  918.429458][   T82] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  918.454416][   T82] batman_adv: batadv0: Removing interface: batadv_slave_0
[  918.471562][ T5406] pwc: recv_control_msg error -32 req 02 val 2b00
[  918.510667][ T5406] pwc: recv_control_msg error -32 req 02 val 2700
[  918.521734][   T82] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  918.529544][ T5406] pwc: recv_control_msg error -32 req 02 val 2c00
[  918.561993][ T5406] pwc: recv_control_msg error -32 req 04 val 1000
[  918.572213][   T82] batman_adv: batadv0: Removing interface: batadv_slave_1
[  918.594128][ T5406] pwc: recv_control_msg error -32 req 04 val 1300
[  918.620657][ T5406] pwc: recv_control_msg error -32 req 04 val 1400
[  918.633696][   T82] veth1_macvtap: left promiscuous mode
[  918.639396][   T82] veth0_macvtap: left promiscuous mode
[  918.642029][ T5406] pwc: recv_control_msg error -32 req 02 val 2000
[  918.661451][ T5406] pwc: recv_control_msg error -32 req 02 val 2100
[  918.671218][   T82] veth1_vlan: left promiscuous mode
[  918.676715][   T82] veth0_vlan: left promiscuous mode
[  918.684151][ T5406] pwc: recv_control_msg error -32 req 04 val 1500
[  918.694457][ T5406] pwc: recv_control_msg error -32 req 02 val 2500
[  918.704851][ T5406] pwc: recv_control_msg error -32 req 02 val 2400
[  918.719749][ T5406] pwc: recv_control_msg error -32 req 02 val 2600
[  918.740006][ T5406] pwc: recv_control_msg error -32 req 02 val 2900
[  918.772755][ T5406] pwc: recv_control_msg error -32 req 02 val 2800
[  918.792399][ T5406] pwc: recv_control_msg error -32 req 04 val 1100
[  918.829479][ T5406] pwc: Registered as video103.
[  918.869452][ T5406] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input11
[  919.034110][ T5406] usb 8-1: USB disconnect, device number 16
[  920.298496][   T82] team0 (unregistering): Port device team_slave_1 removed
[  920.352346][   T82] team0 (unregistering): Port device team_slave_0 removed
[  921.074375][T11041] veth0_vlan: entered promiscuous mode
[  921.256710][T11041] veth1_vlan: entered promiscuous mode
[  921.279564][   T82] IPVS: stop unused estimator thread 0...
[  922.115620][T11372] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1335'.
[  922.276305][T11371] overlayfs: failed to resolve './file0': -2
[  922.753322][T11373] tipc: Started in network mode
[  922.758454][T11373] tipc: Node identity 028ecd4a9aaa, cluster identity 4711
[  922.815420][T11373] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  923.053031][T11370] tipc: Disabling bearer <eth:syzkaller0>
[  923.183306][T11041] veth0_macvtap: entered promiscuous mode
[  923.433990][T11041] veth1_macvtap: entered promiscuous mode
[  923.950625][ T5406] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  924.003490][T11041] batman_adv: batadv0: Interface activated: batadv_slave_0
[  924.058142][T11041] batman_adv: batadv0: Interface activated: batadv_slave_1
[  924.207098][ T5406] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  924.228445][ T5406] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  924.245313][   T53] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  924.264514][ T5406] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  924.278653][ T5406] usb 10-1: config 0 descriptor??
[  924.283184][   T53] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  924.356283][ T5406] pwc: Askey VC010 type 2 USB webcam detected.
[  924.388495][   T53] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  924.421329][   T53] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  924.763231][ T5406] pwc: recv_control_msg error -32 req 02 val 2b00
[  924.801449][ T5406] pwc: recv_control_msg error -32 req 02 val 2700
[  924.816187][ T5406] pwc: recv_control_msg error -32 req 02 val 2c00
[  925.148252][ T5406] pwc: recv_control_msg error -32 req 04 val 1300
[  925.183262][ T5406] pwc: recv_control_msg error -32 req 04 val 1400
[  925.212671][ T5406] pwc: recv_control_msg error -32 req 02 val 2000
[  925.242130][ T5406] pwc: recv_control_msg error -32 req 02 val 2100
[  925.260438][ T5406] pwc: recv_control_msg error -32 req 04 val 1500
[  925.303782][ T5406] pwc: recv_control_msg error -32 req 02 val 2500
[  925.361670][ T5406] pwc: recv_control_msg error -32 req 02 val 2400
[  925.405441][ T5406] pwc: recv_control_msg error -32 req 02 val 2600
[  925.480859][ T5406] pwc: recv_control_msg error -32 req 02 val 2900
[  925.502912][ T5406] pwc: recv_control_msg error -32 req 02 val 2800
[  925.540977][ T5406] pwc: recv_control_msg error -32 req 04 val 1100
[  925.574109][ T5406] pwc: Registered as video103.
[  925.624469][ T5406] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input12
[  925.776576][ T5406] usb 10-1: USB disconnect, device number 5
[  926.971953][T11417] syzkaller0: entered promiscuous mode
[  927.012570][T11417] syzkaller0: entered allmulticast mode
[  927.076597][T11422] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  927.145364][T11415] tipc: Resetting bearer <eth:syzkaller0>
[  927.223319][T11415] tipc: Disabling bearer <eth:syzkaller0>
[  927.907190][T11436] fuse: Bad value for 'fd'
[  928.565139][ T5406] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  928.778767][ T5406] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  928.823104][ T5406] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  928.871003][ T5406] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  928.948143][ T5406] usb 7-1: config 0 descriptor??
[  929.081861][ T5406] pwc: Askey VC010 type 2 USB webcam detected.
[  929.282232][ T8721] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[  929.444685][ T5406] pwc: recv_control_msg error -32 req 02 val 2b00
[  929.469574][ T5406] pwc: recv_control_msg error -32 req 02 val 2700
[  929.495706][ T8721] usb 10-1: config 128 has an invalid interface number: 148 but max is 0
[  929.526762][ T5406] pwc: recv_control_msg error -32 req 02 val 2c00
[  929.541691][ T8721] usb 10-1: config 128 has no interface number 0
[  929.548237][ T8721] usb 10-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0
[  929.589248][ T8721] usb 10-1: config 128 interface 148 altsetting 9 endpoint 0x5 has an invalid bInterval 129, changing to 11
[  929.608784][ T8721] usb 10-1: config 128 interface 148 has no altsetting 0
[  929.674092][ T8721] usb 10-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f
[  929.705371][ T8721] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  929.738957][ T8721] usb 10-1: Product: syz
[  929.751181][ T8721] usb 10-1: Manufacturer: syz
[  929.770413][ T8721] usb 10-1: SerialNumber: syz
[  929.792215][ T5406] pwc: recv_control_msg error -32 req 04 val 1300
[  929.812546][T11467] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  929.825067][ T5406] pwc: recv_control_msg error -32 req 04 val 1400
[  929.864100][ T5406] pwc: recv_control_msg error -32 req 02 val 2000
[  929.913383][ T5406] pwc: recv_control_msg error -32 req 02 val 2100
[  929.962653][ T5406] pwc: recv_control_msg error -32 req 04 val 1500
[  929.992189][ T5406] pwc: recv_control_msg error -32 req 02 val 2500
[  930.021017][ T5406] pwc: recv_control_msg error -32 req 02 val 2400
[  930.082197][ T5406] pwc: recv_control_msg error -32 req 02 val 2600
[  930.115096][ T5406] pwc: recv_control_msg error -32 req 02 val 2900
[  930.158763][ T5406] pwc: recv_control_msg error -32 req 02 val 2800
[  930.170036][ T8721] usb 10-1: USB disconnect, device number 6
[  930.209152][ T5406] pwc: recv_control_msg error -32 req 04 val 1100
[  930.250733][ T5406] pwc: Registered as video103.
[  930.258767][ T5406] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input13
[  930.459348][ T5406] usb 7-1: USB disconnect, device number 9
[  930.620339][ T8721] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[  930.820001][ T8721] usb 10-1: Using ep0 maxpacket: 8
[  930.880036][ T8721] usb 10-1: config index 0 descriptor too short (expected 301, got 45)
[  930.888541][ T8721] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  930.959970][ T8721] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  931.021163][ T8721] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 9
[  931.077225][ T8721] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  931.140136][ T8721] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  931.180140][ T8721] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  931.311120][   T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  931.375471][   T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  931.631760][ T6288] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  931.675626][ T6288] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  932.045732][T11498] usbtmc 10-1:16.0: usb_control_msg returned -32
[  932.056435][T11496] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1370'.
[  932.104546][ T8721] usb 10-1: USB disconnect, device number 7
[  932.192914][T11497] syzkaller1: entered promiscuous mode
[  932.233210][T11497] syzkaller1: entered allmulticast mode
[  933.082913][ T5779] Bluetooth: hci5: command 0x0406 tx timeout
[  933.326035][T11521] netlink: 'syz.5.1376': attribute type 3 has an invalid length.
[  935.140567][ T5826] usb 8-1: new high-speed USB device number 17 using dummy_hcd
[  935.355195][ T5826] usb 8-1: config 128 has an invalid interface number: 148 but max is 0
[  935.365454][ T5826] usb 8-1: config 128 has no interface number 0
[  935.393073][ T5826] usb 8-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0
[  935.425913][ T5826] usb 8-1: config 128 interface 148 altsetting 9 endpoint 0x5 has an invalid bInterval 129, changing to 11
[  935.457610][ T5826] usb 8-1: config 128 interface 148 has no altsetting 0
[  935.506889][ T5826] usb 8-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f
[  935.520116][ T5826] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  935.533878][ T5826] usb 8-1: Product: syz
[  935.538213][ T5826] usb 8-1: Manufacturer: syz
[  935.562358][ T5826] usb 8-1: SerialNumber: syz
[  935.910818][ T5826] usb 8-1: USB disconnect, device number 17
[  935.988975][T11563] syzkaller0: entered promiscuous mode
[  936.011127][T11563] syzkaller0: entered allmulticast mode
[  936.167256][T11566] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  936.236006][T11560] tipc: Resetting bearer <eth:syzkaller0>
[  936.377286][T11560] tipc: Disabling bearer <eth:syzkaller0>
[  936.410433][ T5826] usb 8-1: new high-speed USB device number 18 using dummy_hcd
[  936.600740][ T5826] usb 8-1: Using ep0 maxpacket: 8
[  936.646938][ T5826] usb 8-1: config index 0 descriptor too short (expected 301, got 45)
[  936.677338][ T5826] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  936.736885][ T5826] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  936.783138][ T5826] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 9
[  936.837413][ T5826] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  936.893239][ T5826] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  936.930292][ T5826] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  937.380875][T11587] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1396'.
[  937.663017][T11595] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1398'.
[  937.717568][T11593] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1397'.
[  937.740009][T11595] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1398'.
[  937.759651][T11597] usbtmc 8-1:16.0: usb_control_msg returned -32
[  937.775677][ T1998] usb 8-1: USB disconnect, device number 18
[  937.948050][T11595] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1398'.
[  938.001761][T11595] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1398'.
[  938.032957][   T13] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  938.051570][   T13] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  938.100323][   T13] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  938.144984][   T13] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  938.833060][T11613] syzkaller0: entered promiscuous mode
[  938.838714][T11613] syzkaller0: entered allmulticast mode
[  939.145683][T11618] syzkaller0: entered promiscuous mode
[  939.192794][T11618] syzkaller0: entered allmulticast mode
[  939.263378][T11622] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  939.308231][T11616] tipc: Resetting bearer <eth:syzkaller0>
[  939.416662][T11616] tipc: Disabling bearer <eth:syzkaller0>
[  939.988369][T11639] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  940.042889][T11639] syzkaller0: entered promiscuous mode
[  940.101475][T11639] syzkaller0: entered allmulticast mode
[  940.175836][T11642] netlink: 76 bytes leftover after parsing attributes in process `syz.9.1409'.
[  940.226687][T11643] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1410'.
[  940.412388][T11639] tipc: Resetting bearer <eth:syzkaller0>
[  940.469983][T11637] tipc: Resetting bearer <eth:syzkaller0>
[  940.504530][T11637] tipc: Disabling bearer <eth:syzkaller0>
[  941.283158][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  941.289907][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  941.904718][T11668] syzkaller0: entered promiscuous mode
[  941.930207][T11668] syzkaller0: entered allmulticast mode
[  942.189146][T11680] fuse: Bad value for 'fd'
[  942.348819][T11685] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1423'.
[  943.268120][T11701] Driver unsupported XDP return value 0 on prog  (id 50) dev N/A, expect packet loss!
[  944.325688][T11718] fuse: Bad value for 'rootmode'
[  944.540092][T11721] syzkaller0: entered promiscuous mode
[  944.545862][T11721] syzkaller0: entered allmulticast mode
[  944.588379][T11723] fuse: Bad value for 'fd'
[  944.992346][T11731] netlink: 'syz.6.1438': attribute type 3 has an invalid length.
[  945.952675][T11732] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  946.146400][T11731] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  946.490168][T11731] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  947.324065][T11768] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1447'.
[  947.554469][T11777] syzkaller0: entered promiscuous mode
[  947.590640][T11777] syzkaller0: entered allmulticast mode
[  949.069150][T11807] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1457'.
[  950.262125][T11827] netlink: 44 bytes leftover after parsing attributes in process `syz.9.1463'.
[  950.736904][T11835] fuse: Unknown parameter 'use00000000000000000000'
[  950.768207][T11833] syzkaller0: entered promiscuous mode
[  950.807733][T11833] syzkaller0: entered allmulticast mode
[  951.748169][T11858] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1473'.
[  951.971012][T11864] IPVS: dh: FWM 3 0x00000003 - no destination available
[  952.617320][T11873] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1477'.
[  954.163816][T11903] syzkaller0: entered promiscuous mode
[  954.194199][T11903] syzkaller0: entered allmulticast mode
[  954.504329][ T8956] IPVS: starting estimator thread 0...
[  954.630697][T11913] IPVS: using max 240 ests per chain, 12000 per kthread
[  955.038446][T11922] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1490'.
[  957.727993][T11973] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1504'.
[  959.188182][T11998] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  959.214352][T11998] syzkaller0: entered promiscuous mode
[  959.250699][T11998] syzkaller0: entered allmulticast mode
[  959.333656][T11998] tipc: Resetting bearer <eth:syzkaller0>
[  959.436728][T11995] tipc: Resetting bearer <eth:syzkaller0>
[  959.521148][T11995] tipc: Disabling bearer <eth:syzkaller0>
[  959.596752][T12011] IPVS: dh: FWM 3 0x00000003 - no destination available
[  959.768221][T12010] syzkaller0: entered promiscuous mode
[  959.770297][ T5834] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  959.848846][T12010] syzkaller0: entered allmulticast mode
[  960.016148][ T5834] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  960.091872][ T5834] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  960.116524][ T5834] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  960.167088][ T5834] usb 1-1: config 0 descriptor??
[  960.282649][ T5834] pwc: Askey VC010 type 2 USB webcam detected.
[  960.647463][ T5834] pwc: recv_control_msg error -32 req 02 val 2b00
[  960.667690][ T5834] pwc: recv_control_msg error -32 req 02 val 2700
[  960.690222][ T5834] pwc: recv_control_msg error -32 req 02 val 2c00
[  960.961454][ T5834] pwc: recv_control_msg error -32 req 04 val 1300
[  960.982777][ T5834] pwc: recv_control_msg error -32 req 04 val 1400
[  961.006947][ T5834] pwc: recv_control_msg error -32 req 02 val 2000
[  961.052958][ T5834] pwc: recv_control_msg error -32 req 02 val 2100
[  961.081954][ T5834] pwc: recv_control_msg error -32 req 04 val 1500
[  961.112847][ T5834] pwc: recv_control_msg error -32 req 02 val 2500
[  961.142459][ T5834] pwc: recv_control_msg error -32 req 02 val 2400
[  961.153262][ T5834] pwc: recv_control_msg error -32 req 02 val 2600
[  961.182667][ T5834] pwc: recv_control_msg error -32 req 02 val 2900
[  961.217581][ T5834] pwc: recv_control_msg error -32 req 02 val 2800
[  961.242674][ T5834] pwc: recv_control_msg error -32 req 04 val 1100
[  961.278198][ T5834] pwc: recv_control_msg error -32 req 04 val 1200
[  961.329084][ T5834] pwc: Registered as video103.
[  961.393114][ T5834] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input14
[  961.511467][ T5834] usb 1-1: USB disconnect, device number 2
[  962.336089][T12052] IPVS: dh: FWM 3 0x00000003 - no destination available
[  962.823602][T12062] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1530'.
[  964.009676][T12081] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  964.531688][ T8956] IPVS: starting estimator thread 0...
[  964.591639][T12089] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1541'.
[  964.642555][T12092] IPVS: using max 240 ests per chain, 12000 per kthread
[  964.895112][T12097] netlink: 'syz.7.1544': attribute type 1 has an invalid length.
[  966.382762][T12128] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  966.928100][T12135] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1552'.
[  968.266535][T12156] netlink: 'syz.5.1559': attribute type 1 has an invalid length.
[  968.416227][T12160] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1560'.
[  969.445695][T12171] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1563'.
[  969.447637][T12164] =====================================================
[  969.465159][T12164] BUG: KMSAN: kernel-infoleak in _copy_to_iter+0xef3/0x3400
[  969.472873][T12164]  _copy_to_iter+0xef3/0x3400
[  969.477752][T12164]  __skb_datagram_iter+0x18f/0x12b0
[  969.483339][T12164]  skb_copy_datagram_iter+0x5b/0x240
[  969.488804][T12164]  netlink_recvmsg+0x4bb/0xfe0
[  969.493840][T12164]  sock_recvmsg+0x2d9/0x380
[  969.498547][T12164]  __sys_recvfrom+0x282/0x550
[  969.505016][T12164]  __x64_sys_recvfrom+0x130/0x200
[  969.511655][T12164]  x64_sys_call+0x3784/0x3ea0
[  969.516496][T12164]  do_syscall_64+0x134/0xf80
[  969.521240][T12164]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  969.527225][T12164] 
[  969.529572][T12164] Uninit was created at:
[  969.534080][T12164]  __kmalloc_node_track_caller_noprof+0x4f6/0x1750
[  969.540826][T12164]  __alloc_skb+0x90d/0x1190
[  969.545440][T12164]  netlink_dump+0x248/0x1800
[  969.550236][T12164]  __netlink_dump_start+0x716/0xd60
[  969.555597][T12164]  rtnetlink_rcv_msg+0x1262/0x14b0
[  969.560954][T12164]  netlink_rcv_skb+0x54d/0x680
[  969.565807][T12164]  rtnetlink_rcv+0x35/0x40
[  969.570523][T12164]  netlink_unicast+0xf04/0x12b0
[  969.575527][T12164]  netlink_sendmsg+0x10b2/0x1250
[  969.580700][T12164]  ____sys_sendmsg+0xfe7/0x1080
[  969.585643][T12164]  ___sys_sendmsg+0x271/0x3b0
[  969.590582][T12164]  __x64_sys_sendmsg+0x211/0x3e0
[  969.595687][T12164]  x64_sys_call+0x1e20/0x3ea0
[  969.601397][T12164]  do_syscall_64+0x134/0xf80
[  969.608749][T12164]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  969.615879][T12164] 
[  969.618274][T12164] Bytes 32-35 of 88 are uninitialized
[  969.623875][T12164] Memory access of size 88 starts at ffff888017c57000
[  969.630928][T12164] Data copied to user address 00007f9d26594000
[  969.637157][T12164] 
[  969.639598][T12164] CPU: 0 UID: 0 PID: 12164 Comm: syz.6.1561 Not tainted syzkaller #0 PREEMPT(full) 
[  969.649306][T12164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  969.659707][T12164] =====================================================
[  969.666790][T12164] Disabling lock debugging due to kernel taint
[  969.799309][T12164] Kernel panic - not syncing: kmsan.panic set ...
[  969.805906][T12164] CPU: 0 UID: 0 PID: 12164 Comm: syz.6.1561 Tainted: G    B               syzkaller #0 PREEMPT(full) 
[  969.817033][T12164] Tainted: [B]=BAD_PAGE
[  969.821282][T12164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  969.831466][T12164] Call Trace:
[  969.834838][T12164]  <TASK>
[  969.837851][T12164]  __dump_stack+0x26/0x30
[  969.842350][T12164]  dump_stack_lvl+0x50/0x1c0
[  969.847133][T12164]  ? dump_stack+0x12/0x25
[  969.851635][T12164]  dump_stack+0x1e/0x25
[  969.855945][T12164]  vpanic+0x7b4/0x1430
[  969.860208][T12164]  panic+0x15d/0x160
[  969.864319][T12164]  kmsan_report+0x31a/0x320
[  969.868996][T12164]  ? kmsan_internal_check_memory+0x166/0x240
[  969.875148][T12164]  ? kmsan_copy_to_user+0xef/0x190
[  969.880423][T12164]  ? _copy_to_iter+0xef3/0x3400
[  969.885433][T12164]  ? __skb_datagram_iter+0x18f/0x12b0
[  969.890964][T12164]  ? skb_copy_datagram_iter+0x5b/0x240
[  969.896578][T12164]  ? netlink_recvmsg+0x4bb/0xfe0
[  969.901681][T12164]  ? sock_recvmsg+0x2d9/0x380
[  969.906482][T12164]  ? __sys_recvfrom+0x282/0x550
[  969.911491][T12164]  ? __x64_sys_recvfrom+0x130/0x200
[  969.916841][T12164]  ? x64_sys_call+0x3784/0x3ea0
[  969.921858][T12164]  ? do_syscall_64+0x134/0xf80
[  969.926793][T12164]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  969.933161][T12164]  ? kernel_text_address+0x10e/0x1a0
[  969.938784][T12164]  ? kmsan_get_metadata+0xf1/0x160
[  969.944071][T12164]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  969.950067][T12164]  ? do_syscall_64+0x81/0xf80
[  969.954916][T12164]  ? filter_irq_stacks+0x49/0x190
[  969.960192][T12164]  ? stack_depot_save_flags+0x35/0x790
[  969.965853][T12164]  ? kmsan_get_metadata+0xf1/0x160
[  969.971132][T12164]  ? kmsan_get_metadata+0xf1/0x160
[  969.976407][T12164]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  969.982398][T12164]  kmsan_internal_check_memory+0x166/0x240
[  969.988376][T12164]  kmsan_copy_to_user+0xef/0x190
[  969.993480][T12164]  _copy_to_iter+0xef3/0x3400
[  969.998330][T12164]  ? kmsan_get_metadata+0xf1/0x160
[  970.003609][T12164]  ? kmsan_internal_set_shadow_origin+0x7a/0x110
[  970.010106][T12164]  ? kmsan_get_metadata+0xf1/0x160
[  970.015460][T12164]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  970.021458][T12164]  ? kmsan_get_metadata+0xf1/0x160
[  970.026786][T12164]  __skb_datagram_iter+0x18f/0x12b0
[  970.032177][T12164]  ? __skb_try_recv_datagram+0x5f1/0x6e0
[  970.038065][T12164]  ? __pfx_simple_copy_to_iter+0x10/0x10
[  970.043858][T12164]  ? __pfx_sk_busy_loop_end+0x10/0x10
[  970.049402][T12164]  skb_copy_datagram_iter+0x5b/0x240
[  970.054854][T12164]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  970.060848][T12164]  netlink_recvmsg+0x4bb/0xfe0
[  970.065786][T12164]  ? aa_sock_msg_perm+0x284/0x2e0
[  970.071076][T12164]  ? __pfx_netlink_recvmsg+0x10/0x10
[  970.076527][T12164]  ? __pfx_netlink_recvmsg+0x10/0x10
[  970.081984][T12164]  sock_recvmsg+0x2d9/0x380
[  970.086626][T12164]  __sys_recvfrom+0x282/0x550
[  970.091463][T12164]  ? kmsan_get_metadata+0xf1/0x160
[  970.096774][T12164]  __x64_sys_recvfrom+0x130/0x200
[  970.101983][T12164]  x64_sys_call+0x3784/0x3ea0
[  970.106824][T12164]  do_syscall_64+0x134/0xf80
[  970.111582][T12164]  ? clear_bhb_loop+0x50/0xa0
[  970.116401][T12164]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  970.122448][T12164] RIP: 0033:0x7f9d2575cece
[  970.126967][T12164] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  970.146711][T12164] RSP: 002b:00007f9d26593e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002d
[  970.155262][T12164] RAX: ffffffffffffffda RBX: 00007f9d265956c0 RCX: 00007f9d2575cece
[  970.163347][T12164] RDX: 0000000000001000 RSI: 00007f9d26594000 RDI: 0000000000000008
[  970.171414][T12164] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  970.179476][T12164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008
[  970.187537][T12164] R13: 00007f9d26593f58 R14: 00007f9d26594000 R15: 0000000000000000
[  970.195643][T12164]  </TASK>
[  970.199120][T12164] Kernel Offset: disabled
[  970.203488][T12164] Rebooting in 86400 seconds..