last executing test programs:

8m35.462236972s ago: executing program 1 (id=2):
io_setup(0x7, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udp6\x00')
preadv(r3, &(0x7f0000000380)=[{&(0x7f0000000540)=""/229, 0xe5}], 0x1, 0xa3, 0x0)
r4 = openat$sysfs(0xffffff9c, &(0x7f0000000400)='/sys/power/wakeup_count', 0x40042, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000001c0)='7', 0x1, 0x4}])
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @empty, 0x4}, 0x1c)
listen(r5, 0x81)
r6 = socket$netlink(0x10, 0x3, 0x4)
writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001400add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r7, 0x8b04, &(0x7f0000000000)={'wlan1\x00'})
setregid(0xee00, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240))

8m32.251408261s ago: executing program 1 (id=10):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
getpgid(0xffffffffffffffff)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = memfd_create(0x0, 0x7)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa, 0x4d091, r3, 0x4000000)
openat$udambuf(0xffffff9c, &(0x7f0000000000), 0x2)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r4, 0x3b87, &(0x7f0000000600)={0x18, 0x1, 0x0, 0x0, r5, 0x200000})
r6 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
listen(r6, 0x0)
sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f0000000280)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x1)
r7 = socket$qrtr(0x2a, 0x2, 0x0)
accept4(r7, 0x0, 0x0, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc1105511, &(0x7f00000000c0)={{0xb}, 0x0, [0x4, 0x0, 0x7fff, 0x0, 0x7, 0x100000000, 0xfffffffffffffffe, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000, 0xfffffffffffffffe, 0x0, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfffffffffe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xa8, 0x400000000000, 0x0, 0x800000000, 0x566, 0x0, 0xfffffffffffffffc, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1]})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b1a, &(0x7f0000000000)={'wlan0\x00'})
syz_emit_ethernet(0x59, &(0x7f0000000040)={@broadcast, @broadcast, @val={@val={0x88a8, 0x2, 0x1, 0x4}, {0x8100, 0x5, 0x0, 0x3}}, {@mpls_uc={0x8847, {[{0x9, 0x0, 0x1}], @generic="d85682806e0bc780a3faef7afeae89cb736b06a204f2ff1c5bffc6f72d5ba468be824ecb4de37b66b8ebf9c6d6fb6eea955591ddd5e34745665cb977e88f9c"}}}}, &(0x7f00000005c0)={0x0, 0x4, [0x3b2, 0x99c, 0x735, 0x56b]})

8m26.906813697s ago: executing program 1 (id=15):
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, 0xffffffffffffffff, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffe0000000002, 0xfa0f, 0xffffffff}, 0x0)
syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet(r2, &(0x7f0000005f40)=[{{&(0x7f0000000d00)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, 0x0, 0x80}}], 0x1, 0x4000004)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000580)=""/133, 0x85, 0x80)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000150001030000000000"], 0x14}}, 0x0)
read(r3, &(0x7f0000000640)=""/187, 0xbb)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x10, 0x80003, 0x0)
write(r4, &(0x7f0000000000)="240000001a005f0214f9f4e6ff0804000a000000fe0000000000aa0008000f00fd0000", 0x23)
r5 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x19a1dc757009216e)
close_range(r4, 0xffffffffffffffff, 0x0)
r6 = socket$inet(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x230, 0x0, 0x8, 0xfa04, 0x98, 0x6c02, 0x198, 0x194, 0x194, 0x198, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x8fb2bd54e1114dfe, 'sit0\x00', 'ip6_vti0\x00', {0xff}, {}, 0x6, 0x0, 0x32}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@rand_addr=0x64010102, @broadcast, 0xffffffff, 0xffffffff, 'geneve1\x00', 'veth1_to_hsr\x00', {0xff}, {}, 0x0, 0x3, 0x8}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x5a5, 0xc20, 0x1, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, 0x1, 0x10, [0x18, 0x2f, 0x22, 0x8, 0x1d, 0x18, 0x15, 0x2e, 0x25, 0xd, 0xe, 0x2, 0x1a, 0x2d, 0x39, 0x3f], 0x0, 0x8a, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x290)
r7 = socket$pppl2tp(0x18, 0x1, 0x1)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r7, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r8, {0x2, 0x0, @local}, 0x2}}, 0x26)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)

8m8.829772526s ago: executing program 32 (id=15):
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, 0xffffffffffffffff, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffe0000000002, 0xfa0f, 0xffffffff}, 0x0)
syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet(r2, &(0x7f0000005f40)=[{{&(0x7f0000000d00)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, 0x0, 0x80}}], 0x1, 0x4000004)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000580)=""/133, 0x85, 0x80)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000150001030000000000"], 0x14}}, 0x0)
read(r3, &(0x7f0000000640)=""/187, 0xbb)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x10, 0x80003, 0x0)
write(r4, &(0x7f0000000000)="240000001a005f0214f9f4e6ff0804000a000000fe0000000000aa0008000f00fd0000", 0x23)
r5 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x19a1dc757009216e)
close_range(r4, 0xffffffffffffffff, 0x0)
r6 = socket$inet(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x230, 0x0, 0x8, 0xfa04, 0x98, 0x6c02, 0x198, 0x194, 0x194, 0x198, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x8fb2bd54e1114dfe, 'sit0\x00', 'ip6_vti0\x00', {0xff}, {}, 0x6, 0x0, 0x32}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@rand_addr=0x64010102, @broadcast, 0xffffffff, 0xffffffff, 'geneve1\x00', 'veth1_to_hsr\x00', {0xff}, {}, 0x0, 0x3, 0x8}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x5a5, 0xc20, 0x1, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, 0x1, 0x10, [0x18, 0x2f, 0x22, 0x8, 0x1d, 0x18, 0x15, 0x2e, 0x25, 0xd, 0xe, 0x2, 0x1a, 0x2d, 0x39, 0x3f], 0x0, 0x8a, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x290)
r7 = socket$pppl2tp(0x18, 0x1, 0x1)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r7, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r8, {0x2, 0x0, @local}, 0x2}}, 0x26)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)

7m46.906225664s ago: executing program 33 (id=35):
r0 = socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48})
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc})
add_key$keyring(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d80000001b0001000000000000000000fc00000000000000", @ANYRES32=0x0, @ANYBLOB], 0xd8}, 0x1, 0x0, 0x0, 0x4044001}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000800e0003006269746d61703a697000000005000400000000000900020073797a30000000000140ffffffff0c0001800800014080ffffff0500140002000000050005000200000005000100060000006744bf015f66af53c9bea42a79bb96d8d53867bd39b29997b2fa6c492ee927d6ed6f82677b63e3832c06000000cb1d214bbf0b18ac08bf27f9ea11b971d414bf0000000000"], 0x6c}}, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x14, 0x0, 0x2, 0x101, 0x0, 0x0, {0x8}}, 0x14}}, 0x24000100)
syz_emit_ethernet(0x10b, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000050011fcfc505230d81a8ddebea88d38fe418bd61b7b40efc8079473e76b80f89c2fb79803a7091c617f8f0476cceee025aaadaa29fb8bcfbc0047e0876d5388f3e32aca152635384fa9f371f5c49784e0c00ed4684fcf096bef712253"], 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x1)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCGETA(r7, 0x5405, &(0x7f0000000000))
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r9, &(0x7f0000000540)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e21, 0x3, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="20000000000000002900000037000000000000000000000004a7f86dbdd824ac5c6642e1f4017400000000000edb74357c3c368c437c2a16ef61cd08b0393011c668ce81b883cf0d4dfc89b6ad6f69f264e1f4660e403a540792e0ec9d110408a966a50cc5160dd29494092ac0e7"], 0x20}}], 0x2, 0x4000001)
sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)

7m33.941482319s ago: executing program 34 (id=41):
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00'})
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, 0x0, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000001080)={0x2020}, 0x2020)
socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000280)={'wg0\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd28, 0x0, {0x2, 0x20, 0x20}, [@RTA_IIF={0x8, 0x3, r6}]}, 0x24}}, 0x0)
socket$phonet(0x23, 0x2, 0x1)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="2400000036000701040000000000000001"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x3c}}, 0x10)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, 0x0)

7m20.520176497s ago: executing program 35 (id=60):
syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0)
ptrace$ARCH_SHSTK_LOCK(0x1e, r1, 0x0, 0x5003)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x38, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503, 0x10601}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r0}}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x41}, 0x0)

7m18.765585278s ago: executing program 36 (id=61):
r0 = syz_open_procfs(0x0, 0x0)
fchdir(r0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
r2 = eventfd(0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000000)=r2)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0, 0x200000})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x1, 0x1, &(0x7f0000000380)=""/240, &(0x7f0000000900)=""/103, &(0x7f0000000800)=""/90, 0x7000})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000980)=0x1)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000000380)={0x0, 0xcdf, 0xf})
syz_open_dev$MSR(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x25, &(0x7f0000000340)=0x1400200bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f000001b700)=""/102392, 0x18ff8)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
socket(0x10, 0x3, 0x0)

5m50.416162109s ago: executing program 37 (id=108):
r0 = socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0)
ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r3 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x101800, 0x0)
inotify_init()
ioctl$FBIOBLANK(r4, 0x4611, 0x3)
quotactl_fd$Q_GETFMT(r4, 0xffffffff80000402, 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, 0x0)
ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r3, 0x3b8b, &(0x7f0000000040)={0x10, 0x1})
ioprio_set$pid(0x3, 0x0, 0x0)
sendmsg$IPSET_CMD_FLUSH(r0, 0x0, 0x0)
ioprio_get$uid(0x3, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0xff00)
r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00')
pread64(r5, &(0x7f0000001600)=""/4103, 0x1007, 0x97)

5m15.099094406s ago: executing program 38 (id=158):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40000, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x3, &(0x7f0000000280)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1000000000001, 0x0, 0x2, 0x0)
madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x12)
syz_emit_ethernet(0x3e, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffff0000000000000800450000300000000000019078ac1e0001ac14140c00907800000000450000000000000000110000e0000002ac1414aa00"], 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r5)
socket$unix(0x1, 0x5, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="440000004ec6"})
socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r6)
sendmsg$NL80211_CMD_SET_REG(r6, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0xc806)
r7 = fsopen(&(0x7f0000000100)='fusectl\x00', 0x0)
fcntl$lock(r7, 0x25, &(0x7f0000000240)={0x2, 0x0, 0x7fffffffffffffff, 0x9})

4m57.624071234s ago: executing program 9 (id=193):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x18, 0xfffe, 0x0, 0xa0, 0x2f, 0x0, @loopback, @multicast1}, {0x2001, 0x880b, 0x8}}}}}, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000ce34000000000000000000850000002e00000095"], &(0x7f0000000c40)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000280)=r1, 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0x8800)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
r3 = socket(0x10, 0x2, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0)
r6 = socket(0x10, 0x80003, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "0000000000020400"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000)

4m57.412694937s ago: executing program 1 (id=125):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
unshare(0x24060400)
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x118, 0x71, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x3, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4)
r4 = accept4(r3, 0x0, 0x0, 0x80800)
sendmmsg$alg(r4, &(0x7f0000000c40)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000004c0)="33b6f982a62e715f3484fab4d07991a770bcae58c28945eaaeae058df5a923d651da3784c21428b02b2e1cc931d0822040fa6cda6079442f208f9488c0fa6e3a80c26b1d1b23fe4da5bf681446155a6994e346d2e844895b4eb1a6a14b6f0b6114", 0x61}, {&(0x7f0000000600)="d09ef15703efa654edd387ed90d643beaf9b3aeb05160c5aaeafc5f20047d5c3966bd83fe1ea6ddf432db90b8d8cb2696edb962654f023f00790673e077e93713677b8672664a8fa91df9768f7b14e83a0b12ae1c4fa61fb8d3bbfc736b7ab83bc21ce66d122ce768d032f6690555f4420919edb6454bd0be2d36c9851a4e4c894ef9624e4973f2b3eb4e2a356b9af3c416676be5828c5c8ceeed81a978fd9c32d877ec94961", 0xa6}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000880}, {0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)}, {&(0x7f00000006c0)="8d6500d3deb0317161b5e261a7f1e9dea247618f9703f844911f62e1d5ef48f42d25c5df86a12c2cb3d6678a34e724e3ab1620eaccf431a7b3233dd844f7f64b315280ab081a0adf7fe1e097111217fc5b32a93de5000e99be1f6930ec7f4400a24c04303d1b4a44569bfe6763fa541e3ba6f0b4ab128aca96995a3a8f1bc07e30add8ba2bdfe022", 0x88}], 0x2, &(0x7f0000000f40)=[@iv={0xe8, 0x117, 0x2, 0xcf, "62783c54cdc47da6cdb7f03d8cab5abe1a2c7fba3106730d09833a5f362901e8998d1bdb7b17d2231b63942a4e156500be1246b02efe051a238dc81ee8438f6b2ff7e93b21ff348844f5e5a67df0de01ec340585f874125320137c0bd3c5ea253f30729a229af1f07def7e9c5681f97cb16eb40f04477084186b7ef0e9431a107bf991abef4bbe24aa287d12171617a1748f0d13a7951392b8c8bd22c7d29d83480a7d720f738e8b2e22d5d6adb8656c6be7f8d4c74b19e9be637735447ed3b0d157c47581a13a9ca3cadaee1b605a"}, @assoc={0x18, 0x117, 0x4, 0x7}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x7}, @assoc={0x18, 0x117, 0x4, 0x80}, @assoc={0x18, 0x117, 0x4, 0xae5}, @iv={0x40, 0x117, 0x2, 0x25, "bd2dfdf3a35167789d1e86eb11d3da70196a98ded037398fd10a44e4483892f9e41494aeae"}, @iv={0xa0, 0x117, 0x2, 0x8c, "a1525e4edb3ed20038351cbec9986b7f1548bae5344672d70bc4d90e089d8633b56f8225904f42e78f6230ee768d387680c1bf7e20c820e147bd8f79440392b7eefd4c5864e0f2a352fd4075429d9bc38be3651a9cf1c8fbc4e8483928334ef4890430eaf0a72d1e68b1d11113c773cd53225e60024023b723f721683d79a8533a6cd2b3b7eb0862c4f44eb5"}, @op={0x18}, @iv={0x30, 0x117, 0x2, 0x15, "e186f696fd1013a29e3da8955ad005d353361442a1"}], 0x288, 0x4044044}, {0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)="eeec18b7a2f22103ffd1f9150c0e463d450dc5a4615dc8d05e03e6e8a4246acfedd42008bf0732311cbca46040ac3ba8b9f3d42acd5c6f364ce65a", 0x3b}], 0x1, &(0x7f0000000d40)=[@assoc={0x18, 0x117, 0x4, 0x9}, @assoc={0x18, 0x117, 0x4, 0xfff}, @op={0x18}, @iv={0x140, 0x117, 0x2, 0x128, "526b0e047fbc4fc252eaaa51f7070028035fd68fb6a92539435a12fdd225925548abd17a81e91752f591a67510f95fed70277e530a0b2df40e11706c22ec31fa53c1633bdd18cae8d5f81a9cdbf6cbe2071e0bc29a15a0f8da17b970b2a255f66034ee2b8d5279aebd8443314ef736cc8877f63cf74b1ea57afcffff685b654790d2808056973ed5942a0b1eff9f9a579ff973f5ea72daa97da16b68e3673a015aba3a67d562dcf23d9c0d49fad7dc7a393c5930587e7134f5223a8d448c9eea6096d5daee0474879430adc1c28c5261a66ce95d9669576bb8e4cf5ebe4b2bd49a4edd6323179758dd152f4467c2de203fa6d1221b0c0d11e37a6e3a2b484bc9c07b9f91f394da7fe4bea5dcabafc0e4add1cfb250702f606ded8df35eff331aedfd9aacc8b7656d"}, @assoc={0x18, 0x117, 0x4, 0xeed}], 0x1a0, 0x4000010}, {0x0, 0x0, &(0x7f0000000580), 0x0, &(0x7f0000000b40)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x7}, @assoc={0x18, 0x117, 0x4, 0x1}, @iv={0x70, 0x117, 0x2, 0x59, "433075e40e764ff78e98d6e2fd28ab1e7de0926b29692837e244860a37ed45eef4be3fa9abbd4b13ca0aac110785fc948b1797d36763c6d368e52217fda90bbe4fc93ce397e33566a5f1637e9ab82231e64719d3529d653ab9"}], 0xb8, 0x7a4e64b47bb0bd6a}], 0x4, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xe0}, 0x2}, [@migrate={0x50, 0x11, [{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@private2, @in=@rand_addr=0x64010102, @in6=@private2, 0x3c, 0x0, 0x0, 0x11, 0x8, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0)

4m56.628617938s ago: executing program 9 (id=195):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, 0x0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/ip_mr_cache\x00')
preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/106, 0x6a}], 0x1, 0x10e, 0x9)

4m53.172305846s ago: executing program 9 (id=199):
r0 = syz_open_dev$swradio(&(0x7f00000004c0), 0x1, 0x2)
mmap(&(0x7f0000572000/0x4000)=nil, 0x4000, 0xf, 0x13, r0, 0xc01ad000)

4m52.449136317s ago: executing program 9 (id=201):
r0 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000580)={0x20000000})
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB='lock io'], 0xc)
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000100)=@other={'unlock', ' ', 'mem'}, 0xb)

4m51.940013748s ago: executing program 9 (id=203):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r0 = epoll_create1(0x80000)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe000001a})
read$char_usb(r1, &(0x7f0000000840)=""/174, 0xae)

4m51.423163478s ago: executing program 9 (id=205):
socket$nl_route(0x10, 0x3, 0x0)
socket$kcm(0x10, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
msgctl$MSG_INFO(0x0, 0xc, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x4)
msgctl$IPC_RMID(0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000280), &(0x7f0000000180)='%+9llu \x00'}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x10, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800"/24], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94)
r2 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000340)=@ethtool_regs={0x7}})
sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="02070009"], 0x10}}, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000480)='6', 0x1}], 0x2}, 0x4)

4m40.630306702s ago: executing program 39 (id=125):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
unshare(0x24060400)
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x118, 0x71, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x3, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4)
r4 = accept4(r3, 0x0, 0x0, 0x80800)
sendmmsg$alg(r4, &(0x7f0000000c40)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000004c0)="33b6f982a62e715f3484fab4d07991a770bcae58c28945eaaeae058df5a923d651da3784c21428b02b2e1cc931d0822040fa6cda6079442f208f9488c0fa6e3a80c26b1d1b23fe4da5bf681446155a6994e346d2e844895b4eb1a6a14b6f0b6114", 0x61}, {&(0x7f0000000600)="d09ef15703efa654edd387ed90d643beaf9b3aeb05160c5aaeafc5f20047d5c3966bd83fe1ea6ddf432db90b8d8cb2696edb962654f023f00790673e077e93713677b8672664a8fa91df9768f7b14e83a0b12ae1c4fa61fb8d3bbfc736b7ab83bc21ce66d122ce768d032f6690555f4420919edb6454bd0be2d36c9851a4e4c894ef9624e4973f2b3eb4e2a356b9af3c416676be5828c5c8ceeed81a978fd9c32d877ec94961", 0xa6}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000880}, {0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)}, {&(0x7f00000006c0)="8d6500d3deb0317161b5e261a7f1e9dea247618f9703f844911f62e1d5ef48f42d25c5df86a12c2cb3d6678a34e724e3ab1620eaccf431a7b3233dd844f7f64b315280ab081a0adf7fe1e097111217fc5b32a93de5000e99be1f6930ec7f4400a24c04303d1b4a44569bfe6763fa541e3ba6f0b4ab128aca96995a3a8f1bc07e30add8ba2bdfe022", 0x88}], 0x2, &(0x7f0000000f40)=[@iv={0xe8, 0x117, 0x2, 0xcf, "62783c54cdc47da6cdb7f03d8cab5abe1a2c7fba3106730d09833a5f362901e8998d1bdb7b17d2231b63942a4e156500be1246b02efe051a238dc81ee8438f6b2ff7e93b21ff348844f5e5a67df0de01ec340585f874125320137c0bd3c5ea253f30729a229af1f07def7e9c5681f97cb16eb40f04477084186b7ef0e9431a107bf991abef4bbe24aa287d12171617a1748f0d13a7951392b8c8bd22c7d29d83480a7d720f738e8b2e22d5d6adb8656c6be7f8d4c74b19e9be637735447ed3b0d157c47581a13a9ca3cadaee1b605a"}, @assoc={0x18, 0x117, 0x4, 0x7}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x7}, @assoc={0x18, 0x117, 0x4, 0x80}, @assoc={0x18, 0x117, 0x4, 0xae5}, @iv={0x40, 0x117, 0x2, 0x25, "bd2dfdf3a35167789d1e86eb11d3da70196a98ded037398fd10a44e4483892f9e41494aeae"}, @iv={0xa0, 0x117, 0x2, 0x8c, "a1525e4edb3ed20038351cbec9986b7f1548bae5344672d70bc4d90e089d8633b56f8225904f42e78f6230ee768d387680c1bf7e20c820e147bd8f79440392b7eefd4c5864e0f2a352fd4075429d9bc38be3651a9cf1c8fbc4e8483928334ef4890430eaf0a72d1e68b1d11113c773cd53225e60024023b723f721683d79a8533a6cd2b3b7eb0862c4f44eb5"}, @op={0x18}, @iv={0x30, 0x117, 0x2, 0x15, "e186f696fd1013a29e3da8955ad005d353361442a1"}], 0x288, 0x4044044}, {0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)="eeec18b7a2f22103ffd1f9150c0e463d450dc5a4615dc8d05e03e6e8a4246acfedd42008bf0732311cbca46040ac3ba8b9f3d42acd5c6f364ce65a", 0x3b}], 0x1, &(0x7f0000000d40)=[@assoc={0x18, 0x117, 0x4, 0x9}, @assoc={0x18, 0x117, 0x4, 0xfff}, @op={0x18}, @iv={0x140, 0x117, 0x2, 0x128, "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"}, @assoc={0x18, 0x117, 0x4, 0xeed}], 0x1a0, 0x4000010}, {0x0, 0x0, &(0x7f0000000580), 0x0, &(0x7f0000000b40)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x7}, @assoc={0x18, 0x117, 0x4, 0x1}, @iv={0x70, 0x117, 0x2, 0x59, "433075e40e764ff78e98d6e2fd28ab1e7de0926b29692837e244860a37ed45eef4be3fa9abbd4b13ca0aac110785fc948b1797d36763c6d368e52217fda90bbe4fc93ce397e33566a5f1637e9ab82231e64719d3529d653ab9"}], 0xb8, 0x7a4e64b47bb0bd6a}], 0x4, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xe0}, 0x2}, [@migrate={0x50, 0x11, [{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@private2, @in=@rand_addr=0x64010102, @in6=@private2, 0x3c, 0x0, 0x0, 0x11, 0x8, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0)

4m36.147718048s ago: executing program 40 (id=205):
socket$nl_route(0x10, 0x3, 0x0)
socket$kcm(0x10, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
msgctl$MSG_INFO(0x0, 0xc, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x4)
msgctl$IPC_RMID(0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000280), &(0x7f0000000180)='%+9llu \x00'}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x10, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800"/24], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94)
r2 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000340)=@ethtool_regs={0x7}})
sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="02070009"], 0x10}}, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000480)='6', 0x1}], 0x2}, 0x4)

4m23.546073176s ago: executing program 8 (id=232):
r0 = epoll_create1(0x80000)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe000001a})
read$char_usb(r1, &(0x7f0000000840)=""/174, 0xae)

4m21.032103817s ago: executing program 8 (id=235):
pread64(0xffffffffffffffff, &(0x7f0000000700)=""/115, 0x73, 0x5)
mmap(&(0x7f0000572000/0x4000)=nil, 0x4000, 0xf, 0x13, 0xffffffffffffffff, 0xc01ad000)

4m20.460218299s ago: executing program 8 (id=238):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80)

4m19.78415198s ago: executing program 8 (id=240):
fanotify_init(0xf00, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r4=>0x0})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0)

4m17.422450852s ago: executing program 8 (id=242):
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000002000010329bd70000000000002000000000000001a000000080018004e144e2008000a"], 0x2c}}, 0x0)

4m17.230534257s ago: executing program 5 (id=243):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58)
epoll_create1(0x80000)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10)
read$char_usb(r0, &(0x7f0000000840)=""/174, 0xae)

4m16.719996853s ago: executing program 5 (id=244):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x1008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
fspick(0xffffffffffffffff, 0x0, 0x1)
r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$FUSE_DIRENTPLUS(r3, 0x0, 0x5a8)
r4 = fsopen(&(0x7f0000000240)='btrfs\x00', 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
setrlimit(0xb, 0x0)
getpid()
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5, 0x0, 0x0, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r5, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000})
ioctl$IOMMU_HWPT_ALLOC$NONE(r1, 0x3b89, &(0x7f0000000000)={0x28, 0x2, r6, r5, 0x0, 0x0, 0x0, 0x0, 0x0})
r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a42, 0x0)
fadvise64(r7, 0xfffffffffefffff8, 0x4, 0x4)
close_range(r0, 0xffffffffffffffff, 0x0)

4m15.513971195s ago: executing program 8 (id=245):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0xfe33)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {0x0}], 0x2}, 0x0)

4m13.511899959s ago: executing program 5 (id=247):
r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80082, 0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000580)={0x20000000})
write$vga_arbiter(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='lock io'], 0xc)
write$vga_arbiter(r0, &(0x7f0000000100)=@other={'unlock', ' ', 'mem'}, 0xb)

4m11.581961846s ago: executing program 5 (id=248):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80)

4m6.03256978s ago: executing program 5 (id=252):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58)
epoll_create1(0x80000)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10)
read$char_usb(r0, &(0x7f0000000840)=""/174, 0xae)

4m5.572051055s ago: executing program 5 (id=253):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket(0x80000000000000a, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, 0x0, &(0x7f00000000c0))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_emit_ethernet(0x52, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500004400000000002190337bf58400ffffffff050090780a0101026a0000000000000000000000ac1e0001ac14140107be00e0000002000000"], 0x0)
openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={<r6=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'team0\x00', <r9=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r9, @ANYRES32=r5], 0x3c}}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000840)={r6, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c)
r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r10, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6)
write(r10, &(0x7f0000000340)="07000000010000", 0x7)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}}, 0x1c)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r11 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341)
ioctl$USBDEVFS_IOCTL(r11, 0xc0105512, &(0x7f0000000200))

3m59.830323576s ago: executing program 41 (id=245):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0xfe33)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {0x0}], 0x2}, 0x0)

3m50.337097099s ago: executing program 42 (id=253):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket(0x80000000000000a, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, 0x0, &(0x7f00000000c0))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_emit_ethernet(0x52, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500004400000000002190337bf58400ffffffff050090780a0101026a0000000000000000000000ac1e0001ac14140107be00e0000002000000"], 0x0)
openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={<r6=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'team0\x00', <r9=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r9, @ANYRES32=r5], 0x3c}}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000840)={r6, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c)
r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r10, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6)
write(r10, &(0x7f0000000340)="07000000010000", 0x7)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}}, 0x1c)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r11 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341)
ioctl$USBDEVFS_IOCTL(r11, 0xc0105512, &(0x7f0000000200))

1m24.961818682s ago: executing program 2 (id=447):
socket$kcm(0x2, 0x3, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x25b9, 0x100, 0x0, 0x215}, 0x0, 0x0)
socket$inet6(0xa, 0x1, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = dup(r3)
sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0x2}], 0x1}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a80))
socket$inet_udp(0x2, 0x2, 0x0)
userfaultfd(0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0)

1m23.69167527s ago: executing program 2 (id=451):
syz_open_procfs(0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local})
futex(0x0, 0x9, 0x0, 0x0, 0x0, 0x14fffffe)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffffff, &(0x7f0000003080)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00')
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = msgget$private(0x0, 0x200)
msgsnd(r1, &(0x7f0000000200)=ANY=[@ANYBLOB], 0xff, 0x0)
close(0x3)

1m22.189006849s ago: executing program 2 (id=455):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmsg$802154_raw(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)="11a32ed688eb15", 0x7}, 0x1, 0x0, 0x0, 0x24008011}, 0x240040d0)
recvmmsg(r0, &(0x7f00000019c0), 0x0, 0x62, 0x0)

1m21.667255402s ago: executing program 2 (id=458):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0x1, 0x53b, &(0x7f0000000b80)="$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")
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000340)=0xc)
sched_setscheduler(0xffffffffffffffff, 0x4, &(0x7f0000000380)=0x9)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r1 = getpid()
ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r1, 0x0, 0x4004)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
dup(0xffffffffffffffff)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
fanotify_init(0x0, 0x2)
inotify_init()
openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff)
name_to_handle_at(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x14, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8}, [@RTA_MULTIPATH={0xc, 0x9, {0x800, 0x29, 0x8}}, @RTA_NH_ID={0x8, 0x1e, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x400c4}, 0x20000040)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r4, 0x6628)

1m17.035465001s ago: executing program 2 (id=461):
r0 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x4, 0x5, 0xffffffff}, 0x10)
write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0)

1m14.687508937s ago: executing program 2 (id=466):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmsg$802154_raw(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)="11a32ed688eb15", 0x7}, 0x1, 0x0, 0x0, 0x24008011}, 0x240040d0)
recvmmsg(r0, &(0x7f00000019c0), 0x0, 0x62, 0x0)

1m13.356383575s ago: executing program 43 (id=466):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmsg$802154_raw(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)="11a32ed688eb15", 0x7}, 0x1, 0x0, 0x0, 0x24008011}, 0x240040d0)
recvmmsg(r0, &(0x7f00000019c0), 0x0, 0x62, 0x0)

57.021294023s ago: executing program 0 (id=512):
socket(0x2000000015, 0x80005, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x202000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='cachefiles_ref\x00', r1, 0x0, 0x5}, 0x18)
ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, 0x0)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x81, &(0x7f0000000240)={0x3, 0x11, 0x5, 0x5360, 0x7}, 0x10, 0x6, 0x81, 0x0, 0x1, 0x101, 0x0})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r3, 0x0, 0xd}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0)
r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x33c, 0x2)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r5, 0xc100565c, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, 0x0)
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=<r8=>0x0)
sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r8], 0x1c}}, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)

55.887577004s ago: executing program 0 (id=514):
pselect6(0x0, 0x0, 0x0, &(0x7f00000000c0)={0x101, 0x3db88d26, 0xd2, 0xffffffffffffffff, 0x80000001, 0x8, 0x1, 0xc}, 0x0, 0x0)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001e008d2a"], 0x30}}, 0x40000c0)

54.663317793s ago: executing program 0 (id=522):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=@newtfilter={0x78, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x48, 0x2, [@TCA_CGROUP_EMATCHES={0x44, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x34, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x2}]}}]}]}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x40010)

53.980249018s ago: executing program 4 (id=526):
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c)
sendto$inet6(r1, &(0x7f0000000080)='D', 0x1, 0x1, 0x0, 0x0)
splice(r1, 0x0, r0, 0x0, 0x406f413, 0x0)

53.811593499s ago: executing program 0 (id=528):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$tmpfs(0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always'])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
truncate(&(0x7f0000000900)='./file1\x00', 0x1)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='numa_maps\x00')
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)

53.656944275s ago: executing program 4 (id=530):
r0 = fanotify_init(0x200, 0x0)
fanotify_mark(r0, 0x201, 0x4800003e, 0xffffffffffffffff, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
fanotify_mark(r0, 0x62, 0x40001002, r1, 0x0)

53.37838888s ago: executing program 0 (id=532):
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7a680000)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
getxattr(&(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc)
pipe(0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0)

53.251812158s ago: executing program 4 (id=533):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x68, 0x0, 0x0)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
r3 = syz_mount_image$exfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x809, &(0x7f0000000600)=ANY=[], 0x6, 0x1509, &(0x7f0000001c40)="$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")
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000240))
fstat(r3, &(0x7f0000000540))
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)

46.850765929s ago: executing program 0 (id=535):
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x3, 0x38)
connect$inet6(r3, 0x0, 0x0)
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xf338}], 0x20)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f00000001c0)=0x2, 0x4)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000003c0)={'wlan1\x00', 0x0})

42.480095934s ago: executing program 4 (id=541):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x80000}, [@call={0x85, 0x0, 0x0, 0x4f}]}, &(0x7f0000000680)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

42.063964049s ago: executing program 4 (id=544):
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000080)=0x4, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x1c)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000)
shmget$private(0x0, 0x1000, 0x1000, &(0x7f000064e000/0x1000)=nil)
socket$nl_audit(0x10, 0x3, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10)
sendmmsg(r4, &(0x7f0000001c00), 0x400000000000159, 0x40840)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, 0x0, 0x0, 0xa7c}, 0x38)

35.320961793s ago: executing program 4 (id=546):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='totmaps\x00')
lseek(r3, 0x10000000005, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000001180)={0x2020}, 0xffffffffffffff68)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

25.920802591s ago: executing program 44 (id=535):
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x3, 0x38)
connect$inet6(r3, 0x0, 0x0)
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xf338}], 0x20)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f00000001c0)=0x2, 0x4)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000003c0)={'wlan1\x00', 0x0})

17.670741586s ago: executing program 45 (id=546):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='totmaps\x00')
lseek(r3, 0x10000000005, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000001180)={0x2020}, 0xffffffffffffff68)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

10.748750344s ago: executing program 3 (id=587):
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r0 = epoll_create1(0x80000)
r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x10)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe000001a})
read$char_usb(r1, &(0x7f0000000840)=""/174, 0xae)

9.904519962s ago: executing program 6 (id=588):
syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000f00)='./file0\x00', 0x1444c, &(0x7f0000001180)=ANY=[@ANYBLOB='iocharset=ascii,nostrict,rootdir=00000000000000011287,uid=', @ANYRESDEC=0x0, @ANYBLOB=',uid=', @ANYRESDEC, @ANYBLOB=',anchor=00000000000000000006,longad,gid=', @ANYRESDEC=0x0, @ANYBLOB="2c6769243d666f726765742c00119bd4a01a733ca60fa4b8e33c466a65e7b007cda265e2d36c4945a63cfe4e2d6c58c6fbc76f9ce6fa49d72632e21f0eb13ad6324c79083999d1d2845c164958a1e52a566ba6438557a4828e73fdde9acb36c688bd2a260cf2ebb004576a62cea119bbfa32eecad673b0e195cd731c2feecb1cf43b6a5c19c728b90abce2fa76d65e9955ed9d7516b3fbb2c8a047c921460f6e63"], 0xfe, 0xc22, &(0x7f00000002c0)="$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")
syz_open_procfs(0x0, 0x0)
syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="040e0a0f0d04"], 0xd)

9.780078869s ago: executing program 3 (id=589):
socket$nl_generic(0x10, 0x3, 0x10)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r1 = dup2(r0, r0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10})
ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)

8.908642198s ago: executing program 6 (id=592):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, <r2=>0x0})
ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r2, r1, <r3=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r2, r3, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)})
ioctl$IOMMU_HWPT_INVALIDATE$TEST(r0, 0x3b8d, 0x0)

6.323048019s ago: executing program 6 (id=594):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x57e, 0x200e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x81, 0x0, 0x1}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000480), 0x4100, 0x0)
ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f00000004c0)={{r1}, 0x391, 0x76, 0xc7})
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0x3, '\''}, @local=@item_4={0x3, 0x2, 0x4, "8f9c66ef"}]}}, 0x0}, 0x0)

6.002994702s ago: executing program 3 (id=595):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val={'init_itable', 0x3d, 0x7ff}}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x66}}, {@user_xattr}, {@nolazytime}, {@quota}]}, 0x3, 0x43d, &(0x7f0000002200)="$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")
r0 = open(&(0x7f0000000000)='./file2\x00', 0x147842, 0x1ef)
write$hidraw(r0, 0x0, 0x0)
fsopen(0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xb9, 0x10001, 0x9, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000040), &(0x7f0000000440)=""/183}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r4, &(0x7f0000000180), &(0x7f0000000680)=""/141}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r4, &(0x7f0000000040)}, 0x20)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
fspick(0xffffffffffffff9c, 0x0, 0x1)
ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000c40)={0x0, 0xfe72})
syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401)

5.718748219s ago: executing program 7 (id=596):
r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x1)
fchdir(r1)
openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x40, 0x0)

4.808500302s ago: executing program 7 (id=597):
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)='D', 0x1, 0x1, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x406f413, 0x0)

4.655608878s ago: executing program 7 (id=598):
socket$inet6_tcp(0xa, 0x1, 0x0)
setxattr$system_posix_acl(0x0, &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="02000000010000000000000004000000000000001000000000"], 0x24, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x141141, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000340)={[{@nodioread_nolock}, {@auto_da_alloc}, {@errors_remount}]}, 0x3, 0x4cc, &(0x7f0000000c80)="$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")
mount(0x0, 0x0, 0x0, 0x0, 0x0)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
fallocate(r0, 0x0, 0x6, 0x80010001)

3.697735392s ago: executing program 3 (id=599):
socket$kcm(0x2, 0x3, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x25b9, 0x100, 0x0, 0x215}, 0x0, 0x0)
socket$inet6(0xa, 0x1, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
sendmsg$inet(r3, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0x2}], 0x1}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a80))
socket$inet_udp(0x2, 0x2, 0x0)
userfaultfd(0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0)

2.359772016s ago: executing program 6 (id=600):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4056, &(0x7f0000000200)={[{@noload}, {@i_version}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@errors_remount}, {@lazytime}, {@minixdf}, {@noquota}, {@usrjquota}]}, 0x1, 0x451, &(0x7f0000000680)="$eJzs28tvG8UfAPDvbh6/X1/EVOXRBzRQEBWPpElL6YELCCQOICHBoRxD4lahboOaINGqgoJQOaJK3BFHpP4FnOCCgBOCK3BGlSrUSwsno7V3G8e1XcdK6jT+fKRtZ3bHmfl6duzZHW8AA2s8+yeJ2B4Rv0fEWD27ssB4/b+b1y/M/nP9wmwS1epbfye1cjeuX5gtihav21ZkhiPSz5LY26LexXPnT81UKuWzeX5y6fT7k4vnzj83f3rmZPlk+cz0sWNHDk+9cHT6+TWJM4vrxp6PFvbtfu2dy2/MHr/87k9XkiL+pji6MXTnIuOdDj5Zra6mug1vR0M6Ge5jQ1iVofowjZHa+B+LoVjuvLF49dO+Ng5YV9Vqtfpg+8NXagWATSoxxGFAFV/02fVvsd2lqceGcO2l+gVQFvfNfKsfGY40LzPSdH27lsYj4vjFf7/Ktmi+D7FlnSoFAAbad9n859lW8780Gu8L3ZevoZQi4v6I2BkRRyNiV0Q8EFEr+1BEPLzK+psXSW6ff6ZXewqsS9n878V8bWvl/K+Y/UVpKM/tqMU/kpyYr5QPZe/Jr/vrJeYr5akOdXz/ym9ftDvWOP/Ltqz+Yi6Yt+Pq8P9WvmZuZmmm54CbXPskYs9wq/iTWysBSUTsjog9PdYx//Q3+9odaxP/aFd/eA3WmapfRzxV7/+L0RR/Iem8Pjn5/6iUD00WZ8Xtfv7l0pvt6r9z/6+vrP+3tjz/i/j/LCWN67WLq6/j0h+ft72m7PX8H03eXrHvw5mlpbNTEaPJ67V8qXH/dFO56eXyWfwHD7Qe/ztj+Z3YGxHZSfxIRDwaEfvztj8WEY9HxIEO8f/48hPv9R7/+srin+vY/9HU/8uJ0Wje0zoxdOqHb1dUWlpN/Fn/H6mlDuZ7uvn866ZdvZ3NAAAAcO9JI2J7JOnErXSaTkzUf8O/K7amlYXFpWdOLHxwZq7+jEApRtLiTtdYw/3QqfyyvshP578tLvKH8/vGXw5tqeUnZhcqc/0OHgbctjbjP/NXFw+5APe45nW0rX1qB3D3eV4TBpfxD4PL+IfB1WL8e/QMBkSr7/+P+9AO4O5rGv8dl/1MDGBzcf0Pg8v4h8Fl/MNAWtwSd35IfnMk0ojYAM3YLIlIN0QzJNYp0e9PJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgLXxXwAAAP//JI/k8w==")
pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]})
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000140), 0x1e)
write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff018000000800"], 0x15)

1.996128101s ago: executing program 6 (id=601):
pipe(0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002300), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0x3)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/233, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, &(0x7f0000000700)=""/88, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000005c0))
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000001b40)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10)
write(0xffffffffffffffff, 0x0, 0x0)
write$eventfd(r1, &(0x7f00000000c0)=0xfffffffffffffffe, 0x8)

1.426437193s ago: executing program 7 (id=602):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, <r2=>0x0})
ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r2, r1, <r3=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r2, r3, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)})
ioctl$IOMMU_HWPT_INVALIDATE$TEST(r0, 0x3b8d, 0x0)

1.244250101s ago: executing program 3 (id=603):
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0xa0000, 0x0)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x110, r0, 0x1c781000)

819.786653ms ago: executing program 3 (id=604):
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001400)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum64={0x6, 0x0, 0x0, 0x13, 0x0, 0xd}]}}, 0x0, 0x26, 0x0, 0x1, 0x6}, 0x28)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = accept$packet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f00000002c0)=@req3={0xfffffe00, 0x3, 0x47, 0x2, 0xffffffff, 0x5, 0x7}, 0x1c)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c)
sendmmsg$inet6(r4, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @dev}, 0x18, 0x0}}], 0x6c00, 0x48)
sendto$inet6(r4, 0x0, 0x0, 0x10, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xffffff69}, 0x1c)

815.662149ms ago: executing program 6 (id=605):
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8)
socket$inet6(0xa, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23)

812.346397ms ago: executing program 7 (id=606):
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)='D', 0x1, 0x1, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x406f413, 0x0)

0s ago: executing program 7 (id=607):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
gettid()
read$char_usb(r1, &(0x7f00000002c0)=""/151, 0x97)
ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

44.045794][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  344.053405][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  344.117052][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  344.124811][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  344.193562][   T12] veth1_macvtap: left promiscuous mode
[  344.199173][   T12] veth0_macvtap: left promiscuous mode
[  344.205992][   T12] veth1_vlan: left promiscuous mode
[  344.211359][   T12] veth0_vlan: left promiscuous mode
[  345.422220][   T12] team0 (unregistering): Port device team_slave_1 removed
[  345.528745][   T12] team0 (unregistering): Port device team_slave_0 removed
[  345.829796][ T6733] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  345.933611][ T6690] batman_adv: batadv0: Adding interface: batadv_slave_0
[  345.940642][ T6690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  345.971951][ T6690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  346.126315][ T6690] batman_adv: batadv0: Adding interface: batadv_slave_1
[  346.135773][ T6690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  346.167062][ T6690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  346.645720][ T6690] hsr_slave_0: entered promiscuous mode
[  346.654652][ T6690] hsr_slave_1: entered promiscuous mode
[  346.662179][ T6690] debugfs: 'hsr0' already exists in 'hsr'
[  346.668235][ T6690] Cannot create hsr debugfs directory
[  347.514281][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  347.520866][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  349.350815][ T5800] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  349.360322][ T5800] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  349.402713][ T5800] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  349.418585][ T6690] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  349.457292][ T5800] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  349.475156][ T6690] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  349.484052][ T5800] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  349.658060][ T6690] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  349.942442][ T6690] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  350.034011][ T6742] lo speed is unknown, defaulting to 1000
[  350.887616][ T6754] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  351.181757][  T165] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  351.197022][ T6754] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  351.281809][  T165] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  351.574249][ T5800] Bluetooth: hci5: command tx timeout
[  353.371721][  T165] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  353.684160][ T5800] Bluetooth: hci5: command tx timeout
[  354.063843][  T165] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  354.418520][ T6766] No control pipe specified
[  355.803683][ T5800] Bluetooth: hci5: command tx timeout
[  356.123062][ T6690] 8021q: adding VLAN 0 to HW filter on device bond0
[  356.489066][ T6742] chnl_net:caif_netlink_parms(): no params data found
[  356.522851][  T165] bridge_slave_1: left allmulticast mode
[  356.529053][  T165] bridge_slave_1: left promiscuous mode
[  356.535625][  T165] bridge0: port 2(bridge_slave_1) entered disabled state
[  356.715319][  T165] bridge_slave_0: left allmulticast mode
[  356.721155][  T165] bridge_slave_0: left promiscuous mode
[  356.727713][  T165] bridge0: port 1(bridge_slave_0) entered disabled state
[  357.668640][  T165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  357.692408][  T165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  357.761399][  T165] bond0 (unregistering): Released all slaves
[  357.816992][ T6690] 8021q: adding VLAN 0 to HW filter on device team0
[  357.867082][ T5800] Bluetooth: hci5: command tx timeout
[  357.979115][  T165] tipc: Left network mode
[  358.210436][ T1123] bridge0: port 1(bridge_slave_0) entered blocking state
[  358.217978][ T1123] bridge0: port 1(bridge_slave_0) entered forwarding state
[  358.232294][ T1123] bridge0: port 2(bridge_slave_1) entered blocking state
[  358.239802][ T1123] bridge0: port 2(bridge_slave_1) entered forwarding state
[  358.812082][  T165] hsr_slave_0: left promiscuous mode
[  358.879454][  T165] hsr_slave_1: left promiscuous mode
[  358.887241][  T165] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  358.895037][  T165] batman_adv: batadv0: Removing interface: batadv_slave_0
[  359.044169][  T165] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  359.052257][  T165] batman_adv: batadv0: Removing interface: batadv_slave_1
[  359.407553][  T165] veth1_macvtap: left promiscuous mode
[  359.413624][  T165] veth0_macvtap: left promiscuous mode
[  359.419536][  T165] veth1_vlan: left promiscuous mode
[  359.425535][  T165] veth0_vlan: left promiscuous mode
[  360.268008][  T165] team0 (unregistering): Port device team_slave_1 removed
[  360.337629][  T165] team0 (unregistering): Port device team_slave_0 removed
[  361.452157][ T3836] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  361.588774][ T6795] netlink: 8 bytes leftover after parsing attributes in process `syz.8.144'.
[  361.690912][ T3836] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  362.228254][ T6742] bridge0: port 1(bridge_slave_0) entered blocking state
[  362.245391][ T6742] bridge0: port 1(bridge_slave_0) entered disabled state
[  362.253425][ T6742] bridge_slave_0: entered allmulticast mode
[  362.262522][ T6742] bridge_slave_0: entered promiscuous mode
[  362.776250][ T3836] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  364.282696][ T6742] bridge0: port 2(bridge_slave_1) entered blocking state
[  364.290245][ T6742] bridge0: port 2(bridge_slave_1) entered disabled state
[  364.298082][ T6742] bridge_slave_1: entered allmulticast mode
[  364.307290][ T6742] bridge_slave_1: entered promiscuous mode
[  364.472341][ T3836] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  365.017687][ T6742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  365.236529][ T6742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  365.492032][ T3836] bridge_slave_1: left allmulticast mode
[  365.498131][ T3836] bridge_slave_1: left promiscuous mode
[  365.504758][ T3836] bridge0: port 2(bridge_slave_1) entered disabled state
[  365.581131][ T3836] bridge_slave_0: left allmulticast mode
[  365.587263][ T3836] bridge_slave_0: left promiscuous mode
[  365.593890][ T3836] bridge0: port 1(bridge_slave_0) entered disabled state
[  366.121263][ T3836] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  366.142022][ T3836] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  366.158332][ T3836] bond0 (unregistering): Released all slaves
[  366.284893][ T6690] 8021q: adding VLAN 0 to HW filter on device batadv0
[  366.338534][ T6742] team0: Port device team_slave_0 added
[  366.356751][ T6742] team0: Port device team_slave_1 added
[  367.167200][ T6742] batman_adv: batadv0: Adding interface: batadv_slave_0
[  367.175149][ T6742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  367.201780][ T6742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  368.617625][ T6837] tipc: Started in network mode
[  368.623379][ T6837] tipc: Node identity 8e11fc663b8, cluster identity 4711
[  368.630958][ T6837] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  368.644200][ T6742] batman_adv: batadv0: Adding interface: batadv_slave_1
[  368.651280][ T6742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  368.678079][ T6742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  368.786057][ T3836] hsr_slave_0: left promiscuous mode
[  369.281388][ T3836] hsr_slave_1: left promiscuous mode
[  369.290405][ T3836] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  369.298453][ T3836] batman_adv: batadv0: Removing interface: batadv_slave_0
[  369.451287][ T3836] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  369.459003][ T3836] batman_adv: batadv0: Removing interface: batadv_slave_1
[  369.579654][ T3836] veth1_macvtap: left promiscuous mode
[  369.585511][ T3836] veth0_macvtap: left promiscuous mode
[  369.591431][ T3836] veth1_vlan: left promiscuous mode
[  369.597053][ T3836] veth0_vlan: left promiscuous mode
[  370.279556][ T5851] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  370.338184][ T3836] team0 (unregistering): Port device team_slave_1 removed
[  370.374553][ T3836] team0 (unregistering): Port device team_slave_0 removed
[  370.714606][ T5851] usb 10-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00
[  370.724517][ T5851] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  370.741884][ T6837] syzkaller0: MTU too low for tipc bearer
[  370.747798][ T6837] tipc: Disabling bearer <eth:syzkaller0>
[  370.755912][ T5851] usb 10-1: config 0 descriptor??
[  372.489162][   T11] tipc: Node number set to 3046243430
[  372.501536][ T5851] apple 0003:05AC:0232.0002: unbalanced delimiter at end of report description
[  372.896852][ T5851] apple 0003:05AC:0232.0002: parse failed
[  372.903494][ T5851] apple 0003:05AC:0232.0002: probe with driver apple failed with error -22
[  372.939109][ T5851] usb 10-1: USB disconnect, device number 2
[  373.144524][ T6742] hsr_slave_0: entered promiscuous mode
[  373.152810][ T6742] hsr_slave_1: entered promiscuous mode
[  376.663476][ T6690] veth0_vlan: entered promiscuous mode
[  376.759918][ T6690] veth1_vlan: entered promiscuous mode
[  377.827098][ T6742] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  377.852633][ T6690] veth0_macvtap: entered promiscuous mode
[  378.280270][ T6742] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  378.301163][ T6742] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  378.431418][ T6690] veth1_macvtap: entered promiscuous mode
[  378.585366][ T6742] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  378.749491][ T6690] batman_adv: batadv0: Interface activated: batadv_slave_0
[  379.095733][ T6690] batman_adv: batadv0: Interface activated: batadv_slave_1
[  379.577760][ T6880] lo speed is unknown, defaulting to 1000
[  380.182065][   T49] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  380.339026][   T49] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  380.387922][   T49] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  380.422329][   T49] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  381.166865][ T6742] 8021q: adding VLAN 0 to HW filter on device bond0
[  381.685072][ T6742] 8021q: adding VLAN 0 to HW filter on device team0
[  381.737813][ T1885] bridge0: port 1(bridge_slave_0) entered blocking state
[  381.745340][ T1885] bridge0: port 1(bridge_slave_0) entered forwarding state
[  381.848050][ T1885] bridge0: port 2(bridge_slave_1) entered blocking state
[  381.855496][ T1885] bridge0: port 2(bridge_slave_1) entered forwarding state
[  386.208985][   T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  386.220072][   T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  386.229990][   T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  386.246379][   T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  386.258860][   T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  386.476179][ T5851] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  386.708466][ T5851] usb 10-1: config 0 has an invalid interface number: 1 but max is 0
[  386.719637][ T5851] usb 10-1: config 0 has no interface number 0
[  386.759020][ T6913] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  386.824342][ T5851] usb 10-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  386.834273][ T5851] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  386.842536][ T5851] usb 10-1: Product: syz
[  386.847228][ T5851] usb 10-1: Manufacturer: syz
[  386.852061][ T5851] usb 10-1: SerialNumber: syz
[  386.864770][ T6905] lo speed is unknown, defaulting to 1000
[  386.938423][ T6913] netlink: 4 bytes leftover after parsing attributes in process `syz.8.176'.
[  387.010560][ T5851] usb 10-1: config 0 descriptor??
[  387.252502][ T5851] usb 10-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  387.297337][ T5851] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  387.308465][ T5851] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  387.316854][ T5851] usb 10-1: media controller created
[  387.517416][ T5851] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  388.334683][ T5800] Bluetooth: hci4: command tx timeout
[  388.535125][ T6742] 8021q: adding VLAN 0 to HW filter on device batadv0
[  388.821609][ T5851] i2c i2c-1: ec100: i2c rd failed=-110 reg=33
[  389.267678][ T6742] veth0_vlan: entered promiscuous mode
[  389.424670][ T5851] usb 10-1: USB disconnect, device number 3
[  389.848140][ T6742] veth1_vlan: entered promiscuous mode
[  389.929476][ T6905] chnl_net:caif_netlink_parms(): no params data found
[  390.095900][ T6742] veth0_macvtap: entered promiscuous mode
[  390.232816][ T6742] veth1_macvtap: entered promiscuous mode
[  390.414979][ T5800] Bluetooth: hci4: command tx timeout
[  390.432332][ T6742] batman_adv: batadv0: Interface activated: batadv_slave_0
[  390.556051][ T6742] batman_adv: batadv0: Interface activated: batadv_slave_1
[  390.603580][   T71] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  390.614974][  T165] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  390.651495][  T165] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  390.752754][   T60] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  390.777054][ T1123] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  390.785259][ T1123] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  391.055114][ T4425] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  391.063251][ T4425] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  391.882082][ T5874] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  391.883465][ T6905] bridge0: port 1(bridge_slave_0) entered blocking state
[  391.897458][ T6905] bridge0: port 1(bridge_slave_0) entered disabled state
[  391.905240][ T6905] bridge_slave_0: entered allmulticast mode
[  391.914357][ T6905] bridge_slave_0: entered promiscuous mode
[  391.993523][   T11] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[  392.120618][ T6905] bridge0: port 2(bridge_slave_1) entered blocking state
[  392.128243][ T6905] bridge0: port 2(bridge_slave_1) entered disabled state
[  392.141753][ T6905] bridge_slave_1: entered allmulticast mode
[  392.150103][ T6905] bridge_slave_1: entered promiscuous mode
[  392.262774][   T11] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  392.273441][   T11] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  392.285215][   T11] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10
[  392.296392][   T11] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  392.306518][   T11] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  392.398833][ T6905] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  392.409432][   T11] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  392.419634][   T11] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  392.429028][   T11] usb 6-1: Product: syz
[  392.433603][   T11] usb 6-1: Manufacturer: syz
[  392.438344][   T11] usb 6-1: SerialNumber: syz
[  392.495798][ T6905] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  392.507360][ T5800] Bluetooth: hci4: command tx timeout
[  392.525444][   T11] usb 6-1: config 0 descriptor??
[  392.568685][ T5874] usb 9-1: Using ep0 maxpacket: 8
[  392.636113][ T6905] team0: Port device team_slave_0 added
[  392.671158][ T6905] team0: Port device team_slave_1 added
[  392.694844][ T5874] usb 9-1: config index 0 descriptor too short (expected 301, got 45)
[  392.703470][ T5874] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  392.713555][ T5874] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  392.723705][ T5874] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 10982, setting to 64
[  392.735050][ T5874] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  392.748385][ T5874] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  392.757844][ T5874] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  392.812036][   T11] radio-si470x 6-1:0.0: DeviceID=0x4f56 ChipID=0x4621
[  392.886657][ T5874] usbtmc 9-1:16.0: bulk endpoints not found
[  393.021147][ T6905] batman_adv: batadv0: Adding interface: batadv_slave_0
[  393.028495][ T6905] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  393.054814][ T6905] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  393.101230][   T11] radio-si470x 6-1:0.0: software version 79, hardware version 86
[  393.363511][   T11] radio-si470x 6-1:0.0: si470x_set_report: usb_control_msg returned -71
[  393.380581][   T11] radio-si470x 6-1:0.0: submitting int urb failed (-90)
[  393.433385][   T11] radio-si470x 6-1:0.0: si470x_set_report: usb_control_msg returned -71
[  393.442689][   T11] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -22
[  393.526051][   T11] usb 6-1: USB disconnect, device number 2
[  393.649348][ T6905] batman_adv: batadv0: Adding interface: batadv_slave_1
[  393.656654][ T6905] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  393.683117][ T6905] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  393.965813][ T5800] Bluetooth: hci1: unexpected event for opcode 0x0c26
[  394.043239][ T6905] hsr_slave_0: entered promiscuous mode
[  394.056108][ T6905] hsr_slave_1: entered promiscuous mode
[  394.063874][ T6905] debugfs: 'hsr0' already exists in 'hsr'
[  394.069682][ T6905] Cannot create hsr debugfs directory
[  394.582579][ T5800] Bluetooth: hci4: command tx timeout
[  395.056372][   T11] usb 9-1: USB disconnect, device number 4
[  395.496711][ T6905] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  395.520400][ T6969] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  395.549801][ T6905] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  395.609986][ T6905] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  395.697510][ T6905] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  396.611423][ T6905] 8021q: adding VLAN 0 to HW filter on device bond0
[  396.788957][ T6905] 8021q: adding VLAN 0 to HW filter on device team0
[  396.886582][ T1123] bridge0: port 1(bridge_slave_0) entered blocking state
[  396.894103][ T1123] bridge0: port 1(bridge_slave_0) entered forwarding state
[  396.908956][ T1123] bridge0: port 2(bridge_slave_1) entered blocking state
[  396.916522][ T1123] bridge0: port 2(bridge_slave_1) entered forwarding state
[  397.249606][ T6905] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  397.267815][ T6905] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  399.726279][ T6274] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[  399.981210][ T6274] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  399.992233][ T6274] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  400.004249][ T6274] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10
[  400.015898][ T6274] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  400.029656][ T6274] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  400.295175][   T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  400.303922][   T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  400.418565][   T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  400.419363][ T6274] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  400.427193][   T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  400.442187][ T6274] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  400.453845][ T6274] usb 6-1: Product: syz
[  400.458169][ T6274] usb 6-1: Manufacturer: syz
[  400.463503][ T6274] usb 6-1: SerialNumber: syz
[  400.480432][ T6274] usb 6-1: config 0 descriptor??
[  400.758929][ T6274] radio-si470x 6-1:0.0: DeviceID=0x4f56 ChipID=0x4621
[  400.959186][ T6274] radio-si470x 6-1:0.0: si470x_get_report: usb_control_msg returned -71
[  400.967866][ T6274] radio-si470x 6-1:0.0: si470x_get_scratch: si470x_get_report returned -71
[  400.978094][ T6274] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -5
[  401.086863][ T6274] usb 6-1: USB disconnect, device number 3
[  402.924911][ T6905] 8021q: adding VLAN 0 to HW filter on device batadv0
[  413.644779][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  413.651368][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  414.733377][ T6274] usb 6-1: new full-speed USB device number 4 using dummy_hcd
[  414.940786][ T6274] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  414.951230][ T6274] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  414.963719][ T6274] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10
[  414.979147][ T6274] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  414.990634][ T6274] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  415.183685][ T6274] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  415.193175][ T6274] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  415.201363][ T6274] usb 6-1: Product: syz
[  415.205915][ T6274] usb 6-1: Manufacturer: syz
[  415.210640][ T6274] usb 6-1: SerialNumber: syz
[  415.306445][ T6274] usb 6-1: config 0 descriptor??
[  415.555575][ T6274] radio-si470x 6-1:0.0: DeviceID=0x4f56 ChipID=0x4621
[  415.766628][ T6274] radio-si470x 6-1:0.0: si470x_get_report: usb_control_msg returned -71
[  415.775417][ T6274] radio-si470x 6-1:0.0: si470x_get_scratch: si470x_get_report returned -71
[  415.784923][ T6274] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -5
[  415.919534][ T6274] usb 6-1: USB disconnect, device number 4
[  416.366981][ T6905] veth0_vlan: entered promiscuous mode
[  416.459972][ T6905] veth1_vlan: entered promiscuous mode
[  416.742590][ T6905] veth0_macvtap: entered promiscuous mode
[  416.790856][ T6905] veth1_macvtap: entered promiscuous mode
[  416.971452][ T6905] batman_adv: batadv0: Interface activated: batadv_slave_0
[  417.069628][ T6905] batman_adv: batadv0: Interface activated: batadv_slave_1
[  417.169732][   T60] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  417.247673][   T60] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  417.287675][   T60] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  417.364607][ T3457] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  418.546643][   T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  418.569036][   T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  418.578644][   T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  418.590911][   T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  418.602049][   T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  419.351390][ T7063] lo speed is unknown, defaulting to 1000
[  420.653933][ T5800] Bluetooth: hci6: command tx timeout
[  420.882878][  T165] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  421.008410][  T165] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  421.158145][  T165] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  421.208014][ T7063] chnl_net:caif_netlink_parms(): no params data found
[  421.285570][  T165] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  421.764794][  T165] bridge_slave_1: left allmulticast mode
[  421.770554][  T165] bridge_slave_1: left promiscuous mode
[  421.777636][  T165] bridge0: port 2(bridge_slave_1) entered disabled state
[  421.878994][  T165] bridge_slave_0: left allmulticast mode
[  421.884875][  T165] bridge_slave_0: left promiscuous mode
[  421.891078][  T165] bridge0: port 1(bridge_slave_0) entered disabled state
[  422.367143][  T165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  422.431397][  T165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  422.485959][  T165] bond0 (unregistering): Released all slaves
[  422.735917][ T5800] Bluetooth: hci6: command tx timeout
[  424.446839][  T165] hsr_slave_0: left promiscuous mode
[  424.454747][  T165] hsr_slave_1: left promiscuous mode
[  424.461738][  T165] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  424.469311][  T165] batman_adv: batadv0: Removing interface: batadv_slave_0
[  424.954227][ T5800] Bluetooth: hci6: command tx timeout
[  425.065292][  T165] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  425.072778][  T165] batman_adv: batadv0: Removing interface: batadv_slave_1
[  425.380991][  T165] veth1_macvtap: left promiscuous mode
[  425.386814][  T165] veth0_macvtap: left promiscuous mode
[  425.392502][  T165] veth1_vlan: left promiscuous mode
[  425.398018][  T165] veth0_vlan: left promiscuous mode
[  425.728009][   T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  425.737661][   T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  425.746758][   T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  425.759277][   T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  425.770000][   T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  426.578239][  T165] team0 (unregistering): Port device team_slave_1 removed
[  426.684572][  T165] team0 (unregistering): Port device team_slave_0 removed
[  426.973483][   T51] Bluetooth: hci6: command tx timeout
[  427.141727][ T7101] lo speed is unknown, defaulting to 1000
[  427.735899][ T7063] bridge0: port 1(bridge_slave_0) entered blocking state
[  427.743738][ T7063] bridge0: port 1(bridge_slave_0) entered disabled state
[  427.751199][ T7063] bridge_slave_0: entered allmulticast mode
[  427.759511][ T7063] bridge_slave_0: entered promiscuous mode
[  427.861985][   T51] Bluetooth: hci5: command tx timeout
[  427.991444][ T7063] bridge0: port 2(bridge_slave_1) entered blocking state
[  427.998954][ T7063] bridge0: port 2(bridge_slave_1) entered disabled state
[  428.006601][ T7063] bridge_slave_1: entered allmulticast mode
[  428.014811][ T7063] bridge_slave_1: entered promiscuous mode
[  428.308016][ T7063] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  428.414426][ T7063] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  429.151574][ T7063] team0: Port device team_slave_0 added
[  429.239288][ T7063] team0: Port device team_slave_1 added
[  429.559521][ T6274] lo speed is unknown, defaulting to 1000
[  429.936393][   T51] Bluetooth: hci5: command tx timeout
[  430.312237][ T7063] batman_adv: batadv0: Adding interface: batadv_slave_0
[  430.319723][ T7063] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  430.355795][ T7063] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  430.400617][ T7101] chnl_net:caif_netlink_parms(): no params data found
[  431.237686][ T7063] batman_adv: batadv0: Adding interface: batadv_slave_1
[  431.245076][ T7063] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  431.276329][ T7063] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  431.405597][ T7133] affs: No valid root block on device nullb0
[  432.834549][   T51] Bluetooth: hci5: command tx timeout
[  433.181813][ T7063] hsr_slave_0: entered promiscuous mode
[  433.191535][ T7063] hsr_slave_1: entered promiscuous mode
[  434.160030][  T165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  434.168192][  T165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  434.501874][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  434.509933][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  434.901920][   T51] Bluetooth: hci5: command tx timeout
[  437.466112][ T7063] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  437.559352][ T7063] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  437.641793][ T7063] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  437.738140][ T7063] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  438.367628][ T7101] bridge0: port 1(bridge_slave_0) entered blocking state
[  438.375842][ T7101] bridge0: port 1(bridge_slave_0) entered disabled state
[  438.383665][ T7101] bridge_slave_0: entered allmulticast mode
[  438.391704][ T7101] bridge_slave_0: entered promiscuous mode
[  438.544745][ T7101] bridge0: port 2(bridge_slave_1) entered blocking state
[  438.552112][ T7101] bridge0: port 2(bridge_slave_1) entered disabled state
[  438.560384][ T7101] bridge_slave_1: entered allmulticast mode
[  438.568635][ T7101] bridge_slave_1: entered promiscuous mode
[  439.191450][ T7101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  440.207021][ T7101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  440.831713][ T7063] 8021q: adding VLAN 0 to HW filter on device bond0
[  441.001865][ T7063] 8021q: adding VLAN 0 to HW filter on device team0
[  441.106941][ T3836] bridge0: port 1(bridge_slave_0) entered blocking state
[  441.114361][ T3836] bridge0: port 1(bridge_slave_0) entered forwarding state
[  441.245663][ T3836] bridge0: port 2(bridge_slave_1) entered blocking state
[  441.253312][ T3836] bridge0: port 2(bridge_slave_1) entered forwarding state
[  441.647922][ T7101] team0: Port device team_slave_0 added
[  441.982876][ T7101] team0: Port device team_slave_1 added
[  442.174268][ T7191] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  444.826229][ T7101] batman_adv: batadv0: Adding interface: batadv_slave_0
[  444.833429][ T7101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  444.859693][ T7101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  445.210517][ T7101] batman_adv: batadv0: Adding interface: batadv_slave_1
[  445.218897][ T7101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  445.245352][ T7101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  445.834278][ T7101] hsr_slave_0: entered promiscuous mode
[  445.842580][ T7101] hsr_slave_1: entered promiscuous mode
[  445.850352][ T7101] debugfs: 'hsr0' already exists in 'hsr'
[  445.856302][ T7101] Cannot create hsr debugfs directory
[  445.933783][ T7063] 8021q: adding VLAN 0 to HW filter on device batadv0
[  446.367472][ T7063] veth0_vlan: entered promiscuous mode
[  446.494855][ T7063] veth1_vlan: entered promiscuous mode
[  446.784158][ T7063] veth0_macvtap: entered promiscuous mode
[  446.880155][ T7063] veth1_macvtap: entered promiscuous mode
[  447.033318][ T7063] batman_adv: batadv0: Interface activated: batadv_slave_0
[  447.156859][ T7063] batman_adv: batadv0: Interface activated: batadv_slave_1
[  447.446203][   T14] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  447.562023][   T14] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  447.620141][   T14] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  447.672418][   T14] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  447.906176][ T7101] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  452.063820][ T7101] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  452.383289][ T6274] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[  452.434683][ T7101] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  452.566903][ T7101] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  452.633259][ T6274] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  452.643846][ T6274] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  452.660184][ T6274] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10
[  452.673668][ T6274] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  452.683853][ T6274] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  452.856075][ T6274] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  452.870177][ T6274] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  452.880111][ T6274] usb 5-1: Product: syz
[  452.884494][ T6274] usb 5-1: Manufacturer: syz
[  452.889166][ T6274] usb 5-1: SerialNumber: syz
[  453.095140][ T6274] usb 5-1: config 0 descriptor??
[  453.255275][ T7229] 8021q: adding VLAN 0 to HW filter on device batadv1
[  453.267698][ T7229] team0: Port device batadv1 added
[  453.340698][ T6274] radio-si470x 5-1:0.0: DeviceID=0x6465 ChipID=0x7669
[  453.629542][ T6274] radio-si470x 5-1:0.0: si470x_get_report: usb_control_msg returned -71
[  453.638125][ T6274] radio-si470x 5-1:0.0: si470x_get_scratch: si470x_get_report returned -71
[  453.647945][ T6274] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -5
[  453.972714][ T6274] usb 5-1: USB disconnect, device number 2
[  454.778540][ T7101] 8021q: adding VLAN 0 to HW filter on device bond0
[  454.969871][ T7101] 8021q: adding VLAN 0 to HW filter on device team0
[  455.085083][ T1885] bridge0: port 1(bridge_slave_0) entered blocking state
[  455.092382][ T1885] bridge0: port 1(bridge_slave_0) entered forwarding state
[  455.199840][ T1885] bridge0: port 2(bridge_slave_1) entered blocking state
[  455.207269][ T1885] bridge0: port 2(bridge_slave_1) entered forwarding state
[  455.397727][ T7101] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  455.409055][ T7101] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  455.777513][   T51] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  455.863247][   T51] Bluetooth: hci0: command 0x0c1a tx timeout
[  456.708693][ T7242] netlink: 28 bytes leftover after parsing attributes in process `syz.4.254'.
[  456.717849][ T7242] netlink: 28 bytes leftover after parsing attributes in process `syz.4.254'.
[  457.056925][ T5093] Bluetooth: hci2: command 0x0406 tx timeout
[  459.650812][ T7101] 8021q: adding VLAN 0 to HW filter on device batadv0
[  459.777452][   T51] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  459.789240][   T51] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  459.798564][   T51] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  459.830873][   T51] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  459.865484][   T51] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  460.119635][ T7101] veth0_vlan: entered promiscuous mode
[  460.216848][ T7101] veth1_vlan: entered promiscuous mode
[  460.389707][ T7255] lo speed is unknown, defaulting to 1000
[  460.729696][ T7101] veth0_macvtap: entered promiscuous mode
[  460.837718][ T7101] veth1_macvtap: entered promiscuous mode
[  461.011905][ T7101] batman_adv: batadv0: Interface activated: batadv_slave_0
[  461.092476][ T7101] batman_adv: batadv0: Interface activated: batadv_slave_1
[  461.624000][ T3457] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  461.793764][ T3457] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  461.802883][ T3457] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  461.818595][ T3457] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  462.021685][ T5093] Bluetooth: hci7: command tx timeout
[  462.929109][ T7255] chnl_net:caif_netlink_parms(): no params data found
[  464.098610][ T5093] Bluetooth: hci7: command tx timeout
[  465.085919][ T6274] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[  465.332428][ T6274] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  465.342829][ T6274] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  465.362496][ T6274] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10
[  465.375819][ T6274] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  465.386165][ T6274] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  465.530592][ T7255] bridge0: port 1(bridge_slave_0) entered blocking state
[  465.540202][ T7255] bridge0: port 1(bridge_slave_0) entered disabled state
[  465.549280][ T7255] bridge_slave_0: entered allmulticast mode
[  465.565510][ T7255] bridge_slave_0: entered promiscuous mode
[  465.611990][ T6274] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  465.622381][ T6274] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  465.631362][ T6274] usb 5-1: Product: syz
[  465.635728][ T6274] usb 5-1: Manufacturer: syz
[  465.640498][ T6274] usb 5-1: SerialNumber: syz
[  465.712162][ T7255] bridge0: port 2(bridge_slave_1) entered blocking state
[  465.719815][ T7255] bridge0: port 2(bridge_slave_1) entered disabled state
[  465.727572][ T7255] bridge_slave_1: entered allmulticast mode
[  465.736052][ T7255] bridge_slave_1: entered promiscuous mode
[  465.774722][ T6274] usb 5-1: config 0 descriptor??
[  465.889297][  T165] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  466.002106][ T6274] radio-si470x 5-1:0.0: DeviceID=0x6465 ChipID=0x7669
[  466.192820][ T5093] Bluetooth: hci7: command tx timeout
[  466.207263][ T6274] radio-si470x 5-1:0.0: si470x_get_report: usb_control_msg returned -71
[  466.216133][ T6274] radio-si470x 5-1:0.0: si470x_get_scratch: si470x_get_report returned -71
[  466.225518][ T6274] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -5
[  466.236133][ T4730] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  466.244428][ T4730] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  466.294490][ T6274] usb 5-1: USB disconnect, device number 3
[  466.332642][  T165] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  466.653145][  T165] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  466.735346][ T7255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  466.831329][ T7255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  467.086449][  T165] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  467.310671][ T3457] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  467.319151][ T3457] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  467.351774][ T7255] team0: Port device team_slave_0 added
[  467.466903][ T7255] team0: Port device team_slave_1 added
[  467.714522][  T165] bridge_slave_1: left allmulticast mode
[  467.720294][  T165] bridge_slave_1: left promiscuous mode
[  467.727273][  T165] bridge0: port 2(bridge_slave_1) entered disabled state
[  467.846975][  T165] bridge_slave_0: left allmulticast mode
[  467.852810][  T165] bridge_slave_0: left promiscuous mode
[  467.859305][  T165] bridge0: port 1(bridge_slave_0) entered disabled state
[  467.903525][   T11] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  468.133639][   T11] usb 5-1: Using ep0 maxpacket: 16
[  468.157471][   T11] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  468.168811][   T11] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  468.179076][   T11] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  468.192125][   T11] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  468.201616][   T11] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  468.273956][ T5093] Bluetooth: hci7: command tx timeout
[  468.328721][   T11] usb 5-1: config 0 descriptor??
[  468.672180][  T165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  468.776961][  T165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  468.862530][  T165] bond0 (unregistering): Released all slaves
[  468.963568][   T11] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0003/input/input6
[  469.118067][ T7255] batman_adv: batadv0: Adding interface: batadv_slave_0
[  469.125318][ T7255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  469.151672][ T7255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  469.224368][   T11] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[  469.428976][   T11] usb 5-1: USB disconnect, device number 4
[  469.779754][ T7255] batman_adv: batadv0: Adding interface: batadv_slave_1
[  469.787045][ T7255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  469.813503][ T7255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  469.982063][  T165] hsr_slave_0: left promiscuous mode
[  470.012639][  T165] hsr_slave_1: left promiscuous mode
[  470.021277][  T165] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  470.028969][  T165] batman_adv: batadv0: Removing interface: batadv_slave_0
[  470.057126][ T7298] fido_id[7298]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  470.144266][  T165] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  470.151749][  T165] batman_adv: batadv0: Removing interface: batadv_slave_1
[  470.295039][  T165] veth1_macvtap: left promiscuous mode
[  470.300662][  T165] veth0_macvtap: left promiscuous mode
[  470.414167][   T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  470.423035][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  470.429846][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  470.464738][   T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  470.473870][   T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  470.486256][   T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  470.496842][   T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  471.417611][  T165] team0 (unregistering): Port device team_slave_1 removed
[  471.439953][  T165] team0 (unregistering): Port device team_slave_0 removed
[  471.711962][   T11] lo speed is unknown, defaulting to 1000
[  471.718437][   T11] infiniband syz0: ib_query_port failed (-19)
[  472.235447][ T7255] hsr_slave_0: entered promiscuous mode
[  472.244396][ T7255] hsr_slave_1: entered promiscuous mode
[  472.251819][ T7255] debugfs: 'hsr0' already exists in 'hsr'
[  472.260007][ T7255] Cannot create hsr debugfs directory
[  472.604819][   T51] Bluetooth: hci1: command tx timeout
[  474.247194][ T7255] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  474.429036][ T7302] chnl_net:caif_netlink_parms(): no params data found
[  474.550700][ T7255] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  474.657177][   T51] Bluetooth: hci1: command tx timeout
[  476.174200][ T7255] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  476.274905][ T7255] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  476.670173][ T6544] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  476.678385][ T6544] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  476.743474][   T51] Bluetooth: hci1: command tx timeout
[  476.778472][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  476.786563][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  477.185791][   T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  477.401175][   T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  477.536355][   T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  477.727216][   T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  478.290725][   T12] bridge_slave_1: left allmulticast mode
[  478.299034][   T12] bridge_slave_1: left promiscuous mode
[  478.305473][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  478.444791][   T12] bridge_slave_0: left allmulticast mode
[  478.450626][   T12] bridge_slave_0: left promiscuous mode
[  478.457403][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  478.815560][   T51] Bluetooth: hci1: command tx timeout
[  479.392262][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  479.407477][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  479.477569][   T12] bond0 (unregistering): Released all slaves
[  480.421915][ T7302] bridge0: port 1(bridge_slave_0) entered blocking state
[  480.429459][ T7302] bridge0: port 1(bridge_slave_0) entered disabled state
[  480.437192][ T7302] bridge_slave_0: entered allmulticast mode
[  480.445526][ T7302] bridge_slave_0: entered promiscuous mode
[  480.489884][   T12] hsr_slave_0: left promiscuous mode
[  480.569882][   T12] hsr_slave_1: left promiscuous mode
[  480.579559][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  480.588155][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  480.687853][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  480.695519][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  480.801239][   T12] veth1_macvtap: left promiscuous mode
[  480.807838][   T12] veth0_macvtap: left promiscuous mode
[  480.814805][   T12] veth1_vlan: left promiscuous mode
[  480.820673][   T12] veth0_vlan: left promiscuous mode
[  481.760373][ T7368] cgroup: Unknown subsys name 'cpuset'
[  483.510154][   T12] team0 (unregistering): Port device batadv1 removed
[  483.967656][   T12] team0 (unregistering): Port device team_slave_1 removed
[  483.996623][   T12] team0 (unregistering): Port device team_slave_0 removed
[  484.241391][ T7302] bridge0: port 2(bridge_slave_1) entered blocking state
[  484.249353][ T7302] bridge0: port 2(bridge_slave_1) entered disabled state
[  484.257383][ T7302] bridge_slave_1: entered allmulticast mode
[  484.405676][ T7302] bridge_slave_1: entered promiscuous mode
[  484.737703][ T7255] 8021q: adding VLAN 0 to HW filter on device bond0
[  485.009976][ T7255] 8021q: adding VLAN 0 to HW filter on device team0
[  485.066209][ T7302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  485.231542][ T3472] bridge0: port 1(bridge_slave_0) entered blocking state
[  485.239034][ T3472] bridge0: port 1(bridge_slave_0) entered forwarding state
[  485.253003][ T3472] bridge0: port 2(bridge_slave_1) entered blocking state
[  485.260972][ T3472] bridge0: port 2(bridge_slave_1) entered forwarding state
[  485.389618][ T7255] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  485.401240][ T7255] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  485.681566][   T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  485.859341][ T7302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  486.079521][   T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  488.920694][ T7302] team0: Port device team_slave_0 added
[  488.961713][ T7302] team0: Port device team_slave_1 added
[  489.048372][   T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  489.352490][   T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  489.606775][ T7302] batman_adv: batadv0: Adding interface: batadv_slave_0
[  489.614830][ T7302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  489.647129][ T7302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  490.530848][ T7302] batman_adv: batadv0: Adding interface: batadv_slave_1
[  490.540656][ T7302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  490.574725][ T7302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  491.536561][   T12] bridge_slave_1: left allmulticast mode
[  491.542520][   T12] bridge_slave_1: left promiscuous mode
[  491.549160][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  491.561843][   T12] bridge_slave_0: left allmulticast mode
[  491.575351][   T12] bridge_slave_0: left promiscuous mode
[  491.582073][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  492.740488][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  492.759266][ T7420] loop2: detected capacity change from 0 to 164
[  492.789226][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  492.856954][   T12] bond0 (unregistering): Released all slaves
[  493.051592][ T7420] Unsupported NM flag settings (240)
[  493.137871][ T7302] hsr_slave_0: entered promiscuous mode
[  493.146444][ T7302] hsr_slave_1: entered promiscuous mode
[  493.154204][ T7302] debugfs: 'hsr0' already exists in 'hsr'
[  493.160015][ T7302] Cannot create hsr debugfs directory
[  493.191641][   T12] tipc: Left network mode
[  498.630113][ T7437] loop2: detected capacity change from 0 to 512
[  498.650002][ T7437] =======================================================
[  498.650002][ T7437] WARNING: The mand mount option has been deprecated and
[  498.650002][ T7437]          and is ignored by this kernel. Remove the mand
[  498.650002][ T7437]          option from the mount to silence this warning.
[  498.650002][ T7437] =======================================================
[  503.006856][ T7437] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  503.017326][ T7437] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR
[  503.017520][ T7437] EXT4-fs: failed to create workqueue
[  503.033972][ T7437] EXT4-fs (loop2): mount failed
[  503.526927][ T7255] 8021q: adding VLAN 0 to HW filter on device batadv0
[  504.889456][   T12] hsr_slave_0: left promiscuous mode
[  505.026122][   T12] hsr_slave_1: left promiscuous mode
[  505.035869][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  505.044217][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  506.692548][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  506.700628][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  507.044101][   T12] veth1_macvtap: left promiscuous mode
[  507.050025][   T12] veth0_macvtap: left promiscuous mode
[  507.056010][   T12] veth1_vlan: left promiscuous mode
[  507.061428][   T12] veth0_vlan: left promiscuous mode
[  507.925267][   T12] pim6reg (unregistering): left allmulticast mode
[  508.331300][   T12] team0 (unregistering): Port device team_slave_1 removed
[  508.470907][   T12] team0 (unregistering): Port device team_slave_0 removed
[  509.656714][ T7302] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  509.736241][ T7302] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  509.784404][ T7302] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  509.843919][ T7302] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  510.143164][ T7255] veth0_vlan: entered promiscuous mode
[  510.200690][ T7255] veth1_vlan: entered promiscuous mode
[  510.500691][ T7255] veth0_macvtap: entered promiscuous mode
[  510.593785][ T7255] veth1_macvtap: entered promiscuous mode
[  510.761509][ T7255] batman_adv: batadv0: Interface activated: batadv_slave_0
[  510.854833][ T7255] batman_adv: batadv0: Interface activated: batadv_slave_1
[  510.929269][ T7468] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  510.945795][   T35] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  511.133274][ T3457] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  511.166153][ T1109] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  511.194373][ T1109] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  512.449152][ T7479] loop2: detected capacity change from 0 to 1024
[  512.515352][ T7479] EXT4-fs: Ignoring removed orlov option
[  512.521365][ T7479] EXT4-fs: Ignoring removed nomblk_io_submit option
[  512.753529][ T7302] 8021q: adding VLAN 0 to HW filter on device bond0
[  512.858574][ T7479] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  513.012057][ T7479] fuse: Bad value for 'fd'
[  513.239289][ T7063] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  513.287543][ T7302] 8021q: adding VLAN 0 to HW filter on device team0
[  513.375747][ T7474] Bluetooth: hci4: command 0x0406 tx timeout
[  513.422349][ T7490] loop4: detected capacity change from 0 to 8
[  513.562630][ T7490] SQUASHFS error: Failed to read block 0x4de: -5
[  513.570601][ T7490] SQUASHFS error: Failed to read block 0x4de: -5
[  513.579741][   T30] audit: type=1800 audit(1764806197.336:11): pid=7490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.329" name="file1" dev="loop4" ino=5 res=0 errno=0
[  513.654242][   T75] bridge0: port 1(bridge_slave_0) entered blocking state
[  513.661815][   T75] bridge0: port 1(bridge_slave_0) entered forwarding state
[  513.794637][   T75] bridge0: port 2(bridge_slave_1) entered blocking state
[  513.802672][   T75] bridge0: port 2(bridge_slave_1) entered forwarding state
[  515.888075][ T7302] 8021q: adding VLAN 0 to HW filter on device batadv0
[  515.917863][ T7512] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  516.700972][ T7522] loop4: detected capacity change from 0 to 8
[  516.888644][ T7522] SQUASHFS error: zlib decompression failed, data probably corrupt
[  516.897301][ T7522] SQUASHFS error: Failed to read block 0x9b: -5
[  516.903843][ T7522] SQUASHFS error: Unable to read metadata cache entry [99]
[  516.911105][ T7522] SQUASHFS error: Unable to read inode 0x127
[  518.832102][ T7302] veth0_vlan: entered promiscuous mode
[  518.960890][ T7302] veth1_vlan: entered promiscuous mode
[  525.732066][ T7302] veth0_macvtap: entered promiscuous mode
[  525.900193][ T7302] veth1_macvtap: entered promiscuous mode
[  526.220036][ T7302] batman_adv: batadv0: Interface activated: batadv_slave_0
[  526.323142][ T7302] batman_adv: batadv0: Interface activated: batadv_slave_1
[  526.437358][ T6548] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  526.538972][ T3836] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  526.605672][ T3836] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  526.659628][ T3836] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  533.477416][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  533.484281][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  533.949621][ T5093] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  533.976063][ T5093] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  534.047106][ T5093] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  534.060420][ T5093] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  534.084947][ T5093] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  534.620484][ T4843] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  534.950757][ T4843] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  535.177790][ T4843] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  535.478051][ T4843] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  535.583638][ T7474] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  535.592781][ T7474] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  535.604247][ T7474] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  535.623819][ T7474] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  535.683636][ T7569] loop2: detected capacity change from 0 to 7
[  535.718384][ T7569]  loop2:
[  535.721540][ T7569] loop2: partition table partially beyond EOD, truncated
[  535.739402][ T7474] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  535.749214][ T4843] bridge_slave_1: left allmulticast mode
[  535.755238][ T4843] bridge_slave_1: left promiscuous mode
[  535.761799][ T4843] bridge0: port 2(bridge_slave_1) entered disabled state
[  535.778886][ T4843] bridge_slave_0: left allmulticast mode
[  535.784875][ T4843] bridge_slave_0: left promiscuous mode
[  535.791342][ T4843] bridge0: port 1(bridge_slave_0) entered disabled state
[  536.183940][ T7474] Bluetooth: hci0: command tx timeout
[  536.906387][ T4843] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  536.940430][ T4843] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  536.989360][ T4843] bond0 (unregistering): Released all slaves
[  537.845492][ T7560] chnl_net:caif_netlink_parms(): no params data found
[  537.861320][ T7474] Bluetooth: hci2: command tx timeout
[  538.187684][ T4843] hsr_slave_0: left promiscuous mode
[  538.205466][ T4843] hsr_slave_1: left promiscuous mode
[  538.213354][ T4843] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  538.220904][ T4843] batman_adv: batadv0: Removing interface: batadv_slave_0
[  538.257648][ T7474] Bluetooth: hci0: command tx timeout
[  538.287135][ T4843] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  538.295423][ T4843] batman_adv: batadv0: Removing interface: batadv_slave_1
[  538.349722][ T4843] veth1_macvtap: left promiscuous mode
[  538.355811][ T4843] veth0_macvtap: left promiscuous mode
[  538.361656][ T4843] veth1_vlan: left promiscuous mode
[  538.372060][ T4843] veth0_vlan: left promiscuous mode
[  539.500974][ T4843] team0 (unregistering): Port device team_slave_1 removed
[  539.569799][ T4843] team0 (unregistering): Port device team_slave_0 removed
[  539.698339][ T5881] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  539.934556][ T7474] Bluetooth: hci2: command tx timeout
[  539.957513][ T5881] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  539.967809][ T5881] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00
[  539.977215][ T5881] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  540.101763][ T5881] usb 5-1: config 0 descriptor??
[  540.335262][ T7474] Bluetooth: hci0: command tx timeout
[  540.768090][ T5881] lg-g15 0003:046D:C222.0004: unknown main item tag 0x0
[  540.775551][ T5881] lg-g15 0003:046D:C222.0004: unknown main item tag 0x0
[  540.782727][ T5881] lg-g15 0003:046D:C222.0004: unknown main item tag 0x0
[  540.790069][ T5881] lg-g15 0003:046D:C222.0004: unknown main item tag 0x0
[  540.797340][ T5881] lg-g15 0003:046D:C222.0004: unknown main item tag 0x0
[  540.804853][ T5881] lg-g15 0003:046D:C222.0004: unknown main item tag 0x0
[  540.812159][ T5881] lg-g15 0003:046D:C222.0004: unknown main item tag 0x0
[  540.878004][ T7597] loop3: detected capacity change from 0 to 4096
[  540.902579][ T7597] EXT4-fs: Mount option(s) incompatible with ext2
[  540.925073][ T5881] lg-g15 0003:046D:C222.0004: hidraw0: USB HID v10.00 Device [HID 046d:c222] on usb-dummy_hcd.4-1/input0
[  541.064951][ T5881] usb 5-1: USB disconnect, device number 5
[  541.082635][   T30] audit: type=1326 audit(1764806224.826:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7593 comm="syz.3.348" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fac8598f749 code=0x0
[  541.137091][ T4843] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  541.305113][ T7571] chnl_net:caif_netlink_parms(): no params data found
[  541.387835][ T4843] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  541.636325][ T7604] fido_id[7604]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  541.669920][ T4843] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  541.895880][ T7560] bridge0: port 1(bridge_slave_0) entered blocking state
[  541.903846][ T7560] bridge0: port 1(bridge_slave_0) entered disabled state
[  541.911557][ T7560] bridge_slave_0: entered allmulticast mode
[  541.921054][ T7560] bridge_slave_0: entered promiscuous mode
[  542.028888][ T5800] Bluetooth: hci2: command tx timeout
[  542.082859][ T4843] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  542.207845][ T7560] bridge0: port 2(bridge_slave_1) entered blocking state
[  542.219348][ T7560] bridge0: port 2(bridge_slave_1) entered disabled state
[  542.227259][ T7560] bridge_slave_1: entered allmulticast mode
[  542.236723][ T7560] bridge_slave_1: entered promiscuous mode
[  542.415165][ T5800] Bluetooth: hci0: command tx timeout
[  542.547221][ T4843] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  542.687259][ T4843] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  542.753095][ T7560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  542.839910][ T4843] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  542.977852][ T7560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  543.045723][ T7619] loop3: detected capacity change from 0 to 8
[  543.090593][ T4843] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  543.600328][ T7560] team0: Port device team_slave_0 added
[  543.666319][ T7571] bridge0: port 1(bridge_slave_0) entered blocking state
[  543.676076][ T7571] bridge0: port 1(bridge_slave_0) entered disabled state
[  543.684527][ T7571] bridge_slave_0: entered allmulticast mode
[  543.699569][ T7571] bridge_slave_0: entered promiscuous mode
[  543.718155][ T7560] team0: Port device team_slave_1 added
[  543.942804][ T7631] loop2: detected capacity change from 0 to 1024
[  544.441130][ T5800] Bluetooth: hci2: command tx timeout
[  544.441771][ T5093] Bluetooth: hci6: command 0x0406 tx timeout
[  546.843807][ T7571] bridge0: port 2(bridge_slave_1) entered blocking state
[  546.851315][ T7571] bridge0: port 2(bridge_slave_1) entered disabled state
[  546.859578][ T7571] bridge_slave_1: entered allmulticast mode
[  546.875144][ T7571] bridge_slave_1: entered promiscuous mode
[  546.887586][ T7560] batman_adv: batadv0: Adding interface: batadv_slave_0
[  546.895329][ T7560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  546.897758][   T30] audit: type=1800 audit(1764806230.296:13): pid=7632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.364" name="bus" dev="loop2" ino=27 res=0 errno=0
[  546.921763][ T7560] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  546.972579][ T3457] hfsplus: b-tree write err: -5, ino 4
[  547.138379][ T4843] bridge_slave_1: left allmulticast mode
[  547.144325][ T4843] bridge_slave_1: left promiscuous mode
[  547.150882][ T4843] bridge0: port 2(bridge_slave_1) entered disabled state
[  547.454998][ T4843] bridge_slave_0: left allmulticast mode
[  547.460847][ T4843] bridge_slave_0: left promiscuous mode
[  547.467453][ T4843] bridge0: port 1(bridge_slave_0) entered disabled state
[  547.610686][ T4843] bridge_slave_1: left allmulticast mode
[  547.616696][ T4843] bridge_slave_1: left promiscuous mode
[  547.623357][ T4843] bridge0: port 2(bridge_slave_1) entered disabled state
[  547.801048][ T4843] bridge_slave_0: left allmulticast mode
[  547.807057][ T4843] bridge_slave_0: left promiscuous mode
[  547.813725][ T4843] bridge0: port 1(bridge_slave_0) entered disabled state
[  548.380521][ T7643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.367'.
[  549.357364][ T7474] Bluetooth: hci5: command 0x0406 tx timeout
[  550.619187][ T7654] loop4: detected capacity change from 0 to 1024
[  550.707678][ T7654] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  551.024972][ T4843] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  551.046069][ T4843] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  551.067483][ T6905] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  551.084408][ T4843] bond0 (unregistering): Released all slaves
[  551.356075][ T4843] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  551.380243][ T4843] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  551.404925][ T4843] bond0 (unregistering): Released all slaves
[  551.426246][ T7560] batman_adv: batadv0: Adding interface: batadv_slave_1
[  551.433593][ T7560] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  551.460049][ T7560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  551.751486][ T7571] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  551.825938][ T4843] hsr_slave_0: left promiscuous mode
[  551.857187][ T4843] hsr_slave_1: left promiscuous mode
[  551.865202][ T4843] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  551.872768][ T4843] batman_adv: batadv0: Removing interface: batadv_slave_0
[  551.912385][ T4843] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  551.920363][ T4843] batman_adv: batadv0: Removing interface: batadv_slave_1
[  552.004057][ T4843] hsr_slave_0: left promiscuous mode
[  552.012342][ T4843] hsr_slave_1: left promiscuous mode
[  552.020189][ T4843] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  552.027841][ T4843] batman_adv: batadv0: Removing interface: batadv_slave_0
[  552.057734][ T4843] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  552.066928][ T4843] batman_adv: batadv0: Removing interface: batadv_slave_1
[  552.194537][ T4843] veth1_macvtap: left promiscuous mode
[  552.200269][ T4843] veth0_macvtap: left promiscuous mode
[  552.207071][ T4843] veth1_vlan: left promiscuous mode
[  552.212791][ T4843] veth0_vlan: left promiscuous mode
[  552.222750][ T4843] veth1_macvtap: left promiscuous mode
[  552.228619][ T4843] veth0_macvtap: left promiscuous mode
[  552.234648][ T4843] veth1_vlan: left promiscuous mode
[  552.240229][ T4843] veth0_vlan: left promiscuous mode
[  555.951979][ T7684] loop2: detected capacity change from 0 to 1024
[  556.189422][ T7684] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  556.203692][ T7684] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  556.445761][ T4843] team0 (unregistering): Port device team_slave_1 removed
[  556.475893][ T4843] team0 (unregistering): Port device team_slave_0 removed
[  556.605238][ T7695] loop4: detected capacity change from 0 to 1024
[  556.738508][ T7695] EXT4-fs: Ignoring removed nomblk_io_submit option
[  556.910839][ T7695] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  557.071568][ T6905] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  557.117725][ T4843] team0 (unregistering): Port device team_slave_1 removed
[  557.160594][ T7063] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  557.200451][ T4843] team0 (unregistering): Port device team_slave_0 removed
[  557.619472][ T7571] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  558.155021][ T7705] ieee802154 phy0 wpan0: encryption failed: -22
[  558.159161][ T7560] hsr_slave_0: entered promiscuous mode
[  558.171278][ T7560] hsr_slave_1: entered promiscuous mode
[  558.179763][ T7560] debugfs: 'hsr0' already exists in 'hsr'
[  558.186001][ T7560] Cannot create hsr debugfs directory
[  558.199624][ T7571] team0: Port device team_slave_0 added
[  558.290957][ T7571] team0: Port device team_slave_1 added
[  565.201849][ T7711] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  565.260495][ T7571] batman_adv: batadv0: Adding interface: batadv_slave_0
[  565.268146][ T7571] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  565.296182][ T7571] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  565.615173][ T7571] batman_adv: batadv0: Adding interface: batadv_slave_1
[  565.622483][ T7571] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  565.648798][ T7714] loop2: detected capacity change from 0 to 512
[  565.658126][ T7571] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  565.744394][ T7714] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  565.758143][ T7714] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  565.852149][ T7714] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  565.891890][ T7714] EXT4-fs (loop2): 1 truncate cleaned up
[  565.899856][ T7714] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  565.934917][   T30] audit: type=1800 audit(1764806249.696:14): pid=7714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.390" name="file2" dev="loop2" ino=16 res=0 errno=0
[  566.522163][ T7571] hsr_slave_0: entered promiscuous mode
[  566.535259][ T7571] hsr_slave_1: entered promiscuous mode
[  566.542727][ T7571] debugfs: 'hsr0' already exists in 'hsr'
[  566.548813][ T7571] Cannot create hsr debugfs directory
[  567.106314][ T7063] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  567.406116][ T7721] loop2: detected capacity change from 0 to 128
[  568.832747][ T7560] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  569.844749][ T7560] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  570.140940][   T49] kworker/u8:3: attempt to access beyond end of device
[  570.140940][   T49] loop2: rw=1, sector=129, nr_sectors = 8 limit=128
[  570.154965][   T49] kworker/u8:3: attempt to access beyond end of device
[  570.154965][   T49] loop2: rw=1, sector=145, nr_sectors = 8 limit=128
[  570.169024][   T49] kworker/u8:3: attempt to access beyond end of device
[  570.169024][   T49] loop2: rw=1, sector=161, nr_sectors = 8 limit=128
[  570.183045][   T49] kworker/u8:3: attempt to access beyond end of device
[  570.183045][   T49] loop2: rw=1, sector=177, nr_sectors = 8 limit=128
[  570.196877][   T49] kworker/u8:3: attempt to access beyond end of device
[  570.196877][   T49] loop2: rw=1, sector=193, nr_sectors = 8 limit=128
[  570.213943][   T49] kworker/u8:3: attempt to access beyond end of device
[  570.213943][   T49] loop2: rw=1, sector=209, nr_sectors = 8 limit=128
[  570.228637][   T49] kworker/u8:3: attempt to access beyond end of device
[  570.228637][   T49] loop2: rw=1, sector=225, nr_sectors = 8 limit=128
[  570.242299][   T49] kworker/u8:3: attempt to access beyond end of device
[  570.242299][   T49] loop2: rw=1, sector=241, nr_sectors = 8 limit=128
[  570.256107][   T49] kworker/u8:3: attempt to access beyond end of device
[  570.256107][   T49] loop2: rw=1, sector=257, nr_sectors = 8 limit=128
[  570.269799][   T49] kworker/u8:3: attempt to access beyond end of device
[  570.269799][   T49] loop2: rw=1, sector=273, nr_sectors = 8 limit=128
[  570.316231][ T7560] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  570.359108][ T7560] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  570.602606][ T7731] ieee802154 phy0 wpan0: encryption failed: -22
[  570.848453][ T7571] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  570.958431][ T7571] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  571.044740][ T7571] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  571.117706][ T7571] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  571.527185][ T7560] 8021q: adding VLAN 0 to HW filter on device bond0
[  571.717848][ T7560] 8021q: adding VLAN 0 to HW filter on device team0
[  571.801330][   T75] bridge0: port 1(bridge_slave_0) entered blocking state
[  571.808861][   T75] bridge0: port 1(bridge_slave_0) entered forwarding state
[  571.884449][   T75] bridge0: port 2(bridge_slave_1) entered blocking state
[  571.891898][   T75] bridge0: port 2(bridge_slave_1) entered forwarding state
[  572.091524][ T7742] loop2: detected capacity change from 0 to 1024
[  572.180243][ T7742] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  572.207522][ T7571] 8021q: adding VLAN 0 to HW filter on device bond0
[  572.232000][ T7742] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  572.267911][ T7742] EXT4-fs (loop2): orphan cleanup on readonly fs
[  572.307896][ T7742] EXT4-fs error (device loop2): ext4_free_blocks:6706: comm syz.2.399: Freeing blocks not in datazone - block = 0, count = 4096
[  572.382246][ T7571] 8021q: adding VLAN 0 to HW filter on device team0
[  572.406498][ T7742] EXT4-fs (loop2): 1 orphan inode deleted
[  572.415853][ T7742] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  572.469566][ T6548] bridge0: port 1(bridge_slave_0) entered blocking state
[  572.477146][ T6548] bridge0: port 1(bridge_slave_0) entered forwarding state
[  572.551345][ T6548] bridge0: port 2(bridge_slave_1) entered blocking state
[  572.559031][ T6548] bridge0: port 2(bridge_slave_1) entered forwarding state
[  572.831884][ T7571] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  572.870814][ T7063] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  580.493299][ T7571] 8021q: adding VLAN 0 to HW filter on device batadv0
[  580.509584][ T7760] loop4: detected capacity change from 0 to 128
[  580.626087][ T7760] vfat: Unknown parameter '�vqU��
[  580.626087][ T7760] ��޷�g:[�&
/y�����kxG���鵞�y��;kY��VHc��0���JYX��L�����.����TB-����H�O�]Z����SK��[z�+�j`��̠���"��ޖ?C5�@��"��T�-�T�)gd�ԺY�ݼ�ā1͸mQp#���R�7��'���{Wt���'
[  580.827097][ T7474] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  580.836287][ T7474] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  580.858542][ T7474] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  580.878022][ T7474] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  580.899090][ T7474] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  581.892410][ T7763] chnl_net:caif_netlink_parms(): no params data found
[  581.914456][ T7774] ieee802154 phy0 wpan0: encryption failed: -22
[  582.620234][ T7784] loop4: detected capacity change from 0 to 512
[  582.775601][ T7784] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  582.789651][ T7784] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  582.986903][ T7474] Bluetooth: hci1: command tx timeout
[  583.041432][ T7571] veth0_vlan: entered promiscuous mode
[  583.300768][ T6905] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  583.301691][ T7571] veth1_vlan: entered promiscuous mode
[  583.435483][ T7763] bridge0: port 1(bridge_slave_0) entered blocking state
[  583.443258][ T7763] bridge0: port 1(bridge_slave_0) entered disabled state
[  583.450941][ T7763] bridge_slave_0: entered allmulticast mode
[  583.464698][ T7763] bridge_slave_0: entered promiscuous mode
[  583.626816][ T7794] loop3: detected capacity change from 0 to 512
[  583.796901][ T7571] veth0_macvtap: entered promiscuous mode
[  583.957599][ T7794] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  584.002876][ T7571] veth1_macvtap: entered promiscuous mode
[  584.213558][ T7763] bridge0: port 2(bridge_slave_1) entered blocking state
[  584.221056][ T7763] bridge0: port 2(bridge_slave_1) entered disabled state
[  584.229162][ T7763] bridge_slave_1: entered allmulticast mode
[  584.244513][ T7763] bridge_slave_1: entered promiscuous mode
[  584.277389][ T7571] batman_adv: batadv0: Interface activated: batadv_slave_0
[  584.323577][ T7571] batman_adv: batadv0: Interface activated: batadv_slave_1
[  584.339568][   T35] bridge_slave_1: left allmulticast mode
[  584.347143][   T35] bridge_slave_1: left promiscuous mode
[  584.353807][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[  584.847673][   T35] bridge_slave_0: left allmulticast mode
[  584.854943][   T35] bridge_slave_0: left promiscuous mode
[  584.861510][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[  585.064365][ T7474] Bluetooth: hci1: command tx timeout
[  585.200015][ T7101] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000.
[  586.160463][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  586.236254][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  586.288415][   T35] bond0 (unregistering): Released all slaves
[  586.409359][   T75] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  586.529341][   T75] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  586.678903][ T7763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  586.754553][   T75] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  586.795679][   T35] hsr_slave_0: left promiscuous mode
[  586.805597][   T35] hsr_slave_1: left promiscuous mode
[  586.813315][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[  586.855116][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[  587.137813][ T7474] Bluetooth: hci1: command tx timeout
[  587.638988][ T7815] process 'syz.2.416' launched './file0' with NULL argv: empty string added
[  587.739637][   T35] team0 (unregistering): Port device team_slave_1 removed
[  587.778804][   T35] team0 (unregistering): Port device team_slave_0 removed
[  594.124350][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  594.130954][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  594.177768][ T7474] Bluetooth: hci1: command tx timeout
[  594.231374][ T7763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  594.393579][   T75] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  594.878507][ T7763] team0: Port device team_slave_0 added
[  594.971638][ T7763] team0: Port device team_slave_1 added
[  595.267252][ T7763] batman_adv: batadv0: Adding interface: batadv_slave_0
[  595.275342][ T7763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  595.302391][ T7763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  595.492594][ T7763] batman_adv: batadv0: Adding interface: batadv_slave_1
[  595.499883][ T7763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  595.530318][ T7763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  595.761137][ T7826] binder: 7824:7826 ioctl c018620c 200000000340 returned -1
[  595.891702][ T5093] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  595.909025][ T5093] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  595.919831][ T5093] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  595.941869][ T5093] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  595.970539][ T7763] hsr_slave_0: entered promiscuous mode
[  595.980278][ T7763] hsr_slave_1: entered promiscuous mode
[  595.988840][ T7763] debugfs: 'hsr0' already exists in 'hsr'
[  595.994833][ T7763] Cannot create hsr debugfs directory
[  596.005162][ T5093] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  596.413451][ T5093] Bluetooth: hci5: unexpected event for opcode 0x200b
[  596.836547][ T7833] ������: renamed from vlan0 (while UP)
[  597.617226][ T7827] chnl_net:caif_netlink_parms(): no params data found
[  597.731379][ T3472] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  597.987875][ T5093] Bluetooth: hci6: unexpected event for opcode 0x1804
[  598.030882][ T3472] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  598.094140][ T5093] Bluetooth: hci0: command tx timeout
[  598.122438][ T7823] udevd[7823]: failed to send result of seq 19030 to main daemon: Connection refused
[  598.217237][ T3472] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  598.276981][ T7763] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  598.337296][ T3472] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  598.444705][ T7763] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  598.525270][ T7763] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  598.661079][ T7763] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  598.964414][ T3472] bridge_slave_1: left allmulticast mode
[  598.970250][ T3472] bridge_slave_1: left promiscuous mode
[  598.979984][ T3472] bridge0: port 2(bridge_slave_1) entered disabled state
[  599.020949][ T3472] bridge_slave_0: left allmulticast mode
[  599.027979][ T3472] bridge_slave_0: left promiscuous mode
[  599.034582][ T3472] bridge0: port 1(bridge_slave_0) entered disabled state
[  599.652187][ T3472] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  599.710679][ T3472] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  599.738800][ T3472] bond0 (unregistering): Released all slaves
[  599.761345][ T7827] bridge0: port 1(bridge_slave_0) entered blocking state
[  599.769120][ T7827] bridge0: port 1(bridge_slave_0) entered disabled state
[  599.777095][ T7827] bridge_slave_0: entered allmulticast mode
[  599.786319][ T7827] bridge_slave_0: entered promiscuous mode
[  606.210038][ T7827] bridge0: port 2(bridge_slave_1) entered blocking state
[  606.210571][ T5093] Bluetooth: hci0: command tx timeout
[  606.217872][ T7827] bridge0: port 2(bridge_slave_1) entered disabled state
[  606.225528][ T5800] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0
[  606.231066][ T7827] bridge_slave_1: entered allmulticast mode
[  606.239119][ T5800] Bluetooth: hci6: Injecting HCI hardware error event
[  606.241363][ T5093] Bluetooth: hci6: hardware error 0x00
[  606.249369][ T7827] bridge_slave_1: entered promiscuous mode
[  606.448620][ T7827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  606.519113][ T3472] hsr_slave_0: left promiscuous mode
[  606.553157][ T3472] hsr_slave_1: left promiscuous mode
[  606.560886][ T3472] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  606.573496][ T3472] batman_adv: batadv0: Removing interface: batadv_slave_0
[  606.612010][ T3472] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  606.619834][ T3472] batman_adv: batadv0: Removing interface: batadv_slave_1
[  606.673421][ T3472] veth1_macvtap: left promiscuous mode
[  606.679158][ T3472] veth0_macvtap: left promiscuous mode
[  606.685403][ T3472] veth1_vlan: left promiscuous mode
[  606.690942][ T3472] veth0_vlan: left promiscuous mode
[  608.026552][ T3472] team0 (unregistering): Port device team_slave_1 removed
[  608.071424][ T3472] team0 (unregistering): Port device team_slave_0 removed
[  608.304781][ T7474] Bluetooth: hci0: command tx timeout
[  608.334964][ T5093] Bluetooth: hci6: Opcode 0x0c03 failed: -110
[  608.801995][ T7827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  608.812855][ T7866] ������: renamed from vlan0 (while UP)
[  609.198800][ T7827] team0: Port device team_slave_0 added
[  609.279201][ T7827] team0: Port device team_slave_1 added
[  609.567812][ T7827] batman_adv: batadv0: Adding interface: batadv_slave_0
[  609.577344][ T7827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  609.607289][ T7827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  609.819908][ T7827] batman_adv: batadv0: Adding interface: batadv_slave_1
[  609.828437][ T7827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  609.858878][ T7827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  610.054967][ T7763] 8021q: adding VLAN 0 to HW filter on device bond0
[  610.301698][ T7763] 8021q: adding VLAN 0 to HW filter on device team0
[  610.336899][ T5093] Bluetooth: hci0: command tx timeout
[  610.863953][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[  610.871624][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[  610.894687][ T7827] hsr_slave_0: entered promiscuous mode
[  610.904658][ T7827] hsr_slave_1: entered promiscuous mode
[  610.915367][ T7827] debugfs: 'hsr0' already exists in 'hsr'
[  610.922668][ T7827] Cannot create hsr debugfs directory
[  610.971950][   T60] bridge0: port 2(bridge_slave_1) entered blocking state
[  610.979969][   T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[  611.869539][ T7896] ������: renamed from vlan0 (while UP)
[  611.968551][ T7901] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  612.858374][ T7827] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  612.949212][ T7827] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  613.039352][ T7827] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  613.083252][ T5093] Bluetooth: hci4: unexpected event for opcode 0x080d
[  613.109390][ T7827] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  613.308380][ T7763] 8021q: adding VLAN 0 to HW filter on device batadv0
[  613.373846][ T5093] Bluetooth: hci4: unexpected event for opcode 0x200b
[  613.475630][ T7917] loop3: detected capacity change from 0 to 1764
[  613.937448][ T7827] 8021q: adding VLAN 0 to HW filter on device bond0
[  614.229231][ T7763] veth0_vlan: entered promiscuous mode
[  614.368357][ T7763] veth1_vlan: entered promiscuous mode
[  614.502073][ T7827] 8021q: adding VLAN 0 to HW filter on device team0
[  614.566413][  T165] bridge0: port 1(bridge_slave_0) entered blocking state
[  614.574032][  T165] bridge0: port 1(bridge_slave_0) entered forwarding state
[  614.589576][  T165] bridge0: port 2(bridge_slave_1) entered blocking state
[  614.597108][  T165] bridge0: port 2(bridge_slave_1) entered forwarding state
[  614.783974][ T7932] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  614.795303][ T7827] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  614.806465][ T7827] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  614.901404][ T7763] veth0_macvtap: entered promiscuous mode
[  615.553318][ T7763] veth1_macvtap: entered promiscuous mode
[  615.783619][ T7763] batman_adv: batadv0: Interface activated: batadv_slave_0
[  615.856980][ T7763] batman_adv: batadv0: Interface activated: batadv_slave_1
[  615.954389][ T6544] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  616.001207][ T6544] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  616.057797][ T6544] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  616.100404][ T6544] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  616.398052][ T5093] Bluetooth: hci4: unexpected event for opcode 0x200b
[  616.517347][ T5881] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  616.670351][ T7827] 8021q: adding VLAN 0 to HW filter on device batadv0
[  616.731055][ T5881] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  616.741939][ T5881] usb 4-1: config 0 has no interfaces?
[  616.748132][ T5881] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00
[  616.757544][ T5881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  616.789270][ T7963] loop2: detected capacity change from 0 to 512
[  616.825713][ T5881] usb 4-1: config 0 descriptor??
[  617.291575][ T7963] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.458: bg 0: block 248: padding at end of block bitmap is not set
[  617.467139][ T7963] Quota error (device loop2): write_blk: dquota write failed
[  617.475557][ T7963] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  617.486137][ T7963] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.458: Failed to acquire dquot type 1
[  617.525480][ T7976] loop3: detected capacity change from 0 to 128
[  617.552316][ T7963] EXT4-fs (loop2): 1 truncate cleaned up
[  617.560496][ T7963] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  617.573845][ T7963] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  618.281139][ T7976] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  618.318747][ T7976] ext4 filesystem being mounted at /65/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  618.398959][ T7982] netlink: 'syz.4.460': attribute type 12 has an invalid length.
[  621.101331][ T7063] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 12
[  621.127012][ T7063] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 12
[  621.267409][ T5874] usb 4-1: USB disconnect, device number 3
[  621.319902][ T7101] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  621.746886][ T6544] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  621.790534][ T7995] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  621.868466][ T6544] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  622.050406][ T6544] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  622.581335][ T7827] veth0_vlan: entered promiscuous mode
[  622.614982][ T7827] veth1_vlan: entered promiscuous mode
[  622.680296][ T6544] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  622.741825][ T7984] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  622.753837][   T71] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-5
[  622.763729][   T71] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:5: Failed to release dquot type 1
[  622.939846][ T7827] veth0_macvtap: entered promiscuous mode
[  622.996972][ T7827] veth1_macvtap: entered promiscuous mode
[  623.086339][ T7827] batman_adv: batadv0: Interface activated: batadv_slave_0
[  623.110923][ T6544] bridge_slave_1: left allmulticast mode
[  623.117133][ T6544] bridge_slave_1: left promiscuous mode
[  623.123666][ T6544] bridge0: port 2(bridge_slave_1) entered disabled state
[  623.191408][ T6544] bridge_slave_0: left allmulticast mode
[  623.197472][ T6544] bridge_slave_0: left promiscuous mode
[  623.204239][ T6544] bridge0: port 1(bridge_slave_0) entered disabled state
[  623.837560][ T6544] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  623.860269][ T6544] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  623.884093][ T6544] bond0 (unregistering): Released all slaves
[  623.983213][ T7827] batman_adv: batadv0: Interface activated: batadv_slave_1
[  624.057015][ T1306] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  624.128891][ T1306] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  624.142450][ T3457] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  624.236962][ T1306] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  624.427930][ T6544] hsr_slave_0: left promiscuous mode
[  624.455224][ T6544] hsr_slave_1: left promiscuous mode
[  624.463199][ T6544] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  624.470760][ T6544] batman_adv: batadv0: Removing interface: batadv_slave_0
[  624.515684][ T6544] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  624.523674][ T6544] batman_adv: batadv0: Removing interface: batadv_slave_1
[  624.558949][ T6544] veth1_macvtap: left promiscuous mode
[  624.565191][ T6544] veth0_macvtap: left promiscuous mode
[  624.571040][ T6544] veth1_vlan: left promiscuous mode
[  624.579162][ T6544] veth0_vlan: left promiscuous mode
[  625.185289][ T7474] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  625.194832][ T7474] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  625.211245][ T7474] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  625.227537][ T7474] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  625.238490][ T7474] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  625.330849][   T30] audit: type=1326 audit(1764806309.086:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8025 comm="syz.4.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c18d8f749 code=0x7ffc0000
[  625.406801][ T6544] team0 (unregistering): Port device team_slave_1 removed
[  625.410234][   T30] audit: type=1326 audit(1764806309.116:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8025 comm="syz.4.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c18d8f749 code=0x7ffc0000
[  625.436925][   T30] audit: type=1326 audit(1764806309.126:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8025 comm="syz.4.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f2c18d8f749 code=0x7ffc0000
[  625.459610][   T30] audit: type=1326 audit(1764806309.126:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8025 comm="syz.4.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c18d8f749 code=0x7ffc0000
[  625.487232][ T6544] team0 (unregistering): Port device team_slave_0 removed
[  625.637391][ T8028] loop4: detected capacity change from 0 to 512
[  625.656284][ T8028] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  626.115597][ T8028] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  626.145212][ T8028] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.471: bg 0: block 248: padding at end of block bitmap is not set
[  626.170109][ T8028] Quota error (device loop4): write_blk: dquota write failed
[  626.178754][ T8028] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  626.189209][ T8028] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.471: Failed to acquire dquot type 1
[  626.230045][ T8028] EXT4-fs (loop4): 1 truncate cleaned up
[  626.237918][ T8028] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[  626.343444][ T5874] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  626.513192][ T5874] usb 4-1: Using ep0 maxpacket: 8
[  626.531779][ T5874] usb 4-1: config 252 has an invalid descriptor of length 0, skipping remainder of the config
[  626.538863][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  626.547977][ T5874] usb 4-1: config 252 has 0 interfaces, different from the descriptor's value: 1
[  626.550343][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  626.559542][ T5874] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  626.576180][ T5874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  626.647115][ T8028] syz.4.471 (8028) used greatest stack depth: 3104 bytes left
[  626.670797][ T6905] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  626.762310][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  626.771402][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  626.936494][ T8023] chnl_net:caif_netlink_parms(): no params data found
[  627.303189][ T7474] Bluetooth: hci2: command tx timeout
[  628.601320][ T8023] bridge0: port 1(bridge_slave_0) entered blocking state
[  628.613136][ T8023] bridge0: port 1(bridge_slave_0) entered disabled state
[  628.620714][ T8023] bridge_slave_0: entered allmulticast mode
[  628.629571][ T8023] bridge_slave_0: entered promiscuous mode
[  628.670316][ T8023] bridge0: port 2(bridge_slave_1) entered blocking state
[  628.684253][ T8023] bridge0: port 2(bridge_slave_1) entered disabled state
[  628.691976][ T8023] bridge_slave_1: entered allmulticast mode
[  628.701677][ T8023] bridge_slave_1: entered promiscuous mode
[  628.982844][ T8023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  629.034475][ T8023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  629.181880][ T5881] usb 4-1: USB disconnect, device number 4
[  629.289029][ T8023] team0: Port device team_slave_0 added
[  629.330153][ T8023] team0: Port device team_slave_1 added
[  629.375633][ T7474] Bluetooth: hci2: command tx timeout
[  629.441278][ T8080] loop3: detected capacity change from 0 to 164
[  629.554589][ T8023] batman_adv: batadv0: Adding interface: batadv_slave_0
[  629.562346][ T8023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  629.588965][ T8023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  629.618471][ T8023] batman_adv: batadv0: Adding interface: batadv_slave_1
[  629.626105][ T8023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  629.653632][ T8023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  629.800869][ T8023] hsr_slave_0: entered promiscuous mode
[  629.812423][ T8023] hsr_slave_1: entered promiscuous mode
[  630.599267][ T1885] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  630.607601][ T1885] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  630.769605][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  630.777975][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  630.939457][ T8099] netlink: 8 bytes leftover after parsing attributes in process `syz.4.484'.
[  631.032396][ T8023] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  631.061427][ T8023] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  631.084114][ T8023] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  631.106639][ T8023] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  631.453472][ T7474] Bluetooth: hci2: command tx timeout
[  631.636683][ T8023] 8021q: adding VLAN 0 to HW filter on device bond0
[  631.716267][ T8023] 8021q: adding VLAN 0 to HW filter on device team0
[  631.751360][ T1123] bridge0: port 1(bridge_slave_0) entered blocking state
[  631.758962][ T1123] bridge0: port 1(bridge_slave_0) entered forwarding state
[  631.796067][ T5874] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  631.835963][ T1123] bridge0: port 2(bridge_slave_1) entered blocking state
[  631.843559][ T1123] bridge0: port 2(bridge_slave_1) entered forwarding state
[  631.973412][ T5874] usb 5-1: Using ep0 maxpacket: 8
[  632.008999][ T5874] usb 5-1: config 252 has an invalid descriptor of length 0, skipping remainder of the config
[  632.020312][ T5874] usb 5-1: config 252 has 0 interfaces, different from the descriptor's value: 1
[  632.030054][ T5874] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  632.039457][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  633.039337][ T8121] loop7: detected capacity change from 0 to 1024
[  633.081377][ T8124] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  633.168537][ T8121] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  633.334431][ T8023] 8021q: adding VLAN 0 to HW filter on device batadv0
[  633.533783][ T7474] Bluetooth: hci2: command tx timeout
[  633.594438][ T7827] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  634.098571][ T8145] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  634.958415][ T8158] loop7: detected capacity change from 0 to 512
[  638.283868][ T8158] EXT4-fs warning (device loop7): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop7.
[  638.870490][ T5881] usb 5-1: USB disconnect, device number 6
[  639.144774][ T8023] veth0_vlan: entered promiscuous mode
[  639.239504][ T8023] veth1_vlan: entered promiscuous mode
[  639.380521][ T8023] veth0_macvtap: entered promiscuous mode
[  639.410998][ T8023] veth1_macvtap: entered promiscuous mode
[  639.458515][ T5851] usb 5-1: new full-speed USB device number 7 using dummy_hcd
[  639.508878][ T8023] batman_adv: batadv0: Interface activated: batadv_slave_0
[  639.561508][ T8023] batman_adv: batadv0: Interface activated: batadv_slave_1
[  639.604138][   T49] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  639.626674][   T49] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  639.646055][ T5851] usb 5-1: unable to get BOS descriptor or descriptor too short
[  639.673618][   T49] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  639.675035][ T5851] usb 5-1: not running at top speed; connect to a high speed hub
[  639.738593][ T5851] usb 5-1: config 56 has an invalid interface number: 21 but max is 0
[  639.744781][   T49] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  639.752718][ T5851] usb 5-1: config 56 has no interface number 0
[  639.768612][ T5851] usb 5-1: config 56 interface 21 altsetting 224 endpoint 0x86 has invalid maxpacket 512, setting to 64
[  639.780391][ T5851] usb 5-1: config 56 interface 21 has no altsetting 0
[  639.835188][ T8174] loop3: detected capacity change from 0 to 1024
[  639.837988][ T5851] usb 5-1: New USB device found, idVendor=1bc7, idProduct=1043, bcdDevice=4e.82
[  639.856170][ T5851] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  639.864562][ T5851] usb 5-1: Product: syz
[  639.868908][ T5851] usb 5-1: Manufacturer: syz
[  639.873788][ T5851] usb 5-1: SerialNumber: syz
[  639.890520][ T8170] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  639.926481][ T8174] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  639.942295][ T8174] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  640.004590][ T8174] EXT4-fs error (device loop3): ext4_lookup:1787: inode #15: comm syz.3.505: inode has both inline data and extents flags
[  640.126993][ T5851] option 5-1:56.21: GSM modem (1-port) converter detected
[  640.160343][ T5851] usb 5-1: USB disconnect, device number 7
[  640.173994][ T5851] option 5-1:56.21: device disconnected
[  640.237995][ T7101] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  641.171481][ T8197] loop4: detected capacity change from 0 to 2048
[  641.262113][ T8197] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  641.352047][ T8197] Driver unsupported XDP return value 0 on prog  (id 64) dev N/A, expect packet loss!
[  641.371853][ T8204] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  643.185952][ T8235] loop4: detected capacity change from 0 to 128
[  643.200887][ T8236] loop3: detected capacity change from 0 to 128
[  643.219717][ T8235] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  643.253421][ T8236] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  643.269525][ T8235] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  643.329598][ T8236] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  643.560975][   T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  643.569127][   T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  643.701509][ T1306] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  643.710091][ T1306] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  644.412245][ T8255] loop3: detected capacity change from 0 to 8
[  644.499456][ T8255] SQUASHFS error: Failed to read block 0x4de: -5
[  644.507950][ T8255] SQUASHFS error: Failed to read block 0x4de: -5
[  644.516318][   T30] audit: type=1800 audit(1764806328.276:19): pid=8255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.527" name="file1" dev="loop3" ino=5 res=0 errno=0
[  644.546752][ T8255] SQUASHFS error: Failed to read block 0x4de: -5
[  644.558633][ T8255] SQUASHFS error: Failed to read block 0x4de: -5
[  644.567273][ T8255] SQUASHFS error: Failed to read block 0x4de: -5
[  644.574593][ T8255] SQUASHFS error: Failed to read block 0x4de: -5
[  644.621524][ T8259] SQUASHFS error: Failed to read block 0x4de: -5
[  644.628942][ T8259] SQUASHFS error: Failed to read block 0x4de: -5
[  644.668306][ T8255] SQUASHFS error: Failed to read block 0x4de: -5
[  644.675635][ T8255] SQUASHFS error: Failed to read block 0x4de: -5
[  651.572258][ T8275] loop4: detected capacity change from 0 to 256
[  651.635363][ T8275] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  651.646448][ T8275] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[  652.249500][ T8275] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d)
[  652.294368][ T8275] exFAT-fs (loop4): failed to load alloc-bitmap
[  652.300867][ T8275] exFAT-fs (loop4): failed to recognize exfat type
[  652.324108][ T5851] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  652.993206][ T5851] usb 8-1: Using ep0 maxpacket: 32
[  653.386498][ T5851] usb 8-1: config 12 has an invalid interface number: 210 but max is 0
[  653.395554][ T5851] usb 8-1: config 12 has no interface number 0
[  653.402151][ T5851] usb 8-1: config 12 interface 210 has no altsetting 0
[  654.766385][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  654.770625][ T5851] usb 8-1: New USB device found, idVendor=6189, idProduct=2068, bcdDevice=d6.0c
[  654.773176][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  654.783047][ T5851] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  654.799892][ T5851] usb 8-1: Product: syz
[  654.805835][ T5851] usb 8-1: Manufacturer: syz
[  654.811269][ T5851] usb 8-1: SerialNumber: syz
[  655.355566][ T5851] usb 8-1: can't set config #12, error -71
[  655.407314][ T5851] usb 8-1: USB disconnect, device number 2
[  663.521593][ T8311] loop7: detected capacity change from 0 to 1024
[  663.927932][ T8313] loop6: detected capacity change from 0 to 1024
[  664.086418][ T8313] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  664.547459][ T8023] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  673.112225][ T5093] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  673.139512][ T5093] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  673.148722][ T5093] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  673.162584][ T5093] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  673.199417][ T5093] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  680.095999][ T7474] Bluetooth: hci3: command tx timeout
[  680.590276][ T8353] chnl_net:caif_netlink_parms(): no params data found
[  682.185506][ T5093] Bluetooth: hci3: command tx timeout
[  682.204110][ T5093] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  682.224727][ T5093] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  682.245780][ T5093] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  682.280449][ T5093] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  682.304870][ T5093] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  682.880583][ T8389] kAFS: No cell specified
[  682.978799][ T8353] bridge0: port 1(bridge_slave_0) entered blocking state
[  682.986509][ T8353] bridge0: port 1(bridge_slave_0) entered disabled state
[  682.994682][ T8353] bridge_slave_0: entered allmulticast mode
[  683.003885][ T8353] bridge_slave_0: entered promiscuous mode
[  683.141659][ T8353] bridge0: port 2(bridge_slave_1) entered blocking state
[  683.149392][ T8353] bridge0: port 2(bridge_slave_1) entered disabled state
[  683.162610][ T8353] bridge_slave_1: entered allmulticast mode
[  683.172005][ T8353] bridge_slave_1: entered promiscuous mode
[  683.401929][ T8392] loop6: detected capacity change from 0 to 1024
[  683.452418][ T8392] EXT4-fs: inline encryption not supported
[  683.459677][ T8392] EXT4-fs: Ignoring removed nobh option
[  683.469928][ T8392] EXT4-fs: Ignoring removed bh option
[  683.586851][ T8353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  683.633295][ T8353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  683.645023][ T8392] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  683.734259][ T8353] team0: Port device team_slave_0 added
[  683.754568][ T8353] team0: Port device team_slave_1 added
[  683.948214][ T8353] batman_adv: batadv0: Adding interface: batadv_slave_0
[  683.956292][ T8353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  683.986820][ T8353] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  684.020916][ T8353] batman_adv: batadv0: Adding interface: batadv_slave_1
[  684.028349][ T8353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  684.055005][ T8353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  684.101966][ T8381] chnl_net:caif_netlink_parms(): no params data found
[  684.255337][ T5093] Bluetooth: hci3: command tx timeout
[  684.415226][ T5093] Bluetooth: hci6: command tx timeout
[  684.451435][ T8353] hsr_slave_0: entered promiscuous mode
[  684.461292][ T8353] hsr_slave_1: entered promiscuous mode
[  684.469937][ T8353] debugfs: 'hsr0' already exists in 'hsr'
[  684.476294][ T8353] Cannot create hsr debugfs directory
[  685.133516][ T8023] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  685.743774][ T8416] loop7: detected capacity change from 0 to 1024
[  685.777413][ T8381] bridge0: port 1(bridge_slave_0) entered blocking state
[  685.785622][ T8381] bridge0: port 1(bridge_slave_0) entered disabled state
[  685.793897][ T8381] bridge_slave_0: entered allmulticast mode
[  685.803218][ T8381] bridge_slave_0: entered promiscuous mode
[  685.846506][ T8416] hfsplus: Unknown parameter '(E@\��8S��ڏ���gZ�����yr{7jõ�_h�!៥W04�����{��(��m���*$v���-��ċϵO��98�?Z��!8���D��f�Z�qM�I��f;o�	���e��Qcx�k�!.و���j7�\�zb�\p�h)��;'
[  685.917091][ T8421] loop3: detected capacity change from 0 to 512
[  685.958248][ T8423] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  685.963325][ T8381] bridge0: port 2(bridge_slave_1) entered blocking state
[  685.972651][ T8381] bridge0: port 2(bridge_slave_1) entered disabled state
[  685.976119][ T8421] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  685.980615][ T8381] bridge_slave_1: entered allmulticast mode
[  685.999315][ T8381] bridge_slave_1: entered promiscuous mode
[  686.119632][ T8421] EXT4-fs (loop3): 1 truncate cleaned up
[  686.132460][ T8421] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  686.161603][   T30] audit: type=1800 audit(1764806369.916:20): pid=8421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.581" name="file2" dev="loop3" ino=16 res=0 errno=0
[  686.353794][ T5093] Bluetooth: hci3: command tx timeout
[  686.498987][ T5093] Bluetooth: hci6: command tx timeout
[  686.595514][ T8381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  686.761035][ T8381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  686.839874][ T8353] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  686.869521][ T8353] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  686.901634][ T8353] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  686.981454][ T8429] kAFS: No cell specified
[  687.417840][ T7101] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  687.528201][ T8353] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  687.590293][ T8381] team0: Port device team_slave_0 added
[  687.644158][ T8381] team0: Port device team_slave_1 added
[  687.715250][ T8432] loop6: detected capacity change from 0 to 2048
[  687.775267][ T8432] EXT4-fs: inline encryption not supported
[  687.843604][ T8432] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  687.856347][ T8432] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  688.091891][ T8381] batman_adv: batadv0: Adding interface: batadv_slave_0
[  688.099297][ T8381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  688.127070][ T8381] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  688.215401][ T8023] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  688.372200][ T8381] batman_adv: batadv0: Adding interface: batadv_slave_1
[  688.383812][ T8381] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  688.411537][ T8381] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  688.579169][ T5093] Bluetooth: hci6: command tx timeout
[  688.672622][ T8447] loop6: detected capacity change from 0 to 2048
[  688.681753][ T8447] udf: Bad value for 'rootdir'
[  690.080203][ T8381] hsr_slave_0: entered promiscuous mode
[  690.089977][ T8381] hsr_slave_1: entered promiscuous mode
[  690.098705][ T8381] debugfs: 'hsr0' already exists in 'hsr'
[  690.104699][ T8381] Cannot create hsr debugfs directory
[  690.458925][ T8353] 8021q: adding VLAN 0 to HW filter on device bond0
[  690.672819][ T5093] Bluetooth: hci6: command tx timeout
[  690.725293][ T8454] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  691.827587][ T1306] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  692.016622][ T8457] kAFS: No cell specified
[  692.026445][ T8353] 8021q: adding VLAN 0 to HW filter on device team0
[  692.146096][ T1306] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  692.193829][ T8461] loop3: detected capacity change from 0 to 512
[  692.241895][ T8461] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  692.246615][ T1123] bridge0: port 1(bridge_slave_0) entered blocking state
[  692.259417][ T1123] bridge0: port 1(bridge_slave_0) entered forwarding state
[  692.343515][ T8461] EXT4-fs (loop3): 1 truncate cleaned up
[  692.348379][ T1306] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  692.351467][ T8461] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  692.383289][ T5851] usb 7-1: new full-speed USB device number 3 using dummy_hcd
[  692.445532][ T1123] bridge0: port 2(bridge_slave_1) entered blocking state
[  692.453122][ T1123] bridge0: port 2(bridge_slave_1) entered forwarding state
[  692.497465][   T30] audit: type=1800 audit(1764806376.236:21): pid=8461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.595" name="file2" dev="loop3" ino=16 res=0 errno=0
[  692.637431][ T1306] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  693.158298][ T5851] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  693.168597][ T5851] usb 7-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00
[  693.178056][ T5851] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  693.226283][ T1306] bridge_slave_1: left allmulticast mode
[  693.232118][ T1306] bridge_slave_1: left promiscuous mode
[  693.238908][ T1306] bridge0: port 2(bridge_slave_1) entered disabled state
[  693.259070][ T1306] bridge_slave_0: left allmulticast mode
[  693.266161][ T1306] bridge_slave_0: left promiscuous mode
[  693.272627][ T1306] bridge0: port 1(bridge_slave_0) entered disabled state
[  693.275826][ T5851] usb 7-1: config 0 descriptor??
[  693.562353][ T8469] loop7: detected capacity change from 0 to 512
[  693.617655][ T8469] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.598: invalid indirect mapped block 256 (level 2)
[  693.661086][ T8469] EXT4-fs (loop7): Remounting filesystem read-only
[  693.674353][ T8469] EXT4-fs (loop7): 2 truncates cleaned up
[  693.684440][ T8469] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  693.768689][ T8469] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  693.837113][ T5851] nintendo 0003:057E:200E.0005: hidraw0: USB HID v80.00 Device [HID 057e:200e] on usb-dummy_hcd.6-1/input0
[  693.913733][ T5851] nintendo 0003:057E:200E.0005: Failed charging grip handshake
[  693.921630][ T5851] nintendo 0003:057E:200E.0005: Failed to initialize controller; ret=-110
[  693.937059][ T1306] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  693.951274][ T5851] nintendo 0003:057E:200E.0005: probe - fail = -110
[  693.961192][ T5851] nintendo 0003:057E:200E.0005: probe with driver nintendo failed with error -110
[  694.399646][ T1306] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  694.416765][ T7101] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  694.427906][ T1306] bond0 (unregistering): Released all slaves
[  694.453651][ T5851] usb 7-1: USB disconnect, device number 3
[  695.879687][ T8479] loop6: detected capacity change from 0 to 512
[  695.899752][ T8479] EXT4-fs: Ignoring removed i_version option
[  695.918578][ T8479] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  695.947145][ T8479] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.600: inode has both inline data and extents flags
[  695.969788][ T8479] EXT4-fs (loop6): Remounting filesystem read-only
[  695.979287][ T8479] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  696.019329][ T8479] cgroup: Unknown subsys name 'cpuset'
[  696.103805][ T8023] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  696.862677][ T1306] hsr_slave_0: left promiscuous mode
[  696.920184][ T1306] hsr_slave_1: left promiscuous mode
[  696.928104][ T1306] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  696.931552][ T8485] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  696.935907][ T1306] batman_adv: batadv0: Removing interface: batadv_slave_0
[  697.011676][ T1306] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  697.019802][ T1306] batman_adv: batadv0: Removing interface: batadv_slave_1
[  697.100290][ T1306] veth1_macvtap: left promiscuous mode
[  697.106236][ T1306] veth0_macvtap: left promiscuous mode
[  697.112293][ T1306] veth1_vlan: left promiscuous mode
[  697.118055][ T1306] veth0_vlan: left promiscuous mode
[  698.055867][ T8493] =====================================================
[  698.063381][ T8493] BUG: KMSAN: uninit-value in eth_type_trans+0x69d/0x9a0
[  698.070728][ T8493]  eth_type_trans+0x69d/0x9a0
[  698.075610][ T8493]  __dev_forward_skb2+0x4b1/0x950
[  698.080858][ T8493]  dev_forward_skb_nomtu+0x3b/0xe0
[  698.086216][ T8493]  __bpf_redirect+0x14d6/0x1760
[  698.091212][ T8493]  bpf_clone_redirect+0x366/0x530
[  698.096462][ T8493]  ___bpf_prog_run+0x1297/0xeba0
[  698.101654][ T8493]  __bpf_prog_run512+0xc5/0x100
[  698.106765][ T8493]  bpf_test_run+0x496/0xd80
[  698.111592][ T8493]  bpf_prog_test_run_skb+0x1720/0x2590
[  698.117306][ T8493]  bpf_prog_test_run+0x5c2/0xa40
[  698.122479][ T8493]  __sys_bpf+0x873/0xeb0
[  698.126905][ T8493]  __x64_sys_bpf+0xa4/0xf0
[  698.131451][ T8493]  x64_sys_call+0x31c3/0x3e70
[  698.136340][ T8493]  do_syscall_64+0xd9/0xf80
[  698.141063][ T8493]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  698.147191][ T8493] 
[  698.149579][ T8493] Uninit was created at:
[  698.154145][ T8493]  kmem_cache_alloc_node_noprof+0x989/0x16b0
[  698.160273][ T8493]  kmalloc_reserve+0x13c/0x4b0
[  698.165340][ T8493]  pskb_expand_head+0x1fc/0x1610
[  698.170391][ T8493]  skb_ensure_writable+0x44e/0x510
[  698.175845][ T8493]  bpf_clone_redirect+0x1c1/0x530
[  698.181038][ T8493]  ___bpf_prog_run+0x1297/0xeba0
[  698.186348][ T8493]  __bpf_prog_run512+0xc5/0x100
[  698.191355][ T8493]  bpf_test_run+0x496/0xd80
[  698.196079][ T8493]  bpf_prog_test_run_skb+0x1720/0x2590
[  698.201708][ T8493]  bpf_prog_test_run+0x5c2/0xa40
[  698.206883][ T8493]  __sys_bpf+0x873/0xeb0
[  698.211306][ T8493]  __x64_sys_bpf+0xa4/0xf0
[  698.215993][ T8493]  x64_sys_call+0x31c3/0x3e70
[  698.220867][ T8493]  do_syscall_64+0xd9/0xf80
[  698.225669][ T8493]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  698.231709][ T8493] 
[  698.234234][ T8493] CPU: 0 UID: 0 PID: 8493 Comm: syz.6.605 Not tainted syzkaller #0 PREEMPT(none) 
[  698.243691][ T8493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  698.253953][ T8493] =====================================================
[  698.260963][ T8493] Disabling lock debugging due to kernel taint
[  698.267328][ T8493] Kernel panic - not syncing: kmsan.panic set ...
[  698.273873][ T8493] CPU: 0 UID: 0 PID: 8493 Comm: syz.6.605 Tainted: G    B               syzkaller #0 PREEMPT(none) 
[  698.284805][ T8493] Tainted: [B]=BAD_PAGE
[  698.289033][ T8493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  698.299214][ T8493] Call Trace:
[  698.302589][ T8493]  <TASK>
[  698.305643][ T8493]  __dump_stack+0x26/0x30
[  698.310139][ T8493]  dump_stack_lvl+0x53/0x270
[  698.314885][ T8493]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  698.320860][ T8493]  dump_stack+0x1e/0x25
[  698.325265][ T8493]  vpanic+0x435/0xd30
[  698.329444][ T8493]  panic+0x15d/0x160
[  698.333548][ T8493]  kmsan_report+0x31c/0x320
[  698.338193][ T8493]  ? bpf_prog_test_run+0x5c2/0xa40
[  698.343491][ T8493]  ? __msan_warning+0x1b/0x30
[  698.348373][ T8493]  ? eth_type_trans+0x69d/0x9a0
[  698.353377][ T8493]  ? __dev_forward_skb2+0x4b1/0x950
[  698.358760][ T8493]  ? dev_forward_skb_nomtu+0x3b/0xe0
[  698.364223][ T8493]  ? __bpf_redirect+0x14d6/0x1760
[  698.369412][ T8493]  ? bpf_clone_redirect+0x366/0x530
[  698.374849][ T8493]  ? ___bpf_prog_run+0x1297/0xeba0
[  698.380143][ T8493]  ? __bpf_prog_run512+0xc5/0x100
[  698.385363][ T8493]  ? bpf_test_run+0x496/0xd80
[  698.390174][ T8493]  ? bpf_prog_test_run_skb+0x1720/0x2590
[  698.395950][ T8493]  ? bpf_prog_test_run+0x5c2/0xa40
[  698.401249][ T8493]  ? __sys_bpf+0x873/0xeb0
[  698.405832][ T8493]  ? __x64_sys_bpf+0xa4/0xf0
[  698.410588][ T8493]  ? x64_sys_call+0x31c3/0x3e70
[  698.415617][ T8493]  ? do_syscall_64+0xd9/0xf80
[  698.420485][ T8493]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  698.426708][ T8493]  ? kmem_cache_alloc_node_noprof+0x11/0x16b0
[  698.432945][ T8493]  ? kmsan_get_metadata+0xfb/0x160
[  698.438206][ T8493]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  698.444252][ T8493]  ? eth_type_trans+0x1/0x9a0
[  698.449084][ T8493]  ? filter_irq_stacks+0x49/0x190
[  698.454383][ T8493]  ? stack_depot_save_flags+0x35/0x790
[  698.460103][ T8493]  ? kmsan_get_metadata+0xfb/0x160
[  698.465367][ T8493]  ? kmsan_get_metadata+0xfb/0x160
[  698.470636][ T8493]  ? kmsan_internal_set_shadow_origin+0x7a/0x110
[  698.477167][ T8493]  ? kmsan_get_metadata+0xfb/0x160
[  698.482444][ T8493]  __msan_warning+0x1b/0x30
[  698.487128][ T8493]  eth_type_trans+0x69d/0x9a0
[  698.491991][ T8493]  __dev_forward_skb2+0x4b1/0x950
[  698.497194][ T8493]  ? pskb_expand_head+0x1268/0x1610
[  698.502564][ T8493]  dev_forward_skb_nomtu+0x3b/0xe0
[  698.507874][ T8493]  __bpf_redirect+0x14d6/0x1760
[  698.512902][ T8493]  ? kmsan_get_metadata+0xfb/0x160
[  698.518178][ T8493]  bpf_clone_redirect+0x366/0x530
[  698.523397][ T8493]  ___bpf_prog_run+0x1297/0xeba0
[  698.528594][ T8493]  __bpf_prog_run512+0xc5/0x100
[  698.533652][ T8493]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  698.539658][ T8493]  ? kmsan_get_metadata+0xfb/0x160
[  698.544938][ T8493]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  698.550905][ T8493]  ? ktime_get+0x530/0x590
[  698.555533][ T8493]  ? kmsan_get_metadata+0xfb/0x160
[  698.560788][ T8493]  ? kmsan_get_metadata+0xfb/0x160
[  698.566041][ T8493]  ? kmsan_internal_set_shadow_origin+0x7a/0x110
[  698.572560][ T8493]  ? kmsan_get_metadata+0x150/0x160
[  698.577914][ T8493]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  698.583872][ T8493]  ? __pfx___bpf_prog_run512+0x10/0x10
[  698.589451][ T8493]  ? __pfx___bpf_prog_run512+0x10/0x10
[  698.595010][ T8493]  bpf_test_run+0x496/0xd80
[  698.599674][ T8493]  ? kmsan_get_metadata+0xfb/0x160
[  698.604866][ T8493]  ? kmsan_get_metadata+0xfb/0x160
[  698.610049][ T8493]  ? kmsan_get_metadata+0xfb/0x160
[  698.615235][ T8493]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  698.621145][ T8493]  ? bpf_test_run+0x2f7/0xd80
[  698.625969][ T8493]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  698.631860][ T8493]  bpf_prog_test_run_skb+0x1720/0x2590
[  698.637612][ T8493]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  698.643618][ T8493]  bpf_prog_test_run+0x5c2/0xa40
[  698.648691][ T8493]  __sys_bpf+0x873/0xeb0
[  698.653082][ T8493]  __x64_sys_bpf+0xa4/0xf0
[  698.657613][ T8493]  x64_sys_call+0x31c3/0x3e70
[  698.662400][ T8493]  do_syscall_64+0xd9/0xf80
[  698.667011][ T8493]  ? clear_bhb_loop+0x40/0x90
[  698.671771][ T8493]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  698.677757][ T8493] RIP: 0033:0x7f905d38f749
[  698.682264][ T8493] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  698.701951][ T8493] RSP: 002b:00007f905b5f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  698.710447][ T8493] RAX: ffffffffffffffda RBX: 00007f905d5e5fa0 RCX: 00007f905d38f749
[  698.718481][ T8493] RDX: 0000000000000023 RSI: 0000200000000240 RDI: 000000000000000a
[  698.726507][ T8493] RBP: 00007f905d413f91 R08: 0000000000000000 R09: 0000000000000000
[  698.734537][ T8493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  698.742560][ T8493] R13: 00007f905d5e6038 R14: 00007f905d5e5fa0 R15: 00007ffe1fa75df8
[  698.750611][ T8493]  </TASK>
[  698.754109][ T8493] Kernel Offset: disabled
[  698.758485][ T8493] Rebooting in 86400 seconds..