last executing test programs:

10m21.545985223s ago: executing program 32 (id=142):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x2, 0x4, 0x9, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0xffffffff, @mcast1, 0xbcd}}, @sadb_sa={0x2, 0x1, 0x0, 0xb0}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, 0x70}}, 0x4004884)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x161300)
ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r3, 0xc008551b, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x4, 0xfa0d, 0xfffffffb}, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r4 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x2, 0x101, 0x5, 0x5, 0xfffb, 0x8001, 0x4, {0x0, @in6={{0xa, 0x4e20, 0x7, @loopback, 0x4}}, 0x20000000, 0xf4, 0x9, 0x0, 0x4}}, &(0x7f00000001c0)=0xb0)
r5 = socket(0x28, 0x1, 0x0)
r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1})
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSSOFTCAR(r7, 0x541a, &(0x7f0000000000))
r8 = syz_open_dev$dri(0x0, 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r8, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r9=>0x0], 0x1})
r10 = syz_open_dev$dri(&(0x7f0000000f00), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r10, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f00000000c0), &(0x7f0000000040), 0x0, r9, 0xeeeeeeee})
setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000000000)=0x4001, 0x4)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r6, 0xc01864ba, &(0x7f0000000300)={0x4, 0x0, r9})
openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r11 = syz_io_uring_setup(0x512, &(0x7f0000000280)={0x0, 0xc65f, 0x100, 0x9, 0x40}, &(0x7f0000000240)=<r12=>0x0, &(0x7f0000000040)=<r13=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r12, r13, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x2121, 0x0, {0x3}})
io_uring_enter(r11, 0x47f6, 0xb277, 0x0, 0x0, 0x0)

9m56.474358766s ago: executing program 33 (id=193):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x4000000)
socket(0x6, 0xa, 0x4)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000006a0005062cbd7000fce6df2502000000f893000008000a0001000000040009"], 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x880)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYRES32=r2], 0x7c}, 0x1, 0x0, 0x0, 0x40011}, 0x40850)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000acc000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000009e000c0046723040dcf851353d80428b66c4a5c76fdd086344be5b4b365b030000000000000098b7647dd42e1f003e993562f77b29872355e30839152ef602e4e7b1a25f4123ba0b4f5889c3681c221c0b96e521524250432d6063a60098490ece73ddd10f0030be88fed0a90e3ad8f6863296818bb85f56f7ce8ea7f57bd1a124d9398abb1f83e8205bc2cc80e9577a02dd7f0018c1ac994fbb855ea542000014000000110001"], 0xf4}, 0x1, 0x0, 0x0, 0x4040854}, 0x24000840)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000240)=0x8)
r6 = syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0x80080)
ioctl$BLKSECDISCARD(r6, 0x127d, 0x0)
setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000180)={r5, 0x2, 0x4, 0x0, 0x7, 0xc}, 0x14)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETCHAIN(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="44000000040a0102"], 0x44}, 0x1, 0x0, 0x0, 0x4000084}, 0x24008000)
r8 = socket$pppl2tp(0x18, 0x1, 0x1)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}, 0x2, 0x0, 0x4}}, 0x2e)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$key(0xf, 0x3, 0x2)

9m0.942719151s ago: executing program 34 (id=267):
syz_open_procfs(0x0, &(0x7f0000000200)='task\x00')
socket$inet(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r3, 0x84, 0x11, 0x0, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="312000000000000008001b0001000000"], 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x20000050)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
socket$l2tp(0x2, 0x2, 0x73)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f0000002700)={0x2, 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/264, 0x108}, {&(0x7f0000002a00)=""/88, 0x58}], 0x0}, 0x20)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r4, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0)
syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f00000001c0)={0x0, 0x0, 0x0})
syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0)

9m0.533899947s ago: executing program 35 (id=268):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x2c2e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
socket$inet6_sctp(0xa, 0x1, 0x84)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xf0, 0xffffffff}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, r5, 0x0, 0x4000000000010046)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
r7 = dup(r6)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000019200)=[@in={0x2, 0x4e24, @empty}], 0x10)
sendmsg$inet6(r6, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000480)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043)
pipe2$9p(&(0x7f0000000080)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x0)
syz_emit_ethernet(0x56, 0x0, 0x0)
write$P9_RSETATTR(r9, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a)
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x1, 0xfff}]}, 0x10)
splice(r8, 0x0, r6, 0x0, 0x20000000000002, 0x2)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000080), 0x0}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x40020)

7m49.063867067s ago: executing program 36 (id=347):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_io_uring_setup(0x118d7, &(0x7f0000000040)={0x0, 0xe472, 0x2, 0x0, 0x25a}, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000000)
r2 = socket(0x840000000002, 0x3, 0xfa)
getsockname$inet(r2, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0)
getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f00000001c0))
lstat(&(0x7f0000000240)='./file0\x00', &(0x7f00000003c0))
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50)
unshare(0x62040200)
syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x80c80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xdddd1000, 0x0, 0x0, 0x8, 0x8, 0x0, 0x2, 0x0, 0x6, 0x9, 0x10}, {0x8080000, 0x0, 0xc, 0x8, 0x7c, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x2fff, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xdc}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xf000, 0x3000, 0x9, 0x0, 0x0, 0x4, 0x20, 0xe, 0x0, 0x3c}, {0xdddd1000, 0x0, 0xd, 0x7, 0x0, 0x0, 0x2, 0xfe, 0x0, 0x0, 0x80}, {0x8080000, 0x0, 0xf, 0x6, 0x5, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0xfe}, {0x80a0000, 0xdddd0000, 0x0, 0x1, 0x0, 0x1, 0x0, 0xa, 0x26, 0x0, 0xf8}, {0x80a0000, 0x4}, {0x6000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0x2d00, 0x0, [0x0, 0x0, 0x1]})
r6 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x43501)
ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x17, 0xff}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0})
ioctl$KVM_SET_GUEST_DEBUG_x86(r5, 0x4048ae9b, &(0x7f00000002c0)={0x30003, 0x0, {[0x8000000000000000, 0x5, 0x3, 0x65, 0x80000000, 0x8, 0x0, 0x8]}})
ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000000440)={{0x3, 0x0, 0x80, {0xc000, 0x70000, 0x2}}, "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", "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"})
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)

7m47.885284959s ago: executing program 37 (id=350):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x8)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
r3 = socket$inet6(0xa, 0x2, 0x88)
bind$inet6(r3, &(0x7f0000002c80)={0xa, 0x14e24, 0x0, @rand_addr, 0xffff}, 0x1c)
connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0xd}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0)

7m45.167599024s ago: executing program 38 (id=352):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_io_uring_setup(0x938, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x1, 0x288}, &(0x7f0000000140)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r5 = socket(0x200000000000011, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'sit0\x00', <r6=>0x0})
bind$packet(r5, &(0x7f0000000080)={0x11, 0xd, r6, 0x1, 0x0, 0x6, @remote}, 0x14)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r5, 0x0, 0x0})
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x6700000000000000)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r5)
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x11, 0x80a, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'bond0\x00', <r10=>0x0})
sendmsg$MPTCP_PM_CMD_GET_ADDR(r7, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x80, r8, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xb2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x40008d4)
r11 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0)
syz_usb_ep_write$ath9k_ep2(r11, 0x83, 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="bcea"])
r12 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0)
ioctl$EVIOCSFF(r12, 0x40304580, &(0x7f00000001c0)={0x50, 0xffff, 0x560c, {0x803, 0x5d5}, {0xfffa, 0x2}, @period={0x59, 0x2, 0x4, 0x6d, 0x9ee, {0x2, 0x5, 0xfffb, 0xa}, 0x0, 0x0}})
ioctl$EVIOCSFF(r12, 0x40304580, &(0x7f00000001c0)={0x50, 0x0, 0x560c, {0x805, 0x5d5}, {0xfffa, 0x2}, @cond=[{0xff6a, 0x1, 0xb619, 0x2, 0x7, 0x6}, {0x5c9, 0x0, 0x0, 0x3, 0x1000, 0xf5c9}]})
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_OPENAT2={0x1c, 0x4c, 0x0, r7, &(0x7f0000000000)={0x8100, 0x1c8, 0x26}, 0xffffffffffffffff, 0x18, 0x0, 0x23456, {0x0, r13}})
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0)

5m56.441810315s ago: executing program 39 (id=459):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000540)={0x2020}, 0x2020)
syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xdc, 0xd3, 0x28, 0x40, 0x7d15, 0x31b2, 0x574b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x2f, 0xfc, 0x0, 0x8, 0x2, 0x50}}]}}]}}, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x84)

5m54.172499978s ago: executing program 40 (id=463):
capset(0x0, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40})
syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x120002)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
bind$xdp(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000140)={@ipv4={'\x00', '\xff\xff', @local}}, 0x14)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r5, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c)
syz_emit_ethernet(0x2a, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0)
setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="5cc9837416512a7f959e608137cd48000000103e36ae0c77f016b4ed0f295353d833c570f47ce2caf6b9b92ee1d1aa5f03a542fcd005e913d36bea9142feed016a2c6e57af6548a6d6011d007e6a439293cccbbacaf1597aabbe8584f7cd44bd63cc500741e50202913d1ad9562ca81302d03928b541175585d7a095470ed3f76dc75bdf5ea4f73023475393e02d7ef5833f7f981fbcc491b5f9d7997325ba5d7974a8e55a51c73b1ab7c606", @ANYRES32=0x0, @ANYBLOB="137c03002b1a07002c0012800e00010069703667726574617000000018000280140007000000000000000000000000000000000108001f005600000008000f00f7010000"], 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040)
ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x20001)
r8 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0)
syz_usb_ep_write(r8, 0x81, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

5m52.343143503s ago: executing program 41 (id=465):
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000))
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x3)
dup(r0)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
close(r3)
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x3a9e9908})
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x6, 0x2, 0x2, 0x0, 0xc6})
r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
write$P9_RSTATu(r4, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES64, @ANYRES32=0x0], 0x2c2)
r5 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000200), 0x4)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_GET_ENDIAN(0x13, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = fsopen(&(0x7f0000000300)='tmpfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r9, 0x6, 0x0, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r8, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x40)

5m47.827408388s ago: executing program 42 (id=468):
socket$kcm(0x29, 0x2, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
r4 = dup3(0xffffffffffffffff, r3, 0x0)
connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x9, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/100, 0x64}], 0x1, 0x38, 0x3)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_buf(r5, 0x6, 0x23, &(0x7f0000000040)=""/40, &(0x7f0000000080)=0x28)

3m54.696082307s ago: executing program 6 (id=623):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000001000)=@xdp={0x2c, 0x7, r2, 0x13}, 0x80, &(0x7f0000000080)=[{&(0x7f00000010c0)='\x00', 0x1}], 0x1}, 0x4d8d4)

3m52.993795085s ago: executing program 6 (id=626):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd2a, 0x8000002, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xff, 0x2a00, 0x7ffe}, {0x8, 0x6a6, 0xffff, 0x5, 0x2, 0x2}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0)

3m51.520936427s ago: executing program 6 (id=631):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x28}}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1)
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r3, 0x4020aed2, &(0x7f00000000c0)={0xffff1000, 0x301000, 0x8})

3m38.789342239s ago: executing program 6 (id=656):
r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r0, 0x7b0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004002, 0x0, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r2 = dup(r1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x13, r2, 0x2000)
r3 = dup(r2)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
write$binfmt_aout(r3, 0x0, 0xffffffdb)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

3m38.095287773s ago: executing program 5 (id=658):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070011000000060004"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)

3m37.137431281s ago: executing program 5 (id=660):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0)
gettid()
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)=0x400)

3m36.489653206s ago: executing program 6 (id=662):
syz_open_dev$vbi(&(0x7f00000000c0), 0x2, 0x2)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
close(0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1)
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b925, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {}, {0xb, 0xb}, {0xfff2, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20018041}, 0x4008000)
ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

3m35.781820945s ago: executing program 5 (id=665):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="02030003310000002cbd7000fbdbdf2502000900080000001c0000000000000005000600000000000a0000000000000000000000000000000000000000000001020000000000000002000100000000000000070c0000000005000500000000000a00000000000000fc0100000000000000000000000000010700000000000000210008000008"], 0x188}, 0x1, 0x7}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x20000800)
gettid()
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000002050005000a000000050001000700ff0005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000000c0007800800124000000014"], 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r6 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r6, 0x84, 0x78, 0x0, 0x0)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)

3m35.329302597s ago: executing program 6 (id=667):
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x7, 0x10, 0x0, 0x0, 0xb47, 0x9, 0x8, 0xffffeffc, 0x3}, 0x0)
landlock_restrict_self(0xffffffffffffffff, 0x0)
r2 = fanotify_init(0x200, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
writev(r2, &(0x7f00000005c0)=[{&(0x7f00000001c0)="84", 0x8}, {0x0}], 0x2)
mknod$loop(0x0, 0x0, 0x1)
r3 = socket(0x8000000010, 0x2, 0x0)
write(r3, &(0x7f00000002c0)="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", 0xfc)
r4 = syz_open_procfs$pagemap(0x0, 0x0)
ioctl$PAGEMAP_SCAN(r4, 0xc0606610, 0x0)
r5 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r5, &(0x7f0000000400)={0x2, 0x4e20, @remote}, 0x10)
sendmmsg$inet(r5, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}})
r7 = socket$nl_generic(0x11, 0x3, 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0)
sendmsg(r7, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0)
mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000481000/0x1000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x8000, 0x0, 0x0, 0x2)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x2000c450)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001680)=ANY=[@ANYBLOB="3000000042000701feffffff00000000017c0000040042800c000180060006"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)

3m33.885398343s ago: executing program 5 (id=670):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070011000000060004404e220000"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)

3m33.000840957s ago: executing program 5 (id=672):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in={{0x2, 0x4e22, @rand_addr=0x64010101}}}, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000000c0)={0x0, 0x100}, &(0x7f00000001c0)=0x8)

3m31.997887772s ago: executing program 5 (id=673):
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10290}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1d, 0x0, 0x0, 0x6}]}}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r4 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000140)={'virt_wifi0\x00', 0x1})
sendmsg(r2, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x80)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x4, 0xe0, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000480)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2f}}, @in6={0xa, 0x4e20, 0x0, @empty, 0xfff}, @in={0x2, 0x4e23, @rand_addr=0x64010102}], 0x3c)
r6 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)={'#! ', './control/file0'}, 0x13)
execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x5, 0xffffffffffffffff, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2})
ioctl$vim2m_VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {0x77359400}, {0x1, 0xc, 0x9, 0xc, 0x3, 0x8, "c12400"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000})
lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x1)
lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f)

3m20.18713105s ago: executing program 43 (id=666):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x28}}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1)
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r3, 0x4020aed2, &(0x7f00000000c0)={0xffff1000, 0x301000, 0x8})

3m19.836959365s ago: executing program 44 (id=667):
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x7, 0x10, 0x0, 0x0, 0xb47, 0x9, 0x8, 0xffffeffc, 0x3}, 0x0)
landlock_restrict_self(0xffffffffffffffff, 0x0)
r2 = fanotify_init(0x200, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
writev(r2, &(0x7f00000005c0)=[{&(0x7f00000001c0)="84", 0x8}, {0x0}], 0x2)
mknod$loop(0x0, 0x0, 0x1)
r3 = socket(0x8000000010, 0x2, 0x0)
write(r3, &(0x7f00000002c0)="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", 0xfc)
r4 = syz_open_procfs$pagemap(0x0, 0x0)
ioctl$PAGEMAP_SCAN(r4, 0xc0606610, 0x0)
r5 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r5, &(0x7f0000000400)={0x2, 0x4e20, @remote}, 0x10)
sendmmsg$inet(r5, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}})
r7 = socket$nl_generic(0x11, 0x3, 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0)
sendmsg(r7, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0)
mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000481000/0x1000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x8000, 0x0, 0x0, 0x2)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x2000c450)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001680)=ANY=[@ANYBLOB="3000000042000701feffffff00000000017c0000040042800c000180060006"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)

3m17.447831917s ago: executing program 45 (id=671):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x8, 0x920)
ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r2, 0x40045731, &(0x7f0000000340)=0x800)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x5, 0x5, {0xffffffffffffffff}, {}, 0x183639ee, 0x10001})
getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000480), &(0x7f00000004c0)=0x4)
r3 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2)
ioctl$VIDIOC_S_OUTPUT(r3, 0xc004562f, &(0x7f0000000000)=0x1)
ioctl$VIDIOC_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x1, 0x0, 0xdd9f83, 0x1, 0x2f, 0xf3, 0x2, 0x8, 0x722, 0x6, 0x7, 0x7f, 0x27, 0x20, {0x0, 0x6fd8e84b}, 0x3, 0xed}})
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000000)={'macsec0\x00', @random="010000201000"})
memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1)
r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b0001000000000904000001012900000905"], 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="580000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="15010000000000003000128009000100766c616e00000000200002800c0002001b000000020000000600050088a8000006000100", @ANYRES32], 0x58}, 0x1, 0x0, 0x0, 0x2008801}, 0x40000)
syz_usb_control_io$hid(r5, 0x0, 0x0)
r7 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0)
fcntl$notify(r7, 0x402, 0x20)
r8 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00')
pread64(r8, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000)
syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201)

3m15.941830355s ago: executing program 46 (id=673):
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10290}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1d, 0x0, 0x0, 0x6}]}}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r4 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000140)={'virt_wifi0\x00', 0x1})
sendmsg(r2, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x80)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x4, 0xe0, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000480)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2f}}, @in6={0xa, 0x4e20, 0x0, @empty, 0xfff}, @in={0x2, 0x4e23, @rand_addr=0x64010102}], 0x3c)
r6 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)={'#! ', './control/file0'}, 0x13)
execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x5, 0xffffffffffffffff, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2})
ioctl$vim2m_VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {0x77359400}, {0x1, 0xc, 0x9, 0xc, 0x3, 0x8, "c12400"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000})
lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x1)
lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f)

2m28.985391894s ago: executing program 0 (id=718):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000380)={{0x0, 0xfff, 0x4b, 0x8009}, 'syz0\x00', 0x11})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(0x0, 0xfffffffffffffffe, 0x2)
r2 = dup3(r1, r0, 0x0)
read$FUSE(r2, 0x0, 0x0)

2m27.660616425s ago: executing program 0 (id=721):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070011000000060004404e220000060005"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)

2m26.106553666s ago: executing program 0 (id=724):
r0 = socket$inet6(0xa, 0x3, 0x84)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@local, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x56, 0x4e21, 0x0, 0x2}, {0x7, 0x0, 0x0, 0x2, 0x1, 0x2000000, 0x1}, {0x5, 0x0, 0x4}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@loopback, 0x0, 0x32}, 0xa, @in6=@empty, 0x3507, 0x4, 0x1, 0x0, 0xffffffff, 0x1, 0x6}}, 0xe8)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c)

2m25.08568738s ago: executing program 0 (id=727):
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@security={'security\x00', 0x4, 0x4, 0x378, 0xffffffff, 0x100, 0x1d8, 0x0, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x7fffffe, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, [0xff000000, 0xff000000, 0xffffffff], [0xff000000, 0xff000000, 0xffffffff, 0xff000000], 'dvmrp0\x00', 'vlan0\x00', {0xff}, {0xff}, 0x0, 0xb, 0x3, 0x18}, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@eui64={{0x28}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x40, 0x3, 0x12}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@private1, @private1, [0xffffffff, 0xffffffff], [0x0, 0xffffff00, 0xffffffff], 'geneve1\x00', 'macvlan0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x14}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8)

2m24.530834075s ago: executing program 0 (id=730):
r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0)
write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)=0x400)

2m23.792975316s ago: executing program 0 (id=734):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$binfmt_misc(r3, &(0x7f0000000040), 0xe09)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)={0x20, 0x5e, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x8000000000000001}, @nested={0x4, 0x1}]}, 0x20}], 0x1}, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
pread64(r5, &(0x7f0000000900)=""/4108, 0x100c, 0xc2)

2m8.471112663s ago: executing program 47 (id=734):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$binfmt_misc(r3, &(0x7f0000000040), 0xe09)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)={0x20, 0x5e, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x8000000000000001}, @nested={0x4, 0x1}]}, 0x20}], 0x1}, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
pread64(r5, &(0x7f0000000900)=""/4108, 0x100c, 0xc2)

2m6.018285207s ago: executing program 1 (id=767):
add_key$user(&(0x7f0000000380), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000780)={0x29e9c934, 0x3, 0x7f, 0x404}, 0x10)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00042dbd7000fd"], 0x14}, 0x1, 0x0, 0x0, 0x2010}, 0x4001)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000340)=0x2a8, 0x4)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x0, 0x180, 0x2, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x8, 0x0, 0x45, 0x1, 0xbdb], 0xdddd0000, 0x1c4213})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x100}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x20, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa4}}, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10)
ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f00000002c0)=@add_del={0x2, &(0x7f0000000100)='ip_vti0\x00'})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2m5.04329682s ago: executing program 1 (id=772):
pipe(0x0)
fcntl$setpipe(0xffffffffffffffff, 0x408, 0x0)

2m4.068910944s ago: executing program 1 (id=773):
epoll_create1(0x80000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e)
r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB])
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)

1m58.355976819s ago: executing program 9 (id=780):
r0 = socket$inet6(0x10, 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x48, 0x0, 0x0, 0xffeffffe}, {0x16}]}, 0x10)
sendto$inet6(r0, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c0000000", 0x1b, 0x0, 0x0, 0x0)

1m57.8667495s ago: executing program 9 (id=781):
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000780)=""/4080, 0xff0}], 0x1)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)

1m56.283506381s ago: executing program 9 (id=783):
socket$inet(0x2, 0x3, 0x9)
socket$can_bcm(0x1d, 0x2, 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000001400), 0x101)
r4 = epoll_create(0xff9)
write$FUSE_INTERRUPT(r3, &(0x7f0000000040)={0x10}, 0x10)
sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="3000000000000000840000000100000008000600040000007f01000009000000020000000900000001feffff", @ANYRES32=0x0, @ANYBLOB="2000000000000000840000000200000000000e00"], 0x50, 0x4040000}, 0xd0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)={0x9000001c})
ioctl$VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)=@multiplanar_mmap={0x4b, 0xa, 0x4, 0x10000, 0xffffffff, {0x77359400}, {0x4, 0x8, 0x3, 0x6, 0x7, 0x7, "add52af1"}, 0x0, 0x1, {&(0x7f0000000200)=[{0x7, 0x5, {}, 0x8f800000}, {0x7f, 0x7, {0x80}, 0x8001}]}, 0x37})
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000000)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0273cfb92c00000000000000070000000500060000000ea3fb004e24ffff00a3f02c0177ff49f7e26c85639f70f7e5156e626000009885000000000000"], 0x38}, 0x1, 0x400000000000000}, 0x0)
syz_io_uring_setup(0x1e1e, 0x0, 0x0, &(0x7f0000000000)=<r6=>0x0)
syz_io_uring_submit(0x0, r6, 0x0)
connect$inet6(r2, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c)
r7 = dup2(r2, r2)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_group_source_req(r8, 0x0, 0x15, &(0x7f0000000a40)={0x3, {{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x4}}}, {{0x2, 0x3, @loopback}}}, 0x108)
socket(0x2b, 0x1, 0x1)
sendmmsg$unix(r7, &(0x7f0000008380), 0x400000000000174, 0x4008890)
openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r9, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8)

1m54.42487602s ago: executing program 1 (id=784):
r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r0, 0x7b0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004002, 0x0, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r2 = dup(r1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x13, r2, 0x2000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0xffffffdb)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

1m54.085580077s ago: executing program 9 (id=785):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000225c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000940)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3a64, 0x5, 0x1, 0x4, 0xbb70, 0x2e}}}}]}, 0x4c}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0xd, 0xb}, {0x3, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x7f, 0x400000, 0x0, 0x3, 0x6, 0x1, 0x6, 0x400}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x240040e0}, 0x20044890)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)

1m52.626551285s ago: executing program 9 (id=790):
r0 = socket$inet6(0x10, 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x48, 0x0, 0x0, 0xffeffffe}, {0x16}]}, 0x10)
sendto$inet6(r0, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c0000000", 0x1b, 0x0, 0x0, 0x0)

1m52.325712344s ago: executing program 1 (id=791):
socket$nl_generic(0x11, 0x3, 0x10)
socket$unix(0x1, 0x5, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_SIOCADDDLCI(r0, 0x8980, 0x0)
socket$inet6(0xa, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x5, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x6)
bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000000c00)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5467a932b77674e802a0d42bc6099ad238af770b5ed8925161729298700000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bff57002c1097f92e91002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff7a1ef3282830689da6b53b263339863297771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd000c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301fb997316dbf17866fb84d4173731efe895ff2e1c55ef08235a0126e01254c44060926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8096d5742db41bd61080dcbe40e0f802fc12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7ad333545794f37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8e3070000001e48418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec84ac3571f02f647b3385b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1531497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750890ae71555b3228b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288d139bd3da230ed05a8fe64680b0a3f9f2dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b9100000000a55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c776f4b4ce07e1c6fa66fcfc7a228805f76785efc0ceb1c8e5729c66418d169fc03aa18854693ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7e47"], 0x0, 0x2}, 0x94)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a00010000"], 0x64}}, 0x0)

1m52.275222626s ago: executing program 3 (id=792):
mprotect(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x3000003)

1m51.935373977s ago: executing program 9 (id=793):
epoll_create1(0x80000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e)
r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB])
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)

1m51.631179452s ago: executing program 3 (id=795):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2080, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd(0x1)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000002c0)={0x0, 0x0, 0x4, r2, 0xb})
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x6, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x5}]}}]}, 0x3c}}, 0x0)

1m51.579390641s ago: executing program 1 (id=796):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0xeecd, 0x0, 0x20000001, 0xb3}, &(0x7f0000000000), &(0x7f0000000100))
r2 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r2, 0x0, 0x0)

1m50.60040611s ago: executing program 3 (id=797):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x4)
write(r0, &(0x7f00000002c0), 0x0)

1m49.768212721s ago: executing program 3 (id=799):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)

1m48.78432547s ago: executing program 3 (id=801):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="02030003310000002cbd7000fbdbdf2502000900080000001c0000000000000005000600000000000a0000000000000000000000000000000000000000000001020000000000000002000100000000000000070c0000000005000500000000000a00000000000000fc0100000000000000000000000000010700000000000000210008000008"], 0x188}, 0x1, 0x7}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x20000800)
gettid()
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000002050005000a000000050001000700ff0005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000000c0007800800124000000014"], 0x5c}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r5, 0x84, 0x78, 0x0, 0x0)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)

1m48.075236242s ago: executing program 3 (id=802):
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x7, 0x4010, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps_rollup\x00')
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x77c})
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f00000002c0))
mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000580000/0x4000)=nil)
mremap(&(0x7f0000580000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00007ff000/0x2000)=nil)
socket$inet6_tcp(0xa, 0x1, 0x0)
io_setup(0x2007, &(0x7f0000000980)=<r5=>0x0)
eventfd2(0x9, 0x0)
io_pgetevents(r5, 0x2, 0x0, 0x0, 0x0, 0x0)
io_submit(r5, 0x0, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0)
syz_open_procfs$pagemap(0x0, &(0x7f0000000240))
ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f00001cd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x9, &(0x7f00000002c0), 0x0, 0xc303, 0x0, 0x0, 0x0, 0x64})
r6 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f0000000040)={0x0, 0x1, 0x4, {0x9, @pix_mp={0x12, 0x5be7, 0xb5315258, 0x6, 0xb, [{0x80000004, 0x7}, {0x7ff, 0x5}, {0x10000001, 0x9}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x7, 0x489aa92e}, {0x1}, {0xff, 0x7}], 0x1, 0xc, 0x2, 0x0, 0x3}}, 0xfffffffd})
readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/122, 0x7a}], 0x1)

1m35.711283659s ago: executing program 48 (id=793):
epoll_create1(0x80000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e)
r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB])
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)

1m35.196423001s ago: executing program 49 (id=796):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0xeecd, 0x0, 0x20000001, 0xb3}, &(0x7f0000000000), &(0x7f0000000100))
r2 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r2, 0x0, 0x0)

1m32.336406454s ago: executing program 50 (id=802):
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x7, 0x4010, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps_rollup\x00')
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x77c})
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f00000002c0))
mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000580000/0x4000)=nil)
mremap(&(0x7f0000580000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00007ff000/0x2000)=nil)
socket$inet6_tcp(0xa, 0x1, 0x0)
io_setup(0x2007, &(0x7f0000000980)=<r5=>0x0)
eventfd2(0x9, 0x0)
io_pgetevents(r5, 0x2, 0x0, 0x0, 0x0, 0x0)
io_submit(r5, 0x0, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0)
syz_open_procfs$pagemap(0x0, &(0x7f0000000240))
ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f00001cd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x9, &(0x7f00000002c0), 0x0, 0xc303, 0x0, 0x0, 0x0, 0x64})
r6 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f0000000040)={0x0, 0x1, 0x4, {0x9, @pix_mp={0x12, 0x5be7, 0xb5315258, 0x6, 0xb, [{0x80000004, 0x7}, {0x7ff, 0x5}, {0x10000001, 0x9}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x7, 0x489aa92e}, {0x1}, {0xff, 0x7}], 0x1, 0xc, 0x2, 0x0, 0x3}}, 0xfffffffd})
readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/122, 0x7a}], 0x1)

27.504261059s ago: executing program 4 (id=863):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000180)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@mblk_io_submit}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$eJzs3U9oHGUbAPBnZrNN/+T70g++Dz6lh6JChdJN0j9aPbVXsVDoQfCiYbMNJZtsySbahIDpvYg9iEov9aYHj4oHD+LFo1cvimeh2KDQ9KArm51N03S3bmI2W7O/H0z2fWdm93nfmX3e7AwzTAB962j9TxrxVERcTCKGNywbiGzh0cZ6qytLxfsrS8UkarVLvySRRMS9laVic/0kez0UEcsR8f+I+CYfcTxd/8h9zUJ1YXFqvFwuzWb1kbnpqyPVhcUTV6bHJ0uTpZlTL7505uzpM2MnxzY2935tYy2/tb7e+PHmuze+e+X2zU8/O7JcfH88iXMxlC3b2I+d1Ngm+Ti3af7pbgTroaTXDWBbclme11PpfzEcuSzrW6ltHBwGd6V5QBfVBiNq6zYUgT6QSHroU83fAfXj3+a0m78/7pxvHIDU466uLBXfiWb8gca5idi/dmxy8NfkoSOT+vHm4d1sKHvS8vWIGB0YePT7n2Tfv+0b3YkG0lVfn2/sqEf3f7o+/kSL8Weoee70b2qOf6vZ+LfaIn6uzfh3scMYv7/+00dt418fjKdbxk/W4yct4qcR8WaH8W+99uXZdstqH0cci9bxm5LHnx8euXylXBpt/G0Z46tjR15u3/+Ig23iN87Z7l9ryMb+78valHbY/y++/fyZ5cfEf/7Zx+//Vtv/QES812H8/9z75NV2y+5cT+7WfwVsdf8nkY/bHcZ/4dzRH7Kis4YAAAAAAAAAALCD0rVr2ZK0sF5O00KhcQ/vf+NgWq5U545frszPTDSueTsc+bR5pdVwo57U62PZ9bjN+slN9VO5LGDuwFq9UKyUJ3rcdwAAAAAAAAAAAAAAAAAAAHhSHNp0//9vubX7/zc/rhrYq9o/8hvY6+Q/9K+H8z/pWTuA3ef/P/StmvyH/iX/oX/Jf+hf8h/6l/yH/iX/oX/JfwAAAAAAAAAAAAAAAAAAAAAAAAAA6IqLFy7Up9r9laVivT4xsDA/VXnrxESpOlWYni8WipXZq4XJSmWyXCoUK9N/9XlJpXJ1NGbmr43MlapzI9WFxTemK/MzzWeKlvJd7xEAAAAAAAAAAAAAAAAAAAD88wytTUlaiMg36mlaKET8KyIOJ5FcvlIujUbEvyPi+1x+sF4f63WjAQAAAAAAAAAAAAAAAAAAYI+pLixOjZfLpdnuFQayUF0M0XlhYCsrR8Tyzjaj/olbflc+24A93nR7o5B7Mr6HT36hh4MSAAAAAAAAAAAAAAAAAAD0qQc3/Xb6jj+62yAAAAAAAAAAAAAAAAAAAADoS+nPSUTUp2PDzw1tXrovWc2tvUbE27cufXBtfG5udqw+/+76/LkPs/kne9F+oFPNPE0jop7HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwAPVhcWp8XK5NLvNwmAH6/S6jwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADb8WcAAAD//y4WzlE=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
pwrite64(r0, &(0x7f0000000080)='2', 0x1, 0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0)
mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', 0x0, 0x2200890, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)

24.06610041s ago: executing program 4 (id=867):
r0 = socket$netlink(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x2, 0x0, {}, [@NHA_OIF={0x8, 0x5, r3}]}, 0x20}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x20, 0x10, 0x10, 0xff, 0x1, 0x0, 0x1, 0x20000100}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010)
writev(r0, &(0x7f00000003c0), 0x0)

22.668712342s ago: executing program 4 (id=869):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(0x0, r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x2c, 0x2, {{0x7, 0x2, 0x80, 0x2, 0x2, 0x6}, [@TCA_NETEM_CORR={0x10, 0x1, {0x5, 0xfffff937, 0x7}}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008001}, 0x8080)
sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffe6, 0xb}, {0xffe0, 0x14}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xf, 0x2, 0xe, 0x0, 0x7fff, 0x38f7}, {0x9, 0x1, 0x0, 0xfffe, 0x8, 0x401}, 0xf5, 0x80000001, 0x210e}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xee3ce641f2ef5769}, @TCA_TBF_BURST={0x8, 0x6, 0x3}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20004064}, 0x4008000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

19.596484038s ago: executing program 2 (id=877):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19})
syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@broadcast, @dev, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @local, @empty, @empty, @local}}}}, 0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e23, 0x7fffffff, @remote, 0x3}}, 0xf, 0x7c, 0x10, 0xfffff800, 0x8f, 0x9, 0x3}, &(0x7f0000000040)=0x9c)
close(r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000009c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0)
syz_open_dev$video4linux(&(0x7f0000000380), 0x2, 0x20)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000240), 0x1, 0x101000)
write$evdev(r3, &(0x7f0000000280)=[{{}, 0x12, 0x8, 0x4}], 0x18)
sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000808000400", @ANYRES32=r2, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r2], 0x38}}, 0x10)
sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)={0x1c, 0x0, 0x10, 0x70bd29, 0x25dfdbf7, {}, [@NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x9}]}, 0x1c}}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x18, 0x2e, 0x1, 0x70bd28, 0x25dfdbfc, {0x4}, [@nested={0x4, 0xd}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

18.576944206s ago: executing program 4 (id=878):
r0 = socket$netlink(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x2, 0x0, {}, [@NHA_OIF={0x8, 0x5, r3}]}, 0x20}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x20, 0x10, 0x10, 0xff, 0x1, 0x0, 0x1, 0x20000100}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010)
writev(r0, &(0x7f00000003c0)=[{0x0}], 0x1)

17.549041172s ago: executing program 4 (id=880):
syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYRES32=0x0], 0x47, 0xc11, &(0x7f0000000d00)="$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")
symlink(&(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000002c0)='.\x02\x00')
creat(&(0x7f0000000e00)='.\x02\x00', 0x106)

17.548586462s ago: executing program 8 (id=881):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = syz_io_uring_setup(0x10d2, &(0x7f0000002340)={0x0, 0x7a8e, 0x80, 0x0, 0x351}, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8})
io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0)

15.837401797s ago: executing program 8 (id=883):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x18)

15.639801685s ago: executing program 4 (id=884):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)

15.052151122s ago: executing program 8 (id=886):
openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)={0x454a83, 0x120, 0x9}, 0x18)
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x18c)
close(r0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x200400, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}})

14.697089428s ago: executing program 2 (id=887):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(0x0, r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x2c, 0x2, {{0x7, 0x2, 0x80, 0x2, 0x2, 0x6}, [@TCA_NETEM_CORR={0x10, 0x1, {0x5, 0xfffff937, 0x7}}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008001}, 0x8080)
sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffe6, 0xb}, {0xffe0, 0x14}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xf, 0x2, 0xe, 0x0, 0x7fff, 0x38f7}, {0x9, 0x1, 0x0, 0xfffe, 0x8, 0x401}, 0xf5, 0x80000001, 0x210e}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xee3ce641f2ef5769}, @TCA_TBF_BURST={0x8, 0x6, 0x3}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20004064}, 0x4008000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

14.33653864s ago: executing program 8 (id=888):
r0 = inotify_init()
close_range(r0, 0xffffffffffffffff, 0x0)

13.456733455s ago: executing program 2 (id=889):
r0 = socket$netlink(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x2, 0x0, {}, [@NHA_OIF={0x8, 0x5, r3}]}, 0x20}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x20, 0x10, 0x10, 0xff, 0x1, 0x0, 0x1, 0x20000100}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010)
writev(r0, &(0x7f00000003c0)=[{0x0}], 0x1)

13.435976981s ago: executing program 8 (id=890):
r0 = getpgrp(0xffffffffffffffff)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00')
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup, 0xffffffffffffffff, 0x11}, 0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x4, 0x14a}})
ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000080)={0xfffe3523, 0x6, 0xefcb, 0x7fff, 0xb2, "20ab980900eea4a7446c180000cd681ec267a0", 0x6, 0x4})
ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000000))

9.008180201s ago: executing program 8 (id=892):
r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000002c0)={&(0x7f00000001c0)=[{0x2, 0x8411, 0x21, &(0x7f00000006c0)="0203204bdcc36cda8907f47563863d1428f47b34551c000bce0f6bc6584f11a748"}], 0x1})
syz_usb_control_io$uac1(r0, &(0x7f0000000180)={0x14, &(0x7f00000003c0)={0x40, 0x10, 0x2, {0x2, 0x2}}, 0x0}, 0x0)

7.956069513s ago: executing program 2 (id=893):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000200)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}, {@nolazytime}, {@mb_optimize_scan}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$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")
r0 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f)
write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x1000000000003, 0x3, 0x8000000000007, 0xaa, 0xff7fffff, 0x8, {0x0, 0x17f, 0x20fb, 0xfffffffffffffffc, 0x85, 0xd615, 0x80, 0x2, 0x2000006, 0x4000, 0x9, 0xee00, 0x0, 0x4, 0x1}}, {0x0, 0x11}}}, 0xa0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x4842, 0x1cb)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0)
write$FUSE_DIRENT(r1, &(0x7f00000000c0)={0x10, 0xfffffffffffffffe}, 0x10)

6.886921246s ago: executing program 7 (id=894):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x4c80, 0x7000000)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e08060c08"], 0xb)

6.269853331s ago: executing program 7 (id=895):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x18)

6.088840108s ago: executing program 2 (id=896):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19})
syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@broadcast, @dev, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @local, @empty, @empty, @local}}}}, 0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e23, 0x7fffffff, @remote, 0x3}}, 0xf, 0x7c, 0x10, 0xfffff800, 0x8f, 0x9, 0x3}, &(0x7f0000000040)=0x9c)
close(r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000009c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0)
syz_open_dev$video4linux(&(0x7f0000000380), 0x2, 0x20)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000240), 0x1, 0x101000)
write$evdev(r3, &(0x7f0000000280)=[{{}, 0x12, 0x8, 0x4}], 0x18)
sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000808000400", @ANYRES32=r2, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r2], 0x38}}, 0x10)
sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)={0x1c, 0x0, 0x10, 0x70bd29, 0x25dfdbf7, {}, [@NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x9}]}, 0x1c}}, 0x0)
socketpair(0x9, 0x100000005, 0x0, &(0x7f0000000000))

3.50758855s ago: executing program 7 (id=897):
openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)={0x454a83, 0x120, 0x9}, 0x18)
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x18c)
close(r0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x200400, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}})

2.891657182s ago: executing program 7 (id=898):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0)
close(r3)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x2c, 0x2, {{0x7, 0x2, 0x80, 0x2, 0x2, 0x6}, [@TCA_NETEM_CORR={0x10, 0x1, {0x5, 0xfffff937, 0x7}}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008001}, 0x8080)
sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffe6, 0xb}, {0xffe0, 0x14}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xf, 0x2, 0xe, 0x0, 0x7fff, 0x38f7}, {0x9, 0x1, 0x0, 0xfffe, 0x8, 0x401}, 0xf5, 0x80000001, 0x210e}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xee3ce641f2ef5769}, @TCA_TBF_BURST={0x8, 0x6, 0x3}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20004064}, 0x4008000)
ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

1.894263754s ago: executing program 7 (id=899):
r0 = inotify_init()
close_range(r0, 0xffffffffffffffff, 0x0)

1.129092347s ago: executing program 7 (id=900):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x400, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000080)={[{@test_dummy_encryption_v1}, {@test_dummy_encryption_v1}]}, 0x1, 0x241, &(0x7f0000000540)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
sigaltstack(&(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffeb}, 0x0)
r3 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000048040)=""/102392, 0x18ff8)
pipe2$watch_queue(&(0x7f00000003c0), 0x80)
keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0)
clock_adjtime(0x0, &(0x7f00000006c0)={0x7fff, 0x1000000007fff, 0x7fff, 0x0, 0x10000000000000, 0x2c43, 0xfffffffb, 0x9, 0x0, 0x300, 0x5eb3b4c5, 0x2902, 0x20, 0x100000001, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x5, 0x6, 0x0, 0x400, 0x7481, 0x0, 0x8})
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
truncate(&(0x7f0000000000)='./file1\x00', 0x6)
mount$9p_fd(0x0, 0x0, 0x0, 0x8440, 0x0)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2)

109.76623ms ago: executing program 51 (id=884):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)

0s ago: executing program 2 (id=902):
r0 = socket$netlink(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x2, 0x0, {}, [@NHA_OIF={0x8, 0x5, r3}]}, 0x20}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x20, 0x10, 0x10, 0xff, 0x1, 0x0, 0x1, 0x20000100}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010)
writev(r0, &(0x7f00000003c0)=[{0x0}], 0x1)

kernel console output (not intermixed with test programs):

1a failed: -4
[  633.603465][ T8131] 8021q: adding VLAN 0 to HW filter on device batadv0
[  633.886025][ T8142] 8021q: adding VLAN 0 to HW filter on device batadv0
[  634.313732][ T5801] Bluetooth: hci7: command 0x0c1a tx timeout
[  634.364291][ T8148] 8021q: adding VLAN 0 to HW filter on device batadv0
[  634.462437][ T8171] 8021q: adding VLAN 0 to HW filter on device batadv0
[  634.726765][ T8374] 8021q: VLANs not supported on vcan0
[  634.952989][ T8148] veth0_vlan: entered promiscuous mode
[  635.086500][ T8148] veth1_vlan: entered promiscuous mode
[  635.117185][ T5801] Bluetooth: hci1: command 0x0c1a tx timeout
[  635.190047][ T5801] Bluetooth: hci8: command 0x0c1a tx timeout
[  635.196384][   T50] Bluetooth: hci4: command 0x0c1a tx timeout
[  635.203955][ T5809] Bluetooth: hci3: command 0x0c1a tx timeout
[  635.521103][ T8148] veth0_macvtap: entered promiscuous mode
[  635.580463][ T8148] veth1_macvtap: entered promiscuous mode
[  635.676269][ T8095] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  635.711820][ T8148] batman_adv: batadv0: Interface activated: batadv_slave_0
[  635.820032][ T8148] batman_adv: batadv0: Interface activated: batadv_slave_1
[  635.878591][ T3004] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  635.889750][ T8095] usb 3-1: Using ep0 maxpacket: 8
[  635.920387][ T3004] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  635.929397][ T3004] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  635.982040][ T8095] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  635.991399][ T8095] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  636.002034][ T8095] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  636.004302][ T3004] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  636.015514][ T8095] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  636.033770][ T8095] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  636.213868][ T8095] usbtmc 3-1:16.0: bulk endpoints not found
[  636.688091][ T8131] veth0_vlan: entered promiscuous mode
[  636.781491][ T8131] veth1_vlan: entered promiscuous mode
[  637.234416][ T8142] veth0_vlan: entered promiscuous mode
[  637.336137][ T8142] veth1_vlan: entered promiscuous mode
[  637.404751][ T8131] veth0_macvtap: entered promiscuous mode
[  637.518134][ T8131] veth1_macvtap: entered promiscuous mode
[  637.735500][ T8131] batman_adv: batadv0: Interface activated: batadv_slave_0
[  637.754522][ T8142] veth0_macvtap: entered promiscuous mode
[  637.874443][ T8142] veth1_macvtap: entered promiscuous mode
[  637.899187][ T8171] veth0_vlan: entered promiscuous mode
[  637.915304][ T8131] batman_adv: batadv0: Interface activated: batadv_slave_1
[  637.978297][ T3004] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  638.022612][ T3004] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  638.090541][ T3004] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  638.129192][ T8142] batman_adv: batadv0: Interface activated: batadv_slave_0
[  638.170565][ T8171] veth1_vlan: entered promiscuous mode
[  638.184893][ T3004] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  638.244756][ T8142] batman_adv: batadv0: Interface activated: batadv_slave_1
[  638.312636][   T32] usb 3-1: USB disconnect, device number 5
[  638.354736][ T4269] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  638.436260][ T4269] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  638.513958][ T4269] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  638.552735][ T4269] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  638.725030][ T8171] veth0_macvtap: entered promiscuous mode
[  638.790951][ T8171] veth1_macvtap: entered promiscuous mode
[  639.020784][ T8171] batman_adv: batadv0: Interface activated: batadv_slave_0
[  639.084615][ T8171] batman_adv: batadv0: Interface activated: batadv_slave_1
[  639.227721][ T7517] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  639.341457][ T7517] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  639.395768][ T7517] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  639.465224][ T7517] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  640.685432][   T30] audit: type=1326 audit(1768351695.065:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8433 comm="syz.2.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28e4b8f749 code=0x7ffc0000
[  640.711474][   T30] audit: type=1326 audit(1768351695.075:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8433 comm="syz.2.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28e4b8f749 code=0x7ffc0000
[  640.893520][   T30] audit: type=1326 audit(1768351695.125:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8433 comm="syz.2.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f28e4b8f749 code=0x7ffc0000
[  640.916185][   T30] audit: type=1326 audit(1768351695.125:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8433 comm="syz.2.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28e4b8f749 code=0x7ffc0000
[  640.941874][   T30] audit: type=1326 audit(1768351695.135:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8433 comm="syz.2.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f28e4b8f749 code=0x7ffc0000
[  640.965066][   T30] audit: type=1326 audit(1768351695.135:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8433 comm="syz.2.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28e4b8f749 code=0x7ffc0000
[  640.988072][   T30] audit: type=1326 audit(1768351695.145:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8433 comm="syz.2.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28e4b8f749 code=0x7ffc0000
[  642.193953][ T8444] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[  642.205068][ T8444] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  642.211973][ T8444] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  642.218604][ T8444] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  642.227312][ T8444] Bluetooth: hci8: Opcode 0x0c1a failed: -4
[  643.430440][   T50] Bluetooth: hci7: command 0x0c1a tx timeout
[  643.925532][ T8477] 8021q: VLANs not supported on vcan0
[  644.159649][ T3987] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  644.167675][ T3987] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  644.319738][   T50] Bluetooth: hci8: command 0x0c1a tx timeout
[  644.323719][ T5801] Bluetooth: hci4: command 0x0c1a tx timeout
[  644.326204][ T5809] Bluetooth: hci3: command 0x0c1a tx timeout
[  644.343571][   T50] Bluetooth: hci1: command 0x0c1a tx timeout
[  644.484889][ T3004] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  644.496111][ T3004] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  645.937482][ T7542] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  645.946271][ T7542] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  646.167054][ T3004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  646.175504][ T3004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  646.298045][   T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  646.307010][   T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  646.502453][   T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  646.510769][   T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  646.668575][   T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  646.676777][   T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  647.061573][ T3941] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  647.069981][ T3941] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  648.545274][ T8520] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[  648.552345][ T8520] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  648.559028][ T8520] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  648.565928][ T8520] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  648.572757][ T8520] Bluetooth: hci8: Opcode 0x0c1a failed: -4
[  648.900483][ T5884] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  649.124849][ T5884] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  649.136350][ T5884] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  649.146569][ T5884] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  649.162811][ T5884] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  649.328370][ T5884] usb 7-1: config 0 descriptor??
[  649.343305][ T8537] 8021q: VLANs not supported on vcan0
[  649.820619][ T5884] hid_parser_main: 5 callbacks suppressed
[  649.820721][ T5884] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0
[  649.835705][ T8481] Bluetooth: hci7: command 0x0c1a tx timeout
[  649.884110][ T5884] cp2112 0003:10C4:EA90.0004: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.6-1/input0
[  650.017642][ T5884] cp2112 0003:10C4:EA90.0004: Part Number: 0x00 Device Version: 0x00
[  650.251395][ T8548] netlink: 8 bytes leftover after parsing attributes in process `syz.0.506'.
[  650.643946][ T8481] Bluetooth: hci8: command 0x0c1a tx timeout
[  650.650750][ T5795] Bluetooth: hci4: command 0x0c1a tx timeout
[  650.650873][ T5801] Bluetooth: hci3: command 0x0c1a tx timeout
[  650.651034][ T5801] Bluetooth: hci1: command 0x0c1a tx timeout
[  650.722346][ T8523] cp2112 0003:10C4:EA90.0004: Multi-message I2C transactions not supported
[  650.857543][ T5884] cp2112 0003:10C4:EA90.0004: error reading lock byte: -71
[  650.981686][ T5884] usb 7-1: USB disconnect, device number 2
[  651.205957][ T8551] fido_id[8551]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory
[  654.561919][ T5855] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  654.750031][ T5855] usb 1-1: Using ep0 maxpacket: 8
[  654.800930][ T5855] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[  654.809586][ T5855] usb 1-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config
[  654.820483][ T5855] usb 1-1: config 179 has no interface number 0
[  654.826911][ T5855] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  654.837144][ T5855] usb 1-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23
[  654.850615][ T5855] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  654.860027][ T5855] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  655.323271][ T5884] usb 1-1: USB disconnect, device number 11
[  656.028395][ T5884] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  656.264966][ T5884] usb 7-1: Using ep0 maxpacket: 16
[  656.341947][ T5884] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  656.409306][ T5884] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  656.418800][ T5884] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  656.432507][ T5884] usb 7-1: Product: syz
[  656.438550][ T5884] usb 7-1: Manufacturer: syz
[  656.443488][ T5884] usb 7-1: SerialNumber: syz
[  656.592734][ T5884] usb 7-1: config 0 descriptor??
[  656.651319][ T5884] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  656.660814][ T5884] em28xx 7-1:0.0: DVB interface 0 found: bulk
[  657.263278][ T5884] em28xx 7-1:0.0: chip ID is em2765
[  657.904181][ T5884] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  657.912630][ T5884] em28xx 7-1:0.0: board has no eeprom
[  658.066678][ T5884] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  658.074917][ T5884] em28xx 7-1:0.0: dvb set to bulk mode.
[  658.084920][ T8095] em28xx 7-1:0.0: Binding DVB extension
[  658.212946][ T5884] usb 7-1: USB disconnect, device number 3
[  658.221349][ T5884] em28xx 7-1:0.0: Disconnecting em28xx
[  658.640884][ T8095] em28xx 7-1:0.0: Registering input extension
[  658.670229][ T5884] em28xx 7-1:0.0: Closing input extension
[  658.769793][ T5855] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  658.905484][ T5884] em28xx 7-1:0.0: Freeing device
[  659.042215][ T5855] usb 5-1: Using ep0 maxpacket: 16
[  659.079902][ T5855] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  659.092316][ T5855] usb 5-1: config 0 has no interfaces?
[  659.246329][ T5855] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  659.255735][ T5855] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  659.264277][ T5855] usb 5-1: Product: syz
[  659.268571][ T5855] usb 5-1: Manufacturer: syz
[  659.273558][ T5855] usb 5-1: SerialNumber: syz
[  659.368269][ T5855] usb 5-1: config 0 descriptor??
[  659.546941][ T8633] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  660.769701][ T8639] input: syz0 as /devices/virtual/input/input9
[  661.941573][ T5884] usb 5-1: USB disconnect, device number 5
[  662.398178][ T8650] fuse: Bad value for 'rootmode'
[  662.829870][ T5855] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  663.042144][ T5855] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  663.053307][ T5855] usb 3-1: config 0 has no interface number 0
[  663.182059][ T5855] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  663.193026][ T5855] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  663.202404][ T5855] usb 3-1: Product: syz
[  663.206764][ T5855] usb 3-1: Manufacturer: syz
[  663.212284][ T5855] usb 3-1: SerialNumber: syz
[  663.393766][ T5855] usb 3-1: config 0 descriptor??
[  663.628997][ T5855] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  663.670462][ T5855] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  663.682141][ T5855] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  663.693878][ T5855] usb 3-1: media controller created
[  663.831573][ T5855] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  664.586470][ T5855] usb 3-1: USB disconnect, device number 6
[  664.755996][ T1287] ieee802154 phy0 wpan0: encryption failed: -22
[  664.762946][ T1287] ieee802154 phy1 wpan1: encryption failed: -22
[  665.892207][ T8678] fuse: Bad value for 'fd'
[  666.290203][ T5855] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  666.516154][ T5855] usb 5-1: Using ep0 maxpacket: 16
[  666.638426][ T5855] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  666.739114][ T5855] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  666.750464][ T5855] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  666.758693][ T5855] usb 5-1: Product: syz
[  666.765600][ T5855] usb 5-1: Manufacturer: syz
[  666.771602][ T5855] usb 5-1: SerialNumber: syz
[  666.932543][ T5855] usb 5-1: config 0 descriptor??
[  666.987799][ T5855] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  666.997418][ T5855] em28xx 5-1:0.0: DVB interface 0 found: bulk
[  667.450402][  T793] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  667.679961][  T793] usb 7-1: Using ep0 maxpacket: 16
[  667.716521][ T5855] em28xx 5-1:0.0: chip ID is em2765
[  667.728722][  T793] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  667.739589][  T793] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  667.857703][  T793] usb 7-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  667.867310][  T793] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  667.875953][  T793] usb 7-1: Product: syz
[  667.880538][  T793] usb 7-1: Manufacturer: syz
[  667.885484][  T793] usb 7-1: SerialNumber: syz
[  668.026747][  T793] usb 7-1: config 0 descriptor??
[  668.331342][ T5855] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  668.340055][ T5855] em28xx 5-1:0.0: board has no eeprom
[  668.526088][ T5855] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  668.534424][ T5855] em28xx 5-1:0.0: dvb set to bulk mode.
[  668.542705][  T793] em28xx 5-1:0.0: Binding DVB extension
[  668.683125][ T5855] usb 5-1: USB disconnect, device number 6
[  668.735186][ T8695] fuse: Unknown parameter 'user_id00000000000000000000'
[  668.760323][ T5855] em28xx 5-1:0.0: Disconnecting em28xx
[  669.150301][  T793] em28xx 5-1:0.0: Registering input extension
[  669.258596][ T5855] em28xx 5-1:0.0: Closing input extension
[  671.136304][ T5855] em28xx 5-1:0.0: Freeing device
[  671.160544][ T5884] usb 7-1: USB disconnect, device number 4
[  672.246128][ T8731] fuse: Bad value for 'rootmode'
[  672.569714][ T5884] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  672.827103][ T5884] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  672.835619][ T5884] usb 5-1: config 0 has no interface number 0
[  672.914181][ T5884] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  672.923726][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  672.932209][ T5884] usb 5-1: Product: syz
[  672.936567][ T5884] usb 5-1: Manufacturer: syz
[  672.941504][ T5884] usb 5-1: SerialNumber: syz
[  673.039124][ T5884] usb 5-1: config 0 descriptor??
[  673.261238][ T5884] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  673.374577][ T5884] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  673.385396][ T8741] fuse: Bad value for 'rootmode'
[  673.386619][ T5884] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  673.398877][ T5884] usb 5-1: media controller created
[  673.536942][ T5884] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  673.960056][ T5884] i2c i2c-1: ec100: i2c rd failed=-71 reg=33
[  674.608685][ T5884] usb 5-1: USB disconnect, device number 7
[  675.204779][ T8754] fuse: Bad value for 'fd'
[  676.250143][ T8764] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  676.729763][ T5855] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  677.063686][ T5855] usb 5-1: Using ep0 maxpacket: 16
[  677.231855][ T5855] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  677.242317][ T5855] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  677.450118][ T5855] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  677.459800][ T5855] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  677.467935][ T5855] usb 5-1: Product: syz
[  677.472318][ T5855] usb 5-1: Manufacturer: syz
[  677.477033][ T5855] usb 5-1: SerialNumber: syz
[  677.567402][ T5855] usb 5-1: config 0 descriptor??
[  679.757059][ T5884] usb 5-1: USB disconnect, device number 8
[  680.314599][ T8788] netlink: 40 bytes leftover after parsing attributes in process `syz.0.559'.
[  680.655477][ T8792] fuse: Unknown parameter 'use00000000000000000000'
[  681.331648][ T8799] fuse: Bad value for 'rootmode'
[  681.660131][ T5855] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  681.780773][ T8805] fuse: Bad value for 'fd'
[  681.847573][ T5855] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  681.847701][ T5855] usb 5-1: config 0 has no interface number 0
[  681.867609][ T5855] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  681.867762][ T5855] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  681.867886][ T5855] usb 5-1: Product: syz
[  681.867993][ T5855] usb 5-1: Manufacturer: syz
[  681.868093][ T5855] usb 5-1: SerialNumber: syz
[  681.914258][ T5855] usb 5-1: config 0 descriptor??
[  682.167149][ T5855] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  682.192528][ T5855] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  682.193520][ T5855] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  682.193653][ T5855] usb 5-1: media controller created
[  682.237560][ T5855] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  682.732476][ T8802] xt_hashlimit: size too large, truncated to 1048576
[  683.664914][ T5855] usb 5-1: USB disconnect, device number 9
[  689.277562][ T8844] netlink: 40 bytes leftover after parsing attributes in process `syz.6.572'.
[  691.622797][ T8859] fuse: Unknown parameter 'use00000000000000000000'
[  693.260935][ T8867] fuse: Bad value for 'rootmode'
[  693.311473][ T8870] fuse: Bad value for 'fd'
[  693.631346][ T7573] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  693.910051][ T7573] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  693.918834][ T7573] usb 6-1: config 0 has no interface number 0
[  693.927398][ T8874] kvm: pic: non byte write
[  694.045720][ T7573] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  694.055116][ T7573] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  694.064153][ T7573] usb 6-1: Product: syz
[  694.068511][ T7573] usb 6-1: Manufacturer: syz
[  694.073659][ T7573] usb 6-1: SerialNumber: syz
[  694.168210][ T7573] usb 6-1: config 0 descriptor??
[  694.387397][ T7573] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  694.437556][ T7573] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  694.448770][ T7573] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  694.457212][ T7573] usb 6-1: media controller created
[  694.569279][ T7573] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  695.620057][ T7573] usb 6-1: USB disconnect, device number 2
[  696.167767][ T8893] netlink: 40 bytes leftover after parsing attributes in process `syz.6.584'.
[  697.604307][ T8904] fuse: Unknown parameter 'use00000000000000000000'
[  699.162351][ T8913] fuse: Unknown parameter '0x0000000000000003'
[  699.456052][ T8917] syzkaller1: entered promiscuous mode
[  699.462023][ T8917] syzkaller1: entered allmulticast mode
[  703.740225][ T8954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.601'.
[  703.749194][ T8954] bond0: Unable to set peer notification delay as MII monitoring is disabled
[  705.457083][ T7573] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  705.737342][ T7573] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  705.748934][ T7573] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  705.759118][ T7573] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  705.772472][ T7573] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  705.783550][ T7573] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  705.972549][ T7573] usb 3-1: config 0 descriptor??
[  706.718610][ T7573] usbhid 3-1:0.0: can't add hid device: -71
[  706.725593][ T7573] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  706.752203][ T7573] usb 3-1: USB disconnect, device number 7
[  708.272909][ T8993] syz_tun: entered allmulticast mode
[  708.402805][ T8991] syz_tun: left allmulticast mode
[  709.493835][ T9006] tipc: Started in network mode
[  709.498977][ T9006] tipc: Node identity d6db42f67cba, cluster identity 4711
[  709.507140][ T9006] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  709.731835][ T9008] syzkaller0: entered promiscuous mode
[  709.737638][ T9008] syzkaller0: entered allmulticast mode
[  709.953874][ T9006] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) !
[  710.095677][ T9003] tipc: Resetting bearer <eth:syzkaller0>
[  710.198550][ T9003] tipc: Disabling bearer <eth:syzkaller0>
[  711.552214][ T9029] fuse: Bad value for 'fd'
[  715.271578][ T9070] tipc: Started in network mode
[  715.276857][ T9070] tipc: Node identity 1277e3d254c6, cluster identity 4711
[  715.289239][ T9070] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  715.356007][ T9074] syzkaller0: entered promiscuous mode
[  715.362040][ T9074] syzkaller0: entered allmulticast mode
[  715.447349][ T9070] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) !
[  715.534231][ T9069] tipc: Resetting bearer <eth:syzkaller0>
[  715.581783][ T9069] tipc: Disabling bearer <eth:syzkaller0>
[  716.850930][ T9089] tipc: Started in network mode
[  716.856011][ T9089] tipc: Node identity 06cb1800daab, cluster identity 4711
[  716.864270][ T9089] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  716.885033][ T9093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.634'.
[  717.225860][ T9089] tipc: Resetting bearer <eth:syzkaller0>
[  717.367362][ T9087] tipc: Disabling bearer <eth:syzkaller0>
[  719.093171][ T5856] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  719.769907][ T5856] usb 1-1: Using ep0 maxpacket: 8
[  719.877144][ T5856] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[  719.885813][ T5856] usb 1-1: config 179 has no interface number 0
[  719.892389][ T5856] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  719.903834][ T5856] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  719.917274][ T5856] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  719.928242][ T5856] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  719.942031][ T5856] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  719.951396][ T5856] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  720.340282][ T9110] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  721.200116][ T5884] usb 1-1: USB disconnect, device number 12
[  724.175406][ T9146] netlink: 8 bytes leftover after parsing attributes in process `syz.0.646'.
[  725.200311][ T9154] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  725.314083][ T9154] tipc: Resetting bearer <eth:syzkaller0>
[  725.389602][ T9153] tipc: Disabling bearer <eth:syzkaller0>
[  725.421599][ T9159] fuse: Bad value for 'fd'
[  726.169309][ T1287] ieee802154 phy0 wpan0: encryption failed: -22
[  726.176079][ T1287] ieee802154 phy1 wpan1: encryption failed: -22
[  726.995503][ T7573] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  727.219726][ T7573] usb 1-1: Using ep0 maxpacket: 8
[  727.258780][ T7573] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[  727.267579][ T7573] usb 1-1: config 179 has no interface number 0
[  727.276073][ T7573] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  727.289589][ T7573] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  727.301801][ T7573] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  727.313557][ T7573] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  727.323852][ T7573] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  727.337475][ T7573] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  727.346877][ T7573] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  727.682764][ T9173] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  727.743161][ T7573] xpad 1-1:179.65: probe with driver xpad failed with error -5
[  727.950543][ T7573] usb 1-1: USB disconnect, device number 13
[  729.686780][ T9200] netlink: 8 bytes leftover after parsing attributes in process `syz.5.658'.
[  731.127856][ T9210] syz_tun: entered allmulticast mode
[  731.157466][ T9209] syz_tun: left allmulticast mode
[  731.304176][ T9212] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  731.383916][ T9212] tipc: Resetting bearer <eth:syzkaller0>
[  731.452771][ T9211] tipc: Disabling bearer <eth:syzkaller0>
[  732.664006][ T9235] netlink: 'syz.6.667': attribute type 12 has an invalid length.
[  733.389670][ T8095] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  733.570048][ T8095] usb 1-1: Using ep0 maxpacket: 32
[  733.721212][ T8095] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  733.729656][ T8095] usb 1-1: config 0 has no interface number 0
[  733.881796][ T9247] netlink: 8 bytes leftover after parsing attributes in process `syz.5.670'.
[  733.935999][ T8095] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  733.950736][ T8095] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  733.958943][ T8095] usb 1-1: Product: syz
[  733.965509][ T8095] usb 1-1: Manufacturer: syz
[  733.970481][ T8095] usb 1-1: SerialNumber: syz
[  734.262843][ T8095] usb 1-1: config 0 descriptor??
[  734.328504][ T8095] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  734.337840][ T8095] usb 1-1: selecting invalid altsetting 1
[  734.344020][ T8095] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  734.689301][ T8095] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  734.700943][ T8095] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  734.709561][ T8095] usb 1-1: media controller created
[  734.959668][ T7573] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  735.002616][ T8095] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  735.328516][ T7573] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84
[  735.340967][ T7573] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024
[  735.353031][ T7573] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024
[  735.801774][ T7573] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  735.811609][ T7573] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  735.820416][ T7573] usb 3-1: Product: syz
[  735.824756][ T7573] usb 3-1: Manufacturer: syz
[  735.829710][ T7573] usb 3-1: SerialNumber: syz
[  736.021855][ T7573] usb 3-1: config 0 descriptor??
[  736.043766][ T9252] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  736.815386][ T9253] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  737.039643][ T8095] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-110
[  737.047030][ T8095] zl10353_read_register: readreg error (reg=127, ret==-110)
[  738.081099][ T8095] usb 1-1: USB disconnect, device number 14
[  744.022371][ T9289] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  744.253307][ T9287] tipc: Resetting bearer <eth:syzkaller0>
[  744.313025][ T9286] tipc: Disabling bearer <eth:syzkaller0>
[  749.014698][ T9306] netlink: 8 bytes leftover after parsing attributes in process `syz.0.682'.
[  749.339982][ T8095] usb 3-1: USB disconnect, device number 8
[  749.632052][ T8481] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  749.647291][ T8481] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  749.679319][ T8481] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  749.773729][ T8481] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  749.793993][ T8481] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  749.970863][ T5795] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  749.987177][ T5795] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  749.996663][ T5795] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  750.008464][ T5795] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  750.028772][ T5795] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  751.042012][ T7573] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  751.390391][ T8481] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  751.400115][ T8481] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  751.426169][ T8481] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  751.441659][ T7573] usb 1-1: Using ep0 maxpacket: 32
[  751.518107][ T8481] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  751.533357][ T8481] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  751.580623][ T7573] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  751.589017][ T7573] usb 1-1: config 0 has no interface number 0
[  751.639858][ T7573] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  751.649142][ T7573] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  751.659306][ T7573] usb 1-1: Product: syz
[  751.664408][ T7573] usb 1-1: Manufacturer: syz
[  751.669223][ T7573] usb 1-1: SerialNumber: syz
[  751.912383][ T7573] usb 1-1: config 0 descriptor??
[  751.998906][ T7573] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  752.008478][ T7573] usb 1-1: selecting invalid altsetting 1
[  752.014788][ T7573] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  752.026033][ T8481] Bluetooth: hci0: command tx timeout
[  752.036331][ T7573] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  752.048870][ T7573] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  752.057525][ T7573] usb 1-1: media controller created
[  752.130466][ T7573] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  752.210346][ T8481] Bluetooth: hci2: command tx timeout
[  753.448773][ T9311] chnl_net:caif_netlink_parms(): no params data found
[  753.540473][ T9318] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-110
[  753.590368][ T5795] Bluetooth: hci5: command tx timeout
[  753.601551][ T7573] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  753.608817][ T7573] zl10353_read_register: readreg error (reg=127, ret==-71)
[  753.618873][ T7573] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  753.995447][ T9308] chnl_net:caif_netlink_parms(): no params data found
[  754.082928][ T5795] Bluetooth: hci0: command tx timeout
[  754.196432][ T8481] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  754.230637][ T8481] Bluetooth: hci2: command tx timeout
[  754.238253][ T8481] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  754.248740][ T8481] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  754.266185][ T8481] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  754.271657][ T7573] usb 1-1: USB disconnect, device number 15
[  754.381929][ T8481] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  755.669799][ T5795] Bluetooth: hci5: command tx timeout
[  755.882938][ T9320] chnl_net:caif_netlink_parms(): no params data found
[  755.983739][ T7569] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  756.149901][ T5795] Bluetooth: hci0: command tx timeout
[  756.254337][ T7569] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  756.314688][ T5795] Bluetooth: hci2: command tx timeout
[  756.552422][ T5795] Bluetooth: hci6: command tx timeout
[  756.560390][ T7569] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  757.127928][ T7569] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  757.719087][ T9311] bridge0: port 1(bridge_slave_0) entered blocking state
[  757.726813][ T9311] bridge0: port 1(bridge_slave_0) entered disabled state
[  757.735238][ T9311] bridge_slave_0: entered allmulticast mode
[  757.744949][ T9311] bridge_slave_0: entered promiscuous mode
[  757.820146][ T5795] Bluetooth: hci5: command tx timeout
[  758.010286][ T9308] bridge0: port 1(bridge_slave_0) entered blocking state
[  758.017764][ T9308] bridge0: port 1(bridge_slave_0) entered disabled state
[  758.025722][ T9308] bridge_slave_0: entered allmulticast mode
[  758.035865][ T9308] bridge_slave_0: entered promiscuous mode
[  758.072512][ T9308] bridge0: port 2(bridge_slave_1) entered blocking state
[  758.080435][ T9308] bridge0: port 2(bridge_slave_1) entered disabled state
[  758.088249][ T9308] bridge_slave_1: entered allmulticast mode
[  758.097645][ T9308] bridge_slave_1: entered promiscuous mode
[  758.119970][ T9311] bridge0: port 2(bridge_slave_1) entered blocking state
[  758.127465][ T9311] bridge0: port 2(bridge_slave_1) entered disabled state
[  758.135355][ T9311] bridge_slave_1: entered allmulticast mode
[  758.144960][ T9311] bridge_slave_1: entered promiscuous mode
[  758.230680][ T5795] Bluetooth: hci0: command tx timeout
[  758.413751][ T5795] Bluetooth: hci2: command tx timeout
[  758.631404][ T5795] Bluetooth: hci6: command tx timeout
[  758.682844][ T9308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  758.774586][ T9311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  758.801862][ T9308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  758.987993][ T9311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  759.270349][ T9361] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  759.354660][ T9308] team0: Port device team_slave_0 added
[  759.472337][ T9361] tipc: Resetting bearer <eth:syzkaller0>
[  759.533899][ T9308] team0: Port device team_slave_1 added
[  759.561334][ T9320] bridge0: port 1(bridge_slave_0) entered blocking state
[  759.568887][ T9320] bridge0: port 1(bridge_slave_0) entered disabled state
[  759.579070][ T9320] bridge_slave_0: entered allmulticast mode
[  759.589022][ T9320] bridge_slave_0: entered promiscuous mode
[  759.603365][ T7569] bridge_slave_1: left allmulticast mode
[  759.609202][ T7569] bridge_slave_1: left promiscuous mode
[  759.616048][ T7569] bridge0: port 2(bridge_slave_1) entered disabled state
[  759.632225][ T7569] bridge_slave_0: left allmulticast mode
[  759.638042][ T7569] bridge_slave_0: left promiscuous mode
[  759.654776][ T7569] bridge0: port 1(bridge_slave_0) entered disabled state
[  759.850967][ T5795] Bluetooth: hci5: command tx timeout
[  760.071742][ T7569] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  760.103518][ T7569] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  760.136202][ T7569] bond0 (unregistering): Released all slaves
[  760.215417][ T9311] team0: Port device team_slave_0 added
[  760.222287][ T9333] chnl_net:caif_netlink_parms(): no params data found
[  760.247524][ T9359] tipc: Disabling bearer <eth:syzkaller0>
[  760.413270][ T9320] bridge0: port 2(bridge_slave_1) entered blocking state
[  760.420965][ T9320] bridge0: port 2(bridge_slave_1) entered disabled state
[  760.428674][ T9320] bridge_slave_1: entered allmulticast mode
[  760.438102][ T9320] bridge_slave_1: entered promiscuous mode
[  760.485989][ T9311] team0: Port device team_slave_1 added
[  760.582195][ T7569] tipc: Left network mode
[  760.710898][ T5795] Bluetooth: hci6: command tx timeout
[  760.745235][ T7569] IPVS: stopping backup sync thread 8764 ...
[  761.097823][ T9308] batman_adv: batadv0: Adding interface: batadv_slave_0
[  761.105106][ T9308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  761.131802][ T9308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  761.165464][ T9320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  761.217858][ T9311] batman_adv: batadv0: Adding interface: batadv_slave_0
[  761.225115][ T9311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  761.251492][ T9311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  761.287020][ T9320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  761.327951][ T9308] batman_adv: batadv0: Adding interface: batadv_slave_1
[  761.335240][ T9308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  761.361763][ T9308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  761.467209][ T9311] batman_adv: batadv0: Adding interface: batadv_slave_1
[  761.478026][ T9311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  761.506686][ T9311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  761.828661][ T9320] team0: Port device team_slave_0 added
[  762.144550][ T9320] team0: Port device team_slave_1 added
[  762.512523][ T9311] hsr_slave_0: entered promiscuous mode
[  762.523182][ T9311] hsr_slave_1: entered promiscuous mode
[  762.532134][ T9311] debugfs: 'hsr0' already exists in 'hsr'
[  762.538061][ T9311] Cannot create hsr debugfs directory
[  762.634659][ T9320] batman_adv: batadv0: Adding interface: batadv_slave_0
[  762.641999][ T9320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  762.668412][ T9320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  762.694552][ T9320] batman_adv: batadv0: Adding interface: batadv_slave_1
[  762.701850][ T9320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  762.730363][ T9320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  762.802159][ T5795] Bluetooth: hci6: command tx timeout
[  762.830961][ T9308] hsr_slave_0: entered promiscuous mode
[  762.841582][ T9308] hsr_slave_1: entered promiscuous mode
[  762.850578][ T9308] debugfs: 'hsr0' already exists in 'hsr'
[  762.856494][ T9308] Cannot create hsr debugfs directory
[  763.072498][ T7569] hsr_slave_0: left promiscuous mode
[  763.096286][ T7569] hsr_slave_1: left promiscuous mode
[  763.104924][ T7569] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  763.112726][ T7569] batman_adv: batadv0: Removing interface: batadv_slave_0
[  763.141685][ T7569] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  763.149340][ T7569] batman_adv: batadv0: Removing interface: batadv_slave_1
[  763.182378][ T7569] veth1_macvtap: left promiscuous mode
[  763.188088][ T7569] veth0_macvtap: left promiscuous mode
[  763.194716][ T7569] veth1_vlan: left promiscuous mode
[  763.200427][ T7569] veth0_vlan: left promiscuous mode
[  763.673502][ T9396] netlink: 8 bytes leftover after parsing attributes in process `syz.0.691'.
[  764.041565][ T7569] team0 (unregistering): Port device team_slave_1 removed
[  764.108083][ T7569] team0 (unregistering): Port device team_slave_0 removed
[  764.630022][ T9333] bridge0: port 1(bridge_slave_0) entered blocking state
[  764.637701][ T9333] bridge0: port 1(bridge_slave_0) entered disabled state
[  764.645652][ T9333] bridge_slave_0: entered allmulticast mode
[  764.655395][ T9333] bridge_slave_0: entered promiscuous mode
[  764.781754][ T5861] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  764.845454][ T9333] bridge0: port 2(bridge_slave_1) entered blocking state
[  764.853102][ T9333] bridge0: port 2(bridge_slave_1) entered disabled state
[  764.860915][ T9333] bridge_slave_1: entered allmulticast mode
[  764.873299][ T9333] bridge_slave_1: entered promiscuous mode
[  764.960182][ T5861] usb 1-1: Using ep0 maxpacket: 32
[  765.077223][ T5861] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  765.085521][ T5861] usb 1-1: config 0 has no interface number 0
[  765.164551][ T5861] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  765.183118][ T5861] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  765.191905][ T5861] usb 1-1: Product: syz
[  765.196277][ T5861] usb 1-1: Manufacturer: syz
[  765.201280][ T5861] usb 1-1: SerialNumber: syz
[  765.226418][ T9320] hsr_slave_0: entered promiscuous mode
[  765.236632][ T9320] hsr_slave_1: entered promiscuous mode
[  765.245543][ T9320] debugfs: 'hsr0' already exists in 'hsr'
[  765.251576][ T9320] Cannot create hsr debugfs directory
[  765.301364][ T9333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  765.308240][ T5861] usb 1-1: config 0 descriptor??
[  765.372799][ T9333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  765.395276][ T5861] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  765.405164][ T5861] usb 1-1: selecting invalid altsetting 1
[  765.411664][ T5861] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  765.486328][ T5861] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  765.500338][ T5861] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  765.508849][ T5861] usb 1-1: media controller created
[  765.573101][ T5861] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  766.062863][ T9333] team0: Port device team_slave_0 added
[  766.244570][ T7487] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  766.284262][ T9333] team0: Port device team_slave_1 added
[  766.414588][ T7487] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  766.591085][ T7487] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  766.798359][ T9399] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-110
[  766.842194][ T9333] batman_adv: batadv0: Adding interface: batadv_slave_0
[  766.850746][ T9333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  766.877495][ T9333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  766.990108][ T5861] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  766.997418][ T5861] zl10353_read_register: readreg error (reg=127, ret==-71)
[  767.052651][ T5861] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  767.188843][ T7487] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  767.388764][ T5861] usb 1-1: USB disconnect, device number 16
[  767.455009][ T9333] batman_adv: batadv0: Adding interface: batadv_slave_1
[  767.462305][ T9333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  767.489009][ T9333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  768.180420][ T9333] hsr_slave_0: entered promiscuous mode
[  768.197263][ T9333] hsr_slave_1: entered promiscuous mode
[  768.212843][ T9333] debugfs: 'hsr0' already exists in 'hsr'
[  768.218766][ T9333] Cannot create hsr debugfs directory
[  768.388178][ T7487] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  768.496712][ T7487] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  768.692352][ T7487] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  768.861812][ T7487] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  769.433835][ T9311] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  769.842545][ T7487] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  769.956651][ T9311] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  770.082574][ T7487] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  770.159345][ T9311] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  770.258180][ T7487] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  770.308666][ T9311] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  770.435324][ T7487] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  770.793306][ T9308] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  770.998499][ T9308] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  771.178804][ T9308] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  771.464046][ T9320] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  771.499270][ T7487] bridge_slave_1: left allmulticast mode
[  771.505433][ T7487] bridge_slave_1: left promiscuous mode
[  771.512698][ T7487] bridge0: port 2(bridge_slave_1) entered disabled state
[  771.558899][ T7487] bridge_slave_0: left allmulticast mode
[  771.565367][ T7487] bridge_slave_0: left promiscuous mode
[  771.572416][ T7487] bridge0: port 1(bridge_slave_0) entered disabled state
[  771.596925][ T7487] bridge_slave_1: left allmulticast mode
[  771.603775][ T7487] bridge_slave_1: left promiscuous mode
[  771.610419][ T7487] bridge0: port 2(bridge_slave_1) entered disabled state
[  771.646213][ T7487] bridge_slave_0: left allmulticast mode
[  771.654061][ T7487] bridge_slave_0: left promiscuous mode
[  771.664619][ T7487] bridge0: port 1(bridge_slave_0) entered disabled state
[  771.691583][ T7487] bridge_slave_1: left allmulticast mode
[  771.697459][ T7487] bridge_slave_1: left promiscuous mode
[  771.707461][ T7487] bridge0: port 2(bridge_slave_1) entered disabled state
[  771.733191][ T7487] bridge_slave_0: left allmulticast mode
[  771.739050][ T7487] bridge_slave_0: left promiscuous mode
[  771.745567][ T7487] bridge0: port 1(bridge_slave_0) entered disabled state
[  772.873397][ T7487] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  772.920456][ T7487] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  772.936377][ T7487] bond0 (unregistering): Released all slaves
[  773.243647][ T7487] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  773.271867][ T7487] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  773.294080][ T7487] bond0 (unregistering): Released all slaves
[  773.529823][ T7487] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  773.549962][ T7487] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  773.575087][ T7487] bond0 (unregistering): Released all slaves
[  773.676076][ T9308] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  773.756781][ T9320] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  773.930696][ T9320] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  774.031078][ T7487] tipc: Left network mode
[  774.071031][ T9320] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  774.143482][ T7487] tipc: Left network mode
[  774.774174][ T9333] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  774.899197][ T9333] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  775.028622][ T9333] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  775.121183][ T9311] 8021q: adding VLAN 0 to HW filter on device bond0
[  775.168889][ T9333] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  775.509838][   T32] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  775.693179][ T9311] 8021q: adding VLAN 0 to HW filter on device team0
[  775.745268][   T32] usb 1-1: Using ep0 maxpacket: 32
[  775.772857][ T7517] bridge0: port 1(bridge_slave_0) entered blocking state
[  775.780555][ T7517] bridge0: port 1(bridge_slave_0) entered forwarding state
[  775.873183][   T32] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  775.881797][   T32] usb 1-1: config 0 has no interface number 0
[  775.915496][ T7487] hsr_slave_0: left promiscuous mode
[  775.935035][ T7487] hsr_slave_1: left promiscuous mode
[  775.944327][ T7487] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  775.952468][ T7487] batman_adv: batadv0: Removing interface: batadv_slave_0
[  775.969285][   T32] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  775.975533][ T7487] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  775.979098][   T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  775.986818][ T7487] batman_adv: batadv0: Removing interface: batadv_slave_1
[  775.994662][   T32] usb 1-1: Product: syz
[  775.994793][   T32] usb 1-1: Manufacturer: syz
[  776.011056][   T32] usb 1-1: SerialNumber: syz
[  776.047872][ T7487] hsr_slave_0: left promiscuous mode
[  776.061710][   T32] usb 1-1: config 0 descriptor??
[  776.096770][   T32] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  776.105951][   T32] usb 1-1: selecting invalid altsetting 1
[  776.110592][ T7487] hsr_slave_1: left promiscuous mode
[  776.112262][   T32] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  776.123354][ T7487] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  776.133327][ T7487] batman_adv: batadv0: Removing interface: batadv_slave_0
[  776.159056][ T7487] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  776.166849][ T7487] batman_adv: batadv0: Removing interface: batadv_slave_1
[  776.188804][   T32] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  776.200151][   T32] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  776.208920][   T32] usb 1-1: media controller created
[  776.241077][ T7487] hsr_slave_0: left promiscuous mode
[  776.248608][ T7487] hsr_slave_1: left promiscuous mode
[  776.259224][ T7487] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  776.266979][ T7487] batman_adv: batadv0: Removing interface: batadv_slave_0
[  776.282497][ T7487] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  776.290820][ T7487] batman_adv: batadv0: Removing interface: batadv_slave_1
[  776.350188][ T7487] veth1_macvtap: left promiscuous mode
[  776.355994][   T32] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  776.356029][ T7487] veth0_macvtap: left promiscuous mode
[  776.357088][ T7487] veth1_vlan: left promiscuous mode
[  776.376181][ T7487] veth0_vlan: left promiscuous mode
[  776.423587][ T7487] veth1_macvtap: left promiscuous mode
[  776.429299][ T7487] veth0_macvtap: left promiscuous mode
[  776.436452][ T7487] veth1_vlan: left promiscuous mode
[  776.442084][ T7487] veth0_vlan: left promiscuous mode
[  776.460058][ T7487] veth1_macvtap: left promiscuous mode
[  776.465751][ T7487] veth0_macvtap: left promiscuous mode
[  776.471846][ T7487] veth1_vlan: left promiscuous mode
[  776.477348][ T7487] veth0_vlan: left promiscuous mode
[  777.431844][ T9466] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-110
[  777.475064][   T32] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  777.482527][   T32] zl10353_read_register: readreg error (reg=127, ret==-71)
[  777.590732][   T32] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  777.771636][ T7487] team0 (unregistering): Port device team_slave_1 removed
[  777.814438][ T7487] team0 (unregistering): Port device team_slave_0 removed
[  778.246766][   T32] usb 1-1: USB disconnect, device number 17
[  778.677169][ T7487] team0 (unregistering): Port device team_slave_1 removed
[  778.725668][ T7487] team0 (unregistering): Port device team_slave_0 removed
[  779.382031][ T7487] team0 (unregistering): Port device team_slave_1 removed
[  779.444461][ T7487] team0 (unregistering): Port device team_slave_0 removed
[  779.860592][ T7517] bridge0: port 2(bridge_slave_1) entered blocking state
[  779.868068][ T7517] bridge0: port 2(bridge_slave_1) entered forwarding state
[  780.214185][ T9308] 8021q: adding VLAN 0 to HW filter on device bond0
[  780.366365][ T9320] 8021q: adding VLAN 0 to HW filter on device bond0
[  780.534903][ T9308] 8021q: adding VLAN 0 to HW filter on device team0
[  780.677934][   T14] bridge0: port 1(bridge_slave_0) entered blocking state
[  780.685547][   T14] bridge0: port 1(bridge_slave_0) entered forwarding state
[  780.723949][ T9320] 8021q: adding VLAN 0 to HW filter on device team0
[  780.748928][ T9333] 8021q: adding VLAN 0 to HW filter on device bond0
[  780.943207][   T14] bridge0: port 2(bridge_slave_1) entered blocking state
[  780.950702][   T14] bridge0: port 2(bridge_slave_1) entered forwarding state
[  780.970643][   T14] bridge0: port 1(bridge_slave_0) entered blocking state
[  780.978119][   T14] bridge0: port 1(bridge_slave_0) entered forwarding state
[  781.122734][ T9333] 8021q: adding VLAN 0 to HW filter on device team0
[  781.324321][   T14] bridge0: port 2(bridge_slave_1) entered blocking state
[  781.331984][   T14] bridge0: port 2(bridge_slave_1) entered forwarding state
[  781.390768][   T14] bridge0: port 1(bridge_slave_0) entered blocking state
[  781.398396][   T14] bridge0: port 1(bridge_slave_0) entered forwarding state
[  781.719670][   T14] bridge0: port 2(bridge_slave_1) entered blocking state
[  781.727248][   T14] bridge0: port 2(bridge_slave_1) entered forwarding state
[  782.018528][ T9333] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  782.029336][ T9333] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  782.790737][ T9311] 8021q: adding VLAN 0 to HW filter on device batadv0
[  783.600865][ T9311] veth0_vlan: entered promiscuous mode
[  783.769037][ T9311] veth1_vlan: entered promiscuous mode
[  783.980314][ T9308] 8021q: adding VLAN 0 to HW filter on device batadv0
[  784.151614][ T9320] 8021q: adding VLAN 0 to HW filter on device batadv0
[  784.238256][ T9311] veth0_macvtap: entered promiscuous mode
[  784.334112][ T9311] veth1_macvtap: entered promiscuous mode
[  784.616665][ T9333] 8021q: adding VLAN 0 to HW filter on device batadv0
[  784.725083][ T9311] batman_adv: batadv0: Interface activated: batadv_slave_0
[  784.848572][ T9311] batman_adv: batadv0: Interface activated: batadv_slave_1
[  785.003268][ T9320] veth0_vlan: entered promiscuous mode
[  785.024381][ T7569] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  785.074130][ T3987] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  785.109439][ T9320] veth1_vlan: entered promiscuous mode
[  785.131507][ T3987] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  785.179850][ T3987] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  785.440052][ T9320] veth0_macvtap: entered promiscuous mode
[  785.543971][ T9320] veth1_macvtap: entered promiscuous mode
[  785.742163][ T9320] batman_adv: batadv0: Interface activated: batadv_slave_0
[  785.856781][ T9320] batman_adv: batadv0: Interface activated: batadv_slave_1
[  785.950859][ T3987] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  785.999076][ T3987] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  786.078661][ T3987] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  786.140890][ T3987] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  787.252278][ T9308] veth0_vlan: entered promiscuous mode
[  787.371909][ T9308] veth1_vlan: entered promiscuous mode
[  787.626598][ T1287] ieee802154 phy0 wpan0: encryption failed: -22
[  787.633437][ T1287] ieee802154 phy1 wpan1: encryption failed: -22
[  787.717534][ T9333] veth0_vlan: entered promiscuous mode
[  787.865401][ T9308] veth0_macvtap: entered promiscuous mode
[  787.877522][ T9333] veth1_vlan: entered promiscuous mode
[  787.937753][ T9308] veth1_macvtap: entered promiscuous mode
[  788.132678][ T9308] batman_adv: batadv0: Interface activated: batadv_slave_0
[  788.236274][ T9308] batman_adv: batadv0: Interface activated: batadv_slave_1
[  788.359327][ T1003] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  788.370339][ T1003] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  788.380085][ T1003] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  788.411808][ T9333] veth0_macvtap: entered promiscuous mode
[  788.450577][ T1003] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  788.508070][ T9333] veth1_macvtap: entered promiscuous mode
[  788.693215][ T9333] batman_adv: batadv0: Interface activated: batadv_slave_0
[  788.782484][ T9333] batman_adv: batadv0: Interface activated: batadv_slave_1
[  788.945534][ T7517] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  788.989767][ T7517] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  788.998858][ T7517] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  789.114161][ T7517] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  789.440293][ T5856] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  789.639629][ T5856] usb 1-1: Using ep0 maxpacket: 16
[  789.678540][ T5856] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  789.693106][ T5856] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  789.798977][ T5856] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  789.815048][ T5856] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  789.823596][ T5856] usb 1-1: Product: syz
[  789.827972][ T5856] usb 1-1: Manufacturer: syz
[  789.833074][ T5856] usb 1-1: SerialNumber: syz
[  789.954333][ T5856] usb 1-1: config 0 descriptor??
[  790.030142][ T5856] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  790.039752][ T5856] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class)
[  790.612858][ T5856] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[  790.632532][ T5856] em28xx 1-1:0.0: Config register raw data: 0xfffffffb
[  791.769152][ T5856] em28xx 1-1:0.0: Unknown AC97 audio processor detected!
[  791.797083][ T5856] em28xx 1-1:0.0: couldn't setup AC97 register 2
[  791.832932][ T5856] em28xx 1-1:0.0: couldn't setup AC97 register 4
[  792.481452][ T5856] em28xx 1-1:0.0: AC97 command still being executed: not handled properly!
[  792.490421][ T5856] em28xx 1-1:0.0: couldn't setup AC97 register 54
[  792.737849][ T5856] em28xx 1-1:0.0: couldn't setup AC97 register 56
[  792.852216][ T5856] usb 1-1: USB disconnect, device number 18
[  792.971816][ T3987] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  792.980603][ T3987] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  793.256437][ T4042] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  793.265333][ T4042] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  793.782524][ T9641] input: syz0 as /devices/virtual/input/input14
[  793.812908][ T7517] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  793.821136][ T7517] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  794.100714][ T7517] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  794.108749][ T7517] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  795.099678][ T5856] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  795.289095][ T5856] usb 4-1: Using ep0 maxpacket: 8
[  795.366830][ T5856] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[  795.375546][ T5856] usb 4-1: config 179 has no interface number 0
[  795.385924][ T5856] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  795.398357][ T5856] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  795.409988][ T5856] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  795.421622][ T5856] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  795.432066][ T5856] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  795.445749][ T5856] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  795.455137][ T5856] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  795.533808][ T9656] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  795.555430][ T5856] xpad 4-1:179.65: probe with driver xpad failed with error -5
[  795.931902][ T5861] usb 4-1: USB disconnect, device number 4
[  796.426988][ T3987] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  796.435706][ T3987] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  796.847806][ T7487] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  796.855965][ T7487] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  796.958585][   T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  796.966938][   T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  797.097182][ T7487] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  797.105984][ T7487] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  797.619859][ T9680] loop7: detected capacity change from 0 to 16384
[  797.879910][ T9684] loop7: detected capacity change from 16384 to 0
[  797.888150][    C1] I/O error, dev loop7, sector 256 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2
[  798.669154][ T9695] input: syz0 as /devices/virtual/input/input15
[  800.969905][ T5856] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  801.279697][ T5856] usb 2-1: Using ep0 maxpacket: 8
[  801.406622][ T5856] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[  801.415311][ T5856] usb 2-1: config 179 has no interface number 0
[  801.427489][ T5856] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  801.440764][ T5856] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  801.452354][ T5856] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  801.463824][ T5856] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  801.475615][ T5856] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  801.489245][ T5856] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  801.498683][ T5856] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  801.978095][ T9708] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  802.472820][ T5861] usb 2-1: USB disconnect, device number 8
[  802.472856][    C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  802.473132][    C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  802.989195][ T9729] loop7: detected capacity change from 0 to 16384
[  803.210649][ T9732] loop7: detected capacity change from 16384 to 0
[  803.249008][    C0] I/O error, dev loop7, sector 512 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2
[  803.303405][ T9735] input: syz0 as /devices/virtual/input/input16
[  803.602497][ T9739] netlink: 'syz.3.732': attribute type 13 has an invalid length.
[  803.610762][ T9739] netlink: 'syz.3.732': attribute type 17 has an invalid length.
[  805.054690][ T9739] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  805.682617][ T9736] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  807.419842][ T9779] binder: BINDER_SET_CONTEXT_MGR already set
[  807.426083][ T9779] binder: 9778:9779 ioctl 4018620d 200000004a80 returned -16
[  808.784798][ T9788] netlink: 8 bytes leftover after parsing attributes in process `syz.7.743'.
[  809.153586][ T9795] loop7: detected capacity change from 0 to 16384
[  809.490145][ T9796] loop7: detected capacity change from 16384 to 0
[  809.521808][ T9799] usb usb8: usbfs: process 9799 (syz.3.746) did not claim interface 0 before use
[  809.575576][    C0] I/O error, dev loop7, sector 1024 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2
[  810.239855][ T5861] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  810.486853][ T5861] usb 8-1: Using ep0 maxpacket: 16
[  810.504251][ T5861] usb 8-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0
[  810.514547][ T5861] usb 8-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0
[  810.524685][ T5861] usb 8-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  810.540459][ T5861] usb 8-1: config 1 interface 0 has no altsetting 0
[  810.767080][ T5861] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  810.776641][ T5861] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  810.786289][ T5861] usb 8-1: Product: syz
[  810.790897][ T5861] usb 8-1: Manufacturer: syz
[  810.795772][ T5861] usb 8-1: SerialNumber: syz
[  811.224946][ T5861] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8
[  812.247804][ T5861] usb 8-1: USB disconnect, device number 5
[  812.272596][ T5861] usblp0: removed
[  813.952519][ T9820] syzkaller0: entered promiscuous mode
[  815.009712][ T5856] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  815.179709][ T5856] usb 4-1: Using ep0 maxpacket: 16
[  815.208264][ T5856] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  815.240108][ T5856] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  815.255300][ T5856] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  815.265705][ T5856] usb 4-1: Product: syz
[  815.270483][ T5856] usb 4-1: Manufacturer: syz
[  815.275286][ T5856] usb 4-1: SerialNumber: syz
[  815.286125][ T5856] usb 4-1: config 0 descriptor??
[  815.343564][ T5856] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  815.361770][ T5856] em28xx 4-1:0.0: DVB interface 0 found: bulk
[  815.677201][ T9833] fuse: Unknown parameter 'use00000000000000000000'
[  816.006980][ T5856] em28xx 4-1:0.0: unknown em28xx chip ID (0)
[  816.545190][ T5856] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  816.553871][ T5856] em28xx 4-1:0.0: board has no eeprom
[  816.908048][ T5856] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  816.916451][ T5856] em28xx 4-1:0.0: dvb set to bulk mode.
[  816.923780][ T7573] em28xx 4-1:0.0: Binding DVB extension
[  817.045567][ T5856] usb 4-1: USB disconnect, device number 5
[  817.053785][ T5856] em28xx 4-1:0.0: Disconnecting em28xx
[  817.447339][ T7573] em28xx 4-1:0.0: Registering input extension
[  817.515635][ T5856] em28xx 4-1:0.0: Closing input extension
[  817.855884][ T5856] em28xx 4-1:0.0: Freeing device
[  818.022424][ T9844] netlink: 8 bytes leftover after parsing attributes in process `syz.9.757'.
[  819.012876][ T9851] fuse: Unknown parameter 'erPid:	0
[  819.012876][ T9851] Uid:	0	0	0	0
[  819.012876][ T9851] Gid:	0	0	0	0
[  819.012876][ T9851] FDSize:	256
[  819.012876][ T9851] Groups:	0 10 
[  819.012876][ T9851] NStgid:	34
[  819.012876][ T9851] NSpid:	35
[  819.012876][ T9851] NSpgid:	34
[  819.012876][ T9851] NSsid:	0
[  819.012876][ T9851] Kthread:	0
[  819.012876][ T9851] VmPeak:	  101960 kB
[  819.012876][ T9851] VmSize:	  101960 kB
[  819.012876][ T9851] VmLck:	       0 kB
[  819.012876][ T9851] VmPin:	       0 kB
[  819.012876][ T9851] VmHWM:	   24208 kB
[  819.012876][ T9851] VmRSS:	   24208 kB
[  819.012876][ T9851] RssAnon:	    1320 kB
[  819.012876][ T9851] RssFile:	   22888 kB
[  819.012876][ T9851] RssShmem:	       0 kB
[  819.012876][ T9851] VmData:	   36516 kB
[  819.012876][ T9851] VmStk:	     132 kB
[  819.012876][ T9851] VmExe:	    1684 kB
[  819.012876][ T9851] VmLib:	       8 kB
[  819.012876][ T9851] VmPTE:	     128 kB
[  819.012876][ T9851] VmSwap:	       0 kB
[  819.012876][ T9851] HugetlbPages:	       0 kB
[  819.012876][ T9851] CoreDumping:	0
[  819.012876][ T9851] THP_enabled:	1
[  819.012876][ T9851] untag_mask:	0xffffffffffffffff
[  819.012876][ T9851] Threads:	2
[  819.012876][ T9851] SigQ:	1/26065
[  819.012876][ T9851] SigPnd:	0000000000000000
[  819.012876][ T9851] ShdPnd:	0000000000000000
[  819.012876][ T9851] SigBlk:	0000000000000000
[  819.012876][ T9851] SigIgn:	fffffffefffaba35
[  819.012876][ T9851] SigCgt:	0000000100010440
[  819.012876][ T9851] CapInh:	0000000000000000
[  819.012876][ T9851] CapPrm:	000001ffff77ffff
[  819.012876][ T9851] CapEff:	000001ffff77ffff
[  819.012876][ T9851] CapBnd:	000001ffffffffff
[  819.012876][ T9851] CapAmb:	0000000000000000
[  819.012876][ T9851] NoNewPrivs:	0
[  819.012876][ T9851] Seccomp:	0
[  819.012876][ T9851] Seccomp_filters:	0
[  819.012876][ T9851] Speculation_Store_Bypass:	thread vulnerable
[  819.012876][ T9851] SpeculationIndirectBranch:	conditional enabled
[  819.012876][ T9851] Cpus_allowed:	3
[  820.510646][ T9867] syzkaller0: entered promiscuous mode
[  820.553493][ T8481] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  820.565138][ T8481] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  820.586689][ T8481] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  820.601195][ T8481] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  820.631095][ T8481] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  820.709007][ T9872] fuse: Unknown parameter 'user_i00000000000000000000'
[  822.143414][ T5861] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  822.400175][ T5861] usb 10-1: Using ep0 maxpacket: 16
[  822.422569][ T5861] usb 10-1: config 8 has an invalid interface number: 159 but max is 0
[  822.431351][ T5861] usb 10-1: config 8 has no interface number 0
[  822.437716][ T5861] usb 10-1: config 8 interface 159 has no altsetting 0
[  822.547795][ T5861] usb 10-1: New USB device found, idVendor=0c45, idProduct=612a, bcdDevice=29.9c
[  822.557598][ T5861] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  822.566296][ T5861] usb 10-1: Product: syz
[  822.570881][ T5861] usb 10-1: Manufacturer: syz
[  822.575797][ T5861] usb 10-1: SerialNumber: syz
[  822.714870][ T8481] Bluetooth: hci1: command tx timeout
[  823.404392][ T9869] chnl_net:caif_netlink_parms(): no params data found
[  823.884295][ T9915] program syz.1.773 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  824.797757][ T8481] Bluetooth: hci1: command tx timeout
[  825.565174][ T4269] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  825.660677][ T5861] gspca_main: sonixj-2.14.0 probing 0c45:612a
[  825.746143][ T5861] gspca_sonixj: reg_w1 err -71
[  825.751721][ T5861] sonixj 10-1:8.159: probe with driver sonixj failed with error -71
[  825.781963][ T4269] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  825.839125][ T5861] usb 10-1: USB disconnect, device number 2
[  825.970945][ T4269] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  826.179884][ T4269] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  826.869745][ T8481] Bluetooth: hci1: command tx timeout
[  827.109858][ T4269] bridge_slave_1: left allmulticast mode
[  827.115857][ T4269] bridge_slave_1: left promiscuous mode
[  827.123168][ T4269] bridge0: port 2(bridge_slave_1) entered disabled state
[  827.222847][ T4269] bridge_slave_0: left allmulticast mode
[  827.228690][ T4269] bridge_slave_0: left promiscuous mode
[  827.235481][ T4269] bridge0: port 1(bridge_slave_0) entered disabled state
[  828.342993][ T4269] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  828.387438][ T4269] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  828.404162][ T4269] bond0 (unregistering): Released all slaves
[  828.574089][ T9869] bridge0: port 1(bridge_slave_0) entered blocking state
[  828.581605][ T9869] bridge0: port 1(bridge_slave_0) entered disabled state
[  828.589113][ T9869] bridge_slave_0: entered allmulticast mode
[  828.597735][ T9869] bridge_slave_0: entered promiscuous mode
[  828.634168][ T4269] tipc: Left network mode
[  828.681388][ T4269] IPVS: stopping backup sync thread 8633 ...
[  828.800340][ T9869] bridge0: port 2(bridge_slave_1) entered blocking state
[  828.807949][ T9869] bridge0: port 2(bridge_slave_1) entered disabled state
[  828.815818][ T9869] bridge_slave_1: entered allmulticast mode
[  828.824274][ T9869] bridge_slave_1: entered promiscuous mode
[  828.952443][ T8481] Bluetooth: hci1: command tx timeout
[  829.433164][ T9869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  829.480875][ T4269] hsr_slave_0: left promiscuous mode
[  829.519224][ T4269] hsr_slave_1: left promiscuous mode
[  829.527438][ T4269] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  829.535219][ T4269] batman_adv: batadv0: Removing interface: batadv_slave_0
[  829.592656][ T4269] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  829.600579][ T4269] batman_adv: batadv0: Removing interface: batadv_slave_1
[  829.738509][ T4269] veth1_macvtap: left promiscuous mode
[  829.744510][ T4269] veth0_macvtap: left promiscuous mode
[  829.750722][ T4269] veth1_vlan: left promiscuous mode
[  829.756299][ T4269] veth0_vlan: left promiscuous mode
[  830.569662][ T5856] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  830.884051][ T4269] team0 (unregistering): Port device team_slave_1 removed
[  830.939944][ T5856] usb 4-1: device descriptor read/64, error -71
[  830.956207][ T4269] team0 (unregistering): Port device team_slave_0 removed
[  831.229980][ T5856] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  831.574442][ T9869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  831.669742][ T5856] usb 4-1: device descriptor read/64, error -71
[  831.792927][ T5856] usb usb4-port1: attempt power cycle
[  832.031124][ T9869] team0: Port device team_slave_0 added
[  832.076141][ T9869] team0: Port device team_slave_1 added
[  832.275434][ T5856] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  832.770193][ T9869] batman_adv: batadv0: Adding interface: batadv_slave_0
[  832.777238][ T9869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  832.803508][ T9869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  832.831981][ T5856] usb 4-1: device descriptor read/8, error -71
[  832.847440][ T9869] batman_adv: batadv0: Adding interface: batadv_slave_1
[  832.856065][ T9869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  832.887952][ T9869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  833.099775][ T5856] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  833.176700][ T5856] usb 4-1: device descriptor read/8, error -71
[  833.309647][ T5856] usb usb4-port1: unable to enumerate USB device
[  833.465719][ T9869] hsr_slave_0: entered promiscuous mode
[  833.478261][ T9869] hsr_slave_1: entered promiscuous mode
[  833.903997][ T9963] syzkaller0: entered promiscuous mode
[  833.909993][ T9963] syzkaller0: entered allmulticast mode
[  834.023425][ T9960] tipc: Started in network mode
[  834.028560][ T9960] tipc: Node identity 0ed7b2c1577e, cluster identity 4711
[  834.037043][ T9960] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  834.151725][ T9958] tipc: Resetting bearer <eth:syzkaller0>
[  834.214358][ T9958] tipc: Disabling bearer <eth:syzkaller0>
[  835.205486][ T9869] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  835.341350][ T9869] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  835.441149][ T9869] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  835.534682][ T9869] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  835.740583][ T9985] program syz.9.793 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  837.164007][ T9869] 8021q: adding VLAN 0 to HW filter on device bond0
[  837.390943][ T9869] 8021q: adding VLAN 0 to HW filter on device team0
[  837.479223][ T7542] bridge0: port 1(bridge_slave_0) entered blocking state
[  837.486806][ T7542] bridge0: port 1(bridge_slave_0) entered forwarding state
[  837.626372][ T7542] bridge0: port 2(bridge_slave_1) entered blocking state
[  837.633818][ T7542] bridge0: port 2(bridge_slave_1) entered forwarding state
[  838.054744][T10009] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  839.758708][ T9869] 8021q: adding VLAN 0 to HW filter on device batadv0
[  849.102705][ T1287] ieee802154 phy0 wpan0: encryption failed: -22
[  849.109530][ T1287] ieee802154 phy1 wpan1: encryption failed: -22
[  850.594145][ T9869] veth0_vlan: entered promiscuous mode
[  850.738401][ T9869] veth1_vlan: entered promiscuous mode
[  851.151043][ T9869] veth0_macvtap: entered promiscuous mode
[  851.258708][ T9869] veth1_macvtap: entered promiscuous mode
[  851.639899][ T9869] batman_adv: batadv0: Interface activated: batadv_slave_0
[  851.733376][ T9869] batman_adv: batadv0: Interface activated: batadv_slave_1
[  851.901077][ T3938] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  851.980244][ T1003] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  851.989252][ T1003] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  852.104275][ T1003] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  853.420824][ T5795] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  853.431751][ T5795] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  853.452076][ T5795] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  853.469144][ T5795] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  853.531003][ T5795] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  854.170229][ T8481] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  854.181595][ T8481] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  854.203225][ T8481] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  854.279207][ T8481] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  854.414583][ T8481] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  855.701515][ T8481] Bluetooth: hci3: command tx timeout
[  855.730375][T10062] chnl_net:caif_netlink_parms(): no params data found
[  856.490731][ T5795] Bluetooth: hci4: command tx timeout
[  856.521365][ T5795] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  856.547679][ T5795] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  856.562610][ T5795] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  856.581172][T10067] chnl_net:caif_netlink_parms(): no params data found
[  856.622115][ T5795] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  856.672229][ T5795] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  857.753983][ T8481] Bluetooth: hci3: command tx timeout
[  858.191834][T10062] bridge0: port 1(bridge_slave_0) entered blocking state
[  858.199245][T10062] bridge0: port 1(bridge_slave_0) entered disabled state
[  858.208507][T10062] bridge_slave_0: entered allmulticast mode
[  858.217337][T10062] bridge_slave_0: entered promiscuous mode
[  858.381800][T10062] bridge0: port 2(bridge_slave_1) entered blocking state
[  858.389277][T10062] bridge0: port 2(bridge_slave_1) entered disabled state
[  858.397197][T10062] bridge_slave_1: entered allmulticast mode
[  858.408671][T10062] bridge_slave_1: entered promiscuous mode
[  858.550189][ T8481] Bluetooth: hci4: command tx timeout
[  858.791697][ T8481] Bluetooth: hci7: command tx timeout
[  859.061291][T10062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  859.193450][T10062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  859.837906][ T8481] Bluetooth: hci3: command tx timeout
[  860.434977][ T4042] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  860.567537][T10062] team0: Port device team_slave_0 added
[  860.581153][T10067] bridge0: port 1(bridge_slave_0) entered blocking state
[  860.588851][T10067] bridge0: port 1(bridge_slave_0) entered disabled state
[  860.596809][T10067] bridge_slave_0: entered allmulticast mode
[  860.606696][T10067] bridge_slave_0: entered promiscuous mode
[  860.646253][ T8481] Bluetooth: hci4: command tx timeout
[  860.871456][ T8481] Bluetooth: hci7: command tx timeout
[  860.908926][ T4042] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  861.019614][T10062] team0: Port device team_slave_1 added
[  861.026997][T10067] bridge0: port 2(bridge_slave_1) entered blocking state
[  861.034796][T10067] bridge0: port 2(bridge_slave_1) entered disabled state
[  861.042759][T10067] bridge_slave_1: entered allmulticast mode
[  861.052623][T10067] bridge_slave_1: entered promiscuous mode
[  861.226484][ T4042] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  861.341407][T10086] chnl_net:caif_netlink_parms(): no params data found
[  861.682002][ T4042] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  861.797555][T10067] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  861.819604][T10062] batman_adv: batadv0: Adding interface: batadv_slave_0
[  861.826755][T10062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  861.853288][T10062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  861.939260][T10067] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  861.989768][ T8481] Bluetooth: hci3: command tx timeout
[  862.289084][T10062] batman_adv: batadv0: Adding interface: batadv_slave_1
[  862.296422][T10062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  862.323059][T10062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  862.408734][T10067] team0: Port device team_slave_0 added
[  862.551013][T10067] team0: Port device team_slave_1 added
[  862.712975][ T8481] Bluetooth: hci4: command tx timeout
[  862.957641][ T8481] Bluetooth: hci7: command tx timeout
[  863.125581][T10067] batman_adv: batadv0: Adding interface: batadv_slave_0
[  863.132913][T10067] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  863.159513][T10067] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  863.200154][T10062] hsr_slave_0: entered promiscuous mode
[  863.209019][T10062] hsr_slave_1: entered promiscuous mode
[  863.216899][T10062] debugfs: 'hsr0' already exists in 'hsr'
[  863.222842][T10062] Cannot create hsr debugfs directory
[  863.285498][ T4042] bridge_slave_1: left allmulticast mode
[  863.291448][ T4042] bridge_slave_1: left promiscuous mode
[  863.298124][ T4042] bridge0: port 2(bridge_slave_1) entered disabled state
[  863.348418][ T4042] bridge_slave_0: left allmulticast mode
[  863.359988][ T4042] bridge_slave_0: left promiscuous mode
[  863.366591][ T4042] bridge0: port 1(bridge_slave_0) entered disabled state
[  863.782181][ T4042] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  863.803492][ T4042] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  863.818027][ T4042] bond0 (unregistering): Released all slaves
[  863.895547][T10067] batman_adv: batadv0: Adding interface: batadv_slave_1
[  863.902966][T10067] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  863.929388][T10067] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  864.124169][ T7542] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  864.132605][ T7542] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  864.243442][T10086] bridge0: port 1(bridge_slave_0) entered blocking state
[  864.252383][T10086] bridge0: port 1(bridge_slave_0) entered disabled state
[  864.260239][T10086] bridge_slave_0: entered allmulticast mode
[  864.268940][T10086] bridge_slave_0: entered promiscuous mode
[  864.401827][T10086] bridge0: port 2(bridge_slave_1) entered blocking state
[  864.412791][T10086] bridge0: port 2(bridge_slave_1) entered disabled state
[  864.420611][T10086] bridge_slave_1: entered allmulticast mode
[  864.429137][T10086] bridge_slave_1: entered promiscuous mode
[  864.592792][ T4269] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  864.601924][ T4269] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  865.034960][ T8481] Bluetooth: hci7: command tx timeout
[  865.248740][T10086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  865.277044][T10067] hsr_slave_0: entered promiscuous mode
[  865.286925][T10067] hsr_slave_1: entered promiscuous mode
[  865.295766][T10067] debugfs: 'hsr0' already exists in 'hsr'
[  865.301841][T10067] Cannot create hsr debugfs directory
[  865.364087][T10086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  865.496844][ T4042] hsr_slave_0: left promiscuous mode
[  865.539827][ T4042] hsr_slave_1: left promiscuous mode
[  865.547074][ T4042] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  865.554823][ T4042] batman_adv: batadv0: Removing interface: batadv_slave_0
[  865.592798][ T4042] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  865.600535][ T4042] batman_adv: batadv0: Removing interface: batadv_slave_1
[  865.700209][ T4042] veth1_macvtap: left promiscuous mode
[  865.706044][ T4042] veth0_macvtap: left promiscuous mode
[  865.712626][ T4042] veth1_vlan: left promiscuous mode
[  865.718118][ T4042] veth0_vlan: left promiscuous mode
[  866.417482][ T4042] team0 (unregistering): Port device team_slave_1 removed
[  866.445388][ T4042] team0 (unregistering): Port device team_slave_0 removed
[  867.006769][T10139] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  867.150717][T10086] team0: Port device team_slave_0 added
[  867.210330][T10086] team0: Port device team_slave_1 added
[  867.729740][T10086] batman_adv: batadv0: Adding interface: batadv_slave_0
[  867.736869][T10086] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  867.763533][T10086] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  867.983568][T10086] batman_adv: batadv0: Adding interface: batadv_slave_1
[  867.991025][T10086] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  868.017526][T10086] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  868.104411][ T4042] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  868.252976][ T4042] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  868.589121][ T4042] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  868.725193][ T4042] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  868.934970][T10086] hsr_slave_0: entered promiscuous mode
[  868.952903][T10086] hsr_slave_1: entered promiscuous mode
[  868.966767][T10086] debugfs: 'hsr0' already exists in 'hsr'
[  868.973808][T10086] Cannot create hsr debugfs directory
[  869.511985][T10062] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  869.580710][T10062] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  869.744322][ T4042] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  869.812741][T10062] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  869.953700][ T4042] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  870.091685][T10062] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  870.170626][ T4042] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  870.395182][ T4042] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  870.822432][T10067] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  870.866381][T10067] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  870.947724][T10067] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  871.155981][ T4042] bridge_slave_1: left allmulticast mode
[  871.162717][ T4042] bridge_slave_1: left promiscuous mode
[  871.169137][ T4042] bridge0: port 2(bridge_slave_1) entered disabled state
[  871.244340][ T4042] bridge_slave_0: left allmulticast mode
[  871.250687][ T4042] bridge_slave_0: left promiscuous mode
[  871.258635][ T4042] bridge0: port 1(bridge_slave_0) entered disabled state
[  871.355190][ T4042] bridge_slave_1: left allmulticast mode
[  871.362715][ T4042] bridge_slave_1: left promiscuous mode
[  871.369545][ T4042] bridge0: port 2(bridge_slave_1) entered disabled state
[  871.430433][ T4042] bridge_slave_0: left allmulticast mode
[  871.436384][ T4042] bridge_slave_0: left promiscuous mode
[  871.443228][ T4042] bridge0: port 1(bridge_slave_0) entered disabled state
[  872.082912][ T4042] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  872.111503][ T4042] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  872.146824][ T4042] bond0 (unregistering): Released all slaves
[  872.517932][ T4042] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  872.550129][ T4042] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  872.582709][ T4042] bond0 (unregistering): Released all slaves
[  873.052185][ T4042] tipc: Left network mode
[  873.172994][T10067] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  873.332900][T10179] Bluetooth: MGMT ver 1.23
[  873.872617][T10062] 8021q: adding VLAN 0 to HW filter on device bond0
[  874.314874][T10062] 8021q: adding VLAN 0 to HW filter on device team0
[  874.715503][ T3941] bridge0: port 1(bridge_slave_0) entered blocking state
[  874.723154][ T3941] bridge0: port 1(bridge_slave_0) entered forwarding state
[  882.330785][ T5801] Bluetooth: hci0: command 0x0406 tx timeout
[  883.199036][T10086] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  883.281645][ T1003] bridge0: port 2(bridge_slave_1) entered blocking state
[  883.289170][ T1003] bridge0: port 2(bridge_slave_1) entered forwarding state
[  883.299185][T10086] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  883.444481][ T4042] hsr_slave_0: left promiscuous mode
[  883.453123][ T4042] hsr_slave_1: left promiscuous mode
[  883.465375][ T4042] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  883.473094][ T4042] batman_adv: batadv0: Removing interface: batadv_slave_0
[  883.491796][ T4042] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  883.499643][ T4042] batman_adv: batadv0: Removing interface: batadv_slave_1
[  883.537675][ T4042] hsr_slave_0: left promiscuous mode
[  883.556510][ T4042] hsr_slave_1: left promiscuous mode
[  883.568912][ T4042] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  883.576718][ T4042] batman_adv: batadv0: Removing interface: batadv_slave_0
[  883.588510][ T4042] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  883.598257][ T4042] batman_adv: batadv0: Removing interface: batadv_slave_1
[  883.640470][ T4042] veth1_macvtap: left promiscuous mode
[  883.647455][ T4042] veth0_macvtap: left promiscuous mode
[  883.653556][ T4042] veth1_vlan: left promiscuous mode
[  883.659096][ T4042] veth0_vlan: left promiscuous mode
[  883.679977][ T4042] veth1_macvtap: left promiscuous mode
[  883.685696][ T4042] veth0_macvtap: left promiscuous mode
[  883.691835][ T4042] veth1_vlan: left promiscuous mode
[  883.697365][ T4042] veth0_vlan: left promiscuous mode
[  884.310609][    T9] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  884.690072][    T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  884.702255][    T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  884.713230][    T9] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  884.727206][    T9] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  884.737501][    T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  884.765287][ T4042] team0 (unregistering): Port device team_slave_1 removed
[  884.798127][    T9] usb 8-1: config 0 descriptor??
[  884.828743][ T4042] team0 (unregistering): Port device team_slave_0 removed
[  885.301897][    T9] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0
[  885.861911][ T4042] team0 (unregistering): Port device team_slave_1 removed
[  885.946015][ T4042] team0 (unregistering): Port device team_slave_0 removed
[  886.362783][T10086] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  886.398701][T10086] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  886.816034][T10062] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  886.855964][ T7573] usb 8-1: reset high-speed USB device number 6 using dummy_hcd
[  886.892770][T10067] 8021q: adding VLAN 0 to HW filter on device bond0
[  887.066331][ T7573] usb 8-1: device descriptor read/64, error -32
[  887.176020][T10067] 8021q: adding VLAN 0 to HW filter on device team0
[  887.326241][ T7487] bridge0: port 1(bridge_slave_0) entered blocking state
[  887.333965][ T7487] bridge0: port 1(bridge_slave_0) entered forwarding state
[  887.363326][ T7573] usb 8-1: reset high-speed USB device number 6 using dummy_hcd
[  887.529182][ T7487] bridge0: port 2(bridge_slave_1) entered blocking state
[  887.536835][ T7487] bridge0: port 2(bridge_slave_1) entered forwarding state
[  887.893347][T10067] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  888.396436][ T5856] usb 8-1: USB disconnect, device number 6
[  888.503937][T10200] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  888.539117][T10086] 8021q: adding VLAN 0 to HW filter on device bond0
[  888.916898][T10086] 8021q: adding VLAN 0 to HW filter on device team0
[  889.078511][ T7542] bridge0: port 1(bridge_slave_0) entered blocking state
[  889.086275][ T7542] bridge0: port 1(bridge_slave_0) entered forwarding state
[  889.103960][ T7542] bridge0: port 2(bridge_slave_1) entered blocking state
[  889.111753][ T7542] bridge0: port 2(bridge_slave_1) entered forwarding state
[  889.811732][T10215] tipc: Failed to remove unknown binding: 66,0,0/0:4219915755/4219915756
[  889.921522][T10215] tipc: Failed to remove unknown binding: 66,0,0/0:4219915755/4219915756
[  890.219937][T10062] 8021q: adding VLAN 0 to HW filter on device batadv0
[  892.386484][T10067] 8021q: adding VLAN 0 to HW filter on device batadv0
[  892.979791][ T5856] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  893.210348][ T5856] usb 9-1: Using ep0 maxpacket: 16
[  893.229231][T10086] 8021q: adding VLAN 0 to HW filter on device batadv0
[  893.269147][ T5856] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  893.332477][ T5856] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  893.342274][ T5856] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  893.352078][ T5856] usb 9-1: Product: syz
[  893.356478][ T5856] usb 9-1: Manufacturer: syz
[  893.363836][ T5856] usb 9-1: SerialNumber: syz
[  893.515346][ T5856] usb 9-1: config 0 descriptor??
[  893.796405][T10086] veth0_vlan: entered promiscuous mode
[  893.877065][T10086] veth1_vlan: entered promiscuous mode
[  894.143185][T10086] veth0_macvtap: entered promiscuous mode
[  894.208763][T10086] veth1_macvtap: entered promiscuous mode
[  894.480593][T10086] batman_adv: batadv0: Interface activated: batadv_slave_0
[  894.591420][T10086] batman_adv: batadv0: Interface activated: batadv_slave_1
[  894.648325][T10062] veth0_vlan: entered promiscuous mode
[  894.696267][ T1138] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  894.761910][T10062] veth1_vlan: entered promiscuous mode
[  894.778715][ T1138] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  894.823407][ T1138] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  894.851619][ T1138] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  894.950993][ T5856] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  895.065766][T10062] veth0_macvtap: entered promiscuous mode
[  895.171373][T10062] veth1_macvtap: entered promiscuous mode
[  895.204096][ T5856] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  895.215877][ T5856] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  895.228282][ T5856] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  895.242209][ T5856] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  895.251653][ T5856] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  895.392388][T10062] batman_adv: batadv0: Interface activated: batadv_slave_0
[  895.462559][ T5856] usb 8-1: config 0 descriptor??
[  895.556458][T10062] batman_adv: batadv0: Interface activated: batadv_slave_1
[  895.722483][ T3941] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  895.788531][ T3941] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  895.872584][T10067] veth0_vlan: entered promiscuous mode
[  895.887376][ T3941] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  895.940894][ T4269] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  896.053459][T10067] veth1_vlan: entered promiscuous mode
[  896.109846][ T5856] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0
[  896.409864][ T5861] usb 9-1: USB disconnect, device number 6
[  896.615882][T10067] veth0_macvtap: entered promiscuous mode
[  896.726823][T10067] veth1_macvtap: entered promiscuous mode
[  897.224264][    T9] usb 8-1: USB disconnect, device number 7
[  897.266685][T10067] batman_adv: batadv0: Interface activated: batadv_slave_0
[  897.636206][T10067] batman_adv: batadv0: Interface activated: batadv_slave_1
[  897.926982][ T3941] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  898.064740][ T3941] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  898.167084][T10256] fido_id[10256]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory
[  898.231113][ T3941] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  898.345184][ T3941] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  900.248840][T10272] loop7: detected capacity change from 0 to 128
[  900.413266][T10272] FAT-fs (loop7): bogus number of FAT structure
[  900.421144][T10272] FAT-fs (loop7): This doesn't look like a DOS 1.x volume; no bootstrapping code
[  900.430709][T10272] FAT-fs (loop7): Can't find a valid FAT filesystem
[  900.703414][   T30] audit: type=1804 audit(1768351955.085:27): pid=10272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.831" name="bus" dev="ramfs" ino=38830 res=1 errno=0
[  905.292183][T10321] tipc: Started in network mode
[  905.297516][T10321] tipc: Node identity 2a748e50a3ae, cluster identity 4711
[  905.306139][T10321] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  905.531638][T10320] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) !
[  905.627416][T10320] tipc: Resetting bearer <eth:syzkaller0>
[  905.680160][T10318] tipc: Disabling bearer <eth:syzkaller0>
[  908.841772][ T3987] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  908.849948][ T3987] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  908.976783][T10339] loop8: detected capacity change from 0 to 2048
[  909.050825][T10339] udf: Bad value for 'anchor'
[  909.157262][ T7542] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  909.165534][ T7542] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  909.421604][ T7542] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  909.430888][ T7542] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  909.847937][ T1003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  909.856766][ T1003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  910.493914][ T1287] ieee802154 phy0 wpan0: encryption failed: -22
[  910.500872][ T1287] ieee802154 phy1 wpan1: encryption failed: -22
[  911.546931][ T7517] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  911.555125][ T7517] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  911.920668][ T4042] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  911.928877][ T4042] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  912.026081][T10374] tipc: Started in network mode
[  912.031516][T10374] tipc: Node identity 0a8ae1cecf65, cluster identity 4711
[  912.040051][T10374] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  912.146993][T10374] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) !
[  912.249971][T10375] tipc: Resetting bearer <eth:syzkaller0>
[  912.410432][T10373] tipc: Disabling bearer <eth:syzkaller0>
[  913.119824][ T5861] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  913.324115][ T5861] usb 3-1: Using ep0 maxpacket: 8
[  913.393022][ T5861] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[  913.402131][ T5861] usb 3-1: config 179 has no interface number 0
[  913.408637][ T5861] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  913.420190][ T5861] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  913.431905][ T5861] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  913.443499][ T5861] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  913.456519][ T5861] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  913.470502][ T5861] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  913.480846][ T5861] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  913.660127][T10384] Bluetooth: MGMT ver 1.23
[  913.879222][T10381] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  914.315377][ T5861] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input18
[  914.500955][ T8481] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  914.511292][ T8481] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  914.540171][ T8481] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  914.556915][ T8095] usb 3-1: USB disconnect, device number 9
[  914.564313][    C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  914.564548][    C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  914.593805][ T8481] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  914.606463][ T8481] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  914.669871][T10392] input: syz1 as /devices/virtual/input/input19
[  916.793764][ T8481] Bluetooth: hci2: command tx timeout
[  917.253485][T10388] chnl_net:caif_netlink_parms(): no params data found
[  918.878853][ T8481] Bluetooth: hci2: command tx timeout
[  918.949911][ T4021] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  919.207808][ T4021] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  919.340493][ T8095] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  919.420406][ T4021] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  919.555304][ T8095] usb 3-1: Using ep0 maxpacket: 32
[  919.577559][ T8095] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32
[  919.612053][ T7573] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  919.704134][ T8095] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  919.713789][ T8095] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  919.722176][ T8095] usb 3-1: Product: syz
[  919.726801][ T8095] usb 3-1: Manufacturer: syz
[  919.732144][ T8095] usb 3-1: SerialNumber: syz
[  919.790040][ T7573] usb 8-1: Using ep0 maxpacket: 8
[  919.822619][ T8095] usb 3-1: config 0 descriptor??
[  919.831327][T10440] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  919.866788][ T8095] hub 3-1:0.0: bad descriptor, ignoring hub
[  919.868356][ T7573] usb 8-1: config 179 has an invalid interface number: 65 but max is 0
[  919.873325][ T8095] hub 3-1:0.0: probe with driver hub failed with error -5
[  919.890114][ T7573] usb 8-1: config 179 has no interface number 0
[  919.898121][ T8095] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input20
[  919.914367][ T7573] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  919.925872][ T7573] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  919.937474][ T7573] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  919.949100][ T7573] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  919.961077][ T7573] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  919.975429][ T7573] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  919.984855][ T7573] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  920.006260][ T4021] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  920.061642][T10388] bridge0: port 1(bridge_slave_0) entered blocking state
[  920.071341][T10388] bridge0: port 1(bridge_slave_0) entered disabled state
[  920.079171][T10388] bridge_slave_0: entered allmulticast mode
[  920.089014][T10388] bridge_slave_0: entered promiscuous mode
[  920.302433][ T8095] usb 3-1: USB disconnect, device number 10
[  920.302696][    C1] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19
[  920.342277][T10388] bridge0: port 2(bridge_slave_1) entered blocking state
[  920.352069][T10388] bridge0: port 2(bridge_slave_1) entered disabled state
[  920.360142][T10388] bridge_slave_1: entered allmulticast mode
[  920.376683][T10388] bridge_slave_1: entered promiscuous mode
[  920.380164][T10447] loop4: detected capacity change from 0 to 1024
[  920.453579][T10447] EXT4-fs: Ignoring removed mblk_io_submit option
[  920.537108][T10444] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[  920.566488][T10447] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  920.580301][T10447] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  920.950769][ T8481] Bluetooth: hci2: command tx timeout
[  921.076864][T10447] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #15: comm syz.4.863: lblock 0 mapped to illegal pblock 0 (length 1)
[  921.241540][T10447] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  921.255745][T10447] EXT4-fs (loop4): This should not happen!! Data will be lost
[  921.255745][T10447] 
[  921.303250][ T7573] input: Generic X-Box pad as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:179.65/input/input21
[  921.368919][T10453] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: comm syz.4.863: lblock 0 mapped to illegal pblock 0 (length 1)
[  921.389259][ T4021] bridge_slave_1: left allmulticast mode
[  921.401465][ T4021] bridge_slave_1: left promiscuous mode
[  921.408051][ T4021] bridge0: port 2(bridge_slave_1) entered disabled state
[  921.455740][ T5861] usb 8-1: USB disconnect, device number 8
[  921.455749][    C0] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  921.456146][    C0] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  921.545130][T10446] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: comm syz.4.863: lblock 0 mapped to illegal pblock 0 (length 1)
[  921.578189][ T4021] bridge_slave_0: left allmulticast mode
[  921.584321][ T4021] bridge_slave_0: left promiscuous mode
[  921.593652][ T4021] bridge0: port 1(bridge_slave_0) entered disabled state
[  921.669766][T10451] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set
[  921.674773][T10446] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: comm syz.4.863: lblock 0 mapped to illegal pblock 0 (length 1)
[  921.783677][T10446] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: comm syz.4.863: lblock 0 mapped to illegal pblock 0 (length 1)
[  921.843265][T10453] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: comm syz.4.863: lblock 0 mapped to illegal pblock 0 (length 1)
[  921.903615][T10453] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: comm syz.4.863: lblock 0 mapped to illegal pblock 0 (length 1)
[  921.953223][T10453] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: comm syz.4.863: lblock 0 mapped to illegal pblock 0 (length 1)
[  922.042937][T10453] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: comm syz.4.863: lblock 0 mapped to illegal pblock 0 (length 1)
[  922.713743][ T4021] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  922.748807][ T4021] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  922.780837][ T4021] bond0 (unregistering): Released all slaves
[  922.877842][T10388] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  922.982959][T10388] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  923.031201][ T8481] Bluetooth: hci2: command tx timeout
[  923.313704][T10062] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  923.338317][T10464] loop2: detected capacity change from 0 to 128
[  923.446251][T10388] team0: Port device team_slave_0 added
[  923.468060][T10388] team0: Port device team_slave_1 added
[  923.501918][T10464] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  923.593619][T10464] ext4 filesystem being mounted at /7/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  923.846287][T10464] fscrypt: loop2: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12
[  924.818879][T10086] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  924.842435][T10388] batman_adv: batadv0: Adding interface: batadv_slave_0
[  924.849970][T10388] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  924.877659][T10388] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  924.972493][ T4021] hsr_slave_0: left promiscuous mode
[  925.031193][ T4021] hsr_slave_1: left promiscuous mode
[  925.041550][ T4021] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  925.049278][ T4021] batman_adv: batadv0: Removing interface: batadv_slave_0
[  925.258014][ T4021] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  925.265803][ T4021] batman_adv: batadv0: Removing interface: batadv_slave_1
[  925.472585][ T4021] veth1_macvtap: left promiscuous mode
[  925.478516][ T4021] veth0_macvtap: left promiscuous mode
[  925.485270][ T4021] veth1_vlan: left promiscuous mode
[  925.491999][ T4021] veth0_vlan: left promiscuous mode
[  926.480368][ T4021] team0 (unregistering): Port device team_slave_1 removed
[  926.671385][ T4021] team0 (unregistering): Port device team_slave_0 removed
[  927.489921][T10388] batman_adv: batadv0: Adding interface: batadv_slave_1
[  927.497642][T10388] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  927.524735][T10388] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  927.544874][ T8095] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  927.729909][ T8095] usb 9-1: Using ep0 maxpacket: 8
[  927.775492][ T8095] usb 9-1: config 179 has an invalid interface number: 65 but max is 0
[  927.785089][ T8095] usb 9-1: config 179 has no interface number 0
[  927.792514][ T8095] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  927.805502][ T8095] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  927.817886][ T8095] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  927.830175][ T8095] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  927.842048][ T8095] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  927.855806][ T8095] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  927.865471][ T8095] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  928.322840][T10503] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  928.436761][T10388] hsr_slave_0: entered promiscuous mode
[  928.447692][T10388] hsr_slave_1: entered promiscuous mode
[  928.457115][T10388] debugfs: 'hsr0' already exists in 'hsr'
[  928.463142][T10388] Cannot create hsr debugfs directory
[  928.655945][ T8095] input: Generic X-Box pad as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:179.65/input/input22
[  928.842728][ T5856] usb 9-1: USB disconnect, device number 7
[  928.842804][    C1] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  928.859485][    C1] dummy_hcd dummy_hcd.8: timer fired with no URBs pending?
[  930.298851][T10530] loop7: detected capacity change from 0 to 512
[  930.518617][T10526] loop4: detected capacity change from 0 to 2048
[  930.551314][T10530] EXT4-fs: inline encryption not supported
[  930.775741][T10530] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  930.974493][T10526] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  932.024260][T10388] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  932.132416][T10388] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  932.170267][ T9308] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  932.241657][T10388] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  932.308057][T10388] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  932.658100][T10549] 9p: Bad value for 'wfdno'
[  933.117645][T10555] syzkaller0: entered promiscuous mode
[  933.123928][T10555] syzkaller0: entered allmulticast mode
[  933.184143][T10554] loop7: detected capacity change from 0 to 2048
[  933.185247][T10555] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) !
[  933.354215][T10554] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  933.558195][T10554] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  933.585298][T10554] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  933.598108][T10554] EXT4-fs (loop7): This should not happen!! Data will be lost
[  933.598108][T10554] 
[  933.608264][T10554] EXT4-fs (loop7): Total free blocks count 0
[  933.614728][T10554] EXT4-fs (loop7): Free/Dirty block details
[  933.626104][T10554] EXT4-fs (loop7): free_blocks=2415919104
[  933.633682][T10554] EXT4-fs (loop7): dirty_blocks=16
[  933.638996][T10554] EXT4-fs (loop7): Block reservation details
[  933.645378][T10554] EXT4-fs (loop7): i_reserved_data_blocks=1
[  933.833279][T10552] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  933.945704][T10388] 8021q: adding VLAN 0 to HW filter on device bond0
[  934.165293][T10388] 8021q: adding VLAN 0 to HW filter on device team0
[  937.247596][ T3517] bridge0: port 1(bridge_slave_0) entered blocking state
[  937.255432][ T3517] bridge0: port 1(bridge_slave_0) entered forwarding state
[  937.279855][ T9308] INFO: The task syz-executor:9308 has been waiting for writeback completion for more than 1 seconds.
[  938.953113][T10388] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  938.976424][T10388] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  939.093708][ T3517] bridge0: port 2(bridge_slave_1) entered blocking state
[  939.101549][ T3517] bridge0: port 2(bridge_slave_1) entered forwarding state
[  939.978956][T10578] loop2: detected capacity change from 0 to 2048
[  940.223098][T10578] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  940.364421][T10577] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  940.471587][T10577] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  940.490578][T10577] EXT4-fs (loop2): This should not happen!! Data will be lost
[  940.490578][T10577] 
[  940.502304][T10577] EXT4-fs (loop2): Total free blocks count 0
[  940.509035][T10577] EXT4-fs (loop2): Free/Dirty block details
[  940.515975][T10577] EXT4-fs (loop2): free_blocks=2415919104
[  940.523084][T10577] EXT4-fs (loop2): dirty_blocks=16
[  940.528624][T10577] EXT4-fs (loop2): Block reservation details
[  940.535097][T10577] EXT4-fs (loop2): i_reserved_data_blocks=1
[  940.700632][T10578] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  940.796883][ T8481] Bluetooth: hci0: unexpected event for opcode 0x080c
[  941.275120][T10388] 8021q: adding VLAN 0 to HW filter on device batadv0
[  943.273984][ T8481] Bluetooth: hci1: command 0x0406 tx timeout
[  944.121636][T10603] 9p: Bad value for 'wfdno'
[  944.813233][T10608] syzkaller0: entered promiscuous mode
[  944.818999][T10608] syzkaller0: entered allmulticast mode
[  944.915816][T10608] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) !
[  945.521856][T10388] veth0_vlan: entered promiscuous mode
[  945.627519][T10388] veth1_vlan: entered promiscuous mode
[  945.983225][T10388] veth0_macvtap: entered promiscuous mode
[  946.094829][T10388] veth1_macvtap: entered promiscuous mode
[  946.293498][T10388] batman_adv: batadv0: Interface activated: batadv_slave_0
[  946.415344][T10388] batman_adv: batadv0: Interface activated: batadv_slave_1
[  946.607783][ T3517] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  946.704703][ T3517] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  946.741912][T10622] loop7: detected capacity change from 0 to 128
[  946.777018][ T3517] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  946.842919][ T3517] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  946.878654][T10622] EXT4-fs (loop7): Test dummy encryption mode enabled
[  947.012944][T10622] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  947.100961][T10622] ext4 filesystem being mounted at /57/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  947.510001][ T8095] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  948.116971][ T8095] usb 9-1: Using ep0 maxpacket: 16
[  948.408219][T10631] =====================================================
[  948.416259][T10631] BUG: KMSAN: uninit-value in aes_encrypt+0x1239/0x1960
[  948.423720][T10631]  aes_encrypt+0x1239/0x1960
[  948.428605][T10631]  aesti_encrypt+0x3d/0xa0
[  948.433415][T10631]  crypto_ecb_encrypt2+0x142/0x300
[  948.439586][T10631]  crypto_lskcipher_crypt_sg+0x3ac/0x930
[  948.445776][T10631]  crypto_lskcipher_encrypt_sg+0x8b/0xc0
[  948.452340][T10631]  crypto_skcipher_encrypt+0x111/0x1e0
[  948.458302][T10631]  xts_encrypt+0x2e1/0x570
[  948.463258][T10631]  crypto_skcipher_encrypt+0x18a/0x1e0
[  948.469294][T10631]  fscrypt_crypt_data_unit+0x38e/0x590
[  948.475219][T10631]  fscrypt_encrypt_pagecache_blocks+0x430/0x900
[  948.482851][T10631]  ext4_bio_write_folio+0x1383/0x30d0
[  948.490115][T10631]  mpage_submit_folio+0x399/0x3d0
[  948.495586][T10631]  ext4_do_writepages+0x3c93/0x77a0
[  948.501148][T10631]  ext4_writepages+0x338/0x870
[  948.506436][T10631]  do_writepages+0x3f2/0x860
[  948.511526][T10631]  file_write_and_wait_range+0x6f0/0x7d0
[  948.517767][T10631]  generic_buffers_fsync_noflush+0x7a/0x3f0
[  948.524612][T10631]  ext4_sync_file+0x587/0x12f0
[  948.529788][T10631]  vfs_fsync_range+0x1a1/0x240
[  948.535534][T10631]  ext4_buffered_write_iter+0xae9/0xce0
[  948.541647][T10631]  ext4_file_write_iter+0x2a2/0x3d90
[  948.547521][T10631]  vfs_write+0xbe2/0x15d0
[  948.552252][T10631]  __x64_sys_pwrite64+0x2ab/0x3b0
[  948.557838][T10631]  x64_sys_call+0xbaf/0x3e70
[  948.563504][T10631]  do_syscall_64+0xd3/0xf80
[  948.568880][T10631]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  948.575304][T10631] 
[  948.578000][T10631] Uninit was stored to memory at:
[  948.583427][T10631]  xts_xor_tweak+0x566/0xbd0
[  948.588224][T10631]  xts_encrypt+0x278/0x570
[  948.592881][T10631]  crypto_skcipher_encrypt+0x18a/0x1e0
[  948.599017][T10631]  fscrypt_crypt_data_unit+0x38e/0x590
[  948.605041][T10631]  fscrypt_encrypt_pagecache_blocks+0x430/0x900
[  948.611558][T10631]  ext4_bio_write_folio+0x1383/0x30d0
[  948.617752][T10631]  mpage_submit_folio+0x399/0x3d0
[  948.623684][T10631]  ext4_do_writepages+0x3c93/0x77a0
[  948.629659][T10631]  ext4_writepages+0x338/0x870
[  948.635069][T10631]  do_writepages+0x3f2/0x860
[  948.640338][T10631]  file_write_and_wait_range+0x6f0/0x7d0
[  948.646771][T10631]  generic_buffers_fsync_noflush+0x7a/0x3f0
[  948.653861][T10631]  ext4_sync_file+0x587/0x12f0
[  948.659164][T10631]  vfs_fsync_range+0x1a1/0x240
[  948.664410][T10631]  ext4_buffered_write_iter+0xae9/0xce0
[  948.670242][T10631]  ext4_file_write_iter+0x2a2/0x3d90
[  948.675973][T10631]  vfs_write+0xbe2/0x15d0
[  948.680829][T10631]  __x64_sys_pwrite64+0x2ab/0x3b0
[  948.686314][T10631]  x64_sys_call+0xbaf/0x3e70
[  948.691570][T10631]  do_syscall_64+0xd3/0xf80
[  948.696964][T10631]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  948.703290][T10631] 
[  948.705683][T10631] Uninit was created at:
[  948.710393][T10631]  __alloc_frozen_pages_noprof+0x421/0xab0
[  948.716535][T10631]  alloc_pages_mpol+0x328/0x860
[  948.721962][T10631]  folio_alloc_noprof+0x109/0x360
[  948.727279][T10631]  filemap_alloc_folio_noprof+0xda/0x480
[  948.733342][T10631]  __filemap_get_folio_mpol+0xb4f/0x1960
[  948.739127][T10631]  ext4_write_begin+0x6d3/0x2d70
[  948.744529][T10631]  ext4_da_write_begin+0x75e/0x1430
[  948.752257][T10631]  generic_perform_write+0x365/0x1050
[  948.757851][T10631]  ext4_buffered_write_iter+0x61a/0xce0
[  948.763736][T10631]  ext4_file_write_iter+0x2a2/0x3d90
[  948.770036][T10631]  vfs_write+0xbe2/0x15d0
[  948.774921][T10631]  __x64_sys_pwrite64+0x2ab/0x3b0
[  948.780124][T10631]  x64_sys_call+0xbaf/0x3e70
[  948.784964][T10631]  do_syscall_64+0xd3/0xf80
[  948.790163][T10631]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  948.797208][T10631] 
[  948.799670][T10631] CPU: 0 UID: 0 PID: 10631 Comm: syz.7.900 Tainted: G             L      syzkaller #0 PREEMPT(none) 
[  948.810709][T10631] Tainted: [L]=SOFTLOCKUP
[  948.815137][T10631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  948.825476][T10631] =====================================================
[  948.832670][T10631] Disabling lock debugging due to kernel taint
[  948.839099][T10631] Kernel panic - not syncing: kmsan.panic set ...
[  948.845645][T10631] CPU: 0 UID: 0 PID: 10631 Comm: syz.7.900 Tainted: G    B        L      syzkaller #0 PREEMPT(none) 
[  948.857364][T10631] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP
[  948.863083][T10631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  948.873608][T10631] Call Trace:
[  948.876976][T10631]  <TASK>
[  948.880019][T10631]  __dump_stack+0x26/0x30
[  948.884690][T10631]  dump_stack_lvl+0x50/0x1c0
[  948.889526][T10631]  ? dump_stack+0x12/0x25
[  948.894035][T10631]  dump_stack+0x1e/0x25
[  948.898353][T10631]  vpanic+0x435/0xd30
[  948.902717][T10631]  panic+0x15d/0x160
[  948.906859][T10631]  kmsan_report+0x31c/0x320
[  948.911741][T10631]  ? __msan_warning+0x1b/0x30
[  948.916691][T10631]  ? aes_encrypt+0x1239/0x1960
[  948.921685][T10631]  ? aesti_encrypt+0x3d/0xa0
[  948.926635][T10631]  ? crypto_ecb_encrypt2+0x142/0x300
[  948.932151][T10631]  ? crypto_lskcipher_crypt_sg+0x3ac/0x930
[  948.938116][T10631]  ? crypto_lskcipher_encrypt_sg+0x8b/0xc0
[  948.944201][T10631]  ? crypto_skcipher_encrypt+0x111/0x1e0
[  948.950251][T10631]  ? xts_encrypt+0x2e1/0x570
[  948.954974][T10631]  ? crypto_skcipher_encrypt+0x18a/0x1e0
[  948.960749][T10631]  ? fscrypt_crypt_data_unit+0x38e/0x590
[  948.966566][T10631]  ? fscrypt_encrypt_pagecache_blocks+0x430/0x900
[  948.973177][T10631]  ? ext4_bio_write_folio+0x1383/0x30d0
[  948.978914][T10631]  ? mpage_submit_folio+0x399/0x3d0
[  948.984510][T10631]  ? ext4_do_writepages+0x3c93/0x77a0
[  948.990246][T10631]  ? ext4_writepages+0x338/0x870
[  948.995413][T10631]  ? do_writepages+0x3f2/0x860
[  949.000590][T10631]  ? file_write_and_wait_range+0x6f0/0x7d0
[  949.006659][T10631]  ? generic_buffers_fsync_noflush+0x7a/0x3f0
[  949.013553][T10631]  ? ext4_sync_file+0x587/0x12f0
[  949.019107][T10631]  ? vfs_fsync_range+0x1a1/0x240
[  949.024254][T10631]  ? ext4_buffered_write_iter+0xae9/0xce0
[  949.030341][T10631]  ? ext4_file_write_iter+0x2a2/0x3d90
[  949.036060][T10631]  ? vfs_write+0xbe2/0x15d0
[  949.040876][T10631]  ? __x64_sys_pwrite64+0x2ab/0x3b0
[  949.046348][T10631]  ? x64_sys_call+0xbaf/0x3e70
[  949.051502][T10631]  ? do_syscall_64+0xd3/0xf80
[  949.056483][T10631]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  949.064017][T10631]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  949.070257][T10631]  ? filter_irq_stacks+0x49/0x190
[  949.075837][T10631]  ? stack_depot_save_flags+0x35/0x790
[  949.081858][T10631]  ? kmsan_get_metadata+0xfb/0x160
[  949.087359][T10631]  ? kmsan_get_metadata+0xfb/0x160
[  949.092805][T10631]  __msan_warning+0x1b/0x30
[  949.097670][T10631]  aes_encrypt+0x1239/0x1960
[  949.102530][T10631]  aesti_encrypt+0x3d/0xa0
[  949.107258][T10631]  crypto_ecb_encrypt2+0x142/0x300
[  949.112662][T10631]  ? __pfx_aesti_encrypt+0x10/0x10
[  949.117985][T10631]  crypto_lskcipher_crypt_sg+0x3ac/0x930
[  949.124175][T10631]  ? __pfx_crypto_ecb_encrypt2+0x10/0x10
[  949.131120][T10631]  ? __pfx_crypto_ecb_encrypt2+0x10/0x10
[  949.137166][T10631]  crypto_lskcipher_encrypt_sg+0x8b/0xc0
[  949.143716][T10631]  crypto_skcipher_encrypt+0x111/0x1e0
[  949.149851][T10631]  xts_encrypt+0x2e1/0x570
[  949.154611][T10631]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  949.160878][T10631]  ? __pfx_xts_encrypt+0x10/0x10
[  949.166119][T10631]  crypto_skcipher_encrypt+0x18a/0x1e0
[  949.171839][T10631]  fscrypt_crypt_data_unit+0x38e/0x590
[  949.177740][T10631]  ? kmsan_alloc_page+0x16b/0x210
[  949.183553][T10631]  ? kmsan_get_metadata+0xfb/0x160
[  949.188845][T10631]  ? __pfx_xts_encrypt_done+0x10/0x10
[  949.194377][T10631]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  949.200392][T10631]  ? alloc_pages_mpol+0x52c/0x860
[  949.206497][T10631]  ? kmsan_get_metadata+0xfb/0x160
[  949.211982][T10631]  ? kmsan_get_shadow_origin_ptr+0x35/0xb0
[  949.218344][T10631]  ? kmsan_get_metadata+0xfb/0x160
[  949.223907][T10631]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  949.230304][T10631]  fscrypt_encrypt_pagecache_blocks+0x430/0x900
[  949.237129][T10631]  ext4_bio_write_folio+0x1383/0x30d0
[  949.242893][T10631]  mpage_submit_folio+0x399/0x3d0
[  949.248739][T10631]  ext4_do_writepages+0x3c93/0x77a0
[  949.254192][T10631]  ? kernel_text_address+0x10e/0x1a0
[  949.259732][T10631]  ? kmsan_get_metadata+0xfb/0x160
[  949.266332][T10631]  ? kmsan_internal_set_shadow_origin+0x7a/0x110
[  949.273167][T10631]  ? kmsan_internal_unpoison_memory+0x14/0x20
[  949.279827][T10631]  ext4_writepages+0x338/0x870
[  949.285670][T10631]  ? kmsan_get_metadata+0xfb/0x160
[  949.291417][T10631]  ? __pfx_ext4_writepages+0x10/0x10
[  949.297619][T10631]  do_writepages+0x3f2/0x860
[  949.302879][T10631]  ? _raw_spin_unlock+0x30/0x50
[  949.308208][T10631]  ? wbc_attach_and_unlock_inode+0x131/0x680
[  949.315029][T10631]  file_write_and_wait_range+0x6f0/0x7d0
[  949.321579][T10631]  ? kmsan_get_metadata+0xfb/0x160
[  949.327003][T10631]  generic_buffers_fsync_noflush+0x7a/0x3f0
[  949.333559][T10631]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  949.339865][T10631]  ext4_sync_file+0x587/0x12f0
[  949.344839][T10631]  ? __pfx_ext4_sync_file+0x10/0x10
[  949.350682][T10631]  vfs_fsync_range+0x1a1/0x240
[  949.355888][T10631]  ext4_buffered_write_iter+0xae9/0xce0
[  949.361721][T10631]  ? futex_unqueue+0x225/0x2c0
[  949.367132][T10631]  ? kmsan_get_metadata+0xfb/0x160
[  949.373789][T10631]  ext4_file_write_iter+0x2a2/0x3d90
[  949.379319][T10631]  ? kmsan_get_metadata+0xfb/0x160
[  949.384731][T10631]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  949.391583][T10631]  ? vfs_write+0x4d1/0x15d0
[  949.396623][T10631]  ? filter_irq_stacks+0x49/0x190
[  949.402190][T10631]  ? stack_depot_save_flags+0x35/0x790
[  949.407921][T10631]  ? kmsan_get_metadata+0xfb/0x160
[  949.413571][T10631]  ? kmsan_get_metadata+0xfb/0x160
[  949.419231][T10631]  ? kmsan_get_metadata+0xfb/0x160
[  949.424676][T10631]  vfs_write+0xbe2/0x15d0
[  949.429814][T10631]  ? __pfx_ext4_file_write_iter+0x10/0x10
[  949.436301][T10631]  __x64_sys_pwrite64+0x2ab/0x3b0
[  949.441743][T10631]  x64_sys_call+0xbaf/0x3e70
[  949.447343][T10631]  do_syscall_64+0xd3/0xf80
[  949.452859][T10631]  ? clear_bhb_loop+0x40/0x90
[  949.458056][T10631]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  949.464739][T10631] RIP: 0033:0x7efd0878f749
[  949.469692][T10631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  949.493014][T10631] RSP: 002b:00007efd069f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012
[  949.503680][T10631] RAX: ffffffffffffffda RBX: 00007efd089e6180 RCX: 00007efd0878f749
[  949.512467][T10631] RDX: 000000000000fdef RSI: 0000200000000140 RDI: 0000000000000005
[  949.523467][T10631] RBP: 00007efd08813f91 R08: 0000000000000000 R09: 0000000000000000
[  949.534338][T10631] R10: 0000000000000e7c R11: 0000000000000246 R12: 0000000000000000
[  949.542656][T10631] R13: 00007efd089e6218 R14: 00007efd089e6180 R15: 00007ffdd83dad48
[  949.552115][T10631]  </TASK>
[  949.555969][T10631] Kernel Offset: disabled
[  949.560929][T10631] Rebooting in 86400 seconds..