last executing test programs:

37m2.799004572s ago: executing program 32 (id=110):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x88580, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$FS_IOC_FSGETXATTR(r1, 0x400455cb, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYRESOCT=0x0], 0x0, 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
syz_clone(0x800c000, &(0x7f0000001480)="627807434619734911420e123cb6f44fb54d82f86f3720b1d5ecd9651a9fcb2a1c358b9cd99a9da0b00953486764e0c7d13faa0d43ad3164e14aa9d4eafc2ae39ce2be18d63433b7dfc78608200e69639a", 0x51, 0x0, 0x0, 0x0)
r3 = getpid()
bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[], 0x50)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$inet(0x2, 0x2, 0x1)
connect$inet(r6, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r6, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000440)}}], 0x2, 0x4000)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000200700000000000000f4000000"])
r7 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)

36m47.169547154s ago: executing program 33 (id=133):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x400455cb, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYRESOCT=0x0], 0x0, 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
syz_clone(0x800c000, &(0x7f0000001480)="627807434619734911420e123cb6f44fb54d82f86f3720b1d5ecd9651a9fcb2a1c358b9cd99a9da0b00953486764e0c7d13faa0d43ad3164e14aa9d4eafc2ae39ce2be18d63433b7dfc78608200e69639a", 0x51, 0x0, 0x0, 0x0)
r2 = getpid()
bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[], 0x50)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$inet(0x2, 0x2, 0x1)
connect$inet(r5, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r5, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000440)}}], 0x2, 0x4000)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000200700000000000000f4000000"])
r6 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sched_setscheduler(0x0, 0x1, 0x0)

33m22.710475046s ago: executing program 34 (id=434):
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x18)
r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x6)
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0x30, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040), 0x4)
close_range(r4, 0xffffffffffffffff, 0x0)
lseek(r3, 0xc6c3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x7, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)

20m40.592044076s ago: executing program 5 (id=1998):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETSF(r0, 0x5404, 0x0)

20m40.340602715s ago: executing program 5 (id=2002):
r0 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xd1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x4, 0x80, 0x4, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x7, {0x9, 0x21, 0x4, 0x9, 0x1, {0x22, 0x369}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x1, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x10, 0x1, 0x77}}]}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x0, 0x7f, 0xb, 0x7, 0x40, 0x7}, 0xae, &(0x7f0000000180)=ANY=[@ANYBLOB="050fae000318100a08830000000f0f02000000ff003f3f0000f000000086100bd945ba82844cdc1725fe99e622908e124a00d31161d9dc3db4e74667a56765ccd67926a9bbd395823ffa3cbd5114912681e8afc0bc5772a82fd1df67ccc0537cea09a73529eefcf53ff30939edc2d30ed3430efdf24c56ae9099b95a6f64291f31c8b7b5d523267fbe917adc72f6edb945c3618967ac058ad717099b38760a8452c1a80b10010c420008020f00ab"], 0x2, [{0x102, &(0x7f0000000380)=@string={0x102, 0x3, "7e98915cd4536ab8a91d87d646980754f66edfda0074999d8f8382162ffcda897a97d204a3ed40792e1d6391ad262c35f3c2e849278bbff17a9e2bde92cf31bfd69bb164988e01000100000000005e280dcbe5df8f5975ca0ad20e76a54493ad0a6c0a806ae8e285a048f6713658e5ebe44a34865b0542c6bd9d7f25da6f7859cf808567f7c6a952f54841c4ec468db5c804b9c22ec748b24e61682ba12f320630b284d496a0ed2b1326831e839c01ae331b80d4a739cd479693e82f6c579fff19871f9497952748829b2433062851a58aad3800e5ab6afd67345ff12e14def00d9b178996e097ceafafc05e72abc0ce9731e80106bca5ff0e41593e0bfdf73f"}}, {0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="2a03936456752308385cca02f9c04603ce73fc7251043e7be1d3919006162f6991"]}]})
syz_usb_disconnect(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x100000000)
mount(&(0x7f00000002c0)=@nullb, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r3 = open(&(0x7f00000005c0)='./bus\x00', 0x145842, 0x0)
pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x100000}], 0x2, 0x0, 0x0, 0xb)

20m35.013469879s ago: executing program 5 (id=2013):
socket(0x18, 0x2, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
ioprio_set$pid(0x2, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)
sendmsg$IPSET_CMD_SAVE(r2, 0x0, 0x4000050)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15)

20m34.555852006s ago: executing program 5 (id=2014):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
lgetxattr(0x0, &(0x7f00000003c0)=ANY=[], 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)={0x80, 0x9, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x5}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xc}]}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x3ff}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x4}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x73}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xfffffffffffffc01}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x10}]}, @IPSET_ATTR_ADT={0x4}]}, 0x80}}, 0x40010)
socket$pppl2tp(0x18, 0x1, 0x1)
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r5, 0x0, 0x0, 0xc840, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = syz_open_dev$cec(&(0x7f00000004c0), 0x0, 0x80100)
ioctl$IOC_PR_PREEMPT(r7, 0x40046109, &(0x7f0000000040)={0xf0, 0x40000})
ioctl$CEC_DQEVENT(r7, 0x40046109, &(0x7f0000000340))
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)

20m33.144448143s ago: executing program 5 (id=2018):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2)
r1 = io_uring_setup(0x2282, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x20000003})
dup3(r0, r1, 0x0)
pipe2(&(0x7f0000000000)={<r2=>0xffffffffffffffff}, 0x0)
r3 = memfd_create(0x0, 0x3)
splice(r2, 0x0, r3, 0x0, 0x200002, 0x800000000000000)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r5 = openat$cgroup_devices(r4, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @empty}, 0x1c)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
r12 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
r13 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42)
ioctl$LOOP_CONFIGURE(r13, 0x4c0a, &(0x7f0000001ac0)={r12, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r13, 0x3000)
ioctl$KVM_RUN(r11, 0xae80, 0x0)
write$cgroup_devices(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB="62202a3a2a2072008467ef5048c25ab2ce056c8f1747f6f60d5f42b255aa86024a159e9f3476eadbfa5f940ae51f55385a786df80446f461c1f470b6b80b7427a323d52ded095d5e9d9b71a51b32edc00b9e739f347e74544cd5b269e4cffd2400000000000000bb005dfb54157932067b32a2"], 0x8)

20m17.501612672s ago: executing program 35 (id=2018):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2)
r1 = io_uring_setup(0x2282, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x20000003})
dup3(r0, r1, 0x0)
pipe2(&(0x7f0000000000)={<r2=>0xffffffffffffffff}, 0x0)
r3 = memfd_create(0x0, 0x3)
splice(r2, 0x0, r3, 0x0, 0x200002, 0x800000000000000)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r5 = openat$cgroup_devices(r4, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @empty}, 0x1c)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
r12 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
r13 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42)
ioctl$LOOP_CONFIGURE(r13, 0x4c0a, &(0x7f0000001ac0)={r12, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r13, 0x3000)
ioctl$KVM_RUN(r11, 0xae80, 0x0)
write$cgroup_devices(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB="62202a3a2a2072008467ef5048c25ab2ce056c8f1747f6f60d5f42b255aa86024a159e9f3476eadbfa5f940ae51f55385a786df80446f461c1f470b6b80b7427a323d52ded095d5e9d9b71a51b32edc00b9e739f347e74544cd5b269e4cffd2400000000000000bb005dfb54157932067b32a2"], 0x8)

19m5.849851343s ago: executing program 36 (id=2177):
bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58)
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004005}, 0x80)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$bt_hci(r4, &(0x7f0000000000)={0x27}, 0x62)

17m34.034797299s ago: executing program 37 (id=2422):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x800, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r2, 0x6, 0x28, 0x0, &(0x7f0000000080))
wait4(0xffffffffffffffff, 0x0, 0x80000000, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x4000099}, 0x20044094)

15m24.618400875s ago: executing program 38 (id=2756):
mq_open(0x0, 0x42, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x7fffffffffe)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x40001000, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
fsopen(&(0x7f00000003c0)='bpf\x00', 0x0)
setresuid(0x0, 0xee00, 0xee00)
socket$inet_tcp(0x2, 0x1, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'})
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24)
listen(0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x40000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000640)=r2, 0x4)
sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)
r5 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
getgroups(0x1, &(0x7f0000001080)=[<r6=>0xffffffffffffffff])
r7 = geteuid()
r8 = add_key$user(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x3}, &(0x7f0000000440)="b50be28a9b32334b9b44804847b6fb9b9477f97c4d3cbd598e7ccf13c84fa87bec", 0x21, r5)
keyctl$chown(0x4, r8, r7, r6)
setgroups(0x0, 0x0)
keyctl$get_security(0x11, r5, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

9m52.242879786s ago: executing program 39 (id=4550):
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x22000, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
iopl(0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_int(r2, 0x6, 0x5, 0x0, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x6, &(0x7f0000000200)=0xb)
fcntl$getflags(0xffffffffffffffff, 0x401)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000001800)={0x0, 0x0, 0x0}, 0x0)
r5 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2)
r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_MP_STATE(r6, 0x4004ae99, &(0x7f00000001c0)=0x3)
syz_kvm_setup_cpu$x86(r1, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x4e, 0x0, 0x0)
ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000440)={"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"})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
syz_open_dev$vim2m(&(0x7f0000000000), 0x205, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000080)={0xd, 0x1, 0x1, "933d70dde5dbbbe40f00fcfbbae6c90000000500000100", 0x43564548})

9m36.489534978s ago: executing program 40 (id=4621):
rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8)
ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)={{0x14}, [@NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x54}}, 0x0)
r1 = dup(0xffffffffffffffff)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0xe501, 0x3, 0x208, 0x0, 0xa, 0x1000000, 0xb8, 0x0, 0x170, 0x230, 0x230, 0x170, 0x223, 0x3, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x22}, @empty, 0xffffff00, 0xffffff00, 'veth0_to_hsr\x00', 'batadv0\x00', {0xff}, {0xff}, 0x6c, 0x1, 0x41}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8, 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x20c499, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x8a3, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0)
ioctl$FS_IOC_SETFLAGS(r2, 0x40186f40, &(0x7f0000000440)=0x1f)

8m28.254003195s ago: executing program 1 (id=4843):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x200000000000011, 0x2, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00'})
sendmsg$nl_route(r0, 0x0, 0x0)

8m28.042277996s ago: executing program 1 (id=4844):
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
pread64(r1, &(0x7f0000000300)=""/150, 0x96, 0x0)

8m27.1441452s ago: executing program 1 (id=4845):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000140)={0x2c, r3, 0x1, 0x800, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2ba}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x2c}}, 0x0)
socket(0x40000000015, 0x5, 0x0)
r4 = socket(0x11, 0x1, 0xfffffff9)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000280)={<r5=>0x0, @in={{0x2, 0x4e22, @remote}}}, &(0x7f0000000340)=0x84)
r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f00000000c0), 0xff, r6}, 0x38)
r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r7}, 0x10)
r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @random="a21428c6c085", @void, {@ipv6={0x86dd, @generic={0x1, 0x6, "bcc1d7", 0x0, 0x6c, 0xff, @loopback, @empty}}}}, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002fc0)=[{{&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0}}, {{&(0x7f0000001340)={0x2, 0x0, @local}, 0x10, 0x0}}], 0x2, 0xc800)
sendmmsg$inet(r8, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000380)={r5, 0x6, 0x20}, &(0x7f00000003c0)=0xc)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b4080000000000006110a1000000000006000000000000009500000000000000f7c9bf0ce485b209cd362f63521dd82f3e1c68243ca6bee2b4e1bde12f7ba556dfaf9c42ce88699506f500ff696bb2a85a56a9ee4acdc72b1cabc83d09ba610f281689f9f1651bdbc35f44d9c37637ce32844885a55572cc90cf36f7fb9bdd6d67069256bd0b746be1ff9f634c66392322e4ce6791442856fcef9661dfab4cb9f021599d70db40b67b5231ad09ad6660869dbbaf78ef7ab304761dcb"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000000000000000000250000000e0001"], 0x3c}}, 0x0)

8m23.547774344s ago: executing program 1 (id=4849):
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x9c}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB="0c009900020000000300000008005d"], 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x40854)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x40001, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030000080000000000000000000000020001000000000010000007000000000200010000008a8c9e81bc"], 0x30}}, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)={0x40000004})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

8m22.611967523s ago: executing program 1 (id=4853):
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
pread64(r1, &(0x7f0000000300)=""/150, 0x96, 0x0)

8m21.494861502s ago: executing program 1 (id=4855):
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
socket(0x10, 0x803, 0x0)
r1 = socket(0x400000000010, 0x3, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_DPORT={0x6, 0x1d, 0xfffe}]}, 0x24}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c40)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_CARRIER={0x5, 0x21, 0x57}]}, 0x28}}, 0x0)
syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0)
ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0xc0109207, 0x0)

8m5.515258854s ago: executing program 41 (id=4855):
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
socket(0x10, 0x803, 0x0)
r1 = socket(0x400000000010, 0x3, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_DPORT={0x6, 0x1d, 0xfffe}]}, 0x24}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c40)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_CARRIER={0x5, 0x21, 0x57}]}, 0x28}}, 0x0)
syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0)
ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0xc0109207, 0x0)

7m53.914821664s ago: executing program 5 (id=4666):
syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301)
memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x1)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000003c0)=@nat={'nat\x00', 0x670, 0x5, 0x328, 0xa8, 0x1c0, 0xfeffffff, 0xa8, 0xa8, 0x310, 0x310, 0xffffffff, 0x310, 0x310, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x6800, {0x0, @multicast2, @rand_addr, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @local}}}}, {{@ip={@multicast2, @multicast2, 0x0, 0x0, 'veth1_virt_wifi\x00', 'pim6reg0\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @port, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x388)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001e40)={r4, &(0x7f00000002c0)='l~', 0x0}, 0x20)

7m38.327763244s ago: executing program 42 (id=4666):
syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301)
memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x1)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000003c0)=@nat={'nat\x00', 0x670, 0x5, 0x328, 0xa8, 0x1c0, 0xfeffffff, 0xa8, 0xa8, 0x310, 0x310, 0xffffffff, 0x310, 0x310, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x6800, {0x0, @multicast2, @rand_addr, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @local}}}}, {{@ip={@multicast2, @multicast2, 0x0, 0x0, 'veth1_virt_wifi\x00', 'pim6reg0\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @port, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x388)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001e40)={r4, &(0x7f00000002c0)='l~', 0x0}, 0x20)

7m23.616169486s ago: executing program 2 (id=4999):
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newlink={0x50, 0x10, 0x421, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x60e1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x50}}, 0x2)

7m23.364562865s ago: executing program 2 (id=5000):
r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000000180)={[{@clear_cache}, {@user_subvol_rm}, {@compress_force_algo={'compress-force', 0x3d, 'zlib'}}, {@noautodefrag}, {@autodefrag}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x7, 0x32, 0x37, 0x2d, 0x32, 0x36, 0x32, 0x2d, 0x2d, 0x37]}}, {@space_cache}]}, 0x0, 0x559e, &(0x7f00000103c0)="$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")
open_by_handle_at(r0, &(0x7f0000000200)=ANY=[], 0x28cbc1)

7m17.795479776s ago: executing program 2 (id=5012):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
r1 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f0000000900)={[{@data_err_abort}, {@bh}, {@noquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@noinit_itable}, {@noblock_validity}, {@jqfmt_vfsv1}, {@debug}]}, 0xfb, 0x476, &(0x7f0000000d40)="$eJzs3D9sG9UfAPDvXZz29+u/hFL+tBQIFETFn6RNC3RgACQkhiIhwVBGk6ZVqdugJki0imiKqrIgQSV2hMSCxMzAxISACYmFAXZUqUJZKExGZ5+Nk9iJkzi1U38+0sXv2c9+73u+d/fuXs4B9K2R7E8SsSMifouIoYhIFxcYqT7cmp+d+Ht+diKJcvmNP5PsbfHX/OxErWiSP26vZgrZQ3o1iReb1Dt98dLZYqk0eSHPj82ce3ds+uKlZ86cK56ePD15fvzYsaNHDj//3PizHYnzrqyt+z6Y2r/31beuvzZx4vrbP36dNDS6MY7OGIy5hnWy2OOdrazrdjakk8KyRdMNbwxt2xpR6aiDlf4/FANXd9VfG4pXPuxq44ANVS6Xy+OtX54rA3ewJLrdAqA7agf67Py3ttymoUdPuPlS9QQoi/tWvlRfKdRPVAcXnd920mxEnJj75/NsiQ25DgEAsNB32fjn6WbjvzTubSi3K58bGs7nUnZHxN0RsSci7omolL0vIu5fZf0ji/JLxz/pjcbc8Co/fyXZ+O+FfG5r4fivPk0xPJDndlbqH0xOnSlNHsrXycEY3JrlDzf99CQqk0Dxyyet6h9pGP9lS1Z/bSyYt+NGYevC95wszhTXHXju5pVC7Cs0iz+fwMvnsPZGxL411nHmya/2L3xmoJ5aOf5lLD/P1JbyFxFPVL//uVgUf02y/Pzk2P+iNHlorLZVLPXTz9deb1X/uuLvgJtXIrY13f7r8Q8njfO100s+YstKdVz7/aOW5zRr3f63JG8uqPz94szMhcMRW5LjS59vuMBdy9fKZ/EfPNC8/++O/9bEAxGRbcQPRsRDEfFw3vZHIuLRiDiwTPw/vPzYO2uPf2Nl8R9f1fe/+sTA2e+/bVV/e9//0UrqYP5MO/u/dhu4nnUHAAAAm0UaETsiSUfr6TQdHa3+D/+e2JaWpqZnnjo19d75k9V7BIZjMK1d6RrK85Ff/xxuuD46Xpk1j7ic54/k140/G/h/JT86MVU62e3goc9tb9H/M38MdLt1wIbrwDwasEnp/9C/1t7/7Tlgs1uhF/vBBriDOYpD/2rW/y93oR3A7ef4D/2r3v8/baNww+1ei2/eBDYfx3/oX/o/9KX13NffE4n4MmL5MkmvNHVViY97oxmtE5H2RDPWnCj2RjNWkSi0/asWF8uXi6XSr9+sp9Ju75kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6498AAAD//3Kx50g=")
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
connect$unix(r5, &(0x7f0000000500)=@abs={0x1, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100))
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340))

7m15.625305394s ago: executing program 2 (id=5019):
syz_open_dev$usbfs(0x0, 0x77, 0x141341)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000005c0)={[{@utf8no}, {@rodir}, {@fat=@nfs}, {@fat=@check_strict}, {@fat=@codepage={'codepage', 0x3d, '869'}}, {@numtail}, {@uni_xlate}, {@uni_xlate}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}, {@shortname_lower}, {@uni_xlateno}, {@utf8no}, {@uni_xlate}]}, 0x26, 0x336, &(0x7f00000001c0)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)

7m12.106039173s ago: executing program 2 (id=5026):
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x9, 0x5, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000008000000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000fbffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

7m10.92878906s ago: executing program 2 (id=5029):
socket$nl_generic(0x10, 0x3, 0x10)
io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)
syz_clone(0x4a980080, 0x0, 0x0, 0x0, 0x0, 0x0)

6m55.61827082s ago: executing program 43 (id=5029):
socket$nl_generic(0x10, 0x3, 0x10)
io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)
syz_clone(0x4a980080, 0x0, 0x0, 0x0, 0x0, 0x0)

5m44.947615244s ago: executing program 6 (id=5212):
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mkdir(&(0x7f00000008c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000280)='./bus\x00', 0x0, 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
getdents64(r0, 0x0, 0x0)
r1 = open(&(0x7f00000000c0)='.\x00', 0x50080, 0x0)
getdents(r1, &(0x7f0000001fc0)=""/184, 0x20002078)

5m44.106685164s ago: executing program 6 (id=5215):
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080), 0x4)
socket$rxrpc(0x21, 0x2, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000580)={0x28, 0x0, 0x2710}, 0x10)
accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2711, @host}, 0x10, 0x80000)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0, r3}, 0x18)
ppoll(&(0x7f0000000040)=[{r2}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x6, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

5m43.174147417s ago: executing program 6 (id=5216):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d850000000700000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000cc0)=@raw={'raw\x00', 0x8, 0x3, 0x368, 0x0, 0x43, 0xa0, 0x0, 0x98, 0x2d0, 0x178, 0x178, 0x2d0, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00', {0xff}, {}, 0x9}, 0x12a, 0x1a0, 0x1c0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x4, 0x0, 'syz0\x00'}}, @common=@unspec=@connbytes={{0x38}, {[{}, {0xe}]}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe0, 0x110, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x2, 0x0, 0x1ff}}, @common=@unspec=@connlimit={{0x40}, {[0xffffff00, 0xff, 0xffffff00, 0xff000000], 0x3, 0x1, {0x4413}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x5}, {0x1, 0x4, 0x5}, 0xb}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3c8)

5m43.121024485s ago: executing program 6 (id=5217):
syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="696f636861727365743d64656661756c742c0099f5d7f5e667601820a20492cf0082b38a04dda1d1835d80c76a090dccd479f8"], 0x1, 0x14d1, &(0x7f0000002ac0)="$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")
socket$key(0xf, 0x3, 0x2)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc)
syz_open_dev$tty20(0xc, 0x4, 0x1)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x814}, 0x800)
r6 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000180)='asymmetric\x00', &(0x7f00000000c0))
add_key$user(0x0, &(0x7f00000004c0)={'syz', 0x0}, &(0x7f0000000980)="ca", 0x1, r6)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan0\x00', 0x0})
add_key(&(0x7f0000000440)='dns_resolver\x00', 0x0, &(0x7f00000004c0), 0x0, 0xffffffffffffffff)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003700)={0x77359400})
stat(&(0x7f0000000040)='./file1\x00', &(0x7f0000000e40))

5m38.938075848s ago: executing program 6 (id=5220):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000006d00000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x19a, @void, @value}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r1}, 0x10)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8)
close(r3)
socket$inet_sctp(0x2, 0x1, 0x84)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)

5m38.832326873s ago: executing program 6 (id=5221):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_xfrm(0x10, 0x3, 0x6)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket$inet6(0xa, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r1, @ANYRES64=0x0, @ANYRESHEX=r1], 0x20)

5m23.205458895s ago: executing program 44 (id=5221):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_xfrm(0x10, 0x3, 0x6)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket$inet6(0xa, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r1, @ANYRES64=0x0, @ANYRESHEX=r1], 0x20)

1m58.477507928s ago: executing program 9 (id=5721):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x5, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)={0x60, 0x10, 0x4, "e34207b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000007c0)={0x44, &(0x7f0000000540)={0x40, 0x13, 0x5, "955d92ce33"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000200)={0x40, 0xa, 0x4, "4a20c13f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1m53.604394516s ago: executing program 9 (id=5733):
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r0 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
io_destroy(0x0)
lsetxattr$system_posix_acl(0x0, &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="02"], 0x24, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'macvlan0\x00'})
socket$kcm(0x10, 0x400000002, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)

1m48.508993365s ago: executing program 9 (id=5747):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$packet(0x11, 0x3, 0x300)
syz_80211_inject_frame(0x0, 0x0, 0xb5)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), 0xffffffffffffffff)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000001c0)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getresuid(&(0x7f0000000240), 0x0, 0x0)
arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1021, 0x400000000000f)

1m42.801902918s ago: executing program 9 (id=5760):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
getcwd(&(0x7f0000000000)=""/176, 0xb0)

1m42.433056691s ago: executing program 9 (id=5761):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4004880)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0)

1m38.3532123s ago: executing program 9 (id=5774):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10)
recvmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/80, 0x50}], 0x1}, 0x5}], 0x40000, 0x0, 0x0)
shutdown(r1, 0x0)

1m22.853683393s ago: executing program 45 (id=5774):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10)
recvmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/80, 0x50}], 0x1}, 0x5}], 0x40000, 0x0, 0x0)
shutdown(r1, 0x0)

13.156169234s ago: executing program 4 (id=6085):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4004880)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, r4, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x30}}, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)

12.020021026s ago: executing program 4 (id=6089):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x4000084)
connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @empty, 0xffff8b97}, 0x1c)
syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_vs_stats\x00')
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x38fe, &(0x7f0000000300)={0x0, 0x1fffff, 0x10100, 0x0, 0x16e}, &(0x7f0000000180)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0})
io_uring_enter(r2, 0x2def, 0x4000, 0x0, 0x0, 0x0)
r5 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2)
fcntl$setlease(r5, 0x400, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x857)
truncate(&(0x7f0000000040)='./file0\x00', 0x0)

10.642246037s ago: executing program 4 (id=6095):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000040)={0x1856, 0xfffffffb, 0x0, 0x7, 0x40, "0e80706e6c06a79874342a0c0d13343972d01f"})
write$UHID_INPUT(r1, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7)

9.102870219s ago: executing program 4 (id=6101):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r5 = accept4(r0, 0x0, 0x0, 0x0)
recvmsg$can_j1939(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000500)}, 0x100)

9.02640043s ago: executing program 0 (id=6102):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1})
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)=ANY=[@ANYRES8=r1])

7.953486588s ago: executing program 4 (id=6103):
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl(0xffffffffffffffff, 0x8b2a, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, 0x0, 0x0)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r4, &(0x7f0000000000), 0x10)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4)
readv(r4, &(0x7f0000000200)=[{&(0x7f0000000300)=""/136, 0x88}], 0x1)
sendmsg$can_bcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64=0x0, @ANYRES64=0x2710], 0x80}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b"], 0x28}}, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz1\x00', 0x200002, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x54, r7, 0x1, 0x70bd27, 0x4, {0x5}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'vxcan1\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x7ff}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}]}, 0x54}}, 0x0)
ppoll(&(0x7f00000003c0)=[{r4, 0x80a0}, {r1, 0x80}, {r6, 0x2180}, {r2, 0x2}, {r5, 0x2390}, {r4, 0x9008}, {r1, 0x2610}, {r1, 0x408a}], 0x8, &(0x7f0000000440), &(0x7f0000000480)={[0x8]}, 0x8)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="010000000000000008001b0000000000"], 0x28}}, 0x0)
socket$inet6(0xa, 0x800000000000002, 0x0)

7.908148497s ago: executing program 0 (id=6104):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f0000000900)={[{@data_err_abort}, {@bh}, {@noquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@noinit_itable}, {@noblock_validity}, {@jqfmt_vfsv1}, {@debug}]}, 0xfb, 0x476, &(0x7f0000000d40)="$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")
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc1801000020"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000240)=0x4878, 0x4)
connect$unix(r4, &(0x7f0000000500)=@abs={0x1, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100))
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340))

7.794270941s ago: executing program 7 (id=6107):
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket(0x1d, 0x2, 0x6)
open(0x0, 0x143042, 0xfe)
ftruncate(0xffffffffffffffff, 0x6)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, 0x0, 0x0)
write$binfmt_misc(r3, &(0x7f0000000100), 0xfdef)

6.611786074s ago: executing program 0 (id=6109):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$packet(0x11, 0x3, 0x300)
syz_80211_inject_frame(0x0, 0x0, 0xb5)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), 0xffffffffffffffff)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000001c0)=0x2)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
getresuid(&(0x7f0000000240), 0x0, 0x0)
arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1021, 0x400000000000f)

5.664071318s ago: executing program 8 (id=6112):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = getpid()
process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000006180)=""/152, 0x98}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0})
write(r1, &(0x7f0000000000)="fa", 0xfffffdef)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

5.518172024s ago: executing program 3 (id=6113):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r5 = accept4(r0, 0x0, 0x0, 0x0)
recvmsg$can_j1939(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000500)}, 0x100)

4.436794354s ago: executing program 8 (id=6114):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x2040)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000440)={{0x2, 0x2, 0x3, 0x0, 0x4}})
read(r0, 0x0, 0x0)

4.394181351s ago: executing program 3 (id=6115):
io_setup(0x40, &(0x7f0000000040))
io_setup(0xcbf, &(0x7f0000000100))
io_setup(0x4, &(0x7f0000000740))

4.251317266s ago: executing program 0 (id=6116):
r0 = socket(0x10, 0x3, 0x0)
write(r0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
getpid()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10)
r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000083c0)={{0xffffffffffffffff, 0x0, 0x0, 0x3, 0x1}})

4.062265352s ago: executing program 3 (id=6117):
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c)
listen(r0, 0x80080400)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r1, 0x0, 0x0)
getsockopt$inet_int(r1, 0x10d, 0xf0, &(0x7f0000000000), &(0x7f0000000280)=0x4)

4.061899575s ago: executing program 8 (id=6118):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x5f, 0x2a, 0xb4, 0x20, 0xc72, 0xd, 0x279b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdb, 0xa2, 0x92}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000500)=ANY=[], 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000100)={0x20, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

3.909333402s ago: executing program 3 (id=6119):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f0000000900)={[{@data_err_abort}, {@bh}, {@noquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@noinit_itable}, {@noblock_validity}, {@jqfmt_vfsv1}, {@debug}]}, 0xfb, 0x476, &(0x7f0000000d40)="$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")
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc1801000020"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000240)=0x4878, 0x4)
connect$unix(r4, &(0x7f0000000500)=@abs={0x1, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100))
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340))

3.638309539s ago: executing program 7 (id=6120):
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040f04000006"], 0x7)

3.490239987s ago: executing program 7 (id=6121):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0)

3.354591761s ago: executing program 7 (id=6122):
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
socket(0x10, 0x803, 0x0)
r0 = socket(0x400000000010, 0x3, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_DPORT={0x6, 0x1d, 0xfffe}]}, 0x24}}, 0x0)
syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0)

2.768220861s ago: executing program 4 (id=6123):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x235, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x1, 0x0, 0x0, r1}, 0x0, &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0)
syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0)
mmap(&(0x7f000003b000/0xf000)=nil, 0xf000, 0x1000006, 0x38011, r4, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9)

2.337083505s ago: executing program 3 (id=6124):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x28, 0x2, 0x0, 0xfffff034}, {0x6, 0x0, 0x0, 0x6}]}, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)

2.144500498s ago: executing program 7 (id=6125):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r5 = accept4(r0, 0x0, 0x0, 0x0)
recvmsg$can_j1939(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000500)}, 0x100)

1.064528993s ago: executing program 7 (id=6126):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$packet(0x11, 0x3, 0x300)
syz_80211_inject_frame(0x0, 0x0, 0xb5)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), 0xffffffffffffffff)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000001c0)=0x2)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
getresuid(&(0x7f0000000240), 0x0, 0x0)
arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1021, 0x400000000000f)

802.233308ms ago: executing program 3 (id=6127):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB='1\a\x00\x00\x00\x00\x00\x00\x00\x008\x00'], 0x3c}, 0x1, 0x2}, 0x0)

453.13037ms ago: executing program 8 (id=6128):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5", 0x5}], 0x1}, 0x0)
ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000000))

320.013141ms ago: executing program 0 (id=6129):
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c)
listen(r0, 0x80080400)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r1, 0x0, 0x0)
getsockopt$inet_int(r1, 0x10d, 0xf0, &(0x7f0000000000), &(0x7f0000000280)=0x4)

133.787007ms ago: executing program 0 (id=6130):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/35, @ANYRES32=0x41424344], 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

133.450291ms ago: executing program 8 (id=6131):
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040f04000006"], 0x7)

0s ago: executing program 8 (id=6132):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x0)

kernel console output (not intermixed with test programs):

 ioctl, please convert it to SG_IO
[ 2070.404332][T25940] team0: Port device team_slave_1 added
[ 2070.786913][T25873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2070.798175][T25940] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2070.810857][T25940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2070.848796][T25940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2070.879594][T25873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2070.939158][T25940] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2070.954749][T25940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2071.003702][T25940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2071.225666][T25873] team0: Port device team_slave_0 added
[ 2071.291997][T25940] hsr_slave_0: entered promiscuous mode
[ 2071.298857][T25940] hsr_slave_1: entered promiscuous mode
[ 2071.321906][T25940] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2071.329481][T25940] Cannot create hsr debugfs directory
[ 2071.417997][T25873] team0: Port device team_slave_1 added
[ 2073.214137][T26050] loop7: detected capacity change from 0 to 2048
[ 2073.276461][T26050]  loop7: p1 < > p3
[ 2073.284742][T26050] loop7: p3 size 134217728 extends beyond EOD, truncated
[ 2073.821824][T25873] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2073.828820][T25873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2073.890818][T25873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2074.016973][T26057] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5268'.
[ 2074.239091][T25873] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2074.254259][T25873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2074.311475][T25873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2075.018556][T26062] netlink: 44 bytes leftover after parsing attributes in process `syz.7.5270'.
[ 2075.775416][   T29] audit: type=1326 audit(1740056841.783:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26065 comm="syz.8.5271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd95d8cde9 code=0x7ffc0000
[ 2075.804306][T26062] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2076.312730][   T29] audit: type=1326 audit(1740056841.783:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26065 comm="syz.8.5271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd95d8cde9 code=0x7ffc0000
[ 2076.336653][T26062] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 2076.375985][   T29] audit: type=1326 audit(1740056841.783:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26065 comm="syz.8.5271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdd95d8cde9 code=0x7ffc0000
[ 2076.378353][T25873] hsr_slave_0: entered promiscuous mode
[ 2076.406741][   T29] audit: type=1326 audit(1740056841.793:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26065 comm="syz.8.5271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd95d8cde9 code=0x7ffc0000
[ 2076.452432][T25873] hsr_slave_1: entered promiscuous mode
[ 2076.459036][T25873] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2076.467558][   T29] audit: type=1326 audit(1740056841.793:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26065 comm="syz.8.5271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd95d8cde9 code=0x7ffc0000
[ 2076.491791][   T29] audit: type=1326 audit(1740056841.803:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26065 comm="syz.8.5271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7fdd95d8cde9 code=0x7ffc0000
[ 2076.494448][T25873] Cannot create hsr debugfs directory
[ 2076.518293][   T29] audit: type=1326 audit(1740056841.803:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26065 comm="syz.8.5271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd95d8cde9 code=0x7ffc0000
[ 2076.545428][   T29] audit: type=1326 audit(1740056841.803:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26065 comm="syz.8.5271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd95d8cde9 code=0x7ffc0000
[ 2076.569214][   T29] audit: type=1326 audit(1740056841.803:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26065 comm="syz.8.5271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdd95d8cde9 code=0x7ffc0000
[ 2076.592926][   T29] audit: type=1326 audit(1740056841.803:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26065 comm="syz.8.5271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd95d8cde9 code=0x7ffc0000
[ 2076.652863][T26068] dvmrp0: entered allmulticast mode
[ 2077.195088][T25733] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 2077.298099][T25733] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 2077.342747][T25733] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 2077.506565][ T5929] bridge_slave_1: left allmulticast mode
[ 2077.520798][ T5929] bridge_slave_1: left promiscuous mode
[ 2077.538128][ T5929] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2077.564230][ T5929] bridge_slave_0: left allmulticast mode
[ 2077.576293][ T5929] bridge_slave_0: left promiscuous mode
[ 2077.591954][ T5929] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2077.617217][ T5929] batadv5: left allmulticast mode
[ 2077.623295][ T5929] batadv5: left promiscuous mode
[ 2077.629129][ T5929] bridge0: port 7(batadv5) entered disabled state
[ 2077.639127][ T5929] batadv4: left allmulticast mode
[ 2077.645883][ T5929] batadv4: left promiscuous mode
[ 2077.651291][ T5929] bridge0: port 6(batadv4) entered disabled state
[ 2077.702711][ T5929] batadv3: left allmulticast mode
[ 2077.757028][ T5929] batadv3: left promiscuous mode
[ 2077.765365][ T5929] bridge0: port 5(batadv3) entered disabled state
[ 2077.832723][ T5929] batadv2: left allmulticast mode
[ 2077.842903][ T5929] batadv2: left promiscuous mode
[ 2077.857639][ T5929] bridge0: port 4(batadv2) entered disabled state
[ 2077.927485][ T5929] batadv1: left allmulticast mode
[ 2077.933458][ T5929] batadv1: left promiscuous mode
[ 2077.948305][ T5929] bridge0: port 3(batadv1) entered disabled state
[ 2078.009272][ T5929] bridge_slave_1: left allmulticast mode
[ 2078.027798][ T5929] bridge_slave_1: left promiscuous mode
[ 2078.036270][ T5929] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2078.102689][ T5929] bridge_slave_0: left allmulticast mode
[ 2078.113667][ T5929] bridge_slave_0: left promiscuous mode
[ 2078.128528][ T5929] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2078.383208][ T5929] bridge_slave_1: left allmulticast mode
[ 2078.388914][ T5929] bridge_slave_1: left promiscuous mode
[ 2078.395373][ T5929] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2078.422918][ T5929] bridge_slave_0: left allmulticast mode
[ 2078.428614][ T5929] bridge_slave_0: left promiscuous mode
[ 2078.435212][ T5929] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2078.655727][T26081] loop7: detected capacity change from 0 to 512
[ 2078.723235][T26081] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2078.736984][T26081] ext4 filesystem being mounted at /489/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 2078.768740][ T5929] bond8 (unregistering): (slave ip6gretap1): Removing an active aggregator
[ 2078.783234][ T5929] bond8 (unregistering): (slave ip6gretap1): Releasing backup interface
[ 2078.785727][T26081] EXT4-fs error (device loop7): ext4_do_update_inode:5173: inode #2: comm syz.7.5275: corrupted inode contents
[ 2078.807559][T26081] EXT4-fs error (device loop7): ext4_dirty_inode:6061: inode #2: comm syz.7.5275: mark_inode_dirty error
[ 2078.822760][T26081] EXT4-fs error (device loop7): ext4_do_update_inode:5173: inode #2: comm syz.7.5275: corrupted inode contents
[ 2078.835277][T26081] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #2: comm syz.7.5275: mark_inode_dirty error
[ 2079.035176][T20766] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2079.189519][T26088] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5276'.
[ 2079.363418][ T5929] dvmrp0 (unregistering): left allmulticast mode
[ 2079.642132][ T5929] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2079.656047][ T5929] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2079.668243][ T5929] bond0 (unregistering): Released all slaves
[ 2079.914580][ T5929] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2079.926499][ T5929] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2079.936566][ T5929] bond0 (unregistering): Released all slaves
[ 2079.964417][ T5929] bond1 (unregistering): (slave bond2): Releasing backup interface
[ 2079.973250][ T5929] bond2 (unregistering): left promiscuous mode
[ 2079.979836][ T5929] bond1 (unregistering): Released all slaves
[ 2080.212917][ T5929] bond2 (unregistering): Released all slaves
[ 2080.461038][ T5929] bond3 (unregistering): (slave bond4): Releasing backup interface
[ 2080.470078][ T5929] bond3 (unregistering): Released all slaves
[ 2080.705026][ T5929] bond4 (unregistering): Released all slaves
[ 2080.949175][ T5929] bond5 (unregistering): (slave bond6): Releasing backup interface
[ 2080.958449][ T5929] bond5 (unregistering): Released all slaves
[ 2081.192197][ T5929] bond6 (unregistering): Released all slaves
[ 2081.215264][ T5929] bond7 (unregistering): Released all slaves
[ 2081.460452][ T5929] bond8 (unregistering): Released all slaves
[ 2081.483633][ T5929] bond9 (unregistering): (slave bond10): Releasing active interface
[ 2081.493669][ T5929] bond9 (unregistering): Released all slaves
[ 2081.736053][ T5929] bond10 (unregistering): Released all slaves
[ 2081.759814][ T5929] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2081.771296][ T5929] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2081.783832][ T5929] bond0 (unregistering): Released all slaves
[ 2081.830481][T25733] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 2082.095949][T26091] loop7: detected capacity change from 0 to 512
[ 2082.120235][T26091] EXT4-fs (loop7): orphan cleanup on readonly fs
[ 2082.134074][T26091] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.5277: bg 0: block 248: padding at end of block bitmap is not set
[ 2082.149555][T26091] __quota_error: 13 callbacks suppressed
[ 2082.149572][T26091] Quota error (device loop7): write_blk: dquota write failed
[ 2082.163309][T26091] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota
[ 2082.173333][T26091] EXT4-fs error (device loop7): ext4_acquire_dquot:6912: comm syz.7.5277: Failed to acquire dquot type 1
[ 2082.188354][T26091] EXT4-fs (loop7): 1 truncate cleaned up
[ 2082.200993][T26091] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 2082.216048][T26091] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2082.963029][ T5929] hsr_slave_0: left promiscuous mode
[ 2082.991228][ T5929] hsr_slave_1: left promiscuous mode
[ 2083.003497][ T5929] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2083.239196][ T5929] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2083.316373][ T5929] hsr_slave_0: left promiscuous mode
[ 2084.232585][ T5929] hsr_slave_1: left promiscuous mode
[ 2084.233668][ T5929] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2084.250160][ T5929] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2084.380837][ T5929] hsr_slave_0: left promiscuous mode
[ 2084.413237][ T5929] hsr_slave_1: left promiscuous mode
[ 2084.482715][ T5929] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2084.491729][T26103] program syz.7.5280 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2084.586034][ T5929] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2084.809517][T10133] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 2084.829343][T10133] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 2084.838547][T10133] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 2084.847632][T10133] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 2084.856422][T10133] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 2084.864119][T10133] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 2085.975151][T26117] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5284'.
[ 2086.060714][ T5929] team0 (unregistering): Port device team_slave_1 removed
[ 2086.119504][ T5929] team0 (unregistering): Port device team_slave_0 removed
[ 2087.053045][T10133] Bluetooth: hci1: command tx timeout
[ 2087.527269][T26128] loop8: detected capacity change from 0 to 512
[ 2087.535409][T26128] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[ 2087.602490][T26128] EXT4-fs (loop8): 1 truncate cleaned up
[ 2087.625956][T26128] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 2087.666711][   T29] audit: type=1800 audit(1740056853.703:1081): pid=26128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.5288" name="bus" dev="loop8" ino=18 res=0 errno=0
[ 2088.282844][ T5929] team0 (unregistering): Port device team_slave_1 removed
[ 2088.358699][ T5929] team0 (unregistering): Port device team_slave_0 removed
[ 2088.497462][T24660] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2089.141563][T10133] Bluetooth: hci1: command tx timeout
[ 2091.156266][ T5929] team0 (unregistering): Port device team_slave_1 removed
[ 2091.242975][T10133] Bluetooth: hci1: command tx timeout
[ 2091.570045][ T5929] team0 (unregistering): Port device team_slave_0 removed
[ 2092.928768][T26107] lo speed is unknown, defaulting to 1000
[ 2093.013544][T25940] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 2093.300918][T10133] Bluetooth: hci1: command tx timeout
[ 2093.362115][T26156] loop8: detected capacity change from 0 to 512
[ 2093.808383][T25940] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 2093.871107][ T5885] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[ 2094.072789][ T5885] usb 9-1: Using ep0 maxpacket: 8
[ 2094.095961][ T5885] usb 9-1: config 2 has an invalid interface number: 241 but max is 0
[ 2094.110878][ T5885] usb 9-1: config 2 has no interface number 0
[ 2094.240956][ T5885] usb 9-1: config 2 interface 241 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[ 2094.564864][ T5885] usb 9-1: config 2 interface 241 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[ 2094.688671][T25940] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 2094.734898][T25940] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 2094.832979][ T5885] usb 9-1: config 2 interface 241 has no altsetting 0
[ 2094.843111][ T5885] usb 9-1: New USB device found, idVendor=110a, idProduct=1130, bcdDevice=b3.a3
[ 2094.860811][ T5885] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2094.868845][ T5885] usb 9-1: Product: syz
[ 2094.899695][ T5885] usb 9-1: Manufacturer: syz
[ 2094.910260][ T5885] usb 9-1: SerialNumber: syz
[ 2094.977780][ T5885] ti_usb_3410_5052 9-1:2.241: TI USB 3410 1 port adapter converter detected
[ 2095.038189][ T5885] usb 9-1: TI USB 3410 1 port adapter converter now attached to ttyUSB0
[ 2095.283130][ T5885] usb 9-1: USB disconnect, device number 2
[ 2095.369555][ T5885] ti_usb_3410_5052_1 ttyUSB0: TI USB 3410 1 port adapter converter now disconnected from ttyUSB0
[ 2095.423505][ T5885] ti_usb_3410_5052 9-1:2.241: device disconnected
[ 2096.579350][T26107] chnl_net:caif_netlink_parms(): no params data found
[ 2097.667430][T25873] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 2097.840565][T25873] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 2097.916894][T26184] loop6: detected capacity change from 0 to 524287999
[ 2097.931273][    C0] blk_print_req_error: 4 callbacks suppressed
[ 2097.931291][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0
[ 2097.947961][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 2097.957254][    C1] buffer_io_error: 2 callbacks suppressed
[ 2097.957266][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2097.975145][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 2097.984352][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2098.036381][T25873] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 2098.104371][T25873] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 2098.217948][T25940] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2099.077812][T26107] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2099.095681][T26107] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2099.111093][T26107] bridge_slave_0: entered allmulticast mode
[ 2099.137081][T26107] bridge_slave_0: entered promiscuous mode
[ 2099.401207][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[ 2099.407501][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[ 2099.494525][T26107] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2099.638166][T26107] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2099.674629][T26107] bridge_slave_1: entered allmulticast mode
[ 2099.732735][T26107] bridge_slave_1: entered promiscuous mode
[ 2099.998528][T26107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2100.742214][T26107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2100.910145][T25940] 8021q: adding VLAN 0 to HW filter on device team0
[ 2101.024824][T26211] loop7: detected capacity change from 0 to 512
[ 2101.039755][T26211] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[ 2101.067536][T26211] EXT4-fs (loop7): 1 truncate cleaned up
[ 2101.076044][T14433] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2101.083202][T14433] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2101.113538][T26211] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 2101.163902][   T29] audit: type=1800 audit(1740056867.203:1082): pid=26211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.5310" name="bus" dev="loop7" ino=18 res=0 errno=0
[ 2101.279407][T26107] team0: Port device team_slave_0 added
[ 2101.329579][T26107] team0: Port device team_slave_1 added
[ 2101.614531][T14433] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2101.621805][T14433] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2101.655543][T26107] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2101.694268][T26107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2101.749154][T26107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2101.965727][T26107] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2101.982337][T26107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2102.014392][T20766] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2102.080846][T26107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2102.292158][ T5929] IPVS: stop unused estimator thread 0...
[ 2102.370841][T25802] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 2102.598927][T25802] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 2103.105505][T25802] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 2103.124797][T25802] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 2103.132753][T25802] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 2103.144519][T25802] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 2104.004088][T26226] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2104.307675][T26107] hsr_slave_0: entered promiscuous mode
[ 2104.329743][T26107] hsr_slave_1: entered promiscuous mode
[ 2104.338229][T26107] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2104.347406][T26107] Cannot create hsr debugfs directory
[ 2104.436948][T26221] lo speed is unknown, defaulting to 1000
[ 2104.763834][T26237] loop7: detected capacity change from 0 to 512
[ 2104.772699][T26237] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[ 2104.788572][T26237] EXT4-fs (loop7): 1 truncate cleaned up
[ 2104.796632][T26237] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 2105.960986][T25802] Bluetooth: hci0: command tx timeout
[ 2105.994824][T20766] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2106.345417][T26245] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 2106.766959][T25940] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2108.021145][T25802] Bluetooth: hci0: command tx timeout
[ 2108.781350][T26263] loop7: detected capacity change from 0 to 2048
[ 2108.919431][T26263]  loop7: p1 < > p3
[ 2108.927208][T26263] loop7: p3 size 134217728 extends beyond EOD, truncated
[ 2109.039080][T26221] chnl_net:caif_netlink_parms(): no params data found
[ 2110.235534][T25802] Bluetooth: hci0: command tx timeout
[ 2110.363588][T26266] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2111.780658][T26278] loop7: detected capacity change from 0 to 32768
[ 2111.865767][ T5929] bridge_slave_1: left allmulticast mode
[ 2111.891304][ T5929] bridge_slave_1: left promiscuous mode
[ 2111.897353][ T5929] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2111.920998][ T5929] bridge_slave_0: left allmulticast mode
[ 2111.931615][ T5929] bridge_slave_0: left promiscuous mode
[ 2111.937805][ T5929] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2111.960512][T26278] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 2111.980393][ T5929] bridge_slave_1: left allmulticast mode
[ 2111.993099][ T5929] bridge_slave_1: left promiscuous mode
[ 2112.009496][ T5929] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2112.074957][T26278] XFS (loop7): Ending clean mount
[ 2112.174293][T20766] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 2112.260953][T25802] Bluetooth: hci0: command tx timeout
[ 2112.343498][ T5929] bridge_slave_0: left allmulticast mode
[ 2112.369077][ T5929] bridge_slave_0: left promiscuous mode
[ 2112.391166][ T5929] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2114.458870][ T5929] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2114.486688][ T5929] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2114.500206][ T5929] bond0 (unregistering): Released all slaves
[ 2114.525048][ T5929] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2114.537654][ T5929] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2114.550637][ T5929] bond0 (unregistering): Released all slaves
[ 2114.862146][T26221] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2114.881697][T26221] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2115.091391][T26221] bridge_slave_0: entered allmulticast mode
[ 2115.099787][T26221] bridge_slave_0: entered promiscuous mode
[ 2115.143050][T26221] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2115.160674][T26221] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2115.181105][T26221] bridge_slave_1: entered allmulticast mode
[ 2115.189451][T26221] bridge_slave_1: entered promiscuous mode
[ 2115.227845][ T5929] hsr_slave_0: left promiscuous mode
[ 2116.031732][ T5929] hsr_slave_1: left promiscuous mode
[ 2116.044498][ T5929] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2116.081660][ T5929] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2116.149772][ T5929] hsr_slave_0: left promiscuous mode
[ 2116.180423][ T5929] hsr_slave_1: left promiscuous mode
[ 2116.200644][ T5929] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2116.247209][ T5929] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2117.131446][T26311] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2117.551204][T10133] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 2117.564670][T10133] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 2117.604487][T10133] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 2117.614441][T10133] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 2117.635472][T10133] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 2117.672534][T10133] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 2118.408914][ T5929] team0 (unregistering): Port device team_slave_1 removed
[ 2118.487520][ T5929] team0 (unregistering): Port device team_slave_0 removed
[ 2119.253567][ T5929] team0 (unregistering): Port device team_slave_1 removed
[ 2119.499876][ T5929] team0 (unregistering): Port device team_slave_0 removed
[ 2119.593526][T26330] loop7: detected capacity change from 0 to 512
[ 2119.789967][T25802] Bluetooth: hci3: command tx timeout
[ 2119.801416][T26330] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2119.814280][T26330] ext4 filesystem being mounted at /527/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 2119.845369][   T29] audit: type=1326 audit(1740056885.883:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26327 comm="syz.7.5335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f348098cde9 code=0x7ffc0000
[ 2119.908495][T26330] EXT4-fs error (device loop7): ext4_do_update_inode:5173: inode #2: comm syz.7.5335: corrupted inode contents
[ 2119.925738][   T29] audit: type=1326 audit(1740056885.913:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26327 comm="syz.7.5335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f348098cde9 code=0x7ffc0000
[ 2119.959880][T26330] EXT4-fs error (device loop7): ext4_dirty_inode:6061: inode #2: comm syz.7.5335: mark_inode_dirty error
[ 2119.979336][   T29] audit: type=1326 audit(1740056885.913:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26327 comm="syz.7.5335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f348098cde9 code=0x7ffc0000
[ 2120.039109][T26330] EXT4-fs error (device loop7): ext4_do_update_inode:5173: inode #2: comm syz.7.5335: corrupted inode contents
[ 2120.053278][T26330] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #2: comm syz.7.5335: mark_inode_dirty error
[ 2120.105711][   T29] audit: type=1326 audit(1740056885.923:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26327 comm="syz.7.5335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f348098cde9 code=0x7ffc0000
[ 2120.232556][   T29] audit: type=1326 audit(1740056885.923:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26327 comm="syz.7.5335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f348098cde9 code=0x7ffc0000
[ 2120.275474][   T29] audit: type=1326 audit(1740056885.933:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26327 comm="syz.7.5335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f348098cde9 code=0x7ffc0000
[ 2120.306982][   T29] audit: type=1326 audit(1740056886.113:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26327 comm="syz.7.5335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f348098cde9 code=0x7ffc0000
[ 2120.386048][   T29] audit: type=1326 audit(1740056886.123:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26327 comm="syz.7.5335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f348098cde9 code=0x7ffc0000
[ 2121.468437][T26221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2121.484097][T20766] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2121.617771][T26345] loop7: detected capacity change from 0 to 512
[ 2121.628020][T26345] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[ 2121.667783][T26345] EXT4-fs (loop7): 1 truncate cleaned up
[ 2121.675557][T26345] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 2121.689381][T26221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2121.861150][T25802] Bluetooth: hci3: command tx timeout
[ 2121.941827][T26315] lo speed is unknown, defaulting to 1000
[ 2122.052514][T26348] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2122.069930][T26107] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 2122.164178][T26107] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 2122.694106][T26107] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 2122.715612][T26107] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 2122.805096][T26350] loop8: detected capacity change from 0 to 512
[ 2122.833176][T26350] EXT4-fs: Ignoring removed bh option
[ 2122.849290][T20766] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2122.862834][T26350] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1840c018, mo2=0002]
[ 2122.874043][T26350] EXT4-fs (loop8): 1 truncate cleaned up
[ 2122.882359][T26350] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 2122.887949][T26221] team0: Port device team_slave_0 added
[ 2122.934636][T26221] team0: Port device team_slave_1 added
[ 2123.952190][T25802] Bluetooth: hci3: command tx timeout
[ 2124.040653][T24660] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2124.173646][T26221] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2124.180605][T26221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2124.258928][T26221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2124.333208][T26221] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2124.353299][T26221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2124.448293][T26221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2125.131778][T26357] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2125.343203][T26221] hsr_slave_0: entered promiscuous mode
[ 2125.372142][T26221] hsr_slave_1: entered promiscuous mode
[ 2125.378769][T26221] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2125.400887][T26221] Cannot create hsr debugfs directory
[ 2125.683961][T26315] chnl_net:caif_netlink_parms(): no params data found
[ 2125.969167][T26107] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2126.021222][T25802] Bluetooth: hci3: command tx timeout
[ 2126.497846][T26374] usb usb8: usbfs: process 26374 (syz.7.5343) did not claim interface 0 before use
[ 2127.176864][T26315] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2127.184534][T26315] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2127.193286][T26315] bridge_slave_0: entered allmulticast mode
[ 2127.211619][T26315] bridge_slave_0: entered promiscuous mode
[ 2127.222943][T26315] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2127.243635][T26315] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2127.262420][T26315] bridge_slave_1: entered allmulticast mode
[ 2127.281160][T26315] bridge_slave_1: entered promiscuous mode
[ 2127.402108][T26107] 8021q: adding VLAN 0 to HW filter on device team0
[ 2127.931590][T26383] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5346'.
[ 2128.003645][T26315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2128.220664][T26315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2128.253185][ T8007] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2128.260399][ T8007] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2128.303621][ T8007] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2128.310906][ T8007] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2129.138336][T26315] team0: Port device team_slave_0 added
[ 2129.213919][T26315] team0: Port device team_slave_1 added
[ 2129.357713][T26315] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2129.365995][T26315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2129.395800][T26315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2129.429676][T26315] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2129.437179][T26315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2129.469667][T26315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2129.771910][T26315] hsr_slave_0: entered promiscuous mode
[ 2129.789005][T26315] hsr_slave_1: entered promiscuous mode
[ 2129.806444][T26315] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2129.820146][T26315] Cannot create hsr debugfs directory
[ 2130.073463][ T5929] bridge_slave_1: left allmulticast mode
[ 2130.136730][T26399] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2130.324636][ T5929] bridge_slave_1: left promiscuous mode
[ 2130.361142][ T5929] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2130.420406][ T5929] bridge_slave_0: left allmulticast mode
[ 2130.437399][ T5929] bridge_slave_0: left promiscuous mode
[ 2130.446791][T26410] netlink: 64 bytes leftover after parsing attributes in process `syz.7.5352'.
[ 2130.503584][ T5929] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2131.863402][ T5929] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2131.875710][ T5929] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2131.887052][ T5929] bond0 (unregistering): Released all slaves
[ 2132.407771][ T5929] hsr_slave_0: left promiscuous mode
[ 2132.423129][ T5929] hsr_slave_1: left promiscuous mode
[ 2132.439627][ T5929] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2132.454481][T26422] loop8: detected capacity change from 0 to 512
[ 2132.474802][T26422] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[ 2132.494224][ T5929] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2132.538228][T26422] EXT4-fs (loop8): 1 truncate cleaned up
[ 2132.551093][T26422] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 2133.839542][ T5929] team0 (unregistering): Port device team_slave_1 removed
[ 2133.922910][ T5929] team0 (unregistering): Port device team_slave_0 removed
[ 2136.210382][T26221] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 2136.226131][T26221] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 2136.385626][T24660] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2136.817130][T26440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2136.828124][T26221] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 2137.030216][   T29] audit: type=1326 audit(1740056903.063:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26444 comm="syz.8.5363" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdd95d8cde9 code=0x0
[ 2137.063145][T26221] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 2137.136445][T26107] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2137.480225][T26107] veth0_vlan: entered promiscuous mode
[ 2137.557749][T26107] veth1_vlan: entered promiscuous mode
[ 2137.590672][T26221] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2137.675103][T26221] 8021q: adding VLAN 0 to HW filter on device team0
[ 2137.733632][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2137.740918][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2137.794930][ T8007] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2137.802215][ T8007] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2137.862099][T26107] veth0_macvtap: entered promiscuous mode
[ 2137.958845][T26107] veth1_macvtap: entered promiscuous mode
[ 2139.047427][T26107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2139.063410][T26107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2139.076280][T26107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2139.106377][T26107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2139.180049][T26459] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5367'.
[ 2139.191981][T26107] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2139.205434][T26315] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 2139.226261][T26315] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 2139.284501][T26315] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 2139.314813][T26107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2139.338996][T26107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2139.364946][T26107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2139.380957][T26107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2139.401675][T26107] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2139.433884][T26315] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 2139.507233][T26107] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2139.526417][T26107] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2139.555873][T26107] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2139.589101][T26107] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2140.084712][T26221] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2140.188480][T16054] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2140.198704][T16054] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2140.368519][T16054] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2140.381126][T16054] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2140.437889][T26315] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2140.534981][T26315] 8021q: adding VLAN 0 to HW filter on device team0
[ 2140.717007][T26221] veth0_vlan: entered promiscuous mode
[ 2141.089380][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2141.096648][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2141.250183][ T5881] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[ 2141.277409][T26221] veth1_vlan: entered promiscuous mode
[ 2141.301237][T26472] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2141.529482][ T5881] usb 9-1: Using ep0 maxpacket: 32
[ 2141.640320][   T79] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2141.647608][   T79] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2141.691045][ T5881] usb 9-1: config 0 has an invalid interface number: 184 but max is 0
[ 2141.699259][ T5881] usb 9-1: config 0 has no interface number 0
[ 2141.744708][ T5881] usb 9-1: config 0 interface 184 has no altsetting 0
[ 2141.764107][ T5881] usb 9-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[ 2141.780818][ T5881] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2141.809319][ T5881] usb 9-1: Product: syz
[ 2141.816896][ T5881] usb 9-1: Manufacturer: syz
[ 2141.832368][ T5881] usb 9-1: SerialNumber: syz
[ 2141.870032][ T5881] usb 9-1: config 0 descriptor??
[ 2141.924749][ T5881] smsc75xx v1.0.0
[ 2141.966784][T26221] veth0_macvtap: entered promiscuous mode
[ 2142.021971][T26315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 2142.052324][T26221] veth1_macvtap: entered promiscuous mode
[ 2142.170102][T26221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2142.210834][T26221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2142.251118][T26221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2142.348855][T26221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2142.418375][T26221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2142.545191][T26221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2142.615119][T26221] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2142.625323][ T5881] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[ 2142.625410][ T5881] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 2143.029509][T26221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2143.072446][T26221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2143.083384][T26221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2143.095583][T26221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2143.106047][T26221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2143.123205][T26221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2143.158045][T26221] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2143.317242][T26221] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2143.327436][T26221] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2143.336947][T26221] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2143.346171][T26221] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2143.707948][ T5881] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[ 2143.722070][ T5881] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to write PMT_CTL: -71
[ 2143.731995][ T5881] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[ 2143.744308][ T5881] smsc75xx 9-1:0.184: probe with driver smsc75xx failed with error -71
[ 2143.798411][ T5881] usb 9-1: USB disconnect, device number 3
[ 2144.153061][T26315] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2144.210654][T14433] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2144.243287][T14433] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2144.325892][T17789] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2144.346504][T17789] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2146.117175][T26520] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2146.123465][T26520] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 2146.129629][T26520] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2146.137118][T26520] Bluetooth: hci1: Opcode 0x0406 failed: -4
[ 2146.163765][T26520] Bluetooth: hci1: Opcode 0x0406 failed: -4
[ 2146.174732][T26520] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 2146.181295][T26520] Bluetooth: hci0: Opcode 0x0406 failed: -4
[ 2146.350293][T26315] veth0_vlan: entered promiscuous mode
[ 2146.367130][T26520] Bluetooth: hci0: Opcode 0x0406 failed: -4
[ 2146.456347][T26315] veth1_vlan: entered promiscuous mode
[ 2146.573359][T26315] veth0_macvtap: entered promiscuous mode
[ 2146.742939][T26520] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 2146.749689][T26520] Bluetooth: hci3: Opcode 0x0406 failed: -4
[ 2146.757799][T26520] Bluetooth: hci3: Opcode 0x0406 failed: -4
[ 2146.862431][T26315] veth1_macvtap: entered promiscuous mode
[ 2147.165636][T26315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2147.279302][T26315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2147.289774][T26315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2147.301176][T26315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2147.353072][T26315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2147.785540][T26315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2148.065553][T26315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2148.076864][T26315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2148.090591][T26315] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2148.101472][T25802] Bluetooth: hci4: command 0x0406 tx timeout
[ 2148.118151][T26526] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2148.181689][T25802] Bluetooth: hci2: command 0x0c1a tx timeout
[ 2148.183025][T10133] Bluetooth: hci1: command 0x0c1a tx timeout
[ 2148.216402][T26315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2148.341945][T10133] Bluetooth: hci0: command 0x0c1a tx timeout
[ 2148.443765][T26315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2148.810817][T26315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2148.820986][T10133] Bluetooth: hci3: command 0x0c1a tx timeout
[ 2148.866116][T26315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2148.975562][T26315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2148.988941][T26315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2149.000080][T26315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2149.041133][T26315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2149.105106][T26315] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2149.144976][T26315] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2149.186633][T26315] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2149.196199][T26315] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2149.240331][T26315] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2150.270955][T10133] Bluetooth: hci1: command 0x0c1a tx timeout
[ 2150.421121][T10133] Bluetooth: hci0: command 0x0c1a tx timeout
[ 2150.570227][T26564] loop7: detected capacity change from 0 to 2048
[ 2150.633841][T26564]  loop7: p1 < > p3
[ 2150.641297][T26564] loop7: p3 size 134217728 extends beyond EOD, truncated
[ 2150.987652][T10133] Bluetooth: hci3: command 0x0c1a tx timeout
[ 2151.255440][   T29] audit: type=1326 audit(1740056917.253:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26565 comm="syz.7.5394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f348098cde9 code=0x7ffc0000
[ 2151.924526][   T29] audit: type=1326 audit(1740056917.253:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26565 comm="syz.7.5394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f348098cde9 code=0x7ffc0000
[ 2152.019800][   T29] audit: type=1326 audit(1740056917.253:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26565 comm="syz.7.5394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f348098cde9 code=0x7ffc0000
[ 2152.123839][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2152.158029][   T29] audit: type=1326 audit(1740056917.253:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26565 comm="syz.7.5394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f348098cde9 code=0x7ffc0000
[ 2152.185387][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2152.341554][T10133] Bluetooth: hci1: command 0x0c1a tx timeout
[ 2152.416220][   T29] audit: type=1326 audit(1740056917.253:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26565 comm="syz.7.5394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f348098cde9 code=0x7ffc0000
[ 2152.425010][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2152.447576][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2152.459065][   T29] audit: type=1326 audit(1740056917.253:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26565 comm="syz.7.5394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f348098cde9 code=0x7ffc0000
[ 2152.514430][T10133] Bluetooth: hci0: command 0x0c1a tx timeout
[ 2152.555669][   T29] audit: type=1326 audit(1740056917.253:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26565 comm="syz.7.5394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f348098cde9 code=0x7ffc0000
[ 2152.677437][   T29] audit: type=1326 audit(1740056917.253:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26565 comm="syz.7.5394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f348098cde9 code=0x7ffc0000
[ 2152.774291][   T29] audit: type=1326 audit(1740056917.253:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26565 comm="syz.7.5394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f348098cde9 code=0x7ffc0000
[ 2153.036505][   T29] audit: type=1326 audit(1740056917.253:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26565 comm="syz.7.5394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f348098cde9 code=0x7ffc0000
[ 2153.060973][T10133] Bluetooth: hci3: command 0x0c1a tx timeout
[ 2154.448716][T26592] loop7: detected capacity change from 0 to 128
[ 2155.886329][T10133] Bluetooth: hci0: SCO packet for unknown connection handle 200
[ 2157.261936][T26601] lo speed is unknown, defaulting to 1000
[ 2158.489312][T26635] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5411'.
[ 2158.710910][T11760] usb 8-1: new full-speed USB device number 14 using dummy_hcd
[ 2158.876427][T11760] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2158.886850][T11760] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2159.132600][T11760] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2159.145615][T11760] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2159.153840][T11760] usb 8-1: Product: syz
[ 2159.158101][T11760] usb 8-1: Manufacturer: syz
[ 2159.163042][T11760] usb 8-1: SerialNumber: syz
[ 2159.381127][T10133] Bluetooth: hci4: command 0x0406 tx timeout
[ 2159.393135][T11760] usb 8-1: 0:2 : does not exist
[ 2159.446047][T11760] usb 8-1: 5:0: failed to get current value for ch 0 (-22)
[ 2159.591331][T11760] usb 8-1: USB disconnect, device number 14
[ 2159.825927][T26643] syzkaller0: entered promiscuous mode
[ 2159.844229][T26643] syzkaller0: entered allmulticast mode
[ 2160.847662][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[ 2160.859694][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[ 2163.541488][T10133] Bluetooth: hci0: command 0x0c1a tx timeout
[ 2164.268083][T24684] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[ 2164.515250][T24684] usb 10-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[ 2164.529140][T24684] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2164.561050][T24684] usb 10-1: Product: syz
[ 2164.580837][T24684] usb 10-1: Manufacturer: syz
[ 2164.585572][T24684] usb 10-1: SerialNumber: syz
[ 2164.642060][T24684] usb 10-1: config 0 descriptor??
[ 2164.863346][T24684] hso 10-1:0.0: Failed to find BULK IN ep
[ 2164.887323][T24684] usb-storage 10-1:0.0: USB Mass Storage device detected
[ 2165.197337][T24684] usb 10-1: USB disconnect, device number 2
[ 2165.219360][T26696] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5433'.
[ 2170.126875][T26728] loop7: detected capacity change from 0 to 512
[ 2170.138864][T26728] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[ 2170.166758][T26728] EXT4-fs (loop7): 1 truncate cleaned up
[ 2170.174873][T26728] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 2170.436094][T10133] Bluetooth: hci3: command 0x0c1a tx timeout
[ 2171.167408][T20766] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2172.477160][T26751] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5447'.
[ 2173.822127][   T29] kauditd_printk_skb: 16 callbacks suppressed
[ 2173.822167][   T29] audit: type=1326 audit(1740056939.803:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26758 comm="syz.7.5453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f348098cde9 code=0x7ffc0000
[ 2174.060343][   T29] audit: type=1326 audit(1740056939.803:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26758 comm="syz.7.5453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f348098cde9 code=0x7ffc0000
[ 2174.177905][   T29] audit: type=1326 audit(1740056939.803:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26758 comm="syz.7.5453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f348098cde9 code=0x7ffc0000
[ 2174.398464][   T29] audit: type=1326 audit(1740056939.803:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26758 comm="syz.7.5453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f348098cde9 code=0x7ffc0000
[ 2174.532672][   T29] audit: type=1326 audit(1740056939.813:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26758 comm="syz.7.5453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f348098cde9 code=0x7ffc0000
[ 2174.608043][   T29] audit: type=1326 audit(1740056939.813:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26758 comm="syz.7.5453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f348098cde9 code=0x7ffc0000
[ 2175.255931][   T29] audit: type=1326 audit(1740056939.813:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26758 comm="syz.7.5453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f348098cde9 code=0x7ffc0000
[ 2175.289094][T26779] loop7: detected capacity change from 0 to 512
[ 2175.296999][   T29] audit: type=1326 audit(1740056939.813:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26758 comm="syz.7.5453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f348098cde9 code=0x7ffc0000
[ 2175.321587][T26779] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[ 2175.322153][T26776] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2175.331676][   T29] audit: type=1326 audit(1740056939.813:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26758 comm="syz.7.5453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f348098cde9 code=0x7ffc0000
[ 2175.337431][T26776] Bluetooth: hci4: Opcode 0x0406 failed: -4
[ 2175.359813][   T29] audit: type=1326 audit(1740056939.813:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26758 comm="syz.7.5453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f348098cde9 code=0x7ffc0000
[ 2175.393730][T26776] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 2175.401373][T26776] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2175.407531][T26776] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 2175.413594][T26776] Bluetooth: hci0: Opcode 0x0406 failed: -4
[ 2175.442409][T26776] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 2175.448430][T26776] Bluetooth: hci3: Opcode 0x0406 failed: -4
[ 2175.506566][T26779] EXT4-fs (loop7): 1 truncate cleaned up
[ 2175.514613][T26779] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 2176.804392][ T5934] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[ 2176.866432][T20766] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2176.993394][ T5934] usb 10-1: Using ep0 maxpacket: 32
[ 2177.021400][ T5934] usb 10-1: config 0 has an invalid interface number: 12 but max is 0
[ 2177.060014][ T5934] usb 10-1: config 0 has no interface number 0
[ 2177.087500][ T5934] usb 10-1: config 0 interface 12 has no altsetting 0
[ 2177.305440][ T5934] usb 10-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[ 2177.316617][ T5934] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2177.325347][ T5934] usb 10-1: Product: syz
[ 2177.329758][ T5934] usb 10-1: Manufacturer: syz
[ 2177.335034][ T5934] usb 10-1: SerialNumber: syz
[ 2177.358845][ T5934] usb 10-1: config 0 descriptor??
[ 2177.390930][T25802] Bluetooth: hci4: command 0x0406 tx timeout
[ 2177.471275][T25802] Bluetooth: hci3: command 0x0c1a tx timeout
[ 2177.477420][T25802] Bluetooth: hci0: command 0x0c1a tx timeout
[ 2177.480997][T10133] Bluetooth: hci1: command 0x0c1a tx timeout
[ 2177.483604][T18192] Bluetooth: hci2: command 0x0c1a tx timeout
[ 2179.041433][   T29] kauditd_printk_skb: 18 callbacks suppressed
[ 2179.041505][   T29] audit: type=1326 audit(1740056944.923:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26803 comm="syz.7.5467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f348098cde9 code=0x7ffc0000
[ 2179.223805][ T5934] f81534 10-1:0.12: f81534_set_register: reg: 1003 data: 8 failed: -71
[ 2179.441017][ T5934] f81534 10-1:0.12: f81534_find_config_idx: read failed: -71
[ 2179.448451][ T5934] f81534 10-1:0.12: f81534_calc_num_ports: find idx failed: -71
[ 2179.461612][T18192] Bluetooth: hci4: command 0x0406 tx timeout
[ 2179.542359][T18192] Bluetooth: hci0: command 0x0c1a tx timeout
[ 2179.548422][T18192] Bluetooth: hci3: command 0x0c1a tx timeout
[ 2179.589823][   T29] audit: type=1326 audit(1740056944.923:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26803 comm="syz.7.5467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f348098cde9 code=0x7ffc0000
[ 2179.663795][ T5934] f81534 10-1:0.12: probe with driver f81534 failed with error -71
[ 2179.679080][ T5934] usb 10-1: USB disconnect, device number 3
[ 2179.685435][   T29] audit: type=1326 audit(1740056944.923:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26803 comm="syz.7.5467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f348098cde9 code=0x7ffc0000
[ 2180.623133][   T29] audit: type=1326 audit(1740056944.933:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26803 comm="syz.7.5467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f348098cde9 code=0x7ffc0000
[ 2180.744675][   T29] audit: type=1326 audit(1740056944.933:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26803 comm="syz.7.5467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f348098cde9 code=0x7ffc0000
[ 2180.854949][   T29] audit: type=1326 audit(1740056944.933:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26803 comm="syz.7.5467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f348098cde9 code=0x7ffc0000
[ 2180.894020][T26825] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5473'.
[ 2180.905397][   T29] audit: type=1326 audit(1740056944.933:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26803 comm="syz.7.5467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f348098cde9 code=0x7ffc0000
[ 2181.137820][   T29] audit: type=1326 audit(1740056944.933:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26803 comm="syz.7.5467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f348098cde9 code=0x7ffc0000
[ 2181.217608][   T29] audit: type=1326 audit(1740056944.933:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26803 comm="syz.7.5467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f348098cde9 code=0x7ffc0000
[ 2181.368455][   T29] audit: type=1326 audit(1740056944.943:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26803 comm="syz.7.5467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f348098cde9 code=0x7ffc0000
[ 2181.967886][T25802] Bluetooth: hci4: Malformed LE Event: 0x1b
[ 2185.732198][T26870] loop9: detected capacity change from 0 to 512
[ 2185.784663][T26870] EXT4-fs: Ignoring removed bh option
[ 2185.895676][T26870] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1840c018, mo2=0002]
[ 2186.255848][T26870] EXT4-fs (loop9): 1 truncate cleaned up
[ 2186.492185][T26870] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 2188.432489][T26880] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 7: invalid block bitmap
[ 2188.821361][T26315] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2189.292233][T18192] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 2189.312799][T18192] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 2189.324174][T18192] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 2189.338480][T18192] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 2189.355010][T18192] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 2189.383947][T18192] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 2189.534360][T26902] lo speed is unknown, defaulting to 1000
[ 2190.016941][T26902] chnl_net:caif_netlink_parms(): no params data found
[ 2190.367123][T26902] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2190.394281][T26902] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2190.402915][T26902] bridge_slave_0: entered allmulticast mode
[ 2190.412869][T26902] bridge_slave_0: entered promiscuous mode
[ 2190.423083][T26902] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2190.430338][T26902] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2190.437774][T26902] bridge_slave_1: entered allmulticast mode
[ 2190.446835][T26902] bridge_slave_1: entered promiscuous mode
[ 2190.544946][T26924] ieee802154 phy0 wpan0: encryption failed: -22
[ 2190.547099][T26902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2190.596903][T26902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2190.600834][   T29] kauditd_printk_skb: 16 callbacks suppressed
[ 2190.600849][   T29] audit: type=1326 audit(1740056956.623:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26910 comm="syz.0.5503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc078cde9 code=0x7fc00000
[ 2190.634869][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2190.644707][T26924] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5505'.
[ 2191.622971][T18192] Bluetooth: hci4: command tx timeout
[ 2191.945065][T26936] program syz.0.5509 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2192.612812][T26902] team0: Port device team_slave_0 added
[ 2192.616612][T26902] team0: Port device team_slave_1 added
[ 2192.773899][T26902] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2192.781063][T26902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2192.834316][T26902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2192.878946][T26902] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2192.911495][T26902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2192.994362][T26902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2193.026325][T26953] ieee802154 phy0 wpan0: encryption failed: -22
[ 2193.090227][T26953] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5517'.
[ 2193.265317][T26902] hsr_slave_0: entered promiscuous mode
[ 2193.292265][T26902] hsr_slave_1: entered promiscuous mode
[ 2193.306680][T26902] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2193.334797][T26902] Cannot create hsr debugfs directory
[ 2193.703404][T25802] Bluetooth: hci4: command tx timeout
[ 2195.781449][T25802] Bluetooth: hci4: command tx timeout
[ 2196.053632][T26987] ieee802154 phy0 wpan0: encryption failed: -22
[ 2196.074923][T26987] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5529'.
[ 2196.121076][T18808] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[ 2196.230940][T26993] syz_tun: entered allmulticast mode
[ 2196.282455][T18808] usb 10-1: Using ep0 maxpacket: 32
[ 2196.290257][T18808] usb 10-1: config 0 has an invalid interface number: 51 but max is 0
[ 2196.318944][T18808] usb 10-1: config 0 has no interface number 0
[ 2196.349856][T18808] usb 10-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[ 2196.379797][T18808] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2196.413394][T18808] usb 10-1: Product: syz
[ 2196.417696][T18808] usb 10-1: Manufacturer: syz
[ 2196.431378][T18808] usb 10-1: SerialNumber: syz
[ 2196.462512][T18808] usb 10-1: config 0 descriptor??
[ 2196.474208][T18808] quatech2 10-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[ 2196.484286][T26902] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 2196.527344][T26902] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 2196.804498][T18808] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[ 2196.825960][T26902] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 2196.841450][T18808] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[ 2196.863847][T26902] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 2197.686882][    C1] usb 10-1: qt2_read_bulk_callback - non-zero urb status: -71
[ 2197.701905][T24684] usb 10-1: USB disconnect, device number 4
[ 2197.783664][T24684] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[ 2197.814681][T24684] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[ 2197.847566][T24684] quatech2 10-1:0.51: device disconnected
[ 2197.862378][T25802] Bluetooth: hci4: command tx timeout
[ 2197.893933][T26902] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2197.966472][T26902] 8021q: adding VLAN 0 to HW filter on device team0
[ 2198.031682][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2198.038862][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2198.103754][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2198.110970][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2198.282005][T26902] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 2198.306953][T26902] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 2199.913241][T26992] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2200.360564][T26902] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2200.492360][T27024] ieee802154 phy0 wpan0: encryption failed: -22
[ 2200.567294][T27024] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5541'.
[ 2201.264874][T26902] veth0_vlan: entered promiscuous mode
[ 2201.290524][T26902] veth1_vlan: entered promiscuous mode
[ 2201.532740][T26902] veth0_macvtap: entered promiscuous mode
[ 2201.571830][T26902] veth1_macvtap: entered promiscuous mode
[ 2201.659974][T26902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2201.697632][T26902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2201.729206][T26902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2201.801296][T26902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2201.820490][T26902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2201.843175][T26902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2201.862007][T26902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2201.901022][T26902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2201.925631][T26902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2201.958494][T26902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2201.997774][T26902] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2202.076620][T26902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2202.113282][T26902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2202.139607][T26902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2202.170980][T26902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2202.191704][T26902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2202.212596][T26902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2202.232677][T26902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2202.261287][T26902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2202.280924][T26902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2202.300855][T26902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2202.332404][T26902] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2202.364196][T27047] ip6gre1: entered promiscuous mode
[ 2202.396303][T26902] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2202.405578][T26902] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2202.422354][T26902] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2202.449204][T26902] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2202.716545][T18200] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2202.738298][T18200] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2202.842289][ T8007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2202.850152][ T8007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2203.181581][T18808] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[ 2203.265688][T27061] netlink: 40 bytes leftover after parsing attributes in process `syz.8.5551'.
[ 2203.474442][T27064] loop8: detected capacity change from 0 to 128
[ 2203.478123][T18808] usb 10-1: Using ep0 maxpacket: 32
[ 2203.489997][T18808] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2203.503194][T18808] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2203.513468][T18808] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 2203.536551][T18808] usb 10-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[ 2203.549177][T27064] EXT4-fs (loop8): VFS: Found ext4 filesystem with unknown checksum algorithm.
[ 2203.566119][T18808] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2204.334684][T18808] usb 10-1: config 0 descriptor??
[ 2204.776469][T27080] ip6gre1: entered promiscuous mode
[ 2204.812507][T18808] hid (null): bogus close delimiter
[ 2204.846721][T18808] input: HID 0458:5011 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0458:5011.0009/input/input52
[ 2204.982623][T16748] usb 9-1: new full-speed USB device number 4 using dummy_hcd
[ 2205.187522][T18808] input: HID 0458:5011 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0458:5011.0009/input/input53
[ 2205.233482][T16748] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2205.234206][T18808] kye 0003:0458:5011.0009: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.9-1/input0
[ 2205.245966][T16748] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2205.433307][T18808] usb 10-1: USB disconnect, device number 5
[ 2206.073521][T16748] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2206.324808][T16748] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2206.381173][T16748] usb 9-1: Product: syz
[ 2206.395918][T16748] usb 9-1: Manufacturer: syz
[ 2206.400735][T16748] usb 9-1: SerialNumber: syz
[ 2207.063012][T16748] usb 9-1: 0:2 : does not exist
[ 2207.146113][T16748] usb 9-1: 5:0: failed to get current value for ch 0 (-22)
[ 2207.496594][T27106] loop7: detected capacity change from 0 to 128
[ 2207.508456][T27106] EXT4-fs (loop7): VFS: Found ext4 filesystem with unknown checksum algorithm.
[ 2207.873165][T16748] usb 9-1: USB disconnect, device number 4
[ 2208.406179][T27113] ip6gre1: entered promiscuous mode
[ 2210.389071][T27136] ieee802154 phy0 wpan0: encryption failed: -22
[ 2210.412731][T27136] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5576'.
[ 2211.798553][T27155] loop8: detected capacity change from 0 to 128
[ 2211.889525][T27155] EXT4-fs (loop8): VFS: Found ext4 filesystem with unknown checksum algorithm.
[ 2212.118317][T27145] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2214.413949][T27176] ieee802154 phy0 wpan0: encryption failed: -22
[ 2214.493366][T27176] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5590'.
[ 2219.582577][T27234] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5610'.
[ 2220.813653][T27250] ip6gre1: entered promiscuous mode
[ 2221.125181][T27255] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5616'.
[ 2222.280323][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[ 2222.286859][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[ 2222.439959][T27261] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 2222.446648][T27261] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2222.453038][T27261] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 2222.459366][T27261] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 2222.465899][T27261] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2222.472113][T27261] Bluetooth: hci4: Opcode 0x0406 failed: -4
[ 2222.603096][T27261] Bluetooth: hci4: Opcode 0x0406 failed: -4
[ 2223.498167][T27284] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5623'.
[ 2224.182117][T25802] Bluetooth: hci2: command 0x0c1a tx timeout
[ 2224.375303][T27296] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5629'.
[ 2224.501507][T25802] Bluetooth: hci4: command 0x0c1a tx timeout
[ 2224.501534][T10133] Bluetooth: hci1: command 0x0c1a tx timeout
[ 2224.509085][T25802] Bluetooth: hci0: command 0x0c1a tx timeout
[ 2224.513578][T18192] Bluetooth: hci3: command 0x0c1a tx timeout
[ 2225.815786][T27305] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5632'.
[ 2226.383195][T27308] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2226.391277][T27308] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2226.591496][T25802] Bluetooth: hci4: command 0x0c1a tx timeout
[ 2227.534110][T27308] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2227.585757][T27308] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2227.770349][T27308] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2227.779626][T27308] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2227.790312][T27308] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2227.799953][T27308] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2228.189068][T27305] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2228.225369][T27305] 8021q: adding VLAN 0 to HW filter on device team0
[ 2228.663126][T25802] Bluetooth: hci4: command 0x0c1a tx timeout
[ 2228.894075][T27305] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 2229.002365][T27321] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 2229.008572][T27321] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2229.015087][T27321] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 2229.021349][T27321] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 2229.027531][T27321] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2229.146179][T27330] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5640'.
[ 2230.842940][T27353] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5644'.
[ 2231.151404][T18192] Bluetooth: hci1: command 0x0c1a tx timeout
[ 2231.157678][T10133] Bluetooth: hci0: command 0x0c1a tx timeout
[ 2231.164198][T18192] Bluetooth: hci2: command 0x0c1a tx timeout
[ 2231.170861][T25802] Bluetooth: hci3: command 0x0c1a tx timeout
[ 2231.177319][T25674] Bluetooth: hci4: command 0x0c1a tx timeout
[ 2231.236208][T27351] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5647'.
[ 2233.279025][T27361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2233.955648][T27381] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5654'.
[ 2234.002301][T11087] usb 10-1: new full-speed USB device number 6 using dummy_hcd
[ 2234.056472][T27379] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 2234.066230][T27379] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2234.072520][T27379] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 2234.078695][T27379] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 2234.084895][T27379] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2234.377220][T11087] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2234.431577][T11087] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2234.465536][T11087] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2234.724478][T11087] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2234.760734][T11087] usb 10-1: Product: syz
[ 2235.702020][T11087] usb 10-1: Manufacturer: syz
[ 2235.706777][T11087] usb 10-1: SerialNumber: syz
[ 2235.811941][T27398] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5658'.
[ 2235.847079][T27388] loop8: detected capacity change from 0 to 2048
[ 2235.861509][T27355] Bluetooth: hci2: command 0x0c1a tx timeout
[ 2235.953200][T27388]  loop8: p1 < > p3
[ 2236.012515][T27388] loop8: p3 size 134217728 extends beyond EOD, truncated
[ 2236.101622][T25311] Bluetooth: hci3: command 0x0c1a tx timeout
[ 2236.107806][T27355] Bluetooth: hci4: command 0x0c1a tx timeout
[ 2236.114282][T25311] Bluetooth: hci0: command 0x0c1a tx timeout
[ 2236.120583][T27355] Bluetooth: hci1: command 0x0c1a tx timeout
[ 2236.322656][T27399] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5659'.
[ 2236.453049][T11087] usb 10-1: 0:2 : does not exist
[ 2236.463810][T11087] usb 10-1: 5:0: failed to get current value for ch 0 (-22)
[ 2236.558446][T11087] usb 10-1: USB disconnect, device number 6
[ 2236.720550][T27404] kvm: kvm [27403]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000
[ 2236.730468][T27404] kvm: kvm [27403]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000
[ 2237.162897][T27413] usb usb1: usbfs: process 27413 (syz.9.5665) did not claim interface 0 before use
[ 2238.850180][T27419] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 2238.856679][T27419] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2238.863169][T27419] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 2238.869353][T27419] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 2238.875756][T27419] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2240.217222][T27431] loop7: detected capacity change from 0 to 2048
[ 2240.391863][T27407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2240.501128][T25674] Bluetooth: hci2: command 0x0c1a tx timeout
[ 2240.906194][T25674] Bluetooth: hci4: command 0x0c1a tx timeout
[ 2240.912460][T25674] Bluetooth: hci3: command 0x0c1a tx timeout
[ 2240.918493][T25674] Bluetooth: hci0: command 0x0c1a tx timeout
[ 2240.925403][T27355] Bluetooth: hci1: command 0x0c1a tx timeout
[ 2241.619035][T27445] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5674'.
[ 2242.784944][T27458] usb usb1: usbfs: process 27458 (syz.7.5677) did not claim interface 0 before use
[ 2245.445369][T27470] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2246.055483][T27479] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5687'.
[ 2246.678413][T27486] kvm: kvm [27484]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000
[ 2246.752436][T27486] kvm: kvm [27484]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000
[ 2247.441334][T27493] netlink: 40 bytes leftover after parsing attributes in process `syz.8.5689'.
[ 2249.261027][   T47] usb 9-1: new full-speed USB device number 5 using dummy_hcd
[ 2249.967809][T27507] loop7: detected capacity change from 0 to 2048
[ 2250.165820][T27507]  loop7: p1 < > p3
[ 2250.173835][T27507] loop7: p3 size 134217728 extends beyond EOD, truncated
[ 2250.304548][   T47] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2250.339162][T27514] ip6gre1: entered promiscuous mode
[ 2250.349211][   T47] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2250.401945][   T47] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2250.437965][   T47] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2250.477788][   T47] usb 9-1: Product: syz
[ 2250.500202][   T47] usb 9-1: Manufacturer: syz
[ 2250.510903][T16748] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[ 2250.511271][   T47] usb 9-1: SerialNumber: syz
[ 2250.782347][   T47] usb 9-1: 0:2 : does not exist
[ 2250.843260][T16748] usb 10-1: Using ep0 maxpacket: 32
[ 2250.855531][T16748] usb 10-1: config 0 has an invalid interface number: 184 but max is 0
[ 2250.871874][T16748] usb 10-1: config 0 has no interface number 0
[ 2251.010999][   T47] usb 9-1: 5:0: failed to get current value for ch 0 (-22)
[ 2251.120859][T16748] usb 10-1: config 0 interface 184 has no altsetting 0
[ 2251.144102][T16748] usb 10-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[ 2251.161036][T16748] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2251.169157][T16748] usb 10-1: Product: syz
[ 2251.184446][T16748] usb 10-1: Manufacturer: syz
[ 2251.188335][   T47] usb 9-1: USB disconnect, device number 5
[ 2251.196694][T16748] usb 10-1: SerialNumber: syz
[ 2251.223062][T16748] usb 10-1: config 0 descriptor??
[ 2251.243706][T16748] smsc75xx v1.0.0
[ 2252.062742][T16748] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[ 2252.175765][T16748] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 2252.841318][T27533] kvm: kvm [27532]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000
[ 2252.850469][T27533] kvm: kvm [27532]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000
[ 2253.022619][T16748] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32
[ 2253.051160][T16748] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32
[ 2253.130824][T16748] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32
[ 2253.181194][T16748] smsc75xx 10-1:0.184: probe with driver smsc75xx failed with error -32
[ 2254.156100][T27544] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2254.511493][T18808] usb 10-1: USB disconnect, device number 7
[ 2255.815526][T27554] loop3: detected capacity change from 0 to 2048
[ 2257.594522][T27591] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5715'.
[ 2258.706634][T27594] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2260.291328][T16748] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[ 2260.470848][T16748] usb 10-1: Using ep0 maxpacket: 32
[ 2260.488543][T16748] usb 10-1: config 0 has an invalid interface number: 184 but max is 0
[ 2260.527891][T16748] usb 10-1: config 0 has no interface number 0
[ 2260.558142][T16748] usb 10-1: config 0 interface 184 has no altsetting 0
[ 2260.612386][T16748] usb 10-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[ 2261.621845][T16748] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2261.659362][T16748] usb 10-1: Product: syz
[ 2261.709349][T16748] usb 10-1: Manufacturer: syz
[ 2261.719760][T16748] usb 10-1: SerialNumber: syz
[ 2261.778392][T16748] usb 10-1: config 0 descriptor??
[ 2261.800700][T16748] smsc75xx v1.0.0
[ 2263.063405][T16748] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[ 2263.077121][T16748] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 2263.350065][T16748] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32
[ 2263.391748][T16748] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32
[ 2263.430932][T16748] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32
[ 2263.451434][T16748] smsc75xx 10-1:0.184: probe with driver smsc75xx failed with error -32
[ 2264.418917][T11087] usb 10-1: USB disconnect, device number 8
[ 2264.663616][T27636] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2269.941619][T27355] Bluetooth: hci4: command 0x0c1a tx timeout
[ 2271.168041][T27688] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2274.782753][T27731] netlink: 44 bytes leftover after parsing attributes in process `syz.7.5758'.
[ 2275.103385][T27733] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2275.111141][T27733] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2275.342906][T27733] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2275.355160][T27733] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2275.843016][T27733] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2275.852426][T27733] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2275.861483][T27733] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2275.870323][T27733] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2275.916385][T27741] kvm: kvm [27737]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000
[ 2275.955156][T27741] kvm: kvm [27737]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000
[ 2276.256558][T27747] kvm: kvm [27746]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x6b00
[ 2276.266763][T27747] kvm: kvm [27746]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x6530
[ 2276.298637][T27731] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2276.313792][T27731] 8021q: adding VLAN 0 to HW filter on device team0
[ 2276.345269][T27731] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 2278.689955][T27775] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5770'.
[ 2282.529929][T27814] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5783'.
[ 2283.710269][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[ 2283.721518][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[ 2286.992191][T27859] kvm: kvm [27857]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000
[ 2287.001961][T27859] kvm: kvm [27857]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000
[ 2287.748008][T27858] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5795'.
[ 2288.787975][T27871] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5800'.
[ 2289.678865][T27877] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2289.705490][T27877] 8021q: adding VLAN 0 to HW filter on device team0
[ 2289.734803][T27877] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 2291.192559][T27900] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5809'.
[ 2292.958193][T27917] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5815'.
[ 2293.320644][T27917] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2293.328696][T27917] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2294.312796][T27935] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5820'.
[ 2294.416836][T27937] kvm: kvm [27936]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000
[ 2294.426085][T27937] kvm: kvm [27936]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000
[ 2294.481453][   T47] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[ 2294.588583][T27917] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2294.661527][T27917] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2294.679386][   T47] usb 9-1: Using ep0 maxpacket: 32
[ 2294.694150][   T47] usb 9-1: config 0 has an invalid interface number: 184 but max is 0
[ 2294.738280][   T47] usb 9-1: config 0 has no interface number 0
[ 2294.766447][   T47] usb 9-1: config 0 interface 184 has no altsetting 0
[ 2294.803433][   T47] usb 9-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[ 2294.861751][   T47] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2294.885957][   T47] usb 9-1: Product: syz
[ 2294.914367][   T47] usb 9-1: Manufacturer: syz
[ 2294.929972][   T47] usb 9-1: SerialNumber: syz
[ 2294.978277][   T47] usb 9-1: config 0 descriptor??
[ 2295.016084][   T47] smsc75xx v1.0.0
[ 2295.330064][T27917] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2295.383217][T27917] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2295.423839][T27917] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2295.471548][T27917] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2296.491145][   T47] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[ 2296.576007][T27355] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 2296.589348][T27355] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 2296.599621][T27355] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 2296.609855][T27355] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 2296.618123][T27355] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[ 2296.625707][T27355] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 2296.660980][   T47] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 2296.998131][   T47] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71
[ 2297.021404][   T47] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71
[ 2297.032701][   T47] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[ 2297.045383][   T47] smsc75xx 9-1:0.184: probe with driver smsc75xx failed with error -71
[ 2297.085353][   T47] usb 9-1: USB disconnect, device number 6
[ 2297.408440][T27919] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2297.731320][T27919] 8021q: adding VLAN 0 to HW filter on device team0
[ 2297.782822][T27919] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 2298.130485][   T11] batadv2: left allmulticast mode
[ 2298.137889][   T11] batadv2: left promiscuous mode
[ 2298.147297][   T11] bridge0: port 5(batadv2) entered disabled state
[ 2298.195159][   T11] batadv0: left allmulticast mode
[ 2298.221332][   T11] batadv0: left promiscuous mode
[ 2298.233317][   T11] bridge0: port 4(batadv0) entered disabled state
[ 2298.263049][   T11] batadv1: left allmulticast mode
[ 2298.274829][   T11] batadv1: left promiscuous mode
[ 2298.286830][   T11] bridge0: port 3(batadv1) entered disabled state
[ 2298.318420][   T11] bridge_slave_1: left allmulticast mode
[ 2298.332364][   T11] bridge_slave_1: left promiscuous mode
[ 2298.347291][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2298.374954][   T11] bridge_slave_0: left allmulticast mode
[ 2298.377850][T27977] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5835'.
[ 2298.389465][   T11] bridge_slave_0: left promiscuous mode
[ 2298.404025][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2298.663652][T27355] Bluetooth: hci5: command tx timeout
[ 2298.921110][T11087] usb 8-1: new high-speed USB device number 15 using dummy_hcd
[ 2299.108784][T27990] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5839'.
[ 2299.121123][T11087] usb 8-1: Using ep0 maxpacket: 32
[ 2299.133215][T11087] usb 8-1: config 0 has an invalid interface number: 184 but max is 0
[ 2299.142007][T11087] usb 8-1: config 0 has no interface number 0
[ 2299.160049][T11087] usb 8-1: config 0 interface 184 has no altsetting 0
[ 2299.179002][T11087] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[ 2299.188776][T11087] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2299.212690][T11087] usb 8-1: Product: syz
[ 2299.234968][T11087] usb 8-1: Manufacturer: syz
[ 2299.263194][T11087] usb 8-1: SerialNumber: syz
[ 2299.296743][T11087] usb 8-1: config 0 descriptor??
[ 2299.324518][T11087] smsc75xx v1.0.0
[ 2300.247281][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2300.302407][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2300.332054][T11087] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[ 2300.343712][T11087] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 2300.362451][   T11] bond0 (unregistering): Released all slaves
[ 2300.485291][T27995] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5840'.
[ 2300.683441][   T11] bond1 (unregistering): (slave bond2): Releasing backup interface
[ 2300.692559][   T11] bond1 (unregistering): Released all slaves
[ 2300.747474][T27355] Bluetooth: hci5: command tx timeout
[ 2300.795496][T11087] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71
[ 2300.806511][T11087] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71
[ 2300.817201][T11087] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[ 2300.827468][T11087] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -71
[ 2300.845960][T11087] usb 8-1: USB disconnect, device number 15
[ 2300.990679][   T11] bond2 (unregistering): Released all slaves
[ 2301.007325][   T11] bond3 (unregistering): Released all slaves
[ 2301.029620][   T11] bond4 (unregistering): Released all slaves
[ 2301.060553][   T11] bond5 (unregistering): Released all slaves
[ 2301.089964][   T11] bond6 (unregistering): (slave bond7): Releasing active interface
[ 2301.102996][   T11] bond6 (unregistering): Released all slaves
[ 2301.409936][   T11] bond7 (unregistering): Released all slaves
[ 2301.900487][T28005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2302.156575][T27991] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2302.164732][T27991] 8021q: adding VLAN 0 to HW filter on device team0
[ 2302.189711][T27991] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 2302.251034][T27951] lo speed is unknown, defaulting to 1000
[ 2302.251827][   T11] tipc: Left network mode
[ 2302.841459][T27355] Bluetooth: hci5: command tx timeout
[ 2304.212203][T28032] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5854'.
[ 2304.368159][   T11] hsr_slave_0: left promiscuous mode
[ 2304.389848][   T11] hsr_slave_1: left promiscuous mode
[ 2304.900984][T27355] Bluetooth: hci5: command tx timeout
[ 2305.005207][T28043] netlink: 44 bytes leftover after parsing attributes in process `syz.7.5857'.
[ 2305.083004][T28041] loop8: detected capacity change from 0 to 2048
[ 2305.154426][T28041]  loop8: p1 < > p3
[ 2305.165611][T28041] loop8: p3 size 134217728 extends beyond EOD, truncated
[ 2305.850249][T28046] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2311.408542][T28044] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2311.428441][T28044] 8021q: adding VLAN 0 to HW filter on device team0
[ 2311.447479][T28044] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 2312.064080][T27951] chnl_net:caif_netlink_parms(): no params data found
[ 2312.684547][T28080] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2313.177080][T28092] ieee802154 phy0 wpan0: encryption failed: -22
[ 2313.447158][T28093] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5871'.
[ 2314.274185][T27951] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2314.303723][T27951] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2314.461478][T27951] bridge_slave_0: entered allmulticast mode
[ 2314.491795][T27951] bridge_slave_0: entered promiscuous mode
[ 2314.551413][T28114] netlink: 44 bytes leftover after parsing attributes in process `syz.8.5879'.
[ 2314.736233][T27951] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2315.205287][T27951] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2315.213839][T27951] bridge_slave_1: entered allmulticast mode
[ 2315.222755][T27951] bridge_slave_1: entered promiscuous mode
[ 2315.619683][T28114] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2315.662893][T28114] 8021q: adding VLAN 0 to HW filter on device team0
[ 2315.691785][T28114] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 2315.937412][T27951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2315.957231][   T11] IPVS: stop unused estimator thread 0...
[ 2316.212818][T27951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2317.994713][T27951] team0: Port device team_slave_0 added
[ 2318.710885][T28171] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5895'.
[ 2319.125555][T27951] team0: Port device team_slave_1 added
[ 2319.541293][   T11] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2319.654276][T27951] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2319.669677][T27951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2319.753352][T27951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2319.767589][T28198] ieee802154 phy0 wpan0: encryption failed: -22
[ 2319.825597][T28196] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5905'.
[ 2319.856205][   T11] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2319.930720][T27951] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2319.972941][T27951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2320.072223][T27951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2321.063255][   T11] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2321.360370][T27951] hsr_slave_0: entered promiscuous mode
[ 2321.398004][T27951] hsr_slave_1: entered promiscuous mode
[ 2321.422637][T27951] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2321.470913][T27951] Cannot create hsr debugfs directory
[ 2321.557107][T28218] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5913'.
[ 2321.584272][   T11] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2321.590233][T27355] Bluetooth: hci2: unexpected event for opcode 0x0406
[ 2321.837721][T28225] ieee802154 phy0 wpan0: encryption failed: -22
[ 2321.888082][T28225] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5916'.
[ 2322.302011][T28242] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5922'.
[ 2322.877972][T28242] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2322.888417][T28242] 8021q: adding VLAN 0 to HW filter on device team0
[ 2322.929393][T28242] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 2323.281088][T16748] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[ 2323.783391][T16748] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2323.803522][   T11] bridge_slave_1: left allmulticast mode
[ 2323.830039][   T11] bridge_slave_1: left promiscuous mode
[ 2323.857095][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2323.915504][   T11] bridge_slave_0: left allmulticast mode
[ 2323.950968][   T11] bridge_slave_0: left promiscuous mode
[ 2323.962428][T16748] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2323.979726][T16748] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2323.997464][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2324.016170][T16748] usb 9-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.00
[ 2324.045325][T16748] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2324.060356][T16748] usb 9-1: config 0 descriptor??
[ 2324.535636][T16748] holtek_mouse 0003:04D9:A070.000A: unbalanced collection at end of report description
[ 2324.573856][T16748] holtek_mouse 0003:04D9:A070.000A: hid parse failed: -22
[ 2324.595858][T16748] holtek_mouse 0003:04D9:A070.000A: probe with driver holtek_mouse failed with error -22
[ 2324.755219][T16748] usb 9-1: USB disconnect, device number 7
[ 2324.922657][T28275] kvm: kvm [28274]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x3ce9
[ 2324.929488][T28281] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5937'.
[ 2324.985790][T28275] kvm: kvm [28274]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xcc96
[ 2325.022122][T28275] kvm: kvm [28274]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xdb23
[ 2325.063489][T28275] kvm: kvm [28274]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x3ce5
[ 2325.080447][T28275] kvm: kvm [28274]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x9fa9
[ 2325.114309][T28275] kvm: kvm [28274]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xbadf
[ 2325.168466][T28275] kvm: kvm [28274]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x4613
[ 2325.220213][T28275] kvm: kvm [28274]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xdbac
[ 2325.230605][T28275] kvm: kvm [28274]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xdeb2
[ 2325.268127][T28275] kvm: kvm [28274]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xf4de
[ 2325.624993][T27355] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[ 2325.635183][T27355] Bluetooth: hci2: Injecting HCI hardware error event
[ 2325.649861][T25674] Bluetooth: hci2: hardware error 0x00
[ 2327.651218][T28313] netlink: 'syz.0.5948': attribute type 1 has an invalid length.
[ 2327.679530][T28313] netlink: 'syz.0.5948': attribute type 2 has an invalid length.
[ 2327.701317][T25674] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[ 2328.826459][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2328.886894][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2329.127637][   T11] bond0 (unregistering): Released all slaves
[ 2330.060876][   T29] audit: type=1326 audit(1740057096.063:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28315 comm="syz.0.5949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc078cde9 code=0x7ffc0000
[ 2330.137255][   T29] audit: type=1326 audit(1740057096.063:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28315 comm="syz.0.5949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc078cde9 code=0x7ffc0000
[ 2330.242202][   T29] audit: type=1326 audit(1740057096.063:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28315 comm="syz.0.5949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f7dc078cde9 code=0x7ffc0000
[ 2330.321043][   T29] audit: type=1326 audit(1740057096.063:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28315 comm="syz.0.5949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc078cde9 code=0x7ffc0000
[ 2330.379859][   T29] audit: type=1326 audit(1740057096.073:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28315 comm="syz.0.5949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7dc078cde9 code=0x7ffc0000
[ 2330.404076][   T29] audit: type=1326 audit(1740057096.073:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28315 comm="syz.0.5949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc078cde9 code=0x7ffc0000
[ 2330.429522][   T29] audit: type=1326 audit(1740057096.073:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28315 comm="syz.0.5949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc078cde9 code=0x7ffc0000
[ 2330.716328][T28345] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5959'.
[ 2333.063052][T28375] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5969'.
[ 2333.471366][   T11] hsr_slave_0: left promiscuous mode
[ 2333.569162][   T11] hsr_slave_1: left promiscuous mode
[ 2333.642499][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2333.684318][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2333.721376][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2333.754338][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2333.841730][T28385] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5971'.
[ 2333.850358][   T11] veth1_macvtap: left promiscuous mode
[ 2333.871310][   T11] veth0_macvtap: left promiscuous mode
[ 2333.877580][   T11] veth1_vlan: left promiscuous mode
[ 2333.884558][   T11] veth0_vlan: left promiscuous mode
[ 2335.060344][   T11] team0 (unregistering): Port device team_slave_1 removed
[ 2335.155155][   T11] team0 (unregistering): Port device team_slave_0 removed
[ 2336.737949][T28407] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5979'.
[ 2337.247992][T28408] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2337.267879][T28408] 8021q: adding VLAN 0 to HW filter on device team0
[ 2337.289120][T28408] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 2337.412745][T24684] usb 9-1: new full-speed USB device number 8 using dummy_hcd
[ 2337.601296][T24684] usb 9-1: device descriptor read/64, error -71
[ 2337.649441][   T47] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[ 2337.701576][   T47] hid-generic 0000:0000:0000.000B: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 2337.871516][T24684] usb 9-1: new full-speed USB device number 9 using dummy_hcd
[ 2337.923965][T27951] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 2338.113717][T27951] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 2338.139419][T27951] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 2338.172138][T24684] usb 9-1: device descriptor read/64, error -71
[ 2338.294592][T24684] usb usb9-port1: attempt power cycle
[ 2339.103048][T27951] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 2339.120641][T28439] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5991'.
[ 2339.411026][T24684] usb 9-1: new full-speed USB device number 10 using dummy_hcd
[ 2339.479935][T24684] usb 9-1: device descriptor read/8, error -71
[ 2339.990903][T24684] usb 9-1: new full-speed USB device number 11 using dummy_hcd
[ 2340.260926][T24684] usb 9-1: device descriptor read/8, error -71
[ 2340.375165][T28451] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5995'.
[ 2340.390607][T24684] usb usb9-port1: unable to enumerate USB device
[ 2340.481177][T27951] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2342.515211][T28478] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6003'.
[ 2342.562401][T28451] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2342.583567][T28451] 8021q: adding VLAN 0 to HW filter on device team0
[ 2342.658850][T28451] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 2342.784372][T27951] 8021q: adding VLAN 0 to HW filter on device team0
[ 2342.830567][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2342.837875][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2342.851025][T24684] usb 8-1: new full-speed USB device number 16 using dummy_hcd
[ 2342.991106][T24684] usb 8-1: device descriptor read/64, error -71
[ 2343.241370][T24684] usb 8-1: new full-speed USB device number 17 using dummy_hcd
[ 2343.340140][ T8020] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2343.347453][ T8020] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2343.510921][T24684] usb 8-1: device descriptor read/64, error -71
[ 2343.671651][T24684] usb usb8-port1: attempt power cycle
[ 2343.873887][T27951] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 2344.151680][T24684] usb 8-1: new full-speed USB device number 18 using dummy_hcd
[ 2344.202878][T24684] usb 8-1: device descriptor read/8, error -71
[ 2344.249247][T27951] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2344.450904][T24684] usb 8-1: new full-speed USB device number 19 using dummy_hcd
[ 2344.591290][T24684] usb 8-1: device descriptor read/8, error -71
[ 2344.798913][T24684] usb usb8-port1: unable to enumerate USB device
[ 2345.144551][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[ 2345.550902][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[ 2345.691555][T27951] veth0_vlan: entered promiscuous mode
[ 2345.866571][T27951] veth1_vlan: entered promiscuous mode
[ 2346.743097][T28526] netlink: 44 bytes leftover after parsing attributes in process `syz.7.6017'.
[ 2347.217255][T28528] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2347.236941][T28533] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6016'.
[ 2347.324212][T27951] veth0_macvtap: entered promiscuous mode
[ 2347.397135][T28526] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2347.407453][T28526] 8021q: adding VLAN 0 to HW filter on device team0
[ 2347.427106][T28526] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 2347.468289][T27951] veth1_macvtap: entered promiscuous mode
[ 2347.547366][T27951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2347.577712][T27951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2347.589884][T27951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2347.615830][T27951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2347.692098][T27951] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2347.746034][T27951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2348.621826][T27951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2348.632627][T27951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2348.701528][T27951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2348.716948][T27951] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2348.982587][T27951] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2349.007729][T27951] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2349.723056][T27951] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2349.751240][T27951] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2350.513353][T25123] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2350.533122][T25123] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2350.591299][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2350.621342][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2350.645413][T28572] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6030'.
[ 2350.948953][T28575] loop7: detected capacity change from 0 to 2048
[ 2350.983936][T28575]  loop7: p1 < > p3
[ 2350.990139][T28575] loop7: p3 size 134217728 extends beyond EOD, truncated
[ 2352.283279][T28587] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6034'.
[ 2352.621477][T28584] kvm_pr_unimpl_wrmsr: 15 callbacks suppressed
[ 2352.621498][T28584] kvm: kvm [28581]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x6b00
[ 2352.671555][T28584] kvm: kvm [28581]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x6530
[ 2354.752115][T28610] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6041'.
[ 2355.712443][T28625] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6045'.
[ 2355.903176][T28632] netlink: 44 bytes leftover after parsing attributes in process `syz.7.6048'.
[ 2355.972152][T28627] loop8: detected capacity change from 0 to 2048
[ 2356.227003][T28632] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2356.236516][T28632] 8021q: adding VLAN 0 to HW filter on device team0
[ 2356.261198][T28632] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 2356.303361][T28627]  loop8: p1 < > p3
[ 2356.364004][T28627] loop8: p3 size 134217728 extends beyond EOD, truncated
[ 2357.841102][T28656] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6056'.
[ 2358.935885][T28669] netlink: 44 bytes leftover after parsing attributes in process `syz.7.6062'.
[ 2359.244100][T28669] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2359.253170][T28669] 8021q: adding VLAN 0 to HW filter on device team0
[ 2359.284380][T28669] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 2359.447065][T28678] loop8: detected capacity change from 0 to 512
[ 2359.454592][T28678] EXT4-fs: Ignoring removed bh option
[ 2359.701783][T28678] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1840c018, mo2=0002]
[ 2359.744557][T28678] EXT4-fs (loop8): 1 truncate cleaned up
[ 2360.457467][T28678] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 2360.691073][T28689] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6068'.
[ 2360.749741][T28689] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6068'.
[ 2360.903610][T28689] syz_tun: entered promiscuous mode
[ 2361.631333][T28689] syz_tun: left promiscuous mode
[ 2361.686547][T28700] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns
[ 2361.700841][T28700] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[ 2361.764540][T24660] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2361.796365][T28703] dummy0: entered promiscuous mode
[ 2361.805680][T28703] dummy0: left promiscuous mode
[ 2364.869644][T25674] Bluetooth: hci4: unexpected event for opcode 0x0000
[ 2365.929943][T28742] loop8: detected capacity change from 0 to 512
[ 2366.002414][T28742] EXT4-fs: Ignoring removed bh option
[ 2366.190972][T28742] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1840c018, mo2=0002]
[ 2366.221675][T28742] EXT4-fs (loop8): 1 truncate cleaned up
[ 2366.229503][T28742] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 2366.357507][T28750] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2366.366423][T28750] 8021q: adding VLAN 0 to HW filter on device team0
[ 2366.378205][T28750] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 2367.309614][T28752] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 7: invalid block bitmap
[ 2367.405644][T24660] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2368.362965][T25674] Bluetooth: hci1: unexpected event for opcode 0x0000
[ 2368.911226][T25674] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[ 2368.921974][T25674] Bluetooth: hci4: Injecting HCI hardware error event
[ 2368.933567][T27355] Bluetooth: hci4: hardware error 0x00
[ 2371.333397][T27355] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[ 2371.454262][T27355] Bluetooth: hci0: unexpected event for opcode 0x0006
[ 2371.947086][T28807] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2371.955178][T28807] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2372.421503][T27355] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[ 2372.431033][T27355] Bluetooth: hci1: Injecting HCI hardware error event
[ 2372.443508][T25674] Bluetooth: hci1: hardware error 0x00
[ 2372.571441][T28817] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2372.757508][T28807] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2372.842567][T28807] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2374.031393][T28807] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2374.040319][T28807] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2374.092770][T28807] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2374.111111][T28807] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2374.207788][T28848] loop3: detected capacity change from 0 to 512
[ 2374.228027][T28848] EXT4-fs: Ignoring removed bh option
[ 2374.312919][T11087] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[ 2374.463658][T28848] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1840c018, mo2=0002]
[ 2374.480926][T11087] usb 9-1: Using ep0 maxpacket: 32
[ 2374.501435][T25674] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[ 2374.515624][T11087] usb 9-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b
[ 2374.531265][T11087] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2374.539287][T11087] usb 9-1: Product: syz
[ 2374.554292][T11087] usb 9-1: Manufacturer: syz
[ 2374.558933][T11087] usb 9-1: SerialNumber: syz
[ 2374.605081][T11087] usb 9-1: config 0 descriptor??
[ 2374.620594][T28848] EXT4-fs (loop3): 1 truncate cleaned up
[ 2374.633633][T28848] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 2374.697848][T28803] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2374.736804][T28803] 8021q: adding VLAN 0 to HW filter on device team0
[ 2374.796651][T28803] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 2375.670518][T25674] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[ 2375.681460][T25674] Bluetooth: hci0: Injecting HCI hardware error event
[ 2375.692384][T27355] Bluetooth: hci0: hardware error 0x00
[ 2375.729977][T26221] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2375.885293][T11087] peak_usb 9-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels)
[ 2375.895481][T11087] peak_usb 9-1:0.0 can0: sending command failure: -22
[ 2375.902527][T11087] peak_usb 9-1:0.0 can0: sending command failure: -22
[ 2376.964248][T11087] peak_usb 9-1:0.0: probe with driver peak_usb failed with error -22
[ 2376.976059][T11087] usb 9-1: USB disconnect, device number 12
[ 2377.483139][T28878] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6127'.
[ 2377.782308][T27355] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[ 2377.836078][T28873] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2378.036097][T28871] page: refcount:3 mapcount:1 mapping:ffff8880223aa448 index:0x0 pfn:0x52c00
[ 2378.046536][T28871] memcg:ffff888028e86000
[ 2378.050806][T28871] aops:shmem_aops ino:888 dentry name(?):"dev/zero"
[ 2378.057483][T28871] flags: 0xfff6000002002d(locked|referenced|uptodate|lru|swapbacked|node=0|zone=1|lastcpupid=0x7ff)
[ 2378.068313][T28871] raw: 00fff6000002002d ffffea000146ccc8 ffffea00014b7fc8 ffff8880223aa448
[ 2378.076896][T28871] raw: 0000000000000000 0000000000000000 0000000300000000 ffff888028e86000
[ 2378.085476][T28871] page dumped because: VM_BUG_ON_FOLIO(folio_mapped(folio))
[ 2378.092756][T28871] page_owner tracks the page as allocated
[ 2378.100190][T28871] page last allocated via order 0, migratetype Movable, gfp_mask 0x1c24ca(GFP_TRANSHUGE), pid 28883, tgid 28864 (syz.4.6123), ts 2377890453787, free_ts 2352901781548
[ 2378.116679][T28871]  post_alloc_hook+0x1f4/0x240
[ 2378.121439][T28871]  get_page_from_freelist+0x365c/0x37a0
[ 2378.126978][T28871]  __alloc_frozen_pages_noprof+0x292/0x710
[ 2378.132777][T28871]  __folio_alloc_noprof+0x18/0x120
[ 2378.137894][T28871]  alloc_charge_folio+0x4a3/0xad0
[ 2378.142906][T28871]  hpage_collapse_scan_file+0xf08/0x5230
[ 2378.148529][T28871]  madvise_collapse+0x5f1/0xd00
[ 2378.153368][T28871]  madvise_do_behavior+0x1305/0x3b90
[ 2378.158652][T28871]  __x64_sys_madvise+0x11b/0x140
[ 2378.163586][T28871]  do_syscall_64+0xf3/0x230
[ 2378.168090][T28871]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2378.173978][T28871] page last free pid 28596 tgid 28595 stack trace:
[ 2378.180473][T28871]  free_unref_folios+0xe40/0x18b0
[ 2378.185493][T28871]  folios_put_refs+0x76c/0x860
[ 2378.190241][T28871]  free_pages_and_swap_cache+0x5c3/0x690
[ 2378.195870][T28871]  tlb_flush_mmu+0x3a5/0x680
[ 2378.200445][T28871]  unmap_page_range+0x3c85/0x4350
[ 2378.205459][T28871]  unmap_vmas+0x3cc/0x5f0
[ 2378.209779][T28871]  exit_mmap+0x283/0xd40
[ 2378.214008][T28871]  __mmput+0x115/0x420
[ 2378.218089][T28871]  exit_mm+0x220/0x310
[ 2378.222153][T28871]  do_exit+0x9ad/0x28e0
[ 2378.226298][T28871]  do_group_exit+0x207/0x2c0
[ 2378.230881][T28871]  get_signal+0x168c/0x1720
[ 2378.235375][T28871]  arch_do_signal_or_restart+0x96/0x860
[ 2378.240913][T28871]  syscall_exit_to_user_mode+0xce/0x340
[ 2378.246447][T28871]  do_syscall_64+0x100/0x230
[ 2378.251025][T28871]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2378.256981][T28871] ------------[ cut here ]------------
[ 2378.262422][T28871] kernel BUG at mm/filemap.c:155!
[ 2378.267460][T28871] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI
[ 2378.274386][T28871] CPU: 1 UID: 0 PID: 28871 Comm: syz.4.6123 Not tainted 6.14.0-rc3-next-20250218-syzkaller #0
[ 2378.284631][T28871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[ 2378.294671][T28871] RIP: 0010:filemap_unaccount_folio+0x73d/0x7d0
[ 2378.300905][T28871] Code: b4 c7 ff 48 89 df 48 c7 c6 e0 ed 33 8c e8 3b 74 12 00 90 0f 0b e8 43 b4 c7 ff 48 89 df 48 c7 c6 c0 ec 33 8c e8 24 74 12 00 90 <0f> 0b e8 2c b4 c7 ff 48 89 df 48 c7 c6 e0 ed 33 8c e8 0d 74 12 00
[ 2378.320497][T28871] RSP: 0018:ffffc9000564f010 EFLAGS: 00010046
[ 2378.326552][T28871] RAX: 90838f0411e7e700 RBX: ffffea00014b0000 RCX: ffffc9000564ec03
[ 2378.334511][T28871] RDX: 0000000000000004 RSI: ffffffff8c2aaf60 RDI: ffffffff8c8156e0
[ 2378.342467][T28871] RBP: 0000000000000000 R08: ffffffff903da477 R09: 1ffffffff207b48e
[ 2378.350424][T28871] R10: dffffc0000000000 R11: fffffbfff207b48f R12: dffffc0000000000
[ 2378.358377][T28871] R13: 1ffffd4000296001 R14: ffff8880223aa448 R15: ffffea00014b0008
[ 2378.366340][T28871] FS:  00007f6d69d976c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[ 2378.375256][T28871] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2378.381821][T28871] CR2: 000000110c2ecba6 CR3: 000000004bde0000 CR4: 00000000003526f0
[ 2378.389779][T28871] Call Trace:
[ 2378.393041][T28871]  <TASK>
[ 2378.395954][T28871]  ? __die_body+0x5f/0xb0
[ 2378.400271][T28871]  ? die+0x9e/0xc0
[ 2378.404002][T28871]  ? do_trap+0x15a/0x3a0
[ 2378.408230][T28871]  ? filemap_unaccount_folio+0x73d/0x7d0
[ 2378.413849][T28871]  ? do_error_trap+0x1dc/0x2c0
[ 2378.418597][T28871]  ? filemap_unaccount_folio+0x73d/0x7d0
[ 2378.424213][T28871]  ? __pfx_do_error_trap+0x10/0x10
[ 2378.429310][T28871]  ? report_bug+0x3cd/0x500
[ 2378.433801][T28871]  ? filemap_unaccount_folio+0x73d/0x7d0
[ 2378.439419][T28871]  ? handle_invalid_op+0x34/0x40
[ 2378.444380][T28871]  ? filemap_unaccount_folio+0x73d/0x7d0
[ 2378.450019][T28871]  ? exc_invalid_op+0x38/0x50
[ 2378.454685][T28871]  ? asm_exc_invalid_op+0x1a/0x20
[ 2378.459700][T28871]  ? filemap_unaccount_folio+0x73d/0x7d0
[ 2378.465321][T28871]  __filemap_remove_folio+0xc7/0x670
[ 2378.470597][T28871]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 2378.475955][T28871]  ? __pfx___filemap_remove_folio+0x10/0x10
[ 2378.481838][T28871]  ? _raw_spin_lock_irq+0xdf/0x120
[ 2378.486932][T28871]  ? __pfx__raw_spin_lock_irq+0x10/0x10
[ 2378.492463][T28871]  filemap_remove_folio+0xe1/0x1f0
[ 2378.497556][T28871]  truncate_inode_folio+0x5d/0x70
[ 2378.502564][T28871]  shmem_undo_range+0x1035/0x1820
[ 2378.507572][T28871]  ? __pfx_shmem_undo_range+0x10/0x10
[ 2378.512931][T28871]  ? unmap_mapping_range+0xf8/0x290
[ 2378.518121][T28871]  ? unmap_mapping_range+0xf8/0x290
[ 2378.523354][T28871]  ? __pfx_unmap_mapping_range+0x10/0x10
[ 2378.528994][T28871]  shmem_fallocate+0x431/0xf20
[ 2378.533761][T28871]  ? __pfx_shmem_fallocate+0x10/0x10
[ 2378.539169][T28871]  ? __pfx_shmem_fallocate+0x10/0x10
[ 2378.544457][T28871]  vfs_fallocate+0x623/0x7a0
[ 2378.549107][T28871]  ? __pfx_vfs_fallocate+0x10/0x10
[ 2378.554222][T28871]  madvise_do_behavior+0x1ec6/0x3b90
[ 2378.559495][T28871]  ? __pfx_lock_release+0x10/0x10
[ 2378.564520][T28871]  ? schedule+0x155/0x320
[ 2378.568835][T28871]  ? futex_wait_queue+0x27/0x1e0
[ 2378.573775][T28871]  ? __pfx_madvise_do_behavior+0x10/0x10
[ 2378.579408][T28871]  ? __futex_wait+0x287/0x320
[ 2378.584089][T28871]  ? mark_lock+0x9a/0x360
[ 2378.588402][T28871]  ? __pfx___futex_wait+0x10/0x10
[ 2378.593432][T28871]  ? __lock_acquire+0x1397/0x2100
[ 2378.598466][T28871]  ? __pfx_lock_acquire+0x10/0x10
[ 2378.603477][T28871]  ? __pfx___might_resched+0x10/0x10
[ 2378.608748][T28871]  ? do_futex+0x33b/0x560
[ 2378.613188][T28871]  ? down_read+0x82b/0xa40
[ 2378.617633][T28871]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 2378.623961][T28871]  __x64_sys_madvise+0x11b/0x140
[ 2378.628885][T28871]  do_syscall_64+0xf3/0x230
[ 2378.633383][T28871]  ? clear_bhb_loop+0x45/0xa0
[ 2378.638049][T28871]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2378.643930][T28871] RIP: 0033:0x7f6d68f8cde9
[ 2378.648340][T28871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2378.667946][T28871] RSP: 002b:00007f6d69d97038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c
[ 2378.676356][T28871] RAX: ffffffffffffffda RBX: 00007f6d691a6080 RCX: 00007f6d68f8cde9
[ 2378.684322][T28871] RDX: 0000000000000009 RSI: 0000000000600000 RDI: 0000400000000000
[ 2378.692321][T28871] RBP: 00007f6d6900e2a0 R08: 0000000000000000 R09: 0000000000000000
[ 2378.700287][T28871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2378.708242][T28871] R13: 0000000000000000 R14: 00007f6d691a6080 R15: 00007ffe74208f98
[ 2378.716217][T28871]  </TASK>
[ 2378.719240][T28871] Modules linked in:
[ 2378.723143][T28871] ---[ end trace 0000000000000000 ]---
[ 2378.728607][T28871] RIP: 0010:filemap_unaccount_folio+0x73d/0x7d0
[ 2378.734844][T28871] Code: b4 c7 ff 48 89 df 48 c7 c6 e0 ed 33 8c e8 3b 74 12 00 90 0f 0b e8 43 b4 c7 ff 48 89 df 48 c7 c6 c0 ec 33 8c e8 24 74 12 00 90 <0f> 0b e8 2c b4 c7 ff 48 89 df 48 c7 c6 e0 ed 33 8c e8 0d 74 12 00
[ 2378.754446][T28871] RSP: 0018:ffffc9000564f010 EFLAGS: 00010046
[ 2378.760498][T28871] RAX: 90838f0411e7e700 RBX: ffffea00014b0000 RCX: ffffc9000564ec03
[ 2378.768457][T28871] RDX: 0000000000000004 RSI: ffffffff8c2aaf60 RDI: ffffffff8c8156e0
[ 2378.776411][T28871] RBP: 0000000000000000 R08: ffffffff903da477 R09: 1ffffffff207b48e
[ 2378.784377][T28871] R10: dffffc0000000000 R11: fffffbfff207b48f R12: dffffc0000000000
[ 2378.792348][T28871] R13: 1ffffd4000296001 R14: ffff8880223aa448 R15: ffffea00014b0008
[ 2378.800303][T28871] FS:  00007f6d69d976c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[ 2378.809221][T28871] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2378.815794][T28871] CR2: 000000110c2ecba6 CR3: 000000004bde0000 CR4: 00000000003526f0
[ 2378.823781][T28871] Kernel panic - not syncing: Fatal exception
[ 2378.830093][T28871] Kernel Offset: disabled
[ 2378.834412][T28871] Rebooting in 86400 seconds..