last executing test programs:

6m48.588837547s ago: executing program 32 (id=921):
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x6)
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x1808014, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/716, @ANYRESHEX, @ANYRESDEC, @ANYRES16], 0x5, 0x5593, &(0x7f00000061c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000180), 0xfea7)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)

4m58.134117647s ago: executing program 33 (id=1335):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x15, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000040000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)=':', 0x1, 0x4fed0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
r2 = timerfd_create(0x0, 0x800)
r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x5edc, 0x1000, 0x1, 0x40000333}, &(0x7f0000000000)=<r4=>0x0, &(0x7f00000001c0)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0x0, 0x0})
io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000), 0xd)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000100)={0x14, r6, 0x1, 0x70fd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4)

4m57.142057936s ago: executing program 5 (id=1344):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00'}, 0x10)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff0000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff2000/0x4000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0x8, 0xd1})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x5c8c, 0x0, @empty, @mcast1, 0x80, 0x0, 0x0, 0x20000000}})
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

4m56.324155313s ago: executing program 5 (id=1346):
syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x80, &(0x7f0000000600)=ANY=[], 0x1, 0x150e, &(0x7f0000003680)="$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")
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000300)=ANY=[@ANYBLOB='nobarrier,gid=', @ANYRESHEX=0x0, @ANYBLOB="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", @ANYRESDEC, @ANYRESDEC], 0x44, 0x705, &(0x7f0000000480)="$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")
r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042)
close(0x3)
r2 = dup(r1)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000040), 0x1000041, &(0x7f0000000bc0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="2c63616368653d6e6f56652c00ba20edd398914c0211d56f5fbb26b2fb925c82d1f5bacbde580fb0bc5be2ddcce792011338296f8b1919a957fb2e854ab473f3a3e8a555f95a07872fd5811bbc63a5d77c4a4d18ea6e42a7732d8672e7a7aa12f4ddbd587ae26fb2a2f75c484f2f00c5563952fdbc449384fef67f563115f6b6fd505d93b779a6eeb3b00babc29a5271693a3e1c78949a258d760729ad547317b78a334863da72868731d9b4cd190862ae2fe6f06b96e4ebe64c8e1fc69e026247c4ee5ef29c6222c8111af88eb14d448cac8b0bb8"])
open(&(0x7f0000000340)='./file1\x00', 0x4000, 0x0)
r4 = syz_io_uring_setup(0x3b, &(0x7f0000000180)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=<r5=>0x0, &(0x7f0000000100)=<r6=>0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff})
syz_io_uring_submit(r5, r6, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0, 0xe3d08660d3cd4e84})
r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r8, 0x303, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x10000000000)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000d40)={'batadv_slave_1\x00', <r9=>0x0})
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000e40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x44, r8, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xb}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}]}, 0x44}, 0x1, 0x0, 0x0, 0x8008}, 0xc004)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000040)={'filter\x00', 0x104, 0x4, 0x3e0, 0x1f8, 0x0, 0x110, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110, 0x0, {0x0, 0xd2030000}}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local, @remote, @multicast1}}}, {{@arp={@local, @local, 0x0, 0x0, 0x0, 0x0, {@mac}, {@mac=@dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'nicvf0\x00', 'vlan0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430)
io_uring_enter(r4, 0x92, 0x0, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e21, 0x0, @rand_addr=' \x01\x00'}, {0xa, 0x0, 0xfffffffe, @remote, 0x5}}}, 0x48)
syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x103c43, 0x1ce)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r10, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x0, 0x8], 0x0, 0x20000080ffff, 0x2, 0x1}}, 0x40)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})

4m51.289114401s ago: executing program 5 (id=1351):
r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_DISASSOCIATE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)={0x28, r3, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="132c8f706032"}]}, 0x28}, 0x1, 0x0, 0x0, 0x200080c0}, 0x44004)
fstat(r1, &(0x7f0000000440))

4m49.571270016s ago: executing program 5 (id=1353):
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0xa0, 0x6a, 0x80, 0x10, 0x54c, 0x6c3, 0x8b57, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xd7, 0x78, 0x6c, 0x0, [], [{{0x9, 0x5, 0xd}}, {{0x9, 0x5, 0x6}}]}}]}}]}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x20, r4, 0x300, 0xfffffffd, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0x1b, 0x1a, @device_b}]}, 0x20}}, 0x0)
sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r2, 0x4, 0x870bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24002804}, 0x20000000)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006a001b0c2bbd7000fbccdf2502000000ebffffff070001"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x24000804)

4m46.946697915s ago: executing program 5 (id=1355):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0x1, 0x559a, &(0x7f0000005680)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0xeaff)
write$binfmt_aout(r0, 0x0, 0x29f)
ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={{r0}, 0x0, 0x0, 0x100000})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x0)
sendfile(r1, r1, 0x0, 0x80000000)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000100))
setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0)
ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, &(0x7f0000000000)=0x11)
openat(0xffffffffffffff9c, 0x0, 0x103a43, 0x4)

4m37.275134549s ago: executing program 5 (id=1359):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000980)={@remote}, 0x14)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
syz_open_procfs(0xffffffffffffffff, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000005c0)='..&-^\x00', &(0x7f0000000640)='/selinux/status\x00', 0x0)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$uinput_user_dev(r4, &(0x7f0000000380)={'syz0\x00', {0xff, 0x7, 0x7fff, 0x8d5}, 0x2, [0x10000, 0xeba, 0x7, 0x9, 0x8, 0x1, 0x69, 0x7ff, 0x54, 0x7fffdfff, 0x2, 0xc, 0x8, 0x9, 0x9, 0xfffffff7, 0x7, 0x40000, 0x842, 0x2, 0x2002, 0x0, 0x3ff, 0x0, 0x1, 0xda6, 0x3, 0xa7, 0x4, 0x2, 0x9, 0x5, 0x8200, 0x1, 0x1, 0x1, 0x7, 0x80009, 0x1000f, 0xb, 0x9, 0x0, 0x2, 0xb50, 0x0, 0x800, 0x3, 0xf, 0x1007, 0xfffffffe, 0xfffffffa, 0x8, 0x24, 0x7fff, 0x8, 0x1, 0x200, 0x2000000, 0x0, 0x7f, 0x964e, 0x7fff, 0x149, 0x1], [0x266ac, 0xfffffff9, 0x4, 0x3, 0x8e, 0x7, 0x7ffffffd, 0x9, 0x4, 0x85, 0x0, 0x7, 0x6, 0x8001, 0x6, 0x8, 0x2, 0x5, 0xb, 0x7ff, 0x7ff, 0x5, 0x9, 0xc00, 0x89, 0x7ff, 0x0, 0x1, 0x10000, 0x9, 0x9, 0x4d26, 0x10000, 0x8, 0x1, 0x7, 0xfffffffc, 0x4, 0x0, 0x9, 0x1, 0x5, 0xe66, 0x2, 0x3, 0x81, 0x4b, 0x7d, 0x6, 0xb, 0x4, 0x49, 0x1, 0x8d1, 0x100008fd, 0x1, 0x0, 0x8e, 0xe7, 0x4, 0x401, 0xade, 0x7f, 0x9], [0x8396, 0x7, 0x10000, 0x9, 0x8000, 0x1, 0x9, 0xe, 0x8, 0xff, 0x0, 0x400, 0x1000, 0x8000009, 0x6e, 0x8001, 0x7, 0x3, 0x6, 0x5, 0x2, 0x4, 0x2, 0x3, 0x0, 0x2, 0x8001, 0xc, 0x5, 0xb0f, 0x1e, 0x1, 0x800, 0x80008, 0x9, 0x3, 0x200, 0xda7, 0x4, 0xe, 0x464b, 0x86, 0x1, 0x7ff, 0x1ff, 0x6, 0x7f, 0x2, 0x7fffffff, 0xffffffff, 0x4, 0xffff, 0xd5d, 0x40, 0xffffff4e, 0x9, 0x2, 0x40, 0x3, 0x0, 0x1fc1, 0x9, 0x1, 0x6], [0x10, 0x7, 0x9, 0x2, 0xa5e, 0xfe, 0xff, 0x6, 0x80000000, 0x0, 0xe, 0x2, 0x104, 0x7, 0x5, 0x0, 0x2, 0x7ff, 0xdaa, 0x4, 0x3, 0x102, 0x42, 0xcc, 0x1fffc000, 0x4000400, 0xffffffff, 0xffbffffc, 0x40, 0x80000000, 0x4, 0x7, 0x6, 0x4, 0x1000, 0x0, 0x9, 0x1, 0x0, 0xa, 0x8ac1, 0x3, 0x1, 0x80000002, 0x80040002, 0xff, 0x6, 0x3, 0xfffff801, 0xffefffff, 0x37d, 0xfffffff8, 0xd, 0x7, 0xd, 0xd76, 0x6eaf, 0x0, 0x8, 0x5e02, 0x2, 0x3, 0x200005, 0x400]}, 0x45c)

4m20.118745465s ago: executing program 34 (id=1359):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000980)={@remote}, 0x14)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
syz_open_procfs(0xffffffffffffffff, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000005c0)='..&-^\x00', &(0x7f0000000640)='/selinux/status\x00', 0x0)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$uinput_user_dev(r4, &(0x7f0000000380)={'syz0\x00', {0xff, 0x7, 0x7fff, 0x8d5}, 0x2, [0x10000, 0xeba, 0x7, 0x9, 0x8, 0x1, 0x69, 0x7ff, 0x54, 0x7fffdfff, 0x2, 0xc, 0x8, 0x9, 0x9, 0xfffffff7, 0x7, 0x40000, 0x842, 0x2, 0x2002, 0x0, 0x3ff, 0x0, 0x1, 0xda6, 0x3, 0xa7, 0x4, 0x2, 0x9, 0x5, 0x8200, 0x1, 0x1, 0x1, 0x7, 0x80009, 0x1000f, 0xb, 0x9, 0x0, 0x2, 0xb50, 0x0, 0x800, 0x3, 0xf, 0x1007, 0xfffffffe, 0xfffffffa, 0x8, 0x24, 0x7fff, 0x8, 0x1, 0x200, 0x2000000, 0x0, 0x7f, 0x964e, 0x7fff, 0x149, 0x1], [0x266ac, 0xfffffff9, 0x4, 0x3, 0x8e, 0x7, 0x7ffffffd, 0x9, 0x4, 0x85, 0x0, 0x7, 0x6, 0x8001, 0x6, 0x8, 0x2, 0x5, 0xb, 0x7ff, 0x7ff, 0x5, 0x9, 0xc00, 0x89, 0x7ff, 0x0, 0x1, 0x10000, 0x9, 0x9, 0x4d26, 0x10000, 0x8, 0x1, 0x7, 0xfffffffc, 0x4, 0x0, 0x9, 0x1, 0x5, 0xe66, 0x2, 0x3, 0x81, 0x4b, 0x7d, 0x6, 0xb, 0x4, 0x49, 0x1, 0x8d1, 0x100008fd, 0x1, 0x0, 0x8e, 0xe7, 0x4, 0x401, 0xade, 0x7f, 0x9], [0x8396, 0x7, 0x10000, 0x9, 0x8000, 0x1, 0x9, 0xe, 0x8, 0xff, 0x0, 0x400, 0x1000, 0x8000009, 0x6e, 0x8001, 0x7, 0x3, 0x6, 0x5, 0x2, 0x4, 0x2, 0x3, 0x0, 0x2, 0x8001, 0xc, 0x5, 0xb0f, 0x1e, 0x1, 0x800, 0x80008, 0x9, 0x3, 0x200, 0xda7, 0x4, 0xe, 0x464b, 0x86, 0x1, 0x7ff, 0x1ff, 0x6, 0x7f, 0x2, 0x7fffffff, 0xffffffff, 0x4, 0xffff, 0xd5d, 0x40, 0xffffff4e, 0x9, 0x2, 0x40, 0x3, 0x0, 0x1fc1, 0x9, 0x1, 0x6], [0x10, 0x7, 0x9, 0x2, 0xa5e, 0xfe, 0xff, 0x6, 0x80000000, 0x0, 0xe, 0x2, 0x104, 0x7, 0x5, 0x0, 0x2, 0x7ff, 0xdaa, 0x4, 0x3, 0x102, 0x42, 0xcc, 0x1fffc000, 0x4000400, 0xffffffff, 0xffbffffc, 0x40, 0x80000000, 0x4, 0x7, 0x6, 0x4, 0x1000, 0x0, 0x9, 0x1, 0x0, 0xa, 0x8ac1, 0x3, 0x1, 0x80000002, 0x80040002, 0xff, 0x6, 0x3, 0xfffff801, 0xffefffff, 0x37d, 0xfffffff8, 0xd, 0x7, 0xd, 0xd76, 0x6eaf, 0x0, 0x8, 0x5e02, 0x2, 0x3, 0x200005, 0x400]}, 0x45c)

2m56.8186929s ago: executing program 6 (id=1504):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8954, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x80, 0x0, 0xe, 0x7fff7ffc}, {0x4, 0x3, 0x0, 0x1}, {0x1ffc, 0xba, 0x7f, 0x497d5cd3}]})
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42a301)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000300)=<r2=>0x0)
r3 = inotify_init()
readv(r3, &(0x7f0000000140)=[{&(0x7f0000000340)=""/263, 0x107}], 0x1)
timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x1)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000001c0)={0x80, 0x1, 'client1\x00', 0xffffffff00000007, "d62e980d9e9f39cf", "20e460999f426180a8c27a30ea181179631de8f794d20352346f8f00", 0x7f})
connect$inet(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x40408c1)
connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)

2m47.270828832s ago: executing program 6 (id=1520):
socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000100)='mountstats\x00')
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$netlink(0x10, 0x3, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet6(0xa, 0x2, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
pipe2(&(0x7f0000000040), 0x800)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES64, @ANYRES32=r1], 0x20)

2m44.457095323s ago: executing program 6 (id=1524):
pipe2(&(0x7f0000000000), 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x43, 0x1}}}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbb, 0x0, 0xffff, 0x2, 0x2, '\x00', 0x654})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

2m43.39865041s ago: executing program 6 (id=1528):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000340)={0x28, 0x4, r1, 0x0, &(0x7f0000000040)="05", 0x1, 0xfffffffd})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000180)={0x28, 0x4, r1, 0x0, &(0x7f0000ae0000/0x2000)=nil, 0x2000, 0xffffffff80000001})
ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x5, r1, 0x0, &(0x7f0000000a40)="7f", 0x1, 0x4})
ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x2, r1, 0x0, &(0x7f0000000300)="ae", 0x1, 0x2})
ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000001c0)={0x28, 0x6, r1, 0x0, &(0x7f0000000380)="87", 0x1, 0x7})

2m40.948446238s ago: executing program 6 (id=1530):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000000010000fd0000000900000001"], 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x4, r0}, 0x38)

2m40.397226427s ago: executing program 6 (id=1534):
r0 = socket$kcm(0x10, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
inotify_init1(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0)
migrate_pages(0x0, 0x1, &(0x7f0000000100)=0xdf, &(0x7f0000000140))
socket$nl_route(0x10, 0x3, 0x0)
add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0)
r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
sendfile(r5, r4, &(0x7f00000000c0)=0x58, 0x5)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[<r6=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000})
ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000180)={r7})
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0)

2m23.868465563s ago: executing program 35 (id=1534):
r0 = socket$kcm(0x10, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
inotify_init1(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0)
migrate_pages(0x0, 0x1, &(0x7f0000000100)=0xdf, &(0x7f0000000140))
socket$nl_route(0x10, 0x3, 0x0)
add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0)
r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
sendfile(r5, r4, &(0x7f00000000c0)=0x58, 0x5)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[<r6=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000})
ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000180)={r7})
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0)

2m22.964000735s ago: executing program 0 (id=1567):
pipe2(&(0x7f0000000540)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x84880)
socket$nl_generic(0x10, 0x3, 0x10)
clock_gettime(0x0, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x42, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, 0x0)

2m21.898913304s ago: executing program 0 (id=1570):
r0 = syz_io_uring_setup(0x2085, &(0x7f0000000380)={0x0, 0x86f7, 0x10000, 0x3, 0x188}, &(0x7f0000002000)=<r1=>0x0, &(0x7f0000000440)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, 0xffffffffffffffff, 0xffffffffffffff83, &(0x7f0000000080)=@generic={0x10, "3d3a18a22c4110dd113ea36a771b2387d6d34ab327fb45ade7e19a5df2001ec2de1712fbab2dfdedd41742112fe297738d54a0d89c238c9bc1777e8a1434133e8679f4e2bdb151a168d8652f12c76f67691174a3447065438e3c5bacd46a26b069561d060bd70adfebade40861260d847aeb04dad6c9cfe1e95902e39ff5"}, 0x0, 0x0, 0x1})
io_uring_enter(r0, 0x48e9, 0xf2bb, 0x2, 0x0, 0x0)

2m21.283505277s ago: executing program 0 (id=1572):
ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0x501c4814, &(0x7f00000000c0)={0x2, 0xffffffff, 0x0, 0x8, 0x20000, 0xfffffffc})
r0 = add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000540)="bc3009bb66682c9d4233b0cc", 0xc, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, 0x0, 0x0, 0x0)

2m17.846212772s ago: executing program 0 (id=1575):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x40046721, &(0x7f0000000180)={r2})
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r4 = syz_open_dev$usbfs(0x0, 0x201, 0xa401)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000000f40)=""/4089, 0x0, 0xff9, 0x1}, 0x28)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_int(r5, 0x6, 0x17, &(0x7f0000000880)=0x3, 0x4)
socket$inet6(0xa, 0x3, 0x8000000003c)
r6 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0)

2m14.440340619s ago: executing program 7 (id=1579):
close(0xffffffffffffffff)
socket$inet_sctp(0x2, 0x5, 0x84)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000010000000f000000080034000401000008000300", @ANYRES32=r2], 0x2c}}, 0x80)

2m13.977688223s ago: executing program 0 (id=1581):
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xc)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700))
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)

2m13.815921694s ago: executing program 7 (id=1582):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
socket$nl_audit(0x10, 0x3, 0x9)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0x1000}, 0x2a, 0xfffffffffffffff9)
r2 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
keyctl$update(0x2, r2, &(0x7f0000000000)='r', 0x1)

2m12.746709961s ago: executing program 0 (id=1585):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8010)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$media(&(0x7f00000000c0), 0x2, 0x40)
ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x61ffed7dad33c171, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000240), 0x0, 0x0, 0x0})
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r3], 0x4c}}, 0x40000)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000000c0)="b9da06ce171c2e7cc2a25d58", 0xc)
r5 = accept4(r3, 0x0, 0x0, 0x80000)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc))
ioctl$sock_SIOCSPGRP(r5, 0x8902, &(0x7f0000000000))
sendmsg$alg(r5, 0x0, 0x0)
recvmsg$can_raw(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)=""/90, 0x5a}], 0x1}, 0x40010022)
ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8923, &(0x7f0000000040)={'dummy0\x00', 0x12f})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r6 = open(&(0x7f0000000100)='./bus\x00', 0x3c3140, 0xa2)
syz_emit_ethernet(0x12, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="060000000400000000100000200b000000000000", @ANYRESHEX=r6, @ANYRES8=r6, @ANYRES32], 0x48)

2m11.033337265s ago: executing program 7 (id=1587):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvfrom$inet(r0, 0x0, 0x0, 0x700, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000ef9000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil)
mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil)
mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil)
mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil)
mremap(&(0x7f0000b89000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00006e6000/0x3000)=nil)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='maps\x00')
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0)
read$FUSE(r1, &(0x7f0000005200)={0x2020}, 0x2020)

2m9.609592298s ago: executing program 7 (id=1589):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x2, @pix={0x6, 0x8, 0x31435641, 0x9, 0x5, 0x88, 0x3, 0x10000, 0x0, 0x6, 0x2, 0x74c3924ecb75b6cd}})

2m8.75089245s ago: executing program 7 (id=1592):
close(0x3)

2m7.919704971s ago: executing program 7 (id=1593):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KIOCSOUND(r0, 0x4b2f, 0x2)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)={0xa, 0x73, 0x5, 0x1000000, 0xb, "88bd91aa28528000000000007500000400"})
write$UHID_INPUT(r0, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006)

1m57.516682602s ago: executing program 36 (id=1585):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8010)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$media(&(0x7f00000000c0), 0x2, 0x40)
ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x61ffed7dad33c171, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000240), 0x0, 0x0, 0x0})
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r3], 0x4c}}, 0x40000)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000000c0)="b9da06ce171c2e7cc2a25d58", 0xc)
r5 = accept4(r3, 0x0, 0x0, 0x80000)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc))
ioctl$sock_SIOCSPGRP(r5, 0x8902, &(0x7f0000000000))
sendmsg$alg(r5, 0x0, 0x0)
recvmsg$can_raw(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)=""/90, 0x5a}], 0x1}, 0x40010022)
ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8923, &(0x7f0000000040)={'dummy0\x00', 0x12f})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r6 = open(&(0x7f0000000100)='./bus\x00', 0x3c3140, 0xa2)
syz_emit_ethernet(0x12, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="060000000400000000100000200b000000000000", @ANYRESHEX=r6, @ANYRES8=r6, @ANYRES32], 0x48)

1m51.20641042s ago: executing program 37 (id=1593):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KIOCSOUND(r0, 0x4b2f, 0x2)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)={0xa, 0x73, 0x5, 0x1000000, 0xb, "88bd91aa28528000000000007500000400"})
write$UHID_INPUT(r0, &(0x7f0000001980)={0x9, {"a2e3ad214fc752f91b5b09094bf70e0dd038e7ff7fc6e5539b324c078b089b3438076d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b32310d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e01000000138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12d3099dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f6dc7bcbf2a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509301815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827466cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d951061ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153bdf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033095563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db87195358bfee2916580dacae008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2df086dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36ffffffff00000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817b97c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000f4ff000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006)

1m47.156686325s ago: executing program 4 (id=1607):
socket$inet6(0xa, 0x1, 0x6)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x2102, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$igmp6(0xa, 0x3, 0x2)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='net/dev\x00')
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x1000006, 0x4}, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioprio_set$pid(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0xf, &(0x7f0000000400)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x6048090}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="05000000010000008e000000c9e7000001", @ANYBLOB='\x00'/20, @ANYBLOB='\x00'/10], 0x48)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x50, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}]}, 0x50}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0)

1m41.939310419s ago: executing program 4 (id=1610):
epoll_create1(0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
sendfile(r2, r2, 0x0, 0x2000fb)
preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0)

1m40.190842153s ago: executing program 4 (id=1612):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
sendmsg$can_bcm(r0, 0x0, 0x4004844)
close(r0)

1m39.718336302s ago: executing program 4 (id=1614):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000280)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
socket$inet_sctp(0x2, 0x5, 0x84)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00", @ANYRES16=r0, @ANYRES32=r2], 0x44}}, 0x0)

1m39.110760998s ago: executing program 4 (id=1615):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
socket$inet6(0xa, 0x80002, 0x88)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0xfffffffe, '\x00', 0x0, 0x0}, 0x50)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000001940)={0x0, 0x0, 0x0}, 0x20000000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x1)

1m30.529391069s ago: executing program 4 (id=1616):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = fsopen(&(0x7f0000000140)='sysfs\x00', 0x0)
fsmount(r0, 0x0, 0x5)

1m14.442303211s ago: executing program 38 (id=1616):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = fsopen(&(0x7f0000000140)='sysfs\x00', 0x0)
fsmount(r0, 0x0, 0x5)

17.012886508s ago: executing program 2 (id=1667):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
unshare(0x80)
cachestat(r3, 0x0, 0x0, 0x0)
ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0)
ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000000))
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)

9.708895417s ago: executing program 1 (id=1676):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0})
r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000040)={0x20002, <r2=>r0, 0x1})
r3 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000fc0)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000180)={r4})

9.694712785s ago: executing program 9 (id=1599):
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0])
mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r3, 0x40049366, 0x0)

9.313300165s ago: executing program 1 (id=1679):
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

9.226198379s ago: executing program 9 (id=1680):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
close(0x3)

8.955394884s ago: executing program 8 (id=1681):
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x255})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x2})

8.091746639s ago: executing program 9 (id=1683):
socket$alg(0x26, 0x5, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$cuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$tipc(0x1e, 0x5, 0x0)
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r1, &(0x7f0000000000), 0xd)

5.933223169s ago: executing program 8 (id=1685):
socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000100)='mountstats\x00')
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$netlink(0x10, 0x3, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet6(0xa, 0x2, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
pipe2(&(0x7f0000000040), 0x800)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES64, @ANYRES32=r1], 0x20)

5.928183539s ago: executing program 1 (id=1686):
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x23c, &(0x7f0000000740)={0x0, 0x1c2c, 0x10100, 0x2, 0x315, 0x0, r1}, &(0x7f0000000500)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0x609}, 0x1})
io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
read$FUSE(r5, &(0x7f00000007c0)={0x2020}, 0x2020)

5.713451344s ago: executing program 9 (id=1687):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000180)=@assoc_value, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050)

5.603340117s ago: executing program 3 (id=1688):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = fsopen(&(0x7f0000000140)='sysfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x5)
bind$alg(r1, 0x0, 0x0)

5.519413977s ago: executing program 2 (id=1689):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0})
r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000040)={0x20002, <r2=>r0, 0x1})
r3 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000fc0)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000180)={r4})

5.298745114s ago: executing program 8 (id=1690):
syz_emit_ethernet(0x7a, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "76db40", 0x44, 0x2f, 0x0, @dev={0xfe, 0x80, '\x00', 0x21}, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10}, 0x2, {0x8, 0x1}}}}}}}}}, 0x0)

5.228243526s ago: executing program 3 (id=1691):
socket$igmp6(0xa, 0x3, 0x2)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
listen(0xffffffffffffffff, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4)
syz_emit_ethernet(0x4a, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
capset(0x0, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3})
keyctl$join(0x1, 0x0)
msgctl$IPC_SET(0x0, 0x1, 0x0)
request_key(&(0x7f0000001000)='dns_resolver\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f0000001080)='\x00', 0x0)

5.156610932s ago: executing program 9 (id=1692):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x800)
recvmmsg$unix(r1, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0)

4.935471088s ago: executing program 2 (id=1693):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
close(0x3)

4.396006235s ago: executing program 8 (id=1694):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@enum64={0x4, 0x0, 0x0, 0x13, 0x1, 0x1}]}, {0x0, [0x61, 0x5f, 0x2e, 0x2e]}}, &(0x7f0000000f40)=""/4089, 0x2a, 0xff9, 0x1}, 0x28)

3.947887773s ago: executing program 3 (id=1695):
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0500000003f01f00040000007f00000001000000", @ANYRES32, @ANYBLOB="000089551a", @ANYBLOB], 0x48)

3.59681374s ago: executing program 1 (id=1696):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
getpid()
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket(0x840000000002, 0x3, 0xff)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0xb8, 0x19, 0x1, 0x3000000, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x5e}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}}, 0xb8}}, 0x0)

3.28237825s ago: executing program 2 (id=1697):
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2.372239306s ago: executing program 8 (id=1698):
r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0xc)
r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0)
open_by_handle_at(r2, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x408100)

1.630757765s ago: executing program 3 (id=1699):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x20, 0x4)
setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000000c0)=r0, 0x4)
close(r1)

1.055381249s ago: executing program 1 (id=1700):
socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000100)='mountstats\x00')
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$netlink(0x10, 0x3, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet6(0xa, 0x2, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES64, @ANYRES32=r1], 0x20)

678.273003ms ago: executing program 2 (id=1701):
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe15, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff4b, 0x0}}, 0x10)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, 0x0, 0x0}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20)

606.129155ms ago: executing program 8 (id=1702):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0xfffffffc, @remote, 0x9}], 0x1c)
recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x40000102)
setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8)

479.656479ms ago: executing program 3 (id=1703):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0})
r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000040)={0x20002, <r2=>r0, 0x1})
r3 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000fc0)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000180)={r4})

464.369005ms ago: executing program 1 (id=1704):
r0 = socket$netlink(0x10, 0x3, 0x6)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000009780)=ANY=[@ANYBLOB="140000001000010000000000000000000700000afc8a00000c0a01"], 0x8b44}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
sendmsg$key(r1, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c02000100000000000040000280ffffff05000500000000000a"], 0x80}}, 0x0)

178.654268ms ago: executing program 2 (id=1705):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$sndtimer(0xffffff9c, 0x0, 0xa402)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f00000001c0))
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000040)=ANY=[], 0x14)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6)
syz_open_dev$sndmidi(0x0, 0x2, 0x141102)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000000)=0x2, 0x4)
setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000080), 0x4)
sendmsg$802154_dgram(r3, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, @short={0x2, 0x1, 0xaaa0}}, 0x14, &(0x7f0000001880)={0x0}}, 0x0)
ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000000)=0x1000)
mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, 0xffffffffffffffff, 0x0)
ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f00000000c0)=0x5)

0s ago: executing program 3 (id=1706):
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x42101, 0x0)
ioctl$SOUND_MIXER_INFO(r0, 0x805c4d65, 0x0)

kernel console output (not intermixed with test programs):

:0000.001B: unknown main item tag 0x0
[  605.704798][   T24] hid-generic 0000:0000:0000.001B: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  605.783406][T10368] loop1: detected capacity change from 0 to 1024
[  605.831892][T10368] 9pnet_fd: Insufficient options for proto=fd
[  605.861707][   T30] audit: type=1800 audit(2000000199.800:148): pid=10368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1330" name="file1" dev="loop1" ino=20 res=0 errno=0
[  605.898257][T10359] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.1326: Allocating blocks 497-513 which overlap fs metadata
[  605.962270][T10375] loop5: detected capacity change from 0 to 256
[  606.040519][T10375] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  606.051778][T10375] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[  606.101426][T10359] EXT4-fs (loop2): pa ffff8881259ae5b0: logic 256, phys. 385, len 8
[  606.109946][T10359] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1
[  606.204669][T10374] loop2: detected capacity change from 1024 to 64
[  606.218830][   T24] usb 2-1: new high-speed USB device number 54 using dummy_hcd
[  606.225815][T10375] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x640de592, utbl_chksum : 0xe619d30d)
[  606.259730][T10375] exFAT-fs (loop5): failed to load alloc-bitmap
[  606.261583][T10374]  loop2: [CUMANA/ADFS] p1 [ADFS] p1
[  606.266471][T10375] exFAT-fs (loop5): failed to recognize exfat type
[  606.279166][T10374] loop2: partition table partially beyond EOD, truncated
[  606.290885][T10374] loop2: p1 size 4294967295 extends beyond EOD, truncated
[  606.308793][ T8898] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0
[  606.321237][ T5860] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[  606.390403][ T8898] hid-generic 0000:0000:0000.001C: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  606.444519][   T24] usb 2-1: Using ep0 maxpacket: 16
[  606.460111][   T24] usb 2-1: config 0 has an invalid descriptor of length 248, skipping remainder of the config
[  606.470921][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  606.482287][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 4096, setting to 1024
[  606.497930][   T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024
[  606.509810][   T24] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  606.531866][T10375] loop5: detected capacity change from 0 to 1024
[  606.550086][ T5860] usb 5-1: device descriptor read/64, error -71
[  606.687170][   T24] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  606.703037][   T24] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  606.711251][   T24] usb 2-1: Manufacturer: syz
[  606.740752][T10375] 9pnet_fd: Insufficient options for proto=fd
[  606.803310][ T5860] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[  606.825824][   T24] usb 2-1: config 0 descriptor??
[  606.874921][ T5808] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 16: comm syz-executor: path /239/file1: bad entry in directory: inode out of bounds - offset=0, inode=201326592, rec_len=256, size=1024 fake=0
[  606.948976][   T30] audit: type=1800 audit(2000000200.900:149): pid=10381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1332" name="file1" dev="loop5" ino=20 res=0 errno=0
[  606.992881][ T5860] usb 5-1: device descriptor read/64, error -71
[  607.039879][T10368] hfsplus: invalid catalog entry type in lookup
[  607.114886][ T5860] usb usb5-port1: attempt power cycle
[  607.208955][T10380] loop0: detected capacity change from 0 to 32768
[  607.237808][T10380] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1333 (10380)
[  607.276909][T10380] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  607.285960][ T5808] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  607.287448][T10380] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[  607.308651][T10380] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  607.333584][ T5925] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  607.401886][T10362] kmmpd-loop2: attempt to access beyond end of device
[  607.401886][T10362] loop2: rw=14337, sector=128, nr_sectors = 2 limit=64
[  607.420086][T10362] Buffer I/O error on dev loop2, logical block 64, lost sync page write
[  607.497052][ T5860] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[  607.517339][ T5925] usb 6-1: Using ep0 maxpacket: 16
[  607.536939][T10380] BTRFS info (device loop0): rebuilding free space tree
[  607.544993][ T5925] usb 6-1: config 0 has an invalid descriptor of length 248, skipping remainder of the config
[  607.545142][ T5925] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  607.567157][ T5925] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 4096, setting to 1024
[  607.578596][ T5925] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024
[  607.588870][ T5925] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  607.598356][T10380] BTRFS info (device loop0): disabling free space tree
[  607.606319][   T24] rc_core: IR keymap rc-hauppauge not found
[  607.616163][T10380] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  607.616300][T10380] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  607.643986][   T24] Registered IR keymap rc-empty
[  607.655454][T10380] BTRFS info (device loop0): checking UUID tree
[  607.678683][T10380] BTRFS info (device loop0): setting nodatasum
[  607.685938][T10380] BTRFS info (device loop0): setting nodatacow
[  607.692284][T10380] BTRFS info (device loop0): enabling ssd optimizations
[  607.699582][T10380] BTRFS info (device loop0): using spread ssd allocation scheme
[  607.707580][T10380] BTRFS info (device loop0): disabling tree log
[  607.714114][T10380] BTRFS info (device loop0): enabling disk space caching
[  607.723791][T10380] BTRFS info (device loop0): force clearing of disk cache
[  607.735604][   T24] mceusb 2-1:0.0: Error: mce write urb status = -71
[  607.754674][ T5860] usb 5-1: device descriptor read/8, error -71
[  607.764199][   T24] mceusb 2-1:0.0: Error: mce write urb status = -71
[  607.798244][ T3894] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  607.824994][   T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  607.840794][   T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input26
[  607.870907][ T5925] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  607.880969][ T5925] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  607.889365][ T5925] usb 6-1: Manufacturer: syz
[  608.004050][ T9961] hfsplus: b-tree write err: -5, ino 4
[  608.005598][ T5925] usb 6-1: config 0 descriptor??
[  608.022156][   T24] mceusb 2-1:0.0: Error: mce write urb status = -71
[  608.065037][   T24] mceusb 2-1:0.0: Error: mce write urb status = -71
[  608.093438][ T5860] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[  608.129762][   T24] mceusb 2-1:0.0: Error: mce write urb status = -71
[  608.145439][ T3894] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  608.166073][   T24] mceusb 2-1:0.0: Error: mce write urb status = -71
[  608.174784][ T5860] usb 5-1: device descriptor read/8, error -71
[  608.222062][T10375] hfsplus: invalid catalog entry type in lookup
[  608.234604][   T24] mceusb 2-1:0.0: Error: mce write urb status = -71
[  608.289403][ T5860] usb usb5-port1: unable to enumerate USB device
[  608.311002][   T24] mceusb 2-1:0.0: Error: mce write urb status = -71
[  608.352044][   T24] mceusb 2-1:0.0: Error: mce write urb status = -71
[  608.359348][ T3894] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  608.391632][   T24] mceusb 2-1:0.0: Error: mce write urb status = -71
[  608.406693][ T5804] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  608.443759][   T24] mceusb 2-1:0.0: Error: mce write urb status = -71
[  608.473086][   T24] mceusb 2-1:0.0: Error: mce write urb status = -71
[  608.504043][   T24] mceusb 2-1:0.0: Registered  with mce emulator interface version 1
[  608.512361][   T24] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  608.616283][   T24] usb 2-1: USB disconnect, device number 54
[  608.728767][ T5925] rc_core: IR keymap rc-hauppauge not found
[  608.735977][ T5925] Registered IR keymap rc-empty
[  608.806430][ T5925] mceusb 6-1:0.0: Error: mce write urb status = -71
[  608.860627][ T5925] mceusb 6-1:0.0: Error: mce write urb status = -71
[  608.889231][ T5925] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc1
[  608.903637][ T5925] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc1/input27
[  609.064111][ T5925] mceusb 6-1:0.0: Error: mce write urb status = -71
[  609.079952][ T3894] bridge_slave_1: left allmulticast mode
[  609.086045][ T3894] bridge_slave_1: left promiscuous mode
[  609.092638][ T3894] bridge0: port 2(bridge_slave_1) entered disabled state
[  609.098800][ T5925] mceusb 6-1:0.0: Error: mce write urb status = -71
[  609.165323][ T5925] mceusb 6-1:0.0: Error: mce write urb status = -71
[  609.193053][ T3894] bridge_slave_0: left allmulticast mode
[  609.197946][ T5925] mceusb 6-1:0.0: Error: mce write urb status = -71
[  609.201155][ T3894] bridge_slave_0: left promiscuous mode
[  609.212057][ T3894] bridge0: port 1(bridge_slave_0) entered disabled state
[  609.243960][ T5925] mceusb 6-1:0.0: Error: mce write urb status = -71
[  609.309102][ T5925] mceusb 6-1:0.0: Error: mce write urb status = -71
[  609.363007][ T5925] mceusb 6-1:0.0: Error: mce write urb status = -71
[  609.393597][ T5925] mceusb 6-1:0.0: Error: mce write urb status = -71
[  609.397917][ T9961] hfsplus: b-tree write err: -5, ino 4
[  609.436148][ T5925] mceusb 6-1:0.0: Error: mce write urb status = -71
[  609.487532][ T5925] mceusb 6-1:0.0: Error: mce write urb status = -71
[  609.545189][ T5925] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  609.554795][ T5925] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  609.711757][ T5925] usb 6-1: USB disconnect, device number 12
[  610.253313][ T3894] bond0 (unregistering): left promiscuous mode
[  610.259705][ T3894] bond_slave_0: left promiscuous mode
[  610.266230][ T3894] bond_slave_1: left promiscuous mode
[  610.272579][ T3894] dummy0: left promiscuous mode
[  610.326607][ T3894] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  610.360082][ T3894] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  610.399577][ T3894] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  610.418808][ T3894] bond0 (unregistering): Released all slaves
[  610.858146][ T3894] batadv0: left promiscuous mode
[  610.899710][ T3894] hsr_slave_0: left promiscuous mode
[  610.979724][ T3894] hsr_slave_1: left promiscuous mode
[  610.997881][ T3894] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  611.005662][ T3894] batman_adv: batadv0: Removing interface: batadv_slave_0
[  611.055530][ T3894] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  611.063815][ T3894] batman_adv: batadv0: Removing interface: batadv_slave_1
[  611.130125][T10412] loop0: detected capacity change from 0 to 64
[  611.154663][ T3894] veth1_macvtap: left promiscuous mode
[  611.160594][ T3894] veth0_macvtap: left promiscuous mode
[  611.167143][ T3894] veth1_vlan: left promiscuous mode
[  611.674736][T10414] usb usb8: usbfs: process 10414 (syz.4.1342) did not claim interface 0 before use
[  611.890455][T10410] loop1: detected capacity change from 0 to 40427
[  611.979974][T10410] F2FS-fs (loop1): invalid crc value
[  612.272989][T10410] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  612.284158][T10410] F2FS-fs (loop1): Start checkpoint disabled!
[  612.480271][T10410] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0
[  612.514141][ T3894] team0 (unregistering): Port device team_slave_1 removed
[  612.568055][T10410] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  612.624882][ T3894] team0 (unregistering): Port device team_slave_0 removed
[  612.687911][T10425] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1340'.
[  612.983736][T10425] F2FS-fs (loop1): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled
[  613.159064][ T5810] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  613.168482][ T5810] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  613.177835][ T5810] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  613.227988][  T794] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[  613.263710][ T5810] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  613.317286][T10428] loop5: detected capacity change from 0 to 256
[  613.325319][ T5810] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  613.411159][T10428] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  613.422362][T10428] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[  613.502606][T10418] loop0: detected capacity change from 0 to 4096
[  613.535383][  T750] kworker/u8:7: attempt to access beyond end of device
[  613.535383][  T750] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  613.549983][  T750] CPU: 0 UID: 0 PID: 750 Comm: kworker/u8:7 Tainted: G             L      syzkaller #0 PREEMPT(none) 
[  613.550149][  T750] Tainted: [L]=SOFTLOCKUP
[  613.550197][  T750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  613.550297][  T750] Workqueue: writeback wb_workfn (flush-7:1)
[  613.550488][  T750] Call Trace:
[  613.550531][  T750]  <TASK>
[  613.550573][  T750]  __dump_stack+0x26/0x30
[  613.550711][  T750]  dump_stack_lvl+0x1df/0x270
[  613.550873][  T750]  dump_stack+0x1e/0x25
[  613.551010][  T750]  f2fs_handle_critical_error+0xa6f/0xc20
[  613.551228][  T750]  f2fs_stop_checkpoint+0x65/0x80
[  613.551414][  T750]  f2fs_write_end_io+0x101c/0x1bc0
[  613.551584][  T750]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  613.551714][  T750]  bio_endio+0xf96/0x10f0
[  613.551915][  T750]  submit_bio_noacct+0x2009/0x2930
[  613.552102][  T750]  submit_bio+0x57c/0x630
[  613.552248][  T750]  f2fs_submit_write_bio+0x92/0x250
[  613.552424][  T750]  __submit_merged_bio+0x16f/0x6a0
[  613.552603][  T750]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  613.552776][  T750]  __submit_merged_write_cond+0x458/0x9a0
[  613.552979][  T750]  f2fs_write_data_pages+0x4bb2/0x5480
[  613.553289][  T750]  ? kmsan_get_metadata+0xfb/0x160
[  613.553456][  T750]  ? kmsan_internal_set_shadow_origin+0x7a/0x110
[  613.553618][  T750]  ? kmsan_get_metadata+0xfb/0x160
[  613.553780][  T750]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  613.553964][  T750]  ? finish_task_switch+0x142/0x8c0
[  613.554142][  T750]  ? kmsan_get_metadata+0xfb/0x160
[  613.554304][  T750]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  613.554473][  T750]  ? kmsan_get_metadata+0xfb/0x160
[  613.554635][  T750]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  613.554803][  T750]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  613.555016][  T750]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  613.555199][  T750]  do_writepages+0x3f2/0x860
[  613.555331][  T750]  ? stack_depot_save_flags+0x35/0x790
[  613.555479][  T750]  ? kmsan_get_metadata+0xfb/0x160
[  613.555638][  T750]  ? kmsan_get_metadata+0xfb/0x160
[  613.555811][  T750]  __writeback_single_inode+0x101/0x1190
[  613.555973][  T750]  ? kmsan_get_metadata+0xfb/0x160
[  613.556140][  T750]  writeback_sb_inodes+0xb2d/0x1f10
[  613.556407][  T750]  wb_writeback+0x4ce/0xc00
[  613.556559][  T750]  ? queue_io+0x461/0x790
[  613.556699][  T750]  wb_workfn+0x397/0x1910
[  613.556880][  T750]  ? kmsan_get_metadata+0xfb/0x160
[  613.557074][  T750]  ? __pfx_wb_workfn+0x10/0x10
[  613.557240][  T750]  process_scheduled_works+0xb91/0x1d80
[  613.557481][  T750]  worker_thread+0xedf/0x1590
[  613.557647][  T750]  kthread+0xd5c/0xf00
[  613.557785][  T750]  ? __pfx_worker_thread+0x10/0x10
[  613.557947][  T750]  ? __pfx_kthread+0x10/0x10
[  613.558088][  T750]  ret_from_fork+0x208/0x710
[  613.558260][  T750]  ? __switch_to+0x53d/0x790
[  613.558410][  T750]  ? __pfx_kthread+0x10/0x10
[  613.558552][  T750]  ret_from_fork_asm+0x1a/0x30
[  613.558746][  T750]  </TASK>
[  613.802365][T10428] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x640de592, utbl_chksum : 0xe619d30d)
[  613.812519][  T750] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  613.865284][  T750] CPU: 0 UID: 0 PID: 750 Comm: kworker/u8:7 Tainted: G             L      syzkaller #0 PREEMPT(none) 
[  613.865443][  T750] Tainted: [L]=SOFTLOCKUP
[  613.865499][  T750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  613.865597][  T750] Workqueue: writeback wb_workfn (flush-7:1)
[  613.865801][  T750] Call Trace:
[  613.865849][  T750]  <TASK>
[  613.865901][  T750]  __dump_stack+0x26/0x30
[  613.866049][  T750]  dump_stack_lvl+0x1df/0x270
[  613.866204][  T750]  dump_stack+0x1e/0x25
[  613.866337][  T750]  f2fs_handle_critical_error+0xa6f/0xc20
[  613.866545][  T750]  f2fs_stop_checkpoint+0x65/0x80
[  613.866723][  T750]  f2fs_write_end_io+0x101c/0x1bc0
[  613.866883][  T750]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  613.867015][  T750]  bio_endio+0xf96/0x10f0
[  613.867200][  T750]  submit_bio_noacct+0x2009/0x2930
[  613.867373][  T750]  submit_bio+0x57c/0x630
[  613.867509][  T750]  f2fs_submit_write_bio+0x92/0x250
[  613.867677][  T750]  __submit_merged_bio+0x16f/0x6a0
[  613.867835][  T750]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  613.868061][  T750]  __submit_merged_write_cond+0x458/0x9a0
[  613.868247][  T750]  f2fs_write_data_pages+0x4bb2/0x5480
[  613.868535][  T750]  ? kmsan_get_metadata+0xfb/0x160
[  613.868694][  T750]  ? kmsan_internal_set_shadow_origin+0x7a/0x110
[  613.868847][  T750]  ? kmsan_get_metadata+0xfb/0x160
[  613.869000][  T750]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  613.869168][  T750]  ? finish_task_switch+0x142/0x8c0
[  613.869342][  T750]  ? kmsan_get_metadata+0xfb/0x160
[  613.869491][  T750]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  613.869657][  T750]  ? kmsan_get_metadata+0xfb/0x160
[  613.869814][  T750]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  613.869976][  T750]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  613.870152][  T750]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  613.870327][  T750]  do_writepages+0x3f2/0x860
[  613.870449][  T750]  ? stack_depot_save_flags+0x35/0x790
[  613.870593][  T750]  ? kmsan_get_metadata+0xfb/0x160
[  613.870749][  T750]  ? kmsan_get_metadata+0xfb/0x160
[  613.870924][  T750]  __writeback_single_inode+0x101/0x1190
[  613.871074][  T750]  ? kmsan_get_metadata+0xfb/0x160
[  613.871247][  T750]  writeback_sb_inodes+0xb2d/0x1f10
[  613.871520][  T750]  wb_writeback+0x4ce/0xc00
[  613.871663][  T750]  ? queue_io+0x461/0x790
[  613.871795][  T750]  wb_workfn+0x397/0x1910
[  613.871966][  T750]  ? kmsan_get_metadata+0xfb/0x160
[  613.872146][  T750]  ? __pfx_wb_workfn+0x10/0x10
[  613.872301][  T750]  process_scheduled_works+0xb91/0x1d80
[  613.872533][  T750]  worker_thread+0xedf/0x1590
[  613.872699][  T750]  kthread+0xd5c/0xf00
[  613.872824][  T750]  ? __pfx_worker_thread+0x10/0x10
[  613.872972][  T750]  ? __pfx_kthread+0x10/0x10
[  613.873104][  T750]  ret_from_fork+0x208/0x710
[  613.873265][  T750]  ? __switch_to+0x53d/0x790
[  613.873411][  T750]  ? __pfx_kthread+0x10/0x10
[  613.873555][  T750]  ret_from_fork_asm+0x1a/0x30
[  613.873739][  T750]  </TASK>
[  613.912202][T10428] exFAT-fs (loop5): failed to load alloc-bitmap
[  613.919478][  T750] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  613.920915][T10428] exFAT-fs (loop5): failed to recognize exfat type
[  613.926803][  T794] usb 5-1: Using ep0 maxpacket: 16
[  614.173686][ T5860] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  614.196972][ T5860] hid-generic 0000:0000:0000.001D: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  614.208003][  T794] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  614.229135][  T794] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  614.240626][  T794] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  614.265229][  T794] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  614.276893][  T794] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  614.286482][  T794] usb 5-1: Product: syz
[  614.290829][  T794] usb 5-1: Manufacturer: syz
[  614.295773][  T794] usb 5-1: SerialNumber: syz
[  614.321023][T10428] loop5: detected capacity change from 0 to 1024
[  614.715726][T10428] 9pnet_fd: Insufficient options for proto=fd
[  614.753477][   T30] audit: type=1800 audit(2000000208.700:150): pid=10428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1346" name="file1" dev="loop5" ino=20 res=0 errno=0
[  615.033668][T10429] chnl_net:caif_netlink_parms(): no params data found
[  615.037292][  T794] usb 5-1: USB disconnect, device number 52
[  615.054261][   T24] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  615.256171][   T24] usb 6-1: Using ep0 maxpacket: 16
[  615.272329][   T24] usb 6-1: config 0 has an invalid descriptor of length 248, skipping remainder of the config
[  615.284011][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  615.297777][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 4096, setting to 1024
[  615.310310][   T24] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024
[  615.320670][   T24] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  615.410336][   T24] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  615.419941][   T24] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  615.428390][   T24] usb 6-1: Manufacturer: syz
[  615.493261][ T5810] Bluetooth: hci2: command tx timeout
[  615.506218][   T24] usb 6-1: config 0 descriptor??
[  615.720245][T10428] hfsplus: invalid catalog entry type in lookup
[  616.032901][   T24] rc_core: IR keymap rc-hauppauge not found
[  616.039098][   T24] Registered IR keymap rc-empty
[  616.115440][   T24] mceusb 6-1:0.0: Error: mce write urb status = -71
[  616.178856][   T24] mceusb 6-1:0.0: Error: mce write urb status = -71
[  616.245201][   T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  616.259574][   T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input28
[  616.851692][T10439] loop4: detected capacity change from 0 to 40427
[  616.946047][T10439] F2FS-fs (loop4): invalid crc value
[  617.228441][T10439] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  617.280855][T10442] loop0: detected capacity change from 0 to 40427
[  617.285124][T10439] F2FS-fs (loop4): Start checkpoint disabled!
[  617.300587][T10439] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0
[  617.303772][T10442] F2FS-fs (loop0): invalid crc value
[  617.310347][T10439] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  617.526119][T10439] F2FS-fs (loop4): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled
[  617.541857][T10439] FAULT_INJECTION: forcing a failure.
[  617.541857][T10439] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  617.558797][T10439] CPU: 0 UID: 0 PID: 10439 Comm: syz.4.1348 Tainted: G             L      syzkaller #0 PREEMPT(none) 
[  617.558979][T10439] Tainted: [L]=SOFTLOCKUP
[  617.559030][T10439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  617.559112][T10439] Call Trace:
[  617.559162][T10439]  <TASK>
[  617.559213][T10439]  __dump_stack+0x26/0x30
[  617.559376][T10439]  dump_stack_lvl+0x1df/0x270
[  617.559539][T10439]  dump_stack+0x1e/0x25
[  617.559685][T10439]  should_fail_ex+0x7dc/0x8a0
[  617.559857][T10439]  should_fail+0x2a/0x40
[  617.560002][T10439]  should_fail_usercopy+0x2e/0x40
[  617.560162][T10439]  strncpy_from_user+0x38/0x4c0
[  617.560294][T10439]  ? kmsan_get_metadata+0xfb/0x160
[  617.560464][T10439]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  617.560640][T10439]  getname_flags+0x179/0xac0
[  617.560819][T10439]  do_sys_openat2+0xaa/0x430
[  617.561023][T10439]  __x64_sys_creat+0xe1/0x150
[  617.561162][T10439]  x64_sys_call+0x3cdb/0x3e70
[  617.561328][T10439]  do_syscall_64+0xd9/0xf80
[  617.561470][T10439]  ? clear_bhb_loop+0x40/0x90
[  617.561613][T10439]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  617.561757][T10439] RIP: 0033:0x7fd77e58f749
[  617.561860][T10439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  617.561979][T10439] RSP: 002b:00007fd77f41a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
[  617.562109][T10439] RAX: ffffffffffffffda RBX: 00007fd77e7e5fa0 RCX: 00007fd77e58f749
[  617.562229][T10439] RDX: 0000000000000000 RSI: 0000000000000182 RDI: 00002000000000c0
[  617.562317][T10439] RBP: 00007fd77f41a090 R08: 0000000000000000 R09: 0000000000000000
[  617.562404][T10439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  617.562487][T10439] R13: 00007fd77e7e6038 R14: 00007fd77e7e5fa0 R15: 00007ffd4c3433f8
[  617.562619][T10439]  </TASK>
[  617.573024][ T5810] Bluetooth: hci2: command tx timeout
[  617.777538][T10442] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  617.788134][T10442] F2FS-fs (loop0): Start checkpoint disabled!
[  617.796146][   T24] mceusb 6-1:0.0: Error: mce write urb status = -71
[  617.831983][   T24] mceusb 6-1:0.0: Error: mce write urb status = -71
[  617.841929][ T3894] hfsplus: b-tree write err: -5, ino 4
[  617.851176][T10442] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0
[  617.875034][   T24] mceusb 6-1:0.0: Error: mce write urb status = -71
[  617.882227][T10442] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  617.884789][   T59] kworker/u8:4: attempt to access beyond end of device
[  617.884789][   T59] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  617.904788][   T24] mceusb 6-1:0.0: Error: mce write urb status = -71
[  617.912524][   T59] CPU: 0 UID: 0 PID: 59 Comm: kworker/u8:4 Tainted: G             L      syzkaller #0 PREEMPT(none) 
[  617.912633][   T59] Tainted: [L]=SOFTLOCKUP
[  617.912681][   T59] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  617.912777][   T59] Workqueue: writeback wb_workfn (flush-7:4)
[  617.912978][   T59] Call Trace:
[  617.913029][   T59]  <TASK>
[  617.913080][   T59]  __dump_stack+0x26/0x30
[  617.913227][   T59]  dump_stack_lvl+0x1df/0x270
[  617.913390][   T59]  dump_stack+0x1e/0x25
[  617.913525][   T59]  f2fs_handle_critical_error+0xa6f/0xc20
[  617.913735][   T59]  f2fs_stop_checkpoint+0x65/0x80
[  617.913925][   T59]  f2fs_write_end_io+0x101c/0x1bc0
[  617.914099][   T59]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  617.914228][   T59]  bio_endio+0xf96/0x10f0
[  617.914423][   T59]  submit_bio_noacct+0x2009/0x2930
[  617.914635][   T59]  submit_bio+0x57c/0x630
[  617.914780][   T59]  f2fs_submit_write_bio+0x92/0x250
[  617.914963][   T59]  __submit_merged_bio+0x16f/0x6a0
[  617.915134][   T59]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  617.915315][   T59]  __submit_merged_write_cond+0x458/0x9a0
[  617.915508][   T59]  f2fs_write_data_pages+0x4bb2/0x5480
[  617.915833][   T59]  ? kmsan_internal_unpoison_memory+0x14/0x20
[  617.915997][   T59]  ? _raw_spin_unlock+0x30/0x50
[  617.916171][   T59]  ? __wb_update_bandwidth+0x12c3/0x15a0
[  617.916371][   T59]  ? stack_depot_init+0x171/0x1a0
[  617.916522][   T59]  ? kmsan_get_metadata+0xfb/0x160
[  617.916682][   T59]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  617.916855][   T59]  ? kmsan_get_metadata+0xfb/0x160
[  617.917020][   T59]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  617.917187][   T59]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  617.917365][   T59]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  617.917522][   T59]  do_writepages+0x3f2/0x860
[  617.917642][   T59]  ? stack_depot_save_flags+0x35/0x790
[  617.917771][   T59]  ? kmsan_get_metadata+0xfb/0x160
[  617.917934][   T59]  ? kmsan_get_metadata+0xfb/0x160
[  617.918111][   T59]  __writeback_single_inode+0x101/0x1190
[  617.918253][   T59]  ? kmsan_get_metadata+0xfb/0x160
[  617.918418][   T59]  writeback_sb_inodes+0xb2d/0x1f10
[  617.918680][   T59]  wb_writeback+0x4ce/0xc00
[  617.918826][   T59]  ? queue_io+0x461/0x790
[  617.918967][   T59]  wb_workfn+0x397/0x1910
[  617.919124][   T59]  ? kmsan_get_metadata+0xfb/0x160
[  617.919305][   T59]  ? __pfx_wb_workfn+0x10/0x10
[  617.919467][   T59]  process_scheduled_works+0xb91/0x1d80
[  617.919697][   T59]  worker_thread+0xedf/0x1590
[  617.919858][   T59]  kthread+0xd5c/0xf00
[  617.919982][   T59]  ? __pfx_worker_thread+0x10/0x10
[  617.920135][   T59]  ? __pfx_kthread+0x10/0x10
[  617.920266][   T59]  ret_from_fork+0x208/0x710
[  617.920431][   T59]  ? __switch_to+0x53d/0x790
[  617.920570][   T59]  ? __pfx_kthread+0x10/0x10
[  617.920711][   T59]  ret_from_fork_asm+0x1a/0x30
[  617.920903][   T59]  </TASK>
[  617.923770][   T24] mceusb 6-1:0.0: Error: mce write urb status = -71
[  617.932767][   T59] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  617.962485][   T24] mceusb 6-1:0.0: Error: mce write urb status = -71
[  618.477807][T10442] F2FS-fs (loop0): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled
[  618.540726][T10429] bridge0: port 1(bridge_slave_0) entered blocking state
[  618.549016][T10429] bridge0: port 1(bridge_slave_0) entered disabled state
[  618.556972][T10429] bridge_slave_0: entered allmulticast mode
[  618.566846][T10429] bridge_slave_0: entered promiscuous mode
[  618.714174][   T24] mceusb 6-1:0.0: Error: mce write urb status = -71
[  618.738730][T10429] bridge0: port 2(bridge_slave_1) entered blocking state
[  618.746945][T10429] bridge0: port 2(bridge_slave_1) entered disabled state
[  618.754847][T10429] bridge_slave_1: entered allmulticast mode
[  618.764220][T10429] bridge_slave_1: entered promiscuous mode
[  618.768116][   T24] mceusb 6-1:0.0: Error: mce write urb status = -71
[  618.804835][ T4069] kworker/u8:24: attempt to access beyond end of device
[  618.804835][ T4069] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  618.819837][ T4069] CPU: 1 UID: 0 PID: 4069 Comm: kworker/u8:24 Tainted: G             L      syzkaller #0 PREEMPT(none) 
[  618.820013][ T4069] Tainted: [L]=SOFTLOCKUP
[  618.820070][ T4069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  618.820175][ T4069] Workqueue: writeback wb_workfn (flush-7:0)
[  618.820385][ T4069] Call Trace:
[  618.820438][ T4069]  <TASK>
[  618.820489][ T4069]  __dump_stack+0x26/0x30
[  618.820643][ T4069]  dump_stack_lvl+0x1df/0x270
[  618.820812][ T4069]  dump_stack+0x1e/0x25
[  618.820953][ T4069]  f2fs_handle_critical_error+0xa6f/0xc20
[  618.821173][ T4069]  f2fs_stop_checkpoint+0x65/0x80
[  618.821360][ T4069]  f2fs_write_end_io+0x101c/0x1bc0
[  618.821535][ T4069]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  618.821667][ T4069]  bio_endio+0xf96/0x10f0
[  618.821867][ T4069]  submit_bio_noacct+0x2009/0x2930
[  618.822049][ T4069]  submit_bio+0x57c/0x630
[  618.822185][ T4069]  f2fs_submit_write_bio+0x92/0x250
[  618.822364][ T4069]  __submit_merged_bio+0x16f/0x6a0
[  618.822534][ T4069]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  618.822714][ T4069]  __submit_merged_write_cond+0x458/0x9a0
[  618.822916][ T4069]  f2fs_write_data_pages+0x4bb2/0x5480
[  618.823215][ T4069]  ? kmsan_get_metadata+0xfb/0x160
[  618.823372][ T4069]  ? kmsan_internal_set_shadow_origin+0x7a/0x110
[  618.823523][ T4069]  ? kmsan_get_metadata+0xfb/0x160
[  618.823688][ T4069]  ? kmsan_get_metadata+0xfb/0x160
[  618.823851][ T4069]  ? kmsan_internal_set_shadow_origin+0x7a/0x110
[  618.824010][ T4069]  ? kmsan_get_metadata+0xfb/0x160
[  618.824171][ T4069]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  618.824338][ T4069]  ? kmsan_get_metadata+0xfb/0x160
[  618.824500][ T4069]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  618.824667][ T4069]  ? kmsan_get_metadata+0xfb/0x160
[  618.824831][ T4069]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  618.824996][ T4069]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  618.825185][ T4069]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  618.825366][ T4069]  do_writepages+0x3f2/0x860
[  618.825497][ T4069]  ? stack_depot_save_flags+0x35/0x790
[  618.825647][ T4069]  ? kmsan_get_metadata+0xfb/0x160
[  618.825816][ T4069]  ? kmsan_get_metadata+0xfb/0x160
[  618.826001][ T4069]  __writeback_single_inode+0x101/0x1190
[  618.826151][ T4069]  ? kmsan_get_metadata+0xfb/0x160
[  618.826328][ T4069]  writeback_sb_inodes+0xb2d/0x1f10
[  618.826603][ T4069]  wb_writeback+0x4ce/0xc00
[  618.826756][ T4069]  ? queue_io+0x461/0x790
[  618.826905][ T4069]  wb_workfn+0x397/0x1910
[  618.827074][ T4069]  ? kmsan_get_metadata+0xfb/0x160
[  618.827261][ T4069]  ? __pfx_wb_workfn+0x10/0x10
[  618.827422][ T4069]  process_scheduled_works+0xb91/0x1d80
[  618.827651][ T4069]  worker_thread+0xedf/0x1590
[  618.827824][ T4069]  kthread+0xd5c/0xf00
[  618.827964][ T4069]  ? __pfx_worker_thread+0x10/0x10
[  618.828121][ T4069]  ? __pfx_kthread+0x10/0x10
[  618.828258][ T4069]  ret_from_fork+0x208/0x710
[  618.828427][ T4069]  ? __switch_to+0x53d/0x790
[  618.828579][ T4069]  ? __pfx_kthread+0x10/0x10
[  618.828722][ T4069]  ret_from_fork_asm+0x1a/0x30
[  618.828922][ T4069]  </TASK>
[  619.127007][ T4069] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  619.135749][ T4069] CPU: 1 UID: 0 PID: 4069 Comm: kworker/u8:24 Tainted: G             L      syzkaller #0 PREEMPT(none) 
[  619.135924][ T4069] Tainted: [L]=SOFTLOCKUP
[  619.135980][ T4069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  619.136083][ T4069] Workqueue: writeback wb_workfn (flush-7:0)
[  619.136289][ T4069] Call Trace:
[  619.136343][ T4069]  <TASK>
[  619.136393][ T4069]  __dump_stack+0x26/0x30
[  619.136546][ T4069]  dump_stack_lvl+0x1df/0x270
[  619.136712][ T4069]  dump_stack+0x1e/0x25
[  619.136860][ T4069]  f2fs_handle_critical_error+0xa6f/0xc20
[  619.137078][ T4069]  f2fs_stop_checkpoint+0x65/0x80
[  619.137261][ T4069]  f2fs_write_end_io+0x101c/0x1bc0
[  619.137437][ T4069]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  619.137569][ T4069]  bio_endio+0xf96/0x10f0
[  619.137761][ T4069]  submit_bio_noacct+0x2009/0x2930
[  619.137973][ T4069]  submit_bio+0x57c/0x630
[  619.138116][ T4069]  f2fs_submit_write_bio+0x92/0x250
[  619.138296][ T4069]  __submit_merged_bio+0x16f/0x6a0
[  619.138466][ T4069]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  619.138646][ T4069]  __submit_merged_write_cond+0x458/0x9a0
[  619.138848][ T4069]  f2fs_write_data_pages+0x4bb2/0x5480
[  619.139157][ T4069]  ? kmsan_get_metadata+0xfb/0x160
[  619.139323][ T4069]  ? kmsan_internal_set_shadow_origin+0x7a/0x110
[  619.139487][ T4069]  ? kmsan_get_metadata+0xfb/0x160
[  619.139654][ T4069]  ? kmsan_get_metadata+0xfb/0x160
[  619.139821][ T4069]  ? kmsan_internal_set_shadow_origin+0x7a/0x110
[  619.139984][ T4069]  ? kmsan_get_metadata+0xfb/0x160
[  619.140149][ T4069]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  619.140317][ T4069]  ? kmsan_get_metadata+0xfb/0x160
[  619.140482][ T4069]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  619.140643][ T4069]  ? kmsan_get_metadata+0xfb/0x160
[  619.140812][ T4069]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  619.140978][ T4069]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  619.141165][ T4069]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  619.141350][ T4069]  do_writepages+0x3f2/0x860
[  619.141478][ T4069]  ? stack_depot_save_flags+0x35/0x790
[  619.141629][ T4069]  ? kmsan_get_metadata+0xfb/0x160
[  619.141798][ T4069]  ? kmsan_get_metadata+0xfb/0x160
[  619.141984][ T4069]  __writeback_single_inode+0x101/0x1190
[  619.142136][ T4069]  ? kmsan_get_metadata+0xfb/0x160
[  619.142315][ T4069]  writeback_sb_inodes+0xb2d/0x1f10
[  619.142594][ T4069]  wb_writeback+0x4ce/0xc00
[  619.142740][ T4069]  ? queue_io+0x461/0x790
[  619.142883][ T4069]  wb_workfn+0x397/0x1910
[  619.143048][ T4069]  ? kmsan_get_metadata+0xfb/0x160
[  619.143236][ T4069]  ? __pfx_wb_workfn+0x10/0x10
[  619.143406][ T4069]  process_scheduled_works+0xb91/0x1d80
[  619.143646][ T4069]  worker_thread+0xedf/0x1590
[  619.143819][ T4069]  kthread+0xd5c/0xf00
[  619.143955][ T4069]  ? __pfx_worker_thread+0x10/0x10
[  619.144112][ T4069]  ? __pfx_kthread+0x10/0x10
[  619.144247][ T4069]  ret_from_fork+0x208/0x710
[  619.144418][ T4069]  ? __switch_to+0x53d/0x790
[  619.144568][ T4069]  ? __pfx_kthread+0x10/0x10
[  619.144711][ T4069]  ret_from_fork_asm+0x1a/0x30
[  619.144908][ T4069]  </TASK>
[  619.448071][ T4069] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  619.465570][   T24] mceusb 6-1:0.0: Error: mce write urb status = -71
[  619.488074][   T24] mceusb 6-1:0.0: Error: mce write urb status = -71
[  619.517283][   T24] mceusb 6-1:0.0: Registered  with mce emulator interface version 1
[  619.525655][   T24] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  619.548212][   T24] usb 6-1: USB disconnect, device number 13
[  619.825726][T10429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  619.879526][ T5810] Bluetooth: hci2: command tx timeout
[  619.917191][T10429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  620.088416][T10429] team0: Port device team_slave_0 added
[  620.119692][T10429] team0: Port device team_slave_1 added
[  620.342296][T10429] batman_adv: batadv0: Adding interface: batadv_slave_0
[  620.349787][T10429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  620.353356][   T24] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  620.377794][T10429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  620.468555][T10429] batman_adv: batadv0: Adding interface: batadv_slave_1
[  620.475986][T10429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  620.502355][T10429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  620.629172][   T24] usb 6-1: Using ep0 maxpacket: 16
[  620.660552][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[  620.670844][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[  620.778997][   T24] usb 6-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=8b.57
[  620.788522][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  620.796980][   T24] usb 6-1: Product: syz
[  620.801317][   T24] usb 6-1: Manufacturer: syz
[  620.806258][   T24] usb 6-1: SerialNumber: syz
[  620.858870][   T24] usb 6-1: config 0 descriptor??
[  620.887051][   T24] port100 6-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint
[  620.891247][T10429] hsr_slave_0: entered promiscuous mode
[  620.905050][T10429] hsr_slave_1: entered promiscuous mode
[  620.913644][T10429] debugfs: 'hsr0' already exists in 'hsr'
[  620.919536][T10429] Cannot create hsr debugfs directory
[  621.007577][T10450] loop1: detected capacity change from 0 to 32768
[  621.040119][T10450] ocfs2: Unknown parameter 'c§_erency'
[  621.172208][T10455] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1350'.
[  621.273324][T10453] netlink: 'syz.5.1353': attribute type 1 has an invalid length.
[  621.319486][   T24] usb 6-1: USB disconnect, device number 14
[  621.894380][ T5810] Bluetooth: hci2: command tx timeout
[  621.935600][T10429] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  621.964426][   T24] usb 5-1: new full-speed USB device number 53 using dummy_hcd
[  621.978556][T10429] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  622.003918][T10429] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  622.040407][T10429] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  622.130983][   T24] usb 5-1: unable to get BOS descriptor or descriptor too short
[  622.148921][   T24] usb 5-1: not running at top speed; connect to a high speed hub
[  622.183291][   T24] usb 5-1: config 5 has an invalid interface number: 215 but max is 0
[  622.191793][   T24] usb 5-1: config 5 has no interface number 0
[  622.198414][   T24] usb 5-1: config 5 interface 215 altsetting 3 endpoint 0xF has invalid maxpacket 512, setting to 64
[  622.209656][   T24] usb 5-1: config 5 interface 215 has no altsetting 0
[  622.292218][   T24] usb 5-1: New USB device found, idVendor=1163, idProduct=0100, bcdDevice=dc.ba
[  622.301970][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  622.310323][   T24] usb 5-1: Product: syz
[  622.314771][   T24] usb 5-1: Manufacturer: syz
[  622.319523][   T24] usb 5-1: SerialNumber: syz
[  622.426206][T10462] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  622.745293][T10462] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1354'.
[  622.755440][T10462] ref_tracker: memory allocation failure, unreliable refcount tracker.
[  622.874954][T10465] loop5: detected capacity change from 0 to 32768
[  622.885324][T10465] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1355 (10465)
[  622.908060][T10462] bond0: (slave bond_slave_1): Releasing backup interface
[  622.974641][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  623.282867][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  623.384253][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  623.482768][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  623.493351][    T0] NOHZ tick-stop error: local softirq work is pending, handler #14a!!!
[  623.592766][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  623.622775][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  623.693039][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  623.712771][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  631.363988][   T24] cypress_m8 5-1:5.215: DeLorme Earthmate USB converter detected
[  631.430674][T10465] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  631.441250][T10465] BTRFS info (device loop5): using blake2b (blake2b-256-lib) checksum algorithm
[  631.478658][   T24] usb 5-1: DeLorme Earthmate USB converter now attached to ttyUSB0
[  631.488608][T10465] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR
[  631.489445][T10465] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR
[  631.500868][T10465] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR
[  631.510841][T10465] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR
[  631.521990][T10465] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR
[  631.531733][T10465] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR
[  631.542069][T10465] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR
[  631.581701][T10465] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR
[  631.592144][T10465] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[  631.603119][T10465] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[  631.635982][T10465] BTRFS error (device loop5): open_ctree failed: -12
[  631.981498][  T794] usb 5-1: USB disconnect, device number 53
[  632.056079][  T794] earthmate ttyUSB0: DeLorme Earthmate USB converter now disconnected from ttyUSB0
[  632.067245][  T794] cypress_m8 5-1:5.215: device disconnected
[  632.254567][T10429] 8021q: adding VLAN 0 to HW filter on device bond0
[  632.405766][T10429] 8021q: adding VLAN 0 to HW filter on device team0
[  632.500086][  T750] bridge0: port 1(bridge_slave_0) entered blocking state
[  632.507718][  T750] bridge0: port 1(bridge_slave_0) entered forwarding state
[  632.695769][  T750] bridge0: port 2(bridge_slave_1) entered blocking state
[  632.703368][  T750] bridge0: port 2(bridge_slave_1) entered forwarding state
[  632.961629][T10429] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  632.972549][T10429] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  633.355100][ T5810] Bluetooth: hci4: command 0x0406 tx timeout
[  636.049688][T10510] xt_NFQUEUE: number of queues (51632) out of range (got 109621)
[  636.266894][T10429] 8021q: adding VLAN 0 to HW filter on device batadv0
[  644.023560][T10429] veth0_vlan: entered promiscuous mode
[  644.097972][T10541] loop9: detected capacity change from 0 to 7
[  644.108624][T10541] Dev loop9: unable to read RDB block 7
[  644.114654][T10541]  loop9: AHDI p3 p4
[  644.118867][T10541] loop9: partition table partially beyond EOD, truncated
[  644.126542][T10541] loop9: p3 size 4227858431 extends beyond EOD, truncated
[  644.142055][T10429] veth1_vlan: entered promiscuous mode
[  644.511531][T10429] veth0_macvtap: entered promiscuous mode
[  644.649610][T10429] veth1_macvtap: entered promiscuous mode
[  644.714343][T10429] batman_adv: batadv0: Interface activated: batadv_slave_0
[  644.762524][T10429] batman_adv: batadv0: Interface activated: batadv_slave_1
[  644.811945][ T3986] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  644.883056][ T3894] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  644.914041][ T4426] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  644.971290][ T4426] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  645.160090][T10548] kvm: pic: non byte read
[  645.185224][T10548] kvm: pic: single mode not supported
[  645.185317][T10548] kvm: pic: level sensitive irq not supported
[  645.245001][T10548] kvm: pic: non byte read
[  645.291781][T10548] kvm: pic: non byte read
[  645.323264][T10548] kvm: pic: single mode not supported
[  645.323556][T10548] kvm: pic: non byte read
[  645.485151][T10548] kvm: pic: non byte read
[  645.494812][T10548] kvm: pic: non byte read
[  645.511538][T10548] kvm: pic: single mode not supported
[  645.511730][T10548] kvm: pic: level sensitive irq not supported
[  645.564049][T10548] kvm: pic: non byte read
[  645.630917][T10548] kvm: pic: non byte read
[  645.661890][T10548] kvm: pic: single mode not supported
[  645.662457][T10548] kvm: pic: non byte read
[  645.738494][T10548] kvm: pic: single mode not supported
[  645.738795][T10548] kvm: pic: non byte read
[  649.666748][ T5860] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[  649.837606][ T5860] usb 1-1: Using ep0 maxpacket: 8
[  649.853679][ T5860] usb 1-1: unable to get BOS descriptor or descriptor too short
[  649.885228][ T5860] usb 1-1: config 6 has an invalid interface number: 41 but max is 1
[  649.885353][ T5860] usb 1-1: config 6 has an invalid interface number: 6 but max is 1
[  649.885479][ T5860] usb 1-1: config 6 has no interface number 0
[  649.885572][ T5860] usb 1-1: config 6 has no interface number 1
[  649.885776][ T5860] usb 1-1: config 6 interface 41 has no altsetting 0
[  649.885892][ T5860] usb 1-1: config 6 interface 6 has no altsetting 0
[  649.924497][   T24] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[  649.988311][ T5860] usb 1-1: New USB device found, idVendor=19d2, idProduct=0078, bcdDevice=61.be
[  649.988463][ T5860] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  649.988584][ T5860] usb 1-1: Product: syz
[  649.988673][ T5860] usb 1-1: Manufacturer: syz
[  649.988769][ T5860] usb 1-1: SerialNumber: syz
[  650.692437][ T5860] smsusb:smsusb_probe: board id=15, interface number 41
[  650.727486][ T5860] smsusb:smsusb_probe: board id=15, interface number 6
[  650.727716][ T5860] smsusb:smsusb_probe: Device initialized with return code -19
[  652.694964][   T24] usb 5-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65
[  652.695119][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  652.695247][   T24] usb 5-1: Product: syz
[  652.695346][   T24] usb 5-1: Manufacturer: syz
[  652.695449][   T24] usb 5-1: SerialNumber: syz
[  652.700454][   T24] usb 5-1: config 0 descriptor??
[  653.416239][   T24] usb 5-1: ignoring: probably an ADSL modem
[  653.611400][ T5810] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  653.615001][ T5810] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  653.625408][ T5860] usb 1-1: USB disconnect, device number 49
[  653.632547][ T5810] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  653.648828][ T5810] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  653.655077][ T5810] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  654.788184][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  654.788448][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  655.737179][ T5810] Bluetooth: hci5: command tx timeout
[  655.815854][   T24] cxacru 5-1:0.0: usbatm_usb_probe: bind failed: -19!
[  656.455284][   T24] usb 5-1: USB disconnect, device number 54
[  657.219705][T10578] chnl_net:caif_netlink_parms(): no params data found
[  658.048583][T10470] Bluetooth: hci5: command tx timeout
[  659.595615][ T8898] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[  660.133651][ T5810] Bluetooth: hci5: command tx timeout
[  660.142599][ T8898] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  660.162341][ T8898] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  660.172958][ T8898] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  660.186713][ T8898] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  660.200786][ T8898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  660.421262][ T8898] usb 1-1: config 0 descriptor??
[  661.226472][ T8898] plantronics 0003:047F:FFFF.001E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  661.697860][T10625] macsec2: entered allmulticast mode
[  661.704124][T10625] macvlan1: entered allmulticast mode
[  661.709812][T10625] veth1_vlan: entered allmulticast mode
[  661.841817][T10578] bridge0: port 1(bridge_slave_0) entered blocking state
[  661.849952][T10578] bridge0: port 1(bridge_slave_0) entered disabled state
[  661.858883][T10578] bridge_slave_0: entered allmulticast mode
[  661.870670][T10578] bridge_slave_0: entered promiscuous mode
[  662.213169][ T5810] Bluetooth: hci5: command tx timeout
[  662.333153][T10578] bridge0: port 2(bridge_slave_1) entered blocking state
[  662.340856][T10578] bridge0: port 2(bridge_slave_1) entered disabled state
[  662.353742][T10578] bridge_slave_1: entered allmulticast mode
[  662.365748][T10578] bridge_slave_1: entered promiscuous mode
[  662.965089][ T3894] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  663.311871][ T3894] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  663.546022][T10578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  663.557622][ T8898] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[  663.630276][ T3894] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  663.693825][T10578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  663.802439][ T3894] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  663.826472][ T8898] usb 5-1: Using ep0 maxpacket: 16
[  663.836702][   T11] usb 1-1: reset high-speed USB device number 50 using dummy_hcd
[  663.905067][ T8898] usb 5-1: config 0 has an invalid interface number: 41 but max is 0
[  663.913780][ T8898] usb 5-1: config 0 has no interface number 0
[  663.920236][ T8898] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  663.930617][ T8898] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  663.943206][ T8898] usb 5-1: config 0 interface 41 has no altsetting 0
[  664.112873][ T8898] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a
[  664.122213][ T8898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  664.130885][ T8898] usb 5-1: Product: syz
[  664.135529][ T8898] usb 5-1: Manufacturer: syz
[  664.143990][ T8898] usb 5-1: SerialNumber: syz
[  664.278903][ T8898] usb 5-1: config 0 descriptor??
[  664.289158][T10632] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  664.306204][T10632] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  664.435493][T10578] team0: Port device team_slave_0 added
[  664.483201][T10578] team0: Port device team_slave_1 added
[  664.495079][ T4031] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  664.503545][ T4031] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  664.715898][T10632] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  664.726462][T10632] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  664.925265][  T794] usb 1-1: USB disconnect, device number 50
[  665.045604][T10578] batman_adv: batadv0: Adding interface: batadv_slave_0
[  665.053475][T10578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  665.083114][T10578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  665.119038][ T4042] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  665.127268][ T4042] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  665.128459][T10578] batman_adv: batadv0: Adding interface: batadv_slave_1
[  665.142372][T10578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  665.159610][T10636] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1397'.
[  665.172303][T10578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  665.185040][ T8898] Error reading MAC address
[  665.190232][ T8898] sr9700 5-1:0.41: probe with driver sr9700 failed with error -71
[  665.230528][ T8898] usb 5-1: USB disconnect, device number 55
[  665.338304][ T3894] bridge_slave_1: left allmulticast mode
[  665.345377][ T3894] bridge_slave_1: left promiscuous mode
[  665.352072][ T3894] bridge0: port 2(bridge_slave_1) entered disabled state
[  665.384700][ T3894] bridge_slave_0: left allmulticast mode
[  665.390549][ T3894] bridge_slave_0: left promiscuous mode
[  665.397604][ T3894] bridge0: port 1(bridge_slave_0) entered disabled state
[  665.872215][ T3894] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  665.917574][ T5925] usb 1-1: new low-speed USB device number 51 using dummy_hcd
[  665.930354][ T3894] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  665.946772][ T3894] bond0 (unregistering): Released all slaves
[  666.100489][ T5925] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  666.111204][ T5925] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  666.120466][ T5925] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8
[  666.133226][ T5925] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  666.143895][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  666.224881][ T3894] IPVS: stopping backup sync thread 10327 ...
[  666.250232][T10639] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  666.266102][T10578] hsr_slave_0: entered promiscuous mode
[  666.276803][T10578] hsr_slave_1: entered promiscuous mode
[  666.290328][T10578] debugfs: 'hsr0' already exists in 'hsr'
[  666.297776][T10578] Cannot create hsr debugfs directory
[  666.306390][ T5925] hub 1-1:1.0: bad descriptor, ignoring hub
[  666.312506][ T5925] hub 1-1:1.0: probe with driver hub failed with error -5
[  666.321807][ T5925] cdc_wdm 1-1:1.0: skipping garbage
[  666.327319][ T5925] cdc_wdm 1-1:1.0: skipping garbage
[  666.341943][ T5925] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[  666.348570][ T5925] cdc_wdm 1-1:1.0: Unknown control protocol
[  666.646904][ T5925] usb 1-1: USB disconnect, device number 51
[  667.889755][ T3894] hsr_slave_0: left promiscuous mode
[  667.988760][ T3894] hsr_slave_1: left promiscuous mode
[  667.997049][ T3894] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  668.004899][ T3894] batman_adv: batadv0: Removing interface: batadv_slave_0
[  668.291977][ T3894] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  668.300031][ T3894] batman_adv: batadv0: Removing interface: batadv_slave_1
[  668.574219][ T3894] veth1_macvtap: left promiscuous mode
[  668.580152][ T3894] veth0_macvtap: left promiscuous mode
[  668.586303][ T3894] veth1_vlan: left promiscuous mode
[  668.593852][ T3894] veth0_vlan: left promiscuous mode
[  670.120040][T10663] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1405'.
[  670.129482][T10663] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1405'.
[  670.358808][ T3894] team_slave_1 (unregistering): left promiscuous mode
[  670.366058][ T3894] team_slave_1 (unregistering): left allmulticast mode
[  670.850181][ T3894] team0 (unregistering): Port device team_slave_1 removed
[  670.874590][ T3894] team_slave_0 (unregistering): left promiscuous mode
[  670.881595][ T3894] team_slave_0 (unregistering): left allmulticast mode
[  671.201664][ T3894] team0 (unregistering): Port device team_slave_0 removed
[  680.809018][T10578] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  680.912143][T10578] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  681.023336][ T8898] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[  681.026922][T10578] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  681.074438][T10578] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  685.765418][T10578] 8021q: adding VLAN 0 to HW filter on device bond0
[  686.165559][T10578] 8021q: adding VLAN 0 to HW filter on device team0
[  686.225155][ T4999] bridge0: port 1(bridge_slave_0) entered blocking state
[  686.232786][ T4999] bridge0: port 1(bridge_slave_0) entered forwarding state
[  686.434189][ T4999] bridge0: port 2(bridge_slave_1) entered blocking state
[  686.442796][ T4999] bridge0: port 2(bridge_slave_1) entered forwarding state
[  686.749742][T10578] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  686.978559][T10715] ip6gre1: entered promiscuous mode
[  688.830161][T10578] 8021q: adding VLAN 0 to HW filter on device batadv0
[  695.516420][T10758] input: syz0 as /devices/virtual/input/input31
[  695.896189][T10763] loop2: detected capacity change from 0 to 7
[  695.905460][T10763] Dev loop2: unable to read RDB block 7
[  695.911312][T10763]  loop2: unable to read partition table
[  695.923791][T10763] loop2: partition table beyond EOD, truncated
[  695.931888][T10763] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  696.064535][ T8898] usb 5-1: new high-speed USB device number 56 using dummy_hcd
[  696.081281][T10578] veth0_vlan: entered promiscuous mode
[  696.128324][T10578] veth1_vlan: entered promiscuous mode
[  696.223254][ T8898] usb 5-1: Using ep0 maxpacket: 8
[  696.263625][ T8898] usb 5-1: config 0 has an invalid interface number: 78 but max is 0
[  696.272150][ T8898] usb 5-1: config 0 has no interface number 0
[  696.419174][T10578] veth0_macvtap: entered promiscuous mode
[  696.437647][ T8898] usb 5-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=f0.21
[  696.448283][ T8898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  696.458282][ T8898] usb 5-1: Product: syz
[  696.462616][ T8898] usb 5-1: Manufacturer: syz
[  696.468957][ T8898] usb 5-1: SerialNumber: syz
[  696.471882][T10767] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1436'.
[  696.553191][T10578] veth1_macvtap: entered promiscuous mode
[  696.566197][ T8898] usb 5-1: config 0 descriptor??
[  696.633857][T10578] batman_adv: batadv0: Interface activated: batadv_slave_0
[  696.680422][T10578] batman_adv: batadv0: Interface activated: batadv_slave_1
[  696.774717][ T4623] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  696.810364][ T4623] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  696.833666][ T8898] usbhid 5-1:0.78: couldn't find an input interrupt endpoint
[  696.866731][ T4623] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  696.877828][ T4623] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  696.889778][ T8898] usb 5-1: USB disconnect, device number 56
[  697.433181][ T5925] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[  697.613137][ T5925] usb 1-1: Using ep0 maxpacket: 32
[  697.654082][ T5925] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9
[  697.801290][ T5925] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  697.812095][ T5925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  697.821209][ T5925] usb 1-1: Product: syz
[  697.829038][ T5925] usb 1-1: Manufacturer: syz
[  697.836464][ T5925] usb 1-1: SerialNumber: syz
[  698.855227][ T5925] usb 1-1: config 0 descriptor??
[  698.865300][T10778] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  698.883572][ T5925] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input32
[  699.849543][    C1] usbtouchscreen 1-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19
[  699.859013][ T5925] usb 1-1: USB disconnect, device number 53
[  700.623067][ T8898] usb 5-1: new high-speed USB device number 57 using dummy_hcd
[  700.938451][   T42] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  701.208758][   T42] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  701.219624][   T42] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  701.228446][   T42] usb 7-1: Product: syz
[  701.232925][   T42] usb 7-1: Manufacturer: syz
[  701.237689][   T42] usb 7-1: SerialNumber: syz
[  701.407465][   T42] usb 7-1: config 0 descriptor??
[  701.583798][ T8898] usb 5-1: Using ep0 maxpacket: 32
[  701.619374][ T8898] usb 5-1: config 15 has an invalid interface number: 84 but max is 0
[  701.628191][ T8898] usb 5-1: config 15 has an invalid interface association descriptor of length 2, skipping
[  701.638568][ T8898] usb 5-1: config 15 has no interface number 0
[  701.645066][ T8898] usb 5-1: config 15 interface 84 altsetting 128 bulk endpoint 0x6 has invalid maxpacket 64
[  701.655848][ T8898] usb 5-1: config 15 interface 84 has no altsetting 0
[  701.691459][   T42] usb 7-1: USB disconnect, device number 2
[  701.799857][ T8898] usb 5-1: New USB device found, idVendor=0421, idProduct=048e, bcdDevice=4c.90
[  701.810300][ T8898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  701.818745][ T8898] usb 5-1: Product: syz
[  701.825792][ T8898] usb 5-1: Manufacturer: syz
[  701.831572][ T8898] usb 5-1: SerialNumber: syz
[  701.866318][T10806] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  702.166025][ T8898] rndis_host 5-1:15.84: invalid descriptor buffer length
[  702.173916][ T8898] usb 5-1: bad CDC descriptors
[  702.180506][ T8898] cdc_acm 5-1:15.84: invalid descriptor buffer length
[  702.283434][ T8898] usb 5-1: USB disconnect, device number 57
[  706.523447][  T750] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  706.533776][  T750] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  707.801013][ T3932] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  707.812487][ T3932] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  715.008468][T10892] pimreg: tun_chr_ioctl cmd 1074025673
[  716.084720][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  716.091359][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  717.827218][T10900] netlink: 'syz.4.1475': attribute type 4 has an invalid length.
[  719.464427][T10917] netlink: 'syz.6.1481': attribute type 39 has an invalid length.
[  719.495186][T10917] bridge0: port 1(bridge_slave_0) entered disabled state
[  719.721284][T10917] bridge_slave_0 (unregistering): left allmulticast mode
[  719.728877][T10917] bridge_slave_0 (unregistering): left promiscuous mode
[  719.736620][T10917] bridge0: port 1(bridge_slave_0) entered disabled state
[  723.987533][T10944] comedi comedi0: dt2815: I/O port conflict (0x8002f,2)
[  732.093366][   T42] usb 2-1: new high-speed USB device number 55 using dummy_hcd
[  732.294292][   T42] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  732.304985][   T42] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  732.316494][   T42] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  732.377227][   T42] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  732.389960][   T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  732.399538][   T42] usb 2-1: Product: syz
[  732.404056][   T42] usb 2-1: Manufacturer: syz
[  732.408926][   T42] usb 2-1: SerialNumber: syz
[  732.426989][   T42] cdc_mbim 2-1:1.0: skipping garbage
[  733.060558][   T42] cdc_mbim 2-1:1.0: failed GET_NTB_PARAMETERS
[  733.067318][   T42] cdc_mbim 2-1:1.0: bind() failure
[  733.082353][   T42] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[  733.089832][   T42] cdc_ncm 2-1:1.1: bind() failure
[  733.135967][   T42] usb 2-1: USB disconnect, device number 55
[  734.836026][ T8899] IPVS: starting estimator thread 0...
[  734.845391][T10988] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  734.923173][T10993] IPVS: using max 240 ests per chain, 12000 per kthread
[  738.626487][ T5810] Bluetooth: hci2: command 0x0406 tx timeout
[  741.774060][T11018] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1519'.
[  745.423209][ T8899] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[  745.583196][ T8899] usb 1-1: device descriptor read/64, error -71
[  745.832999][ T8899] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[  746.003084][ T8899] usb 1-1: device descriptor read/64, error -71
[  746.123710][ T8899] usb usb1-port1: attempt power cycle
[  748.072921][ T8899] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[  748.257702][ T8899] usb 1-1: device descriptor read/8, error -71
[  749.728580][T11074] netlink: 'syz.6.1534': attribute type 39 has an invalid length.
[  749.970415][ T8899] usb 1-1: new high-speed USB device number 58 using dummy_hcd
[  750.175661][ T8899] usb 1-1: Using ep0 maxpacket: 16
[  750.198335][ T8899] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  750.208960][ T8899] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  750.219027][ T8899] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  750.400293][ T8899] usb 1-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=f6.59
[  750.409879][ T8899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  750.418171][ T8899] usb 1-1: Product: syz
[  750.422430][ T8899] usb 1-1: Manufacturer: syz
[  750.427388][ T8899] usb 1-1: SerialNumber: syz
[  750.566757][ T8899] usb 1-1: config 0 descriptor??
[  750.748242][ T8899] peak_usb 1-1:0.0 can0: sending cmd f=0x6 n=0x1 failure: -8
[  750.756073][ T8899] peak_usb 1-1:0.0: unable to read PCAN-USB serial number (err -8)
[  753.337157][ T8899] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -8
[  754.799659][ T8899] usb 1-1: USB disconnect, device number 58
[  766.664714][ T5810] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  766.704142][ T5810] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  766.724572][ T5810] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  766.751131][ T5810] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  766.762253][ T5810] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  767.031438][   T42] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  767.223416][   T42] usb 8-1: Using ep0 maxpacket: 32
[  767.234673][   T42] usb 8-1: config 15 has an invalid interface number: 84 but max is 0
[  767.243373][   T42] usb 8-1: config 15 has an invalid interface association descriptor of length 2, skipping
[  767.257713][   T42] usb 8-1: config 15 has no interface number 0
[  767.268500][   T42] usb 8-1: config 15 interface 84 altsetting 128 bulk endpoint 0x6 has invalid maxpacket 64
[  767.280076][   T42] usb 8-1: config 15 interface 84 has no altsetting 0
[  767.393243][   T42] usb 8-1: New USB device found, idVendor=0421, idProduct=048e, bcdDevice=4c.90
[  767.402581][   T42] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  767.414041][   T42] usb 8-1: Product: syz
[  767.418406][   T42] usb 8-1: Manufacturer: syz
[  767.424689][   T42] usb 8-1: SerialNumber: syz
[  767.590074][T11162] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  767.932520][   T42] rndis_host 8-1:15.84: invalid descriptor buffer length
[  767.940091][   T42] usb 8-1: bad CDC descriptors
[  767.946939][   T42] cdc_acm 8-1:15.84: invalid descriptor buffer length
[  768.013937][   T42] usb 8-1: USB disconnect, device number 2
[  768.089527][T11160] chnl_net:caif_netlink_parms(): no params data found
[  768.963513][T10470] Bluetooth: hci4: command tx timeout
[  771.012986][T10470] Bluetooth: hci4: command tx timeout
[  773.094315][T10470] Bluetooth: hci4: command tx timeout
[  774.187940][T10470] Bluetooth: hci5: unexpected subevent 0x03 length: 3 < 9
[  774.408478][T11160] bridge0: port 1(bridge_slave_0) entered blocking state
[  774.417629][T11160] bridge0: port 1(bridge_slave_0) entered disabled state
[  774.430176][T11160] bridge_slave_0: entered allmulticast mode
[  774.439797][T11160] bridge_slave_0: entered promiscuous mode
[  774.590731][T11160] bridge0: port 2(bridge_slave_1) entered blocking state
[  774.598506][T11160] bridge0: port 2(bridge_slave_1) entered disabled state
[  774.606477][T11160] bridge_slave_1: entered allmulticast mode
[  774.616075][T11160] bridge_slave_1: entered promiscuous mode
[  774.839942][T11160] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  774.853755][T11194] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1579'.
[  774.962916][T11160] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  775.174581][T10470] Bluetooth: hci4: command tx timeout
[  775.311267][T11160] team0: Port device team_slave_0 added
[  775.343449][T11160] team0: Port device team_slave_1 added
[  775.559066][T11206] trusted_key: encrypted_key: insufficient parameters specified
[  775.661861][T11160] batman_adv: batadv0: Adding interface: batadv_slave_0
[  775.669088][T11160] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  775.695585][T11160] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  777.416243][T11160] batman_adv: batadv0: Adding interface: batadv_slave_1
[  777.423706][T11160] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  777.453287][T11160] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  777.517993][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  777.524900][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  778.666302][T11160] hsr_slave_0: entered promiscuous mode
[  778.681614][T11160] hsr_slave_1: entered promiscuous mode
[  778.690339][T11160] debugfs: 'hsr0' already exists in 'hsr'
[  778.696407][T11160] Cannot create hsr debugfs directory
[  778.830827][ T3958] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  779.085985][ T3958] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  779.265040][ T3958] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  779.469395][ T3958] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  779.573063][T10470] Bluetooth: hci5: command 0x0406 tx timeout
[  779.830747][T11216] DRBG: could not allocate CTR cipher TFM handle: ctr(aes)
[  780.174105][ T3958] bridge_slave_1: left allmulticast mode
[  780.179969][ T3958] bridge_slave_1: left promiscuous mode
[  780.186787][ T3958] bridge0: port 2(bridge_slave_1) entered disabled state
[  780.687884][ T3958] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  780.727358][ T3958] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  780.753656][ T3958] bond0 (unregistering): Released all slaves
[  780.894060][   T42] usb 2-1: new full-speed USB device number 56 using dummy_hcd
[  781.111223][T11160] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  781.132544][   T42] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  781.143537][   T42] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  781.154947][   T42] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  781.165065][   T42] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  781.210160][   T42] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  781.219820][   T42] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  781.228508][   T42] usb 2-1: Manufacturer: syz
[  781.244311][   T42] usb 2-1: config 0 descriptor??
[  781.370455][T11160] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  781.424208][T11160] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  781.495810][T11238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  781.505689][T11238] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  781.679745][ T3958] hsr_slave_0: left promiscuous mode
[  781.696431][ T3958] hsr_slave_1: left promiscuous mode
[  781.699122][ T3958] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  781.699212][ T3958] batman_adv: batadv0: Removing interface: batadv_slave_0
[  781.714820][ T3958] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  781.714897][ T3958] batman_adv: batadv0: Removing interface: batadv_slave_1
[  781.778879][ T3958] veth1_macvtap: left promiscuous mode
[  781.826021][ T3958] veth0_macvtap: left promiscuous mode
[  781.826350][ T3958] veth1_vlan: left promiscuous mode
[  781.826577][ T3958] veth0_vlan: left promiscuous mode
[  781.834746][   T42] rc_core: IR keymap rc-hauppauge not found
[  781.856452][   T42] Registered IR keymap rc-empty
[  781.856954][   T42] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  782.056912][   T42] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  782.075077][   T42] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  782.076699][   T42] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input33
[  782.127444][   T42] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  782.187600][   T42] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  782.189640][    C1] mceusb 2-1:0.0: long-range (0xcc) receiver active
[  782.208008][   T42] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  782.228054][   T42] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  782.243299][   T42] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  782.263259][   T42] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  782.286544][   T42] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  782.303470][   T42] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  782.323503][   T42] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  782.353291][   T42] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  782.376769][   T42] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  782.376954][   T42] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0xcc active)
[  782.489287][  T794] usb 2-1: USB disconnect, device number 56
[  782.835128][ T3958] team0 (unregistering): Port device team_slave_1 removed
[  782.858405][ T3958] team0 (unregistering): Port device team_slave_0 removed
[  783.856000][T11249] xt_CT: You must specify a L4 protocol and not use inversions on it
[  789.817080][T11160] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  791.206118][T11160] 8021q: adding VLAN 0 to HW filter on device bond0
[  791.353357][T11160] 8021q: adding VLAN 0 to HW filter on device team0
[  791.435200][ T9961] bridge0: port 1(bridge_slave_0) entered blocking state
[  791.435541][ T9961] bridge0: port 1(bridge_slave_0) entered forwarding state
[  791.446152][ T9961] bridge0: port 2(bridge_slave_1) entered blocking state
[  791.446474][ T9961] bridge0: port 2(bridge_slave_1) entered forwarding state
[  794.394413][ T5925] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[  794.578785][ T5925] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[  794.578887][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  794.578965][ T5925] usb 2-1: Product: syz
[  794.579028][ T5925] usb 2-1: Manufacturer: syz
[  794.579091][ T5925] usb 2-1: SerialNumber: syz
[  794.597946][ T5925] usb 2-1: config 0 descriptor??
[  794.633947][T10470] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  794.638223][T10470] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  794.648895][T10470] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  794.659520][T10470] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  794.669313][T10470] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  794.831431][ T5925] usb-storage 2-1:0.0: USB Mass Storage device detected
[  795.127872][T11160] 8021q: adding VLAN 0 to HW filter on device batadv0
[  795.206468][   T42] usb 2-1: USB disconnect, device number 57
[  795.885046][T11266] chnl_net:caif_netlink_parms(): no params data found
[  796.773273][ T5810] Bluetooth: hci2: command tx timeout
[  798.853321][ T5810] Bluetooth: hci2: command tx timeout
[  799.458988][T11266] bridge0: port 1(bridge_slave_0) entered blocking state
[  799.459217][T11266] bridge0: port 1(bridge_slave_0) entered disabled state
[  799.459644][T11266] bridge_slave_0: entered allmulticast mode
[  799.461785][T11266] bridge_slave_0: entered promiscuous mode
[  799.504535][T11266] bridge0: port 2(bridge_slave_1) entered blocking state
[  799.504762][T11266] bridge0: port 2(bridge_slave_1) entered disabled state
[  799.505198][T11266] bridge_slave_1: entered allmulticast mode
[  799.507461][T11266] bridge_slave_1: entered promiscuous mode
[  799.611740][T10470] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  799.620960][T10470] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  799.684289][T10470] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  799.696638][T10470] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  799.707011][T10470] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  800.011925][T11266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  800.060908][T11266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  800.208707][T11266] team0: Port device team_slave_0 added
[  800.265170][T11266] team0: Port device team_slave_1 added
[  800.651671][T11266] batman_adv: batadv0: Adding interface: batadv_slave_0
[  800.659013][T11266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  800.685332][T11266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  800.784891][T11160] veth0_vlan: entered promiscuous mode
[  800.846951][T11266] batman_adv: batadv0: Adding interface: batadv_slave_1
[  800.854337][T11266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  800.880678][T11266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  800.935151][ T5810] Bluetooth: hci2: command tx timeout
[  801.011484][T11160] veth1_vlan: entered promiscuous mode
[  801.314207][T11266] hsr_slave_0: entered promiscuous mode
[  801.323520][T11266] hsr_slave_1: entered promiscuous mode
[  801.331210][T11266] debugfs: 'hsr0' already exists in 'hsr'
[  801.337773][T11266] Cannot create hsr debugfs directory
[  801.433440][T11160] veth0_macvtap: entered promiscuous mode
[  801.463297][T11160] veth1_macvtap: entered promiscuous mode
[  801.635523][T11294] chnl_net:caif_netlink_parms(): no params data found
[  801.824463][ T5810] Bluetooth: hci6: command tx timeout
[  801.871427][T11160] batman_adv: batadv0: Interface activated: batadv_slave_0
[  801.976871][T11160] batman_adv: batadv0: Interface activated: batadv_slave_1
[  803.013040][ T5810] Bluetooth: hci2: command tx timeout
[  803.627009][ T4069] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  804.084595][ T5810] Bluetooth: hci6: command tx timeout
[  804.106146][ T4069] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  804.235277][ T4069] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  804.265352][ T4069] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  806.154064][T11266] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  806.580022][ T5810] Bluetooth: hci6: command tx timeout
[  806.734596][T11266] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  806.860396][T11266] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  806.954293][T11266] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  806.970714][T11323] IPv6: addrconf: prefix option has invalid lifetime
[  807.614583][T11294] bridge0: port 1(bridge_slave_0) entered blocking state
[  807.622244][T11294] bridge0: port 1(bridge_slave_0) entered disabled state
[  807.632549][T11294] bridge_slave_0: entered allmulticast mode
[  807.641400][T11294] bridge_slave_0: entered promiscuous mode
[  807.851580][T11215] syz_tun (unregistering): left allmulticast mode
[  807.942441][T11294] bridge0: port 2(bridge_slave_1) entered blocking state
[  807.950651][T11294] bridge0: port 2(bridge_slave_1) entered disabled state
[  807.961111][T11294] bridge_slave_1: entered allmulticast mode
[  807.970832][T11294] bridge_slave_1: entered promiscuous mode
[  808.033932][T11334] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  808.033932][T11334] The task syz.1.1611 (11334) triggered the difference, watch for misbehavior.
[  808.080596][T11294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  808.106805][T11294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  808.327710][ T3894] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  808.338841][ T3894] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  808.414069][T11294] team0: Port device team_slave_0 added
[  808.505090][ T3894] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  808.516795][ T3894] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  808.610462][T11294] team0: Port device team_slave_1 added
[  808.632428][ T5810] Bluetooth: hci6: command tx timeout
[  808.857608][ T3894] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  808.868767][ T3894] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  809.095839][T11294] batman_adv: batadv0: Adding interface: batadv_slave_0
[  809.103231][T11294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  809.129697][T11294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  809.234186][T11294] batman_adv: batadv0: Adding interface: batadv_slave_1
[  809.244258][T11294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  809.271911][T11294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  809.421579][T11266] 8021q: adding VLAN 0 to HW filter on device bond0
[  809.562318][T11266] 8021q: adding VLAN 0 to HW filter on device team0
[  809.689662][ T3894] bridge_slave_1: left allmulticast mode
[  809.700870][ T3894] bridge_slave_1: left promiscuous mode
[  809.707727][ T3894] bridge0: port 2(bridge_slave_1) entered disabled state
[  809.725845][ T3894] bridge_slave_0: left allmulticast mode
[  809.731878][ T3894] bridge_slave_0: left promiscuous mode
[  809.738672][ T3894] bridge0: port 1(bridge_slave_0) entered disabled state
[  809.773519][ T5860] usb 2-1: new high-speed USB device number 58 using dummy_hcd
[  809.963476][ T5860] usb 2-1: Using ep0 maxpacket: 32
[  809.984984][ T5860] usb 2-1: config 15 has an invalid interface number: 84 but max is 0
[  809.993717][ T5860] usb 2-1: config 15 has an invalid interface association descriptor of length 2, skipping
[  810.005991][ T5860] usb 2-1: config 15 has no interface number 0
[  810.013472][ T5860] usb 2-1: config 15 interface 84 altsetting 128 bulk endpoint 0x6 has invalid maxpacket 64
[  810.024183][ T5860] usb 2-1: config 15 interface 84 has no altsetting 0
[  810.040763][ T5860] usb 2-1: New USB device found, idVendor=0421, idProduct=048e, bcdDevice=4c.90
[  810.050544][ T5860] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  810.061866][ T5860] usb 2-1: Product: syz
[  810.067786][ T5860] usb 2-1: Manufacturer: syz
[  810.072587][ T5860] usb 2-1: SerialNumber: syz
[  818.474552][T11345] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  818.578603][ T5860] usb 2-1: can't set config #15, error -110
[  818.672523][ T3894] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  818.744875][ T3894] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  818.779322][ T3894] bond0 (unregistering): Released all slaves
[  818.804609][ T3894] bond1 (unregistering): Released all slaves
[  818.809425][   T42] usb 2-1: USB disconnect, device number 58
[  818.943573][T11294] hsr_slave_0: entered promiscuous mode
[  818.954666][T11294] hsr_slave_1: entered promiscuous mode
[  818.964250][T11294] debugfs: 'hsr0' already exists in 'hsr'
[  818.973844][T11294] Cannot create hsr debugfs directory
[  819.024899][ T4623] bridge0: port 1(bridge_slave_0) entered blocking state
[  819.032543][ T4623] bridge0: port 1(bridge_slave_0) entered forwarding state
[  819.048131][ T4623] bridge0: port 2(bridge_slave_1) entered blocking state
[  819.055827][ T4623] bridge0: port 2(bridge_slave_1) entered forwarding state
[  819.533295][T11266] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  819.992277][ T3894] hsr_slave_0: left promiscuous mode
[  820.013298][ T3894] hsr_slave_1: left promiscuous mode
[  820.021064][ T3894] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  820.030394][ T3894] batman_adv: batadv0: Removing interface: batadv_slave_0
[  820.098852][ T3894] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  820.106638][ T3894] batman_adv: batadv0: Removing interface: batadv_slave_1
[  820.197986][ T3894] veth1_vlan: left allmulticast mode
[  820.205700][ T3894] vlan0: left allmulticast mode
[  820.210736][ T3894] veth0_vlan: left allmulticast mode
[  820.216572][ T3894] vlan0: left promiscuous mode
[  820.223370][ T3894] veth1_macvtap: left promiscuous mode
[  820.229169][ T3894] veth0_macvtap: left promiscuous mode
[  820.235145][ T3894] veth1_vlan: left promiscuous mode
[  820.240768][ T3894] veth0_vlan: left promiscuous mode
[  820.971515][ T3894] team0 (unregistering): Port device team_slave_1 removed
[  821.002033][ T3894] team0 (unregistering): Port device team_slave_0 removed
[  833.958106][   T30] audit: type=1326 audit(2000000417.030:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11371 comm="syz.1.1620" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f260638f749 code=0xffff0000
[  834.363576][T11266] 8021q: adding VLAN 0 to HW filter on device batadv0
[  834.675718][ T3894] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  834.777994][T11294] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  834.906964][ T3894] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  834.994691][T11294] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  835.086660][ T3894] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  835.201780][T11294] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  835.404519][ T3894] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  835.476532][T11294] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  835.803978][T10470] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  835.813350][T10470] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  835.857425][T10470] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  835.911866][ T3894] bridge_slave_1: left allmulticast mode
[  835.918134][ T3894] bridge_slave_1: left promiscuous mode
[  835.924823][ T3894] bridge0: port 2(bridge_slave_1) entered disabled state
[  835.939385][   T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  835.941145][ T3894] bridge_slave_0: left allmulticast mode
[  835.953521][ T3894] bridge_slave_0: left promiscuous mode
[  835.953597][   T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  835.960066][ T3894] bridge0: port 1(bridge_slave_0) entered disabled state
[  836.006678][   T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  836.024825][   T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  836.036096][ T5806] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  836.051767][   T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  836.065097][   T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  836.940633][ T3894] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  837.021287][ T3894] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  837.068568][ T3894] bond0 (unregistering): Released all slaves
[  838.148757][ T5810] Bluetooth: hci5: command tx timeout
[  838.155799][ T5810] Bluetooth: hci0: command tx timeout
[  839.066391][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  839.073341][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  839.282340][T11294] 8021q: adding VLAN 0 to HW filter on device bond0
[  839.680271][T11266] veth0_vlan: entered promiscuous mode
[  839.717839][ T3894] hsr_slave_0: left promiscuous mode
[  839.741440][ T3894] hsr_slave_1: left promiscuous mode
[  839.750606][ T3894] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  839.760964][ T3894] batman_adv: batadv0: Removing interface: batadv_slave_0
[  839.773214][ T3894] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  839.780857][ T3894] batman_adv: batadv0: Removing interface: batadv_slave_1
[  839.808314][ T3894] veth1_macvtap: left promiscuous mode
[  839.815051][ T3894] veth0_macvtap: left promiscuous mode
[  839.820945][ T3894] veth1_vlan: left promiscuous mode
[  839.826691][ T3894] veth0_vlan: left promiscuous mode
[  840.226988][   T50] Bluetooth: hci0: command tx timeout
[  840.233058][   T50] Bluetooth: hci5: command tx timeout
[  840.452455][ T3894] team0 (unregistering): Port device team_slave_1 removed
[  840.545608][ T3894] team0 (unregistering): Port device team_slave_0 removed
[  840.913899][T11386] chnl_net:caif_netlink_parms(): no params data found
[  840.949755][T11266] veth1_vlan: entered promiscuous mode
[  840.973897][T11294] 8021q: adding VLAN 0 to HW filter on device team0
[  840.987274][T11383] chnl_net:caif_netlink_parms(): no params data found
[  841.215491][   T58] bridge0: port 1(bridge_slave_0) entered blocking state
[  841.223121][   T58] bridge0: port 1(bridge_slave_0) entered forwarding state
[  841.337174][  T750] bridge0: port 2(bridge_slave_1) entered blocking state
[  841.344809][  T750] bridge0: port 2(bridge_slave_1) entered forwarding state
[  841.353237][ T5860] usb 2-1: new full-speed USB device number 59 using dummy_hcd
[  841.538406][ T5860] usb 2-1: not running at top speed; connect to a high speed hub
[  841.552533][T11266] veth0_macvtap: entered promiscuous mode
[  841.575014][ T5860] usb 2-1: config 138 has an invalid interface number: 254 but max is 0
[  841.585645][ T5860] usb 2-1: config 138 has no interface number 0
[  841.592117][ T5860] usb 2-1: config 138 interface 254 has no altsetting 0
[  841.647890][ T3894] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  841.670300][ T5860] usb 2-1: New USB device found, idVendor=0403, idProduct=f440, bcdDevice=92.08
[  841.680017][ T5860] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  841.688996][ T5860] usb 2-1: Product: syz
[  841.693537][ T5860] usb 2-1: Manufacturer: syz
[  841.698318][ T5860] usb 2-1: SerialNumber: syz
[  841.740953][T11266] veth1_macvtap: entered promiscuous mode
[  841.801491][ T3894] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  841.940341][ T3894] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  842.000321][T11266] batman_adv: batadv0: Interface activated: batadv_slave_0
[  842.010168][ T5860] ftdi_sio 2-1:138.254: FTDI USB Serial Device converter detected
[  842.011809][ T5860] ftdi_sio ttyUSB0: unknown device type: 0x9208
[  842.055794][ T5860] usb 2-1: USB disconnect, device number 59
[  842.064528][ T5860] ftdi_sio 2-1:138.254: device disconnected
[  842.095686][ T3894] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  842.199891][T11386] bridge0: port 1(bridge_slave_0) entered blocking state
[  842.219780][T11386] bridge0: port 1(bridge_slave_0) entered disabled state
[  842.227944][T11386] bridge_slave_0: entered allmulticast mode
[  842.237404][T11386] bridge_slave_0: entered promiscuous mode
[  842.260107][T11266] batman_adv: batadv0: Interface activated: batadv_slave_1
[  842.294222][ T5810] Bluetooth: hci5: command tx timeout
[  842.301506][   T50] Bluetooth: hci0: command tx timeout
[  842.346994][T11386] bridge0: port 2(bridge_slave_1) entered blocking state
[  842.356327][T11386] bridge0: port 2(bridge_slave_1) entered disabled state
[  842.364348][T11386] bridge_slave_1: entered allmulticast mode
[  842.375089][T11386] bridge_slave_1: entered promiscuous mode
[  842.641857][ T1153] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  842.656603][T11383] bridge0: port 1(bridge_slave_0) entered blocking state
[  842.664438][T11383] bridge0: port 1(bridge_slave_0) entered disabled state
[  842.672213][T11383] bridge_slave_0: entered allmulticast mode
[  842.684569][T11383] bridge_slave_0: entered promiscuous mode
[  842.708693][T11386] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  842.740934][ T3894] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  842.758130][ T1153] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  842.768831][ T1153] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  842.779987][T11383] bridge0: port 2(bridge_slave_1) entered blocking state
[  842.791453][T11383] bridge0: port 2(bridge_slave_1) entered disabled state
[  842.801302][T11383] bridge_slave_1: entered allmulticast mode
[  842.815851][T11383] bridge_slave_1: entered promiscuous mode
[  842.840097][T11386] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  842.858746][ T1153] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  842.906773][ T3894] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  843.164027][   T42] usb 2-1: new high-speed USB device number 60 using dummy_hcd
[  843.193677][ T3894] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  843.254629][T11383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  843.313382][T11386] team0: Port device team_slave_0 added
[  843.329123][   T42] usb 2-1: Using ep0 maxpacket: 32
[  843.349105][T11383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  843.368900][   T42] usb 2-1: config 15 has an invalid interface number: 84 but max is 0
[  843.377905][   T42] usb 2-1: config 15 has an invalid interface association descriptor of length 2, skipping
[  843.388397][   T42] usb 2-1: config 15 has no interface number 0
[  843.395038][   T42] usb 2-1: config 15 interface 84 altsetting 128 bulk endpoint 0x6 has invalid maxpacket 64
[  843.405674][   T42] usb 2-1: config 15 interface 84 has no altsetting 0
[  843.439397][T11386] team0: Port device team_slave_1 added
[  843.517119][   T42] usb 2-1: New USB device found, idVendor=0421, idProduct=048e, bcdDevice=4c.90
[  843.526954][   T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  843.535348][   T42] usb 2-1: Product: syz
[  843.539693][   T42] usb 2-1: Manufacturer: syz
[  843.546334][   T42] usb 2-1: SerialNumber: syz
[  843.568356][T11410] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  843.667046][T11386] batman_adv: batadv0: Adding interface: batadv_slave_0
[  843.674403][T11386] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  843.700794][T11386] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  843.791317][T11386] batman_adv: batadv0: Adding interface: batadv_slave_1
[  843.798949][T11386] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  843.825441][T11386] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  843.901864][T11383] team0: Port device team_slave_0 added
[  843.939457][T11294] 8021q: adding VLAN 0 to HW filter on device batadv0
[  843.943276][   T42] rndis_host 2-1:15.84: invalid descriptor buffer length
[  843.957092][   T42] usb 2-1: bad CDC descriptors
[  843.965006][   T42] cdc_acm 2-1:15.84: invalid descriptor buffer length
[  844.039832][   T42] usb 2-1: USB disconnect, device number 60
[  844.128861][T11386] hsr_slave_0: entered promiscuous mode
[  844.139068][T11386] hsr_slave_1: entered promiscuous mode
[  844.171126][T11383] team0: Port device team_slave_1 added
[  844.322264][T11383] batman_adv: batadv0: Adding interface: batadv_slave_0
[  844.329718][T11383] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  844.356495][T11383] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  844.373144][ T5810] Bluetooth: hci5: command tx timeout
[  844.378784][   T50] Bluetooth: hci0: command tx timeout
[  844.401749][ T3894] bridge_slave_1: left allmulticast mode
[  844.407785][ T3894] bridge_slave_1: left promiscuous mode
[  844.417612][ T3894] bridge0: port 2(bridge_slave_1) entered disabled state
[  844.434611][ T3894] bridge_slave_0: left allmulticast mode
[  844.440649][ T3894] bridge_slave_0: left promiscuous mode
[  844.447442][ T3894] bridge0: port 1(bridge_slave_0) entered disabled state
[  844.466398][ T3894] bridge_slave_1: left allmulticast mode
[  844.475187][ T3894] bridge_slave_1: left promiscuous mode
[  844.483153][ T3894] bridge0: port 2(bridge_slave_1) entered disabled state
[  844.547027][ T3894] bridge_slave_0: left allmulticast mode
[  844.553633][ T3894] bridge_slave_0: left promiscuous mode
[  844.560885][ T3894] bridge0: port 1(bridge_slave_0) entered disabled state
[  845.349533][ T3894] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  845.367661][ T3894] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  845.382999][ T3894] bond0 (unregistering): Released all slaves
[  845.772969][ T3894] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  845.788789][ T3894] bond0 (unregistering): Released all slaves
[  845.817664][ T3894] bond1 (unregistering): Released all slaves
[  845.844543][T11383] batman_adv: batadv0: Adding interface: batadv_slave_1
[  845.851765][T11383] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  845.878499][T11383] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  846.218046][ T3894] tipc: Disabling bearer <udp:syz2>
[  846.224121][ T3894] tipc: Left network mode
[  846.539840][   T30] audit: type=1326 audit(2000000440.480:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11425 comm="syz.1.1627" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f260638f749 code=0x0
[  846.577988][T11383] hsr_slave_0: entered promiscuous mode
[  846.587968][T11383] hsr_slave_1: entered promiscuous mode
[  846.596699][T11383] debugfs: 'hsr0' already exists in 'hsr'
[  846.603111][T11383] Cannot create hsr debugfs directory
[  846.918798][ T3894] hsr_slave_0: left promiscuous mode
[  846.943621][ T3894] hsr_slave_1: left promiscuous mode
[  846.951574][ T3894] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  846.960156][ T3894] batman_adv: batadv0: Removing interface: batadv_slave_0
[  846.996718][ T3894] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  847.005135][ T3894] batman_adv: batadv0: Removing interface: batadv_slave_1
[  847.066901][ T3894] hsr_slave_0: left promiscuous mode
[  847.078438][ T3894] hsr_slave_1: left promiscuous mode
[  847.089587][ T3894] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  847.097357][ T3894] batman_adv: batadv0: Removing interface: batadv_slave_0
[  847.141123][ T3894] veth1_macvtap: left promiscuous mode
[  847.148814][ T3894] veth0_macvtap: left promiscuous mode
[  847.154819][ T3894] veth1_vlan: left promiscuous mode
[  847.160381][ T3894] veth0_vlan: left promiscuous mode
[  847.167947][ T3894] macvlan1: left allmulticast mode
[  847.175235][ T3894] veth1_vlan: left allmulticast mode
[  847.181180][ T3894] veth1_macvtap: left promiscuous mode
[  847.189053][ T3894] veth0_macvtap: left promiscuous mode
[  847.195259][ T3894] veth1_vlan: left promiscuous mode
[  848.031892][ T3894] team0 (unregistering): Port device team_slave_1 removed
[  848.181907][ T3894] team0 (unregistering): Port device team_slave_0 removed
[  848.897450][ T3894] team0 (unregistering): Port device team_slave_1 removed
[  848.923685][ T3894] team0 (unregistering): Port device team_slave_0 removed
[  849.247827][T11294] veth0_vlan: entered promiscuous mode
[  849.681224][T11294] veth1_vlan: entered promiscuous mode
[  850.575538][T11294] veth0_macvtap: entered promiscuous mode
[  850.679387][T11294] veth1_macvtap: entered promiscuous mode
[  850.910136][T11294] batman_adv: batadv0: Interface activated: batadv_slave_0
[  851.008355][T11294] batman_adv: batadv0: Interface activated: batadv_slave_1
[  851.217464][   T61] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  851.234756][   T61] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  851.292265][   T61] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  851.319942][T11386] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  851.403756][   T61] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  851.460601][T11386] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  851.553542][T11383] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  851.653217][T11386] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  851.689788][T11383] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  851.724324][T11386] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  851.770540][T11383] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  851.885467][T10675] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  851.886623][T11383] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  851.894168][T10675] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  852.845623][T11386] 8021q: adding VLAN 0 to HW filter on device bond0
[  853.244635][T11386] 8021q: adding VLAN 0 to HW filter on device team0
[  853.307848][T11383] 8021q: adding VLAN 0 to HW filter on device bond0
[  853.367070][ T3894] bridge0: port 1(bridge_slave_0) entered blocking state
[  853.374884][ T3894] bridge0: port 1(bridge_slave_0) entered forwarding state
[  853.499250][ T3894] bridge0: port 2(bridge_slave_1) entered blocking state
[  853.507125][ T3894] bridge0: port 2(bridge_slave_1) entered forwarding state
[  853.545739][T11383] 8021q: adding VLAN 0 to HW filter on device team0
[  853.796370][ T3894] bridge0: port 1(bridge_slave_0) entered blocking state
[  853.804297][ T3894] bridge0: port 1(bridge_slave_0) entered forwarding state
[  853.827458][ T3894] bridge0: port 2(bridge_slave_1) entered blocking state
[  853.835682][ T3894] bridge0: port 2(bridge_slave_1) entered forwarding state
[  854.436346][T11383] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  854.448721][T11383] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  854.606734][ T5810] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  854.620577][ T5810] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  854.630534][ T5810] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  854.646091][ T5810] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  854.658471][ T5810] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  855.861048][T11386] 8021q: adding VLAN 0 to HW filter on device batadv0
[  856.440798][T11386] veth0_vlan: entered promiscuous mode
[  856.574437][T11386] veth1_vlan: entered promiscuous mode
[  856.604052][T11458] chnl_net:caif_netlink_parms(): no params data found
[  856.775715][ T5810] Bluetooth: hci3: command tx timeout
[  856.915609][T11386] veth0_macvtap: entered promiscuous mode
[  857.011147][T11386] veth1_macvtap: entered promiscuous mode
[  857.031415][T11383] 8021q: adding VLAN 0 to HW filter on device batadv0
[  857.216345][T11386] batman_adv: batadv0: Interface activated: batadv_slave_0
[  857.308746][T11386] batman_adv: batadv0: Interface activated: batadv_slave_1
[  857.482181][ T4426] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  857.544545][ T4426] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  857.641860][ T4999] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  857.715110][ T4623] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  857.784705][ T4623] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  857.832588][ T4999] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  858.050033][ T4999] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  858.227581][ T4999] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  858.457840][T11458] bridge0: port 1(bridge_slave_0) entered blocking state
[  858.466381][T11458] bridge0: port 1(bridge_slave_0) entered disabled state
[  858.474512][T11458] bridge_slave_0: entered allmulticast mode
[  858.484187][T11458] bridge_slave_0: entered promiscuous mode
[  858.857155][ T5810] Bluetooth: hci3: command tx timeout
[  859.076383][T11383] veth0_vlan: entered promiscuous mode
[  859.159507][T11458] bridge0: port 2(bridge_slave_1) entered blocking state
[  859.167259][T11458] bridge0: port 2(bridge_slave_1) entered disabled state
[  859.175240][T11458] bridge_slave_1: entered allmulticast mode
[  859.184988][T11458] bridge_slave_1: entered promiscuous mode
[  859.629356][ T4999] bridge_slave_1: left allmulticast mode
[  859.635817][ T4999] bridge_slave_1: left promiscuous mode
[  859.642725][ T4999] bridge0: port 2(bridge_slave_1) entered disabled state
[  859.733712][ T4999] bridge_slave_0: left allmulticast mode
[  859.739774][ T4999] bridge_slave_0: left promiscuous mode
[  859.746573][ T4999] bridge0: port 1(bridge_slave_0) entered disabled state
[  860.692058][ T4999] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  860.744174][ T4999] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  860.787298][ T4999] bond0 (unregistering): Released all slaves
[  860.895233][T11458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  861.006125][T11383] veth1_vlan: entered promiscuous mode
[  861.023198][ T5810] Bluetooth: hci3: command tx timeout
[  861.085835][T11458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  861.549451][T11458] team0: Port device team_slave_0 added
[  861.626500][T11458] team0: Port device team_slave_1 added
[  861.693285][ T4999] hsr_slave_0: left promiscuous mode
[  861.723041][ T4999] hsr_slave_1: left promiscuous mode
[  861.730932][ T4999] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  861.742075][ T4999] batman_adv: batadv0: Removing interface: batadv_slave_0
[  861.790070][ T4999] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  861.797901][ T4999] batman_adv: batadv0: Removing interface: batadv_slave_1
[  861.855696][   T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  861.864806][   T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  861.879886][   T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  861.895975][   T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  861.906845][   T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  861.917663][ T4999] veth1_macvtap: left promiscuous mode
[  861.923979][ T4999] veth0_macvtap: left promiscuous mode
[  861.929971][ T4999] veth1_vlan: left promiscuous mode
[  861.935628][ T4999] veth0_vlan: left promiscuous mode
[  862.522169][ T4999] team0 (unregistering): Port device team_slave_1 removed
[  862.560387][ T4999] team0 (unregistering): Port device team_slave_0 removed
[  863.089956][T11458] batman_adv: batadv0: Adding interface: batadv_slave_0
[  863.093654][   T50] Bluetooth: hci3: command tx timeout
[  863.099795][T11458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  863.130987][T11458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  863.148583][T11383] veth0_macvtap: entered promiscuous mode
[  863.213555][T11383] veth1_macvtap: entered promiscuous mode
[  863.360247][T11458] batman_adv: batadv0: Adding interface: batadv_slave_1
[  863.368286][T11458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  863.394730][T11458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  863.503246][ T9961] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  863.557827][T11383] batman_adv: batadv0: Interface activated: batadv_slave_0
[  863.608442][ T9961] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  863.689956][T11383] batman_adv: batadv0: Interface activated: batadv_slave_1
[  863.804284][ T9961] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  863.909827][ T4426] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  863.978452][   T50] Bluetooth: hci2: command tx timeout
[  863.979652][ T9961] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  864.062122][T11458] hsr_slave_0: entered promiscuous mode
[  864.076894][T11458] hsr_slave_1: entered promiscuous mode
[  864.085522][T11458] debugfs: 'hsr0' already exists in 'hsr'
[  864.091420][T11458] Cannot create hsr debugfs directory
[  864.109558][ T4426] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  864.296782][ T4426] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  864.319716][ T4426] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  864.660813][T11514] chnl_net:caif_netlink_parms(): no params data found
[  864.705211][ T9961] bridge_slave_1: left allmulticast mode
[  864.711078][ T9961] bridge_slave_1: left promiscuous mode
[  864.718045][ T9961] bridge0: port 2(bridge_slave_1) entered disabled state
[  864.771445][ T9961] bridge_slave_0: left allmulticast mode
[  864.777512][ T9961] bridge_slave_0: left promiscuous mode
[  864.784248][ T9961] bridge0: port 1(bridge_slave_0) entered disabled state
[  865.060742][   T30] audit: type=1326 audit(2000000459.010:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11543 comm="syz.1.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f260638f749 code=0x7fc00000
[  865.120490][   T30] audit: type=1326 audit(2000000459.040:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11543 comm="syz.1.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f260638f749 code=0x7fc00000
[  865.143846][   T30] audit: type=1326 audit(2000000459.040:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11543 comm="syz.1.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f260638f749 code=0x7fc00000
[  865.167947][   T30] audit: type=1326 audit(2000000459.040:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11543 comm="syz.1.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f260638f749 code=0x7fc00000
[  865.194519][   T30] audit: type=1326 audit(2000000459.040:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11543 comm="syz.1.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f260638f749 code=0x7fc00000
[  865.217818][   T30] audit: type=1326 audit(2000000459.040:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11543 comm="syz.1.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f260638f749 code=0x7fc00000
[  865.240875][   T30] audit: type=1326 audit(2000000459.040:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11543 comm="syz.1.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f260638f749 code=0x7fc00000
[  865.265509][   T30] audit: type=1326 audit(2000000459.040:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11543 comm="syz.1.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f260638f749 code=0x7fc00000
[  865.289754][   T30] audit: type=1326 audit(2000000459.040:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11543 comm="syz.1.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f260638f749 code=0x7fc00000
[  865.312534][   T30] audit: type=1326 audit(2000000459.040:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11543 comm="syz.1.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f260638f749 code=0x7fc00000
[  865.411346][ T9961] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  865.429971][ T9961] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  865.451388][ T9961] bond0 (unregistering): Released all slaves
[  865.838386][ T9961] hsr_slave_0: left promiscuous mode
[  865.862928][ T9961] hsr_slave_1: left promiscuous mode
[  865.871920][ T9961] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  865.882154][ T9961] batman_adv: batadv0: Removing interface: batadv_slave_0
[  865.915418][ T9961] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  865.926389][ T9961] batman_adv: batadv0: Removing interface: batadv_slave_1
[  865.992451][ T9961] veth1_macvtap: left promiscuous mode
[  865.999891][ T9961] veth0_macvtap: left promiscuous mode
[  866.005969][ T9961] veth1_vlan: left promiscuous mode
[  866.011489][ T9961] veth0_vlan: left promiscuous mode
[  866.053171][   T50] Bluetooth: hci2: command tx timeout
[  866.611468][ T9961] team0 (unregistering): Port device team_slave_1 removed
[  866.644347][ T9961] team0 (unregistering): Port device team_slave_0 removed
[  867.274230][  T750] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  867.282261][  T750] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  867.572618][ T4999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  867.580826][ T4999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  867.790372][T11514] bridge0: port 1(bridge_slave_0) entered blocking state
[  867.800611][T11514] bridge0: port 1(bridge_slave_0) entered disabled state
[  867.808407][T11514] bridge_slave_0: entered allmulticast mode
[  867.819059][T11514] bridge_slave_0: entered promiscuous mode
[  867.846240][T11514] bridge0: port 2(bridge_slave_1) entered blocking state
[  867.856363][T11514] bridge0: port 2(bridge_slave_1) entered disabled state
[  867.864470][T11514] bridge_slave_1: entered allmulticast mode
[  867.873867][T11514] bridge_slave_1: entered promiscuous mode
[  867.993017][T11514] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  868.054129][T11514] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  868.137813][   T50] Bluetooth: hci2: command tx timeout
[  868.269675][T11514] team0: Port device team_slave_0 added
[  868.277437][T11458] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  868.341143][T11514] team0: Port device team_slave_1 added
[  868.367303][T11458] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  868.469503][T11458] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  868.557950][T11458] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  868.585710][T11514] batman_adv: batadv0: Adding interface: batadv_slave_0
[  868.594107][T11514] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  868.621144][T11514] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  868.706994][T11514] batman_adv: batadv0: Adding interface: batadv_slave_1
[  868.717432][T11514] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  868.744686][T11514] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  869.175586][T11514] hsr_slave_0: entered promiscuous mode
[  869.185632][T11514] hsr_slave_1: entered promiscuous mode
[  869.194452][T11514] debugfs: 'hsr0' already exists in 'hsr'
[  869.200549][T11514] Cannot create hsr debugfs directory
[  869.430359][T11458] 8021q: adding VLAN 0 to HW filter on device bond0
[  869.620498][T11458] 8021q: adding VLAN 0 to HW filter on device team0
[  869.689870][ T9961] bridge0: port 1(bridge_slave_0) entered blocking state
[  869.697432][ T9961] bridge0: port 1(bridge_slave_0) entered forwarding state
[  869.774812][ T9961] bridge0: port 2(bridge_slave_1) entered blocking state
[  869.782287][ T9961] bridge0: port 2(bridge_slave_1) entered forwarding state
[  870.218877][   T50] Bluetooth: hci2: command tx timeout
[  870.488065][  T750] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  870.497686][  T750] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  870.696597][T11514] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  870.742353][ T3894] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  870.750687][ T3894] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  870.772406][T11514] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  870.864290][T11514] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  870.926869][T11514] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  878.522023][T11458] 8021q: adding VLAN 0 to HW filter on device batadv0
[  878.859892][T11514] 8021q: adding VLAN 0 to HW filter on device bond0
[  879.041196][T11514] 8021q: adding VLAN 0 to HW filter on device team0
[  879.094930][ T1153] bridge0: port 1(bridge_slave_0) entered blocking state
[  879.102393][ T1153] bridge0: port 1(bridge_slave_0) entered forwarding state
[  879.191349][ T1153] bridge0: port 2(bridge_slave_1) entered blocking state
[  879.199147][ T1153] bridge0: port 2(bridge_slave_1) entered forwarding state
[  880.708021][T11458] veth0_vlan: entered promiscuous mode
[  880.799486][T11514] 8021q: adding VLAN 0 to HW filter on device batadv0
[  880.879606][T11458] veth1_vlan: entered promiscuous mode
[  881.149463][T11458] veth0_macvtap: entered promiscuous mode
[  881.223813][T11458] veth1_macvtap: entered promiscuous mode
[  881.245174][T11514] veth0_vlan: entered promiscuous mode
[  881.331410][T11514] veth1_vlan: entered promiscuous mode
[  881.426360][T11458] batman_adv: batadv0: Interface activated: batadv_slave_0
[  881.526233][T11458] batman_adv: batadv0: Interface activated: batadv_slave_1
[  881.644138][ T1153] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  881.689190][ T1153] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  881.721878][ T1153] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  881.767479][T11514] veth0_macvtap: entered promiscuous mode
[  881.780760][T10675] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  881.829755][T11514] veth1_macvtap: entered promiscuous mode
[  881.984997][T11514] batman_adv: batadv0: Interface activated: batadv_slave_0
[  882.109941][T11514] batman_adv: batadv0: Interface activated: batadv_slave_1
[  882.216661][T10675] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  882.234375][T10675] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  882.288549][T10675] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  882.316778][T10675] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  889.933664][T11672] xt_CT: You must specify a L4 protocol and not use inversions on it
[  893.441347][T11692] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  894.638573][ T4042] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  894.647697][ T4042] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  894.767164][ T4042] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  894.775563][ T4042] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  896.884083][  T750] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  896.892308][  T750] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  898.423283][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  898.432525][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  900.396493][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  900.403446][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  902.979637][T11756] Bluetooth: MGMT ver 1.23
[  902.989502][T11756] Bluetooth: hci0: invalid length 0, exp 2 for type 14
[  909.035140][T11811] =====================================================
[  909.042348][T11811] BUG: KMSAN: uninit-value in ieee802154_hdr_push+0x9ac/0xa30
[  909.050599][T11811]  ieee802154_hdr_push+0x9ac/0xa30
[  909.056203][T11811]  ieee802154_header_create+0x854/0xb90
[  909.062113][T11811]  dgram_sendmsg+0xb40/0x16d0
[  909.067100][T11811]  ieee802154_sock_sendmsg+0x92/0xd0
[  909.072600][T11811]  __sock_sendmsg+0x333/0x3d0
[  909.077614][T11811]  ____sys_sendmsg+0x7f5/0xcf0
[  909.084299][T11811]  ___sys_sendmsg+0x271/0x3b0
[  909.089104][T11811]  __x64_sys_sendmsg+0x211/0x3e0
[  909.094568][T11811]  x64_sys_call+0x1c60/0x3e70
[  909.099793][T11811]  do_syscall_64+0xd9/0xf80
[  909.104772][T11811]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  909.111404][T11811] 
[  909.115119][T11811] Uninit was stored to memory at:
[  909.120970][T11811]  ieee802154_hdr_push+0x9a5/0xa30
[  909.128527][T11811]  ieee802154_header_create+0x854/0xb90
[  909.134324][T11811]  dgram_sendmsg+0xb40/0x16d0
[  909.139135][T11811]  ieee802154_sock_sendmsg+0x92/0xd0
[  909.144630][T11811]  __sock_sendmsg+0x333/0x3d0
[  909.149398][T11811]  ____sys_sendmsg+0x7f5/0xcf0
[  909.154318][T11811]  ___sys_sendmsg+0x271/0x3b0
[  909.159083][T11811]  __x64_sys_sendmsg+0x211/0x3e0
[  909.164170][T11811]  x64_sys_call+0x1c60/0x3e70
[  909.169039][T11811]  do_syscall_64+0xd9/0xf80
[  909.175855][T11811]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  909.182588][T11811] 
[  909.185090][T11811] Local variable hdr created at:
[  909.190065][T11811]  ieee802154_header_create+0x4e/0xb90
[  909.195726][T11811]  dgram_sendmsg+0xb40/0x16d0
[  909.200482][T11811] 
[  909.202983][T11811] CPU: 0 UID: 0 PID: 11811 Comm: syz.2.1705 Tainted: G             L      syzkaller #0 PREEMPT(none) 
[  909.214283][T11811] Tainted: [L]=SOFTLOCKUP
[  909.218661][T11811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  909.230562][T11811] =====================================================
[  909.238072][T11811] Disabling lock debugging due to kernel taint
[  909.244341][T11811] Kernel panic - not syncing: kmsan.panic set ...
[  909.250814][T11811] CPU: 0 UID: 0 PID: 11811 Comm: syz.2.1705 Tainted: G    B        L      syzkaller #0 PREEMPT(none) 
[  909.262240][T11811] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP
[  909.267832][T11811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  909.277964][T11811] Call Trace:
[  909.281302][T11811]  <TASK>
[  909.284440][T11811]  __dump_stack+0x26/0x30
[  909.289163][T11811]  dump_stack_lvl+0x53/0x270
[  909.293880][T11811]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  909.299977][T11811]  dump_stack+0x1e/0x25
[  909.304324][T11811]  vpanic+0x435/0xd30
[  909.308420][T11811]  panic+0x15d/0x160
[  909.312433][T11811]  kmsan_report+0x31c/0x320
[  909.317211][T11811]  ? stack_depot_save+0x12/0x20
[  909.322566][T11811]  ? __msan_warning+0x1b/0x30
[  909.327390][T11811]  ? ieee802154_hdr_push+0x9ac/0xa30
[  909.332799][T11811]  ? ieee802154_header_create+0x854/0xb90
[  909.338781][T11811]  ? dgram_sendmsg+0xb40/0x16d0
[  909.343768][T11811]  ? ieee802154_sock_sendmsg+0x92/0xd0
[  909.349369][T11811]  ? __sock_sendmsg+0x333/0x3d0
[  909.354351][T11811]  ? ____sys_sendmsg+0x7f5/0xcf0
[  909.359440][T11811]  ? ___sys_sendmsg+0x271/0x3b0
[  909.364478][T11811]  ? __x64_sys_sendmsg+0x211/0x3e0
[  909.369756][T11811]  ? x64_sys_call+0x1c60/0x3e70
[  909.374708][T11811]  ? do_syscall_64+0xd9/0xf80
[  909.379555][T11811]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  909.385890][T11811]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  909.392197][T11811]  ? ____sys_sendmsg+0x7f5/0xcf0
[  909.397328][T11811]  ? ___sys_sendmsg+0x271/0x3b0
[  909.402374][T11811]  ? __x64_sys_sendmsg+0x211/0x3e0
[  909.407588][T11811]  ? x64_sys_call+0x1c60/0x3e70
[  909.412563][T11811]  ? do_syscall_64+0xd9/0xf80
[  909.417451][T11811]  ? kmsan_get_metadata+0xfb/0x160
[  909.422688][T11811]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  909.428706][T11811]  ? cfg802154_pernet_exit+0x1f1/0x230
[  909.434285][T11811]  ? filter_irq_stacks+0x49/0x190
[  909.439488][T11811]  ? kmsan_get_metadata+0xfb/0x160
[  909.444720][T11811]  ? kmsan_internal_memmove_metadata+0x91/0x230
[  909.451150][T11811]  ? kmsan_get_metadata+0xfb/0x160
[  909.456446][T11811]  ? kmsan_internal_memmove_metadata+0x181/0x230
[  909.462882][T11811]  ? kmsan_get_metadata+0xfb/0x160
[  909.468094][T11811]  __msan_warning+0x1b/0x30
[  909.472691][T11811]  ieee802154_hdr_push+0x9ac/0xa30
[  909.477929][T11811]  ? pn533_transceive+0x1a2/0x770
[  909.483132][T11811]  ? __msan_memcpy+0x108/0x1c0
[  909.487992][T11811]  ieee802154_header_create+0x854/0xb90
[  909.493723][T11811]  ? kmsan_get_metadata+0xfb/0x160
[  909.498942][T11811]  ? __pfx_ieee802154_header_create+0x10/0x10
[  909.505123][T11811]  dgram_sendmsg+0xb40/0x16d0
[  909.509914][T11811]  ? __pfx_dgram_sendmsg+0x10/0x10
[  909.515110][T11811]  ieee802154_sock_sendmsg+0x92/0xd0
[  909.520503][T11811]  ? __pfx_ieee802154_sock_sendmsg+0x10/0x10
[  909.526599][T11811]  ? __pfx_ieee802154_sock_sendmsg+0x10/0x10
[  909.532694][T11811]  __sock_sendmsg+0x333/0x3d0
[  909.537496][T11811]  ____sys_sendmsg+0x7f5/0xcf0
[  909.542451][T11811]  ___sys_sendmsg+0x271/0x3b0
[  909.547227][T11811]  ? __rcu_read_unlock+0x6d/0xd0
[  909.552278][T11811]  ? __fget_files+0x3b4/0x4a0
[  909.557052][T11811]  ? __fget_files+0x3b9/0x4a0
[  909.561827][T11811]  ? kmsan_get_metadata+0xfb/0x160
[  909.567032][T11811]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  909.572948][T11811]  __x64_sys_sendmsg+0x211/0x3e0
[  909.577983][T11811]  ? kmsan_get_metadata+0xfb/0x160
[  909.583203][T11811]  x64_sys_call+0x1c60/0x3e70
[  909.587995][T11811]  do_syscall_64+0xd9/0xf80
[  909.592580][T11811]  ? clear_bhb_loop+0x40/0x90
[  909.597554][T11811]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  909.603634][T11811] RIP: 0033:0x7f146c78f749
[  909.608149][T11811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  909.627960][T11811] RSP: 002b:00007f146d69f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  909.636642][T11811] RAX: ffffffffffffffda RBX: 00007f146c9e5fa0 RCX: 00007f146c78f749
[  909.644688][T11811] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000008
[  909.652734][T11811] RBP: 00007f146c813f91 R08: 0000000000000000 R09: 0000000000000000
[  909.660805][T11811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  909.668835][T11811] R13: 00007f146c9e6038 R14: 00007f146c9e5fa0 R15: 00007fffb99c0128
[  909.676918][T11811]  </TASK>
[  909.680427][T11811] Kernel Offset: disabled
[  909.684804][T11811] Rebooting in 86400 seconds..