last executing test programs:

26m5.205657741s ago: executing program 32 (id=7):
r0 = socket$nl_route(0x10, 0x3, 0x0)
iopl(0x3)
recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x22, 0x0, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = mq_open(&(0x7f0000000580)='!\x7f\x00\xca\x00\x00\x00\f\x00vt\x00\x01E!\x05\x99\xb7|`', 0x6e93ebbbcc0884f2, 0x61, 0x0)
mq_timedreceive(r2, &(0x7f0000000700)=""/200, 0xc8, 0x0, 0x0)
listen(r0, 0x80000001)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x3, 0x220108, 0xb, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000380), 0x2, r3}, 0x38)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, r3}, 0x38)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x2000c890}, 0xcc084)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
wait4(0x0, &(0x7f0000000400), 0x8, &(0x7f00000004c0))
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]})
setgroups(0x0, 0x0)
migrate_pages(0x0, 0x5, &(0x7f0000000180)=0x9, &(0x7f0000000080)=0x272)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)

24m58.40563012s ago: executing program 33 (id=84):
r0 = socket$nl_route(0x10, 0x3, 0x0)
iopl(0x3)
recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x22, 0x0, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = mq_open(&(0x7f0000000580)='!\x7f\x00\xca\x00\x00\x00\f\x00vt\x00\x01E!\x05\x99\xb7|`', 0x6e93ebbbcc0884f2, 0x61, &(0x7f0000000480)={0x0, 0x2, 0x7})
mq_timedreceive(r2, &(0x7f0000000700)=""/200, 0xc8, 0x0, 0x0)
listen(r0, 0x80000001)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x3, 0x220108, 0xb, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, 0x0, &(0x7f0000000380), 0x2, r3}, 0x38)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, r3}, 0x38)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x2000c890}, 0xcc084)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
wait4(0x0, &(0x7f0000000400), 0x8, &(0x7f00000004c0))
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]})
setgroups(0x0, 0x0)
migrate_pages(0x0, 0x5, &(0x7f0000000180)=0x9, &(0x7f0000000080)=0x272)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)

24m53.433555298s ago: executing program 34 (id=91):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$inet(0x2, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x3}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b"], 0xfc}, 0x1, 0x0, 0x0, 0x2000c010}, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8)
gettid()
socket$inet_udp(0x2, 0x2, 0x0)
timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0)
setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10)
connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
r6 = userfaultfd(0x801)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000001c0))
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2})

24m11.945841804s ago: executing program 2 (id=146):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
getpeername$qrtr(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x32)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040), 0x0, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000001940)=[{0x0}], 0x1}, 0x20002100)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = openat$mixer(0xffffffffffffff9c, 0x0, 0x101180, 0x0)
getrlimit(0x7, &(0x7f0000000000))
ioctl$SOUND_MIXER_WRITE_VOLUME(r4, 0xc0040d07, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe)
sendmmsg$sock(r5, &(0x7f0000008340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x18}}], 0x4000000000002a0, 0x40004000)
getsockopt$IP_SET_OP_GET_FNAME(r5, 0x1, 0x53, &(0x7f00000000c0)={0x8, 0x7, 0x0, 'syz0\x00'}, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000000700000000000000bf9800000000000056080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)

24m11.065787284s ago: executing program 2 (id=148):
r0 = socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x3000000, 0x13, r0, 0x180000000)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000f80)={'filter\x00', 0x7, 0x4, 0x3e8, 0x1f0, 0x3e8, 0x300, 0x300, 0x1f0, 0x300, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x1000, 0xc0, 0x3}}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7, 'syz0\x00', {0x10000}}}}, {{@arp={@broadcast, @rand_addr=0x64010100, 0x0, 0x0, 0x5, 0xd, {@empty, {[0xff, 0x0, 0xff, 0xff, 0x0, 0xff]}}, {}, 0xfffa, 0x6, 0x7, 0x0, 0xb2, 0x6, 'veth1_to_bond\x00', 'wg0\x00', {}, {0xff}, 0x0, 0x210}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @multicast1, @remote, 0xd, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000380)={@private0, 0x8000000, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', <r5=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={0xffffffffffffffff, r5, 0x25, 0x2, @void}, 0x10)
syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000000000140600fe8000000000000000000000000000aa00024e22000000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002001190780002"], 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r8 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r9 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0)
r10 = dup3(r8, r9, 0x0)
ioctl$MON_IOCG_STATS(r10, 0xc0109207, &(0x7f00000001c0))
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0)

24m8.636515271s ago: executing program 2 (id=150):
r0 = syz_usb_connect$lan78xx(0x6, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0)
r1 = open(&(0x7f0000000380)='./file0\x00', 0x40, 0x0)
ftruncate(r1, 0x2007ffd)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24008800)
socket$nl_generic(0x10, 0x3, 0x10)
socket$can_bcm(0x1d, 0x2, 0x2)
bind$inet(0xffffffffffffffff, 0x0, 0xa0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='highspeed', 0x9)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
getpid()
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r5, 0x84, 0x81, &(0x7f0000000280)="20f6c734", 0x4)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, &(0x7f0000000200), 0x1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, 0x0, 0x0)
sendto$inet6(r5, &(0x7f0000000400), 0x0, 0x400c0d5, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0xa2d7}, 0x1c)
writev(r5, 0x0, 0x0)
write$UHID_SET_REPORT_REPLY(r5, &(0x7f00000007c0)=ANY=[], 0xffe0)
r6 = socket(0x40000000015, 0x5, 0x0)
sendmsg$unix(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x18, 0x1, 0x1, [r6, r4]}}], 0x18, 0x8015}, 0x84)

24m7.252206477s ago: executing program 2 (id=152):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000280)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x10000000}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$int_in(r5, 0x5452, &(0x7f0000000940)=0x707987cd)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20)
recvmsg(r5, 0x0, 0x0)
sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)

24m5.817369699s ago: executing program 2 (id=154):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040)=0x8001, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
setsockopt$inet6_int(r0, 0x29, 0x9, &(0x7f0000000000)=0x80000000, 0x4)
getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000080)=""/86, &(0x7f00000001c0)=0x56)

24m4.623581683s ago: executing program 2 (id=155):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, <r1=>0x0}, &(0x7f0000000200)=0x14)
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x80200)
setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000240)={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, r1}, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg(r3, &(0x7f00000029c0), 0x400006d, 0x20000004)
prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0)
shutdown(r4, 0x2)

23m49.013618138s ago: executing program 35 (id=155):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, <r1=>0x0}, &(0x7f0000000200)=0x14)
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x80200)
setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000240)={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, r1}, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg(r3, &(0x7f00000029c0), 0x400006d, 0x20000004)
prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0)
shutdown(r4, 0x2)

17m39.483083901s ago: executing program 3 (id=453):
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
getpeername$qrtr(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x32)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040), 0x0, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x20002100)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = openat$mixer(0xffffffffffffff9c, 0x0, 0x101180, 0x0)
getrlimit(0x7, &(0x7f0000000000))
ioctl$SOUND_MIXER_WRITE_VOLUME(r4, 0xc0040d07, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe)
sendmmsg$sock(r5, &(0x7f0000008340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40004000)
getsockopt$IP_SET_OP_GET_FNAME(r5, 0x1, 0x53, &(0x7f00000000c0)={0x8, 0x7, 0x0, 'syz0\x00'}, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000000700000000000000bf9800000000000056080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)

17m38.452284037s ago: executing program 3 (id=454):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e23, 0x5, @mcast2, 0x1c}], 0x1c)
sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000000)='M', 0x1}], 0x1}, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000380)=0x7ffd)
ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000180)={0x20, 0x0})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$BTRFS_IOC_GET_FEATURES(r2, 0x80189439, &(0x7f00000001c0))
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00004bd000/0x3000)=nil, 0x3000}})

17m27.583325998s ago: executing program 3 (id=463):
r0 = socket$tipc(0x1e, 0x2, 0x0)
sendmsg$tipc(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x3}}, 0x10, 0x0, 0x0, &(0x7f00000004c0)="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", 0x303, 0x4040840}, 0x20044050)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081)
syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$phonet_pipe(0x23, 0x5, 0x2)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x2049}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0x0, 0x9, 0x0, 0xf, 0x80000002}, 0x0, 0x0)

17m26.226821555s ago: executing program 3 (id=466):
syz_open_dev$loop(0x0, 0xffffffff7ffffffd, 0x160862)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x8a003, 0xf)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1200000004000000040000000200000004000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f00000000c0)="a9", &(0x7f0000000100)=@tcp6=r0, 0x1}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, 0x0}, 0x20)

17m25.926985561s ago: executing program 3 (id=467):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
r0 = socket$packet(0x11, 0x3, 0x300)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
getpeername$packet(r1, 0x0, &(0x7f0000000040))
sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, 0x0, 0x2f000000}, 0x80, 0x0}}], 0x1, 0x0)

17m22.804420837s ago: executing program 3 (id=468):
socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0)
ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000180)=0x2, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f00000000c0))

17m6.118150773s ago: executing program 36 (id=468):
socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0)
ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000180)=0x2, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f00000000c0))

16m49.64425047s ago: executing program 5 (id=494):
ioprio_set$uid(0x3, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
syz_usb_connect(0x5, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x74, 0xad, 0x60, 0x10, 0x10c4, 0xeac1, 0xff7e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x2, 0x0, 0x30, 0xc8, 0x1e}}]}}]}}, 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r1 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r2 = fcntl$getown(r1, 0x9)
sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x3c, 0x3e9, 0x200, 0x70bd27, 0x25dfdbfb, {0x6f, 0x1, 0x2, r2, 0x4, 0x4, 0x7, 0x7, 0x0, 0x6, 0xff}}, 0x3c}, 0x1, 0x0, 0x0, 0x40c0004}, 0x4000080)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x3, 0x1, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x6}}, {0x0, 0x13}}}, 0xa0)
sendfile(r1, r1, &(0x7f0000000080), 0x7f03)

16m39.364868725s ago: executing program 5 (id=504):
socket$kcm(0x10, 0x2, 0x0)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000001cc0)='./file0\x00', 0x2, 0x80e2e8)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000340)={0x50, 0x0, r2, {0x7, 0x1f, 0x10000000, 0x34808521, 0x5, 0x0, 0x5, 0x8, 0x0, 0x0, 0x0, 0xa4009f7e}}, 0x50)
syz_fuse_handle_req(r1, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x8)
dup3(r3, r1, 0x0)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x800000000, 0x3, 0x7d, 0x0, 0x8000, 0x4, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x8, 0xffffffffffffffff, 0x9, 0x0, 0x11, 0x80000006, 0x3ff}, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)

16m38.142222979s ago: executing program 5 (id=506):
mount$tmpfs(0x0, &(0x7f0000000200)='.\x00', &(0x7f0000000240), 0x204080, &(0x7f0000004000)={[{}]})
socket$packet(0x11, 0x3, 0x300)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000004180)='/proc/mdstat\x00', 0x0, 0x0)
read$FUSE(r4, 0x0, 0x0)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
timer_settime(0x0, 0x0, 0x0, 0x0)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
sendto$inet(r0, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)

16m36.547053025s ago: executing program 5 (id=507):
mount$tmpfs(0x0, &(0x7f0000000200)='.\x00', &(0x7f0000000240), 0x204080, &(0x7f0000004000)={[{}]})
socket$packet(0x11, 0x3, 0x300)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000004180)='/proc/mdstat\x00', 0x0, 0x0)
read$FUSE(r4, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
timer_settime(0x0, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)

16m35.08268666s ago: executing program 5 (id=508):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r4 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r4, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc)
r5 = socket$qrtr(0x2a, 0x2, 0x0)
recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0)
connect$qrtr(r5, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc)
writev(r5, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1)

16m32.274536753s ago: executing program 5 (id=510):
mount$tmpfs(0x0, &(0x7f0000000200)='.\x00', &(0x7f0000000240), 0x204080, &(0x7f0000004000)={[{}]})
socket$packet(0x11, 0x3, 0x300)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000004180)='/proc/mdstat\x00', 0x0, 0x0)
read$FUSE(r4, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
sendto$inet(r0, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)

16m16.498351696s ago: executing program 37 (id=510):
mount$tmpfs(0x0, &(0x7f0000000200)='.\x00', &(0x7f0000000240), 0x204080, &(0x7f0000004000)={[{}]})
socket$packet(0x11, 0x3, 0x300)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000004180)='/proc/mdstat\x00', 0x0, 0x0)
read$FUSE(r4, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
sendto$inet(r0, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)

13m31.910765206s ago: executing program 7 (id=647):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002cc0)={0x1, [{0x1, 0x1aa0, 0x6, &(0x7f0000000640)="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"}, {0x0, 0x0, 0x7fffffff, 0x0}, {0x3, 0x0, 0x100d5ba, 0x0}, {0x2, 0x0, 0x4, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x2, 0x0, 0xa2d, 0x0}, {0x1, 0x0, 0x1, 0x0}, {0x1, 0x0, 0xf3f, 0x0}, {0x4, 0x0, 0x1000, 0x0}, {0x2, 0x0, 0x6, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x2, 0x0, 0x104, 0x0}, {0x1, 0x0, 0x40007, 0x0}]})
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x87, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24660f38816810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f21f835030009000f23f8450f2244c4417c50cc"}}], 0x87})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20)
r3 = accept4$alg(r2, 0x0, 0x0, 0x80800)
sendmmsg$alg(r3, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0x10}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x3, 0x880}], 0x1, 0x80001)
recvmmsg(r3, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001080)=""/4096, 0x1000}], 0x1}, 0x10001}], 0x1, 0x102, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000340)="f20f2338650f405a00f20f32670f2169f30f099a7c0000001e010fc79b060000000f01cf673e0f47d7c166bafbacac40", 0x30}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

13m30.739819615s ago: executing program 7 (id=648):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xe}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
lseek(r3, 0x101, 0x1)
getdents64(r3, 0xfffffffffffffffe, 0x29)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x4)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c383032313100f58965f1"], 0x20}}, 0x0)
recvmmsg(r4, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0)

13m28.030986369s ago: executing program 7 (id=650):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17)
openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7ff}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x1)
r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8)
openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0)

13m26.917319617s ago: executing program 7 (id=652):
r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000005c0), 0x40000000088d82, 0x0)
r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000040)={0x0, 0x5cd0, 0x100, 0xfffffffc, 0x1bc}, &(0x7f0000002180)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x1, &(0x7f0000000140)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(r1, 0x847b9, 0xebd0, 0xa, 0x0, 0x0)

13m25.991719568s ago: executing program 7 (id=653):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x500)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, 0x0, 0x0)
openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000000280)={{0x3, 0x5, 0x263f, 0x0, '\x00', 0x20000000}, 0x0, [0x0, 0x0, 0x0, 0xfffdffffffffbffd, 0x0, 0x0, 0x0, 0x3, 0x75, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x1, 0x0, 0x0, 0x7, 0xc19, 0xfffffffffffffffc, 0x60, 0x0, 0x0, 0x2, 0x1, 0x40, 0x0, 0x9, 0x100000000, 0x0, 0x0, 0x0, 0x10, 0x200000, 0xffffffffffffffff, 0x0, 0xd451, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x5, 0x3, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0xe411, 0x40000000000001, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffff8001, 0x0, 0xfffc, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff4, 0x0, 0x0, 0x8000, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff]})
syz_usb_connect$lan78xx(0x5, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000885)
r3 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil)
shmctl$IPC_RMID(r3, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0x80000003)
r4 = dup2(r1, r1)
syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg}}}}}, 0x0)
read$FUSE(r4, &(0x7f0000001300)={0x2020}, 0x2020)

13m21.489133446s ago: executing program 7 (id=656):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$inet(0x2, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x3}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b"], 0xfc}, 0x1, 0x0, 0x0, 0x2000c010}, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8)
gettid()
socket$inet_udp(0x2, 0x2, 0x0)
timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0)
setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10)
connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
r6 = userfaultfd(0x801)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000001c0))
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2})

13m6.094505261s ago: executing program 38 (id=656):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$inet(0x2, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x3}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b"], 0xfc}, 0x1, 0x0, 0x0, 0x2000c010}, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8)
gettid()
socket$inet_udp(0x2, 0x2, 0x0)
timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0)
setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10)
connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
r6 = userfaultfd(0x801)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000001c0))
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2})

4m41.078580868s ago: executing program 6 (id=1038):
openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x44004000)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x16c4}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
mount$9p_virtio(0x0, 0x0, 0x0, 0x0, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448de, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x3, r3}, 0x38)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10)
socket$vsock_stream(0x28, 0x1, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)

4m40.252433316s ago: executing program 6 (id=1039):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd7000ffd9df2502000000ff00000800000000080018004e214e21"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x4040)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0)
unshare(0x26020480)
ioctl$XFS_IOC_FSCOUNTS(r1, 0x80205871, &(0x7f00000000c0))
socket(0x10, 0x80002, 0x2)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
ioctl$TCSETSW2(r2, 0x80047456, &(0x7f0000000040)={0x6, 0xb, 0x6, 0x7fffffff, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0xffffffff, 0x5})
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b35, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0)
socket$inet6(0xa, 0x3, 0x7)
socket$netlink(0x10, 0x3, 0x0)
fsopen(&(0x7f0000000200)='ecryptfs\x00', 0x0)

4m37.874610053s ago: executing program 6 (id=1041):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x3dd681fbf96b935, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0xa73, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x111, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
unshare(0x24020400)
r3 = socket$kcm(0x29, 0x2, 0x0)
r4 = creat(&(0x7f0000000040)='./file0\x00', 0x4b)
close(r4)
r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[<r6=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6, <r7=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000680)={r7, 0x1ff, 0x0, 0x1, 0x3, [], [0x800020], [0x0, 0x1001000, 0x1], [0x0, 0x0, 0xfffffffffefffffc, 0x9]})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000280)={&(0x7f00000000c0)=[<r8=>0x0], 0x0, 0x0, 0x0, 0x3ffffffffffffe64})
ioctl$DRM_IOCTL_MODE_RMFB(r4, 0xc00464af, &(0x7f0000000480)=r8)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, 0x0)
getsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, 0x0, 0x0)
sync()

4m36.514769849s ago: executing program 6 (id=1042):
socket$kcm(0x10, 0x3, 0x10)
open_tree(0xffffffffffffff9c, 0x0, 0x89901)
socket$igmp6(0xa, 0x3, 0x2)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
r2 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f00000000c0), 0x12)
preadv(r2, &(0x7f0000000600)=[{&(0x7f00000001c0)=""/183, 0xb7}], 0x1, 0x21, 0x0)

4m36.43044869s ago: executing program 6 (id=1043):
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
statx(0xffffffffffffffff, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x7100, 0x1, 0x0)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0)
execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c)
execve(&(0x7f0000001040)='./file0\x00', &(0x7f0000001080)={[&(0x7f0000000180)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y<yN\xfbXh[\xe9\xa9\x1702\x7f\x9e\xf0\x99\xad\xdc;p\x98R\a\xb1\x9d^\x0f\x121\xb3\xab7P\xd6\xcb\x06\xfe2~W\xd9\xad\x80\xd9!\x89%\xb80\xa3l;\x1eK\x90\x15\xc6\x11A\xfc\x7f\xc6\xed\xe7\xa3\x9f\xb4\xce\"\xef\xa8\x86F\x15\xb9\rj\f\xafa\xb0}\xde\'E\x84\xb2bO\xd2\xd4\x85F\xde1e\xe0\xf2\xa0/\xd3<\xda\xfe\x04,\xfa\x97\xb6\xf4\xcf\x0el\xf2\xbd\x18\x88\xd7\x02\xce\x99\x1f\xadj\x89\xd9\xb7\xae9\xb0\xb0{n.\xd7\x87C\x0eh|KZG\x108l\n\xcd\xe9\x04\xafM\xbf\x83#>\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}, 0x0)

4m35.457348121s ago: executing program 6 (id=1045):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0)
ioctl$FBIOPAN_DISPLAY(r2, 0x4606, &(0x7f0000000200)={0x190, 0x640, 0x3c0, 0x280, 0x0, 0xc0e4, 0x18, 0x1, {0x5, 0x8001}, {0x0, 0x7}, {0xb, 0x2000}, {0x29, 0x10001}, 0x1, 0x80, 0x7e, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x6, 0x8, 0xd, 0x7fff, 0x0, 0x0, 0x3, 0x5})
r3 = inotify_init1(0x800)
r4 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000000)={0x2, 0x40000, 0x0, r4, 0x3})
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r5, 0x0, 0x17, 0x0, 0x0)
inotify_rm_watch(r3, 0x0)
syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0xc1485544, &(0x7f0000000140)=0x5)
lseek(r6, 0x8, 0x1)
syz_open_procfs(0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000200)='./mnt\x00', 0x4)
r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$UI_SET_ABSBIT(r7, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x3)
write$uinput_user_dev(r7, &(0x7f0000001740)={'syz0\x00', {0x8000}, 0x0, [0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0xc0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x1000, 0x10], [0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x8001, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x400, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x806, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28000000], [0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x681, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x2]}, 0x45c)
ioctl$UI_DEV_CREATE(r7, 0x5501)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0)

4m20.220943065s ago: executing program 39 (id=1045):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0)
ioctl$FBIOPAN_DISPLAY(r2, 0x4606, &(0x7f0000000200)={0x190, 0x640, 0x3c0, 0x280, 0x0, 0xc0e4, 0x18, 0x1, {0x5, 0x8001}, {0x0, 0x7}, {0xb, 0x2000}, {0x29, 0x10001}, 0x1, 0x80, 0x7e, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x6, 0x8, 0xd, 0x7fff, 0x0, 0x0, 0x3, 0x5})
r3 = inotify_init1(0x800)
r4 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000000)={0x2, 0x40000, 0x0, r4, 0x3})
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r5, 0x0, 0x17, 0x0, 0x0)
inotify_rm_watch(r3, 0x0)
syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0xc1485544, &(0x7f0000000140)=0x5)
lseek(r6, 0x8, 0x1)
syz_open_procfs(0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000200)='./mnt\x00', 0x4)
r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$UI_SET_ABSBIT(r7, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x3)
write$uinput_user_dev(r7, &(0x7f0000001740)={'syz0\x00', {0x8000}, 0x0, [0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0xc0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x1000, 0x10], [0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x8001, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x400, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x806, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28000000], [0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x681, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x2]}, 0x45c)
ioctl$UI_DEV_CREATE(r7, 0x5501)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0)

18.736389627s ago: executing program 0 (id=1365):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r2 = socket$kcm(0x11, 0x200000000000002, 0x300)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x20, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x10001}}]}, 0x20}, 0x1, 0x0, 0x0, 0x94f7cfd7d57de2ec}, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=<r4=>0x0)
r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
write$UHID_CREATE2(r5, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r6 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042)
ioctl$HIDIOCGRDESCSIZE(r6, 0x80044801, &(0x7f0000000100))
fcntl$lock(0xffffffffffffffff, 0x6, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0)
r7 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x309})
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'bridge_slave_1\x00'})
sendmsg$nl_route_sched(r8, 0x0, 0x9000)
r9 = openat$fb0(0xffffffffffffff9c, 0x0, 0x402, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r9, 0x0)
ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000050a000/0x13000)=nil, 0x13000}, 0x1})
readv(r7, &(0x7f00000002c0)=[{&(0x7f0000000400)=""/224, 0x20}], 0x1000000000000108)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x18)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000900)=r1, 0x4)

15.311229851s ago: executing program 1 (id=1371):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000001c0)=0x197b, 0x4)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401)
socket$packet(0x11, 0x3, 0x300)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x69801}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x1}, @IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x2}, @IFLA_IPTUN_ENCAP_TYPE={0x6}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)

14.408568314s ago: executing program 1 (id=1374):
socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000580)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x106}}, 0x20)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0)
ioctl$IOCTL_STATUS_ACCEL_DEV(r4, 0x40046103, &(0x7f0000000300)={0x0, 0x6, 0xfffffff9, 0x9, 0x5, 0x1, 0xf7, 0x7f, 0x3, 0x1, 0x5, "f7d9d17d2756a832754d2db7a81004bd6b122e1a46766bc2f771d8be1f6c41e1"})
ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000000)=0xa)
ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x1, 0x806, 0x0, 0x80000007, 0x2, "6d1714a98b08633c45debea890564b7cdcd0f7", 0x6, 0x3})
r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000000)=0x200000000)
write$vhost_msg_v2(r5, &(0x7f00000019c0)={0x2, 0x0, {&(0x7f0000001880)=""/13, 0xd, 0x0, 0x2, 0x2}}, 0x48)
write$vhost_msg_v2(r5, &(0x7f0000000180)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x3}}, 0x48)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
syz_emit_ethernet(0x122, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x0)
r7 = openat$cgroup_int(r6, &(0x7f0000000100)='blkio.reset_stats\x00', 0x2, 0x0)
write$cgroup_int(r7, &(0x7f0000000040)=0x2, 0x12)
r8 = socket(0x400000000010, 0x3, 0x0)
ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(0xffffffffffffffff, 0x7b1, &(0x7f0000000140)={&(0x7f0000001880)=[0xfffffff8, 0xfc, 0x1, 0x0, 0x8, 0x1a1f, 0x8, 0x80000000, 0x27, 0x5, 0x8, 0xbe, 0x1, 0xcf, 0x3, 0x10, 0x81, 0xffff3092, 0xd0b, 0x9, 0x9, 0x1, 0x2, 0x21ad, 0x0, 0x0, 0x6, 0x51, 0x8b, 0x2, 0x0, 0x4, 0xc632, 0x1, 0xff, 0x100, 0xfffffff1, 0x94, 0x3, 0xb8, 0xfc, 0x9, 0xbf55, 0x10000, 0x3, 0x3, 0x10000, 0x1, 0x6, 0x5, 0x3, 0x10f, 0x7, 0x8, 0xffffffff, 0x5, 0x6, 0x1, 0x5, 0x7, 0x9a6f, 0x9, 0x3, 0x2, 0x8, 0x5, 0x6, 0xfffffffd, 0x3, 0x1, 0x4, 0x58a0, 0x9, 0x0, 0xfffffffd, 0x7, 0x49, 0x2, 0x7, 0xa, 0x0, 0x3, 0x7fffffff, 0x4, 0x8000, 0xf, 0xc, 0x3, 0x6, 0x0, 0x8, 0x6, 0x8, 0x1, 0x804, 0x7fff, 0x3, 0x7, 0x401, 0x7f, 0x8001, 0x9, 0x80000001, 0x3, 0xe, 0x1, 0x3, 0x7ff, 0x5, 0x7, 0x9, 0x2, 0x7ff, 0x7, 0x4, 0x5ad4, 0x3, 0x80000000, 0xa51, 0x3, 0x7a1, 0x92, 0x1, 0x1, 0x1, 0xad6, 0x9c79, 0x700, 0xa, 0x0, 0x5, 0x7, 0x101, 0x5, 0xfffffffd, 0x4, 0xfffffffa, 0x4, 0x1, 0x8000, 0x2, 0x4, 0x3, 0x10001, 0x5, 0x80000001, 0x80000001, 0x9, 0x4, 0xafa9, 0x9, 0x401, 0x800, 0x40, 0x7, 0xff, 0xffff7332, 0xfffffff7, 0x8, 0x7484, 0xcdd3, 0x9, 0x1, 0x80000000, 0xfffffffb, 0xad08, 0xa, 0x8, 0x400, 0x2, 0x6, 0x7fffffff, 0xfffffffe, 0x6, 0x8, 0x8, 0x0, 0x6, 0x4, 0x3ff, 0x40, 0x6, 0x7, 0x7fffffff, 0x370, 0xffffff96, 0x9, 0x6, 0x5, 0x4, 0x80000001, 0x9, 0x7, 0x9, 0x1, 0x2, 0x6, 0x7fff, 0x8cc5, 0x7, 0x9, 0x0, 0x8f91, 0x1, 0x0, 0x2, 0x312, 0xae44, 0xffff, 0x1, 0x10, 0x7f, 0xffff, 0x74, 0xfffffff3, 0xc, 0x2, 0x16, 0x6, 0x6, 0x2, 0x8, 0x5, 0x81, 0x1, 0xedf, 0x7f, 0x7, 0x80000000, 0x5a4, 0x63cffcbc, 0x1, 0x7ff, 0xe04a, 0xffffffff, 0x7f, 0x45d, 0x5, 0x10, 0x7f0, 0x10001, 0x10001, 0x5a, 0x1, 0x0, 0x6, 0x2, 0x99bb, 0x6, 0x3, 0x9c8, 0x8, 0x5, 0x0, 0x0, 0x2, 0x2, 0x7, 0x746, 0xfffffff9, 0x1, 0x6, 0x2, 0x16007f73, 0xfffffffa, 0x81, 0x6, 0x192, 0x4, 0x9, 0xffff, 0xfffffffe, 0x2, 0x6, 0x8000, 0xcf, 0x6f, 0x0, 0xa, 0x8001, 0x2, 0x0, 0xe, 0x9, 0x8, 0x8, 0x2, 0x3, 0x7fff, 0x1, 0xfffffff7, 0x2, 0x2, 0x800, 0x100, 0x7, 0xee, 0x5, 0x5b47cdb4, 0x7463, 0x8, 0x808, 0x5, 0x10001, 0x241e, 0x2, 0x0, 0x4, 0x7fffffff, 0x3cc2, 0x6, 0x0, 0x69e, 0x10, 0x4, 0xd9, 0x8ead, 0x9, 0x8000, 0x1, 0x3824, 0x9, 0x200, 0x1000, 0x1ff, 0xf, 0x3, 0x7, 0x38000000, 0x6, 0x7f, 0x7, 0x4a, 0x9, 0xdbb, 0x5, 0x3, 0x9, 0x0, 0x5a, 0xff, 0x7ff, 0x7ff, 0x5, 0xfd, 0x7, 0x4978, 0x401, 0x2, 0x10, 0xc, 0x5, 0x1, 0xffffffff, 0x2, 0xff, 0x2, 0x0, 0x2, 0x0, 0x3, 0x80, 0x7, 0x7, 0x0, 0x6, 0x583, 0xfffffffa, 0x1, 0x3ff, 0x6, 0x6, 0x8, 0x9, 0x1, 0xe, 0x6, 0x5bb3, 0xfc49, 0x0, 0x79, 0x5, 0x5, 0x7ff, 0x5, 0xff, 0x40000000, 0x6, 0xfffffff8, 0x1, 0x5, 0x7, 0x3, 0x1, 0x4, 0xdc24, 0x2, 0x1, 0x8001, 0x7, 0x4, 0x2, 0xaa2a, 0x9, 0x80000001, 0xfffffff8, 0x4, 0x3, 0x7, 0x6, 0x5, 0x6, 0x7f, 0x5, 0x80000001, 0x51, 0x4, 0x9, 0x3, 0x0, 0xa, 0xc, 0x0, 0xfffffffa, 0x80000000, 0x0, 0x8, 0x9, 0x5, 0x82, 0x140000, 0x5, 0x2, 0x7f, 0x4, 0x0, 0x5, 0xffff, 0x1, 0xffffffff, 0x1, 0x4, 0xffff, 0x0, 0xffff, 0x6, 0xffffffff, 0x9, 0x3, 0x6, 0x40, 0x100, 0x9, 0x5, 0x0, 0x2, 0x4, 0x7, 0x80000000, 0x3, 0x21, 0x7, 0x0, 0x5, 0x24, 0x470000, 0x40, 0x3, 0x8, 0x0, 0x2, 0x7, 0x5, 0x100, 0x7, 0xd05692d, 0x100, 0x55bb, 0x7, 0x9, 0x9, 0x1000, 0x4, 0x80000001, 0x4, 0x401, 0x7, 0x5, 0x7, 0x19c40000, 0x40, 0x0, 0x1, 0x4, 0x6, 0xfff, 0x73, 0x1ff, 0xfffffff9, 0x9, 0x0, 0x13c, 0x40000000, 0xe3fa, 0x3, 0xffff, 0x1, 0x2, 0x1, 0x6, 0xdcb, 0x3, 0x8, 0x48000, 0x4f, 0x2b4, 0x2, 0x200, 0x567e, 0x9, 0x6, 0x80000001, 0x1, 0x7, 0x1, 0x6, 0x5d8, 0xf7, 0x800, 0xe, 0x80, 0x5, 0x2, 0xffffffff, 0xb, 0x977, 0x21b, 0x4, 0x333d, 0x8, 0x5, 0x8, 0x3, 0x3, 0x1, 0x3, 0xc67f, 0x9, 0x800, 0x1, 0x1000, 0xd58, 0x1a7, 0xb35, 0x4, 0x1, 0xa1, 0x8, 0xff, 0x1ff, 0x8, 0x9, 0x103d, 0x5, 0xffe0000, 0x101, 0x7, 0x43bb, 0x6, 0x5, 0x3, 0xff, 0x5, 0x4, 0x101, 0x9, 0x6, 0xa, 0x7, 0x7, 0x5, 0x4, 0x40, 0x98b, 0x1, 0x4, 0xd497, 0x5, 0x1ff, 0xa, 0xa2, 0x6, 0xa, 0x9, 0x7, 0x2, 0x4, 0x800, 0x1, 0xcc9, 0x0, 0x9, 0xf7, 0x4, 0xb4, 0x7, 0x2, 0x400, 0x8000, 0x9, 0x8, 0x535, 0x4, 0x5, 0x2, 0x6, 0x1ff, 0x2, 0x5, 0x400, 0x40, 0x5, 0x4000000, 0x5, 0x7000, 0x8, 0x9, 0x8, 0x1, 0x6, 0xd3c00000, 0x783, 0x8, 0x10000, 0x8001, 0x7c8, 0x1, 0x9, 0xa54, 0xb, 0x9, 0x0, 0x7, 0x9, 0x1, 0xc0, 0x29, 0x4, 0x8b, 0x7, 0x0, 0x0, 0x200, 0x9, 0x4, 0xffffffff, 0x0, 0x8000, 0xffffe5fd, 0x6, 0x9, 0x0, 0x3, 0x7f, 0xc, 0xa, 0x43b, 0x3, 0xd28, 0x6, 0x7, 0x2, 0x4, 0xfffffff4, 0x4, 0x2, 0x4, 0x61, 0xfffffb0f, 0x3, 0x8f3, 0x1f4, 0x3, 0x60, 0xd, 0x456, 0x5, 0x7ff, 0xc7b, 0x2, 0xffff, 0xffffffff, 0x7, 0xf68, 0x8001, 0xbbb, 0x2916, 0x4, 0x7f, 0xffff8f87, 0xd5a2, 0x8, 0x9, 0x9, 0x10000, 0xfffffffd, 0xa6, 0x8, 0x1, 0x2, 0x80000001, 0x40, 0x0, 0x7f, 0xfffff1ce, 0x6, 0x1, 0x7, 0x7, 0x5, 0xffff, 0xd07, 0x6, 0x101, 0x5, 0x9e, 0x2, 0x9, 0x2594, 0x355, 0x8, 0x5, 0x4, 0xffffffff, 0xc8bb, 0xfff, 0xd2d, 0x3, 0x250, 0x1, 0xf13, 0x6, 0x5, 0x9, 0x7, 0x9, 0xfff, 0x10, 0xffff, 0x9, 0xff, 0x9, 0x40, 0x1, 0x42c, 0x40, 0xb4b4, 0x8, 0x10000, 0x6, 0x10001, 0x4, 0x3, 0x9, 0x3, 0x8, 0x168b, 0x7, 0x348, 0x1ff, 0x401, 0x0, 0x1, 0x5, 0x0, 0x0, 0x6, 0xfffffe01, 0x40, 0x6ff, 0x4, 0x4, 0x7, 0x3, 0x7, 0x20, 0x5, 0x4, 0x3, 0x7, 0xfffffff8, 0x741, 0x9, 0x4, 0x5b381a24, 0x5, 0x6, 0x40, 0x2, 0x4, 0x6, 0xe90, 0x6, 0x6a, 0xb19e, 0x8001, 0x2a02, 0x2, 0xd, 0x2d, 0x10, 0xf3d8, 0xfff, 0x733cf30a, 0x0, 0x2, 0x8, 0x5, 0x9, 0xfffffff7, 0x9, 0x9, 0x7, 0x0, 0x8, 0xb, 0x7, 0x1, 0x1, 0x2, 0x1000, 0x2, 0x81, 0x0, 0x3, 0x3, 0x0, 0x16, 0x4, 0x200, 0x7fff, 0x81, 0x5e, 0xe7, 0x1ff, 0x1, 0x7f, 0x200, 0x8001, 0x37, 0x5, 0x8000, 0x9, 0x7, 0x579f, 0x6, 0x5, 0xad, 0x8001, 0x426f, 0x235, 0xf8b, 0x8, 0xbe, 0xa, 0x2e03bd00, 0xb, 0x2, 0x0, 0x380, 0x9, 0x4, 0x0, 0x2, 0x8, 0xfff, 0x1, 0x1, 0x4e, 0x9, 0x4, 0x6, 0x1, 0x3ff, 0x6, 0xfffff63d, 0x6c8, 0x3, 0x5, 0xeb3, 0x8, 0x8, 0xfff, 0x4, 0x401, 0x67fa2c3, 0x6, 0x30000000, 0xfa7, 0x7fffffff, 0x10, 0x6, 0x236, 0x6, 0x9, 0x7, 0x7fffffff, 0x218f, 0x72, 0x6, 0x8, 0x5, 0x5, 0x0, 0x8, 0x1, 0x2, 0x10, 0x6, 0x1, 0x3, 0xf1e1, 0xedf7, 0x8, 0x8, 0x80000001, 0x5, 0xfffffff9, 0xf, 0xff, 0x1, 0x9, 0x97, 0x403, 0x3, 0x80, 0x1000000, 0xfffffffa, 0x40004000, 0x3, 0xfffffffe, 0x200, 0x1, 0x9, 0xfffffff7, 0x100, 0x40, 0xc, 0x400, 0xb0, 0x1, 0x8000, 0x40, 0x80, 0x1000, 0x2, 0x6, 0x4, 0x10000, 0xe735, 0x6, 0xffffffb4, 0x401, 0xfff, 0x7, 0x2, 0x1, 0x38, 0x400, 0x2, 0x6, 0x5, 0x5, 0x9e, 0x0, 0x6, 0x0, 0x1, 0x214, 0x5d89996, 0xa, 0x5, 0x1, 0x9, 0xd, 0x6, 0x7ff, 0xfef9, 0x6, 0x9, 0x2, 0x7, 0x1, 0xfffffff7, 0x80000001, 0x5, 0xab, 0x5, 0x10, 0x3, 0x9, 0x4, 0x2, 0xfffffffd, 0x3, 0xcd1, 0x5, 0x7, 0xf, 0x80, 0xfffffff9, 0x2, 0xa, 0x10000, 0x5, 0x7, 0x5fe, 0x3, 0x0, 0x0, 0x5a7a, 0x80000001, 0x4, 0x80], 0x6, 0x400})
ioctl$sock_SIOCETHTOOL(r8, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000000)=@ethtool_wolinfo={0x6, 0x80000001, 0x2}})

14.333134722s ago: executing program 0 (id=1375):
syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0)

14.261999042s ago: executing program 0 (id=1376):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$SG_IO(r3, 0x2285, 0x0)
ioctl$EVIOCSKEYCODE(r3, 0x40084504, 0x0)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket(0xf, 0x3, 0x2)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
io_uring_setup(0x669, 0x0)
bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffff8, 0x0, 0x6}, {0x0, 0x0, 0x400000003, 0xfffffffffffffffc}, 0xfffffffc, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x4, 0x32}, 0x0, @in6=@remote, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
sendmmsg(r4, 0x0, 0x0, 0x1c)

14.003516287s ago: executing program 8 (id=1377):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="02002dbd7000fcdbdf251500000068000180140002006970366772653000000000000000000008000100", @ANYRES32=0x0], 0x7c}}, 0xc8e2e5b2270ac528)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c)
sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e23, 0x8, @private2={0xfc, 0x2, '\x00', 0xfc}, 0x3}, 0x1c, &(0x7f0000000380)}, 0x20040043)
bind$l2tp6(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000100), &(0x7f0000000180)=0x4)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r5, 0x40505330, &(0x7f0000000040)={{}, {0x18}, 0x0, 0x7})
ptrace(0x10, 0x1)
mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0)
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/45, 0x224000, 0x800, 0x0, 0x3}, 0x20)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000005c0)={0x8, 0x0, 0xfff, 0xfffffffa}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)

12.906896878s ago: executing program 0 (id=1379):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48})
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0)
r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x40080)
fsopen(&(0x7f0000000000)='jfs\x00', 0x0)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000001)
sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)

10.204966443s ago: executing program 9 (id=1384):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000540), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3})
r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000240)={0x7, 0x1fd, 0x101c3c})
r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb})
r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x8, 0x2, 0x7})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8})
close_range(r0, 0xffffffffffffffff, 0x0)

10.031878011s ago: executing program 1 (id=1385):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="02002dbd7000fcdbdf251500000068000180140002006970366772653000000000000000000008000100", @ANYRES32=0x0], 0x7c}}, 0xc8e2e5b2270ac528)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c)
sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e23, 0x8, @private2={0xfc, 0x2, '\x00', 0xfc}, 0x3}, 0x1c, &(0x7f0000000380)}, 0x20040043)
bind$l2tp6(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000100), &(0x7f0000000180)=0x4)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r5, 0x40505330, &(0x7f0000000040)={{}, {0x18}, 0x0, 0x7})
ptrace(0x10, 0x1)
mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0)
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/45, 0x224000, 0x800, 0x0, 0x3}, 0x20)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000005c0)={0x8, 0x0, 0xfff, 0xfffffffa}, 0x10)
sendmmsg$inet(r0, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)='`', 0x1}], 0x1}}], 0x1, 0x40081)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)

9.569233681s ago: executing program 9 (id=1388):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="02002dbd7000fcdbdf251500000068000180140002006970366772653000000000000000000008000100", @ANYRES32=0x0], 0x7c}}, 0xc8e2e5b2270ac528)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c)
sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e23, 0x8, @private2={0xfc, 0x2, '\x00', 0xfc}, 0x3}, 0x1c, &(0x7f0000000380)}, 0x20040043)
bind$l2tp6(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000100), &(0x7f0000000180)=0x4)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r5, 0x40505330, &(0x7f0000000040)={{}, {0x18}, 0x0, 0x7})
ptrace(0x10, 0x1)
mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0)
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/45, 0x224000, 0x800, 0x0, 0x3}, 0x20)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10)
sendmmsg$inet(r0, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)='`', 0x1}], 0x1}}], 0x1, 0x40081)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)

9.3173417s ago: executing program 8 (id=1389):
socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$netlink(0x10, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bce, 0x10100, 0x0, 0x313}, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES16], 0x54}}, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

9.138650482s ago: executing program 0 (id=1390):
r0 = open(&(0x7f0000000080)='.\x00', 0x0, 0x120)
inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x2000490)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x6f, 0x0, 0x9, 0x0, 0xe999, 0xfa11, 0xffffffff}, 0x0)
sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x50, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x48}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x50}, 0x1, 0x0, 0x0, 0x40091}, 0x40)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x101040)
r4 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
finit_module(r4, &(0x7f0000000040)='$\x00', 0x2)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0x7}})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r7=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000001c0)={r7, <r8=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_GET_LEASE(r6, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r8, 0xcccccccc})
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16)
move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], 0x0, 0x0, 0x0)

7.384304525s ago: executing program 4 (id=1392):
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000))
r1 = syz_usb_connect(0x1, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000)
socket$nl_netfilter(0x10, 0x3, 0xc)
pipe(&(0x7f0000000200))
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x80000005, 0x0, 0x7fffffff, 0x3}, 0x0, 0x0)
syz_usb_disconnect(r1)

7.351340513s ago: executing program 8 (id=1393):
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd)
r1 = dup(r0)
r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0xfffffffd, 0x15f, 0x0, r1}, &(0x7f00000006c0)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0)
write$6lowpan_enable(r1, 0x0, 0x0)

6.250410673s ago: executing program 8 (id=1394):
socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000580)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x106}}, 0x20)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0)
ioctl$IOCTL_STATUS_ACCEL_DEV(r4, 0x40046103, &(0x7f0000000300)={0x0, 0x6, 0xfffffff9, 0x9, 0x5, 0x1, 0xf7, 0x7f, 0x3, 0x1, 0x5, "f7d9d17d2756a832754d2db7a81004bd6b122e1a46766bc2f771d8be1f6c41e1"})
ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000000)=0xa)
ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0x1, 0x806, 0x0, 0x80000007, 0x2, "6d1714a98b08633c45debea890564b7cdcd0f7", 0x6, 0x3})
r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000000)=0x200000000)
write$vhost_msg_v2(r5, &(0x7f00000019c0)={0x2, 0x0, {&(0x7f0000001880)=""/13, 0xd, 0x0, 0x2, 0x2}}, 0x48)
write$vhost_msg_v2(r5, &(0x7f0000000180)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x3}}, 0x48)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
syz_emit_ethernet(0x122, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x0)
openat$cgroup_int(r6, &(0x7f0000000100)='blkio.reset_stats\x00', 0x2, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000007100)={0x2020}, 0x941f)
r7 = socket(0x400000000010, 0x3, 0x0)
ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(0xffffffffffffffff, 0x7b1, &(0x7f0000000140)={&(0x7f0000001880)=[0xfffffff8, 0xfc, 0x1, 0x0, 0x8, 0x1a1f, 0x8, 0x80000000, 0x27, 0x5, 0x8, 0xbe, 0x1, 0xcf, 0x3, 0x10, 0x81, 0xffff3092, 0xd0b, 0x9, 0x9, 0x1, 0x2, 0x21ad, 0x0, 0x0, 0x6, 0x51, 0x8b, 0x2, 0x0, 0x4, 0xc632, 0x1, 0xff, 0x100, 0xfffffff1, 0x94, 0x3, 0xb8, 0xfc, 0x9, 0xbf55, 0x10000, 0x3, 0x3, 0x10000, 0x1, 0x6, 0x5, 0x3, 0x10f, 0x7, 0x8, 0xffffffff, 0x5, 0x6, 0x1, 0x5, 0x7, 0x9a6f, 0x9, 0x3, 0x2, 0x8, 0x5, 0x6, 0xfffffffd, 0x3, 0x1, 0x4, 0x58a0, 0x9, 0x0, 0xfffffffd, 0x7, 0x49, 0x2, 0x7, 0xa, 0x0, 0x3, 0x7fffffff, 0x4, 0x8000, 0xf, 0xc, 0x3, 0x6, 0x0, 0x8, 0x6, 0x8, 0x1, 0x804, 0x7fff, 0x3, 0x7, 0x401, 0x7f, 0x8001, 0x9, 0x80000001, 0x3, 0xe, 0x1, 0x3, 0x7ff, 0x5, 0x7, 0x9, 0x2, 0x7ff, 0x7, 0x4, 0x5ad4, 0x3, 0x80000000, 0xa51, 0x3, 0x7a1, 0x92, 0x1, 0x1, 0x1, 0xad6, 0x9c79, 0x700, 0xa, 0x0, 0x5, 0x7, 0x101, 0x5, 0xfffffffd, 0x4, 0xfffffffa, 0x4, 0x1, 0x8000, 0x2, 0x4, 0x3, 0x10001, 0x5, 0x80000001, 0x80000001, 0x9, 0x4, 0xafa9, 0x9, 0x401, 0x800, 0x40, 0x7, 0xff, 0xffff7332, 0xfffffff7, 0x8, 0x7484, 0xcdd3, 0x9, 0x1, 0x80000000, 0xfffffffb, 0xad08, 0xa, 0x8, 0x400, 0x2, 0x6, 0x7fffffff, 0xfffffffe, 0x6, 0x8, 0x8, 0x0, 0x6, 0x4, 0x3ff, 0x40, 0x6, 0x7, 0x7fffffff, 0x370, 0xffffff96, 0x9, 0x6, 0x5, 0x4, 0x80000001, 0x9, 0x7, 0x9, 0x1, 0x2, 0x6, 0x7fff, 0x8cc5, 0x7, 0x9, 0x0, 0x8f91, 0x1, 0x0, 0x2, 0x312, 0xae44, 0xffff, 0x1, 0x10, 0x7f, 0xffff, 0x74, 0xfffffff3, 0xc, 0x2, 0x16, 0x6, 0x6, 0x2, 0x8, 0x5, 0x81, 0x1, 0xedf, 0x7f, 0x7, 0x80000000, 0x5a4, 0x63cffcbc, 0x1, 0x7ff, 0xe04a, 0xffffffff, 0x7f, 0x45d, 0x5, 0x10, 0x7f0, 0x10001, 0x10001, 0x5a, 0x1, 0x0, 0x6, 0x2, 0x99bb, 0x6, 0x3, 0x9c8, 0x8, 0x5, 0x0, 0x0, 0x2, 0x2, 0x7, 0x746, 0xfffffff9, 0x1, 0x6, 0x2, 0x16007f73, 0xfffffffa, 0x81, 0x6, 0x192, 0x4, 0x9, 0xffff, 0xfffffffe, 0x2, 0x6, 0x8000, 0xcf, 0x6f, 0x0, 0xa, 0x8001, 0x2, 0x0, 0xe, 0x9, 0x8, 0x8, 0x2, 0x3, 0x7fff, 0x1, 0xfffffff7, 0x2, 0x2, 0x800, 0x100, 0x7, 0xee, 0x5, 0x5b47cdb4, 0x7463, 0x8, 0x808, 0x5, 0x10001, 0x241e, 0x2, 0x0, 0x4, 0x7fffffff, 0x3cc2, 0x6, 0x0, 0x69e, 0x10, 0x4, 0xd9, 0x8ead, 0x9, 0x8000, 0x1, 0x3824, 0x9, 0x200, 0x1000, 0x1ff, 0xf, 0x3, 0x7, 0x38000000, 0x6, 0x7f, 0x7, 0x4a, 0x9, 0xdbb, 0x5, 0x3, 0x9, 0x0, 0x5a, 0xff, 0x7ff, 0x7ff, 0x5, 0xfd, 0x7, 0x4978, 0x401, 0x2, 0x10, 0xc, 0x5, 0x1, 0xffffffff, 0x2, 0xff, 0x2, 0x0, 0x2, 0x0, 0x3, 0x80, 0x7, 0x7, 0x0, 0x6, 0x583, 0xfffffffa, 0x1, 0x3ff, 0x6, 0x6, 0x8, 0x9, 0x1, 0xe, 0x6, 0x5bb3, 0xfc49, 0x0, 0x79, 0x5, 0x5, 0x7ff, 0x5, 0xff, 0x40000000, 0x6, 0xfffffff8, 0x1, 0x5, 0x7, 0x3, 0x1, 0x4, 0xdc24, 0x2, 0x1, 0x8001, 0x7, 0x4, 0x2, 0xaa2a, 0x9, 0x80000001, 0xfffffff8, 0x4, 0x3, 0x7, 0x6, 0x5, 0x6, 0x7f, 0x5, 0x80000001, 0x51, 0x4, 0x9, 0x3, 0x0, 0xa, 0xc, 0x0, 0xfffffffa, 0x80000000, 0x0, 0x8, 0x9, 0x5, 0x82, 0x140000, 0x5, 0x2, 0x7f, 0x4, 0x0, 0x5, 0xffff, 0x1, 0xffffffff, 0x1, 0x4, 0xffff, 0x0, 0xffff, 0x6, 0xffffffff, 0x9, 0x3, 0x6, 0x40, 0x100, 0x9, 0x5, 0x0, 0x2, 0x4, 0x7, 0x80000000, 0x3, 0x21, 0x7, 0x0, 0x5, 0x24, 0x470000, 0x40, 0x3, 0x8, 0x0, 0x2, 0x7, 0x5, 0x100, 0x7, 0xd05692d, 0x100, 0x55bb, 0x7, 0x9, 0x9, 0x1000, 0x4, 0x80000001, 0x4, 0x401, 0x7, 0x5, 0x7, 0x19c40000, 0x40, 0x0, 0x1, 0x4, 0x6, 0xfff, 0x73, 0x1ff, 0xfffffff9, 0x9, 0x0, 0x13c, 0x40000000, 0xe3fa, 0x3, 0xffff, 0x1, 0x2, 0x1, 0x6, 0xdcb, 0x3, 0x8, 0x48000, 0x4f, 0x2b4, 0x2, 0x200, 0x567e, 0x9, 0x6, 0x80000001, 0x1, 0x7, 0x1, 0x6, 0x5d8, 0xf7, 0x800, 0xe, 0x80, 0x5, 0x2, 0xffffffff, 0xb, 0x977, 0x21b, 0x4, 0x333d, 0x8, 0x5, 0x8, 0x3, 0x3, 0x1, 0x3, 0xc67f, 0x9, 0x800, 0x1, 0x1000, 0xd58, 0x1a7, 0xb35, 0x4, 0x1, 0xa1, 0x8, 0xff, 0x1ff, 0x8, 0x9, 0x103d, 0x5, 0xffe0000, 0x101, 0x7, 0x43bb, 0x6, 0x5, 0x3, 0xff, 0x5, 0x4, 0x101, 0x9, 0x6, 0xa, 0x7, 0x7, 0x5, 0x4, 0x40, 0x98b, 0x1, 0x4, 0xd497, 0x5, 0x1ff, 0xa, 0xa2, 0x6, 0xa, 0x9, 0x7, 0x2, 0x4, 0x800, 0x1, 0xcc9, 0x0, 0x9, 0xf7, 0x4, 0xb4, 0x7, 0x2, 0x400, 0x8000, 0x9, 0x8, 0x535, 0x4, 0x5, 0x2, 0x6, 0x1ff, 0x2, 0x5, 0x400, 0x40, 0x5, 0x4000000, 0x5, 0x7000, 0x8, 0x9, 0x8, 0x1, 0x6, 0xd3c00000, 0x783, 0x8, 0x10000, 0x8001, 0x7c8, 0x1, 0x9, 0xa54, 0xb, 0x9, 0x0, 0x7, 0x9, 0x1, 0xc0, 0x29, 0x4, 0x8b, 0x7, 0x0, 0x0, 0x200, 0x9, 0x4, 0xffffffff, 0x0, 0x8000, 0xffffe5fd, 0x6, 0x9, 0x0, 0x3, 0x7f, 0xc, 0xa, 0x43b, 0x3, 0xd28, 0x6, 0x7, 0x2, 0x4, 0xfffffff4, 0x4, 0x2, 0x4, 0x61, 0xfffffb0f, 0x3, 0x8f3, 0x1f4, 0x3, 0x60, 0xd, 0x456, 0x5, 0x7ff, 0xc7b, 0x2, 0xffff, 0xffffffff, 0x7, 0xf68, 0x8001, 0xbbb, 0x2916, 0x4, 0x7f, 0xffff8f87, 0xd5a2, 0x8, 0x9, 0x9, 0x10000, 0xfffffffd, 0xa6, 0x8, 0x1, 0x2, 0x80000001, 0x40, 0x0, 0x7f, 0xfffff1ce, 0x6, 0x1, 0x7, 0x7, 0x5, 0xffff, 0xd07, 0x6, 0x101, 0x5, 0x9e, 0x2, 0x9, 0x2594, 0x355, 0x8, 0x5, 0x4, 0xffffffff, 0xc8bb, 0xfff, 0xd2d, 0x3, 0x250, 0x1, 0xf13, 0x6, 0x5, 0x9, 0x7, 0x9, 0xfff, 0x10, 0xffff, 0x9, 0xff, 0x9, 0x40, 0x1, 0x42c, 0x40, 0xb4b4, 0x8, 0x10000, 0x6, 0x10001, 0x4, 0x3, 0x9, 0x3, 0x8, 0x168b, 0x7, 0x348, 0x1ff, 0x401, 0x0, 0x1, 0x5, 0x0, 0x0, 0x6, 0xfffffe01, 0x40, 0x6ff, 0x4, 0x4, 0x7, 0x3, 0x7, 0x20, 0x5, 0x4, 0x3, 0x7, 0xfffffff8, 0x741, 0x9, 0x4, 0x5b381a24, 0x5, 0x6, 0x40, 0x2, 0x4, 0x6, 0xe90, 0x6, 0x6a, 0xb19e, 0x8001, 0x2a02, 0x2, 0xd, 0x2d, 0x10, 0xf3d8, 0xfff, 0x733cf30a, 0x0, 0x2, 0x8, 0x5, 0x9, 0xfffffff7, 0x9, 0x9, 0x7, 0x0, 0x8, 0xb, 0x7, 0x1, 0x1, 0x2, 0x1000, 0x2, 0x81, 0x0, 0x3, 0x3, 0x0, 0x16, 0x4, 0x200, 0x7fff, 0x81, 0x5e, 0xe7, 0x1ff, 0x1, 0x7f, 0x200, 0x8001, 0x37, 0x5, 0x8000, 0x9, 0x7, 0x579f, 0x6, 0x5, 0xad, 0x8001, 0x426f, 0x235, 0xf8b, 0x8, 0xbe, 0xa, 0x2e03bd00, 0xb, 0x2, 0x0, 0x380, 0x9, 0x4, 0x0, 0x2, 0x8, 0xfff, 0x1, 0x1, 0x4e, 0x9, 0x4, 0x6, 0x1, 0x3ff, 0x6, 0xfffff63d, 0x6c8, 0x3, 0x5, 0xeb3, 0x8, 0x8, 0xfff, 0x4, 0x401, 0x67fa2c3, 0x6, 0x30000000, 0xfa7, 0x7fffffff, 0x10, 0x6, 0x236, 0x6, 0x9, 0x7, 0x7fffffff, 0x218f, 0x72, 0x6, 0x8, 0x5, 0x5, 0x0, 0x8, 0x1, 0x2, 0x10, 0x6, 0x1, 0x3, 0xf1e1, 0xedf7, 0x8, 0x8, 0x80000001, 0x5, 0xfffffff9, 0xf, 0xff, 0x1, 0x9, 0x97, 0x403, 0x3, 0x80, 0x1000000, 0xfffffffa, 0x40004000, 0x3, 0xfffffffe, 0x200, 0x1, 0x9, 0xfffffff7, 0x100, 0x40, 0xc, 0x400, 0xb0, 0x1, 0x8000, 0x40, 0x80, 0x1000, 0x2, 0x6, 0x4, 0x10000, 0xe735, 0x6, 0xffffffb4, 0x401, 0xfff, 0x7, 0x2, 0x1, 0x38, 0x400, 0x2, 0x6, 0x5, 0x5, 0x9e, 0x0, 0x6, 0x0, 0x1, 0x214, 0x5d89996, 0xa, 0x5, 0x1, 0x9, 0xd, 0x6, 0x7ff, 0xfef9, 0x6, 0x9, 0x2, 0x7, 0x1, 0xfffffff7, 0x80000001, 0x5, 0xab, 0x5, 0x10, 0x3, 0x9, 0x4, 0x2, 0xfffffffd, 0x3, 0xcd1, 0x5, 0x7, 0xf, 0x80, 0xfffffff9, 0x2, 0xa, 0x10000, 0x5, 0x7, 0x5fe, 0x3, 0x0, 0x0, 0x5a7a, 0x80000001, 0x4, 0x80], 0x6, 0x400})
ioctl$sock_SIOCETHTOOL(r7, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000000)=@ethtool_wolinfo={0x6, 0x80000001, 0x2}})

6.139094386s ago: executing program 1 (id=1395):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000008000700"], 0xcc}, 0x1, 0x0, 0x0, 0xc010}, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)

5.380070089s ago: executing program 4 (id=1396):
r0 = socket(0xa, 0x3, 0xff)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000240a04b3d02080001400000000308000540000000001c0008800c00014000000000000000090c000240000000000018ab6e14000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
sendmsg$inet6(r0, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0xa, 0x7, @dev={0xfe, 0x80, '\x00', 0x15}}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="671723d7c60133", 0x7}, {&(0x7f0000000280)="9e91d91a92dc7c8fff658bb539e2ffb332c99223a7dfe52c1f51218206f5abfd2a", 0x21}], 0x2}, 0x20008b88)

5.185821498s ago: executing program 9 (id=1397):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)={0x14, 0x3, 0x1, 0x5, 0x0, 0x0, {0xa, 0x0, 0xa}}, 0x14}}, 0x40000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r2)
r4 = userfaultfd(0x1)
syz_io_uring_setup(0x400f00, &(0x7f0000000080)={0x0, 0x2909, 0x20, 0x1, 0x3cc, 0x0, 0x0}, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000000)={0xeeee8000, 0x102000, 0x1})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})

4.26986958s ago: executing program 1 (id=1398):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e09200000000000010902240001000000000904000901030001000921"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x18, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x402, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0xffffff80, 0x3, 0x7f, 0x20000006, 0x4d, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x8, 0xe9e3, 0x5, 0x24, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x1, 0x1, 0x5, 0x5, 0xe661, 0x4, 0x7, 0x5, 0xa, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x7, 0x1, 0x407, 0x5, 0x3e, 0x8, 0x4006, 0x6, 0x4, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x5, 0x7, 0x8, 0x4, 0xbffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x4, 0x129432e2, 0x1, 0xf9, 0xe, 0x10, 0x6c7, 0x9, 0xfffffffc, 0x80000003, 0x203, 0x0, 0x5, 0x2f, 0xe, 0x312, 0xd, 0xea4, 0xa1, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ff, 0x401, 0x6, 0xfffffffd, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x10000004, 0x2, 0x4, 0xb, 0x4, 0x101, 0x8, 0x9, 0x9, 0x7, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x1, 0x3, 0x9, 0x250, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x1, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x2, 0x5, 0x100c, 0x401, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x80, 0xe, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x4, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x6, 0x40, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x7, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0xffffffff, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x4, 0x16, 0xffffffff, 0x80000003, 0x5, 0xfffffff9, 0xc8, 0x9, 0xfffff000, 0x7, 0x1, 0x7e, 0x100, 0x9602, 0x1, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x7, 0x8, 0x30b1d693, 0xa21, 0x1000f40, 0x7, 0x1, 0x6c1b, 0x0, 0x1, 0xffff, 0xb1e, 0x5, 0x200, 0xfff73441, 0x40fff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

3.973795223s ago: executing program 4 (id=1399):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x3, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x61, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
read(r0, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303", @ANYRESDEC], 0x0)
syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x3b, &(0x7f0000000000)=ANY=[])
syz_open_dev$sndpcmc(0x0, 0x0, 0x0)
syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0)

3.93284872s ago: executing program 0 (id=1400):
r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x2, 0x1)
ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40084146, &(0x7f0000000240)=0x8000000000000001)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0xd, 0x4, 0xa}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)
r7 = memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93<u\xbe\xeag\xd2\x04e\xf2s\xde}o#\x90\xda\x9cs,r\xfd:\xcb\xc7\vTmPZJ\xac\x8b\xd0\xc0\xbcRK\xcb\x1e8\xce\xbd[N\xb0\xb4<\xeb\x86[\xec\x8f\x14\n\x83\x9e&\\\xb7!\xed\xa0\xc3,\x90m\x0f\x00\x00\x00\x00\x00\x00\xff\xd0\xb3\x94\x00\x00\x00\x00\x00\x00\x00\x9dH\xf8\xffRo\xa3W\xe1\xed\x8eS\xaeX\x93\x7f\xd3\xb9\x84Q\x9c\"\xd9\xf5\xe4e\xf9\xcam\xe3\x03\xe4\xad\xd5&A\x02\xc8\xa9\xfe\xcb\x87\xd9\xd3\x8c\f\xc08T~\xc4\xbd\x90?\x1f\x9c\x9b0\x19 \x9f\xd1p`\xc0/\x00u\x19\x1d\xac\xe8%\xb7\t\x9f4\xbb\x89\xe9\xc1\x81\xb0\xd6\xf7\x90\x1f\x94\x01M.\x16\x05\x16\xb9\xe9\xdc~\xd3-s\xe6;\x94\x1c^\x06\xdav;\xccD\x95sj\xe0\xd5\xbeS\xac\xe5N\xea\x9eyl[[\xce5\xee\x05\x9c\x96\xabJ^c\xf7\x19\xb4\xd8\xe4\x87\x9dp\xea?/\xcb\x9a\xaa5\'Q\fuG\x81\x8a@\x97M=v\xfe\a\xabp\xf3\x93\x9d\x7f@9\xc0\xd2\xf1\x00\x10\x00\x00\x00\x00\x00\x00\x82\x13\xb2\xa9\xef\xa5\xf8\x8bk\xb3\x9ev\x92\x0e\xd1\x1f\x17Dx[\xad\xb0\x9d/\x96\xe42mO\x9fh\xea\xf3\x14\xcd\x96\x89_)\x1b\xe2\xd6\b\x94b\xaf;\x92T\xafz\x94\x9fG\xfb\xfd|$k\x03\xd7;\x9ay\xee\xf9W?\xb3\xf9\xf8I.E4\xc3eWq\xfa\":$\xd0\x17Q\x94\xf5\xe5mk\x8e&\xf1;#z\xef*\xce\x99\x04\xb9\x90\xbc\xc9#-\x8di\xae\xc5\xdf\x13\xd2K\x8b\xf5\f\xb2x\xdd\xd5\xb4\xa9^~O<\x12\xe3\xc3P|7\xc4\xc8\xb1r0Z\x98\x87^\xc8C\x1b\x96\xb4lsyF\xc5\xbc\xffOE\xe9\xd70\xe7\xfep\x83\xa7\xa1\xd9\xe4\xba\x92\x17\xbf\xe0\xe1\x01\xb7\x8b\x18j\x19n\xc8\xff\xe9\xf4\xf4\xcf a\xd7_w\x0f\x9dF\xae\xccA-/\x83\xabU\xd5\xbf8\xa4O\xb4\xef\xc8\xccH\xd1=\xbe\xbex\xb5-\x05\x01\x11\xfa\xcf\x1dm\xb5X\xe9\xb5O\x15\xc7;Lb\xce\x1a\xcc\x98\xe8\xe9e\xe0\xc2N\xe7\xd7\x1d\x92\x87F8\x9e\xf7\xdd\xdaW\xf5X\x80\xa0f\xceo\xd8\x7f\xc0\x96\bSB\xce&\x04$\xc3\xe31U\x84\x82\xf0{i\x1d\x02\x10\xc6C\x01^\xcf\x93?w\x01\x84\xa0\xd6\xa2\x10\xa4\xfcG\xabD\xd6dGZ\xb2Cx\x1b\xfdD9\x17\xe6\xcauM\xe3\x05)\xe2\x03\xe2j$F1n@\xde\n9t.[\xad\xb5\f<o\xdb\xa4\x90\xc4\xd0I\xa6\x96\xa1\x00\xbb\xdd\x94\x00t/1YekG\x7f\xbdrI\x1e\x8a4=\xa2\xe9\x82<\x9e|\xf5\xa4\x05#\x7f\xa8\x01\x00\x82ih\xf9?\x03Q\xf5\xc4\x95\x99 \xa7v~:$\x02O\xe3\xaa\x1f\x00\xebh\'\xd2q\x10\x1e\x94n\xd7w\xb1\xc8G\x89\xf4\x8ct\xf9R\x85\x1b8OE\x04\x9a\xd8\x80\x10x\xbf\n0\b,r\xc6r\xf7=\xfe\xc1\x16\xe6\xee\xbb:-h\xba\x8b\x14\x9a?\x8e\x03;\xe5\x04\xd8\xa9\x9a\xd3\x05(\x7f|\xadU\xafe\x87V.i4$6U,R\x9b\n{\'\xfe1\xc4\xb09\x96{\xc0e\xa1\xe7\xa9\xb4\x1a\n\xf5\xd7zuvz\x972\xd4\xfb\x13u2\xab\x18\x01~r\xbbcW!)\xf4\x9b\x1dI\x9ex;\xb2\xe3I\xbd\x16T\xb75\xa6\a\xb7\xa1\x8d\xc9\x12\xb1\xbd\xbc\xd9c\xe9\xe6k\xee\x06\x83\xf4\xab\x18\x038\x8f\xc9^\x0f\xab\xea&P\b\xef#\xf6\xc3\xfc\xd4\xa0\xfd\x15N\xd3\xa0\x80\x9f\bU\xa63\xf6\xc9\xecZ`\xa4\xa0(\xf9\x98B\xaf\xde*\x91\xddk\xa1`d\xf0\x97\xc9e\xc1\"EC\x9a?x\x89\x8d\xb3\xfaF}\x82D\xf8\f\xf1`\x90D\xd1|%(\xd8\t\xea\x00C\xce\x7fo+?v\xee\xc6bL\x1d\xbe\x84p\x8d\xa3\xec\xf7\xe0\xfe\x8c=<\xf2\x1f@\xe66E\xa7\x9c\xd3\xb6\xf5\xe0\x14\xb8\xd4`\x85\xe3;\x8c\xf8\xf2\xd9)\x0e\xd0\xff\xa5K\xf3\xf1\xc4\x18\xf4Z\xdci\x91\x84\xe8\xb7\x10\x90\xbc\xect\x14\xdfR\xe2\x80\xf8a\x92\xb2R\xdf0\xcaQ\xdf\x87\xbdjp\x1ch3h\xcf<\x82\x97\xa5s/m\xb2\x1dd\xf7\xfc\xf5\xa9\x1d\xd34{\xcc\x1f\t,i\x16\x82\xad\x8e\xb6\x17\x0f\xaa\x85^/w\xbb~\xff\xce\x92\x90\x83\n\xe5\x14\x95\x92|\xfe-S%\x91i\xafh\x97z\x00@K\xbb\xc2\fcD\xff\xdcl\xa1\xfaR\xbc\xd0k\\\x92\x19a6Sv\x05%{\xe2\xe9\xf1\xddRB$8\xb0q9\xa1g&\x17\xe5P\xef\xb1<\xb6\xe2\xb2\xc06^\x0f4\xba\x10\xba\x00\x00\x00\x00\x00\x00\x00\x00\xef\xba\"\xb7\xc7~T\xc4Ei\xfdk\xa9\"F\xa9C\xa0\xd3\xa0\x1b\xbf\x13\xfb\x14S<\xa6\n5\x86\x9e\xb2=8\'g`\x8f\xa8\x027\xbd\xb5s\xe9dti\xc0\xbd\\H\xe5v\xdd\x0fP\x8b+-\x02i\x8eZU\xa8YB\xfc\xc2R7\xe9\x11\x06\x1aRd\xa93\xa1\\\xf4_s\xf7\xe8+\xbdg\x13\xaea\x04\xd8\x82\xf6\x90\xaf1\x86b\x81J\xb7E\xb0\xe2\xd6\x93S\xb3\x98\xcb\xf9\xde=\xd6T\x8d\xea\xab\xa9Z!\xd3-\xa6_\xc4\xa4\xb6+\x89\xdc]O<g\x06~\x12W\x86\x06\xba\x15#\xa7Q\xffa\x926>\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xe)
ftruncate(r7, 0x0)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r8, &(0x7f00000009c0)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10)
writev(r8, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
io_setup(0x1, &(0x7f00000004c0)=<r10=>0x0)
io_submit(r10, 0xf3, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x1, 0x0, r9, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}])
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newlink={0x90, 0x10, 0x401, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@IFLA_LINKINFO={0x68, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x58, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}, @IFLA_GENEVE_TOS={0x5, 0x4, 0x8}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}, @IFLA_GENEVE_TTL_INHERIT={0x5}, @IFLA_GENEVE_DF={0x5, 0xd, 0x2}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @mcast1}, @IFLA_GENEVE_UDP_CSUM={0x5}, @IFLA_GENEVE_DF={0x5, 0xd, 0xc3}, @IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x1ff}]}, 0x90}, 0x1, 0x0, 0x0, 0x1}, 0x20000000)
socket$inet6_mptcp(0xa, 0x1, 0x106)

1.369654767s ago: executing program 4 (id=1401):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000540), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3})
r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000240)={0x7, 0x1fd, 0x101c3c})
r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6, 0x0, <r5=>0x0})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb})
r6 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000000)={0x8, 0x2, 0x7})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000400)={r5})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f})
close_range(r0, 0xffffffffffffffff, 0x0)

922.074585ms ago: executing program 4 (id=1402):
pipe(&(0x7f0000000180))
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PPPIOCSACTIVE(r0, 0x40087446, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x9, 0x0, 0x0, 0x8}]})
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x7400}, 0x2040)
socket(0x10, 0x803, 0x0)
syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0)
connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000002}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040804}, 0x404c840)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

921.176486ms ago: executing program 1 (id=1403):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)={0x14, 0x3, 0x1, 0x5, 0x0, 0x0, {0xa, 0x0, 0xa}}, 0x14}}, 0x40000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r2)
r4 = userfaultfd(0x1)
syz_io_uring_setup(0x400f00, &(0x7f0000000080)={0x0, 0x2909, 0x20, 0x1, 0x3cc, 0x0, 0x0}, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000000)={0xeeee8000, 0x102000, 0x1})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})

775.641917ms ago: executing program 9 (id=1404):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$peekuser(0x3, r0, 0x2c)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0)
read$midi(0xffffffffffffffff, 0x0, 0x0)
getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f00000001c0), &(0x7f0000000200)=0x10)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0)
bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000140)="4738300ee79d7017fa80399bc6c12124e763b7b6ffbf71b15021429b47bf938fce64a8c5ac039cdf6b1c383016dec49b2993e968dfffbe687bf2aee54867d95b", 0x40}], 0x1}}], 0x1, 0x20008000)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
recvfrom$inet(r1, &(0x7f0000000500)=""/165, 0xa5, 0x120, 0x0, 0x0)

726.565645ms ago: executing program 8 (id=1405):
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd)
r1 = dup(r0)
r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0xfffffffd, 0x15f, 0x0, r1}, &(0x7f00000006c0)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0)
write$6lowpan_enable(r1, 0x0, 0x0)

208.731803ms ago: executing program 9 (id=1406):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a00000609"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0)

130.771506ms ago: executing program 8 (id=1407):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
madvise(&(0x7f0000529000/0x2000)=nil, 0x2000, 0x16)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0x1}}, 0x20)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x4c, r4, 0x1, 0x70bd25, 0xfffffffe, {0x3d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x82}, {0x5, 0x87}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x881}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001080)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0)
sendmsg$nl_route(r0, 0x0, 0x24040040)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
connect$inet(r6, &(0x7f0000000580)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)
getpeername$inet(r6, 0x0, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x1, 0x3c, 0x0, 0x0, 0x80, 0x5, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, {[@lsrr={0x83, 0x13, 0xce, [@private=0xa010101, @empty, @remote, @multicast1]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0)

130.416197ms ago: executing program 4 (id=1408):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c0100000000090400"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f00000000c0)=[0x2a, 0x2ff])

0s ago: executing program 9 (id=1409):
socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$netlink(0x10, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket(0x10, 0x3, 0x0)
socket$kcm(0x2, 0xa, 0x2)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bce, 0x10100, 0x0, 0x313}, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES16], 0x54}}, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

kernel console output (not intermixed with test programs):

1: config 0 descriptor??
[ 1300.358430][ T5845] usb 7-1: USB disconnect, device number 41
[ 1300.592285][ T9410] team0 (unregistering): Port device team_slave_1 removed
[ 1300.822858][ T9410] team0 (unregistering): Port device team_slave_0 removed
[ 1301.393111][ T8691] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1301.397291][ T8691] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1301.399202][ T8691] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1301.400345][ T8691] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1301.403487][ T8691] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1303.066772][T12370] veth0_vlan: entered promiscuous mode
[ 1303.582047][ T5797] Bluetooth: hci4: command tx timeout
[ 1304.309147][T12493] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1304.379498][T12552] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1304.662845][T12552] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1305.696921][T12552] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1306.124866][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[ 1306.124942][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[ 1306.125923][ T5797] Bluetooth: hci4: command tx timeout
[ 1306.293532][T12552] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1306.371550][T12721] chnl_net:caif_netlink_parms(): no params data found
[ 1306.648824][T12579] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1306.720119][T12579] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1306.803461][T12579] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1306.841260][T12721] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1306.842970][T12721] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1306.843610][T12721] bridge_slave_0: entered allmulticast mode
[ 1306.854047][T12721] bridge_slave_0: entered promiscuous mode
[ 1306.869869][T12579] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1306.946423][T12721] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1306.946552][T12721] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1306.946794][T12721] bridge_slave_1: entered allmulticast mode
[ 1306.950854][T12721] bridge_slave_1: entered promiscuous mode
[ 1307.167175][T12721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1307.204812][T12493] veth0_vlan: entered promiscuous mode
[ 1307.572967][T12721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1308.141735][ T5797] Bluetooth: hci4: command tx timeout
[ 1308.655292][T12721] team0: Port device team_slave_0 added
[ 1308.675276][T12493] veth1_vlan: entered promiscuous mode
[ 1308.701047][T12721] team0: Port device team_slave_1 added
[ 1308.813678][T12721] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1308.813698][T12721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1308.813728][T12721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1308.921438][T12721] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1308.921458][T12721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1308.921491][T12721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1309.264387][T12721] hsr_slave_0: entered promiscuous mode
[ 1309.265752][T12721] hsr_slave_1: entered promiscuous mode
[ 1309.545100][T12493] veth0_macvtap: entered promiscuous mode
[ 1309.976028][T12493] veth1_macvtap: entered promiscuous mode
[ 1310.037295][T12552] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1310.240611][ T5797] Bluetooth: hci4: command tx timeout
[ 1310.773049][T12493] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1311.037668][T12552] 8021q: adding VLAN 0 to HW filter on device team0
[ 1311.069060][T12579] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1311.085029][T12493] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1311.117488][ T9232] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1311.117658][ T9232] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1311.166809][ T9327] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1311.185190][ T9232] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1311.185346][ T9232] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1311.190400][ T9327] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1311.223694][ T9327] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1311.247943][ T9327] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1311.300505][T12579] 8021q: adding VLAN 0 to HW filter on device team0
[ 1311.395374][ T8623] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1311.400324][ T8623] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1312.200941][ T3697] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1312.213168][ T3697] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1312.518433][ T9410] bridge_slave_1: left allmulticast mode
[ 1312.518464][ T9410] bridge_slave_1: left promiscuous mode
[ 1312.518701][ T9410] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1312.520876][ T6227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1312.520895][ T6227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1312.654257][ T9410] bridge_slave_0: left allmulticast mode
[ 1312.654296][ T9410] bridge_slave_0: left promiscuous mode
[ 1312.654548][ T9410] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1313.886365][ T9410] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1313.942322][ T9410] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1313.964228][ T9410] bond0 (unregistering): Released all slaves
[ 1314.351525][ T9410] hsr_slave_0: left promiscuous mode
[ 1314.372546][ T9410] hsr_slave_1: left promiscuous mode
[ 1314.374171][ T9410] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1314.414179][ T9410] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1314.488348][ T9410] veth0_vlan: left promiscuous mode
[ 1316.113152][ T9410] team0 (unregistering): Port device team_slave_1 removed
[ 1316.333898][ T9410] team0 (unregistering): Port device team_slave_0 removed
[ 1318.788800][ T3697] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1318.788819][ T3697] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1318.986149][T12552] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1319.656275][T12579] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1319.903974][T12721] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1319.954507][T12721] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1320.225301][ T8691] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1320.230417][ T8691] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1320.246972][ T8691] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1320.248127][ T8691] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1320.249315][ T8691] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1320.317878][T12721] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1320.341717][  T988] usb 7-1: new high-speed USB device number 42 using dummy_hcd
[ 1320.384768][T12721] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1320.501457][  T988] usb 7-1: Using ep0 maxpacket: 16
[ 1320.505875][  T988] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1320.505931][  T988] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1320.505961][  T988] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1320.505985][  T988] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1320.506007][  T988] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1320.508349][  T988] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1320.508386][  T988] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1320.508409][  T988] usb 7-1: Manufacturer: syz
[ 1320.510954][T12552] veth0_vlan: entered promiscuous mode
[ 1320.604313][  T988] usb 7-1: config 0 descriptor??
[ 1320.690569][T12552] veth1_vlan: entered promiscuous mode
[ 1320.871555][  T988] rc_core: IR keymap rc-hauppauge not found
[ 1320.871578][  T988] Registered IR keymap rc-empty
[ 1320.872435][  T988] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 1320.901651][  T988] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 1320.933527][  T988] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0
[ 1320.936920][  T988] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input22
[ 1320.939756][  T988] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 1320.975589][  T988] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 1320.991534][  T988] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 1321.021659][  T988] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 1321.046220][  T988] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 1321.071998][  T988] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 1321.101512][  T988] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 1321.121567][  T988] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 1321.151510][  T988] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 1321.182612][  T988] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 1321.241458][  T988] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1321.241538][  T988] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1321.294493][  T988] usb 7-1: USB disconnect, device number 42
[ 1321.337617][ T9410] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1321.676338][ T9410] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1321.923635][ T9410] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1322.024266][T12579] veth0_vlan: entered promiscuous mode
[ 1322.298675][ T9410] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1322.302471][ T5797] Bluetooth: hci0: command tx timeout
[ 1322.373593][T12552] veth0_macvtap: entered promiscuous mode
[ 1322.423888][T12579] veth1_vlan: entered promiscuous mode
[ 1322.445217][T12552] veth1_macvtap: entered promiscuous mode
[ 1322.750715][T12552] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1322.830771][T12814] chnl_net:caif_netlink_parms(): no params data found
[ 1322.881118][T12552] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1323.029835][T12721] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1323.158022][T12579] veth0_macvtap: entered promiscuous mode
[ 1323.193533][ T6015] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1323.224115][ T6015] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1323.226704][T12579] veth1_macvtap: entered promiscuous mode
[ 1323.258429][ T6015] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1323.258975][ T9410] bridge_slave_1: left allmulticast mode
[ 1323.258994][ T9410] bridge_slave_1: left promiscuous mode
[ 1323.259175][ T9410] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1323.345492][ T9410] bridge_slave_0: left allmulticast mode
[ 1323.345515][ T9410] bridge_slave_0: left promiscuous mode
[ 1323.345716][ T9410] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1324.391451][ T5797] Bluetooth: hci0: command tx timeout
[ 1324.922241][ T9410] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1325.002193][ T9410] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1325.027483][ T9410] bond0 (unregistering): Released all slaves
[ 1325.082674][ T6015] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1325.273482][T12814] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1325.273567][T12814] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1325.273761][T12814] bridge_slave_0: entered allmulticast mode
[ 1325.275642][T12814] bridge_slave_0: entered promiscuous mode
[ 1325.562913][T12814] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1325.563002][T12814] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1325.563204][T12814] bridge_slave_1: entered allmulticast mode
[ 1325.565013][T12814] bridge_slave_1: entered promiscuous mode
[ 1325.568739][T12721] 8021q: adding VLAN 0 to HW filter on device team0
[ 1325.637753][T12579] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1325.736329][ T8470] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1325.736489][ T8470] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1325.778336][T12814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1326.228786][T12814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1326.512770][ T8691] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1326.516715][ T8691] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1326.518080][ T8691] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1326.519325][ T8691] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1326.520084][ T8691] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1326.612042][ T8691] Bluetooth: hci0: command tx timeout
[ 1327.546054][T12579] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1327.632966][ T9231] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1327.633097][ T9231] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1327.701161][T12814] team0: Port device team_slave_0 added
[ 1327.821512][ T9410] hsr_slave_0: left promiscuous mode
[ 1327.841568][ T9410] hsr_slave_1: left promiscuous mode
[ 1327.842346][ T9410] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1327.842365][ T9410] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1327.902547][ T9410] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1327.902576][ T9410] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1327.986112][ T9410] veth1_macvtap: left promiscuous mode
[ 1327.986187][ T9410] veth0_macvtap: left promiscuous mode
[ 1327.986359][ T9410] veth1_vlan: left promiscuous mode
[ 1327.986472][ T9410] veth0_vlan: left promiscuous mode
[ 1328.627386][ T5797] Bluetooth: hci0: command tx timeout
[ 1328.706879][ T5797] Bluetooth: hci3: command tx timeout
[ 1330.787321][ T5797] Bluetooth: hci3: command tx timeout
[ 1331.706776][ T9410] team0 (unregistering): Port device team_slave_1 removed
[ 1331.783862][T12852] netlink: 188 bytes leftover after parsing attributes in process `syz.6.994'.
[ 1332.392615][T10374] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1332.397061][T10374] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1332.399850][T10374] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1332.400890][T10374] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1332.402628][T10374] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1332.443835][T12852] blktrace: Concurrent blktraces are not allowed on nullb0
[ 1332.553273][ T9410] team0 (unregistering): Port device team_slave_0 removed
[ 1332.861663][ T5797] Bluetooth: hci3: command tx timeout
[ 1334.541575][ T5797] Bluetooth: hci5: command tx timeout
[ 1334.807462][T12814] team0: Port device team_slave_1 added
[ 1334.807541][ T9232] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1334.844602][ T9232] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1334.895403][ T9232] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1334.941450][ T5797] Bluetooth: hci3: command tx timeout
[ 1335.011349][ T6015] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1335.044280][T12814] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1335.044294][T12814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1335.044315][T12814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1335.166218][T12865] vlan2: entered promiscuous mode
[ 1335.166481][T12865] vlan2: entered allmulticast mode
[ 1335.166497][T12865] hsr_slave_1: entered allmulticast mode
[ 1335.190347][T12814] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1335.190365][T12814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1335.190395][T12814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1335.363980][T12866] netlink: 4 bytes leftover after parsing attributes in process `syz.6.996'.
[ 1336.376163][T12814] hsr_slave_0: entered promiscuous mode
[ 1336.377160][T12814] hsr_slave_1: entered promiscuous mode
[ 1336.377848][T12814] debugfs: 'hsr0' already exists in 'hsr'
[ 1336.377867][T12814] Cannot create hsr debugfs directory
[ 1336.621478][ T5797] Bluetooth: hci5: command tx timeout
[ 1338.703675][ T5797] Bluetooth: hci5: command tx timeout
[ 1339.008815][ T9410] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1339.272718][T12881] input: syz1 as /devices/virtual/input/input23
[ 1339.502837][ T9410] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1339.916474][ T9410] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1340.293926][ T9410] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1340.351007][T12840] chnl_net:caif_netlink_parms(): no params data found
[ 1340.372303][T12855] chnl_net:caif_netlink_parms(): no params data found
[ 1340.529293][T12721] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1340.781530][T10374] Bluetooth: hci5: command tx timeout
[ 1341.354298][T12840] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1341.354506][T12840] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1341.354729][T12840] bridge_slave_0: entered allmulticast mode
[ 1341.382649][T12840] bridge_slave_0: entered promiscuous mode
[ 1341.390084][T12855] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1341.390213][T12855] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1341.390433][T12855] bridge_slave_0: entered allmulticast mode
[ 1341.423641][T12855] bridge_slave_0: entered promiscuous mode
[ 1341.440072][T12840] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1341.440154][T12840] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1341.440375][T12840] bridge_slave_1: entered allmulticast mode
[ 1341.476901][T12840] bridge_slave_1: entered promiscuous mode
[ 1341.579029][T12855] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1341.579145][T12855] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1341.579362][T12855] bridge_slave_1: entered allmulticast mode
[ 1341.607438][T12855] bridge_slave_1: entered promiscuous mode
[ 1341.796224][T12840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1342.010894][ T9410] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1342.128387][T12855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1342.144019][T12840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1342.281007][T12855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1342.348491][T12903] input: syz1 as /devices/virtual/input/input24
[ 1342.650601][ T9410] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1342.757895][T12840] team0: Port device team_slave_0 added
[ 1342.808674][T12855] team0: Port device team_slave_0 added
[ 1342.815358][T12840] team0: Port device team_slave_1 added
[ 1342.934833][T12855] team0: Port device team_slave_1 added
[ 1343.121171][ T9410] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1343.349234][T12840] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1343.349248][T12840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1343.349268][T12840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1343.351223][T12814] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1343.598885][ T9410] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1343.657670][T12855] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1343.657684][T12855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1343.657716][T12855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1343.660173][T12840] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1343.660185][T12840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1343.660205][T12840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1343.660681][T12814] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1343.811569][T12855] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1343.811843][T12855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1343.811879][T12855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1343.881730][T12814] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1343.957380][T12814] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1344.217976][T12840] hsr_slave_0: entered promiscuous mode
[ 1344.219497][T12840] hsr_slave_1: entered promiscuous mode
[ 1344.220871][T12840] debugfs: 'hsr0' already exists in 'hsr'
[ 1344.220891][T12840] Cannot create hsr debugfs directory
[ 1344.267355][T12855] hsr_slave_0: entered promiscuous mode
[ 1344.269552][T12855] hsr_slave_1: entered promiscuous mode
[ 1344.271146][T12855] debugfs: 'hsr0' already exists in 'hsr'
[ 1344.288861][T12855] Cannot create hsr debugfs directory
[ 1344.405151][T12721] veth0_vlan: entered promiscuous mode
[ 1344.778830][T12721] veth1_vlan: entered promiscuous mode
[ 1344.954558][ T9410] bridge_slave_1: left allmulticast mode
[ 1344.954589][ T9410] bridge_slave_1: left promiscuous mode
[ 1344.954854][ T9410] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1345.023264][ T9410] bridge_slave_0: left allmulticast mode
[ 1345.023286][ T9410] bridge_slave_0: left promiscuous mode
[ 1345.023473][ T9410] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1345.105452][ T9410] bridge_slave_1: left allmulticast mode
[ 1345.105475][ T9410] bridge_slave_1: left promiscuous mode
[ 1345.105644][ T9410] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1345.173101][ T9410] bridge_slave_0: left allmulticast mode
[ 1345.173125][ T9410] bridge_slave_0: left promiscuous mode
[ 1345.173322][ T9410] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1349.163378][ T9410] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1349.223604][ T9410] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1349.247729][ T9410] bond0 (unregistering): Released all slaves
[ 1349.323250][T12930] capability: warning: `syz.6.1004' uses 32-bit capabilities (legacy support in use)
[ 1350.787459][ T9410] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1350.862143][ T9410] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1350.883946][ T9410] bond0 (unregistering): Released all slaves
[ 1351.962577][ T9410] hsr_slave_0: left promiscuous mode
[ 1352.022758][ T9410] hsr_slave_1: left promiscuous mode
[ 1352.023756][ T9410] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1352.023782][ T9410] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1352.092954][ T9410] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1352.092984][ T9410] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1352.441681][ T9410] hsr_slave_0: left promiscuous mode
[ 1352.562771][ T9410] hsr_slave_1: left promiscuous mode
[ 1352.563587][ T9410] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1352.563607][ T9410] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1352.602540][ T9410] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1352.602563][ T9410] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1353.065781][ T9410] veth1_macvtap: left promiscuous mode
[ 1353.065845][ T9410] veth0_macvtap: left promiscuous mode
[ 1353.066009][ T9410] veth1_vlan: left promiscuous mode
[ 1353.066144][ T9410] veth0_vlan: left promiscuous mode
[ 1353.111886][ T9410] veth1_macvtap: left promiscuous mode
[ 1353.111955][ T9410] veth0_macvtap: left promiscuous mode
[ 1353.112224][ T9410] veth1_vlan: left promiscuous mode
[ 1353.112420][ T9410] veth0_vlan: left promiscuous mode
[ 1354.040600][T12961] blktrace: Concurrent blktraces are not allowed on nullb0
[ 1357.353027][ T9410] team0 (unregistering): Port device team_slave_1 removed
[ 1357.572190][ T9410] team0 (unregistering): Port device team_slave_0 removed
[ 1361.752308][ T9410] team0 (unregistering): Port device team_slave_1 removed
[ 1361.982267][ T9410] team0 (unregistering): Port device team_slave_0 removed
[ 1364.010851][T10374] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1364.040814][T10374] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1364.053986][T10374] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1364.058077][T10374] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1364.059116][T10374] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1365.158772][T12987] blktrace: Concurrent blktraces are not allowed on nullb0
[ 1365.244502][T12814] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1366.098231][T12814] 8021q: adding VLAN 0 to HW filter on device team0
[ 1366.221729][ T5797] Bluetooth: hci1: command tx timeout
[ 1366.242999][ T8623] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1366.252035][ T8623] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1366.298442][ T6227] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1366.298535][ T6227] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1366.834533][T12983] chnl_net:caif_netlink_parms(): no params data found
[ 1367.040687][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[ 1367.040760][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[ 1367.783919][T12983] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1367.784128][T12983] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1367.784332][T12983] bridge_slave_0: entered allmulticast mode
[ 1367.787088][T12983] bridge_slave_0: entered promiscuous mode
[ 1367.866754][T12983] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1367.866877][T12983] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1367.867111][T12983] bridge_slave_1: entered allmulticast mode
[ 1367.869896][T12983] bridge_slave_1: entered promiscuous mode
[ 1367.927430][T13010] input: syz0 as /devices/virtual/input/input25
[ 1368.101121][T12983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1368.246892][T12983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1368.301428][ T5797] Bluetooth: hci1: command tx timeout
[ 1368.343821][T12840] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1368.528999][T12840] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1368.747963][T12983] team0: Port device team_slave_0 added
[ 1368.958205][T12840] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1369.063154][T12983] team0: Port device team_slave_1 added
[ 1369.317108][T12840] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1369.649606][T12983] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1369.649624][T12983] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1369.649651][T12983] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1369.725899][T12983] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1369.725913][T12983] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1369.725934][T12983] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1370.041842][T12855] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1370.216960][T12855] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1370.275329][T12983] hsr_slave_0: entered promiscuous mode
[ 1370.276758][T12983] hsr_slave_1: entered promiscuous mode
[ 1370.277704][T12983] debugfs: 'hsr0' already exists in 'hsr'
[ 1370.277736][T12983] Cannot create hsr debugfs directory
[ 1370.381610][ T5797] Bluetooth: hci1: command tx timeout
[ 1370.475174][T12855] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1370.500023][T12855] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1370.605890][T12814] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1371.407119][ T9230] bridge_slave_1: left allmulticast mode
[ 1371.407142][ T9230] bridge_slave_1: left promiscuous mode
[ 1371.407315][ T9230] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1371.473102][ T9230] bridge_slave_0: left allmulticast mode
[ 1371.473126][ T9230] bridge_slave_0: left promiscuous mode
[ 1371.473468][ T9230] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1372.461418][ T5797] Bluetooth: hci1: command tx timeout
[ 1372.614480][T13046] netlink: 188 bytes leftover after parsing attributes in process `syz.6.1015'.
[ 1373.152099][T13046] blktrace: Concurrent blktraces are not allowed on nullb0
[ 1373.482273][ T9230] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1373.567036][ T9230] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1373.584207][ T9230] bond0 (unregistering): Released all slaves
[ 1373.961466][ T9230] hsr_slave_0: left promiscuous mode
[ 1373.982077][ T9230] hsr_slave_1: left promiscuous mode
[ 1373.984196][ T9230] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1374.032352][ T9230] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1374.130463][ T9230] veth1_vlan: left promiscuous mode
[ 1374.130657][ T9230] veth0_vlan: left promiscuous mode
[ 1375.084597][T13061] input: syz0 as /devices/virtual/input/input26
[ 1376.352168][ T9230] team0 (unregistering): Port device team_slave_1 removed
[ 1376.572153][ T9230] team0 (unregistering): Port device team_slave_0 removed
[ 1378.525783][T12814] veth0_vlan: entered promiscuous mode
[ 1378.714876][T12814] veth1_vlan: entered promiscuous mode
[ 1378.730720][T12840] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1378.905415][T12840] 8021q: adding VLAN 0 to HW filter on device team0
[ 1378.950444][T12855] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1378.968298][ T9410] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1378.968409][ T9410] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1379.072744][ T6015] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1379.072914][ T6015] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1379.094495][T12814] veth0_macvtap: entered promiscuous mode
[ 1379.130525][T12814] veth1_macvtap: entered promiscuous mode
[ 1379.156992][T12855] 8021q: adding VLAN 0 to HW filter on device team0
[ 1379.293556][ T9410] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1379.293760][ T9410] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1379.412959][ T9231] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1379.413124][ T9231] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1379.595386][T12814] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1379.783901][T12814] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1379.895924][T12983] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1379.964671][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1379.964764][T12983] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1380.023042][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1380.025065][T12983] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1380.084125][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1380.089815][T12983] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1380.140871][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1380.929951][T12840] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1381.215494][T12983] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1381.330585][T12855] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1381.340367][T12983] 8021q: adding VLAN 0 to HW filter on device team0
[ 1381.418632][ T6227] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1381.418801][ T6227] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1381.500151][ T9410] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1381.500303][ T9410] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1382.082160][T10374] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1382.088069][T10374] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1382.089888][T10374] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1382.091213][T10374] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1382.130843][T10374] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1383.064329][ T9230] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1383.469668][ T9230] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1383.790376][ T9230] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1383.865768][T12840] veth0_vlan: entered promiscuous mode
[ 1384.117338][ T9230] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1384.176259][T12840] veth1_vlan: entered promiscuous mode
[ 1384.220175][T12855] veth0_vlan: entered promiscuous mode
[ 1384.227043][T10374] Bluetooth: hci0: command tx timeout
[ 1384.296150][T12983] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1384.363403][T12855] veth1_vlan: entered promiscuous mode
[ 1384.849092][T12840] veth0_macvtap: entered promiscuous mode
[ 1384.963490][T12840] veth1_macvtap: entered promiscuous mode
[ 1384.970985][T13101] chnl_net:caif_netlink_parms(): no params data found
[ 1385.020930][ T9230] bridge_slave_1: left allmulticast mode
[ 1385.020953][ T9230] bridge_slave_1: left promiscuous mode
[ 1385.021130][ T9230] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1385.114219][ T9230] bridge_slave_0: left allmulticast mode
[ 1385.114889][ T9230] bridge_slave_0: left promiscuous mode
[ 1385.115073][ T9230] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1386.309517][T10374] Bluetooth: hci0: command tx timeout
[ 1386.674001][ T9230] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1386.753546][ T9230] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1386.781064][ T9230] bond0 (unregistering): Released all slaves
[ 1386.959386][T12855] veth0_macvtap: entered promiscuous mode
[ 1387.212016][T12855] veth1_macvtap: entered promiscuous mode
[ 1387.392071][T13101] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1387.392273][T13101] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1387.392517][T13101] bridge_slave_0: entered allmulticast mode
[ 1387.395294][T13101] bridge_slave_0: entered promiscuous mode
[ 1387.433415][T13101] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1387.433562][T13101] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1387.433781][T13101] bridge_slave_1: entered allmulticast mode
[ 1387.436498][T13101] bridge_slave_1: entered promiscuous mode
[ 1387.547118][T13132] loop5: detected capacity change from 0 to 8
[ 1387.709313][ T5797] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1387.733705][ T5797] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1387.736548][ T5797] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1387.737646][ T5797] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1387.738387][ T5797] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1387.919479][T12984] Dev loop5: unable to read RDB block 8
[ 1387.919521][T12984]  loop5: unable to read partition table
[ 1387.919693][T12984] loop5: partition table beyond EOD, truncated
[ 1387.926985][T13132] Dev loop5: unable to read RDB block 8
[ 1387.927157][T13132]  loop5: unable to read partition table
[ 1387.927936][T13132] loop5: partition table beyond EOD, truncated
[ 1387.927984][T13132] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü�¾SêjÌ–ã¢P=ý?ã}X‹ºÐ	œëÜ%õ«`ÉæÖ€ù…ˆŠ5) failed (rc=-5)
[ 1388.046049][T13101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1388.107532][T13101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1388.291523][ T9230] hsr_slave_0: left promiscuous mode
[ 1388.311493][ T9230] hsr_slave_1: left promiscuous mode
[ 1388.314126][ T9230] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1388.314146][ T9230] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1388.363729][ T9230] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1388.363956][ T9230] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1388.381437][ T5797] Bluetooth: hci0: command tx timeout
[ 1388.534107][ T9230] veth1_macvtap: left promiscuous mode
[ 1388.534184][ T9230] veth0_macvtap: left promiscuous mode
[ 1388.534354][ T9230] veth1_vlan: left promiscuous mode
[ 1388.536139][ T9230] veth0_vlan: left promiscuous mode
[ 1389.831137][ T5797] Bluetooth: hci4: command tx timeout
[ 1390.462499][ T5797] Bluetooth: hci0: command tx timeout
[ 1391.872174][ T9230] team0 (unregistering): Port device team_slave_1 removed
[ 1391.901471][ T5797] Bluetooth: hci4: command tx timeout
[ 1392.092031][ T9230] team0 (unregistering): Port device team_slave_0 removed
[ 1393.420317][T10374] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1393.440660][T10374] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1393.450179][T10374] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1393.489317][T10374] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1393.511936][T10374] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1393.981643][ T5797] Bluetooth: hci4: command tx timeout
[ 1394.298789][T12855] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1394.443593][T13101] team0: Port device team_slave_0 added
[ 1394.484825][T13101] team0: Port device team_slave_1 added
[ 1394.856323][T13101] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1394.856339][T13101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1394.856367][T13101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1394.930343][T12983] veth0_vlan: entered promiscuous mode
[ 1395.067706][T13101] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1395.067721][T13101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1395.067741][T13101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1395.601469][ T5797] Bluetooth: hci3: command tx timeout
[ 1396.070355][ T5797] Bluetooth: hci4: command tx timeout
[ 1396.106322][T12983] veth1_vlan: entered promiscuous mode
[ 1396.158897][T13101] hsr_slave_0: entered promiscuous mode
[ 1396.159827][T13101] hsr_slave_1: entered promiscuous mode
[ 1397.666526][ T5797] Bluetooth: hci3: command tx timeout
[ 1399.202560][T12983] veth0_macvtap: entered promiscuous mode
[ 1399.459245][T13151] chnl_net:caif_netlink_parms(): no params data found
[ 1399.518929][T13133] chnl_net:caif_netlink_parms(): no params data found
[ 1399.821416][ T5797] Bluetooth: hci3: command tx timeout
[ 1399.863347][T12983] veth1_macvtap: entered promiscuous mode
[ 1400.954604][T13151] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1400.954724][T13151] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1400.954926][T13151] bridge_slave_0: entered allmulticast mode
[ 1400.956809][T13151] bridge_slave_0: entered promiscuous mode
[ 1401.085225][T13151] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1401.085313][T13151] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1401.085495][T13151] bridge_slave_1: entered allmulticast mode
[ 1401.087513][T13151] bridge_slave_1: entered promiscuous mode
[ 1401.090593][T12983] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1401.127929][T13133] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1401.128044][T13133] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1401.128283][T13133] bridge_slave_0: entered allmulticast mode
[ 1401.131017][T13133] bridge_slave_0: entered promiscuous mode
[ 1401.184225][T13133] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1401.184361][T13133] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1401.184494][T13133] bridge_slave_1: entered allmulticast mode
[ 1401.186305][T13133] bridge_slave_1: entered promiscuous mode
[ 1401.274030][T13151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1401.278926][T12983] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1401.348876][T13151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1401.460248][T13133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1401.499966][T13133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1401.605104][ T1482] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1401.632616][T13151] team0: Port device team_slave_0 added
[ 1401.698037][ T1482] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1401.724005][T13151] team0: Port device team_slave_1 added
[ 1401.796027][ T1482] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1401.893918][T13133] team0: Port device team_slave_0 added
[ 1401.894020][ T1482] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1401.916861][ T5797] Bluetooth: hci3: command tx timeout
[ 1401.998673][T13133] team0: Port device team_slave_1 added
[ 1402.086385][T13151] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1402.086405][T13151] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1402.086434][T13151] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1402.408472][T13204] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1035'.
[ 1402.414735][T13151] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1402.414785][T13151] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1402.414865][T13151] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1402.527100][T13205] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.1035'.
[ 1402.632567][T13133] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1402.632581][T13133] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1402.632600][T13133] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1402.695781][T13133] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1402.695795][T13133] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1402.695815][T13133] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1402.816633][T13101] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1403.081065][T13101] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1403.148411][T13101] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1403.475374][T13101] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1403.537724][T13151] hsr_slave_0: entered promiscuous mode
[ 1403.539709][T13151] hsr_slave_1: entered promiscuous mode
[ 1403.540833][T13151] debugfs: 'hsr0' already exists in 'hsr'
[ 1403.540852][T13151] Cannot create hsr debugfs directory
[ 1403.594843][T13133] hsr_slave_0: entered promiscuous mode
[ 1403.597628][T13133] hsr_slave_1: entered promiscuous mode
[ 1403.598326][T13133] debugfs: 'hsr0' already exists in 'hsr'
[ 1403.598345][T13133] Cannot create hsr debugfs directory
[ 1404.334152][ T6227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1404.334176][ T6227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1404.731011][ T1482] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1404.731035][ T1482] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1406.033675][T13231] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1039'.
[ 1406.164629][T13233] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.1039'.
[ 1406.266913][ T9230] bridge_slave_1: left allmulticast mode
[ 1406.266935][ T9230] bridge_slave_1: left promiscuous mode
[ 1406.267109][ T9230] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1406.376998][ T9230] bridge_slave_0: left allmulticast mode
[ 1406.377022][ T9230] bridge_slave_0: left promiscuous mode
[ 1406.377215][ T9230] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1406.543892][ T9230] bridge_slave_1: left allmulticast mode
[ 1406.543923][ T9230] bridge_slave_1: left promiscuous mode
[ 1406.544174][ T9230] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1406.680337][ T9230] bridge_slave_0: left allmulticast mode
[ 1406.680360][ T9230] bridge_slave_0: left promiscuous mode
[ 1406.680549][ T9230] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1408.483029][ T9230] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1408.544603][ T9230] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1408.587387][ T9230] bond0 (unregistering): Released all slaves
[ 1410.015235][ T9230] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1410.102229][ T9230] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1410.127839][ T9230] bond0 (unregistering): Released all slaves
[ 1410.424034][T13249] loop8: detected capacity change from 0 to 8
[ 1410.440914][T13163] Dev loop8: unable to read RDB block 8
[ 1410.440974][T13163]  loop8: unable to read partition table
[ 1410.441234][T13163] loop8: partition table beyond EOD, truncated
[ 1410.599242][T13249] Dev loop8: unable to read RDB block 8
[ 1410.599296][T13249]  loop8: unable to read partition table
[ 1410.599511][T13249] loop8: partition table beyond EOD, truncated
[ 1410.599543][T13249] loop_reread_partitions: partition scan of loop8 (þ被xü^>à– �) failed (rc=-5)
[ 1410.839725][T13254] input: syz0 as /devices/virtual/input/input27
[ 1412.369650][T13101] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1412.591454][ T9230] hsr_slave_0: left promiscuous mode
[ 1412.651444][ T9230] hsr_slave_1: left promiscuous mode
[ 1412.653220][ T9230] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1412.653241][ T9230] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1412.693386][ T9230] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1412.891414][ T9230] hsr_slave_0: left promiscuous mode
[ 1412.918603][ T9230] hsr_slave_1: left promiscuous mode
[ 1412.919287][ T9230] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1412.954460][ T9230] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1413.139123][ T9230] veth1_macvtap: left promiscuous mode
[ 1413.139175][ T9230] veth0_macvtap: left promiscuous mode
[ 1413.139397][ T9230] veth1_vlan: left promiscuous mode
[ 1413.139514][ T9230] veth0_vlan: left promiscuous mode
[ 1413.181848][ T9230] veth1_macvtap: left promiscuous mode
[ 1413.181952][ T9230] veth0_macvtap: left promiscuous mode
[ 1413.182222][ T9230] veth1_vlan: left promiscuous mode
[ 1413.182401][ T9230] veth0_vlan: left promiscuous mode
[ 1416.214471][ T9230] team0 (unregistering): Port device team_slave_1 removed
[ 1416.443486][ T9230] team0 (unregistering): Port device team_slave_0 removed
[ 1420.512142][ T9230] team0 (unregistering): Port device team_slave_1 removed
[ 1420.772305][ T9230] team0 (unregistering): Port device team_slave_0 removed
[ 1423.150951][T13101] 8021q: adding VLAN 0 to HW filter on device team0
[ 1423.605500][ T9410] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1423.605746][ T9410] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1424.260926][ T6227] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1424.261172][ T6227] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1424.874969][T13311] ubi31: attaching mtd0
[ 1424.876861][T13311] ubi31: scanning is finished
[ 1425.202032][T13311] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[ 1425.202062][T13311] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[ 1425.202082][T13311] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[ 1425.202100][T13311] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[ 1425.202119][T13311] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[ 1425.202137][T13311] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[ 1425.202169][T13311] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3866547556
[ 1425.202194][T13311] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[ 1425.202696][T13325] ubi31: background thread "ubi_bgt31d" started, PID 13325
[ 1426.705179][T13151] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1426.822887][T10374] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1426.867899][T13151] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1426.891726][T10374] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1426.898064][T10374] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1426.899270][T10374] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1426.903113][T10374] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1427.221196][T13151] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1427.459103][T13151] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1428.384454][T13133] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1428.467534][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[ 1428.467629][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[ 1428.519027][T13133] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1428.595441][T13101] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1428.626400][T13133] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1428.718481][T13133] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1429.022031][ T5797] Bluetooth: hci5: command tx timeout
[ 1429.934836][ T9230] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1430.058053][T13337] chnl_net:caif_netlink_parms(): no params data found
[ 1430.073534][T13101] veth0_vlan: entered promiscuous mode
[ 1430.599991][ T9230] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1430.667887][T13101] veth1_vlan: entered promiscuous mode
[ 1431.017336][ T9230] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1431.101487][ T5797] Bluetooth: hci5: command tx timeout
[ 1431.306148][T13337] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1431.306471][T13337] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1431.306663][T13337] bridge_slave_0: entered allmulticast mode
[ 1431.309125][T13337] bridge_slave_0: entered promiscuous mode
[ 1431.360465][T13337] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1431.360618][T13337] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1431.360839][T13337] bridge_slave_1: entered allmulticast mode
[ 1431.422548][T13337] bridge_slave_1: entered promiscuous mode
[ 1431.614524][ T9230] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1431.776492][T13151] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1431.799850][T13337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1431.836945][T13337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1431.917702][T13337] team0: Port device team_slave_0 added
[ 1431.934001][T13337] team0: Port device team_slave_1 added
[ 1432.284620][T13337] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1432.284641][T13337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1432.284671][T13337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1432.343865][T13151] 8021q: adding VLAN 0 to HW filter on device team0
[ 1432.344924][T13337] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1432.344935][T13337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1432.344961][T13337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1432.434696][T13133] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1432.462612][T13101] veth0_macvtap: entered promiscuous mode
[ 1432.540225][ T1482] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1432.540416][ T1482] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1432.787806][T13101] veth1_macvtap: entered promiscuous mode
[ 1432.833847][ T9230] bridge_slave_1: left allmulticast mode
[ 1432.833869][ T9230] bridge_slave_1: left promiscuous mode
[ 1432.834043][ T9230] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1432.913648][ T9230] bridge_slave_0: left allmulticast mode
[ 1432.913671][ T9230] bridge_slave_0: left promiscuous mode
[ 1432.913858][ T9230] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1433.191321][ T5797] Bluetooth: hci5: command tx timeout
[ 1433.707618][T13421] input: syz0 as /devices/virtual/input/input28
[ 1435.093671][ T9230] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1435.172690][ T9230] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1435.207091][ T9230] bond0 (unregistering): Released all slaves
[ 1435.244049][ T8623] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1435.244208][ T8623] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1435.271455][ T5797] Bluetooth: hci5: command tx timeout
[ 1435.272544][T13337] hsr_slave_0: entered promiscuous mode
[ 1435.277504][T13337] hsr_slave_1: entered promiscuous mode
[ 1435.280160][T13337] debugfs: 'hsr0' already exists in 'hsr'
[ 1435.280231][T13337] Cannot create hsr debugfs directory
[ 1435.350229][T13133] 8021q: adding VLAN 0 to HW filter on device team0
[ 1435.496520][T13101] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1435.499398][ T9410] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1435.499545][ T9410] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1435.597355][ T9410] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1435.597507][ T9410] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1435.897678][T13101] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1436.480751][ T6227] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1436.554660][ T6227] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1436.815961][ T6227] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1436.841843][ T6227] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1437.019816][ T9230] hsr_slave_0: left promiscuous mode
[ 1437.021081][ T9230] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1437.092286][ T9230] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1437.092308][ T9230] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1437.283175][ T9230] veth1_macvtap: left promiscuous mode
[ 1437.283246][ T9230] veth0_macvtap: left promiscuous mode
[ 1437.283407][ T9230] veth1_vlan: left promiscuous mode
[ 1437.283515][ T9230] veth0_vlan: left promiscuous mode
[ 1441.602167][ T9230] team0 (unregistering): Port device team_slave_1 removed
[ 1441.831955][ T9230] team0 (unregistering): Port device team_slave_0 removed
[ 1443.576317][T10374] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1443.657021][T10374] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1443.669113][T10374] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1443.673482][T10374] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1443.690481][T10374] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1445.541467][ T7879] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[ 1445.633352][ T8419] infiniband syz0: ib_query_port failed (-19)
[ 1445.691385][ T7879] usb 9-1: Using ep0 maxpacket: 16
[ 1445.693391][ T7879] usb 9-1: config 0 has no interfaces?
[ 1445.695605][ T7879] usb 9-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb
[ 1445.695630][ T7879] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1445.695649][ T7879] usb 9-1: Product: syz
[ 1445.695663][ T7879] usb 9-1: Manufacturer: syz
[ 1445.695676][ T7879] usb 9-1: SerialNumber: syz
[ 1445.701016][ T7879] usb 9-1: config 0 descriptor??
[ 1445.823060][ T5797] Bluetooth: hci2: command tx timeout
[ 1445.947127][T13453] syz.8.1066 uses obsolete (PF_INET,SOCK_PACKET)
[ 1446.137117][ T7879] usb 9-1: USB disconnect, device number 2
[ 1447.048842][T13479] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1067'.
[ 1447.899880][T13151] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1447.908874][ T5797] Bluetooth: hci2: command tx timeout
[ 1448.623977][ T9230] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1448.845062][T10374] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1448.850858][T10374] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1448.867722][T10374] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1448.869669][T10374] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1448.870524][T10374] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1449.637218][ T9230] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1450.254419][ T5797] Bluetooth: hci2: command tx timeout
[ 1450.337535][T13444] chnl_net:caif_netlink_parms(): no params data found
[ 1450.636707][ T9230] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1450.762576][T13337] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1450.839812][T13337] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1451.021653][ T5797] Bluetooth: hci0: command tx timeout
[ 1451.031159][ T9230] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1451.127992][T13337] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1451.195869][T13337] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1451.376470][T13444] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1451.376574][T13444] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1451.376733][T13444] bridge_slave_0: entered allmulticast mode
[ 1451.378537][T13444] bridge_slave_0: entered promiscuous mode
[ 1451.455440][T13444] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1451.455521][T13444] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1451.455884][T13444] bridge_slave_1: entered allmulticast mode
[ 1451.457574][T13444] bridge_slave_1: entered promiscuous mode
[ 1451.790469][T13444] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1451.885800][T13444] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1452.311482][ T5797] Bluetooth: hci2: command tx timeout
[ 1452.313571][T13444] team0: Port device team_slave_0 added
[ 1452.314501][T13151] veth0_vlan: entered promiscuous mode
[ 1453.280202][ T5797] Bluetooth: hci0: command tx timeout
[ 1453.322908][T13444] team0: Port device team_slave_1 added
[ 1454.049251][ T9230] bridge_slave_1: left allmulticast mode
[ 1454.049281][ T9230] bridge_slave_1: left promiscuous mode
[ 1454.049536][ T9230] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1454.125758][ T9230] bridge_slave_0: left allmulticast mode
[ 1454.125789][ T9230] bridge_slave_0: left promiscuous mode
[ 1454.126041][ T9230] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1454.932517][T10374] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1454.952781][T10374] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1454.956579][T10374] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1454.958101][T10374] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1454.958900][T10374] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1455.053934][T13533] loop2: detected capacity change from 0 to 7
[ 1455.060789][T13533] Dev loop2: unable to read RDB block 7
[ 1455.060831][T13533]  loop2: unable to read partition table
[ 1455.061021][T13533] loop2: partition table beyond EOD, truncated
[ 1455.061059][T13533] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1455.344124][ T5797] Bluetooth: hci0: command tx timeout
[ 1456.921969][ T9230] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1456.984359][ T9230] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1457.007574][ T9230] bond0 (unregistering): Released all slaves
[ 1457.021617][ T5797] Bluetooth: hci3: command tx timeout
[ 1457.050963][T13444] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1457.050977][T13444] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1457.050999][T13444] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1457.373356][T13544] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1457.377165][T13544] batadv_slave_0: entered promiscuous mode
[ 1457.414563][T13444] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1457.414577][T13444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1457.414598][T13444] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1457.428429][ T5797] Bluetooth: hci0: command tx timeout
[ 1457.675341][ T9230] hsr_slave_0: left promiscuous mode
[ 1457.711408][ T9230] hsr_slave_1: left promiscuous mode
[ 1457.712191][ T9230] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1457.712209][ T9230] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1457.742826][ T9230] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1457.742864][ T9230] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1457.745351][T13549] input: syz0 as /devices/virtual/input/input29
[ 1457.850730][ T9230] veth1_macvtap: left promiscuous mode
[ 1457.859902][ T9230] veth0_macvtap: left promiscuous mode
[ 1457.860607][ T9230] veth1_vlan: left promiscuous mode
[ 1457.861049][ T9230] veth0_vlan: left promiscuous mode
[ 1459.101493][ T5797] Bluetooth: hci3: command tx timeout
[ 1460.702337][ T9230] team0 (unregistering): Port device team_slave_1 removed
[ 1460.912417][ T9230] team0 (unregistering): Port device team_slave_0 removed
[ 1461.181914][ T5797] Bluetooth: hci3: command tx timeout
[ 1462.913893][T13444] hsr_slave_0: entered promiscuous mode
[ 1462.914815][T13444] hsr_slave_1: entered promiscuous mode
[ 1462.980656][T13498] chnl_net:caif_netlink_parms(): no params data found
[ 1463.261482][ T5797] Bluetooth: hci3: command tx timeout
[ 1463.653567][T13498] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1463.653695][T13498] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1463.653933][T13498] bridge_slave_0: entered allmulticast mode
[ 1463.655955][T13498] bridge_slave_0: entered promiscuous mode
[ 1464.493253][T13498] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1464.493397][T13498] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1464.493588][T13498] bridge_slave_1: entered allmulticast mode
[ 1464.521618][T13498] bridge_slave_1: entered promiscuous mode
[ 1464.794999][T13498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1464.850041][T13498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1465.084172][T13498] team0: Port device team_slave_0 added
[ 1465.107806][T13498] team0: Port device team_slave_1 added
[ 1465.147491][T13337] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1465.295968][T13498] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1465.295982][T13498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1465.296003][T13498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1465.422818][T13530] chnl_net:caif_netlink_parms(): no params data found
[ 1465.470608][T13498] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1465.470628][T13498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1465.470659][T13498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1465.815490][T13573] input: syz1 as /devices/virtual/input/input30
[ 1466.863637][T13337] 8021q: adding VLAN 0 to HW filter on device team0
[ 1466.906745][T13498] hsr_slave_0: entered promiscuous mode
[ 1466.908323][T13498] hsr_slave_1: entered promiscuous mode
[ 1466.909511][T13498] debugfs: 'hsr0' already exists in 'hsr'
[ 1466.909531][T13498] Cannot create hsr debugfs directory
[ 1467.263852][ T6227] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1467.264019][ T6227] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1467.408747][T13530] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1467.408852][T13530] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1467.408996][T13530] bridge_slave_0: entered allmulticast mode
[ 1467.410946][T13530] bridge_slave_0: entered promiscuous mode
[ 1467.750527][T13530] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1467.750750][T13530] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1467.750920][T13530] bridge_slave_1: entered allmulticast mode
[ 1467.776865][T13530] bridge_slave_1: entered promiscuous mode
[ 1467.801736][ T3697] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1467.801831][ T3697] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1468.128623][T13530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1468.189146][T13530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1468.434263][T13530] team0: Port device team_slave_0 added
[ 1468.439011][T13444] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1468.486919][T13530] team0: Port device team_slave_1 added
[ 1468.538962][T13444] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1468.602531][T13444] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1468.705613][T13444] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1468.756191][T13530] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1468.756208][T13530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1468.756234][T13530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1468.799647][T13530] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1468.799701][T13530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1468.799776][T13530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1469.147917][T13530] hsr_slave_0: entered promiscuous mode
[ 1469.148850][T13530] hsr_slave_1: entered promiscuous mode
[ 1469.149510][T13530] debugfs: 'hsr0' already exists in 'hsr'
[ 1469.149528][T13530] Cannot create hsr debugfs directory
[ 1469.808002][T13589] input: syz0 as /devices/virtual/input/input31
[ 1470.674006][ T9230] bridge_slave_1: left allmulticast mode
[ 1470.674030][ T9230] bridge_slave_1: left promiscuous mode
[ 1470.674208][ T9230] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1470.742693][ T9230] bridge_slave_0: left allmulticast mode
[ 1470.742717][ T9230] bridge_slave_0: left promiscuous mode
[ 1470.742920][ T9230] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1470.834166][ T9230] bridge_slave_1: left allmulticast mode
[ 1470.834189][ T9230] bridge_slave_1: left promiscuous mode
[ 1470.834360][ T9230] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1470.939467][ T9230] bridge_slave_0: left allmulticast mode
[ 1470.939491][ T9230] bridge_slave_0: left promiscuous mode
[ 1470.939675][ T9230] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1472.162182][ T9230] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1472.253209][ T9230] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1472.307116][ T9230] bond0 (unregistering): Released all slaves
[ 1473.322092][ T9230] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1473.382972][ T9230] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1473.405439][ T9230] bond0 (unregistering): Released all slaves
[ 1473.683098][T13337] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1473.924769][T13498] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1474.081614][ T9230] hsr_slave_0: left promiscuous mode
[ 1474.101642][ T9230] hsr_slave_1: left promiscuous mode
[ 1474.103055][ T9230] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1474.144179][ T9230] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1474.281615][ T9230] hsr_slave_0: left promiscuous mode
[ 1474.303699][ T9230] hsr_slave_1: left promiscuous mode
[ 1474.304464][ T9230] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1474.343596][ T9230] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1474.428741][ T9230] veth0_vlan: left promiscuous mode
[ 1475.982737][ T9230] team0 (unregistering): Port device team_slave_1 removed
[ 1476.222487][ T9230] team0 (unregistering): Port device team_slave_0 removed
[ 1479.025804][ T9230] team0 (unregistering): Port device team_slave_1 removed
[ 1479.243204][ T9230] team0 (unregistering): Port device team_slave_0 removed
[ 1480.752320][T13498] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1480.945468][T13498] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1481.039205][T13498] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1481.258717][T13444] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1481.413724][T13602] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1083'.
[ 1481.413748][T13602] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1083'.
[ 1481.505017][T13337] veth0_vlan: entered promiscuous mode
[ 1481.589974][T13444] 8021q: adding VLAN 0 to HW filter on device team0
[ 1481.613644][T13337] veth1_vlan: entered promiscuous mode
[ 1481.720976][ T9410] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1481.721098][ T9410] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1481.809639][ T9334] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1481.809855][ T9334] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1482.781762][T13337] veth0_macvtap: entered promiscuous mode
[ 1482.935663][T13337] veth1_macvtap: entered promiscuous mode
[ 1483.059378][T13530] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1483.119970][T13498] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1483.124199][T13530] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1483.179494][T13530] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1483.225767][T13530] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1483.358566][T13337] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1483.507401][T13337] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1483.510010][T13498] 8021q: adding VLAN 0 to HW filter on device team0
[ 1483.698635][ T8752] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1483.698720][ T8752] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1483.717815][ T3697] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1483.730326][ T3697] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1483.754038][ T3697] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1483.772879][ T3697] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1483.809235][T13221] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1483.809375][T13221] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1484.300202][ T9230] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1484.300226][ T9230] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1484.359333][T13444] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1484.444297][ T8752] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1484.444322][ T8752] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1484.699724][T13530] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1484.809079][T13530] 8021q: adding VLAN 0 to HW filter on device team0
[ 1484.863803][ T6227] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1484.865645][ T6227] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1484.939471][ T9231] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1484.939575][ T9231] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1484.960213][T13444] veth0_vlan: entered promiscuous mode
[ 1485.480722][T13498] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1485.512543][T13444] veth1_vlan: entered promiscuous mode
[ 1486.321138][T13444] veth0_macvtap: entered promiscuous mode
[ 1486.328899][T13444] veth1_macvtap: entered promiscuous mode
[ 1486.395681][T13444] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1486.410206][T13444] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1486.512856][ T8623] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1486.522284][ T8623] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1486.545908][ T8623] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1486.549248][ T9410] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1486.862718][T10374] Bluetooth: hci1: command 0x0406 tx timeout
[ 1487.098903][ T9231] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1487.098927][ T9231] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1487.291133][T13649] input: syz0 as /devices/virtual/input/input32
[ 1487.397070][ T9231] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1487.397101][ T9231] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1488.175363][T13530] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1488.784434][T13655] lo: entered promiscuous mode
[ 1488.784459][T13655] lo: entered allmulticast mode
[ 1489.371131][T13498] veth0_vlan: entered promiscuous mode
[ 1489.907153][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[ 1489.907266][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[ 1490.229324][T13498] veth1_vlan: entered promiscuous mode
[ 1490.755437][T13530] veth0_vlan: entered promiscuous mode
[ 1491.172130][T13530] veth1_vlan: entered promiscuous mode
[ 1491.529418][T13498] veth0_macvtap: entered promiscuous mode
[ 1491.592059][T13498] veth1_macvtap: entered promiscuous mode
[ 1491.753607][T13498] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1491.910079][T13530] veth0_macvtap: entered promiscuous mode
[ 1491.919360][T13498] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1491.953855][T13530] veth1_macvtap: entered promiscuous mode
[ 1491.969180][ T1482] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1492.010391][ T1482] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1492.042339][ T9231] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1492.049835][ T9231] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1493.638528][T13530] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1493.826430][T13530] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1494.082916][ T9410] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1494.118976][ T9410] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1494.157603][ T9410] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1494.222112][ T9979] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[ 1494.223893][ T9410] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1494.319115][ T9231] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1494.319139][ T9231] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1494.371405][ T9979] usb 2-1: Using ep0 maxpacket: 16
[ 1494.373972][ T9979] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1494.374011][ T9979] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1494.374039][ T9979] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1494.374076][ T9979] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[ 1494.374103][ T9979] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1494.473303][ T9979] usb 2-1: config 0 descriptor??
[ 1496.291187][ T9979] nzxt-smart2 0003:1E71:2009.000E: unknown main item tag 0x0
[ 1496.292179][ T9979] nzxt-smart2 0003:1E71:2009.000E: unknown main item tag 0x0
[ 1496.292274][ T9979] nzxt-smart2 0003:1E71:2009.000E: unknown main item tag 0x0
[ 1496.292362][ T9979] nzxt-smart2 0003:1E71:2009.000E: unknown main item tag 0x0
[ 1496.292426][ T9979] nzxt-smart2 0003:1E71:2009.000E: unknown main item tag 0x0
[ 1496.356018][ T9979] nzxt-smart2 0003:1E71:2009.000E: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0
[ 1496.995740][ T9979] usb 2-1: USB disconnect, device number 3
[ 1497.466875][ T9410] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1497.466899][ T9410] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1497.633320][ T9331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1497.633342][ T9331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1498.442220][ T1482] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1498.442242][ T1482] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1501.789443][T13779] netlink: 208 bytes leftover after parsing attributes in process `syz.9.1103'.
[ 1507.946356][T13490] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[ 1508.101363][T13490] usb 2-1: Using ep0 maxpacket: 16
[ 1508.104768][T13490] usb 2-1: config 0 has no interfaces?
[ 1508.192744][T13490] usb 2-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb
[ 1508.192779][T13490] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1508.192802][T13490] usb 2-1: Product: syz
[ 1508.192819][T13490] usb 2-1: Manufacturer: syz
[ 1508.192836][T13490] usb 2-1: SerialNumber: syz
[ 1508.200835][T13490] usb 2-1: config 0 descriptor??
[ 1508.371878][T13835] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1112'.
[ 1508.379528][T13835] netlink: 209852 bytes leftover after parsing attributes in process `syz.9.1112'.
[ 1508.737663][T13490] usb 2-1: USB disconnect, device number 4
[ 1508.760394][T13838] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size.
[ 1510.337006][T13859] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1115'.
[ 1510.769161][T13855] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1115'.
[ 1511.164537][T13864] input: syz0 as /devices/virtual/input/input33
[ 1516.433643][T13913] input: syz1 as /devices/virtual/input/input34
[ 1518.603322][T13934] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1127'.
[ 1518.623297][T13934] netlink: 209852 bytes leftover after parsing attributes in process `syz.8.1127'.
[ 1520.157400][T13954] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1131'.
[ 1520.165354][T13954] netlink: 209852 bytes leftover after parsing attributes in process `syz.9.1131'.
[ 1526.270101][T14009] input: syz0 as /devices/virtual/input/input35
[ 1529.321898][T14025] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1142'.
[ 1529.609500][T14030] input: syz0 as /devices/virtual/input/input36
[ 1530.391545][T14025] hsr_slave_1 (unregistering): left promiscuous mode
[ 1530.475779][T14038] loop2: detected capacity change from 0 to 7
[ 1530.496610][T14038] Dev loop2: unable to read RDB block 7
[ 1530.496647][T14038]  loop2: unable to read partition table
[ 1530.496802][T14038] loop2: partition table beyond EOD, truncated
[ 1530.496827][T14038] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1535.417499][T14091] input: syz0 as /devices/virtual/input/input37
[ 1536.926024][T14102] l2tp_ppp: sess 2/0: no socket in recv
[ 1537.925844][T14115] loop2: detected capacity change from 0 to 7
[ 1537.941752][T14115] Dev loop2: unable to read RDB block 7
[ 1537.941786][T14115]  loop2: unable to read partition table
[ 1537.941931][T14115] loop2: partition table beyond EOD, truncated
[ 1537.941944][T14115] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1538.595599][ T5874] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[ 1538.821518][ T5874] usb 9-1: Using ep0 maxpacket: 32
[ 1538.825095][ T5874] usb 9-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40
[ 1538.825117][ T5874] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1538.844798][ T5874] usb 9-1: config 0 descriptor??
[ 1539.069852][ T5874] dvb-usb: found a 'Elgato EyeTV DTT' in warm state.
[ 1539.092353][ T5874] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1539.104774][ T5874] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT)
[ 1539.104977][ T5874] usb 9-1: media controller created
[ 1539.256183][ T5874] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1539.949519][ T5874] DVB: Unable to find symbol dib7000p_attach()
[ 1539.949536][ T5874] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT'
[ 1540.407575][ T5874] rc_core: IR keymap rc-dib0700-rc5 not found
[ 1540.407600][ T5874] Registered IR keymap rc-empty
[ 1540.407921][ T5874] dvb-usb: could not initialize remote control.
[ 1540.407932][ T5874] dvb-usb: Elgato EyeTV DTT successfully initialized and connected.
[ 1540.491688][ T5874] usb 9-1: USB disconnect, device number 3
[ 1540.731012][ T5874] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected.
[ 1544.211525][T14173] input: syz0 as /devices/virtual/input/input39
[ 1544.299949][T14167] loop2: detected capacity change from 0 to 7
[ 1544.335691][T14167] Dev loop2: unable to read RDB block 7
[ 1544.335738][T14167]  loop2: unable to read partition table
[ 1544.335948][T14167] loop2: partition table beyond EOD, truncated
[ 1544.352784][T14167] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1545.500941][T14191] vcan0: tx drop: invalid da for name 0x0000000000000003
[ 1551.563849][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[ 1551.563920][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[ 1552.813646][T14259] input: syz0 as /devices/virtual/input/input40
[ 1553.821449][T10374] Bluetooth: hci5: command 0x0406 tx timeout
[ 1558.251351][ T5874] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 1558.448858][ T5874] usb 1-1: config 0 has no interfaces?
[ 1558.468468][ T5874] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[ 1558.468501][ T5874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1558.468523][ T5874] usb 1-1: Product: syz
[ 1558.468538][ T5874] usb 1-1: Manufacturer: syz
[ 1558.468553][ T5874] usb 1-1: SerialNumber: syz
[ 1558.561521][ T5874] usb 1-1: config 0 descriptor??
[ 1559.058205][T13490] usb 1-1: USB disconnect, device number 2
[ 1562.664015][T14325] input: syz0 as /devices/virtual/input/input41
[ 1562.912220][T14331] loop2: detected capacity change from 0 to 7
[ 1562.958679][T14331] Dev loop2: unable to read RDB block 7
[ 1562.958734][T14331]  loop2: unable to read partition table
[ 1562.958966][T14331] loop2: partition table beyond EOD, truncated
[ 1562.958986][T14331] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1563.571149][T14343] input: syz0 as /devices/virtual/input/input42
[ 1563.715335][T14350] input: syz0 as /devices/virtual/input/input43
[ 1565.133123][T14361] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1195'.
[ 1565.189080][T14361] netlink: 209852 bytes leftover after parsing attributes in process `syz.8.1195'.
[ 1567.216880][T14380] input: syz0 as /devices/virtual/input/input44
[ 1568.784749][ T5797] Bluetooth: hci2: command 0x0406 tx timeout
[ 1573.985683][T10374] Bluetooth: hci0: command 0x0406 tx timeout
[ 1577.301474][T10263] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[ 1577.456128][T10263] usb 10-1: Using ep0 maxpacket: 16
[ 1577.473450][T10263] usb 10-1: config 0 has no interfaces?
[ 1577.488015][T10263] usb 10-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb
[ 1577.488048][T10263] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1577.488070][T10263] usb 10-1: Product: syz
[ 1577.488087][T10263] usb 10-1: Manufacturer: syz
[ 1577.488102][T10263] usb 10-1: SerialNumber: syz
[ 1577.556757][T10263] usb 10-1: config 0 descriptor??
[ 1578.324439][  T988] usb 10-1: USB disconnect, device number 2
[ 1579.021430][T10374] Bluetooth: hci3: command 0x0406 tx timeout
[ 1580.018838][T14494] input: syz0 as /devices/virtual/input/input45
[ 1587.611070][T14556] l2tp_ppp: sess 2/0: no socket in recv
[ 1588.305913][T11709] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[ 1588.461551][T11709] usb 2-1: Using ep0 maxpacket: 32
[ 1588.465428][T11709] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40
[ 1588.465464][T11709] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1588.539774][T11709] usb 2-1: config 0 descriptor??
[ 1588.767794][T11709] dvb-usb: found a 'Elgato EyeTV DTT' in warm state.
[ 1588.827528][T11709] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1588.834697][T11709] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT)
[ 1588.837623][T11709] usb 2-1: media controller created
[ 1588.941623][ T5874] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 1589.039630][T11709] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1589.101433][ T5874] usb 5-1: Using ep0 maxpacket: 32
[ 1589.106688][ T5874] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1589.106731][ T5874] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1589.106791][ T5874] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[ 1589.106818][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1589.241835][ T5874] usb 5-1: config 0 descriptor??
[ 1589.643519][T11709] DVB: Unable to find symbol dib7000p_attach()
[ 1589.643536][T11709] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT'
[ 1589.721109][ T5874] ft260 0003:0403:6030.000F: unknown main item tag 0x0
[ 1589.721147][ T5874] ft260 0003:0403:6030.000F: unknown main item tag 0x0
[ 1589.916996][ T5874] ft260 0003:0403:6030.000F: chip code: 0000 0000
[ 1589.986436][T11709] rc_core: IR keymap rc-dib0700-rc5 not found
[ 1589.986458][T11709] Registered IR keymap rc-empty
[ 1589.986709][T11709] dvb-usb: could not initialize remote control.
[ 1589.986721][T11709] dvb-usb: Elgato EyeTV DTT successfully initialized and connected.
[ 1590.037611][T11709] usb 2-1: USB disconnect, device number 5
[ 1590.119415][ T5874] ft260 0003:0403:6030.000F: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0
[ 1590.274931][T11709] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected.
[ 1590.321558][ T5874] ft260 0003:0403:6030.000F: failed to retrieve status: -32, no wakeup
[ 1590.617018][T11709] usb 5-1: USB disconnect, device number 2
[ 1590.796945][T14582] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1238'.
[ 1590.796982][T14582] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1238'.
[ 1591.651296][T10263] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[ 1591.811998][T10263] usb 10-1: Using ep0 maxpacket: 32
[ 1591.814963][T10263] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1591.814998][T10263] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1591.815040][T10263] usb 10-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[ 1591.815067][T10263] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1591.891966][T10263] usb 10-1: config 0 descriptor??
[ 1592.334726][T10263] ft260 0003:0403:6030.0010: unknown main item tag 0x0
[ 1592.334754][T10263] ft260 0003:0403:6030.0010: unknown main item tag 0x0
[ 1592.541606][T10263] ft260 0003:0403:6030.0010: chip code: 0000 0000
[ 1592.718969][T14617] loop2: detected capacity change from 0 to 7
[ 1592.757008][T10263] ft260 0003:0403:6030.0010: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.9-1/input0
[ 1592.763005][T14617] Dev loop2: unable to read RDB block 7
[ 1592.763084][T14617]  loop2: unable to read partition table
[ 1592.763294][T14617] loop2: partition table beyond EOD, truncated
[ 1592.763309][T14617] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1592.951366][T10263] ft260 0003:0403:6030.0010: failed to retrieve status: -32, no wakeup
[ 1593.311430][ T5874] usb 10-1: USB disconnect, device number 3
[ 1593.512687][T10263] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[ 1593.681851][T10263] usb 9-1: Using ep0 maxpacket: 8
[ 1593.684548][T10263] usb 9-1: config index 0 descriptor too short (expected 301, got 45)
[ 1593.684587][T10263] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1593.684604][T10263] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1593.684622][T10263] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1593.684640][T10263] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1593.684671][T10263] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1593.684688][T10263] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1594.147695][T10263] usb 9-1: usb_control_msg returned -32
[ 1594.147746][T10263] usbtmc 9-1:16.0: can't read capabilities
[ 1594.166744][ T5874] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[ 1594.381265][ T5874] usb 2-1: Using ep0 maxpacket: 32
[ 1594.416740][ T5874] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1594.416774][ T5874] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1594.416814][ T5874] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[ 1594.416831][ T5874] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1594.497539][ T5874] usb 2-1: config 0 descriptor??
[ 1595.254059][ T5874] ft260 0003:0403:6030.0011: unknown main item tag 0x0
[ 1595.254086][ T5874] ft260 0003:0403:6030.0011: unknown main item tag 0x0
[ 1595.346466][ T5874] ft260 0003:0403:6030.0011: chip code: 0000 0000
[ 1595.567850][ T5874] ft260 0003:0403:6030.0011: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0
[ 1595.765760][ T5874] ft260 0003:0403:6030.0011: failed to retrieve status: -32, no wakeup
[ 1595.987023][    C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1596.026808][    C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1596.026906][    C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1596.026978][    C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1596.027262][    C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1596.027311][    C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1596.027356][    C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1596.027588][    C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1596.027635][    C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1596.027680][    C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1596.027725][    C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1596.027997][    C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1596.028045][    C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1596.028091][    C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1596.028139][    C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1596.028491][    C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1596.207956][ T5874] usb 9-1: USB disconnect, device number 4
[ 1596.260513][T11709] usb 2-1: USB disconnect, device number 6
[ 1597.561526][T11709] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[ 1597.711398][T11709] usb 2-1: Using ep0 maxpacket: 8
[ 1597.716865][T11709] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[ 1597.716934][T11709] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1597.716959][T11709] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1597.716985][T11709] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1597.718017][T11709] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1597.718069][T11709] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1597.718094][T11709] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1598.122659][T11709] usb 2-1: usb_control_msg returned -32
[ 1598.122695][T11709] usbtmc 2-1:16.0: can't read capabilities
[ 1599.098505][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1599.098605][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1599.098672][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1599.098718][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1599.141974][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1599.142576][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1599.142758][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1599.146365][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1599.147012][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1599.169979][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1599.170207][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1599.170393][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1599.235377][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1599.235435][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1599.235482][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1599.235534][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1599.410335][  T988] usb 2-1: USB disconnect, device number 7
[ 1607.139731][T14736] input: syz0 as /devices/virtual/input/input47
[ 1608.004551][T14749] ptrace attach of "./syz-executor exec"[13444] was attempted by "./syz-executor exec"[14749]
[ 1611.651525][T11709] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[ 1611.813064][T11709] usb 5-1: Using ep0 maxpacket: 32
[ 1611.815239][T11709] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40
[ 1611.815274][T11709] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1611.873676][T11709] usb 5-1: config 0 descriptor??
[ 1613.501075][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[ 1613.501150][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[ 1613.578567][T11709] dvb-usb: found a 'Elgato EyeTV DTT' in warm state.
[ 1613.630246][T11709] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1613.660034][T11709] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT)
[ 1613.660110][T11709] usb 5-1: media controller created
[ 1613.776698][T11709] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1614.321714][T11709] DVB: Unable to find symbol dib7000p_attach()
[ 1614.321732][T11709] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT'
[ 1614.791449][T11709] rc_core: IR keymap rc-dib0700-rc5 not found
[ 1614.791473][T11709] Registered IR keymap rc-empty
[ 1614.791883][T11709] dvb-usb: could not initialize remote control.
[ 1614.791895][T11709] dvb-usb: Elgato EyeTV DTT successfully initialized and connected.
[ 1614.853527][T11709] usb 5-1: USB disconnect, device number 3
[ 1615.113520][T13490] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[ 1615.311356][T13490] usb 2-1: Using ep0 maxpacket: 32
[ 1615.315375][T13490] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40
[ 1615.315407][T13490] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1615.356295][T14804] input: syz0 as /devices/virtual/input/input49
[ 1615.377042][T13490] usb 2-1: config 0 descriptor??
[ 1615.526368][T11709] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected.
[ 1615.584250][T13490] dvb-usb: found a 'Elgato EyeTV DTT' in warm state.
[ 1615.661111][T13490] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1615.677162][T13490] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT)
[ 1615.677211][T13490] usb 2-1: media controller created
[ 1615.786575][T13490] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1616.267637][T13490] DVB: Unable to find symbol dib7000p_attach()
[ 1616.267651][T13490] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT'
[ 1616.451310][T13490] rc_core: IR keymap rc-dib0700-rc5 not found
[ 1616.451333][T13490] Registered IR keymap rc-empty
[ 1616.451547][T13490] dvb-usb: could not initialize remote control.
[ 1616.451554][T13490] dvb-usb: Elgato EyeTV DTT successfully initialized and connected.
[ 1616.451803][    C1] raw-gadget.0 gadget.1: ignoring, device is not running
[ 1616.563702][T13490] usb 2-1: USB disconnect, device number 8
[ 1616.720009][T13490] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected.
[ 1621.650189][ T7880] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0
[ 1622.102306][ T7880] hid-generic 0000:0000:0000.0012: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1622.901723][T14867] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1294'.
[ 1622.997246][T14868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1294'.
[ 1627.195471][T14903] loop2: detected capacity change from 0 to 7
[ 1627.199419][T14903] Dev loop2: unable to read RDB block 7
[ 1627.199468][T14903]  loop2: unable to read partition table
[ 1627.208533][T14903] loop2: partition table beyond EOD, truncated
[ 1627.208629][T14903] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1631.312652][T14919] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1303'.
[ 1632.399827][T14936] ptrace attach of "./syz-executor exec"[13444] was attempted by "./syz-executor exec"[14936]
[ 1633.161335][ T7880] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[ 1633.313065][ T7880] usb 9-1: Using ep0 maxpacket: 16
[ 1633.317411][ T7880] usb 9-1: config 0 has an invalid descriptor of length 42, skipping remainder of the config
[ 1633.317451][ T7880] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1633.317472][ T7880] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1633.317488][ T7880] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1633.317602][ T7880] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1633.319527][ T7880] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1633.319558][ T7880] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1633.319580][ T7880] usb 9-1: Manufacturer: syz
[ 1633.328842][ T7880] usb 9-1: config 0 descriptor??
[ 1634.042540][ T7880] rc_core: IR keymap rc-hauppauge not found
[ 1634.043694][ T7880] Registered IR keymap rc-empty
[ 1634.048909][ T7880] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1634.064437][ T7880] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1634.082839][ T7880] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0
[ 1634.084991][ T7880] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input53
[ 1634.119980][ T7880] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1634.141681][ T7880] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1634.173009][ T7880] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1634.191724][ T7880] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1634.217289][ T7880] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1634.231517][ T7880] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1634.253681][ T7880] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1634.271739][ T7880] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1634.292219][ T7880] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1634.312312][ T7880] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1634.367765][ T7880] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1634.367786][ T7880] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1634.451080][ T7880] usb 9-1: USB disconnect, device number 5
[ 1639.564391][T14988] ptrace attach of "./syz-executor exec"[13530] was attempted by "./syz-executor exec"[14988]
[ 1643.399678][ T9979] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[ 1643.921411][ T9979] usb 9-1: Using ep0 maxpacket: 8
[ 1643.934161][ T9979] usb 9-1: config 179 has an invalid interface number: 65 but max is 0
[ 1643.934242][ T9979] usb 9-1: config 179 has no interface number 0
[ 1643.934364][ T9979] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[ 1643.934454][ T9979] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[ 1643.934537][ T9979] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9
[ 1643.934596][ T9979] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024
[ 1643.934675][ T9979] usb 9-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 1643.934782][ T9979] usb 9-1: config 179 interface 65 has no altsetting 0
[ 1643.934864][ T9979] usb 9-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[ 1643.934926][ T9979] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1644.367843][ T9979] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:179.65/input/input54
[ 1644.489221][ T5146] input input54: unable to receive magic message: -71
[ 1644.536783][    C0] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -1
[ 1644.678437][ T5146] input input54: unable to receive magic message: -71
[ 1644.874087][    C0] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -1
[ 1645.182917][ T5146] input input54: unable to receive magic message: -71
[ 1645.452405][ T5146] input input54: unable to receive magic message: -71
[ 1645.709767][T14623] input input54: unable to receive magic message: -71
[ 1645.899078][    C0] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[ 1645.901354][ T9979] usb 9-1: USB disconnect, device number 6
[ 1647.061346][ T9979] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[ 1647.432193][ T9979] usb 9-1: Using ep0 maxpacket: 16
[ 1647.461866][ T9979] usb 9-1: config 0 has an invalid descriptor of length 222, skipping remainder of the config
[ 1647.462106][ T9979] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1647.462140][ T9979] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1647.462204][ T9979] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1647.462257][ T9979] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1647.475722][ T9979] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1647.475812][ T9979] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1647.475863][ T9979] usb 9-1: Manufacturer: syz
[ 1648.251019][ T9979] usb 9-1: config 0 descriptor??
[ 1648.741285][ T9979] rc_core: IR keymap rc-hauppauge not found
[ 1648.741308][ T9979] Registered IR keymap rc-empty
[ 1648.741482][ T9979] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1648.761475][ T9979] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1648.782994][ T9979] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0
[ 1648.786331][ T9979] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input55
[ 1648.871642][ T9979] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1648.901409][ T9979] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1648.922282][ T9979] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1648.941530][ T9979] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1648.961409][ T9979] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1648.991343][ T9979] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1649.022605][ T9979] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1649.041371][ T9979] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1649.061494][ T9979] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1649.091336][ T9979] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1649.132724][ T9979] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1649.132750][ T9979] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1649.176495][ T9979] usb 9-1: USB disconnect, device number 7
[ 1650.456491][T15078] loop2: detected capacity change from 0 to 7
[ 1650.468170][T15078] Dev loop2: unable to read RDB block 7
[ 1650.468298][T15078]  loop2: unable to read partition table
[ 1650.468898][T15078] loop2: partition table beyond EOD, truncated
[ 1650.468958][T15078] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1651.712018][T13490] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[ 1651.861327][T13490] usb 10-1: Using ep0 maxpacket: 16
[ 1651.863418][T13490] usb 10-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1651.863454][T13490] usb 10-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1651.863481][T13490] usb 10-1: config 0 interface 0 has no altsetting 0
[ 1651.863507][T13490] usb 10-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[ 1651.863525][T13490] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1651.867578][T13490] usb 10-1: config 0 descriptor??
[ 1652.327474][T13490] nzxt-smart2 0003:1E71:2009.0013: unknown main item tag 0x0
[ 1652.327500][T13490] nzxt-smart2 0003:1E71:2009.0013: unknown main item tag 0x0
[ 1652.327518][T13490] nzxt-smart2 0003:1E71:2009.0013: unknown main item tag 0x0
[ 1652.327536][T13490] nzxt-smart2 0003:1E71:2009.0013: unknown main item tag 0x0
[ 1652.327572][T13490] nzxt-smart2 0003:1E71:2009.0013: unknown main item tag 0x0
[ 1652.356084][T13490] nzxt-smart2 0003:1E71:2009.0013: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.9-1/input0
[ 1654.441496][T15128] loop2: detected capacity change from 0 to 7
[ 1654.464090][T15128] Dev loop2: unable to read RDB block 7
[ 1654.464136][T15128]  loop2: unable to read partition table
[ 1654.464358][T15128] loop2: partition table beyond EOD, truncated
[ 1654.464379][T15128] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1654.573034][ T9979] usb 10-1: USB disconnect, device number 4
[ 1655.439132][T15138] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1344'.
[ 1656.019748][T15138] hsr_slave_1 (unregistering): left promiscuous mode
[ 1662.031328][ T9979] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[ 1662.366452][ T9979] usb 2-1: Using ep0 maxpacket: 16
[ 1662.368805][ T9979] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1662.368839][ T9979] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1662.368863][ T9979] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1662.368897][ T9979] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[ 1662.368939][ T9979] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1662.628034][ T9979] usb 2-1: config 0 descriptor??
[ 1663.175619][ T9979] nzxt-smart2 0003:1E71:2009.0014: unknown main item tag 0x0
[ 1663.175664][ T9979] nzxt-smart2 0003:1E71:2009.0014: unknown main item tag 0x0
[ 1663.175693][ T9979] nzxt-smart2 0003:1E71:2009.0014: unknown main item tag 0x0
[ 1663.175721][ T9979] nzxt-smart2 0003:1E71:2009.0014: unknown main item tag 0x0
[ 1663.175748][ T9979] nzxt-smart2 0003:1E71:2009.0014: unknown main item tag 0x0
[ 1663.290322][ T9979] nzxt-smart2 0003:1E71:2009.0014: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0
[ 1663.530218][T15220] ptrace attach of "./syz-executor exec"[13444] was attempted by "./syz-executor exec"[15220]
[ 1663.981432][ T5805] usb 2-1: USB disconnect, device number 9
[ 1664.095196][T15221] fido_id[15221]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[ 1666.186123][ T9979] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[ 1666.331460][ T9979] usb 9-1: Using ep0 maxpacket: 16
[ 1666.337193][ T9979] usb 9-1: config 0 has an invalid descriptor of length 222, skipping remainder of the config
[ 1666.337269][ T9979] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1666.337301][ T9979] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1666.337324][ T9979] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1666.337350][ T9979] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1666.358415][ T9979] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1666.358449][ T9979] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1666.358472][ T9979] usb 9-1: Manufacturer: syz
[ 1666.488813][ T9979] usb 9-1: config 0 descriptor??
[ 1666.811314][ T5805] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[ 1666.903232][ T9979] rc_core: IR keymap rc-hauppauge not found
[ 1666.903253][ T9979] Registered IR keymap rc-empty
[ 1666.903408][ T9979] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1666.941346][ T9979] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1666.973818][ T9979] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0
[ 1666.995221][ T9979] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input56
[ 1667.018797][ T9979] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1667.031893][ T9979] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1667.061876][ T9979] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1667.062056][ T5805] usb 2-1: Using ep0 maxpacket: 16
[ 1667.064406][ T5805] usb 2-1: config 0 has an invalid descriptor of length 222, skipping remainder of the config
[ 1667.064461][ T5805] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1667.064554][ T5805] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1667.064599][ T5805] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1667.064625][ T5805] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1667.066680][ T5805] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1667.066754][ T5805] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1667.066771][ T5805] usb 2-1: Manufacturer: syz
[ 1667.101371][ T9979] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1667.121356][ T9979] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1667.141644][ T9979] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1667.161349][ T9979] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1667.181426][ T9979] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1667.201320][ T9979] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1667.221399][ T9979] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1667.315956][ T5805] usb 2-1: config 0 descriptor??
[ 1667.331902][ T9979] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1667.331921][ T9979] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1667.376675][ T9979] usb 9-1: USB disconnect, device number 8
[ 1667.564531][ T7880] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0
[ 1667.600834][ T7880] hid-generic 0000:0000:0000.0015: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1667.662318][ T5805] rc_core: IR keymap rc-hauppauge not found
[ 1667.662341][ T5805] Registered IR keymap rc-empty
[ 1667.662502][ T5805] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1667.690273][ T5805] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1667.741477][ T5805] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1
[ 1667.785029][ T5805] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1/input57
[ 1667.839926][ T5805] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1667.862169][ T5805] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1667.891521][ T5805] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1667.911540][ T5805] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1667.931476][ T5805] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1667.961380][ T5805] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1667.981423][ T5805] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1668.011361][ T5805] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1668.041529][ T5805] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1668.061406][ T5805] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1668.089112][ T5805] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1668.089142][ T5805] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1668.121765][ T5805] usb 2-1: USB disconnect, device number 10
[ 1668.349031][T15275] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1367'.
[ 1668.621412][    T9] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[ 1668.711689][ T9979] usb 5-1: new low-speed USB device number 4 using dummy_hcd
[ 1668.783221][    T9] usb 9-1: Using ep0 maxpacket: 32
[ 1668.785679][    T9] usb 9-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40
[ 1668.785712][    T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1668.832455][    T9] usb 9-1: config 0 descriptor??
[ 1668.874401][ T9979] usb 5-1: config index 0 descriptor too short (expected 6427, got 27)
[ 1668.874436][ T9979] usb 5-1: config 0 has an invalid interface number: 21 but max is 0
[ 1668.874517][ T9979] usb 5-1: config 0 has no interface number 0
[ 1668.874568][ T9979] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt
[ 1668.874611][ T9979] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[ 1668.874884][ T9979] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1668.940849][ T9979] usb 5-1: config 0 descriptor??
[ 1668.955850][T15275] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[ 1670.272778][    T9] dvb-usb: found a 'Elgato EyeTV DTT' in warm state.
[ 1670.302652][    T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1670.310379][    T9] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT)
[ 1670.310456][    T9] usb 9-1: media controller created
[ 1670.377957][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1670.496208][ T9979] usb 5-1: USB disconnect, device number 4
[ 1670.817321][    T9] DVB: Unable to find symbol dib7000p_attach()
[ 1670.817333][    T9] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT'
[ 1671.081279][    T9] rc_core: IR keymap rc-dib0700-rc5 not found
[ 1671.081303][    T9] Registered IR keymap rc-empty
[ 1671.081608][    T9] dvb-usb: could not initialize remote control.
[ 1671.081620][    T9] dvb-usb: Elgato EyeTV DTT successfully initialized and connected.
[ 1671.113334][    T9] usb 9-1: USB disconnect, device number 9
[ 1671.285378][T15305] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1373'.
[ 1671.403213][    T9] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected.
[ 1672.151007][T15323] ptrace attach of "./syz-executor exec"[12983] was attempted by "./syz-executor exec"[15323]
[ 1674.245284][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[ 1674.245357][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[ 1676.295465][T15363] ptrace attach of "./syz-executor exec"[13337] was attempted by "./syz-executor exec"[15363]
[ 1676.786211][T15377] ptrace attach of "./syz-executor exec"[13530] was attempted by "./syz-executor exec"[15377]
[ 1677.321801][T15376] 8021q: adding VLAN 0 to HW filter on device macvlan2
[ 1678.801474][ T7879] usb 5-1: new low-speed USB device number 5 using dummy_hcd
[ 1678.954370][ T7879] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[ 1678.954401][ T7879] usb 5-1: config 0 has no interface number 0
[ 1678.954457][ T7879] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1678.954478][ T7879] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[ 1678.954508][ T7879] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1678.954524][ T7879] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1679.020464][ T7879] usb 5-1: config 0 descriptor??
[ 1679.044628][T15394] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1679.104119][ T7879] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[ 1679.324337][   T10] usb 5-1: USB disconnect, device number 5
[ 1679.324439][    C0] iowarrior 5-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19
[ 1682.202957][   T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[ 1682.355595][    T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[ 1682.401337][   T10] usb 2-1: Using ep0 maxpacket: 16
[ 1682.403281][   T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1682.403330][   T10] usb 2-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1682.403349][   T10] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1682.403371][   T10] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[ 1682.403387][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1682.407292][   T10] usb 2-1: config 0 descriptor??
[ 1682.481344][   T10] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[ 1682.521295][    T9] usb 5-1: Using ep0 maxpacket: 8
[ 1682.527284][    T9] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[ 1682.527306][    T9] usb 5-1: config 179 has no interface number 0
[ 1682.527338][    T9] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[ 1682.527357][    T9] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[ 1682.527379][    T9] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9
[ 1682.527397][    T9] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024
[ 1682.527417][    T9] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 1682.527437][    T9] usb 5-1: config 179 interface 65 has no altsetting 0
[ 1682.527460][    T9] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[ 1682.527477][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1682.740820][    T9] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input60
[ 1682.889808][ T5146] input input60: unable to receive magic message: -110
[ 1682.972638][ T5146] input input60: unable to receive magic message: -32
[ 1683.774125][    C0] raw-gadget.1 gadget.4: ignoring, device is not running
[ 1683.774455][ T5146] input input60: unable to receive magic message: -32
[ 1683.808844][ T7879] usb 5-1: USB disconnect, device number 6
[ 1683.808872][    C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[ 1683.808937][    C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[ 1684.767603][ T7879] usb 2-1: USB disconnect, device number 11
[ 1685.824072][T15474] 8021q: adding VLAN 0 to HW filter on device macvlan2
[ 1686.027848][T15479] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000007: 0000 [#1] SMP KASAN PTI
[ 1686.027878][T15479] KASAN: null-ptr-deref in range [0x0000000000000038-0x000000000000003f]
[ 1686.027915][T15479] CPU: 1 UID: 0 PID: 15479 Comm: syz.8.1407 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1686.027948][T15479] Tainted: [L]=SOFTLOCKUP
[ 1686.027957][T15479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1686.027973][T15479] RIP: 0010:ip_route_output_key_hash_rcu+0x12ba/0x25d0
[ 1686.028128][T15479] Code: c3 31 ff 89 c6 e8 36 07 4e f8 85 db 74 5b e8 7d 02 4e f8 eb 05 e8 76 02 4e f8 4d 85 ff 74 36 49 8d 5f 3a 48 89 d8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 ff 10 00 00 0f b7 1b bf ff ff 00 00 89
[ 1686.028146][T15479] RSP: 0018:ffffc900088cf6c0 EFLAGS: 00010202
[ 1686.028163][T15479] RAX: 0000000000000007 RBX: 0000000000000039 RCX: 0000000000080000
[ 1686.028176][T15479] RDX: ffffc9001a735000 RSI: 0000000000003089 RDI: 000000000000308a
[ 1686.028189][T15479] RBP: 0000000080000000 R08: 0000000000000000 R09: 0000000000000000
[ 1686.028203][T15479] R10: 0000000000000100 R11: 0000000000000005 R12: dffffc0000000000
[ 1686.028216][T15479] R13: 0000000000000000 R14: ffff888035c39e58 R15: ffffffffffffffff
[ 1686.028229][T15479] FS:  00007f81e81b46c0(0000) GS:ffff888126695000(0000) knlGS:0000000000000000
[ 1686.028245][T15479] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1686.028257][T15479] CR2: 0000000000000000 CR3: 0000000021b1a000 CR4: 00000000003526f0
[ 1686.028274][T15479] Call Trace:
[ 1686.028285][T15479]  <TASK>
[ 1686.028297][T15479]  ? ip_route_output_key_hash+0xd8/0x2a0
[ 1686.028322][T15479]  ip_route_output_key_hash+0x18d/0x2a0
[ 1686.028347][T15479]  ? __pfx_ip_route_output_key_hash+0x10/0x10
[ 1686.028373][T15479]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[ 1686.028464][T15479]  ? reacquire_held_locks+0x104/0x190
[ 1686.028534][T15479]  ? rt_spin_lock+0x1e0/0x400
[ 1686.028555][T15479]  ip_route_output_flow+0x2a/0x150
[ 1686.028578][T15479]  sctp_v4_get_dst+0x3f8/0x12b0
[ 1686.028643][T15479]  ? rt_spin_unlock+0x160/0x200
[ 1686.028662][T15479]  ? crng_make_state+0x318/0x5d0
[ 1686.028729][T15479]  ? __pfx_sctp_v4_get_dst+0x10/0x10
[ 1686.028750][T15479]  ? _get_random_bytes+0x1e7/0x260
[ 1686.028783][T15479]  ? dst_release+0x72/0x1b0
[ 1686.028852][T15479]  sctp_transport_route+0x118/0x2f0
[ 1686.028897][T15479]  sctp_assoc_add_peer+0x650/0x13b0
[ 1686.028929][T15479]  sctp_connect_new_asoc+0x329/0x6b0
[ 1686.028975][T15479]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[ 1686.029003][T15479]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1686.029027][T15479]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1686.029088][T15479]  ? sctp_endpoint_lookup_assoc+0xd1/0x260
[ 1686.029115][T15479]  __sctp_connect+0x5cb/0xdc0
[ 1686.029143][T15479]  ? __local_bh_enable+0x1e1/0x2f0
[ 1686.029176][T15479]  ? __pfx___sctp_connect+0x10/0x10
[ 1686.029201][T15479]  ? __local_bh_enable_ip+0x1ae/0x2b0
[ 1686.029224][T15479]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1686.029249][T15479]  sctp_inet_connect+0x12e/0x210
[ 1686.029272][T15479]  __sys_connect+0x315/0x450
[ 1686.029325][T15479]  ? __pfx___sys_connect+0x10/0x10
[ 1686.029355][T15479]  ? rcu_is_watching+0x15/0xb0
[ 1686.029392][T15479]  __x64_sys_connect+0x7a/0x90
[ 1686.029419][T15479]  do_syscall_64+0x14d/0xf80
[ 1686.029461][T15479]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1686.029501][T15479]  ? trace_irq_disable+0x37/0x100
[ 1686.029538][T15479]  ? clear_bhb_loop+0x40/0x90
[ 1686.029559][T15479]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1686.029577][T15479] RIP: 0033:0x7f81e9f9c629
[ 1686.029599][T15479] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1686.029615][T15479] RSP: 002b:00007f81e81b4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[ 1686.029635][T15479] RAX: ffffffffffffffda RBX: 00007f81ea216180 RCX: 00007f81e9f9c629
[ 1686.029649][T15479] RDX: 0000000000000010 RSI: 0000200000000580 RDI: 000000000000000a
[ 1686.029662][T15479] RBP: 00007f81ea032b39 R08: 0000000000000000 R09: 0000000000000000
[ 1686.029674][T15479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1686.029685][T15479] R13: 00007f81ea216218 R14: 00007f81ea216180 R15: 00007ffc05c00df8
[ 1686.029707][T15479]  </TASK>
[ 1686.029718][T15479] Modules linked in:
[ 1686.029743][T15479] ---[ end trace 0000000000000000 ]---
[ 1686.029757][T15479] RIP: 0010:ip_route_output_key_hash_rcu+0x12ba/0x25d0
[ 1686.029798][T15479] Code: c3 31 ff 89 c6 e8 36 07 4e f8 85 db 74 5b e8 7d 02 4e f8 eb 05 e8 76 02 4e f8 4d 85 ff 74 36 49 8d 5f 3a 48 89 d8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 ff 10 00 00 0f b7 1b bf ff ff 00 00 89
[ 1686.029819][T15479] RSP: 0018:ffffc900088cf6c0 EFLAGS: 00010202
[ 1686.029839][T15479] RAX: 0000000000000007 RBX: 0000000000000039 RCX: 0000000000080000
[ 1686.029856][T15479] RDX: ffffc9001a735000 RSI: 0000000000003089 RDI: 000000000000308a
[ 1686.029873][T15479] RBP: 0000000080000000 R08: 0000000000000000 R09: 0000000000000000
[ 1686.029889][T15479] R10: 0000000000000100 R11: 0000000000000005 R12: dffffc0000000000
[ 1686.029905][T15479] R13: 0000000000000000 R14: ffff888035c39e58 R15: ffffffffffffffff
[ 1686.029923][T15479] FS:  00007f81e81b46c0(0000) GS:ffff888126695000(0000) knlGS:0000000000000000
[ 1686.029944][T15479] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1686.029962][T15479] CR2: 0000000000000000 CR3: 0000000021b1a000 CR4: 00000000003526f0
[ 1686.029988][T15479] Kernel panic - not syncing: Fatal exception
[ 1686.030574][T15479] Kernel Offset: disabled