last executing test programs:

17m21.629702797s ago: executing program 32 (id=61):
syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000000)='./file0\x00', 0x40, &(0x7f00000000c0)=ANY=[], 0x4, 0xf82, &(0x7f0000003080)="$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")
r0 = fanotify_init(0x200, 0x0)
socket(0x10, 0x3, 0x0)
mkdir(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8)
socket$nl_netfilter(0x10, 0x3, 0xc)
mknodat$loop(0xffffffffffffffff, 0x0, 0x0, 0x0)
linkat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0xffffffffffffffff, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0)
fanotify_mark(r0, 0x101, 0x48001051, r2, 0x0)
open(0x0, 0x14927e, 0x20)

17m5.485609609s ago: executing program 33 (id=87):
mprotect(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x4)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x90c000}, 0xc, 0x0}, 0x8000)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, 0x0, 0x5000)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet_sctp(0x2, 0x800000000000001, 0x84)
r3 = syz_open_dev$video(&(0x7f0000000000), 0xc001, 0x0)
ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000040)={0xa, @pix_mp={0x6, 0x10, 0x105d42d292027348, 0x0, 0x9, [{0x6, 0x5}, {0x4, 0x5}, {0xf1d, 0x8}, {0x0, 0x100}, {0x1, 0x6}, {0x80, 0x8a}, {0x7}, {0x7f, 0x7}], 0xf9, 0x2, 0x4, 0x0, 0x7}})

14m59.237942541s ago: executing program 34 (id=383):
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20)
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x6, 0x4000000007}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x68}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@gettaction={0xf0, 0x32, 0xe72c5f922f23cad9, 0x70bd2a, 0x25dfdbf7}, 0xf0}, 0x1, 0x0, 0x0, 0x8080}, 0x10000084)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0)

14m53.057038015s ago: executing program 35 (id=437):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x169780, 0x0)
preadv(r0, &(0x7f0000000280)=[{&(0x7f0000033a80)=""/102380, 0x18fec}, {&(0x7f00000003c0)=""/206, 0xce}], 0x2, 0x6, 0x4)
io_setup(0x3, &(0x7f0000000040))
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r1, &(0x7f000004ca80)=""/102392, 0x18ff8)
sendmsg(0xffffffffffffffff, 0x0, 0x844)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
r2 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f)
write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x1, 0x89, 0xd615, 0x9, 0x7fffffff, 0x9, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0)
sendfile(r2, r2, &(0x7f0000000080), 0x7f03)

13m58.973428826s ago: executing program 36 (id=516):
signalfd(0xffffffffffffffff, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
syz_usb_connect(0x0, 0x3f, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
read$msr(r0, &(0x7f0000000a00)=""/102400, 0x19000)
getrlimit(0x5, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001ac0)={0x5c, r2, 0x5, 0x0, 0xfffffffe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @device_b}, 0x0, @random=0x6, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x5c}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00'}, 0x94)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x25dfdbfd, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r4}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0)

13m31.39797564s ago: executing program 37 (id=565):
openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x18b00, 0x0)
syz_open_dev$video(0x0, 0x485, 0x40000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x4, 0xe4}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x402, 0x0)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8)
socket$netlink(0x10, 0x3, 0x0)
syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2d, &(0x7f0000000240)=0xfff, 0x4)
openat$kvm(0xffffff9c, 0x0, 0x800, 0x0)
munlockall()
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
creat(&(0x7f00000004c0)='./file0\x00', 0x144)
close(0x3)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200))
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4)

10m27.347198472s ago: executing program 38 (id=879):
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x37)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
syz_io_uring_setup(0x108d, &(0x7f0000000100)={0x0, 0x15f8, 0x1, 0x2, 0xbc}, &(0x7f0000000000), 0x0, &(0x7f0000000000))
ioctl$KVM_TRANSLATE(r2, 0xc018ae85, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mount$binder(0x0, 0x0, 0x0, 0x80000, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, &(0x7f0000000300))
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x42}, 0x28)
timer_create(0x0, 0x0, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000340)='/dev/comedi4\x00', 0x4000, 0x0)
ioctl$COMEDI_CANCEL(r4, 0x6407)
r5 = socket(0x10, 0x3, 0x0)
write(r5, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14)
recvmmsg(r5, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0)

10m17.820919753s ago: executing program 39 (id=895):
socket$igmp6(0xa, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000f00)={0x0, 0x2, 0x2, 0x1, 0x0, [@mcast2]}, 0x18)
read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x20000000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r3}, 0xc)
sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x8000)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000041)
unshare(0x6a040000)

8m42.300983203s ago: executing program 40 (id=1051):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000580)={&(0x7f0000000080), 0x0, 0x0, 0x0})
close_range(0xffffffffffffffff, r1, 0x0)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=ANY=[@ANYBLOB="200000000514210626bd7000000000"], 0x20}}, 0x0)

8m11.499700023s ago: executing program 41 (id=1080):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x4bf, &(0x7f0000000540)="$eJzs3c9vG1kdAPDvTJImm81usrASPwRsWRYKqtZO3N1otaflAkKrlRArThzakLhRFDuOYqc0oYf0f0CiEif4EzggcUDqiTs3uCGkckAqUIEaJA5GM56kaWqnEU08Vfz5SE8zb57t73tt573pt41fACPrckTsRcSliLgREbPF9aQo8VGvZK97/OjO8v6jO8tJdLuf/iPJ27NrceQ9mVeLz5yKiB98N+LHybNx2zu760uNRn2rqFc7zc1qe2f3L2vNpdX6an2jVltcWJz/4Nr7tTMb61vNXz/8ztrHP/zdb7/84A973/pp1q2Zou3oOM5Sb+gTh3Ey4xHx8XkEK8FYMZ5LZXeE/0saEZ+JiLez+79bdm8AgGHodmejO3u0DgBcdGmeA0vSSpELmIk0rVR6Obw3YzpttNqdqzdb2xsrvVzZXEykN9ca9fkiVzgXE0lWX8jPn9Rrx+rXIuKNiPjZ5Ct5vbLcaqyU+eADACPs1WPr/78ne+s/AHDBTZXdAQBg6Kz/ADB6rP8AMHqs/wAweqz/ADB6rP8AMHqs/wAwUr7/ySdZ6e4X33+9cmtne711692Venu90txeriy3tjYrq63Wav6dPc3nfV6j1dpceC+2b1c79Xan2t7Zvd5sbW90ruff6329PjGUUQEAJ3njrft/SiJi78NX8hJH9nKwVsPFlpbdAaA0Y2V3ACjNeNkdAErj7/hAny16nzLwvwjdG/gWUwu85K58Qf4fRpX8P4wu+X8YXfL/MLq63cSe/wAwYuT4gXP4938AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC48GbykqSVYi/wmUjTSiXitYiYi4nk5lqjPh8Rr0fEHycnJrP6QtmdBgBeUPq3pNj/68rsOzPHWy8l/5nMjxHxk198+vPbS53O1kJ2/Z+H1zv3iuu1EwPZahAASnKwTh+s4wceP7qzfFCG2Z+H3+5tLprF3S9Kr2U8xvPjVP7gMP2vpKj3ZM8rY2cQf+9uRHy+3/iTPDcyV+x8ejx+Fvu1ocZPn4qf5m29Y/Zr8dkz6AuMmvvZ/PNRv/svjcv5sf/9P5XPUC/uYP7bf2b+Sw/nv7EB89/l08Z47/ffG9h2N+KL4/3iJ4fxkwHx3zll/D9/6StvD2rr/jLiSvSPfzRWtdPcrLZ3dt9day6t1lfrG7Xa4sLi/AfX3q9V8xx19SBT/ay/f3j19ZPGPz0g/tRzxv/1U47/V/+98aOvnhD/m1/r//v/5gnxszXxG6eMvzT9m4Hbd2fxV/qPv3jP4PFfPWX8B3/dXTnlSwGAIWjv7K4vNRr1LSdDO8me3V6Cbjgp7ST7E3AWn/O5c+xq2TMTcN6e3PRl9wQAAAAAAAAAAAAAABhkGD/wVPYYAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuLj+FwAA//+vctdr")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="020000"], 0x1c, 0x1)

8m3.176442698s ago: executing program 42 (id=1093):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff})
connect$unix(r3, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000140)=0x8, 0x4)
connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r5, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00)

7m7.522159583s ago: executing program 43 (id=1138):
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x0, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = syz_genetlink_get_family_id$nl80211(0x0, r1)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x4004000}, 0x40010)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)

6m56.950960536s ago: executing program 44 (id=1104):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_normal', 0x1d3402, 0x85)
write$cgroup_subtree(r0, 0x0, 0x43)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x60044084)
write(0xffffffffffffffff, &(0x7f0000000340), 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000100), 0x1, 0x101000)
ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f00000001c0)={0x3, 0x2, &(0x7f0000000140)="e4c0"})

6m18.398088782s ago: executing program 7 (id=1215):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r0, &(0x7f0000000440)='X', 0x1, 0x4004041, &(0x7f00000001c0)={0xa, 0x0, 0x76f6, @private0={0xfc, 0x0, '\x00', 0xfc}, 0x8000}, 0x1c)
shutdown(r0, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0)
r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r1, 0xc0d05604, &(0x7f0000000100)={0x8, @raw_data="729d2be8a81dbe044e4d3132923b8d7f4af476784874aacc0d873bae6a0813223ca4ca16900de311ef48fa4a4abbd801a17df1f3aaf7f2be36dfab20ed9865bb3cc1bc55c958d2fd09ed111d7d4bb94d2dc0c8564e1e4b9c2f1cc0be482a98d750ced0f31ce1b4538f966f2de957cf766280d4081cc5f9c937e2a7385264256009d9f5a15406154b01b523b6f49471f852500c5e813b5c8cf677183277465e9e776554b01eb4ccd3cecde58da08b564ea9c6d4fd86e0463bae754c0589045f733416c2481bbf919e"})
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0)

6m17.68504925s ago: executing program 7 (id=1216):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x1, 0x0, 0xfffffc}]}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f00000000c0)=ANY=[], 0x0)

6m16.856284096s ago: executing program 7 (id=1218):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, &(0x7f0000000440)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c6e66732c73686f72746e616d653d77696e6e742c726f6469722c696f636861727365743d6b6f69382d72752c73686f72746e616d653d6d697865642c757466383d302c756e695f786c6174653d312c756e695f786c6174653d312c006a4fcfcc9fc5ea902e1a6384d405e843e1dfa18259eaaba553a63617a0f84f2e66f4a8121e2cea67640f61a98cef24cdbc0121ddb0212c7365c895e70775f8c82357782f45acff678373e50747f0dbd34a6c51a45f248402fd4340c0024ca0ee5de3af9233d9e31dd6f105e2696137379613fb63ef2a91ccf785af00684cfa440b01bda2cbcd1b326a0ee91991ebfbd00ec2a75ac8d59d1e7793dfb73a16dd3b166bc6a158528f"], 0x1, 0x26c, &(0x7f0000000840)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x2b4602, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f000000a940)='freezer.parent_freezing\x00', 0x275a, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', r0, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001000)='blkio.bfq.idle_time\x00', 0x275a, 0x0)

6m15.824181356s ago: executing program 7 (id=1221):
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000300), 0x602, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18000000, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0)

6m14.847673955s ago: executing program 0 (id=1222):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x101300, 0x132)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x1060, 0x0, 0x0, 0x20000})

6m14.517816741s ago: executing program 7 (id=1223):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4000}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x20000000)

6m13.98108155s ago: executing program 0 (id=1224):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=')&:\x00')
pipe2$9p(&(0x7f00000003c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RREADLINK(r1, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xffffffffffffffff, 0x0, 0x0, 0x1000001000, 0x46}, 0x0, &(0x7f0000000000)={0x3ff, 0x7, 0x0, 0x9, 0x0, 0xf, 0x80000002}, 0x0, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x4, 0x2, 0x0, 0x4, 0x0, 0xfffd}, 0x20)
close(0x3)

6m13.688770633s ago: executing program 7 (id=1225):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000140)=0x8, 0x4)
connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00)

6m11.979099554s ago: executing program 0 (id=1228):
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x374}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0, &(0x7f0000000180)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x4004, @fd_index=0x4, 0x718a, 0x0, 0x0, 0x12, 0x1, {0x2}})
io_uring_enter(r0, 0x742f, 0x77ae, 0x1, 0x0, 0x0)

6m10.310341254s ago: executing program 45 (id=1209):
io_uring_setup(0x669, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0x94, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x80, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x5a, 0x2, 0x0, 0x0}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x94}}, 0x0)

6m10.255508783s ago: executing program 0 (id=1230):
syz_open_dev$vim2m(&(0x7f00000001c0), 0x2ffe, 0x2)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x4b, 0x89}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
prlimit64(0x0, 0xe, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@private1, 0x800, 0x0, 0x1, 0x9, 0xfffe}, 0x20)
sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000130a010100000000"], 0x20}, 0x1, 0x0, 0x0, 0xc085}, 0x40000c0)

6m7.87712309s ago: executing program 0 (id=1234):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/key-users\x00', 0x0, 0x0)
r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x0, 0x4})
ioctl$DVB_DEMUX_DMX_ADD_PID(r4, 0x40026f33, &(0x7f0000000100)=0x808c)
r5 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r5, 0x0, 0x0)
sendmsg$rds(r5, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0}, 0x0)
syz_io_uring_setup(0x2, &(0x7f0000000180)={0x0, 0x289b, 0x10000, 0x1, 0x323}, &(0x7f0000000000), &(0x7f00000003c0), &(0x7f0000000000))
prctl$PR_MCE_KILL(0x4e, 0x1, 0x20000)
close_range(r0, 0xffffffffffffffff, 0x0)

6m2.920218245s ago: executing program 0 (id=1238):
syz_open_dev$vim2m(&(0x7f0000002c80), 0x0, 0x2)
socket$kcm(0xa, 0x2, 0x73)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xffffeffffffffffe)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014)
recvmmsg(r1, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x2, 0x0)

5m58.33498276s ago: executing program 46 (id=1225):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000140)=0x8, 0x4)
connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00)

5m47.487259141s ago: executing program 47 (id=1238):
syz_open_dev$vim2m(&(0x7f0000002c80), 0x0, 0x2)
socket$kcm(0xa, 0x2, 0x73)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xffffeffffffffffe)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014)
recvmmsg(r1, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x2, 0x0)

5m31.912429179s ago: executing program 1 (id=1278):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1a, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e76, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x880}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x10000001)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
truncate(&(0x7f0000000440)='./file0\x00', 0x7)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2981)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xd0}}, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600, 0x0, 0x2000]}}], 0xffc8)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, 0x0, 0x84)

5m22.24038218s ago: executing program 1 (id=1283):
syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f0000000040)='./file2\x00', 0x3200400, &(0x7f0000000180)=ANY=[], 0x1, 0xa7f, &(0x7f0000000b40)="$eJzs3U2MG1cBAOA33vUmmwTilIQuSWgTftry091ms4SfCJqquRA1FbdKEZcoTUtEGhCpBK0qkeTEjVZVuPIjTuVQAUJqLyjqiUslGolLxaFw4EAUpEocoJC4yvo9r/3W1tib9dpef5/0/PbNG897Mzsej2fmvReAiVVZfl1amitCuPrmq8f/+cA/Zu9MebQ5R235dbolVQ0hFDE9nS3vvalGfOv9l850iouwuPya0uHJm833bg8hXAoHwrVQC3uvXn/l7cUnTl4+ceXgO68dvTGYtQcAgMnyrWtHl/b87c/7dn3w+n3Hwpbm9HR+XovpHfG8/1g88U/n/5XQni5aQquZbL7pGCrZfFMd5mstp5rNN92l/JlsudVm/r62+baUlD/VMq3TesM4S/txLRSV+bZ0pTI/3/hNHpZ/188U8xfOnX/m4pAqCqy7f98fQjgwwBAGvPwhhXq9/uPNum6rw4368OsgDCLUdw718APQlN8vXOVSfmXh7jSXNt1b+Tcfq3R+P6yDjd7/lT9e5f/6ciz/1F8HWg8mw2b9/krrlT5HO2I6v4+QP7/U7+c/LW8qvkxnyy/T7T7CuNxf6FbPqQ2ux1p1q3++X2xWX49x2g7fyPJbPz/5/3Rc/sdAZ/8Z9PX/EQsHRqAOmzpUR6AOQs+hPuwDEDCyVp6ba6hHKT9/ri/P31KSv7Ukf7Ykf1tJ/vaSfJhkv3/+p+HlYuV3fv6bvt/rYek620di/NE+65Nfj+y3/Py5337dbfn588Qwyt44/dTZrzx96nrj+f+iuf/fjvv7gZiuxc/WtThDul6YX1dvPvtfay+n0mW+e7L6pONGZUuav94ocXf7fMXuleWEluPMqnrMtb9vZ7f59rfPV8vmm41ha1bf/PxkW/a+dP6Rjqtpe01n61vN1mMmq0c6ruyKcV4PWIu0P3Z7/j/tn3OhWjxz7vzZR2I67ad/mqpuuTP9UOtCf7MxdQfuTq/tf+ZCe/ufHc3p1UrrcWHnyvSi9bhQy6YvNpLN2+Rp+uGYTt9z35maXZ4+f+Z7559e75WHCXfxhRe/e/r8+bM/8Ef6Y9Zm8Yc/hn1kAgZt4fnnvr9w8YUXHz733Olnzz579sLhI0cOLy4e+erhpYXl8/qF1rN7YDNZ+dIfdk0AAAAAAAAAAACAXv3wxPHrf3nry+822v+vtP9L7f/Tk7+p/f9Psvb/eTv51A4+tQPc1SF/edy9N9rrMZPNV43hY1l9d2fl7Mne9/EYN8fxi+3/U3v7vF/XVJ97s+l5/71pvqw7gVX9pcxkfZDk4wV+KsZXYvyrAENUzHaeHOO2/q3D6v6t076e+qfQL8V4Sv+3tDekfkxS++9u/Tql4/+uDagj628jmhMOex2Bzv418v1/t5yJD70uExBs54kK9bpRPIDRMOzxP9N1zxRf+OM3t94Jababj7UfL/P+S+FujPr4k8ofhfE/i3WrRHP8u56Ofx16V2/r57n30RX++/Mb77YUG/b2evy9nK166gd6d3mZrT6I5af1fzD0Vn79l1n5+Q2hHv0vK39bj+WvWv/9ayv//7H8tNke+nSv5TdqnO+B+XXjdP8vv26c3MrWP/Xt2ff6r3GgxtuxfJhk3ceZ7XUE29E0lPF/O9wfXav8OYwvxXQ6EKbnHPJv5H7rn56vSN8De7LlFyXfb+MyTnE3kz7+79diXPZ5SOP/pv2x1iFdaUlXO2zbcd9XYLN5b+Tv/41ZuDQCdRBGNMz2M3/jkboB16lerw/2glaJoRbO0Lf/sO8+D7v8YW//Mvn4v/k5fD7+byX7AZGP/5u/Px//N8/Px9fL8/Pxf/PtmY//m+ffmy03v4I9V5L/iZL8vSX5+1byZzvl7y95/ydL8g+GeE7SJf++kvffX5J/T0n+VEn+Z0ryP1uS/0BJ/kMl+Z8ryd/sUnuUSV1/mGR5+zyff5gc6f5Pt8//7pJ8YHz97PVDj5/63bdrjfb/M83fa+k+3rGYrsbfzj+K6fy+d2hJ38l7K6b/nuWP+vUOmCR5/xn59/uDJfnA+ErPefl8wwQqOvfY02u/Vd3O8xkvn4/xF2L8xRg/HOP5GC/E+FCMFzeofgzG47/9w9GXi5Xf+zuz/F6fJy8q7b/s836iDvdYn/z6QL/Ps+f9+PXrbstfY3MwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAoaksvy4tzRUhXH3z1eNPnTy3cGfKo805asuv0y2pavN9ITwS46kY/yL+cev9l860xrdjXITFUISiOT08ebNZ0vYQwqVwIFwLtbD36vVX3l584uTlE1cOvvPa0RuD2wIAAACw+X0YAAD//7e9G+Y=")
syz_mount_image$exfat(0x0, &(0x7f00000002c0)='./bus\x00', 0x4860, 0x0, 0x0, 0x0, &(0x7f0000000240))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x105042, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2, 0x11, r0, 0x0)
read$FUSE(r0, &(0x7f0000002400)={0x2020}, 0x2020)

5m20.888475221s ago: executing program 1 (id=1284):
syz_mount_image$udf(&(0x7f0000001880), &(0x7f0000000200)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00089aafc727346c3e0d8728525a2641b3b31621730c58dcf8e0ca2e6767a45a978776e9d2c689feab83a160d00a77ae5112cd4e7141cad333d7cbb69dc6b314609d3827059c11066ba0b4b95c12d2d9ff9c8896d9e247bd55f9ff578a14e0e9d0ca07693396b00d2ef44adb4858475a07d5e8fa3ef5b306fe8a5d1cd2d8e06e7f88226ece092c6aabf8870e140124d5a48670513e0c419c99b7c5105959e7a535f12694634cf272490e0000"], 0x1, 0x4ac, &(0x7f0000000500)="$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")
rename(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='./bus\x00')

5m19.763672919s ago: executing program 1 (id=1285):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0xc}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_EMATCHES={0x34, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x24, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x2}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x4}]}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x84}, 0x40010)

5m18.754211649s ago: executing program 1 (id=1286):
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
ppoll(&(0x7f00000000c0)=[{r0, 0x40}], 0x1, 0x0, &(0x7f0000000100), 0x0)

5m18.037185251s ago: executing program 1 (id=1287):
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000180)='./file0\x00', 0x100c404, &(0x7f0000000080)=ANY=[@ANYBLOB='nodots,check=strict,nodots,uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c6e6f646f74732c6e6f646f74732c6e66732c6e6f646f74732c646f74732c756d61736b3d30303030303030303030303030303030303030303030362c616c6c6f775f7574696d653d30303030303000000000000000023030303030303030352c6e6f646f74732c6e6f646f74732c6e66733d0704616c655f72772c64656275672c6e6f646f34732c73686f77657865632c666c7573682c646d61736b3d30303030303030303030303030303030303030303030332c646f74732c646f74732c00"], 0x1, 0x1fa, &(0x7f0000000800)="$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")
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c801}, 0x20000080)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[], 0xa1}}, 0x20000401)
sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0)
socketpair$unix(0x1, 0xd893ed0ac6437ec7, 0x0, &(0x7f0000000580))
openat$misdntimer(0xffffffffffffff9c, 0x0, 0x9261d86fc27dd3a1, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
futex(&(0x7f000000cffc)=0x2, 0x5, 0x4000003, 0x0, &(0x7f00000011c0)=0x8, 0x8ffffffe)
sendmsg$NFT_BATCH(r2, 0x0, 0x200000d5)
syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@errors_remount}, {@min_batch_time={'min_batch_time', 0x3d, 0xd}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@data_err_ignore}, {@dioread_lock}]}, 0x3, 0x44d, &(0x7f0000001080)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x841, 0x0)

5m1.824882094s ago: executing program 48 (id=1287):
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000180)='./file0\x00', 0x100c404, &(0x7f0000000080)=ANY=[@ANYBLOB='nodots,check=strict,nodots,uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c6e6f646f74732c6e6f646f74732c6e66732c6e6f646f74732c646f74732c756d61736b3d30303030303030303030303030303030303030303030362c616c6c6f775f7574696d653d30303030303000000000000000023030303030303030352c6e6f646f74732c6e6f646f74732c6e66733d0704616c655f72772c64656275672c6e6f646f34732c73686f77657865632c666c7573682c646d61736b3d30303030303030303030303030303030303030303030332c646f74732c646f74732c00"], 0x1, 0x1fa, &(0x7f0000000800)="$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")
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c801}, 0x20000080)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[], 0xa1}}, 0x20000401)
sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0)
socketpair$unix(0x1, 0xd893ed0ac6437ec7, 0x0, &(0x7f0000000580))
openat$misdntimer(0xffffffffffffff9c, 0x0, 0x9261d86fc27dd3a1, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
futex(&(0x7f000000cffc)=0x2, 0x5, 0x4000003, 0x0, &(0x7f00000011c0)=0x8, 0x8ffffffe)
sendmsg$NFT_BATCH(r2, 0x0, 0x200000d5)
syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@errors_remount}, {@min_batch_time={'min_batch_time', 0x3d, 0xd}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@data_err_ignore}, {@dioread_lock}]}, 0x3, 0x44d, &(0x7f0000001080)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x841, 0x0)

3m10.808089892s ago: executing program 6 (id=1624):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = dup3(r0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x30a, 0x4})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})

3m9.021811664s ago: executing program 6 (id=1626):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r1, 0x0, 0x0)
r3 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {}, {}, {0xffe0, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0xfffffed3, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20048850)

3m7.628869559s ago: executing program 6 (id=1630):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r2 = syz_open_dev$dri(0x0, 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000340)={0xdb, 0x8, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003})
r3 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000002740)={0x7, 0x1, 0x8})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f})
close_range(r0, 0xffffffffffffffff, 0x0)

3m6.353232164s ago: executing program 6 (id=1636):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x110a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
r4 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
read$FUSE(r4, &(0x7f0000006380)={0x2020}, 0x2020)

3m5.241409145s ago: executing program 6 (id=1638):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r0, &(0x7f0000000440)='X', 0x1, 0x4004041, &(0x7f00000001c0)={0xa, 0x0, 0x76f6, @private0={0xfc, 0x0, '\x00', 0xfc}, 0x8000}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, 0x0)
shutdown(r0, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0)
r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r1, 0xc0d05604, &(0x7f0000000100)={0x8, @raw_data="729d2be8a81dbe044e4d3132923b8d7f4af476784874aacc0d873bae6a0813223ca4ca16900de311ef48fa4a4abbd801a17df1f3aaf7f2be36dfab20ed9865bb3cc1bc55c958d2fd09ed111d7d4bb94d2dc0c8564e1e4b9c2f1cc0be482a98d750ced0f31ce1b4538f966f2de957cf766280d4081cc5f9c937e2a7385264256009d9f5a15406154b01b523b6f49471f852500c5e813b5c8cf677183277465e9e776554b01eb4ccd3cecde58da08b564ea9c6d4fd86e0463bae754c0589045f733416c2481bbf919e"})
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0)

3m3.099435333s ago: executing program 6 (id=1644):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x80000000001, 0x0, 0x1, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CAP_X86_DISABLE_EXITS(r3, 0x4068aea3, &(0x7f0000000180)={0x8f, 0x0, 0x2})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r5 = syz_open_dev$ndb(&(0x7f0000000240), 0x0, 0x680)
ioctl$NBD_SET_BLKSIZE(r5, 0xab01, 0x5)
sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x14, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0)
sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={0x1c, 0x15, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8804}, 0x24040808)
r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
pipe(0x0)
ioctl$KVM_NMI(r6, 0xae9a)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40848c0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x81, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
mmap(&(0x7f0000994000/0x9000)=nil, 0x9000, 0x1000003, 0x13, r9, 0x40000)

2m47.39702541s ago: executing program 49 (id=1644):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x80000000001, 0x0, 0x1, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CAP_X86_DISABLE_EXITS(r3, 0x4068aea3, &(0x7f0000000180)={0x8f, 0x0, 0x2})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r5 = syz_open_dev$ndb(&(0x7f0000000240), 0x0, 0x680)
ioctl$NBD_SET_BLKSIZE(r5, 0xab01, 0x5)
sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x14, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0)
sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={0x1c, 0x15, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8804}, 0x24040808)
r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
pipe(0x0)
ioctl$KVM_NMI(r6, 0xae9a)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40848c0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x81, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
mmap(&(0x7f0000994000/0x9000)=nil, 0x9000, 0x1000003, 0x13, r9, 0x40000)

2m23.654439439s ago: executing program 5 (id=1729):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r0, &(0x7f0000000440)='X', 0x1, 0x4004041, &(0x7f00000001c0)={0xa, 0x0, 0x76f6, @private0={0xfc, 0x0, '\x00', 0xfc}, 0x8000}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe)
shutdown(r0, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0)
r1 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r1, 0xc0d05604, &(0x7f0000000100)={0x8, @raw_data="729d2be8a81dbe044e4d3132923b8d7f4af476784874aacc0d873bae6a0813223ca4ca16900de311ef48fa4a4abbd801a17df1f3aaf7f2be36dfab20ed9865bb3cc1bc55c958d2fd09ed111d7d4bb94d2dc0c8564e1e4b9c2f1cc0be482a98d750ced0f31ce1b4538f966f2de957cf766280d4081cc5f9c937e2a7385264256009d9f5a15406154b01b523b6f49471f852500c5e813b5c8cf677183277465e9e776554b01eb4ccd3cecde58da08b564ea9c6d4fd86e0463bae754c0589045f733416c2481bbf919e"})
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0)

2m20.867250395s ago: executing program 5 (id=1732):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1a, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e76, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0xc}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x880}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x10000001)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
truncate(&(0x7f0000000440)='./file0\x00', 0x7)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2981)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xd0}}, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600, 0x0, 0x2000]}}], 0xffc8)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, 0x0, 0x84)

2m6.285240697s ago: executing program 5 (id=1765):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x40}}, 0x0)
sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x3c, 0x0, 0x1, 0x80, 0x25dfdbff, {0x36}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x4000800)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400})

2m4.863387897s ago: executing program 5 (id=1768):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0)
socket(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240))
socket(0x10, 0x803, 0x0)
socket(0x10, 0x803, 0x0)
ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f0000000080)={0x3, 0x0, [0xffffffffffffff50, 0x7f, 0x7, 0x128], 0x0})
socket(0x400000000010, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r0, @ANYBLOB="e0ff8b0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040)
sendmsg$nl_route(r0, 0x0, 0xc31fe084736598c)

2m2.887511535s ago: executing program 5 (id=1772):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})

2m2.157470558s ago: executing program 5 (id=1774):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1a, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e76, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0xc}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x880}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x10000001)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
truncate(&(0x7f0000000440)='./file0\x00', 0x7)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2981)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xd0}}, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600, 0x0, 0x2000]}}], 0xffc8)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, 0x0, 0x84)

1m46.674649913s ago: executing program 50 (id=1774):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1a, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e76, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0xc}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x880}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x10000001)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
truncate(&(0x7f0000000440)='./file0\x00', 0x7)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2981)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xd0}}, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600, 0x0, 0x2000]}}], 0xffc8)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, 0x0, 0x84)

8.603886832s ago: executing program 3 (id=2075):
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006)

7.924070836s ago: executing program 3 (id=2077):
r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
recvmsg(r0, &(0x7f0000000400)={&(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000340)=[{0x0}], 0x1}, 0x1)
r1 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2865)
ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r1, 0x80184132, &(0x7f0000000180))
r2 = openat$dsp(0xffffffffffffff9c, 0x0, 0x22080, 0x0)
ioctl$SNDCTL_DSP_STEREO(r2, 0xc0045003, &(0x7f0000000140))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$sequencer2(0xffffff9c, &(0x7f0000000200), 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r5 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_USER_TTY(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x3ea, 0x20, 0x70bd27, 0x25dfdbfe}, 0x10}}, 0x8000)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x4000010, 0xffffffffffffffff, 0xedba2000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r7, 0x0, 0x0, 0x2, 0x0)
ioctl$SNDCTL_TMR_TIMEBASE(r4, 0xc0045401, &(0x7f0000000440)=0x73)
sched_setscheduler(0x0, 0x6, &(0x7f0000000000)=0x7)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SNDCTL_SYNTH_MEMAVL(r4, 0xc004510e, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r3], 0x38}}, 0x40004)

7.233998773s ago: executing program 2 (id=2080):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000)
mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0)
ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0)
r1 = epoll_create1(0x0)
gettid()
close_range(r1, r1, 0x2)
r2 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r2, 0xc018aa3f, 0x0)
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
write$dsp(0xffffffffffffffff, &(0x7f0000000280), 0x0)
socket$kcm(0x1e, 0x4, 0x0)
r3 = socket$kcm(0x1e, 0x2, 0x0)
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, 0x0, 0x0)

6.940178886s ago: executing program 3 (id=2082):
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=')&:\x00')
pipe2$9p(&(0x7f00000003c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RREADLINK(r0, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xffffffffffffffff, 0x0, 0x0, 0x1000001000, 0x46}, 0x0, &(0x7f0000000000)={0x3ff, 0x7, 0x0, 0x9, 0x0, 0xf, 0x80000002}, 0x0, 0x0)

6.730646201s ago: executing program 4 (id=2083):
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_open_dev$sndctrl(0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x374}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0, &(0x7f0000000180)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x4004, @fd_index=0x4, 0x718a, 0x0, 0x0, 0x12, 0x1, {0x2}})
io_uring_enter(r0, 0x742f, 0x77ae, 0x1, 0x0, 0x0)

5.566151575s ago: executing program 8 (id=2084):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000700)=[@in={0x2, 0x4e23, @local}, @in6={0xa, 0x0, 0xffffffff, @loopback, 0xc7f}], 0x2c)
sendto$inet6(r0, &(0x7f0000000040)="e4", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}, 0x400}], 0x1, 0x40000023, 0x0)

5.350331083s ago: executing program 4 (id=2085):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000540)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e24, @rand_addr=0x64010100}]}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000300)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000001c0)={r2, 0x0, 0x2, "6aa6"}, 0xa)

5.3259082s ago: executing program 2 (id=2086):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x240, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000000)=0x3)

5.265492365s ago: executing program 3 (id=2087):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x20000000)

5.158078705s ago: executing program 9 (id=2088):
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001980)={0x9, {"a2e3ad214fc752f91b5b09094bf70e0dd038e7ff7fc6e5539b324c078b089b3438076d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b32310d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e01000000138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12d3099dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f6dc7bcbf2a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509301815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827466cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d951061ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153bdf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033095563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db87195358bfee2916580dacae008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2df086dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36ffffffff00000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817b97c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000f4ff000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006)

4.578236614s ago: executing program 8 (id=2089):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0)
r4 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x20048850)

4.538810516s ago: executing program 3 (id=2090):
pipe2$9p(&(0x7f0000000080), 0x800)
syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x4004, @fd_index=0x4, 0x718a, 0x0, 0x0, 0x12, 0x1, {0x2}})
io_uring_enter(0xffffffffffffffff, 0x742f, 0x77ae, 0x1, 0x0, 0x0)

4.494384358s ago: executing program 9 (id=2091):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x240, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000180)=@x86={0x3, 0x5, 0x81, 0x0, 0x9, 0xe, 0x5, 0x2, 0x1, 0x1, 0x6, 0x5, 0x0, 0x1af2, 0x3, 0x8, 0xf, 0xf4, 0x9, '\x00', 0x5, 0x8})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

4.224748426s ago: executing program 2 (id=2092):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)=0x8)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000280)={0x0, 0x80000, <r1=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x9, 0x4, 0xa})
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000))
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r2, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='children\x00')
read$FUSE(r3, &(0x7f0000000080)={0x2020}, 0x2020)
ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000040)=0x9)
ioctl$SNDCTL_DSP_SETFMT(r2, 0x40045010, &(0x7f0000000300)=0x6b)
ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f00000000c0)={<r4=>0xffffffffffffffff})
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000020c0), r3)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r5, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x4}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x100}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x1)
write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)
setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f00000000c0)={0x1, {{0xa, 0x4e20, 0x5, @mcast2, 0x6}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000240)={0x1, {{0xa, 0x4e20, 0x0, @mcast1}}, 0x1}, 0x90)
socket$inet_udp(0x2, 0x2, 0x0)
close(0x3)

4.07579631s ago: executing program 3 (id=2093):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000340)='./file1\x00', 0x0, &(0x7f0000000000)={[{@space_cache_v1}, {@clear_cache}, {@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0xff, 0x50d4, &(0x7f00000051c0)="$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")
mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0)

3.801939551s ago: executing program 4 (id=2094):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)}, {&(0x7f0000000e80)="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", 0x122}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e179a0", 0x2e}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c483271361816bf21afb8473a064f1988536d4b5888807b3aaafa", 0x91}], 0x4}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000fc0)}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e5", 0x6e}], 0x1}}], 0x3, 0x2090)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

3.480149033s ago: executing program 9 (id=2095):
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_open_dev$sndctrl(0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x374}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0, &(0x7f0000000180)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x4004, @fd_index=0x4, 0x718a, 0x0, 0x0, 0x12, 0x1, {0x2}})
io_uring_enter(r0, 0x742f, 0x77ae, 0x1, 0x0, 0x0)

3.4008428s ago: executing program 8 (id=2096):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000)
mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0)
ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0)
r1 = epoll_create1(0x0)
gettid()
close_range(r1, r1, 0x2)
r2 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r2, 0xc018aa3f, 0x0)
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
write$dsp(0xffffffffffffffff, &(0x7f0000000280), 0x0)
r3 = socket$kcm(0x1e, 0x2, 0x0)
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, 0x0, 0x0)

3.137895109s ago: executing program 4 (id=2097):
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xffffffffffffffff, 0x0, 0x0, 0x1000001000, 0x46}, 0x0, &(0x7f0000000000)={0x3ff, 0x7, 0x0, 0x9, 0x0, 0xf, 0x80000002}, 0x0, 0x0)

2.790121017s ago: executing program 9 (id=2098):
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB='gid=ignore,iocharset=cp1255,utf8,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c6769643d666f726765742c696f636861727365743d63703835322c766f6c756d653d3030303030303030303030300000000000000003653d30303030303030303030303030303030303030303030342c696f636861727365743d63703836332c696f636861007365743d69736f383835392d372c756e64656c6574652c6769643d6607006765742c7569643d", @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x1, 0xc80, &(0x7f0000000f40)="$eJzs3U9sHNd5APDvDZfiSm4rxk4VJ42DTVuksmK5+hdTtgp3VdNsA8iyEIq5BeBKpNSFKZIgqUY23JbppYceAhRFDzkRaIUCKRoYTRH0yLQukFx8KHLqiWhhIyh6YIsAAVoYW8zsW3FFkZYsURIl/3429e3MvDfz3rz1G1nQNy8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIjfefX0kaNpiwMDD6ExAMADcXb8a0eObfX8BwAeW+e3+/9/AAAAAAAAAAAAAABgt0hRxFORYv7sepqstrvqZ9qDV69NjI5tXW1vqmoOVOXLn/rRY8dPfOWFkZO9eKY9+xH1d9rn4vXx86cbr8xdmV+YXlycnmpMzLYvzk1N3/EZ7rX+ZoeqG9C48sbVqUuXFhvHnj9+0+Frwx8MPXFg+NTIs4ef6ZWdGB0bG98oUu8vX7vrhnRtl+GxJ4o4HCme+95PUysiirj3e1F/sGO/2d6qE4eqTkyMjlUdmWm3ZpfKg+d6N6KIaPRVavbu0dZjEbXBB9qH7TUjlsvmlw0+VHZvfL610LowM90411pYai+152bPpW5ry/40ooiTKWIlItaGbj3dYBRRixTf2b+eLuS3flT34ctVYvD27SjuYx/vQNnOxmDESvEIjNkuNhRFvBYpfvbuwbiY55lqrvlSxGtl/EHE9TK+HJHKL8aJiPe3+B7xaKpFEX9Wjv+p9TRVzQe9eeXM1xtfnb0011e2N698zOfDLTPFQ3o+7N0UH4xdPjfVo4hWNeOvp7v/zQ4AAAAAAAAAAAAAAAAAO21vFPHZSPHqv/5BlVccVV76/lMjvzv8i/0540/f5jxl2ecjYrm4s5zcPTkx8Fw6l9JDziX+JKtHEX+Y8/++9bAbAwAAAAAAAAAAAAAAAAAA8IlWxE8ixUvvHUwr0b+meHv2cuN868JMd1XY3tq/vTXTO51Op5G6sZnjZI7LOa7kuJrjWo5R5Po5NnOczHE5x5UcV3NcyzEGcv0cmzlO5ric40qOqzmu5Ri1XD/HZo6TOS7nuJLjao5rOcYuWbsXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBxUkQRH0aKb39zPUWKiGbEZHTj6tDDbh0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUBpKRXw/UjR+r3ljXy0iUvVv18HylxPR3FPGJ6M5UsaXo3k6x1YVa81vPYT2c28GUxE/jhRD9XduDHge/8Hu1o2vQVx/e2Prc7VuHOgdHP5g6IkD+0+NjH3h6e0+p60acOhMe/bqtcbE6NjYeN/1avnqT/YVHc7XLXau+594i2++9UZrZmZ64e4/lF+Bu6zeG8l7uPqD/JBqj0xTd+2H4tEZ7tZM1HZFMx5O329SfxiTE/dd+fx/P1L85nv/1nvgd5//9fiF7taNJ3z8/I82nv8vbT7RHT7/a5vr5ed/OS2M9+3uPf+f6tv3Uv7dwWAtor50ZX7wQER98c23DrevtC5PX56ePXHkyIsjIy8ePzK4J6J+qT0z3fdpR24XAAAAAAAAAAAAAAAAwIOTivjtSNH68XpqRMS1Kl9r+NTIs4efGYiBKt/qprzt18fPn268MndlfmF6cXF6qjEx2744NzV9p5erV+leE6Nj96Uzt7X3Prd/b/2Vufk3F9qXf39py+P76qcvLC4ttC5ufTj2RhHR7N9zqGrwxOhY1eiZdmu2qnpuy2T6j28wFfHvkeLiiUb6Yt6X8/83Z/jH9bdfvPFdWN58oh3L/4/4wr6N/L9P9RUtr5lSET+PFL/x50/HF6t27otb7lku99eR4tDJz+dysacs12vDk1W3upmBZdn/jhR//+HNZXv5kN0cxKrs0Y93d3e/cvz3R4rv/+l341fzvpvf/9A//hv3b9/mE+3g+Edf/uen+/btu+l9BffcdfL4H44ULz/1Tvxated/P/L9H703NhzsFt54P8d9Gv9f7ts3nK/76zvVeQAAAAAAAAAAgEfYYCribyLFD8dq6YW8707+/t/U5hPdp7//9Zm+fVM7s17RbT/c800FAAAAgF1iMBXxk0hxeemdGznUN+d/9+V//tZG/udo2nS0+nO+X6reG7CTf/7Xbzhfd/Leuw0AAAAAAAAAAAAAAAAAAAC7SkpFvJDXU5+s8vmntl1PfTVSvPqfz+Vy6UBZrrcO/HD1a/3s3Ozh0zMzc/VYal2YmW6Mz7cuTpd1Px0p1v/q87luUa2v3ltvvrvG+8Za7AuRYuxve2W7a7H31ibvrgde73QijpZlPxUp/uPvbi6bl6bOa0dX5z1Wlv3LSPGNf9y67IGNssfLst+NFD/6RqNXdl9Ztvd+1M9slH3+4lxxH0YFAAAAAAAAAAAAAAAAAACAT5rBVMSfRIr/urJyI5c/r/8/2LdZuf5233r/m1yr1vkfrtb/3+7z3az/X71XYHm7qwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOMpRRFvRYr5s+tpdajc7qqfac9evTYxOrZ1tb2pqjlQlS9/6kePHT/xlRdGTvbiR9ffaZ+N18fPn268MndlfmF6cXF6qjEx2744NzV9x2e41/qbHapuQOPKG1enLl1abBx7/vhNh68NfzD0xIHhUyPPHn6mV3ZidGxsvK9MbfCur36LtM3+PVHEX0SK57730/TDoYgi7v1e3Oa7c7/trTpxqOrExOhY1ZGZdmt2qTx4rncjiohGX6Vm7x7ddiz+r9PpPKiubKEZsVw2v2zwobJ74/OthdaFmenGudbCUnupPTd7LnVbW/anEUWcTBErEbE2dOvpBqOINyLFd/avp38aihjo3Ycvnx3/2pFj27ejuI99vANlOxuDESvFnYwZ2xmKIv4hUvzs3YPxz0MRtej+xJciXivjDyKuR3e8U/nFOBHx/hbfIx5NtSjif8rxP7We3h0q54PevHLm642vzl6a6yvbm1d6z4fePPgxnw+dTuePy/jwng8PxEA37PK5qR5F/Kia8dfTv/jvGgAAAAAAAAAAAAAAAGAXKeJXIsVL7x1MVX7wjZzi9uzlxvnWhZluWl8v96+XM93pdDqN1I3NHCdzXM5xJcfVHNdyjCLXz7FZxnqnM5m3l3NcKaJefljN22s5xkCuP1ClK3aaeXsyx+UcV3JczXEtx6jl+jk2c5zMcTnHlRxXc1zLMXZJ7h4AAAAAAAAAAAAAAAAAAPB4Kap/Unz7m+upM9RdX3oyunHVeqCPvf8PAAD//2lb9GQ=")
open(&(0x7f0000000000)='./bus\x00', 0x64942, 0x0)

2.529823674s ago: executing program 8 (id=2099):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000700)=[@in={0x2, 0x4e23, @local}, @in6={0xa, 0x0, 0xffffffff, @loopback, 0xc7f}], 0x2c)
sendto$inet6(r0, &(0x7f0000000040)="e4", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}, 0x400}], 0x1, 0x40000023, 0x0)

2.460244919s ago: executing program 2 (id=2100):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)={0x14, 0x2, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4000}}, 0x14}}, 0x20000000)

2.271525811s ago: executing program 4 (id=2101):
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006)

1.901955767s ago: executing program 8 (id=2102):
r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
recvmsg(r0, &(0x7f0000000400)={&(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000340)=[{0x0}], 0x1}, 0x1)
r1 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2865)
ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r1, 0x80184132, &(0x7f0000000180))
r2 = openat$dsp(0xffffffffffffff9c, 0x0, 0x22080, 0x0)
ioctl$SNDCTL_DSP_STEREO(r2, 0xc0045003, &(0x7f0000000140))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$sequencer2(0xffffff9c, &(0x7f0000000200), 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r5 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_USER_TTY(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x3ea, 0x20, 0x70bd27, 0x25dfdbfe}, 0x10}}, 0x8000)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x4000010, 0xffffffffffffffff, 0xedba2000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r7, 0x0, 0x0, 0x2, 0x0)
ioctl$SNDCTL_TMR_TIMEBASE(r4, 0xc0045401, &(0x7f0000000440)=0x73)
sched_setscheduler(0x0, 0x6, &(0x7f0000000000)=0x7)
ioctl$SNDCTL_SYNTH_MEMAVL(r4, 0xc004510e, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r3], 0x38}}, 0x40004)

1.7842774s ago: executing program 2 (id=2103):
r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x3, 0xc00, 0x0, 0x374}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0, &(0x7f0000000180)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x4004, @fd_index=0x4, 0x718a, 0x0, 0x0, 0x12, 0x1, {0x2}})
io_uring_enter(r0, 0x742f, 0x77ae, 0x1, 0x0, 0x0)

1.483295654s ago: executing program 4 (id=2104):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000140)={0x0, 0x4, 0x4, &(0x7f0000000080)={0x1d, "537a1468df08000000758bd16868e0bf22c7b844c1b1f10186854fff98d2870c38"}})

1.341132311s ago: executing program 9 (id=2105):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x240, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000180)=@x86={0x3, 0x5, 0x81, 0x0, 0x9, 0xe, 0x5, 0x2, 0x1, 0x1, 0x6, 0x5, 0x0, 0x1af2, 0x3, 0x8, 0xf, 0xf4, 0x9, '\x00', 0x5, 0x8})
ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000000)=0x3)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

942.71192ms ago: executing program 2 (id=2106):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0)
r4 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {}, {}, {0xffe0, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x20048850)

918.280642ms ago: executing program 8 (id=2107):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)}, {&(0x7f0000000e80)="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", 0x122}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e179a0", 0x2e}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c483271361816bf21afb8473a064f1988536d4b5888807b3aaafa", 0x91}], 0x4}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000fc0)}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e5", 0x6e}], 0x1}}], 0x3, 0x2090)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

0s ago: executing program 9 (id=2108):
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
r0 = syz_io_uring_setup(0xf00, 0x0, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0, &(0x7f0000000180)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x4004, @fd_index=0x4, 0x718a, 0x0, 0x0, 0x12, 0x1, {0x2}})
io_uring_enter(r0, 0x742f, 0x77ae, 0x1, 0x0, 0x0)

kernel console output (not intermixed with test programs):

 2 family 0 port 6081 - 0
[  739.094844][T10168] 8021q: adding VLAN 0 to HW filter on device batadv0
[  744.187087][T10168] veth0_vlan: entered promiscuous mode
[  744.323884][T10168] veth1_vlan: entered promiscuous mode
[  744.769468][T10168] veth0_macvtap: entered promiscuous mode
[  744.900956][T10168] veth1_macvtap: entered promiscuous mode
[  745.190906][T10168] batman_adv: batadv0: Interface activated: batadv_slave_0
[  745.358966][ T5830] IPVS: starting estimator thread 0...
[  745.383189][T10168] batman_adv: batadv0: Interface activated: batadv_slave_1
[  745.498292][T10387] IPVS: using max 336 ests per chain, 16800 per kthread
[  745.612931][   T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  745.665711][   T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  745.769514][   T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  745.858984][   T85] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  749.076159][ T8823] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  749.215063][ T8823] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  749.506916][   T85] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  749.558389][   T85] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  749.850780][T10321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  749.861462][ T9485] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  749.879615][ T9485] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  749.896695][ T9485] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  749.925466][ T9485] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  749.943319][ T9485] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  752.098410][ T5785] Bluetooth: hci3: command tx timeout
[  754.179118][ T5785] Bluetooth: hci3: command tx timeout
[  754.582997][T10419] chnl_net:caif_netlink_parms(): no params data found
[  756.408442][ T5785] Bluetooth: hci3: command tx timeout
[  757.355264][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  757.368149][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  758.373834][T10419] bridge0: port 1(bridge_slave_0) entered blocking state
[  758.418180][ T5785] Bluetooth: hci3: command tx timeout
[  758.453297][T10419] bridge0: port 1(bridge_slave_0) entered disabled state
[  758.509092][T10419] bridge_slave_0: entered allmulticast mode
[  758.639936][T10419] bridge_slave_0: entered promiscuous mode
[  758.750268][T10419] bridge0: port 2(bridge_slave_1) entered blocking state
[  758.757580][T10419] bridge0: port 2(bridge_slave_1) entered disabled state
[  758.847001][T10419] bridge_slave_1: entered allmulticast mode
[  758.913564][T10419] bridge_slave_1: entered promiscuous mode
[  759.692885][T10419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  759.969017][T10419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  761.901015][ T8824] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  762.001883][ T8824] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  762.866418][T10419] team0: Port device team_slave_0 added
[  762.908501][T10419] team0: Port device team_slave_1 added
[  762.984069][ T8824] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  763.042413][ T8824] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  763.315688][ T8609] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  763.324399][ T8609] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  763.511094][T10512] loop2: detected capacity change from 0 to 512
[  763.537687][ T8824] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  763.563714][ T8824] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  763.606066][T10512] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  763.629647][T10512] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  763.653450][T10419] batman_adv: batadv0: Adding interface: batadv_slave_0
[  763.668204][T10419] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  763.729709][T10419] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  763.781148][T10419] batman_adv: batadv0: Adding interface: batadv_slave_1
[  763.818104][T10419] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  763.878321][T10419] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  764.123180][ T8824] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  764.178449][ T8824] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  764.676387][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  764.708970][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  764.766307][T10419] hsr_slave_0: entered promiscuous mode
[  764.811376][T10419] hsr_slave_1: entered promiscuous mode
[  764.847532][T10419] debugfs: 'hsr0' already exists in 'hsr'
[  764.888585][T10419] Cannot create hsr debugfs directory
[  765.550179][T10525] Bluetooth: hci0: Opcode 0x0c20 failed: -4
[  765.600763][T10528] loop7: detected capacity change from 0 to 4096
[  765.761686][ T8824] bridge_slave_1: left allmulticast mode
[  765.793771][ T8824] bridge_slave_1: left promiscuous mode
[  765.850692][ T8824] bridge0: port 2(bridge_slave_1) entered disabled state
[  765.996293][ T8824] bridge_slave_0: left allmulticast mode
[  766.010524][ T8824] bridge_slave_0: left promiscuous mode
[  766.026356][T10515] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  766.059187][ T8824] bridge0: port 1(bridge_slave_0) entered disabled state
[  766.938468][ T5785] Bluetooth: hci0: command 0x0c20 tx timeout
[  769.757377][ T8824] bond1 (unregistering): (slave vxlan0): Releasing backup interface
[  769.991490][ T8824] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  770.086735][ T8824] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  770.151205][ T8824] bond0 (unregistering): Released all slaves
[  770.207039][ T8824] bond1 (unregistering): Released all slaves
[  771.765507][T10585] loop9: detected capacity change from 0 to 256
[  771.880823][T10585] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  772.118119][ T8824] hsr_slave_0: left promiscuous mode
[  772.148094][ T8824] hsr_slave_1: left promiscuous mode
[  772.183420][ T8824] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  772.235435][ T8824] batman_adv: batadv0: Removing interface: batadv_slave_0
[  772.272148][ T8824] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  772.308076][ T8824] batman_adv: batadv0: Removing interface: batadv_slave_1
[  772.404927][ T8824] veth1_macvtap: left promiscuous mode
[  772.438314][ T8824] veth0_macvtap: left promiscuous mode
[  772.444201][ T8824] veth1_vlan: left promiscuous mode
[  772.481198][ T8824] veth0_vlan: left promiscuous mode
[  774.322194][ T8824] team0 (unregistering): Port device team_slave_1 removed
[  774.395242][ T8824] team0 (unregistering): Port device team_slave_0 removed
[  775.231712][T10608] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1093'.
[  776.605129][T10615] loop9: detected capacity change from 0 to 2048
[  777.210446][T10619] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  778.742677][T10419] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  778.756950][T10071] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  778.787702][   T29] audit: type=1800 audit(1775435040.491:10): pid=10615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1097" name="file1" dev="loop9" ino=15 res=0 errno=0
[  778.899532][T10419] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  778.996326][T10419] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  779.160927][T10419] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  780.690087][ T9485] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  780.709819][ T9485] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  780.724385][ T9485] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  780.746747][ T9485] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  780.757119][ T9485] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  781.022154][T10419] 8021q: adding VLAN 0 to HW filter on device bond0
[  781.527455][T10419] 8021q: adding VLAN 0 to HW filter on device team0
[  781.705311][ T3940] bridge0: port 1(bridge_slave_0) entered blocking state
[  781.712899][ T3940] bridge0: port 1(bridge_slave_0) entered forwarding state
[  782.244159][ T3940] bridge0: port 2(bridge_slave_1) entered blocking state
[  782.251633][ T3940] bridge0: port 2(bridge_slave_1) entered forwarding state
[  782.902529][ T5785] Bluetooth: hci4: command tx timeout
[  784.243112][ T3940] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  784.402362][T10635] chnl_net:caif_netlink_parms(): no params data found
[  784.739034][ T3940] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  784.979000][ T5785] Bluetooth: hci4: command tx timeout
[  785.252700][ T3940] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  785.673316][ T3940] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  785.875072][T10419] 8021q: adding VLAN 0 to HW filter on device batadv0
[  786.508627][ T3940] bridge_slave_1: left allmulticast mode
[  786.514394][ T3940] bridge_slave_1: left promiscuous mode
[  786.583959][ T3940] bridge0: port 2(bridge_slave_1) entered disabled state
[  786.707040][ T3940] bridge_slave_0: left allmulticast mode
[  786.728654][ T3940] bridge_slave_0: left promiscuous mode
[  786.737377][ T3940] bridge0: port 1(bridge_slave_0) entered disabled state
[  787.059929][ T5785] Bluetooth: hci4: command tx timeout
[  787.575623][T10682] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1105'.
[  788.336016][ T3940] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  788.407321][ T3940] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  788.467417][ T3940] bond0 (unregistering): Released all slaves
[  788.522692][T10694] binder: 10691:10694 ioctl 4018620d 0 returned -22
[  789.139700][ T5785] Bluetooth: hci4: command tx timeout
[  789.224574][ T9485] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  789.239490][ T9485] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  789.248358][ T9485] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  789.274632][ T9485] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  789.306519][ T9485] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  789.675644][T10635] bridge0: port 1(bridge_slave_0) entered blocking state
[  789.715935][T10635] bridge0: port 1(bridge_slave_0) entered disabled state
[  789.728565][T10635] bridge_slave_0: entered allmulticast mode
[  789.762174][T10635] bridge_slave_0: entered promiscuous mode
[  789.898463][T10635] bridge0: port 2(bridge_slave_1) entered blocking state
[  789.905941][T10635] bridge0: port 2(bridge_slave_1) entered disabled state
[  789.974679][T10635] bridge_slave_1: entered allmulticast mode
[  790.014383][T10635] bridge_slave_1: entered promiscuous mode
[  790.782250][ T3940] hsr_slave_0: left promiscuous mode
[  790.816695][ T3940] hsr_slave_1: left promiscuous mode
[  790.880463][ T3940] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  790.920395][ T3940] batman_adv: batadv0: Removing interface: batadv_slave_0
[  790.945899][ T3940] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  791.008112][ T3940] batman_adv: batadv0: Removing interface: batadv_slave_1
[  791.070701][ T3940] veth1_macvtap: left promiscuous mode
[  791.076411][ T3940] veth0_macvtap: left promiscuous mode
[  791.099530][ T3940] veth1_vlan: left promiscuous mode
[  791.128623][ T3940] veth0_vlan: left promiscuous mode
[  791.379540][ T5785] Bluetooth: hci0: command tx timeout
[  793.030258][ T3940] team0 (unregistering): Port device team_slave_1 removed
[  793.089774][ T3940] team0 (unregistering): Port device team_slave_0 removed
[  793.458882][ T5785] Bluetooth: hci0: command tx timeout
[  793.497453][T10635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  793.716354][T10635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  794.184622][T10635] team0: Port device team_slave_0 added
[  794.362093][T10635] team0: Port device team_slave_1 added
[  795.065646][T10635] batman_adv: batadv0: Adding interface: batadv_slave_0
[  795.108336][T10635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  795.228195][T10635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  795.382299][T10635] batman_adv: batadv0: Adding interface: batadv_slave_1
[  795.408292][T10635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  795.478610][T10635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  795.538159][ T5785] Bluetooth: hci0: command tx timeout
[  795.661794][ T3940] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  795.870484][ T3940] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  796.117064][ T3940] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  796.446817][ T3940] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  796.893387][T10635] hsr_slave_0: entered promiscuous mode
[  796.926778][T10635] hsr_slave_1: entered promiscuous mode
[  796.963213][T10635] debugfs: 'hsr0' already exists in 'hsr'
[  796.998058][T10635] Cannot create hsr debugfs directory
[  797.021679][T10419] veth0_vlan: entered promiscuous mode
[  797.381311][T10419] veth1_vlan: entered promiscuous mode
[  797.647675][ T5785] Bluetooth: hci0: command tx timeout
[  797.789683][T10706] chnl_net:caif_netlink_parms(): no params data found
[  798.935862][ T3940] bridge_slave_1: left allmulticast mode
[  798.953432][ T3940] bridge_slave_1: left promiscuous mode
[  798.973965][ T3940] bridge0: port 2(bridge_slave_1) entered disabled state
[  799.049354][ T3940] bridge_slave_0: left allmulticast mode
[  799.066817][ T3940] bridge_slave_0: left promiscuous mode
[  799.088568][ T3940] bridge0: port 1(bridge_slave_0) entered disabled state
[  799.113629][T10787] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1114'.
[  799.648656][T10790] binder: 10789:10790 ioctl 4018620d 0 returned -22
[  800.050374][ T3940] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  800.133995][ T3940] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  800.170014][ T3940] bond0 (unregistering): Released all slaves
[  800.585506][T10419] veth0_macvtap: entered promiscuous mode
[  801.024667][T10419] veth1_macvtap: entered promiscuous mode
[  801.393690][ T3940] hsr_slave_0: left promiscuous mode
[  801.422841][ T3940] hsr_slave_1: left promiscuous mode
[  801.444528][ T3940] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  801.453298][ T3940] batman_adv: batadv0: Removing interface: batadv_slave_0
[  801.471213][ T3940] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  801.486235][ T3940] batman_adv: batadv0: Removing interface: batadv_slave_1
[  801.536232][ T3940] veth1_macvtap: left promiscuous mode
[  801.544067][ T3940] veth0_macvtap: left promiscuous mode
[  801.572260][ T3940] veth1_vlan: left promiscuous mode
[  801.577719][ T3940] veth0_vlan: left promiscuous mode
[  802.541606][T10813] loop7: detected capacity change from 0 to 16
[  802.598801][T10813] erofs (device loop7): mounted with root inode @ nid 36.
[  803.303210][ T3940] team0 (unregistering): Port device team_slave_1 removed
[  803.433731][ T3940] team0 (unregistering): Port device team_slave_0 removed
[  804.083338][T10706] bridge0: port 1(bridge_slave_0) entered blocking state
[  804.107505][T10706] bridge0: port 1(bridge_slave_0) entered disabled state
[  804.129946][T10706] bridge_slave_0: entered allmulticast mode
[  804.167327][T10706] bridge_slave_0: entered promiscuous mode
[  804.342684][T10706] bridge0: port 2(bridge_slave_1) entered blocking state
[  804.380643][T10706] bridge0: port 2(bridge_slave_1) entered disabled state
[  804.401116][T10706] bridge_slave_1: entered allmulticast mode
[  804.429866][T10706] bridge_slave_1: entered promiscuous mode
[  804.885313][T10706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  804.994483][T10419] batman_adv: batadv0: Interface activated: batadv_slave_0
[  805.090453][T10706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  805.351301][T10419] batman_adv: batadv0: Interface activated: batadv_slave_1
[  805.876927][T10706] team0: Port device team_slave_0 added
[  806.115118][T10706] team0: Port device team_slave_1 added
[  806.205101][   T32] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  806.240157][   T32] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  806.486774][   T32] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  806.538466][   T32] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  806.777197][T10635] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  806.909793][T10706] batman_adv: batadv0: Adding interface: batadv_slave_0
[  806.916893][T10706] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  807.040254][T10706] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  807.072235][T10635] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  807.136043][T10706] batman_adv: batadv0: Adding interface: batadv_slave_1
[  807.156653][T10706] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  807.317373][T10706] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  807.383052][T10635] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  807.532363][T10635] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  808.098590][T10706] hsr_slave_0: entered promiscuous mode
[  808.139752][T10706] hsr_slave_1: entered promiscuous mode
[  809.725694][ T9485] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  809.746282][ T9485] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  809.763852][ T9485] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  809.785145][ T9485] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  809.799626][ T9485] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  810.268658][T10868] binder: 10866:10868 ioctl 4018620d 0 returned -22
[  810.836588][T10635] 8021q: adding VLAN 0 to HW filter on device bond0
[  811.594626][T10635] 8021q: adding VLAN 0 to HW filter on device team0
[  811.858195][ T5785] Bluetooth: hci5: command tx timeout
[  811.945767][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[  811.953345][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[  812.282806][ T3940] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  812.352690][T10706] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  812.551491][ T3940] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  812.620567][T10706] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  812.770921][ T3940] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  812.806694][T10706] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  812.889832][ T6455] bridge0: port 2(bridge_slave_1) entered blocking state
[  812.897966][ T6455] bridge0: port 2(bridge_slave_1) entered forwarding state
[  813.216529][ T3940] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  813.276172][T10706] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  813.948826][ T5785] Bluetooth: hci5: command tx timeout
[  814.165995][T10863] chnl_net:caif_netlink_parms(): no params data found
[  814.272351][ T3940] bridge_slave_1: left allmulticast mode
[  814.291797][ T3940] bridge_slave_1: left promiscuous mode
[  814.303323][ T3940] bridge0: port 2(bridge_slave_1) entered disabled state
[  814.326384][ T3940] bridge_slave_0: left allmulticast mode
[  814.333826][ T3940] bridge_slave_0: left promiscuous mode
[  814.343556][ T3940] bridge0: port 1(bridge_slave_0) entered disabled state
[  815.090664][ T3940] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  815.127515][ T3940] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  815.145851][ T3940] bond0 (unregistering): Released all slaves
[  815.472171][ T3940] hsr_slave_0: left promiscuous mode
[  815.489180][ T3940] hsr_slave_1: left promiscuous mode
[  815.516097][ T3940] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  815.525799][ T3940] batman_adv: batadv0: Removing interface: batadv_slave_0
[  815.544244][ T3940] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  815.559869][ T3940] batman_adv: batadv0: Removing interface: batadv_slave_1
[  815.647618][ T3940] veth1_macvtap: left promiscuous mode
[  815.654021][ T3940] veth0_macvtap: left promiscuous mode
[  815.662325][ T3940] veth1_vlan: left promiscuous mode
[  815.669296][ T3940] veth0_vlan: left promiscuous mode
[  816.018210][ T5785] Bluetooth: hci5: command tx timeout
[  817.171740][ T3940] team0 (unregistering): Port device team_slave_1 removed
[  817.237420][ T3940] team0 (unregistering): Port device team_slave_0 removed
[  818.098503][ T5785] Bluetooth: hci5: command tx timeout
[  818.770490][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  818.777100][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  818.872601][T10706] 8021q: adding VLAN 0 to HW filter on device bond0
[  819.188351][T10863] bridge0: port 1(bridge_slave_0) entered blocking state
[  819.213513][T10863] bridge0: port 1(bridge_slave_0) entered disabled state
[  819.244967][T10863] bridge_slave_0: entered allmulticast mode
[  819.278917][T10863] bridge_slave_0: entered promiscuous mode
[  819.350195][T10863] bridge0: port 2(bridge_slave_1) entered blocking state
[  819.357503][T10863] bridge0: port 2(bridge_slave_1) entered disabled state
[  819.389617][T10863] bridge_slave_1: entered allmulticast mode
[  819.429734][T10863] bridge_slave_1: entered promiscuous mode
[  819.681135][T10706] 8021q: adding VLAN 0 to HW filter on device team0
[  819.731253][T10863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  819.834324][T10863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  819.868044][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[  819.875398][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[  820.085960][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[  820.094616][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[  820.193580][T10635] 8021q: adding VLAN 0 to HW filter on device batadv0
[  820.236724][T10863] team0: Port device team_slave_0 added
[  820.287661][T10863] team0: Port device team_slave_1 added
[  820.531252][T10863] batman_adv: batadv0: Adding interface: batadv_slave_0
[  820.564971][T10863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  820.640273][T10863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  820.713108][T10863] batman_adv: batadv0: Adding interface: batadv_slave_1
[  820.748512][T10863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  820.829239][T10863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  821.424676][T10863] hsr_slave_0: entered promiscuous mode
[  821.454225][T10863] hsr_slave_1: entered promiscuous mode
[  821.490875][T10863] debugfs: 'hsr0' already exists in 'hsr'
[  821.496707][T10863] Cannot create hsr debugfs directory
[  823.290778][T10635] veth0_vlan: entered promiscuous mode
[  823.567212][T10635] veth1_vlan: entered promiscuous mode
[  823.876912][T10706] 8021q: adding VLAN 0 to HW filter on device batadv0
[  824.285607][T10863] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  824.356584][T10863] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  824.403417][T10635] veth0_macvtap: entered promiscuous mode
[  824.460212][T10863] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  824.590466][T10863] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  824.702570][T10635] veth1_macvtap: entered promiscuous mode
[  824.941285][T10635] batman_adv: batadv0: Interface activated: batadv_slave_0
[  825.059473][T10635] batman_adv: batadv0: Interface activated: batadv_slave_1
[  825.183099][ T8739] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  825.204874][ T8739] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  825.284318][ T8739] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  825.342830][ T8739] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  826.067218][T10863] 8021q: adding VLAN 0 to HW filter on device bond0
[  826.356787][T10706] veth0_vlan: entered promiscuous mode
[  826.445479][T10863] 8021q: adding VLAN 0 to HW filter on device team0
[  826.553917][ T9193] bridge0: port 1(bridge_slave_0) entered blocking state
[  826.561560][ T9193] bridge0: port 1(bridge_slave_0) entered forwarding state
[  826.621521][T10706] veth1_vlan: entered promiscuous mode
[  826.684757][ T9193] bridge0: port 2(bridge_slave_1) entered blocking state
[  826.692364][ T9193] bridge0: port 2(bridge_slave_1) entered forwarding state
[  827.149980][T10978] loop9: detected capacity change from 0 to 32768
[  827.283746][T10706] veth0_macvtap: entered promiscuous mode
[  827.352854][T10706] veth1_macvtap: entered promiscuous mode
[  827.586850][T10706] batman_adv: batadv0: Interface activated: batadv_slave_0
[  827.713354][T10706] batman_adv: batadv0: Interface activated: batadv_slave_1
[  827.876583][ T8739] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  827.908379][ T8739] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  827.967593][ T8739] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  828.030741][ T8739] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  829.110300][T10863] 8021q: adding VLAN 0 to HW filter on device batadv0
[  831.858084][ T9193] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  831.871941][ T9193] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  832.248379][ T9193] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  832.311882][ T9193] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  832.430765][T10863] veth0_vlan: entered promiscuous mode
[  832.626595][T10863] veth1_vlan: entered promiscuous mode
[  833.181871][T10863] veth0_macvtap: entered promiscuous mode
[  833.266174][T10863] veth1_macvtap: entered promiscuous mode
[  833.975130][T10863] batman_adv: batadv0: Interface activated: batadv_slave_0
[  834.226225][T10863] batman_adv: batadv0: Interface activated: batadv_slave_1
[  834.586700][  T749] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  834.679447][  T749] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  834.714009][  T749] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  834.754575][  T749] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  836.685263][T11098] binder: BINDER_SET_CONTEXT_MGR already set
[  836.724544][T11098] binder: 11097:11098 ioctl 4018620d 80000040 returned -16
[  836.822817][  T749] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  836.855376][  T749] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  837.183339][ T8609] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  837.239284][ T8609] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  839.011908][T11119] syzkaller0: entered promiscuous mode
[  839.017496][T11119] syzkaller0: entered allmulticast mode
[  842.590046][  T749] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  842.621320][  T749] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  843.083691][  T749] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  843.130846][  T749] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  844.646016][ T9485] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  844.677059][ T9485] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  844.700337][ T9485] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  844.755131][ T9485] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  844.769386][ T9485] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  845.336519][T11176] syzkaller0: entered promiscuous mode
[  845.363496][T11176] syzkaller0: entered allmulticast mode
[  846.918625][ T5785] Bluetooth: hci3: command tx timeout
[  847.237376][T11194] loop6: detected capacity change from 0 to 512
[  847.295728][T11194] EXT4-fs (loop6): bad s_want_extra_isize: 1312
[  847.684559][T11171] chnl_net:caif_netlink_parms(): no params data found
[  848.745719][ T6455] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  848.938994][ T6455] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  848.967668][T11204] binder: 11203:11204 ioctl c0306201 0 returned -14
[  848.978268][ T5785] Bluetooth: hci3: command tx timeout
[  849.082643][ T6455] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  849.297050][ T6455] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  850.088908][ T6455] bridge_slave_1: left allmulticast mode
[  850.161867][ T6455] bridge_slave_1: left promiscuous mode
[  850.190741][ T6455] bridge0: port 2(bridge_slave_1) entered disabled state
[  850.248215][ T6455] bridge_slave_0: left allmulticast mode
[  850.254048][ T6455] bridge_slave_0: left promiscuous mode
[  850.297337][ T6455] bridge0: port 1(bridge_slave_0) entered disabled state
[  851.058881][ T5785] Bluetooth: hci3: command tx timeout
[  851.940548][ T6455] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  851.991223][ T6455] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  852.041275][ T6455] bond0 (unregistering): Released all slaves
[  852.515531][T11171] bridge0: port 1(bridge_slave_0) entered blocking state
[  852.589509][T11171] bridge0: port 1(bridge_slave_0) entered disabled state
[  852.621058][T11171] bridge_slave_0: entered allmulticast mode
[  852.662390][T11171] bridge_slave_0: entered promiscuous mode
[  852.741338][T11171] bridge0: port 2(bridge_slave_1) entered blocking state
[  852.792709][T11171] bridge0: port 2(bridge_slave_1) entered disabled state
[  852.835656][T11171] bridge_slave_1: entered allmulticast mode
[  852.879183][T11171] bridge_slave_1: entered promiscuous mode
[  853.148251][ T5785] Bluetooth: hci3: command tx timeout
[  853.918289][ T6455] hsr_slave_0: left promiscuous mode
[  854.068267][ T6455] hsr_slave_1: left promiscuous mode
[  854.099484][ T6455] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  854.107016][ T6455] batman_adv: batadv0: Removing interface: batadv_slave_0
[  854.179998][ T6455] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  854.187495][ T6455] batman_adv: batadv0: Removing interface: batadv_slave_1
[  854.358504][ T6455] veth1_macvtap: left promiscuous mode
[  854.364213][ T6455] veth0_macvtap: left promiscuous mode
[  854.438226][ T6455] veth1_vlan: left promiscuous mode
[  854.443755][ T6455] veth0_vlan: left promiscuous mode
[  854.920310][ T9485] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  854.976397][ T9485] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  854.985626][ T9485] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  855.069408][ T9485] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  855.092470][ T9485] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  856.511235][ T6455] team0 (unregistering): Port device team_slave_1 removed
[  856.679588][ T6455] team0 (unregistering): Port device team_slave_0 removed
[  857.143300][ T9485] Bluetooth: hci1: command tx timeout
[  857.554951][T11171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  857.669643][T11171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  858.325071][T11171] team0: Port device team_slave_0 added
[  858.383886][T11171] team0: Port device team_slave_1 added
[  858.934053][T11171] batman_adv: batadv0: Adding interface: batadv_slave_0
[  858.960377][T11171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  859.028250][T11171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  859.104168][ T6455] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  859.191559][T11171] batman_adv: batadv0: Adding interface: batadv_slave_1
[  859.218032][ T9485] Bluetooth: hci1: command tx timeout
[  859.244526][T11171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  859.286973][T11171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  859.412919][ T6455] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  859.854849][ T6455] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  860.132642][ T6455] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  860.246223][T11171] hsr_slave_0: entered promiscuous mode
[  860.290796][T11171] hsr_slave_1: entered promiscuous mode
[  860.320516][T11171] debugfs: 'hsr0' already exists in 'hsr'
[  860.326427][T11171] Cannot create hsr debugfs directory
[  861.298394][ T9485] Bluetooth: hci1: command tx timeout
[  861.817057][T11308] binder: 11307:11308 ioctl c0306201 0 returned -14
[  861.952121][ T6455] bridge_slave_1: left allmulticast mode
[  861.969598][ T6455] bridge_slave_1: left promiscuous mode
[  861.976121][ T6455] bridge0: port 2(bridge_slave_1) entered disabled state
[  862.046023][ T6455] bridge_slave_0: left allmulticast mode
[  862.052131][ T6455] bridge_slave_0: left promiscuous mode
[  862.088884][ T6455] bridge0: port 1(bridge_slave_0) entered disabled state
[  863.210544][ T6455] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  863.295536][ T6455] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  863.348532][ T6455] bond0 (unregistering): Released all slaves
[  863.378657][ T9485] Bluetooth: hci1: command tx timeout
[  863.404309][T11243] chnl_net:caif_netlink_parms(): no params data found
[  863.603210][T11297] loop4: detected capacity change from 0 to 32768
[  863.742925][T11297] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  863.821828][T11297] XFS (loop4): AIL initialisation failed: error -12
[  863.904922][T11297] XFS (loop4): log mount failed
[  864.928862][ T6455] hsr_slave_0: left promiscuous mode
[  864.991385][ T6455] hsr_slave_1: left promiscuous mode
[  865.021137][ T6455] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  865.055115][ T6455] batman_adv: batadv0: Removing interface: batadv_slave_0
[  865.110888][ T6455] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  865.151444][ T6455] batman_adv: batadv0: Removing interface: batadv_slave_1
[  865.274946][ T6455] veth1_macvtap: left promiscuous mode
[  865.300714][ T6455] veth0_macvtap: left promiscuous mode
[  865.320478][ T6455] veth1_vlan: left promiscuous mode
[  865.326033][ T6455] veth0_vlan: left promiscuous mode
[  867.418338][ T6455] team0 (unregistering): Port device team_slave_1 removed
[  867.503972][ T6455] team0 (unregistering): Port device team_slave_0 removed
[  868.964169][T11171] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  869.044418][T11369] loop6: detected capacity change from 0 to 512
[  869.069956][T11171] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  869.119082][T11369] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  869.160562][T11243] bridge0: port 1(bridge_slave_0) entered blocking state
[  869.179145][T11243] bridge0: port 1(bridge_slave_0) entered disabled state
[  869.186804][T11243] bridge_slave_0: entered allmulticast mode
[  869.231939][T11243] bridge_slave_0: entered promiscuous mode
[  869.256265][T11243] bridge0: port 2(bridge_slave_1) entered blocking state
[  869.265066][T11243] bridge0: port 2(bridge_slave_1) entered disabled state
[  869.276596][T11243] bridge_slave_1: entered allmulticast mode
[  869.278375][T11369] EXT4-fs (loop6): 1 orphan inode deleted
[  869.289014][T11243] bridge_slave_1: entered promiscuous mode
[  869.308628][T11171] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  869.323414][T11369] EXT4-fs (loop6): 1 truncate cleaned up
[  869.387346][T11369] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  869.431082][T11171] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  869.579039][T11369] EXT4-fs error (device loop6): empty_inline_dir:1778: inode #12: block 7: comm syz.6.1188: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=784, size=60 fake=0
[  869.660636][T11369] EXT4-fs (loop6): Remounting filesystem read-only
[  869.700182][T11369] EXT4-fs warning (device loop6): empty_inline_dir:1785: bad inline directory (dir #12) - inode 13, rec_len 784, name_len 5inline size 60
[  869.794244][T11243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  869.910377][T11243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  869.965602][T10863] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  870.312665][T11243] team0: Port device team_slave_0 added
[  870.373013][T11243] team0: Port device team_slave_1 added
[  870.442493][T11387] fuse: Bad value for 'fd'
[  870.824211][T11243] batman_adv: batadv0: Adding interface: batadv_slave_0
[  870.844662][T11243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  870.928377][T11243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  870.978927][T11243] batman_adv: batadv0: Adding interface: batadv_slave_1
[  870.994552][T11243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  871.065649][T11243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  873.485626][T11243] hsr_slave_0: entered promiscuous mode
[  873.513159][T11243] hsr_slave_1: entered promiscuous mode
[  874.162008][T11171] 8021q: adding VLAN 0 to HW filter on device bond0
[  874.758184][ T5830] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  874.964194][T11171] 8021q: adding VLAN 0 to HW filter on device team0
[  875.039929][ T5830] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  875.071656][ T5830] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  875.118342][ T5830] usb 7-1: Product: syz
[  875.138717][ T5830] usb 7-1: Manufacturer: syz
[  875.143518][ T5830] usb 7-1: SerialNumber: syz
[  875.181107][ T5830] usb 7-1: config 0 descriptor??
[  875.222894][  T749] bridge0: port 1(bridge_slave_0) entered blocking state
[  875.230459][  T749] bridge0: port 1(bridge_slave_0) entered forwarding state
[  875.307849][ T8824] bridge0: port 2(bridge_slave_1) entered blocking state
[  875.315239][ T8824] bridge0: port 2(bridge_slave_1) entered forwarding state
[  876.335837][T11243] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  876.386748][T11243] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  876.463486][T11243] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  876.558512][T11243] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  877.811707][ T5830] usb 7-1: USB disconnect, device number 4
[  878.095094][T11243] 8021q: adding VLAN 0 to HW filter on device bond0
[  878.399660][T11243] 8021q: adding VLAN 0 to HW filter on device team0
[  878.511445][ T6455] bridge0: port 1(bridge_slave_0) entered blocking state
[  878.518885][ T6455] bridge0: port 1(bridge_slave_0) entered forwarding state
[  878.647101][ T6455] bridge0: port 2(bridge_slave_1) entered blocking state
[  878.654687][ T6455] bridge0: port 2(bridge_slave_1) entered forwarding state
[  878.938411][T11171] 8021q: adding VLAN 0 to HW filter on device batadv0
[  880.048301][T11171] veth0_vlan: entered promiscuous mode
[  880.135192][T11171] veth1_vlan: entered promiscuous mode
[  880.210720][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  880.217317][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  880.638318][T11171] veth0_macvtap: entered promiscuous mode
[  880.685326][T11171] veth1_macvtap: entered promiscuous mode
[  881.061220][T11171] batman_adv: batadv0: Interface activated: batadv_slave_0
[  881.159608][T11171] batman_adv: batadv0: Interface activated: batadv_slave_1
[  881.403715][ T8824] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  881.486456][  T749] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  881.776647][  T749] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  881.883968][  T749] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  882.086535][T11243] 8021q: adding VLAN 0 to HW filter on device batadv0
[  882.693065][T11243] veth0_vlan: entered promiscuous mode
[  882.823338][T11243] veth1_vlan: entered promiscuous mode
[  883.174635][T11243] veth0_macvtap: entered promiscuous mode
[  883.214437][T11243] veth1_macvtap: entered promiscuous mode
[  883.258231][ T5834] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  883.448339][T11243] batman_adv: batadv0: Interface activated: batadv_slave_0
[  883.449468][ T5834] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  883.511918][ T5834] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  883.517445][T11243] batman_adv: batadv0: Interface activated: batadv_slave_1
[  883.548310][ T5834] usb 7-1: Product: syz
[  883.558187][ T5834] usb 7-1: Manufacturer: syz
[  883.578370][ T5834] usb 7-1: SerialNumber: syz
[  883.617487][ T5834] usb 7-1: config 0 descriptor??
[  883.681242][   T32] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  883.744370][   T32] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  883.776176][   T32] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  883.827657][   T32] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  885.340303][T11473] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1209'.
[  885.402396][T11473] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1209'.
[  886.056358][ T5830] usb 7-1: USB disconnect, device number 5
[  887.757694][ T6455] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  887.787166][ T6455] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  888.072792][ T3940] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  888.106071][ T3940] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  891.009436][  T749] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  891.017395][  T749] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  891.427701][ T3940] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  891.464861][ T3940] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  892.560828][T11532] syzkaller0: entered promiscuous mode
[  892.566416][T11532] syzkaller0: entered allmulticast mode
[  894.900196][ T5830] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  895.115815][ T5830] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  895.157249][ T5830] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  895.212064][ T5830] usb 2-1: Product: syz
[  895.238146][ T5830] usb 2-1: Manufacturer: syz
[  895.254033][ T5830] usb 2-1: SerialNumber: syz
[  895.299515][ T5830] usb 2-1: config 0 descriptor??
[  898.131321][ T5830] usb 2-1: USB disconnect, device number 7
[  899.629503][T11580] syzkaller0: entered promiscuous mode
[  899.688794][T11580] syzkaller0: entered allmulticast mode
[  900.588506][T11597] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1230'.
[  902.365607][ T5785] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  902.379895][ T5785] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  902.434028][ T5785] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  902.550853][ T5785] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  902.602367][ T5785] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  904.662334][ T9485] Bluetooth: hci0: command tx timeout
[  905.543401][T11606] chnl_net:caif_netlink_parms(): no params data found
[  906.465481][   T32] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  906.718553][   T32] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  906.744250][ T9485] Bluetooth: hci0: command tx timeout
[  907.025626][   T32] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  907.241697][   T32] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  908.068399][T11606] bridge0: port 1(bridge_slave_0) entered blocking state
[  908.126501][T11606] bridge0: port 1(bridge_slave_0) entered disabled state
[  908.150540][T11606] bridge_slave_0: entered allmulticast mode
[  908.204227][T11606] bridge_slave_0: entered promiscuous mode
[  908.542122][T11606] bridge0: port 2(bridge_slave_1) entered blocking state
[  908.580771][T11606] bridge0: port 2(bridge_slave_1) entered disabled state
[  908.680093][T11606] bridge_slave_1: entered allmulticast mode
[  908.772280][T11606] bridge_slave_1: entered promiscuous mode
[  908.820197][ T9485] Bluetooth: hci0: command tx timeout
[  909.471163][T11606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  909.592600][T11606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  910.203454][   T32] bridge_slave_1: left allmulticast mode
[  910.243938][   T32] bridge_slave_1: left promiscuous mode
[  910.286719][   T32] bridge0: port 2(bridge_slave_1) entered disabled state
[  910.459184][   T32] bridge_slave_0: left allmulticast mode
[  910.465026][   T32] bridge_slave_0: left promiscuous mode
[  910.588942][   T32] bridge0: port 1(bridge_slave_0) entered disabled state
[  910.902481][ T9485] Bluetooth: hci0: command tx timeout
[  912.555475][   T32] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  912.812475][   T32] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  912.920649][   T32] bond0 (unregistering): Released all slaves
[  913.060844][T11606] team0: Port device team_slave_0 added
[  913.460623][T11606] team0: Port device team_slave_1 added
[  913.896644][ T5785] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  913.907551][ T5785] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  913.921575][ T5785] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  913.952500][ T5785] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  913.970719][ T5785] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  914.264509][T11606] batman_adv: batadv0: Adding interface: batadv_slave_0
[  914.287901][T11606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  914.315232][T11606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  914.601257][T11606] batman_adv: batadv0: Adding interface: batadv_slave_1
[  914.668498][T11606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  914.778179][T11606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  915.044701][   T32] hsr_slave_0: left promiscuous mode
[  915.092618][   T32] hsr_slave_1: left promiscuous mode
[  915.117027][   T32] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  915.165564][   T32] batman_adv: batadv0: Removing interface: batadv_slave_0
[  915.208825][   T32] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  915.216319][   T32] batman_adv: batadv0: Removing interface: batadv_slave_1
[  915.313466][   T32] veth1_macvtap: left promiscuous mode
[  915.333078][   T32] veth0_macvtap: left promiscuous mode
[  915.353912][   T32] veth1_vlan: left promiscuous mode
[  915.385613][   T32] veth0_vlan: left promiscuous mode
[  916.098001][ T9485] Bluetooth: hci4: command tx timeout
[  917.740448][   T32] team0 (unregistering): Port device team_slave_1 removed
[  917.841276][   T32] team0 (unregistering): Port device team_slave_0 removed
[  918.178246][ T9485] Bluetooth: hci4: command tx timeout
[  919.335719][T11606] hsr_slave_0: entered promiscuous mode
[  919.390531][T11606] hsr_slave_1: entered promiscuous mode
[  919.429016][T11606] debugfs: 'hsr0' already exists in 'hsr'
[  919.434870][T11606] Cannot create hsr debugfs directory
[  920.268187][ T9485] Bluetooth: hci4: command tx timeout
[  920.538027][ T5830] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  920.759655][ T5830] usb 2-1: Using ep0 maxpacket: 8
[  920.788167][ T5830] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  920.809204][ T5830] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  920.856273][ T5830] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  920.902396][ T5830] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  920.958297][ T5830] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  921.040219][ T5830] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  921.133164][ T5830] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  921.762118][ T5830] usb 2-1: GET_CAPABILITIES returned 0
[  921.770941][ T5830] usbtmc 2-1:16.0: can't read capabilities
[  922.341018][ T9485] Bluetooth: hci4: command tx timeout
[  922.526710][T11671] chnl_net:caif_netlink_parms(): no params data found
[  922.701747][ T5830] usb 2-1: USB disconnect, device number 8
[  923.603748][   T32] bridge_slave_1: left allmulticast mode
[  923.632533][   T32] bridge_slave_1: left promiscuous mode
[  923.668872][   T32] bridge0: port 2(bridge_slave_1) entered disabled state
[  923.710380][   T32] bridge_slave_0: left allmulticast mode
[  923.747464][   T32] bridge_slave_0: left promiscuous mode
[  923.777421][   T32] bridge0: port 1(bridge_slave_0) entered disabled state
[  924.459835][T11747] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  924.472483][T11747] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  924.488377][T11747] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  924.511847][T11747] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  924.525853][T11747] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  924.598948][   T32] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  924.618669][   T32] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  924.638575][   T32] bond0 (unregistering): Released all slaves
[  926.032893][T11606] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  926.371306][T11606] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  926.435351][T11606] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  926.540971][T11671] bridge0: port 1(bridge_slave_0) entered blocking state
[  926.568446][T11671] bridge0: port 1(bridge_slave_0) entered disabled state
[  926.576240][T11671] bridge_slave_0: entered allmulticast mode
[  926.588026][ T9485] Bluetooth: hci2: command tx timeout
[  926.669201][T11671] bridge_slave_0: entered promiscuous mode
[  926.807998][T11606] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  926.883275][T11671] bridge0: port 2(bridge_slave_1) entered blocking state
[  926.908559][T11671] bridge0: port 2(bridge_slave_1) entered disabled state
[  926.916554][T11671] bridge_slave_1: entered allmulticast mode
[  926.975254][T11671] bridge_slave_1: entered promiscuous mode
[  927.340750][   T32] hsr_slave_0: left promiscuous mode
[  927.390237][   T32] hsr_slave_1: left promiscuous mode
[  927.412604][   T32] batman_adv: batadv0: Removing interface: batadv_slave_0
[  927.450261][   T32] batman_adv: batadv0: Removing interface: batadv_slave_1
[  928.202388][   T32] team0 (unregistering): Port device team_slave_1 removed
[  928.303678][   T32] team0 (unregistering): Port device team_slave_0 removed
[  928.661526][ T9485] Bluetooth: hci2: command tx timeout
[  929.194617][T11671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  929.340462][T11671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  929.599796][T11671] team0: Port device team_slave_0 added
[  929.704630][T11671] team0: Port device team_slave_1 added
[  929.757558][   T32] IPVS: stop unused estimator thread 0...
[  929.935327][T11671] batman_adv: batadv0: Adding interface: batadv_slave_0
[  929.947880][T11671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  930.008045][T11671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  930.045664][T11671] batman_adv: batadv0: Adding interface: batadv_slave_1
[  930.077880][T11671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  930.148015][T11671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  930.633003][   T32] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  930.743126][ T9485] Bluetooth: hci2: command tx timeout
[  931.036280][   T32] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  931.155829][T11671] hsr_slave_0: entered promiscuous mode
[  931.175891][T11671] hsr_slave_1: entered promiscuous mode
[  931.197113][T11671] debugfs: 'hsr0' already exists in 'hsr'
[  931.204494][T11671] Cannot create hsr debugfs directory
[  931.215877][T11746] chnl_net:caif_netlink_parms(): no params data found
[  931.306948][   T32] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  931.865149][   T32] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  932.823476][T11747] Bluetooth: hci2: command tx timeout
[  932.937182][   T32] bridge_slave_1: left allmulticast mode
[  932.948105][   T32] bridge_slave_1: left promiscuous mode
[  932.954619][   T32] bridge0: port 2(bridge_slave_1) entered disabled state
[  933.002809][   T32] bridge_slave_0: left allmulticast mode
[  933.014712][   T32] bridge_slave_0: left promiscuous mode
[  933.030793][   T32] bridge0: port 1(bridge_slave_0) entered disabled state
[  933.461249][T11747] Bluetooth: hci5: command 0x0406 tx timeout
[  933.709672][   T32] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  933.739882][   T32] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  933.773263][   T32] bond0 (unregistering): Released all slaves
[  933.865103][T11746] bridge0: port 1(bridge_slave_0) entered blocking state
[  933.898204][T11746] bridge0: port 1(bridge_slave_0) entered disabled state
[  933.918460][T11746] bridge_slave_0: entered allmulticast mode
[  933.953818][T11746] bridge_slave_0: entered promiscuous mode
[  934.002535][T11746] bridge0: port 2(bridge_slave_1) entered blocking state
[  934.010528][T11746] bridge0: port 2(bridge_slave_1) entered disabled state
[  934.026898][T11746] bridge_slave_1: entered allmulticast mode
[  934.039360][T11746] bridge_slave_1: entered promiscuous mode
[  934.506412][T11746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  934.583131][T11606] 8021q: adding VLAN 0 to HW filter on device bond0
[  934.828839][T11746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  935.047547][   T32] hsr_slave_0: left promiscuous mode
[  935.081070][   T32] hsr_slave_1: left promiscuous mode
[  935.106230][   T32] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  935.129124][   T32] batman_adv: batadv0: Removing interface: batadv_slave_0
[  935.151202][   T32] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  935.168128][   T32] batman_adv: batadv0: Removing interface: batadv_slave_1
[  935.241474][   T32] veth1_macvtap: left promiscuous mode
[  935.292713][   T32] veth0_macvtap: left promiscuous mode
[  935.430699][   T32] veth1_vlan: left promiscuous mode
[  935.437045][   T32] veth0_vlan: left promiscuous mode
[  937.373261][   T32] team0 (unregistering): Port device team_slave_1 removed
[  937.536819][   T32] team0 (unregistering): Port device team_slave_0 removed
[  938.335530][T11746] team0: Port device team_slave_0 added
[  938.408419][T11746] team0: Port device team_slave_1 added
[  938.554972][T11606] 8021q: adding VLAN 0 to HW filter on device team0
[  938.752712][T11746] batman_adv: batadv0: Adding interface: batadv_slave_0
[  938.768345][T11746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  938.828301][T11746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  938.878634][T11746] batman_adv: batadv0: Adding interface: batadv_slave_1
[  938.907994][T11746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  938.964798][T11746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  939.143256][ T3940] bridge0: port 1(bridge_slave_0) entered blocking state
[  939.150867][ T3940] bridge0: port 1(bridge_slave_0) entered forwarding state
[  939.243031][ T3940] bridge0: port 2(bridge_slave_1) entered blocking state
[  939.250614][ T3940] bridge0: port 2(bridge_slave_1) entered forwarding state
[  939.576331][T11746] hsr_slave_0: entered promiscuous mode
[  939.611185][T11746] hsr_slave_1: entered promiscuous mode
[  939.640234][T11746] debugfs: 'hsr0' already exists in 'hsr'
[  939.646142][T11746] Cannot create hsr debugfs directory
[  940.393686][T11671] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  940.658449][T11671] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  940.758594][T11671] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  940.813457][T11671] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  941.644982][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  941.659000][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  942.102653][T11900] loop6: detected capacity change from 0 to 4096
[  942.162017][T11900] EXT4-fs: Ignoring removed orlov option
[  942.224992][T11900] EXT4-fs (loop6): Test dummy encryption mode enabled
[  942.363168][T11900] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  942.835853][T11671] 8021q: adding VLAN 0 to HW filter on device bond0
[  942.975890][T11746] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  943.088588][T11746] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  943.221924][T11746] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  943.300680][T11671] 8021q: adding VLAN 0 to HW filter on device team0
[  943.373387][T11746] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  943.449455][ T3940] bridge0: port 1(bridge_slave_0) entered blocking state
[  943.456913][ T3940] bridge0: port 1(bridge_slave_0) entered forwarding state
[  943.534777][ T3940] bridge0: port 2(bridge_slave_1) entered blocking state
[  943.542294][ T3940] bridge0: port 2(bridge_slave_1) entered forwarding state
[  943.637100][T11606] 8021q: adding VLAN 0 to HW filter on device batadv0
[  944.644444][T11606] veth0_vlan: entered promiscuous mode
[  944.793362][T11606] veth1_vlan: entered promiscuous mode
[  945.526313][T11746] 8021q: adding VLAN 0 to HW filter on device bond0
[  945.591053][T11606] veth0_macvtap: entered promiscuous mode
[  945.751357][T11606] veth1_macvtap: entered promiscuous mode
[  945.850358][T11746] 8021q: adding VLAN 0 to HW filter on device team0
[  946.014885][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  946.022460][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  946.085149][T11606] batman_adv: batadv0: Interface activated: batadv_slave_0
[  946.195771][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  946.203372][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  946.301506][T11606] batman_adv: batadv0: Interface activated: batadv_slave_1
[  946.534284][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  946.608891][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  946.621395][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  946.730150][T11671] 8021q: adding VLAN 0 to HW filter on device batadv0
[  946.789537][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  947.556458][T11671] veth0_vlan: entered promiscuous mode
[  947.734237][T11671] veth1_vlan: entered promiscuous mode
[  948.153905][T11671] veth0_macvtap: entered promiscuous mode
[  948.255546][T11671] veth1_macvtap: entered promiscuous mode
[  948.563972][T11671] batman_adv: batadv0: Interface activated: batadv_slave_0
[  948.675439][T11671] batman_adv: batadv0: Interface activated: batadv_slave_1
[  948.803376][T11746] 8021q: adding VLAN 0 to HW filter on device batadv0
[  948.849271][ T6455] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  948.865596][T11952] loop1: detected capacity change from 0 to 2048
[  948.918140][ T6455] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  948.993403][ T6455] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  949.043147][ T6455] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  949.070955][T11960] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  949.189861][   T29] audit: type=1800 audit(1775435210.901:11): pid=11952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1283" name="file1" dev="loop1" ino=15 res=0 errno=0
[  950.093121][T11973] loop1: detected capacity change from 0 to 128
[  950.155777][T11973] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  950.256495][T11973] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  951.663405][T11746] veth0_vlan: entered promiscuous mode
[  951.794963][T11746] veth1_vlan: entered promiscuous mode
[  952.268497][T11746] veth0_macvtap: entered promiscuous mode
[  952.333888][T11746] veth1_macvtap: entered promiscuous mode
[  952.611603][T11746] batman_adv: batadv0: Interface activated: batadv_slave_0
[  952.636282][T10863] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  952.733835][T11746] batman_adv: batadv0: Interface activated: batadv_slave_1
[  952.787996][T12006] loop1: detected capacity change from 0 to 256
[  952.918155][T12006] futex_wake_op: syz.1.1287 tries to shift op by -1; fix this program
[  952.992443][   T32] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  953.038831][   T32] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  953.330433][   T32] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  953.382343][   T32] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  953.536659][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  953.641851][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  954.007285][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  954.062529][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  956.526754][ T3940] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  956.581694][ T3940] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  956.851577][ T9193] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  956.871197][ T9193] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  957.358140][ T5830] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  957.630979][ T5830] usb 4-1: Using ep0 maxpacket: 8
[  957.801662][ T5830] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  957.829788][ T5830] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  957.923940][ T5830] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  957.958829][ T5830] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  958.041636][ T5830] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  958.130139][ T5830] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  958.204345][ T5830] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  958.687524][ T5830] usb 4-1: GET_CAPABILITIES returned 2f
[  958.721747][ T5830] usbtmc 4-1:16.0: can't read capabilities
[  958.739255][T12062] syzkaller0: entered promiscuous mode
[  958.803201][T12062] syzkaller0: entered allmulticast mode
[  960.465280][T12082] loop2: detected capacity change from 0 to 64
[  960.583522][T12080] loop6: detected capacity change from 0 to 2048
[  960.885932][T12086] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  961.160568][   T29] audit: type=1800 audit(1775435222.871:12): pid=12080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1297" name="file1" dev="loop6" ino=15 res=0 errno=0
[  962.418438][ T8609] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  962.426449][ T8609] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  962.686720][T12094] binder: BINDER_SET_CONTEXT_MGR already set
[  962.713372][T12094] binder: 12093:12094 ioctl 4018620d 80000040 returned -16
[  962.842271][ T6455] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  962.898814][ T6455] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  963.694719][T12103] loop6: detected capacity change from 0 to 8
[  963.984470][T12103] SQUASHFS error: Failed to read block 0xdfa: -5
[  964.118842][T12103] SQUASHFS error: Unable to read metadata cache entry [dfa]
[  964.167328][T12103] SQUASHFS error: Failed to read block 0x4e8: -5
[  964.309621][T12103] SQUASHFS error: Failed to read block 0x4de: -5
[  964.390127][T12103] SQUASHFS error: Failed to read block 0x4de: -5
[  964.414641][T12103] SQUASHFS error: Failed to read block 0x4de: -5
[  964.444981][T12103] SQUASHFS error: Failed to read block 0x4de: -5
[  964.549348][T12103] SQUASHFS error: Failed to read block 0x4de: -5
[  964.569451][T12103] SQUASHFS error: Failed to read block 0x4de: -5
[  964.639248][T12103] SQUASHFS error: Failed to read block 0x4de: -5
[  964.655735][T12103] SQUASHFS error: Failed to read block 0x4de: -5
[  964.750076][T12103] SQUASHFS error: Failed to read block 0x4e8: -5
[  964.821915][   T29] audit: type=1800 audit(1775435226.531:13): pid=12103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1302" name="file1" dev="loop6" ino=5 res=0 errno=0
[  967.198052][T12129] syz.2.1306 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  968.097076][ T5834] usb 4-1: USB disconnect, device number 8
[  969.850362][T12147] Bluetooth: MGMT ver 1.23
[  970.509295][T11747] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  970.538201][T11747] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  970.555369][T11747] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  970.599991][T11747] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  970.635813][T11747] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  971.423770][T12166] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1318'.
[  971.637268][T12167] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1318'.
[  971.911612][T12170] binder: 12169:12170 ioctl 4018620d 0 returned -22
[  972.549420][T12179] fuse: Bad value for 'fd'
[  972.738239][T11747] Bluetooth: hci3: command tx timeout
[  973.855344][T12155] chnl_net:caif_netlink_parms(): no params data found
[  974.818446][T11747] Bluetooth: hci3: command tx timeout
[  975.668694][ T8609] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  975.907471][ T8609] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  976.249873][ T8609] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  976.488618][T12215] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1330'.
[  976.516865][T12216] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1330'.
[  976.537201][T12218] binder: 12217:12218 ioctl 4018620d 0 returned -22
[  976.646237][ T8609] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  976.893884][T12155] bridge0: port 1(bridge_slave_0) entered blocking state
[  976.900988][T11747] Bluetooth: hci3: command tx timeout
[  976.904302][T12155] bridge0: port 1(bridge_slave_0) entered disabled state
[  976.947237][T12222] fuse: Bad value for 'fd'
[  976.974169][T12155] bridge_slave_0: entered allmulticast mode
[  977.067192][T12155] bridge_slave_0: entered promiscuous mode
[  977.132484][T12155] bridge0: port 2(bridge_slave_1) entered blocking state
[  977.168324][T12155] bridge0: port 2(bridge_slave_1) entered disabled state
[  977.208513][T12155] bridge_slave_1: entered allmulticast mode
[  977.231245][T12155] bridge_slave_1: entered promiscuous mode
[  977.745051][T12155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  977.921188][T12155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  978.978208][T11747] Bluetooth: hci3: command tx timeout
[  979.028742][T12155] team0: Port device team_slave_0 added
[  979.051125][T12155] team0: Port device team_slave_1 added
[  979.502702][T12256] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1341'.
[  979.601763][T12258] binder: 12257:12258 ioctl 4018620d 0 returned -22
[  979.814267][ T8609] bridge_slave_1: left allmulticast mode
[  979.838071][ T8609] bridge_slave_1: left promiscuous mode
[  979.844634][ T8609] bridge0: port 2(bridge_slave_1) entered disabled state
[  979.923364][ T8609] bridge_slave_0: left allmulticast mode
[  979.941508][ T8609] bridge_slave_0: left promiscuous mode
[  979.978455][ T8609] bridge0: port 1(bridge_slave_0) entered disabled state
[  981.025861][ T8609] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  981.064841][ T8609] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  981.125105][ T8609] bond0 (unregistering): Released all slaves
[  981.406413][T12260] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1343'.
[  981.436092][T12155] batman_adv: batadv0: Adding interface: batadv_slave_0
[  981.444957][T12155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  981.576537][T12155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  981.698646][T12155] batman_adv: batadv0: Adding interface: batadv_slave_1
[  981.757674][T12155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  981.911671][T12155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  981.940773][T12264] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1343'.
[  982.558012][ T5834] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  982.762577][ T5834] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  982.782087][ T5834] usb 4-1: config 0 has no interface number 0
[  982.809819][ T5834] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  982.854713][ T5834] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  982.914635][ T5834] usb 4-1: Product: syz
[  982.938071][ T5834] usb 4-1: Manufacturer: syz
[  982.942795][ T5834] usb 4-1: SerialNumber: syz
[  983.049637][ T5834] usb 4-1: config 0 descriptor??
[  983.118445][T12155] hsr_slave_0: entered promiscuous mode
[  983.173691][T12155] hsr_slave_1: entered promiscuous mode
[  983.212391][T12155] debugfs: 'hsr0' already exists in 'hsr'
[  983.288403][T12155] Cannot create hsr debugfs directory
[  983.330941][ T5834] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state
[  983.398762][ T5834] usb 4-1: Direct firmware load for dvb-usb-ec168.fw failed with error -2
[  983.408638][ T8609] hsr_slave_0: left promiscuous mode
[  983.422831][ T5834] usb 4-1: Falling back to sysfs fallback for: dvb-usb-ec168.fw
[  983.433639][ T8609] hsr_slave_1: left promiscuous mode
[  983.473599][ T8609] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  983.502822][ T8609] batman_adv: batadv0: Removing interface: batadv_slave_0
[  983.563817][ T8609] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  983.623841][ T8609] batman_adv: batadv0: Removing interface: batadv_slave_1
[  983.739946][ T8609] veth1_macvtap: left promiscuous mode
[  983.784848][ T8609] veth0_macvtap: left promiscuous mode
[  983.806900][ T8609] veth1_vlan: left promiscuous mode
[  983.823330][ T8609] veth0_vlan: left promiscuous mode
[  984.170389][T12297] loop5: detected capacity change from 0 to 2048
[  984.330534][T12297] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  984.433435][T12297] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  984.760010][T12297] overlayfs: failed to get index nlink (file1/bus, err=-61)
[  986.344144][ T8609] team0 (unregistering): Port device team_slave_1 removed
[  986.478302][ T8609] team0 (unregistering): Port device team_slave_0 removed
[  986.960353][T12325] kvm: pic: level sensitive irq not supported
[  986.960755][T12325] kvm: pic: level sensitive irq not supported
[  986.999085][T12325] kvm: pic: level sensitive irq not supported
[  987.068638][T12325] kvm: pic: single mode not supported
[  987.075025][T12325] kvm: pic: level sensitive irq not supported
[  987.145334][T12325] kvm: pic: single mode not supported
[  987.151928][T12325] kvm: pic: level sensitive irq not supported
[  987.218670][T12325] kvm: pic: level sensitive irq not supported
[  987.262476][T12325] kvm: pic: single mode not supported
[  987.281155][T12325] kvm: pic: level sensitive irq not supported
[  987.517335][T12311] syzkaller0: entered promiscuous mode
[  987.568536][T12311] syzkaller0: entered allmulticast mode
[  988.145052][T12334] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1358'.
[  988.251818][T12335] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1358'.
[  989.136095][T12344] loop2: detected capacity change from 0 to 2048
[  989.293554][T12344] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  989.420630][T12344] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  989.649412][T12344] overlayfs: failed to get index nlink (file1/bus, err=-61)
[  990.258655][T12155] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  990.352582][T12155] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  990.534810][T12155] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  990.627463][T12155] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  991.856990][T12155] 8021q: adding VLAN 0 to HW filter on device bond0
[  992.058709][T12155] 8021q: adding VLAN 0 to HW filter on device team0
[  992.166760][ T9193] bridge0: port 1(bridge_slave_0) entered blocking state
[  992.174324][ T9193] bridge0: port 1(bridge_slave_0) entered forwarding state
[  992.307937][ T9193] bridge0: port 2(bridge_slave_1) entered blocking state
[  992.315474][ T9193] bridge0: port 2(bridge_slave_1) entered forwarding state
[  992.389946][T12376] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1370'.
[  992.451167][T12378] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1370'.
[  993.941086][T12399] loop6: detected capacity change from 0 to 2048
[  994.132933][T12399] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  994.250784][T12399] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  994.540396][T12399] overlayfs: failed to get index nlink (file1/bus, err=-61)
[  995.238265][T12155] 8021q: adding VLAN 0 to HW filter on device batadv0
[  996.101590][T12436] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1382'.
[  996.165273][T12436] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1382'.
[  997.587272][T12454] loop6: detected capacity change from 0 to 2048
[  997.895128][T12454] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  998.040189][T12454] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  998.673802][T12155] veth0_vlan: entered promiscuous mode
[  998.932274][T12155] veth1_vlan: entered promiscuous mode
[  999.806578][T12155] veth0_macvtap: entered promiscuous mode
[  999.926787][T12155] veth1_macvtap: entered promiscuous mode
[ 1000.222164][T12155] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1000.314845][T12155] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1000.420809][ T8739] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1000.472444][ T8739] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1000.563512][ T8739] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1001.061556][   T32] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1001.663337][T12487] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1395'.
[ 1001.732710][T12488] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1395'.
[ 1003.022902][T12511] loop5: detected capacity change from 0 to 2048
[ 1003.079476][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[ 1003.086518][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[ 1003.180417][T12511] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[ 1003.241364][T12511] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1007.318092][T12556] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1408'.
[ 1007.339519][T12556] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1408'.
[ 1009.006048][T12579] loop5: detected capacity change from 0 to 2048
[ 1009.087964][T12579] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[ 1009.133671][T12579] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1009.738787][ T3940] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1009.963791][ T3940] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1011.468654][ T8609] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1011.531038][ T8609] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1012.571739][T12616] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1418'.
[ 1016.479369][T12671] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1433'.
[ 1018.982191][T12699] binder: 12698:12699 ioctl 4018620d 0 returned -22
[ 1019.369061][T12712] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1446'.
[ 1022.483424][T12754] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1459'.
[ 1022.549683][T12754] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1459'.
[ 1024.802818][T12781] binder: 12780:12781 ioctl 4018620d 0 returned -22
[ 1025.618018][ T9485] Bluetooth: hci0: command 0x0406 tx timeout
[ 1025.768410][T12799] binder: 12797:12799 ioctl 4018620d 0 returned -22
[ 1026.251918][T12804] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1471'.
[ 1026.418937][T12808] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1471'.
[ 1029.609563][T12844] binder: 12843:12844 ioctl 4018620d 0 returned -22
[ 1030.528464][T12852] binder: 12850:12852 ioctl 4018620d 0 returned -22
[ 1030.718178][T12854] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1486'.
[ 1030.792129][T12856] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1486'.
[ 1033.340616][T12891] binder: 12889:12891 ioctl c0306201 0 returned -14
[ 1039.327236][T12938] binder: 12937:12938 ioctl c0306201 0 returned -14
[ 1040.980744][T11747] Bluetooth: hci4: command 0x0406 tx timeout
[ 1042.199542][T12964] syzkaller0: entered promiscuous mode
[ 1042.205225][T12964] syzkaller0: entered allmulticast mode
[ 1042.564014][T12974] binder: 12971:12974 ioctl c0306201 0 returned -14
[ 1044.041174][ T5834] usb 4-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-ec168.fw' (status -110). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[ 1044.222663][ T5834] dvb_usb_ec168 4-1:0.1: probe with driver dvb_usb_ec168 failed with error -110
[ 1044.300066][ T5834] usb 4-1: USB disconnect, device number 9
[ 1047.818320][T13018] syzkaller0: entered promiscuous mode
[ 1047.823919][T13018] syzkaller0: entered allmulticast mode
[ 1051.218586][T11747] Bluetooth: hci2: command 0x0406 tx timeout
[ 1054.140252][T13071] syzkaller0: entered promiscuous mode
[ 1054.187916][T13071] syzkaller0: entered allmulticast mode
[ 1059.619214][T13120] binder: 13119:13120 ioctl 4018620d 0 returned -22
[ 1059.926406][T13126] syzkaller0: entered promiscuous mode
[ 1059.948265][T13126] syzkaller0: entered allmulticast mode
[ 1062.488964][T13153] binder: BINDER_SET_CONTEXT_MGR already set
[ 1062.548474][T13153] binder: 13152:13153 ioctl 4018620d 80000040 returned -16
[ 1063.099181][T13157] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1579'.
[ 1064.669298][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[ 1064.676166][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[ 1065.799144][T13170] syzkaller0: entered promiscuous mode
[ 1065.804819][T13170] syzkaller0: entered allmulticast mode
[ 1066.149763][T13175] binder: 13174:13175 ioctl 4018620d 0 returned -22
[ 1068.749227][T13201] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1593'.
[ 1071.645749][T13216] binder: 13215:13216 ioctl 4018620d 0 returned -22
[ 1071.656257][T13217] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1596'.
[ 1071.860223][T13219] syzkaller0: entered promiscuous mode
[ 1071.901694][T13219] syzkaller0: entered allmulticast mode
[ 1072.456896][T13229] fuse: Bad value for 'fd'
[ 1073.122685][T13244] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1606'.
[ 1075.933828][T13262] binder: 13260:13262 ioctl c0306201 800004c0 returned -22
[ 1076.531321][T13265] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1612'.
[ 1076.596188][T13269] syzkaller0: entered promiscuous mode
[ 1076.602000][T13269] syzkaller0: entered allmulticast mode
[ 1077.609054][T13278] fuse: Bad value for 'fd'
[ 1078.568464][T13287] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1619'.
[ 1081.309728][T13305] syzkaller0: entered promiscuous mode
[ 1081.315352][T13305] syzkaller0: entered allmulticast mode
[ 1082.016066][T13316] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1626'.
[ 1082.999207][T13326] fuse: Bad value for 'fd'
[ 1083.970812][T13339] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1633'.
[ 1088.468914][T13382] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1646'.
[ 1088.586773][T13387] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1647'.
[ 1095.884928][T13430] binder: BINDER_SET_CONTEXT_MGR already set
[ 1095.940482][T13430] binder: 13427:13430 ioctl 4018620d 80000040 returned -16
[ 1097.300935][T11747] Bluetooth: hci3: command 0x0406 tx timeout
[ 1097.319804][T13440] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1662'.
[ 1098.432927][T13445] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1662'.
[ 1102.383336][T13464] syzkaller0: entered promiscuous mode
[ 1102.471523][T13464] syzkaller0: entered allmulticast mode
[ 1106.420396][T13492] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1678'.
[ 1106.509892][T13497] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1678'.
[ 1106.681808][T11747] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1106.698861][T11747] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1106.707512][T11747] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1106.753646][T11747] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1106.780789][T11747] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1108.927952][T11747] Bluetooth: hci1: command tx timeout
[ 1110.981031][T11747] Bluetooth: hci1: command tx timeout
[ 1111.155796][T13531] syzkaller0: entered promiscuous mode
[ 1111.201578][T13531] syzkaller0: entered allmulticast mode
[ 1112.194459][T13499] chnl_net:caif_netlink_parms(): no params data found
[ 1113.058343][T11747] Bluetooth: hci1: command tx timeout
[ 1113.743387][T13554] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1693'.
[ 1113.860101][T13556] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1693'.
[ 1114.171018][ T8739] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1115.098940][ T8739] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1115.137953][T11747] Bluetooth: hci1: command tx timeout
[ 1115.583888][ T8739] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1115.910050][ T8739] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1116.004152][T13499] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1116.015483][T13499] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1116.064571][T13499] bridge_slave_0: entered allmulticast mode
[ 1116.092665][T13499] bridge_slave_0: entered promiscuous mode
[ 1116.173033][T13499] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1116.208418][T13499] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1116.216155][T13499] bridge_slave_1: entered allmulticast mode
[ 1116.271503][T13499] bridge_slave_1: entered promiscuous mode
[ 1116.704436][T13499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1116.929147][T13499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1117.591057][T13589] syzkaller0: entered promiscuous mode
[ 1117.596785][T13589] syzkaller0: entered allmulticast mode
[ 1117.777302][T13499] team0: Port device team_slave_0 added
[ 1117.864215][T13499] team0: Port device team_slave_1 added
[ 1118.608518][T13499] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1118.629143][T13499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1118.707904][T13499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1118.772517][T13499] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1118.837817][T13499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1118.968093][T13499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1119.142896][T13609] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1707'.
[ 1119.162051][T13614] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1707'.
[ 1119.168857][ T5830] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[ 1119.962239][T13499] hsr_slave_0: entered promiscuous mode
[ 1120.002287][T13499] hsr_slave_1: entered promiscuous mode
[ 1120.033244][ T5830] usb 10-1: config 0 has an invalid interface number: 1 but max is 0
[ 1120.062908][ T5830] usb 10-1: config 0 has no interface number 0
[ 1120.095999][ T8739] bridge_slave_1: left allmulticast mode
[ 1120.105672][ T5830] usb 10-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[ 1120.105817][ T5830] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1120.105938][ T5830] usb 10-1: Product: syz
[ 1120.106028][ T5830] usb 10-1: Manufacturer: syz
[ 1120.106124][ T5830] usb 10-1: SerialNumber: syz
[ 1120.115594][ T5830] usb 10-1: config 0 descriptor??
[ 1120.184287][ T8739] bridge_slave_1: left promiscuous mode
[ 1120.227555][ T8739] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1120.301168][ T8739] bridge_slave_0: left allmulticast mode
[ 1120.312583][ T8739] bridge_slave_0: left promiscuous mode
[ 1120.319777][ T8739] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1120.500325][ T5830] usb 10-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state
[ 1120.531959][ T5830] usb 10-1: Direct firmware load for dvb-usb-ec168.fw failed with error -2
[ 1120.588897][ T5830] usb 10-1: Falling back to sysfs fallback for: dvb-usb-ec168.fw
[ 1121.554968][ T8739] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1121.701442][ T8739] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1121.775432][ T8739] bond0 (unregistering): Released all slaves
[ 1123.765486][T13656] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1718'.
[ 1124.077210][T13656] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1718'.
[ 1124.123278][T13651] syzkaller0: entered promiscuous mode
[ 1124.143971][T13651] syzkaller0: entered allmulticast mode
[ 1125.316749][ T8739] hsr_slave_0: left promiscuous mode
[ 1125.350929][ T8739] hsr_slave_1: left promiscuous mode
[ 1125.366293][ T8739] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1125.431298][ T8739] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1125.476013][ T8739] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1125.525981][ T8739] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1125.651953][ T8739] veth1_macvtap: left promiscuous mode
[ 1125.657796][ T8739] veth0_macvtap: left promiscuous mode
[ 1125.712270][ T8739] veth1_vlan: left promiscuous mode
[ 1125.768709][ T8739] veth0_vlan: left promiscuous mode
[ 1125.962366][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[ 1125.969559][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[ 1129.818453][ T8739] team0 (unregistering): Port device team_slave_1 removed
[ 1129.869193][ T8739] team0 (unregistering): Port device team_slave_0 removed
[ 1130.653697][T13702] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1731'.
[ 1130.697302][T13704] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1731'.
[ 1132.074599][T13499] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1132.208836][T13499] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1132.339263][T13499] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1132.394612][T13499] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1132.481780][T13729] syzkaller0: entered promiscuous mode
[ 1132.487443][T13729] syzkaller0: entered allmulticast mode
[ 1133.851565][T13499] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1135.146962][T13499] 8021q: adding VLAN 0 to HW filter on device team0
[ 1135.849701][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1135.857181][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1135.873749][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1135.881258][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1137.700676][T13773] binder: 13772:13773 ioctl 4018620d 0 returned -22
[ 1138.110367][T13778] syzkaller0: entered promiscuous mode
[ 1138.116033][T13778] syzkaller0: entered allmulticast mode
[ 1138.542863][T13499] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1143.248594][T13824] binder: 13822:13824 ioctl 4018620d 0 returned -22
[ 1143.481666][T13499] veth0_vlan: entered promiscuous mode
[ 1143.679278][T13499] veth1_vlan: entered promiscuous mode
[ 1143.808664][T13828] syzkaller0: entered promiscuous mode
[ 1143.814345][T13828] syzkaller0: entered allmulticast mode
[ 1144.503101][T13499] veth0_macvtap: entered promiscuous mode
[ 1144.931359][T13499] veth1_macvtap: entered promiscuous mode
[ 1145.505499][T13499] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1145.734469][T13499] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1146.988826][ T3940] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1147.045236][ T3940] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1147.203696][ T3940] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1147.244526][ T3940] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1147.866528][T13858] kvm: pic: single mode not supported
[ 1147.905116][T13858] kvm: pic: non byte read
[ 1147.926924][T13867] binder: 13865:13867 ioctl 4018620d 0 returned -22
[ 1148.023545][T13858] kvm: pic: non byte read
[ 1148.064081][T13858] kvm: pic: non byte read
[ 1148.108670][T13858] kvm: pic: non byte read
[ 1148.113718][T13858] kvm: pic: non byte read
[ 1148.180870][T13858] kvm: pic: non byte read
[ 1148.219004][T13858] kvm: pic: non byte read
[ 1148.224017][T13858] kvm: pic: non byte read
[ 1148.298723][T13858] kvm: pic: non byte read
[ 1148.318503][T13858] kvm: pic: non byte read
[ 1149.211725][T13880] syzkaller0: entered promiscuous mode
[ 1149.254926][T13880] syzkaller0: entered allmulticast mode
[ 1153.430383][T13916] binder: 13914:13916 ioctl c0306201 0 returned -14
[ 1154.341417][T13926] kvm: pic: single mode not supported
[ 1154.357507][T13926] kvm: pic: non byte read
[ 1154.422860][T13926] kvm: pic: non byte read
[ 1154.431197][T13926] kvm: pic: non byte read
[ 1154.468798][T13926] kvm: pic: non byte read
[ 1154.502883][T13926] kvm: pic: non byte read
[ 1154.522295][T13926] kvm: pic: non byte read
[ 1154.543130][T13926] kvm: pic: non byte read
[ 1154.578688][T13926] kvm: pic: non byte read
[ 1154.583694][T13926] kvm: pic: non byte read
[ 1154.621778][T13926] kvm: pic: non byte read
[ 1155.191469][T13939] syzkaller0: entered promiscuous mode
[ 1155.217592][T13939] syzkaller0: entered allmulticast mode
[ 1156.371878][T13949] fuse: Bad value for 'group_id'
[ 1156.390861][T13949] fuse: Bad value for 'group_id'
[ 1156.446056][T13463] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1156.572306][T13463] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1157.074239][   T85] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1157.099018][   T85] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1158.729249][T13964] binder: 13963:13964 ioctl c0306201 0 returned -14
[ 1159.092472][T13968] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1673'.
[ 1159.628131][ T8246] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[ 1159.832795][ T8246] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[ 1159.867887][ T8246] usb 3-1: config 0 has no interface number 0
[ 1159.918501][ T8246] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[ 1159.948179][ T8246] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1160.002183][ T8246] usb 3-1: Product: syz
[ 1160.006553][ T8246] usb 3-1: Manufacturer: syz
[ 1160.037859][ T8246] usb 3-1: SerialNumber: syz
[ 1160.065609][ T8246] usb 3-1: config 0 descriptor??
[ 1160.208554][T13984] syzkaller0: entered promiscuous mode
[ 1160.214220][T13984] syzkaller0: entered allmulticast mode
[ 1160.306448][T13983] kvm: pic: single mode not supported
[ 1160.306541][T13983] kvm: pic: level sensitive irq not supported
[ 1160.356416][T13983] kvm: pic: single mode not supported
[ 1160.378546][ T8246] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state
[ 1160.413662][T13983] kvm: pic: single mode not supported
[ 1160.413743][T13983] kvm: pic: level sensitive irq not supported
[ 1160.438918][T13983] kvm: pic: single mode not supported
[ 1160.469842][T13983] kvm: pic: single mode not supported
[ 1160.475544][T13983] kvm: pic: level sensitive irq not supported
[ 1160.548705][T13983] kvm: pic: single mode not supported
[ 1160.569503][T13983] kvm: pic: single mode not supported
[ 1160.575293][T13983] kvm: pic: level sensitive irq not supported
[ 1160.620305][T13983] kvm: pic: single mode not supported
[ 1160.641567][T13990] fuse: Bad value for 'group_id'
[ 1160.654021][T13983] kvm: pic: single mode not supported
[ 1160.654197][T13983] kvm: pic: level sensitive irq not supported
[ 1160.668307][T13990] fuse: Bad value for 'group_id'
[ 1160.682110][T13983] kvm: pic: single mode not supported
[ 1160.683288][T13983] kvm: pic: level sensitive irq not supported
[ 1160.704933][T13983] kvm: pic: level sensitive irq not supported
[ 1160.740055][T13983] kvm: pic: level sensitive irq not supported
[ 1160.781927][T13983] kvm: pic: level sensitive irq not supported
[ 1160.848599][T13983] kvm: pic: level sensitive irq not supported
[ 1164.121475][T14010] binder: 14009:14010 ioctl c0306201 0 returned -14
[ 1164.528534][T14016] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1809'.
[ 1165.340402][T14025] syzkaller0: entered promiscuous mode
[ 1165.346079][T14025] syzkaller0: entered allmulticast mode
[ 1165.500810][ T9485] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1165.532818][ T9485] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1165.552960][ T9485] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1165.572292][ T9485] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1165.588728][ T9485] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1165.801197][T14032] fuse: Bad value for 'group_id'
[ 1165.806353][T14032] fuse: Bad value for 'group_id'
[ 1166.028000][ T5834] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[ 1166.107248][T14040] pic_ioport_write: 12 callbacks suppressed
[ 1166.107334][T14040] kvm: pic: single mode not supported
[ 1166.114143][T14040] pic_ioport_write: 1 callbacks suppressed
[ 1166.114225][T14040] kvm: pic: level sensitive irq not supported
[ 1166.188324][T14040] kvm: pic: single mode not supported
[ 1166.195470][T14040] kvm: pic: single mode not supported
[ 1166.201426][T14040] kvm: pic: level sensitive irq not supported
[ 1166.209453][T14040] kvm: pic: single mode not supported
[ 1166.217121][T14040] kvm: pic: single mode not supported
[ 1166.223087][T14040] kvm: pic: level sensitive irq not supported
[ 1166.249923][ T5834] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[ 1166.293716][T14040] kvm: pic: single mode not supported
[ 1166.294767][T14040] kvm: pic: single mode not supported
[ 1166.301647][T14040] kvm: pic: level sensitive irq not supported
[ 1166.355889][T14040] kvm: pic: single mode not supported
[ 1166.362371][ T5834] usb 4-1: config 0 has no interface number 0
[ 1166.409663][ T5834] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[ 1166.420914][T14040] kvm: pic: single mode not supported
[ 1166.421007][T14040] kvm: pic: level sensitive irq not supported
[ 1166.447958][ T5834] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1166.470590][T14040] kvm: pic: single mode not supported
[ 1166.471790][T14040] kvm: pic: level sensitive irq not supported
[ 1166.490998][T14040] kvm: pic: level sensitive irq not supported
[ 1166.500387][ T5834] usb 4-1: Product: syz
[ 1166.541156][T14040] kvm: pic: level sensitive irq not supported
[ 1166.543075][ T5834] usb 4-1: Manufacturer: syz
[ 1166.568522][T14040] kvm: pic: level sensitive irq not supported
[ 1166.570046][T14040] kvm: pic: level sensitive irq not supported
[ 1166.601553][ T5834] usb 4-1: SerialNumber: syz
[ 1167.009906][T14049] fuse: Bad value for 'fd'
[ 1167.296089][ T5834] usb 4-1: config 0 descriptor??
[ 1167.677975][ T9485] Bluetooth: hci5: command tx timeout
[ 1167.822053][ T5834] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state
[ 1169.698729][T11747] Bluetooth: hci5: command tx timeout
[ 1169.957839][T14028] chnl_net:caif_netlink_parms(): no params data found
[ 1170.178503][   T85] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1170.373060][T14078] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1823'.
[ 1170.626384][   T85] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1171.202880][   T85] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1171.472173][T14087] syzkaller0: entered promiscuous mode
[ 1171.539205][T14087] syzkaller0: entered allmulticast mode
[ 1171.687333][   T85] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1171.777860][T11747] Bluetooth: hci5: command tx timeout
[ 1172.734509][T14028] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1173.695648][T14028] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1173.710067][T14028] bridge_slave_0: entered allmulticast mode
[ 1173.719403][T14028] bridge_slave_0: entered promiscuous mode
[ 1173.737887][T14028] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1173.746198][T14028] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1173.865437][T11747] Bluetooth: hci5: command tx timeout
[ 1174.548420][T14028] bridge_slave_1: entered allmulticast mode
[ 1174.639238][T14028] bridge_slave_1: entered promiscuous mode
[ 1175.403818][T14028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1175.474242][T14028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1175.886938][T14141] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1838'.
[ 1176.088763][   T85] bridge_slave_1: left allmulticast mode
[ 1176.129055][   T85] bridge_slave_1: left promiscuous mode
[ 1176.168055][   T85] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1176.270348][   T85] bridge_slave_0: left allmulticast mode
[ 1176.298892][   T85] bridge_slave_0: left promiscuous mode
[ 1176.318995][   T85] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1179.943441][   T85] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1180.196974][   T85] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1180.223288][   T85] bond0 (unregistering): Released all slaves
[ 1180.272536][T14028] team0: Port device team_slave_0 added
[ 1180.338569][T14028] team0: Port device team_slave_1 added
[ 1181.133313][T14028] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1181.192002][T14028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1181.317817][T14028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1181.456727][T14028] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1181.498005][T14028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1181.612656][T14028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1182.261773][ T8322] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[ 1182.278114][ T8246] usb 3-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-ec168.fw' (status -2). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[ 1182.279268][ T5830] usb 10-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-ec168.fw' (status -110). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[ 1182.294385][ T5834] usb 4-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-ec168.fw' (status -2). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[ 1182.383478][ T5830] dvb_usb_ec168 10-1:0.1: probe with driver dvb_usb_ec168 failed with error -110
[ 1182.393427][ T8246] dvb_usb_ec168 3-1:0.1: probe with driver dvb_usb_ec168 failed with error -2
[ 1182.445904][ T5830] usb 10-1: USB disconnect, device number 9
[ 1182.473094][   T85] hsr_slave_0: left promiscuous mode
[ 1182.494287][ T8322] usb 9-1: config 0 has an invalid interface number: 1 but max is 0
[ 1182.538754][ T8322] usb 9-1: config 0 has no interface number 0
[ 1182.541025][ T8246] usb 3-1: USB disconnect, device number 2
[ 1182.555190][ T5834] dvb_usb_ec168 4-1:0.1: probe with driver dvb_usb_ec168 failed with error -2
[ 1182.568531][ T8322] usb 9-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[ 1182.595129][   T85] hsr_slave_1: left promiscuous mode
[ 1182.613152][ T8322] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1182.630486][   T85] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1182.660880][ T8322] usb 9-1: Product: syz
[ 1182.660907][ T5834] usb 4-1: USB disconnect, device number 10
[ 1182.697827][   T85] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1182.729870][ T8322] usb 9-1: Manufacturer: syz
[ 1182.734685][ T8322] usb 9-1: SerialNumber: syz
[ 1182.771903][   T85] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1182.834222][   T85] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1182.884123][ T8322] usb 9-1: config 0 descriptor??
[ 1183.003646][   T85] veth1_macvtap: left promiscuous mode
[ 1183.083986][   T85] veth0_macvtap: left promiscuous mode
[ 1183.238434][   T85] veth1_vlan: left promiscuous mode
[ 1183.336410][ T8322] usb 9-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state
[ 1183.356329][   T85] veth0_vlan: left promiscuous mode
[ 1183.489298][ T8322] usb 9-1: Direct firmware load for dvb-usb-ec168.fw failed with error -2
[ 1184.036902][T14229] fuse: Bad value for 'fd'
[ 1184.487880][ T8322] usb 9-1: Falling back to sysfs fallback for: dvb-usb-ec168.fw
[ 1187.329067][   T85] team0 (unregistering): Port device team_slave_1 removed
[ 1187.400834][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[ 1187.407914][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[ 1187.462386][   T85] team0 (unregistering): Port device team_slave_0 removed
[ 1187.953662][T14279] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1865'.
[ 1188.393580][T14028] hsr_slave_0: entered promiscuous mode
[ 1188.433530][T14028] hsr_slave_1: entered promiscuous mode
[ 1188.474893][T14028] debugfs: 'hsr0' already exists in 'hsr'
[ 1188.498522][T14028] Cannot create hsr debugfs directory
[ 1189.188168][T12505] usb 10-1: new high-speed USB device number 10 using dummy_hcd
[ 1189.419352][T12505] usb 10-1: config 0 has an invalid interface number: 1 but max is 0
[ 1189.456297][T12505] usb 10-1: config 0 has no interface number 0
[ 1189.518896][T12505] usb 10-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[ 1189.570005][T12505] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1190.787946][T12505] usb 10-1: Product: syz
[ 1190.792402][T12505] usb 10-1: Manufacturer: syz
[ 1190.797260][T12505] usb 10-1: SerialNumber: syz
[ 1191.441829][T12505] usb 10-1: config 0 descriptor??
[ 1191.699925][T12505] usb 10-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state
[ 1193.384428][T14028] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1193.461625][T14331] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1878'.
[ 1193.510016][T14028] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1193.640026][T14028] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1193.713570][T14330] syzkaller0: entered promiscuous mode
[ 1193.731961][T14330] syzkaller0: entered allmulticast mode
[ 1193.781484][T14028] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1197.133032][T14028] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1197.367247][T14028] 8021q: adding VLAN 0 to HW filter on device team0
[ 1197.440307][ T6455] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1197.445768][T14363] fuse: Bad value for 'fd'
[ 1197.447951][ T6455] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1197.637859][T12567] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[ 1197.649872][ T8609] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1197.657531][ T8609] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1197.901878][T12567] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[ 1197.942881][T12567] usb 3-1: config 0 has no interface number 0
[ 1197.997084][T12567] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[ 1198.029615][T12567] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1198.095259][T12567] usb 3-1: Product: syz
[ 1198.117836][T12567] usb 3-1: Manufacturer: syz
[ 1198.122631][T12567] usb 3-1: SerialNumber: syz
[ 1198.190375][T12567] usb 3-1: config 0 descriptor??
[ 1198.499196][T12567] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state
[ 1201.339596][T14399] fuse: Unknown parameter 'grou00000000000000000000'
[ 1201.392222][T14398] syzkaller0: entered promiscuous mode
[ 1201.402677][T14398] syzkaller0: entered allmulticast mode
[ 1201.439366][T14400] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1895'.
[ 1201.873856][T14028] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1205.709958][T14443] fuse: Unknown parameter 'grou00000000000000000000'
[ 1206.309234][T14447] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1908'.
[ 1206.463939][T14028] veth0_vlan: entered promiscuous mode
[ 1206.516651][T14452] syzkaller0: entered promiscuous mode
[ 1206.528555][T14452] syzkaller0: entered allmulticast mode
[ 1206.884457][T14028] veth1_vlan: entered promiscuous mode
[ 1207.354895][T14028] veth0_macvtap: entered promiscuous mode
[ 1207.464370][T14028] veth1_macvtap: entered promiscuous mode
[ 1207.683241][T14028] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1207.776752][T14028] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1208.474809][ T9193] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1209.494387][ T6455] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1209.538123][ T6455] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1210.030367][ T6455] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1210.783888][T14487] fuse: Unknown parameter 'grou00000000000000000000'
[ 1211.679906][T14501] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1923'.
[ 1215.600119][T14539] fuse: Unknown parameter 'group_i00000000000000000000'
[ 1216.218771][T14551] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1935'.
[ 1216.482416][T14555] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1936'.
[ 1218.208638][T14430] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[ 1219.381778][T14430] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[ 1219.409134][T14430] usb 4-1: config 0 has no interface number 0
[ 1219.459632][T14430] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[ 1219.502284][T14430] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1219.540627][T14430] usb 4-1: Product: syz
[ 1219.550718][T14430] usb 4-1: Manufacturer: syz
[ 1219.566111][T14430] usb 4-1: SerialNumber: syz
[ 1219.659502][T14430] usb 4-1: config 0 descriptor??
[ 1219.973405][T14430] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[ 1220.046858][T14430] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1220.080301][T14430] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[ 1220.109899][T14430] usb 4-1: media controller created
[ 1220.263026][T14430] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1220.421185][ T9193] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1220.472218][ T9193] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1220.549760][T14588] fuse: Unknown parameter 'group_i00000000000000000000'
[ 1220.627554][T14430] i2c i2c-1: ec100: i2c rd failed=-71 reg=33
[ 1220.868107][ T8609] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1220.912932][ T8609] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1221.348502][T14430] usb 4-1: USB disconnect, device number 11
[ 1221.485277][T14598] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1949'.
[ 1224.308454][T14616] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1953'.
[ 1225.266030][T14635] fuse: Unknown parameter 'group_i00000000000000000000'
[ 1225.318479][T14430] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[ 1225.484677][T14637] syzkaller0: entered promiscuous mode
[ 1225.521094][T14637] syzkaller0: entered allmulticast mode
[ 1225.530145][T14430] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[ 1225.550087][T14430] usb 4-1: config 0 has no interface number 0
[ 1225.608845][T14430] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[ 1225.663824][T14430] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1225.706442][T14430] usb 4-1: Product: syz
[ 1225.727808][T14430] usb 4-1: Manufacturer: syz
[ 1225.732639][T14430] usb 4-1: SerialNumber: syz
[ 1225.763679][T14430] usb 4-1: config 0 descriptor??
[ 1226.051816][T14430] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[ 1226.093752][T14430] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1226.151478][T14646] Bluetooth: hci0: invalid length 0, exp 2 for type 9
[ 1226.162575][T14430] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[ 1226.201808][T14430] usb 4-1: media controller created
[ 1226.467163][T14430] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1226.529453][T14649] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1963'.
[ 1226.769987][T14430] i2c i2c-1: ec100: i2c rd failed=-71 reg=33
[ 1229.580633][T14430] usb 4-1: USB disconnect, device number 12
[ 1229.812262][T14675] fuse: Unknown parameter 'group_id00000000000000000000'
[ 1230.154420][T14680] syzkaller0: entered promiscuous mode
[ 1230.209036][T14680] syzkaller0: entered allmulticast mode
[ 1230.742793][ T9485] Bluetooth: hci1: command 0x0406 tx timeout
[ 1230.809373][T14690] Bluetooth: hci0: invalid length 0, exp 2 for type 9
[ 1231.207442][T14695] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1978'.
[ 1234.800749][T14723] fuse: Unknown parameter 'group_id00000000000000000000'
[ 1235.470343][T14734] syzkaller0: entered promiscuous mode
[ 1235.476755][T14734] syzkaller0: entered allmulticast mode
[ 1236.228747][T14743] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1992'.
[ 1237.884642][T14764] fuse: Unknown parameter 'group_id00000000000000000000'
[ 1240.284380][ T5830] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[ 1240.457822][ T5830] usb 4-1: Using ep0 maxpacket: 8
[ 1240.483469][ T5830] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[ 1240.527823][ T5830] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[ 1240.597540][ T5830] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1240.662303][ T5830] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1240.732219][ T5830] usb 4-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1240.822124][ T5830] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1240.854597][ T5830] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1240.934805][ T5830] usbtmc 4-1:16.0: bulk endpoints not found
[ 1240.976079][T14794] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2008'.
[ 1241.331896][T14430] usb 4-1: USB disconnect, device number 13
[ 1241.881779][T14809] fuse: Bad value for 'user_id'
[ 1241.922066][T14809] fuse: Bad value for 'user_id'
[ 1242.389345][T14812] pic_ioport_write: 32 callbacks suppressed
[ 1242.389416][T14812] kvm: pic: single mode not supported
[ 1242.395536][T14812] pic_ioport_write: 11 callbacks suppressed
[ 1242.395612][T14812] kvm: pic: level sensitive irq not supported
[ 1242.508776][T14812] kvm: pic: single mode not supported
[ 1242.592940][T14812] kvm: pic: single mode not supported
[ 1242.669175][T14812] kvm: pic: single mode not supported
[ 1242.674805][T14812] kvm: pic: level sensitive irq not supported
[ 1242.746149][T14812] kvm: pic: single mode not supported
[ 1243.954623][T14828] syzkaller0: entered promiscuous mode
[ 1244.080861][T14828] syzkaller0: entered allmulticast mode
[ 1246.844040][T14854] fuse: Bad value for 'user_id'
[ 1246.870425][T14854] fuse: Bad value for 'user_id'
[ 1246.904217][T14851] loop9: detected capacity change from 0 to 2048
[ 1247.186472][T14859] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1247.457949][   T29] audit: type=1800 audit(1775435509.131:14): pid=14851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2028" name="file1" dev="loop9" ino=15 res=0 errno=0
[ 1248.840262][T12567] usb 3-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-ec168.fw' (status -2). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[ 1248.860661][T12505] usb 10-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-ec168.fw' (status -2). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[ 1248.890271][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[ 1248.896861][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[ 1248.949041][ T8322] usb 9-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-ec168.fw' (status -110). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[ 1248.990218][T12567] dvb_usb_ec168 3-1:0.1: probe with driver dvb_usb_ec168 failed with error -2
[ 1249.021989][T12505] dvb_usb_ec168 10-1:0.1: probe with driver dvb_usb_ec168 failed with error -2
[ 1249.047506][ T8322] dvb_usb_ec168 9-1:0.1: probe with driver dvb_usb_ec168 failed with error -110
[ 1249.132077][T12567] usb 3-1: USB disconnect, device number 3
[ 1249.147121][T12505] usb 10-1: USB disconnect, device number 10
[ 1249.203360][ T8322] usb 9-1: USB disconnect, device number 2
[ 1249.214503][T14035] udevd[14035]: setting owner of /dev/bus/usb/003/003 to uid=0, gid=0 failed: No such file or directory
[ 1249.456966][T14876] kvm: pic: single mode not supported
[ 1249.457055][T14876] kvm: pic: level sensitive irq not supported
[ 1249.507285][T14876] kvm: pic: single mode not supported
[ 1249.551977][T14876] kvm: pic: single mode not supported
[ 1249.605442][T14876] kvm: pic: single mode not supported
[ 1249.612313][T14876] kvm: pic: level sensitive irq not supported
[ 1249.716849][T14876] kvm: pic: single mode not supported
[ 1249.751218][T14876] kvm: pic: single mode not supported
[ 1249.756858][T14876] kvm: pic: level sensitive irq not supported
[ 1249.862578][T14876] kvm: pic: single mode not supported
[ 1250.042210][T14876] kvm: pic: single mode not supported
[ 1250.048102][T14876] kvm: pic: level sensitive irq not supported
[ 1250.846575][T14884] syzkaller0: entered promiscuous mode
[ 1250.932541][T14884] syzkaller0: entered allmulticast mode
[ 1252.744914][T14901] fuse: Bad value for 'user_id'
[ 1252.781975][T14901] fuse: Bad value for 'user_id'
[ 1253.157155][T14905] loop8: detected capacity change from 0 to 2048
[ 1253.394543][T14915] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1253.523694][   T29] audit: type=1800 audit(1775435515.231:15): pid=14905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2043" name="file1" dev="loop8" ino=15 res=0 errno=0
[ 1256.824051][T14952] fuse: Bad value for 'fd'
[ 1263.730056][T15033] loop9: detected capacity change from 0 to 8
[ 1263.862284][T15033] SQUASHFS error: Failed to read block 0xdfa: -5
[ 1263.900710][T15033] SQUASHFS error: Unable to read metadata cache entry [dfa]
[ 1263.962545][T15033] SQUASHFS error: Failed to read block 0x4e8: -5
[ 1264.024018][T15033] SQUASHFS error: Failed to read block 0x4de: -5
[ 1264.115464][T15033] SQUASHFS error: Failed to read block 0x4de: -5
[ 1264.363577][T15033] SQUASHFS error: Failed to read block 0x4de: -5
[ 1264.690851][T15033] SQUASHFS error: Failed to read block 0x4de: -5
[ 1264.739591][T15033] SQUASHFS error: Failed to read block 0x4de: -5
[ 1264.796828][T15033] SQUASHFS error: Failed to read block 0x4de: -5
[ 1264.816287][T15033] SQUASHFS error: Failed to read block 0x4de: -5
[ 1264.846629][T15033] SQUASHFS error: Failed to read block 0x4de: -5
[ 1264.888548][T15033] SQUASHFS error: Failed to read block 0x4e8: -5
[ 1264.895821][   T29] audit: type=1800 audit(1775435526.601:16): pid=15033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.2081" name="file1" dev="loop9" ino=5 res=0 errno=0
[ 1268.411527][T15089] loop9: detected capacity change from 0 to 2048
[ 1268.558022][T15089] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1268.666789][   T29] audit: type=1800 audit(1775435530.361:17): pid=15089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2098" name="bus" dev="loop9" ino=1367 res=0 errno=0
[ 1269.682763][ T8322] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 1269.879480][ T8322] usb 5-1: Using ep0 maxpacket: 32
[ 1269.912595][ T8322] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[ 1269.961595][ T8322] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1270.086317][ T8322] usb 5-1: config 0 descriptor??
[ 1270.383119][ T8322] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[ 1270.488751][ T8322] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1270.550320][ T8322] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[ 1270.602975][T15104] =====================================================
[ 1270.610623][T15104] BUG: KMSAN: kernel-infoleak in _copy_to_user+0xcc/0x120
[ 1270.618382][T15104]  _copy_to_user+0xcc/0x120
[ 1270.623061][T15104]  i2cdev_ioctl_smbus+0x586/0x660
[ 1270.628766][T15104]  compat_i2cdev_ioctl+0x48f/0xb40
[ 1270.634073][T15104]  __ia32_compat_sys_ioctl+0x7f9/0x1270
[ 1270.642881][T15104]  ia32_sys_call+0x2854/0x4360
[ 1270.648036][T15104]  __do_fast_syscall_32+0x17f/0x3f0
[ 1270.653641][T15104]  do_fast_syscall_32+0x37/0x80
[ 1270.659274][T15104]  do_SYSENTER_32+0x1f/0x30
[ 1270.663956][T15104]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1270.670666][T15104] 
[ 1270.673063][T15104] Uninit was stored to memory at:
[ 1270.681672][T15104]  __i2c_smbus_xfer+0x25a0/0x3120
[ 1270.686866][T15104]  i2c_smbus_xfer+0x2d8/0x480
[ 1270.692981][T15104]  i2cdev_ioctl_smbus+0x4a1/0x660
[ 1270.698408][T15104]  compat_i2cdev_ioctl+0x48f/0xb40
[ 1270.703707][T15104]  __ia32_compat_sys_ioctl+0x7f9/0x1270
[ 1270.709644][T15104]  ia32_sys_call+0x2854/0x4360
[ 1270.714548][T15104]  __do_fast_syscall_32+0x17f/0x3f0
[ 1270.720106][T15104]  do_fast_syscall_32+0x37/0x80
[ 1270.725197][T15104]  do_SYSENTER_32+0x1f/0x30
[ 1270.730035][T15104]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1270.736538][T15104] 
[ 1270.739146][T15104] Local variable msgbuf1.i created at:
[ 1270.744741][T15104]  __i2c_smbus_xfer+0x853/0x3120
[ 1270.750372][T15104]  i2c_smbus_xfer+0x2d8/0x480
[ 1270.755189][T15104] 
[ 1270.757741][T15104] Bytes 0-1 of 2 are uninitialized
[ 1270.763001][T15104] Memory access of size 2 starts at ffff8880650afc76
[ 1270.769933][T15104] Data copied to user address 0000000080000080
[ 1270.776235][T15104] 
[ 1270.782353][T15104] CPU: 0 UID: 0 PID: 15104 Comm: syz.4.2104 Not tainted syzkaller #0 PREEMPT(full) 
[ 1270.793051][T15104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1270.803404][T15104] =====================================================
[ 1270.810643][T15104] Disabling lock debugging due to kernel taint
[ 1270.820978][T15104] Kernel panic - not syncing: kmsan.panic set ...
[ 1270.827535][T15104] CPU: 1 UID: 0 PID: 15104 Comm: syz.4.2104 Tainted: G    B               syzkaller #0 PREEMPT(full) 
[ 1270.838676][T15104] Tainted: [B]=BAD_PAGE
[ 1270.842902][T15104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1270.853066][T15104] Call Trace:
[ 1270.856418][T15104]  <TASK>
[ 1270.859434][T15104]  __dump_stack+0x26/0x30
[ 1270.863922][T15104]  dump_stack_lvl+0x50/0x1c0
[ 1270.868665][T15104]  ? dump_stack+0x12/0x25
[ 1270.873158][T15104]  dump_stack+0x1e/0x25
[ 1270.877715][T15104]  vpanic+0x7b4/0x1430
[ 1270.881971][T15104]  panic+0x15d/0x160
[ 1270.886069][T15104]  kmsan_report+0x31a/0x320
[ 1270.890820][T15104]  ? kmsan_internal_check_memory+0x1e8/0x240
[ 1270.896974][T15104]  ? kmsan_copy_to_user+0xef/0x190
[ 1270.902264][T15104]  ? _copy_to_user+0xcc/0x120
[ 1270.907095][T15104]  ? i2cdev_ioctl_smbus+0x586/0x660
[ 1270.912468][T15104]  ? compat_i2cdev_ioctl+0x48f/0xb40
[ 1270.917926][T15104]  ? __ia32_compat_sys_ioctl+0x7f9/0x1270
[ 1270.923824][T15104]  ? ia32_sys_call+0x2854/0x4360
[ 1270.928894][T15104]  ? __do_fast_syscall_32+0x17f/0x3f0
[ 1270.934438][T15104]  ? do_fast_syscall_32+0x37/0x80
[ 1270.939625][T15104]  ? do_SYSENTER_32+0x1f/0x30
[ 1270.944475][T15104]  ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1270.951148][T15104]  ? __pfx_az6027_i2c_xfer+0x10/0x10
[ 1270.956686][T15104]  ? __pfx_az6027_i2c_xfer+0x10/0x10
[ 1270.962133][T15104]  ? __i2c_transfer+0x1179/0x3280
[ 1270.967335][T15104]  ? kmsan_get_metadata+0xf1/0x160
[ 1270.972630][T15104]  ? kmsan_internal_set_shadow_origin+0x7a/0x110
[ 1270.979177][T15104]  ? kmsan_get_metadata+0xf1/0x160
[ 1270.984430][T15104]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 1270.990397][T15104]  ? __i2c_smbus_xfer+0x1f6c/0x3120
[ 1270.995757][T15104]  ? kmsan_get_metadata+0xf1/0x160
[ 1271.000999][T15104]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 1271.006961][T15104]  kmsan_internal_check_memory+0x1e8/0x240
[ 1271.012963][T15104]  kmsan_copy_to_user+0xef/0x190
[ 1271.018080][T15104]  _copy_to_user+0xcc/0x120
[ 1271.022758][T15104]  i2cdev_ioctl_smbus+0x586/0x660
[ 1271.027991][T15104]  compat_i2cdev_ioctl+0x48f/0xb40
[ 1271.033303][T15104]  ? __pfx_compat_i2cdev_ioctl+0x10/0x10
[ 1271.039108][T15104]  __ia32_compat_sys_ioctl+0x7f9/0x1270
[ 1271.044843][T15104]  ? fpregs_restore_userregs+0x213/0x3e0
[ 1271.050764][T15104]  ? kmsan_get_metadata+0xf1/0x160
[ 1271.056012][T15104]  ? kmsan_get_metadata+0xf1/0x160
[ 1271.061266][T15104]  ia32_sys_call+0x2854/0x4360
[ 1271.066214][T15104]  __do_fast_syscall_32+0x17f/0x3f0
[ 1271.071607][T15104]  do_fast_syscall_32+0x37/0x80
[ 1271.076635][T15104]  do_SYSENTER_32+0x1f/0x30
[ 1271.081301][T15104]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1271.087803][T15104] RIP: 0023:0xf7f23f6c
[ 1271.091979][T15104] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[ 1271.111746][T15104] RSP: 002b:00000000f53e650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[ 1271.120305][T15104] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000720
[ 1271.128378][T15104] RDX: 0000000080000140 RSI: 0000000000000000 RDI: 0000000000000000
[ 1271.136451][T15104] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1271.144528][T15104] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1271.152592][T15104] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1271.160694][T15104]  </TASK>
[ 1271.164173][T15104] Kernel Offset: disabled
[ 1271.168567][T15104] Rebooting in 86400 seconds..