last executing test programs:

6m51.179327532s ago: executing program 4 (id=524):
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x210000, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000100)={0x79, 0x0, 0xc99})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x7f, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0xfff, 0xb3, 0x39da], 0x30000, 0x2010d3})
setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f00000000c0)=ANY=[@ANYBLOB="010401"], 0x9)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

6m50.896684442s ago: executing program 4 (id=527):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="210000000d00000006000000040000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), ""/16, <r1=>0x0, 0x0, 0x0, 0x0, 0x6, 0x5, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xca, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0), 0x8, 0x34, 0x8, 0x8, &(0x7f0000000640)}}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="1700000007000000c25e00000500000000200000", @ANYRES32=r0, @ANYBLOB="0200"/20, @ANYRES32=r1, @ANYRES32, @ANYBLOB="01000000050000000100000000000000000000000000000000000000c25c904b13780666090e54c4055c98"], 0x50)
sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x281}, 0xc, &(0x7f0000001380)={&(0x7f0000001400)={0x80, 0x0, 0x200, 0x70bd28, 0x8, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x4}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x40448a0)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336bef1be8a68a628452b83", 0x9e}, {0x0}, {&(0x7f00000005c0)="f2b314", 0x3}], 0x3}}], 0x1, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000001040)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8d0}, 0x4040800)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x340}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000500)='q', 0x1}, {&(0x7f0000000540)="a22caaffe37d4620d1a9427c00787b63b26c5b83ef8ce8f8fe823d77c642dd73361c1f115fdce55de92bede6e812191b9780a257fa4fb3", 0x37}, {&(0x7f0000000600)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e847f403535371a24ce2a19c3898aca95be", 0x8b}, {&(0x7f00000006c0)="138b9f8300af1d793c8e", 0xa}, {&(0x7f0000000700)="e59c889c8be9e17c21882a76c6907239d44f6a0efb65359c6a8e5ede789aa995461e91d2", 0x24}, {&(0x7f0000000e80)="0e9129a2bae0d093a9c5091f0926391174e5aff7420b47b0cf1a8bbd7bb239460a6b26eb4f86fa48acdf54294bee3567a8ff0ed4f912a1aa059d62286db3e045dc31db292f5ab26a8f1466d90f0f98ff1a0e2b1018604ef19bc70a", 0x5b}], 0x6}}], 0x2, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0xeeef0000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x1, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x0, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x6, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]})
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r5 = accept4(r4, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

6m50.479080748s ago: executing program 4 (id=528):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x268, 0xffffff7a, 0xffffffff, 0x268, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x41}, 0x6, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x7d}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x2, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360)

6m49.369486122s ago: executing program 4 (id=534):
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f00000005c0)="0f0013c441fc5a9b31aacf330f3235001000000f3066ba2100ec66baf80cb8402a2484ef66bafc0c66edc4a1f5fbf1f3450f2a89040000006642f4c4e21dbf7939b805000000b97499008c0f01c148b804000000000000000f23c00f21f835020004000f23f8", 0xffffffffffffffd5}], 0x1, 0xe8, 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000240)="e7736a", 0x3}], 0x1)
ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000300)={0xc9, 0x0, 0xc})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008801}, 0x41)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

6m48.149263366s ago: executing program 4 (id=540):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r0, &(0x7f0000000140)="96", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40))
openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0xff00000000000000, 0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002}, 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

6m46.740778578s ago: executing program 4 (id=544):
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9c)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
close(r0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
shutdown(r0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000100))
close(0xffffffffffffffff)

6m31.490967164s ago: executing program 32 (id=544):
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9c)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
close(r0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
shutdown(r0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000000100))
close(0xffffffffffffffff)

1m27.62029163s ago: executing program 1 (id=1732):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x1)
setpriority(0x1, 0xffffffffffffffff, 0x3fa)
sched_setaffinity(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
fchown(r3, 0x0, 0x0)
r4 = open(0x0, 0x1a1342, 0x162)
write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[@ANYBLOB='1-6', @ANYRESDEC=r4], 0x31)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x4000)

1m26.525771177s ago: executing program 1 (id=1733):
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r1, 0x0, 0xc8, 0x0, 0x0)
setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$igmp(0x2, 0x3, 0x2)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000100)='net/route\x00')
syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fe07124081173809499b010203010902"], 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0))
syz_open_dev$usbfs(&(0x7f00000001c0), 0x73, 0xa02)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x54}}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1m19.745433519s ago: executing program 1 (id=1744):
r0 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x25, 0x8, @void}, 0x10)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, r0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000200)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x2, 0x7, 0xfffffe0001000001, 0xfa11, 0xffffffff}, 0x0)
syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02)
r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x82002, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000080)=0x40000)
ioctl$SNDCTL_DSP_STEREO(r3, 0xc0045003, &(0x7f00000000c0)=0x1)
syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1)
r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x22000, 0x0)
ioctl$SNDCTL_DSP_GETCAPS(r4, 0x8004500f, &(0x7f00000002c0))
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x184, 0x2, 0x10, 0xf1, 0x100000001, 0x1, 0x5, 0x0, 0x29, 0x0, 0x2, 0x0, 0xbd9], 0xffff1001, 0x53101})

1m15.491863238s ago: executing program 1 (id=1755):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r6)
socket$unix(0x1, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

1m12.9539032s ago: executing program 1 (id=1758):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat2(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a80)=@bpf_ext={0x1c, 0x3, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x982}}, 0x0, 0x6, 0x18, &(0x7f0000000400)=""/24, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xe8b5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000)
ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000080)=0x2)

1m11.042580982s ago: executing program 1 (id=1761):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$kcm(0x11, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0x5, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x3, 0xd73, 0x20000000, 0x80, 0x4401}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r8)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4)

1m4.237123199s ago: executing program 3 (id=1776):
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff)
write$binfmt_script(r4, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2)
close(r4)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0xfea7)

1m1.870944922s ago: executing program 5 (id=1777):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$SIOCPNENABLEPIPE(r0, 0x80108907, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8)
ftruncate(0xffffffffffffffff, 0x8800000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r2, 0x0)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendto(r3, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, 0x0, &(0x7f0000000040))

1m1.671100416s ago: executing program 3 (id=1778):
socket(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000080)=0x2)
syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x181a00)
read$usbmon(r3, 0x0, 0x0)

1m0.770323577s ago: executing program 5 (id=1779):
socket$netlink(0x10, 0x3, 0x0)
syz_clone(0x30209000, 0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
connect$pppl2tp(r3, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x3, 0x0, 0x0, 0x0, {0xa, 0xfffe, 0x0, @local}}}, 0x32)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
close_range(r5, 0xffffffffffffffff, 0x0)

59.987277269s ago: executing program 3 (id=1780):
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{}]}, 0x82, 0x499, &(0x7f0000000840)="$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")
write$P9_RUNLINKAT(0xffffffffffffffff, 0x0, 0x0)
sync()
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x84042, 0x1fb)
ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611)
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0x2008002, &(0x7f0000000500)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@delalloc}, {@quota}], [{@euid_lt}, {@euid_gt}, {@pcr={'pcr', 0x3d, 0x37}}, {@appraise}]}, 0x1, 0x56a, &(0x7f0000001180)="$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")
syz_mount_image$exfat(0x0, &(0x7f0000000200)='./file0\x00', 0xe1c00, 0x0, 0x0, 0x0, &(0x7f0000000000))
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
recvfrom$inet_nvme(0xffffffffffffffff, 0x0, 0x0, 0x40000000, 0x0, 0x0)

59.76912573s ago: executing program 5 (id=1781):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x4088080, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
prctl$PR_SET_KEEPCAPS(0x59616d61, 0x1ffffffffffffff)
bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0)
syz_emit_ethernet(0x5a, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_ep_write(0xffffffffffffffff, 0x8d, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x24000040)

58.451431278s ago: executing program 5 (id=1782):
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_open_dev$admmidi(0x0, 0x20, 0x0)
r3 = fsopen(&(0x7f00000004c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x0)
symlinkat(&(0x7f0000000000)='.\x00', r4, &(0x7f0000000140)='./file0\x00')
readlinkat(r4, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)=""/204, 0xcc)

58.243139481s ago: executing program 3 (id=1783):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$kcm(0x11, 0x3, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)
socket$tipc(0x1e, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x7cff, 0xbd, 0x1, 0x6, 0x1ff}, 0x2}}]}, {0xffffffffffffff04}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x8}], 0x2}, 0x5)

56.670843743s ago: executing program 5 (id=1784):
syz_init_net_socket$rose(0xb, 0x5, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x9, 0x2, 0x4, "9e8d2745585f6400d1de4d18f5127e7a79a91a95161c79fb72b118bbcca20a4f", 0x34565559})
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f0000000040)='./file2\x00', 0x3200400, &(0x7f0000000180)=ANY=[], 0xfe, 0xa7f, &(0x7f0000000b40)="$eJzs3U2MG1cBAOA33vUmmwTilIQuSWgTftry091ms4SfCJqquRA1FbdKEZcoTUtEGhCpBK0qkeTEjVZVuPIjTuVQAUJqLyjqiUslGolLxaFw4EAUpEocoJC4yvo9r/3W1tib9dpef5/0/PbNG897Mzsej2fmvReAiVVZfl1amitCuPrmq8f/+cA/Zu9MebQ5R235dbolVQ0hFDE9nS3vvalGfOv9l850iouwuPya0uHJm833bg8hXAoHwrVQC3uvXn/l7cUnTl4+ceXgO68dvTGYtQcAgMnyrWtHl/b87c/7dn3w+n3Hwpbm9HR+XovpHfG8/1g88U/n/5XQni5aQquZbL7pGCrZfFMd5mstp5rNN92l/JlsudVm/r62+baUlD/VMq3TesM4S/txLRSV+bZ0pTI/3/hNHpZ/188U8xfOnX/m4pAqCqy7f98fQjgwwBAGvPwhhXq9/uPNum6rw4368OsgDCLUdw718APQlN8vXOVSfmXh7jSXNt1b+Tcfq3R+P6yDjd7/lT9e5f/6ciz/1F8HWg8mw2b9/krrlT5HO2I6v4+QP7/U7+c/LW8qvkxnyy/T7T7CuNxf6FbPqQ2ux1p1q3++X2xWX49x2g7fyPJbPz/5/3Rc/sdAZ/8Z9PX/EQsHRqAOmzpUR6AOQs+hPuwDEDCyVp6ba6hHKT9/ri/P31KSv7Ukf7Ykf1tJ/vaSfJhkv3/+p+HlYuV3fv6bvt/rYek620di/NE+65Nfj+y3/Py5337dbfn588Qwyt44/dTZrzx96nrj+f+iuf/fjvv7gZiuxc/WtThDul6YX1dvPvtfay+n0mW+e7L6pONGZUuav94ocXf7fMXuleWEluPMqnrMtb9vZ7f59rfPV8vmm41ha1bf/PxkW/a+dP6Rjqtpe01n61vN1mMmq0c6ruyKcV4PWIu0P3Z7/j/tn3OhWjxz7vzZR2I67ad/mqpuuTP9UOtCf7MxdQfuTq/tf+ZCe/ufHc3p1UrrcWHnyvSi9bhQy6YvNpLN2+Rp+uGYTt9z35maXZ4+f+Z7559e75WHCXfxhRe/e/r8+bM/8Ef6Y9Zm8Yc/hn1kAgZt4fnnvr9w8YUXHz733Olnzz579sLhI0cOLy4e+erhpYXl8/qF1rN7YDNZ+dIfdk0AAAAAAAAAAACAXv3wxPHrf3nry+822v+vtP9L7f/Tk7+p/f9Psvb/eTv51A4+tQPc1SF/edy9N9rrMZPNV43hY1l9d2fl7Mne9/EYN8fxi+3/U3v7vF/XVJ97s+l5/71pvqw7gVX9pcxkfZDk4wV+KsZXYvyrAENUzHaeHOO2/q3D6v6t076e+qfQL8V4Sv+3tDekfkxS++9u/Tql4/+uDagj628jmhMOex2Bzv418v1/t5yJD70uExBs54kK9bpRPIDRMOzxP9N1zxRf+OM3t94Jababj7UfL/P+S+FujPr4k8ofhfE/i3WrRHP8u56Ofx16V2/r57n30RX++/Mb77YUG/b2evy9nK166gd6d3mZrT6I5af1fzD0Vn79l1n5+Q2hHv0vK39bj+WvWv/9ayv//7H8tNke+nSv5TdqnO+B+XXjdP8vv26c3MrWP/Xt2ff6r3GgxtuxfJhk3ceZ7XUE29E0lPF/O9wfXav8OYwvxXQ6EKbnHPJv5H7rn56vSN8De7LlFyXfb+MyTnE3kz7+79diXPZ5SOP/pv2x1iFdaUlXO2zbcd9XYLN5b+Tv/41ZuDQCdRBGNMz2M3/jkboB16lerw/2glaJoRbO0Lf/sO8+D7v8YW//Mvn4v/k5fD7+byX7AZGP/5u/Px//N8/Px9fL8/Pxf/PtmY//m+ffmy03v4I9V5L/iZL8vSX5+1byZzvl7y95/ydL8g+GeE7SJf++kvffX5J/T0n+VEn+Z0ryP1uS/0BJ/kMl+Z8ryd/sUnuUSV1/mGR5+zyff5gc6f5Pt8//7pJ8YHz97PVDj5/63bdrjfb/M83fa+k+3rGYrsbfzj+K6fy+d2hJ38l7K6b/nuWP+vUOmCR5/xn59/uDJfnA+ErPefl8wwQqOvfY02u/Vd3O8xkvn4/xF2L8xRg/HOP5GC/E+FCMFzeofgzG47/9w9GXi5Xf+zuz/F6fJy8q7b/s836iDvdYn/z6QL/Ps+f9+PXrbstfY3MwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAoaksvy4tzRUhXH3z1eNPnTy3cGfKo805asuv0y2pavN9ITwS46kY/yL+cev9l860xrdjXITFUISiOT08ebNZ0vYQwqVwIFwLtbD36vVX3l584uTlE1cOvvPa0RuD2wIAAACw+X0YAAD//7e9G+Y=")
mount(0x0, 0x0, 0x0, 0x90000, 0x0)
syz_mount_image$msdos(&(0x7f00000003c0), &(0x7f0000000340)='.\x00', 0x126a4b5, &(0x7f0000004140)=ANY=[@ANYRES16, @ANYRES64, @ANYRES16, @ANYRES16, @ANYRESDEC, @ANYRES16, @ANYRES16, @ANYBLOB="9a7f40ad4c7145903a868b9020e1e8899ed5747db23004fc9d248900abcaa6b065cf0800930a71dcd8b8955d93c78b9d4e5e06d8d5c9ac9b75d177754d6eba23e6d2be546c0dfecdf61baf732950a5729c01fbdc11e36cb411be200a9135657acd97d21ee46aac313ebdddd9265af16558dd3e5ba4836659a6abfe08aad84276acf949bdaa34bdf7f7b2dfb2fe8b9d6d225dcecebeb6e15f649994728842bd99fc94897d24315ac2d17bf6c2acfbfa8464d80f36304f88b906b78ab359be3479db5b0e7555f04416807c2202d6551f2425440be741dbe053e0bfeb845623e722a9293843f1cf0a71119dcadf7e353af4da52aed3086d6e5a095774248be9a1b1418dec1c03a2cb0ece0840ebeaaf7b67867da45943b700e2d6dad775ae6f33e55aa86ca84c336c91e3b7d7224f7a9a10d5b45a6ce0769d875415bea136b5508e5e0a88290792da3b11b2284a3d757c301cec78b55d3fcfa073615ccb089f66c5b9a5c84f6c1bb78c3370c4687eab260711fa05525687c7709e15cddea061f70798cbf940ad929eb80f33ad8bb4fcd322dd0558f111d7d01351147976b425a27e573402490055054cf3d80bebde6a89f3086170633740f08780aac3a73f17eaeda8deb642c2887962596b4d78c0ffffb28d0e64073b0641f89cf83a69afaaea03ba6070838fdbdaccb81630a6fdaa77fc10146013b9fd79e965a320daf81c1a51f032a3f462f2740e579eb116cad80b4e233326bf94fea52184517accf608b1fbfb395942869841b9ca0f314beff6b2dc0a74d7599012274b24775f0382e72907c1f0c571b994f048c0266feb775d893fec84e5733cd66a96cd45b60f63743b17b05d99c427a2d00a27fef17cadf128059a2e227b80701755b0bc706f32255c8cd619fa995cc7649f28337361a62cff46669fa4cf095a2d148987a9fafa6e1fb9f59b5ac5ff10a4c62e0187a3c75a983f7f5211142c6c09170a13e29c2044e5568bda8055cee4722e445e83ea01307c42cbe63a5bc529e1200e5874f7500275abacd6cc0e3bf8fd38ab7bab39f54d180d60892e2e3a713a3e654c89b8e9ba4474909991844514c04b655c66ccd6f2a17e29ff69d343ebac7ac5e1510ad4ff52e6a932a97bb0d814259da6545022152dd63f06219a1d66ec2278b694876ed6195b0543b8c9289b8438e8ee57dd38bcdb045a6fc4cede28effaa0354afbd4190fcbccd9a0e91508e4399e0e30a0bfdedcc19454b6dd7c2785a6e4fe74a0ece1d683ad07d76eafec02fb0d88debfeacd3531413185da0ffa4fb9b5e6d5a916f7bb5d51efc8ab61e4953fc6b2d1e670769f3ca56d51b804ceb118278acc90422e1f51e448a27d2fe4f93c88cf7c6148474bf650902dd6dd96541044113d244cf938150ec426e7ed63e1f153bbe328f4232552b104c8dee60b0c4e4c25f2605e97cc6f4263d32e8340be2d167137682373ae4cd501fdc9c5359b40f52803a5e4c0e04a5de0412c5cbd4d05e6135a1209d4b2dff50d39e481f1d1b01ed71004fb0c18e736af8ab176f833a439a85c9132e6d2296f665771c6a284eadc08c94ffa520dcc37fd6426c152364699514b15d4df6732fff39834e8ba29688b19db27a970d9d7fbee973c76bee04fb6164963969ebde0f785606781d63726736d8b60a713d5f72207a23f6f00420fdf24d14c069f36a7e236620481cc7a63857cc1355bac8d4f9a3f32785ad4d9d81719077a816b33b98006c322ee473aa9f8f83fae86a4d421104b298a9e42357c44b773e3504b3f9eb5b29330411b776b78fdb6dd9713dd1aee0cc9c7ee8bd23a50d4c8babaf6d74bc25377009a8c57c941f80e58ac08c93a275656cbad3864df9e791305d66103ab30983b07553ede5b5d5b0aab157f805eb6c11c75dd7f297c2cc9110551131a797164dec422b13799f1c261464c765a62c201eb9c8686eee94642d59f429cd137cba0d1a8126dcdfc28ea5c201526c61164a86f480dfde0c60fdf6afd3cd64719de1d89b5a362e058054a9db73aaffac324b04e8903060e1f14ca4ac31c82183066e6d581685efbe3452a20a665166b03808220770d66051971b61d8114376e22a4511cae9fdf7bbed68bb9f45b57eee1c15775730ef1434731d7b82a7cbcd6155396263984edfcea62196189da0ba9908d7d5ef514d75a3e1d4ae42654365083873fc4ce969fa4fac51d640be8d948bb9464d1a7e494c8df98bd5a569ff7fe1aca542c34610148a8f1dc9d60ff0f761270577f286a362f32164184ffce3ad132637e9f0381e9ce76a11f296f9d1e835cdc44926104e1df4d0a282a84b9fbc23064bfcab0d221c6e3124ae8ba6022e62f170dcc2d655f73b40f83fd65f5c705bc1f9e8df13adeadff9e1fe4660a55be7dc969cfffaed607190162dcd09d0cd86a297b22142b88f0eb28dd1a45152a4f4f2dca0d96d39fa594349040f486cd486af619b7083236cf90324cddc6f1ed0f6a103c8d936d7f2f31d420ef50931838e66721bff7494617b6b4bc385f3e51b3f81cf5d6953ac7fddc0f3466682911b38bc7f082e0c18e3ae0badf7f3fd3e186ebc2bab71fa26f77bb14cd97e6761c93c8c25887c0ef1f3dc1d8d86ce0fb73190f66f4deca77977e8d6064bfeeac3fad2bc50488c144e2a1a82fcc1e1c12ac54bf3e2d468e8f53241e4a6ad9e466746a45b053452ded5caa20461881d78d8235e986ba8b77e83601655d2650bf1b64ce17c75314216b43bbd1101a2e12e57525bb7d3b136a70635bdac8af24367a24ce2fe2a72ef2b0e56ff8dc62a82946f86f9b6b1418a89b1971372dfe7d5ce2e6611befff721f04a19bce7f90b1551a4cdead136662c50513fdde6f9d4a199c3907ed8799f231f54dd8347c71d829ff8ddc5d96b5aac2fe58652c81ff7f54e2568119dff2763ef435aa420630dacc7e9414340ee8688f46c7a8ab96d860937641042b3cdf6857ff1d2d4e47cec1f23e65fe541f38cb96b132666f999002e89cd1896ca58c2e63b87382e1a6c1ee9afa56cf3ba923fa9c989e20bff313f37252632fdcff03fbdd2d334ee93baf75c1bdae30feaa81fb2ac1b63c42dda06f20ce8c9d003eb3efed7931def342fb874fce92763f6f477c7f589b75d2129419fc4cb7a8893a1d3f94533ed9fdf9f21fc254fd80aa74750833d390327a2107e761240928d35a36c5eaca61fd848116b8dd7ec8157928bc2dd87f7756aa517cf6a61d2009fd4ba0579ca3b3129cfd5403546f5ab6d0575799a008fc67da9658427636d8f806d9b8cad64aee438d0a9b45957f31a5afe3ed894add9acadfd347246099c6ff0b4ec6f19ac61557daf8739e528185ab1468ca72d6d72e4f026e371e540b774b6576df3014dcc9e91b2cd1f0403a4fcaa6627b22682bb54f92150c2917acaee1972b2b03bc2bd37fdb9e7352c654d94ef196b7229e4da5ee62b7d395ecdd5177f2563242ea49ff78151a4a816a94e89b03f41c7e6684f8be3e5802e9338e7cbd3b43f708c062f944a59f31b02ca9a177e6b681accee8785d2467d2d78636be4330febaa3f6907db07992a2de74e459f3ae8ee6adae20cbc75aabd2d5d3424de0ddcc3ddd981c3a4966c57f8fdb1c42db87395f0bc800ff8ddb4c228a7d793d8a997885494a8578f5433d3f82886ea573641bf16065efbc25718c88f7277ce04c94af560d8deb7968496f849d3fad78741272b08bf7aec3f3c777428d3b8b897333ae5afb6823af63cb7347601ee2e8d4e21b21a12e6d42f66a1aac26d296bc68a998d8ba179ed5f756c2efd8a7acc0e3f08093bb4a83d37f15b4fe07c90858058ad1ff0e21bb7bf4363079c5d452dba5972b21c8f41daf6f11a51d321d3c1d544190238036d907d965ff469ce4895eb7675f3e94a15f83b837b892a40390d87d76e9b15eda02366299d3dd93943466bceeb2f9e465adccc08e1a02c3ac01815931627ed327e0ffbe09563221a365b88c4f2449bd3634920d5bfbde7cdc92c4cb16a579f35f07dafc87ce6ce4de7bf9e8ff0e80b81cdab8f2164a25a0a6929679ce9ae0dc2ac7ed41a787446676f091597551dc2e8c054224bac6652bba5fb675c0b2c94d2faac160f11b7b96fc96415aca8a47fa03658b8afa24b6bd97f7dbeead9ae5f7ec1cb0d000055f41a5043c6c4c97212398b168b5cb9ee650726eabcc31b6712e815fdaae77885350884fb36d6d5444d5e5500a7d636d4eced14b9d411c765b36a4be06ca9be2965d6d6c06c3b6bcb38babeb2999ee71295d48926bf6e39363fabf74de5e57aa0b59f9dddeca142d0c50ab7ff198196c69c971e6ab591220f4e42d6525e2dbd99b6c57949c854e4ee0e4581f9e3e160b3f66b01f23f4d0472c0a1f307837ac8dac0a257d09ab82975148dcd764fe6359a5f21b9cbe2ae7b9b277489a8b3285b8289a84ff854508b4488ffcf68f47ec7a5c18a8c3d06e26b32f754ac74ea8e93a554147fd3b3daf1fbe924e2e389cac13a5f80f3a21dbd250d3917f7b5acfc739a63f2b3d6b3f099efb4be7a842215c89fc87bd8550d11ba2a4af0f111ab124503b26feeae3be3ee24168dd4553a226b9168edb11c3e61bc850adf995b4d6f1aace6db0b91f805c3d1789a3e6b470e5470968f429d5b05c8f76ca2981e37f5bde4ad00a09755c76774ead7d93f3f41255b1d56152e3699b133b2e0b277427c992323d1b4d8c438434e9e901ddd43788f80cb9a975e9dd1671ce16be5ff8033d5da824f00fd78b540edbcd69a2e9aff03e31af9afefb809434f52b4a1239fdd241ed3a268258addde19d1724155a1a4c877bd59b0659b7a786886f6ffcb5999d1f9c007d615020926f7165a9ddd4aaa3c7b631d30cc951e328131d99282ac06a18f88373092320ea5308f06c376e711aecda4cd1c2b639d9ea7a2613d4e9eaa9a0ef72774fdec622f7d131b45135d577897bf686b460a371083070139ea544bda15012251d6c8e7163c25412841faefba76765648ca7cd1b423403a654b6b5754588ae6c309621477db20f7c9236af1e422ebd3fb6d6a712e7a6d00d58416b7d65a53a2514bf51bedfe9207f16a4d79418600389b98ea8b9e06b8da708a86f191e567925af39a09ac9fd7902e8f8e77567baf1b75c05ba1eb7089b424801405afc982a8d79c80fada184a1ab3bab526a3b0a5e20d2dc6bcdd2c5cb7c49f735f3e8f4d36a388ca805876ae08f0e3acca5dd864c1fa1552068bf799095221480374fd2dcaeddb74be93470eff4fe278e190f0a131f32340ada9cca518af769f42943875f4c5707beee2179771da21cd66405b9973648bd047a516d1cf902fa1f0fcdcbc3f4c1f20fc22f9a7e9f4c3a52576399604c46f83ede44f542d06d54e6e8a1e693a2cfcbb16c178d1bace976133e72cc4533bd02b1c4ec2cc22097435aff5a682ca7227414895450831560fa682493f4814ce8fbdb190f8ce2b533ed9582638511bda93aeae5d0690f745b788db622864ba3fb60952f119427fbe66754c5c038c5fb2cb87c326d65862e353c14950bd1fa7c70e36323e9cf90c81f6275e59c7926acac1560a0b6bbc7a850817f2effa19d485315a219d49e293f871278294d02765cf72caa2f438de3337ed205bf68ff6ddaaa5e4b80de5fba022dfcf9cf074a319678df11eb77b3ef66e512b67ba5182265a60eaf457691e973d23cbaf6000537f886695074ebb616f9cdad9de7c6fe9ecfbd13d537d64c34a7c90ca56b50e60d6a7067e391e63561793edf6ed3c2eeb8555909a59ce73da1f096d41fb42de44494128324a9", @ANYRESHEX=0x0, @ANYRES32], 0x5, 0x0, &(0x7f0000000000))
sendto$inet(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9)

55.595340023s ago: executing program 33 (id=1761):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$kcm(0x11, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0x5, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x3, 0xd73, 0x20000000, 0x80, 0x4401}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r8)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4)

55.373281164s ago: executing program 5 (id=1786):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r4)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x88, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xb, 0xfff3}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xcc42, 0x0, 0x8, 0x200, 0xa}, 0x75a2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080)
r8 = socket$unix(0x1, 0x1, 0x0)
r9 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r10, 0x3c}, 0x80, &(0x7f0000000500)=[{&(0x7f00000002c0)="f2", 0x1}], 0x1}, 0x4011)

51.82941418s ago: executing program 3 (id=1789):
syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f00000001c0)='./file1\x00', 0x204040, &(0x7f0000000580)=ANY=[], 0x4, 0xfc0, &(0x7f0000002240)="$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")
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount$bind(0x0, 0x0, 0x0, 0x21, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
socket(0xb, 0x1, 0x8)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)

50.709826222s ago: executing program 3 (id=1792):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r3 = socket(0x10, 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_ALLOC_STREAMS(r4, 0x8008551c, &(0x7f0000000180)={0x3a96, 0x1, [{0x1}]})
write(r3, &(0x7f0000000480)="1c0000001a009b8a140000003b000000000000000000000000000000fda35065733173ae72a0d270d958f739b6d44c893b03599f77a332b446ea93568ae2ff534952656c6a18b6c0fdcec321127ee28705f2496eb43654255c5cc688f71db82bab173f4e19361ac01c1b0a2d2229993c8308ab7721e4c33c5fc214cd64a17d552a0fa33011d3ccceb56738a8c7e690d5843333", 0x93)
recvmmsg(r3, &(0x7f0000002ec0), 0x0, 0x2, 0x0)

39.932734604s ago: executing program 34 (id=1786):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r4)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x88, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xb, 0xfff3}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xcc42, 0x0, 0x8, 0x200, 0xa}, 0x75a2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080)
r8 = socket$unix(0x1, 0x1, 0x0)
r9 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r10, 0x3c}, 0x80, &(0x7f0000000500)=[{&(0x7f00000002c0)="f2", 0x1}], 0x1}, 0x4011)

35.229558225s ago: executing program 35 (id=1792):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r3 = socket(0x10, 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_ALLOC_STREAMS(r4, 0x8008551c, &(0x7f0000000180)={0x3a96, 0x1, [{0x1}]})
write(r3, &(0x7f0000000480)="1c0000001a009b8a140000003b000000000000000000000000000000fda35065733173ae72a0d270d958f739b6d44c893b03599f77a332b446ea93568ae2ff534952656c6a18b6c0fdcec321127ee28705f2496eb43654255c5cc688f71db82bab173f4e19361ac01c1b0a2d2229993c8308ab7721e4c33c5fc214cd64a17d552a0fa33011d3ccceb56738a8c7e690d5843333", 0x93)
recvmmsg(r3, &(0x7f0000002ec0), 0x0, 0x2, 0x0)

14.01986384s ago: executing program 2 (id=1841):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x8c, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000500)={'#! ', './file0', [{0x20, '\x00\x00\x02'}, {0x20, '\xb0!'}, {0x20, 'GP\xd4\x82h\xb2\xc0\x00\xfce\"\xefL\x00'}]}, 0x21)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x25dfdbfc, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {0x0, 0x80000}]}, [{}, {}, {}, {}, {}, {0x448eade7, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x80000000, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x2}, {}, {0x0, 0x54b}, {0x0, 0x20000000, 0x0, 0xffffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {0x0, 0xffffffff}, {}, {0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0xffffffff}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0xd}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {0xd5}, {}, {}, {}, {0x4}, {}, {0x80}, {}, {}, {0x0, 0x0, 0x4}, {0x0, 0x10}, {0x80000000}, {0x8eb9, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x6}, {0x4, 0x0, 0x4, 0x0, 0x7ee}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x9}, {}, {}, {0x7}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffb}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0xd5a0}, {}, {}, {}, {}, {}, {0x4, 0x5}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x2}, {}, {}, {}, {}, {}, {0x10000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xa2}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x67}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x2}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0)
close(0xffffffffffffffff)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)={0x7c, 0x25, 0x8, 0x70bd2a, 0x25dfdbfe, {0xc}, [@typed={0x7, 0xbe, 0x0, 0x0, @str='!\\\x00'}, @nested={0x5d, 0x141, 0x0, 0x1, [@typed={0x4, 0x81, 0x0, 0x0, @binary}, @generic="e526c8e3a8e1281937d6dbded70425f5b7769c1e2efc0e42a8ab1673477ebc786dd4cc69da68985e1dcf0b89dc8a3b20d6d397d1c9648ef82743b7499fc2684ace853d3a56e02be4f9508dd734a03741b94ede3c29"]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x44840}, 0x4041)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)

13.716377676s ago: executing program 2 (id=1843):
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/pm_print_times', 0x20001, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000001500)={0x0, 0x0, 0x0, 0x1, 0x0, r3, 0x0}])
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x0})
syz_emit_ethernet(0x6e, &(0x7f0000000780)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @remote, @val={@val={0x88a8, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, '\x00', 0x30, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @loopback}, @local, {[], @param_prob={0x4, 0x0, 0x0, 0x48, {0x0, 0x6, "fd3a85", 0xff, 0x89, 0x0, @remote, @local}}}}}}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

12.667638191s ago: executing program 2 (id=1845):
r0 = socket(0x10, 0x803, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, 0x0, 0x0)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
r4 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'lo\x00', <r5=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r5, @ANYBLOB="14000200fe8000000000000000000000000000aa"], 0x48}}, 0x0)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002)
sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0xfc)

9.123171477s ago: executing program 0 (id=1847):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$kcm(0x11, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x8}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0xa32, 0x6, 0x1, 0xc, 0x0, 0x4, 0x8, 0x52, 0x68d4, 0x5, 0x4, 0x3, 0x12, 0x6, 0xfffffffd, 0xfffffe01}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc, 0xfff1}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000000)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5)

8.636664661s ago: executing program 0 (id=1848):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="210000000d00000006000000040000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), ""/16, <r1=>0x0, 0x0, 0x0, 0x0, 0x6, 0x5, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xca, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0), 0x8, 0x34, 0x8, 0x8, &(0x7f0000000640)}}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="1700000007000000c25e00000500000000200000", @ANYRES32=r0, @ANYBLOB="0200"/20, @ANYRES32=r1, @ANYRES32, @ANYBLOB="01000000050000000100000000000000000000000000000000000000c25c904b13780666090e54c4055c98"], 0x50)
sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x281}, 0xc, &(0x7f0000001380)={&(0x7f0000001400)={0x88, 0x0, 0x200, 0x70bd28, 0x8, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000}, 0x40448a0)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336bef1be8a68a628452b83", 0x9e}, {0x0}, {&(0x7f00000005c0)="f2b314", 0x3}], 0x3}}], 0x1, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000001040)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8d0}, 0x4040800)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x340}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000500)='q', 0x1}, {&(0x7f0000000540)="a22caaffe37d4620d1a9427c00787b63b26c5b83ef8ce8f8fe823d77c642dd73361c1f115fdce55de92bede6e812191b9780a257fa4fb3", 0x37}, {&(0x7f0000000600)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e847f403535371a24ce2a19c3898aca95be", 0x8b}, {&(0x7f00000006c0)="138b9f8300af1d793c8e", 0xa}, {&(0x7f0000000700)="e59c889c8be9e17c21882a76c6907239d44f6a0efb65359c6a8e5ede789aa995461e91d2", 0x24}, {&(0x7f0000000e80)="0e9129a2bae0d093a9c5091f0926391174e5aff7420b47b0cf1a8bbd7bb239460a6b26eb4f86fa48acdf54294bee3567a8ff0ed4f912a1aa059d62286db3e045dc31db292f5ab26a8f1466d90f0f98ff1a0e2b1018604ef19bc70a", 0x5b}], 0x6}}], 0x2, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0xeeef0000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x1, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x0, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x6, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]})
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r5 = accept4(r4, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

8.237514501s ago: executing program 0 (id=1849):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8)
socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
r2 = dup(0xffffffffffffffff)
sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x300480c5)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x5522, 0x0)
close_range(r1, r1, 0x0)

8.190938013s ago: executing program 2 (id=1850):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat2(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a80)=@bpf_ext={0x1c, 0x3, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x982}}, 0x0, 0x6, 0x18, &(0x7f0000000400)=""/24, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xe8b5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000)
ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000080)=0x2)

6.734362856s ago: executing program 2 (id=1851):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @vbi={0x6, 0x2, 0xc7a, 0x38414762, [0x3, 0x7], [0x2, 0x6], 0x2}})
r1 = socket(0x10, 0x3, 0x0)
flistxattr(0xffffffffffffffff, &(0x7f0000000240)=""/53, 0x35)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r1, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c"], 0x48}}, 0x4084)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)

6.686714788s ago: executing program 0 (id=1852):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x1b)
readv(r4, &(0x7f0000000600)=[{0x0}], 0x1)
connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)
futex(&(0x7f0000000180)=0x1, 0x0, 0x1, &(0x7f0000000200), 0x0, 0x0)

5.310426466s ago: executing program 0 (id=1853):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
socket$alg(0x26, 0x5, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r3=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r1, r3, 0x25, 0x2}, 0x14)
syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[], 0x0)

2.822606157s ago: executing program 6 (id=1785):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
openat(0xffffffffffffff9c, 0x0, 0x20842, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xc}, [], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc)
r2 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@local, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x5}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x33}, 0xfffffffd, 0x32}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x0, 0x0, 0x0, 0xfd}}, 0xe8)
sendmmsg(r2, &(0x7f0000000480), 0x21, 0x0)

2.109501382s ago: executing program 6 (id=1854):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0xff}, 0x0)
ioctl$SNDCTL_TMR_STOP(0xffffffffffffffff, 0x5403)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440))
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={0x0})
sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010028bd7040010000000f00000005002e0000000000"], 0x2c}}, 0x18)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
fcntl$setlease(r0, 0x400, 0x2)

1.127239899s ago: executing program 6 (id=1855):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
rename(0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$ppp(0xffffffffffffff9c, 0x0, 0x40c42, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
prctl$PR_SET_FP_MODE(0x2d, 0x0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
r5 = syz_open_dev$video4linux(&(0x7f0000000040), 0x5, 0x0)
ioctl$VIDIOC_SUBDEV_G_CROP(r5, 0xc038563b, &(0x7f0000000140)={0x2000000, 0x1000000, {0x1eb, 0xff, 0x9, 0xffff8000}})

811.504703ms ago: executing program 2 (id=1856):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="210000000d00000006000000040000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), ""/16, <r1=>0x0, 0x0, 0x0, 0x0, 0x6, 0x5, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xca, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0), 0x8, 0x34, 0x8, 0x8, &(0x7f0000000640)}}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="1700000007000000c25e00000500000000200000", @ANYRES32=r0, @ANYBLOB="0200"/20, @ANYRES32=r1, @ANYRES32, @ANYBLOB="01000000050000000100000000000000000000000000000000000000c25c904b13780666090e54c4055c98"], 0x50)
sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x281}, 0xc, &(0x7f0000001380)={&(0x7f0000001400)={0x88, 0x0, 0x200, 0x70bd28, 0x8, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000}, 0x40448a0)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336bef1be8a68a628452b83", 0x9e}, {0x0}, {&(0x7f00000005c0)="f2b314", 0x3}], 0x3}}], 0x1, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000001040)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8d0}, 0x4040800)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x340}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000500)='q', 0x1}, {&(0x7f0000000540)="a22caaffe37d4620d1a9427c00787b63b26c5b83ef8ce8f8fe823d77c642dd73361c1f115fdce55de92bede6e812191b9780a257fa4fb3", 0x37}, {&(0x7f0000000600)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e847f403535371a24ce2a19c3898aca95be", 0x8b}, {&(0x7f00000006c0)="138b9f8300af1d793c8e", 0xa}, {&(0x7f0000000700)="e59c889c8be9e17c21882a76c6907239d44f6a0efb65359c6a8e5ede789aa995461e91d2", 0x24}, {&(0x7f0000000e80)="0e9129a2bae0d093a9c5091f0926391174e5aff7420b47b0cf1a8bbd7bb239460a6b26eb4f86fa48acdf54294bee3567a8ff0ed4f912a1aa059d62286db3e045dc31db292f5ab26a8f1466d90f0f98ff1a0e2b1018604ef19bc70a", 0x5b}], 0x6}}], 0x2, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0xeeef0000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x1, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x0, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x6, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]})
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r5 = accept4(r4, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

95.527077ms ago: executing program 6 (id=1857):
timer_create(0x0, 0x0, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
socketpair(0x25, 0x1, 0x0, &(0x7f0000000180))

0s ago: executing program 0 (id=1858):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
socket(0x1, 0x803, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24040801)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000"], 0x3c}}, 0x0)
r7 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r8], 0x5c}}, 0x40)

kernel console output (not intermixed with test programs):

_ep_enable returned -22
[  136.765776][ T4311] pwc: recv_control_msg error -71 req 02 val 2500
[  136.775730][ T4311] pwc: recv_control_msg error -71 req 02 val 2400
[  136.806692][ T4311] pwc: recv_control_msg error -71 req 02 val 2600
[  136.837541][ T4311] pwc: recv_control_msg error -71 req 02 val 2900
[  136.854274][ T4311] pwc: recv_control_msg error -71 req 02 val 2800
[  136.862477][ T4311] pwc: recv_control_msg error -71 req 04 val 1100
[  136.876223][ T4311] pwc: recv_control_msg error -71 req 04 val 1200
[  136.941202][ T4311] pwc: Registered as video103.
[  136.962678][ T4311] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input7
[  137.229532][ T4311] usb 2-1: USB disconnect, device number 10
[  138.139131][ T5743] loop4: detected capacity change from 0 to 256
[  138.214671][   T48] Bluetooth: hci2: command 0x0406 tx timeout
[  138.639186][ T5757] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  138.674968][ T5635] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  138.714874][ T5635] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9
[  138.887220][ T5635] asix: probe of 1-1:0.188 failed with error -71
[  138.898404][ T5635] usb 1-1: USB disconnect, device number 2
[  139.164567][   T22] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  139.384542][   T22] usb 5-1: Using ep0 maxpacket: 16
[  139.391578][   T22] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  139.412812][   T22] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  139.441026][   T22] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  139.453395][   T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.463820][   T22] usb 5-1: Product: syz
[  139.468477][   T22] usb 5-1: Manufacturer: syz
[  139.473184][   T22] usb 5-1: SerialNumber: syz
[  139.614551][ T5635] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  139.703425][   T22] usb 5-1: 0:2 : does not exist
[  139.715487][   T22] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[  139.732375][ T5794] rdma_rxe: rxe_register_device failed with error -23
[  139.749770][ T5794] rdma_rxe: failed to add ipvlan0
[  139.758987][   T22] usb 5-1: USB disconnect, device number 3
[  139.811609][ T5635] usb 2-1: Using ep0 maxpacket: 32
[  139.821876][ T5635] usb 2-1: config index 0 descriptor too short (expected 29220, got 36)
[  139.834847][ T5635] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  139.844814][ T5635] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81
[  139.853813][ T5635] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  139.874573][ T5635] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  139.894617][ T5635] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  139.910312][ T5635] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  139.920031][ T5635] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.930442][ T5635] usb 2-1: config 0 descriptor??
[  139.944915][ T4311] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  140.021491][ T4259] udevd[4259]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  140.156331][ T4311] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  140.165491][ T5635] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  140.175429][ T4311] usb 1-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config
[  140.224548][ T4311] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[  140.250936][ T4311] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  140.298354][ T4311] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  140.316076][ T4311] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  140.339021][ T4311] usb 1-1: Product: syz
[  140.343254][ T4311] usb 1-1: Manufacturer: syz
[  140.362583][ T4311] cdc_wdm: probe of 1-1:1.0 failed with error -22
[  140.373604][ T5635] usb 2-1: USB disconnect, device number 11
[  140.391914][ T5635] usblp0: removed
[  140.580527][ T5790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  140.609141][ T5790] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  140.649486][ T5635] usb 1-1: USB disconnect, device number 3
[  141.119264][ T5822] loop1: detected capacity change from 0 to 64
[  141.134259][ T5822] hfs: get root inode failed
[  141.167570][ T4259] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  143.667854][ T5861] netlink: 8 bytes leftover after parsing attributes in process `syz.4.446'.
[  143.760112][ T5866] binder: BINDER_SET_CONTEXT_MGR already set
[  143.769671][ T5866] binder: 5864:5866 ioctl 4018620d 2000000002c0 returned -16
[  143.971892][   T27] audit: type=1326 audit(1773084026.418:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5869 comm="syz.0.450" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f66d8d9c799 code=0x0
[  144.304701][ T5635] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[  144.390615][ T5883] device vxcan1 entered promiscuous mode
[  145.707826][ T5893] loop2: detected capacity change from 0 to 8192
[  145.973514][ T5893] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  145.987281][ T5893] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[  145.996677][ T5893] REISERFS (device loop2): using ordered data mode
[  146.003204][ T5893] reiserfs: using flush barriers
[  146.014569][ T5893] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  146.031939][ T5893] REISERFS (device loop2): checking transaction log (loop2)
[  146.044493][    C0] sched: RT throttling activated
[  146.051731][ T5893] REISERFS (device loop2): Using rupasov hash to sort names
[  146.065245][ T5893] REISERFS (device loop2): using 3.5.x disk format
[  146.073833][ T5893] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  146.085875][ T5893] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  146.097040][ T5893] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  146.108273][ T5893] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2)
[  146.122698][ T5893] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  146.844721][ T4311] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  146.970274][ T5635] usb 1-1: unable to read config index 0 descriptor/start: -71
[  146.989073][ T5635] usb 1-1: can't read configurations, error -71
[  147.044560][ T4311] usb 3-1: Using ep0 maxpacket: 32
[  147.051886][ T4311] usb 3-1: config 0 has an invalid interface number: 184 but max is 0
[  147.079073][ T4311] usb 3-1: config 0 has no interface number 0
[  147.102037][ T4311] usb 3-1: config 0 interface 184 has no altsetting 0
[  147.127583][ T4311] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  147.151403][ T4311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  147.190288][ T4311] usb 3-1: Product: syz
[  147.208378][ T4311] usb 3-1: Manufacturer: syz
[  147.229130][ T4311] usb 3-1: SerialNumber: syz
[  147.251407][ T5906] netlink: 24 bytes leftover after parsing attributes in process `syz.0.463'.
[  147.261537][ T4311] usb 3-1: config 0 descriptor??
[  147.280681][ T4311] smsc75xx v1.0.0
[  148.136822][ T5910] loop1: detected capacity change from 0 to 32768
[  149.186413][ T5910] JBD2: Ignoring recovery information on journal
[  149.235935][ T4311] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  149.756669][ T4311] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  150.012975][ T5910] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  150.363839][ T4270] ocfs2: Unmounting device (7,1) on (node local)
[  150.960103][ T4311] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  150.987831][ T4311] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  151.003109][ T4311] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  151.031300][ T4311] smsc75xx: probe of 3-1:0.184 failed with error -71
[  151.073704][ T4311] usb 3-1: USB disconnect, device number 6
[  151.266792][ T5931] loop1: detected capacity change from 0 to 40427
[  151.293075][ T5931] F2FS-fs (loop1): Not support 16777216, larger than 256
[  152.904063][ T5960] kvm: vcpu 0: requested 768 ns lapic timer period limited to 200000 ns
[  152.940020][ T5960] kvm: pic: non byte write
[  153.654909][ T5635] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  153.844550][ T5635] usb 1-1: Using ep0 maxpacket: 32
[  153.851752][ T5635] usb 1-1: config 0 has an invalid interface number: 188 but max is 0
[  154.004998][ T5635] usb 1-1: config 0 has no interface number 0
[  154.024627][ T5635] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  154.079605][ T5635] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  154.129799][ T5635] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.155162][ T5985] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  154.155388][ T5635] usb 1-1: Product: syz
[  154.208942][ T5635] usb 1-1: Manufacturer: syz
[  154.213599][ T5635] usb 1-1: SerialNumber: syz
[  154.252734][ T5635] usb 1-1: config 0 descriptor??
[  154.273217][ T5969] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  154.510524][ T5969] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  156.019729][ T5635] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  156.054705][ T5635] asix: probe of 1-1:0.188 failed with error -71
[  156.107257][ T5635] usb 1-1: USB disconnect, device number 6
[  156.554589][ T4354] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  156.744568][ T4354] usb 5-1: Using ep0 maxpacket: 8
[  156.751388][ T4354] usb 5-1: config 38 has an invalid interface number: 131 but max is 0
[  156.784581][ T4354] usb 5-1: config 38 has no interface number 0
[  156.790991][ T4354] usb 5-1: config 38 interface 131 altsetting 7 has a duplicate endpoint with address 0x9, skipping
[  156.830568][ T6031] loop1: detected capacity change from 0 to 32768
[  156.837187][ T4354] usb 5-1: config 38 interface 131 altsetting 7 has an invalid endpoint with address 0x0, skipping
[  156.872012][ T4354] usb 5-1: config 38 interface 131 altsetting 7 endpoint 0x4 has an invalid bInterval 46, changing to 7
[  156.892274][ T4354] usb 5-1: config 38 interface 131 has no altsetting 0
[  156.926428][ T4354] usb 5-1: New USB device found, idVendor=0bb4, idProduct=0a46, bcdDevice=fc.63
[  156.945877][ T4354] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.959952][ T6031] XFS (loop1): Mounting V5 Filesystem
[  156.979597][ T4354] usb 5-1: Product: syz
[  156.997135][ T4354] usb 5-1: Manufacturer: syz
[  157.005665][   T48] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201'
[  157.016086][   T48] CPU: 1 PID: 48 Comm: kworker/u5:0 Not tainted syzkaller #0
[  157.023761][   T48] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  157.034019][   T48] Workqueue: hci1 hci_rx_work
[  157.038715][   T48] Call Trace:
[  157.042027][   T48]  <TASK>
[  157.045139][   T48]  dump_stack_lvl+0x188/0x24e
[  157.050907][   T48]  ? show_regs_print_info+0x12/0x12
[  157.056174][   T48]  ? load_image+0x400/0x400
[  157.060964][   T48]  sysfs_create_dir_ns+0x26a/0x290
[  157.066876][   T48]  ? sysfs_warn_dup+0xa0/0xa0
[  157.072257][   T48]  ? do_raw_spin_unlock+0x11d/0x230
[  157.077479][   T48]  kobject_add_internal+0x61c/0xcc0
[  157.083394][   T48]  kobject_add+0x160/0x230
[  157.087902][   T48]  ? kobject_init+0x1d0/0x1d0
[  157.092942][   T48]  ? klist_children_get+0x50/0x50
[  157.099038][   T48]  ? get_device_parent+0x121/0x3f0
[  157.104901][   T48]  device_add+0x483/0xfb0
[  157.109626][   T48]  ? kmem_cache_free+0xf7/0x290
[  157.114519][   T48]  hci_conn_add_sysfs+0xd1/0x1e0
[  157.119572][   T48]  le_conn_complete_evt+0x105f/0x1670
[  157.125572][   T48]  ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0
[  157.132115][   T48]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  157.137768][   T48]  ? skb_pull_data+0xf7/0x200
[  157.142642][   T48]  hci_le_conn_complete_evt+0x183/0x440
[  157.148467][   T48]  ? hci_remote_host_features_evt+0x270/0x270
[  157.154646][   T48]  hci_event_packet+0x7b6/0x1280
[  157.159614][   T48]  ? bis_list+0x280/0x280
[  157.163947][   T48]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  157.169850][   T48]  ? kcov_remote_start+0x4c7/0x7e0
[  157.174977][   T48]  ? spurious_interrupt+0x80/0xd0
[  157.180458][   T48]  ? hci_send_to_monitor+0x9c/0x4a0
[  157.185870][   T48]  hci_rx_work+0x3eb/0xd40
[  157.191823][   T48]  ? _raw_spin_unlock+0x40/0x40
[  157.197480][   T48]  ? process_one_work+0x7b0/0x1160
[  157.203085][   T48]  process_one_work+0x8a2/0x1160
[  157.208142][   T48]  ? worker_detach_from_pool+0x240/0x240
[  157.213810][   T48]  ? _raw_spin_lock_irq+0xb7/0xf0
[  157.218920][   T48]  ? _raw_spin_lock_irqsave+0x100/0x100
[  157.225942][   T48]  ? kthread_data+0x4b/0xc0
[  157.230741][   T48]  worker_thread+0xaa2/0x1270
[  157.235753][   T48]  kthread+0x29d/0x330
[  157.240048][   T48]  ? worker_clr_flags+0x1a0/0x1a0
[  157.245903][   T48]  ? kthread_blkcg+0xd0/0xd0
[  157.251169][   T48]  ret_from_fork+0x1f/0x30
[  157.255818][   T48]  </TASK>
[  157.263670][   T48] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  157.277237][   T48] Bluetooth: hci1: failed to register connection device
[  157.291059][ T4354] usb 5-1: SerialNumber: syz
[  157.385414][ T6031] XFS (loop1): Ending clean mount
[  157.455667][   T27] audit: type=1800 audit(1773084039.908:11): pid=6031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.504" name="file1" dev="loop1" ino=9286 res=0 errno=0
[  157.764215][ T4354] usb 5-1: USB disconnect, device number 4
[  157.812297][ T6031] XFS (loop1): User initiated shutdown received.
[  157.855229][ T6031] XFS (loop1): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:499).  Shutting down filesystem.
[  157.881701][ T6031] XFS (loop1): Please unmount the filesystem and rectify the problem(s)
[  157.942438][ T4270] XFS (loop1): Unmounting Filesystem
[  159.004665][ T6080] netlink: 48 bytes leftover after parsing attributes in process `syz.4.518'.
[  159.735724][ T6089] netlink: 'syz.2.523': attribute type 2 has an invalid length.
[  159.751824][ T6089] ip6t_srh: unknown srh match flags  4000
[  159.759245][ T6089] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  159.794816][ T5635] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  159.984968][ T5635] usb 2-1: Using ep0 maxpacket: 32
[  159.997057][ T5635] usb 2-1: config 0 has an invalid interface number: 184 but max is 0
[  160.025782][ T5635] usb 2-1: config 0 has no interface number 0
[  160.031956][ T5635] usb 2-1: config 0 interface 184 has no altsetting 0
[  160.056531][ T5635] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  160.084521][ T5635] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.094730][ T5635] usb 2-1: Product: syz
[  160.098929][ T5635] usb 2-1: Manufacturer: syz
[  160.114036][ T5635] usb 2-1: SerialNumber: syz
[  160.127777][ T5635] usb 2-1: config 0 descriptor??
[  160.141158][ T5635] smsc75xx v1.0.0
[  160.732456][ T6115] xt_CT: You must specify a L4 protocol and not use inversions on it
[  161.316812][ T5635] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  161.413437][ T5635] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  163.104689][ T5635] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71
[  163.123568][ T5635] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71
[  163.134336][ T5635] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  163.964691][ T5635] smsc75xx: probe of 2-1:0.184 failed with error -71
[  163.985795][ T5635] usb 2-1: USB disconnect, device number 12
[  165.008052][ T6170] loop0: detected capacity change from 0 to 32768
[  165.081415][ T6170] JBD2: Ignoring recovery information on journal
[  165.175258][ T6181] netlink: 12 bytes leftover after parsing attributes in process `syz.3.552'.
[  165.197585][ T6170] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  165.904808][ T6170] syz.0.546 (6170) used greatest stack depth: 18456 bytes left
[  166.027385][ T4267] ocfs2: Unmounting device (7,0) on (node local)
[  167.913984][ T6227] overlayfs: failed to clone upperpath
[  169.162554][ T6266] overlayfs: failed to clone upperpath
[  171.304875][ T6290] overlayfs: statfs failed on './file0'
[  173.343735][ T6325] loop0: detected capacity change from 0 to 256
[  173.419319][ T6325] exfat: Deprecated parameter 'utf8'
[  173.445498][ T6325] exfat: Unexpected value for 'utf8'
[  174.072609][ T6345] netlink: 'syz.0.610': attribute type 1 has an invalid length.
[  174.139667][ T6345] 8021q: adding VLAN 0 to HW filter on device bond1
[  174.185842][ T6347] netlink: 28 bytes leftover after parsing attributes in process `syz.0.610'.
[  174.213574][ T6347] device bond1 entered promiscuous mode
[  174.255530][ T6350] netlink: 'syz.1.611': attribute type 4 has an invalid length.
[  174.289050][ T6350] netlink: 'syz.1.611': attribute type 4 has an invalid length.
[  174.349004][ T6345] bond1: (slave dummy0): making interface the new active one
[  174.381839][ T6345] device dummy0 entered promiscuous mode
[  174.422779][ T6345] bond1: (slave dummy0): Enslaving as an active interface with an up link
[  174.504727][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  174.645489][ T6353] netlink: 'syz.1.612': attribute type 9 has an invalid length.
[  174.684645][ T6353] netlink: 32 bytes leftover after parsing attributes in process `syz.1.612'.
[  177.310255][ T6388] netlink: 8 bytes leftover after parsing attributes in process `syz.0.623'.
[  177.703098][ T6410] netlink: 12 bytes leftover after parsing attributes in process `syz.3.630'.
[  178.177487][ T6421] ipt_REJECT: ECHOREPLY no longer supported.
[  180.831314][ T6433] loop0: detected capacity change from 0 to 32768
[  181.004615][ T4277] Bluetooth: hci0: command 0x0406 tx timeout
[  181.005025][   T48] Bluetooth: hci1: command 0x0406 tx timeout
[  181.010750][ T4277] Bluetooth: hci2: command 0x0406 tx timeout
[  181.016653][   T48] Bluetooth: hci3: command 0x0406 tx timeout
[  181.237455][ T6433] JBD2: Ignoring recovery information on journal
[  181.569234][ T6433] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  181.910426][ T4267] ocfs2: Unmounting device (7,0) on (node local)
[  182.645419][ T4277] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  182.657753][ T4277] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  182.684815][ T4277] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  182.694207][ T4277] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  182.702136][ T4277] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  182.710925][ T4277] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  182.860269][ T6448] loop0: detected capacity change from 0 to 256
[  182.946521][ T6448] FAT-fs (loop0): Directory bread(block 64) failed
[  182.967725][ T6448] FAT-fs (loop0): Directory bread(block 65) failed
[  183.011175][ T6448] FAT-fs (loop0): Directory bread(block 66) failed
[  183.038805][ T6448] FAT-fs (loop0): Directory bread(block 67) failed
[  183.064686][ T6448] FAT-fs (loop0): Directory bread(block 68) failed
[  183.094379][ T6448] FAT-fs (loop0): Directory bread(block 69) failed
[  183.124961][ T6448] FAT-fs (loop0): Directory bread(block 70) failed
[  183.131983][ T6448] FAT-fs (loop0): Directory bread(block 71) failed
[  183.195858][ T6448] FAT-fs (loop0): Directory bread(block 72) failed
[  183.861130][ T6448] FAT-fs (loop0): Directory bread(block 73) failed
[  184.347529][ T6439] chnl_net:caif_netlink_parms(): no params data found
[  184.435290][ T6482] overlayfs: failed to clone upperpath
[  184.561619][ T6439] bridge0: port 1(bridge_slave_0) entered blocking state
[  184.569102][ T6439] bridge0: port 1(bridge_slave_0) entered disabled state
[  184.577944][ T6439] device bridge_slave_0 entered promiscuous mode
[  184.596513][ T6439] bridge0: port 2(bridge_slave_1) entered blocking state
[  184.603639][ T6439] bridge0: port 2(bridge_slave_1) entered disabled state
[  184.609011][ T6481] process 'newroot/181/bus/file0' started with executable stack
[  184.662776][ T6439] device bridge_slave_1 entered promiscuous mode
[  184.766646][ T4280] Bluetooth: hci5: command 0x0409 tx timeout
[  185.465290][ T6439] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  185.478631][ T6439] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  185.634077][ T6439] team0: Port device team_slave_0 added
[  185.661181][ T6439] team0: Port device team_slave_1 added
[  185.754677][ T6439] batman_adv: batadv0: Adding interface: batadv_slave_0
[  185.781085][ T6439] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  185.810297][ T6439] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  185.845469][ T6439] batman_adv: batadv0: Adding interface: batadv_slave_1
[  185.854760][ T6439] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  185.899716][ T6439] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  185.938869][ T6439] device hsr_slave_0 entered promiscuous mode
[  185.958314][ T6439] device hsr_slave_1 entered promiscuous mode
[  185.971782][ T6439] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  185.990280][ T6439] Cannot create hsr debugfs directory
[  187.084558][ T4280] Bluetooth: hci5: command 0x041b tx timeout
[  188.025462][ T6439] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  188.047234][ T6439] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  188.080916][ T6439] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  188.124275][ T6439] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  188.651815][ T6439] 8021q: adding VLAN 0 to HW filter on device bond0
[  188.789096][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  188.813934][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  188.890768][ T6439] 8021q: adding VLAN 0 to HW filter on device team0
[  188.981572][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  189.005476][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  189.168890][   T48] Bluetooth: hci5: command 0x040f tx timeout
[  189.218834][ T4324] bridge0: port 1(bridge_slave_0) entered blocking state
[  189.225993][ T4324] bridge0: port 1(bridge_slave_0) entered forwarding state
[  189.492216][ T6439] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  189.550721][ T6439] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  190.994703][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  191.023290][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  191.054087][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  191.064230][ T4324] bridge0: port 2(bridge_slave_1) entered blocking state
[  191.071424][ T4324] bridge0: port 2(bridge_slave_1) entered forwarding state
[  191.176510][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  191.203550][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  191.230598][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  191.251757][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  191.254676][ T4280] Bluetooth: hci5: command 0x0419 tx timeout
[  191.301313][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  191.329089][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  191.374036][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  191.389687][ T6573] netlink: 56 bytes leftover after parsing attributes in process `syz.2.681'.
[  191.409554][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  191.440024][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  191.479565][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  191.525550][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  191.553357][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  193.764815][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  193.772364][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  193.812448][ T6439] 8021q: adding VLAN 0 to HW filter on device batadv0
[  194.097810][ T6601] loop2: detected capacity change from 0 to 7
[  194.126438][ T6603] loop0: detected capacity change from 0 to 1024
[  194.150108][ T6603] EXT4-fs: Ignoring removed orlov option
[  194.226308][ T6601] Dev loop2: unable to read RDB block 7
[  194.232988][ T6601]  loop2: AHDI p1 p2 p3
[  194.245757][ T6601] loop2: partition table partially beyond EOD, truncated
[  194.290152][ T1274] ieee802154 phy0 wpan0: encryption failed: -22
[  194.296559][ T1274] ieee802154 phy1 wpan1: encryption failed: -22
[  194.320681][ T6601] loop2: p1 start 1818582900 is beyond EOD, truncated
[  194.349064][ T6601] loop2: p3 start 335544320 is beyond EOD, truncated
[  194.392668][ T6603] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  194.573107][ T4267] EXT4-fs (loop0): unmounting filesystem.
[  194.842094][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  194.864327][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  194.894062][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  194.902431][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  194.913601][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  194.922704][ T4730] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  194.947462][ T6439] device veth0_vlan entered promiscuous mode
[  194.988441][ T6439] device veth1_vlan entered promiscuous mode
[  195.062944][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  195.072595][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  195.082033][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  195.091843][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  195.102159][ T6439] device veth0_macvtap entered promiscuous mode
[  195.120748][ T6439] device veth1_macvtap entered promiscuous mode
[  195.153869][ T6439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  195.168986][ T6439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.192655][ T6439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  195.353871][ T6439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.474092][ T6439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  195.638205][ T6439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.854702][ T6439] batman_adv: batadv0: Interface activated: batadv_slave_0
[  195.944985][ T6439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  195.964570][ T6439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.974791][ T6439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  195.985315][ T6439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.995336][ T6439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  196.005832][ T6439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.017744][ T6439] batman_adv: batadv0: Interface activated: batadv_slave_1
[  196.125423][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  196.155042][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  196.166650][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  196.176740][ T6645] loop1: detected capacity change from 0 to 8
[  196.193912][ T6645] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  196.216321][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  196.224855][ T4259] udevd[4259]: incorrect cramfs checksum on /dev/loop1
[  196.298171][ T6648] cramfs: Error -3 while decompressing!
[  196.305852][ T6648] cramfs: ffffffff96d8e178(16)->ffff88804e9bd000(4096)
[  196.307688][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  196.323792][ T6648] cramfs: Error -3 while decompressing!
[  196.329686][ T6648] cramfs: ffffffff96d8e178(16)->ffff88804e9bd000(4096)
[  196.418429][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  196.621243][ T4259] udevd[4259]: incorrect cramfs checksum on /dev/loop1
[  196.629896][   T27] audit: type=1800 audit(1773084335.078:12): pid=6648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.704" name="file0" dev="loop1" ino=244 res=0 errno=0
[  196.642777][ T6439] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  196.783633][ T6439] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  196.792963][ T6439] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  196.802252][ T6439] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  196.815625][ T6643] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  197.052890][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  197.071495][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  197.093261][ T6650] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  197.184832][ T6650] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  197.216039][ T6650] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  197.223787][ T5912] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  197.737209][ T6674] loop1: detected capacity change from 0 to 1024
[  197.758037][ T6674] EXT4-fs: Ignoring removed orlov option
[  197.811121][ T6674] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  198.914887][ T4270] EXT4-fs (loop1): unmounting filesystem.
[  198.969530][ T6696] tipc: Started in network mode
[  198.979442][ T6696] tipc: Node identity 12a74ca034ef, cluster identity 4711
[  198.998631][ T6696] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  199.118127][ T6696] tipc: Resetting bearer <eth:syzkaller0>
[  199.150971][ T6694] tipc: Resetting bearer <eth:syzkaller0>
[  200.290563][ T6718] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  200.638192][   T27] audit: type=1326 audit(1773084339.088:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6730 comm="syz.1.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fee39c799 code=0x7ffc0000
[  200.714183][   T27] audit: type=1326 audit(1773084339.088:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6730 comm="syz.1.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6fee35cfce code=0x7ffc0000
[  200.780320][   T27] audit: type=1326 audit(1773084339.088:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6730 comm="syz.1.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fee39c799 code=0x7ffc0000
[  200.806649][   T27] audit: type=1326 audit(1773084339.088:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6730 comm="syz.1.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6fee39c799 code=0x7ffc0000
[  200.829944][   T27] audit: type=1326 audit(1773084339.088:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6730 comm="syz.1.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fee39c799 code=0x7ffc0000
[  200.894587][   T27] audit: type=1326 audit(1773084339.088:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6730 comm="syz.1.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fee39c799 code=0x7ffc0000
[  202.607926][ T6694] tipc: Disabling bearer <eth:syzkaller0>
[  202.620908][ T5625] tipc: Node number set to 642272416
[  202.725983][ T6743] binder: 6741:6743 unknown command 0
[  202.765572][ T6743] binder: 6741:6743 ioctl c0306201 200000000080 returned -22
[  203.022834][ T6757] binder: BINDER_SET_CONTEXT_MGR already set
[  203.029637][ T6757] binder: 6756:6757 ioctl 4018620d 2000000002c0 returned -16
[  203.254706][ T5625] usb 1-1: new full-speed USB device number 7 using dummy_hcd
[  203.457137][ T5625] usb 1-1: config 0 has an invalid interface number: 41 but max is 0
[  203.470518][ T5625] usb 1-1: config 0 has no interface number 0
[  203.482089][ T5625] usb 1-1: config 0 interface 41 has no altsetting 0
[  203.499146][ T5625] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  203.520927][ T5625] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  203.534393][ T5625] usb 1-1: Product: syz
[  203.540937][ T5625] usb 1-1: Manufacturer: syz
[  203.551421][ T5625] usb 1-1: SerialNumber: syz
[  203.567575][ T5625] usb 1-1: config 0 descriptor??
[  203.978053][   T27] audit: type=1326 audit(1773084342.428:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6769 comm="syz.3.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a84b9c799 code=0x7ffc0000
[  204.015773][   T27] audit: type=1326 audit(1773084342.428:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6769 comm="syz.3.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a84b9c799 code=0x7ffc0000
[  204.106302][ T6775] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  204.136515][   T27] audit: type=1326 audit(1773084342.428:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6769 comm="syz.3.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1a84b5cfce code=0x7ffc0000
[  204.182495][   T27] audit: type=1326 audit(1773084342.428:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6769 comm="syz.3.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a84b9c799 code=0x7ffc0000
[  204.228235][   T27] audit: type=1326 audit(1773084342.428:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6769 comm="syz.3.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a84b9c799 code=0x7ffc0000
[  204.231100][ T6775] device syzkaller0 entered promiscuous mode
[  204.278895][   T27] audit: type=1326 audit(1773084342.448:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6769 comm="syz.3.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1a84b9c799 code=0x7ffc0000
[  204.334613][   T27] audit: type=1326 audit(1773084342.448:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6769 comm="syz.3.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a84b9c799 code=0x7ffc0000
[  204.365002][ T6775] tipc: Resetting bearer <eth:syzkaller0>
[  204.407946][   T27] audit: type=1326 audit(1773084342.448:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6769 comm="syz.3.745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a84b9c799 code=0x7ffc0000
[  204.412162][ T5625] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0
[  204.466774][ T6774] tipc: Resetting bearer <eth:syzkaller0>
[  205.785190][ T5625] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffb9
[  205.806331][ T5625] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9
[  205.824203][ T5625] CoreChips: probe of 1-1:0.41 failed with error -71
[  205.844908][ T5625] usb 1-1: USB disconnect, device number 7
[  207.482189][ T6774] tipc: Disabling bearer <eth:syzkaller0>
[  207.492274][ T6783] tipc: Started in network mode
[  207.499004][ T6783] tipc: Node identity e68ac8a6b75, cluster identity 4711
[  207.506280][ T6783] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  207.533461][ T6784] tipc: Resetting bearer <eth:syzkaller0>
[  207.551436][ T6781] tipc: Resetting bearer <eth:syzkaller0>
[  210.265352][ T6781] tipc: Disabling bearer <eth:syzkaller0>
[  210.281283][ T6803] device bond1 left promiscuous mode
[  210.287608][ T6803] device dummy0 left promiscuous mode
[  210.300446][  T129] tipc: Node number set to 1373292710
[  212.123668][ T6840] loop0: detected capacity change from 0 to 4096
[  212.148898][ T6840] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512)
[  212.638886][ T6862] device syzkaller0 entered promiscuous mode
[  214.904412][ T6894] kvm: vcpu 0: requested 768 ns lapic timer period limited to 200000 ns
[  214.961829][ T6894] kvm: pic: non byte write
[  215.432793][ T6915] kvm: pic: non byte write
[  215.947488][ T6930] device syz_tun entered promiscuous mode
[  215.953508][ T6930] device vlan2 entered promiscuous mode
[  217.598799][ T6992] loop0: detected capacity change from 0 to 1024
[  217.668689][ T6992] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  217.763553][ T6992] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  217.894362][ T7003] EXT4-fs error (device loop0): __ext4_get_inode_loc:4513: comm syz.0.836: Invalid inode table block 11692674362692534836 in block_group 0
[  217.924368][ T7003] EXT4-fs (loop0): Remounting filesystem read-only
[  217.973132][ T7003] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5933: Corrupt filesystem
[  218.010227][ T7003] EXT4-fs (loop0): Remounting filesystem read-only
[  218.026658][ T7003] EXT4-fs error (device loop0): ext4_setattr:5531: inode #2: comm syz.0.836: mark_inode_dirty error
[  218.053708][ T7003] EXT4-fs (loop0): Remounting filesystem read-only
[  218.217053][ T4267] EXT4-fs (loop0): unmounting filesystem.
[  220.882976][ T7033] loop0: detected capacity change from 0 to 32768
[  221.432981][ T7033] JBD2: Ignoring recovery information on journal
[  221.605608][ T7033] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  222.800044][ T4267] ocfs2: Unmounting device (7,0) on (node local)
[  223.654823][ T7068] overlayfs: failed to clone upperpath
[  223.660466][ T7070] overlayfs: failed to clone upperpath
[  224.205230][ T7086] loop0: detected capacity change from 0 to 256
[  224.268924][ T7088] overlayfs: failed to clone upperpath
[  226.126712][ T7149] overlayfs: failed to clone upperpath
[  230.155625][ T7211] netlink: 24 bytes leftover after parsing attributes in process `syz.1.909'.
[  230.184689][ T7211] netlink: 24 bytes leftover after parsing attributes in process `syz.1.909'.
[  230.349624][ T7218] overlayfs: failed to clone upperpath
[  230.654649][  T129] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[  230.799013][ T7225] overlayfs: failed to clone upperpath
[  230.840553][ T7195] loop0: detected capacity change from 0 to 40427
[  230.848606][  T129] usb 6-1: device descriptor read/64, error -71
[  231.032574][ T7195] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  231.124907][  T129] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[  231.143350][ T7195] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  231.245663][ T7195] F2FS-fs (loop0): Found nat_bits in checkpoint
[  231.277466][ T7234] overlayfs: failed to clone upperpath
[  231.344715][  T129] usb 6-1: device descriptor read/64, error -71
[  231.398677][ T7195] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  231.406988][ T7195] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  231.464736][  T129] usb usb6-port1: attempt power cycle
[  231.515566][ T4267] syz-executor: attempt to access beyond end of device
[  231.515566][ T4267] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  231.874580][  T129] usb 6-1: new full-speed USB device number 4 using dummy_hcd
[  231.905023][  T129] usb 6-1: device descriptor read/8, error -71
[  232.175016][  T129] usb 6-1: new full-speed USB device number 5 using dummy_hcd
[  232.235195][  T129] usb 6-1: device descriptor read/8, error -71
[  232.355691][  T129] usb usb6-port1: unable to enumerate USB device
[  233.805965][  T129] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  233.997266][  T129] usb 6-1: config 0 has no interfaces?
[  234.002809][  T129] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  234.032421][  T129] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  234.045111][ T4313] usb 1-1: new full-speed USB device number 8 using dummy_hcd
[  234.067024][  T129] usb 6-1: config 0 descriptor??
[  234.662132][ T4313] usb 1-1: device descriptor read/64, error -71
[  234.686849][ T5625] usb 6-1: USB disconnect, device number 6
[  234.990374][ T4313] usb 1-1: new full-speed USB device number 9 using dummy_hcd
[  235.130372][ T7275] loop1: detected capacity change from 0 to 40427
[  235.164683][ T5625] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  235.183545][ T4313] usb 1-1: device descriptor read/64, error -71
[  235.194077][ T7275] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  235.220824][ T7275] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  235.296978][ T7275] F2FS-fs (loop1): Found nat_bits in checkpoint
[  235.318872][ T4313] usb usb1-port1: attempt power cycle
[  235.390576][ T5625] usb 6-1: unable to get BOS descriptor or descriptor too short
[  235.413120][ T5625] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7
[  235.452301][ T5625] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7
[  235.559854][ T5625] usb 6-1: string descriptor 0 read error: -22
[  235.573530][ T5625] usb 6-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40
[  235.583579][ T7275] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  235.595265][ T5625] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  235.600207][ T7275] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  236.350730][ T5625] usb 6-1: Can't get UAC3 power state for id 10
[  236.457577][ T4313] usb 1-1: new full-speed USB device number 10 using dummy_hcd
[  236.497903][ T4313] usb 1-1: device descriptor read/8, error -71
[  236.598120][ T4270] syz-executor: attempt to access beyond end of device
[  236.598120][ T4270] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  238.175538][ T5625] usb 6-1: 2:0: failed to get current value for ch 0 (-32)
[  238.338336][ T5625] usb 6-1: 2:0: cannot get min/max values for control 2 (id 2)
[  238.415257][ T5625] usb 6-1: USB disconnect, device number 7
[  238.479065][ T7310] loop0: detected capacity change from 0 to 8192
[  238.587179][ T7310] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  238.675462][ T5031] udevd[5031]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  238.754715][ T7310] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[  238.805880][ T7310] REISERFS (device loop0): using ordered data mode
[  238.843471][ T7310] reiserfs: using flush barriers
[  238.955348][ T7310] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  239.075596][ T7310] REISERFS (device loop0): checking transaction log (loop0)
[  239.141069][ T7310] REISERFS (device loop0): Using rupasov hash to sort names
[  239.241889][ T7310] REISERFS (device loop0): using 3.5.x disk format
[  239.267701][ T7310] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  239.365455][ T7310] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  239.444618][ T7310] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  239.553630][ T7310] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2)
[  239.586795][ T7330] loop1: detected capacity change from 0 to 40427
[  239.625476][ T7330] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  239.633524][ T7310] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  239.646433][ T7330] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  239.836242][ T7330] F2FS-fs (loop1): Found nat_bits in checkpoint
[  239.979375][ T7330] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  240.074540][ T7330] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  240.312559][   T27] audit: type=1800 audit(1773084378.758:27): pid=7330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.939" name="file1" dev="loop1" ino=11 res=0 errno=0
[  240.337793][ T7330] syz.1.939: attempt to access beyond end of device
[  240.337793][ T7330] loop1: rw=2049, sector=77824, nr_sectors = 968 limit=40427
[  240.742942][ T4324] kworker/u4:6: attempt to access beyond end of device
[  240.742942][ T4324] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  241.396862][ T7368] loop0: detected capacity change from 0 to 256
[  243.466465][ T7399] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  243.553862][ T7409] futex_wake_op: syz.2.964 tries to shift op by -1; fix this program
[  244.376593][ T7443] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed
[  244.393034][ T7443] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff)
[  244.394567][ T7445] rdma_rxe: already configured on syz_tun
[  245.453395][ T7456] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  245.808260][ T7458] capability: warning: `syz.3.982' uses deprecated v2 capabilities in a way that may be insecure
[  249.525159][ T7497] bridge0: port 2(bridge_slave_1) entered disabled state
[  249.532611][ T7497] bridge0: port 1(bridge_slave_0) entered disabled state
[  250.124679][   T48] Bluetooth: hci0: command 0x0401 tx timeout
[  250.204832][ T4277] Bluetooth: hci2: command 0x1003 tx timeout
[  250.208368][ T4280] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  250.338844][ T7497] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  250.401094][ T7497] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  250.578172][  T129] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  250.609756][  T129] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  251.400645][ T7497] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  251.434528][ T7497] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  251.443454][ T7497] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  251.480165][ T7497] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  251.962608][ T4851] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  252.143041][ T4851] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  252.334824][ T7506] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  252.368924][ T4851] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  252.439427][ T4851] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  252.537482][ T7506] usb 1-1: Using ep0 maxpacket: 16
[  252.558450][ T7506] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  252.594791][ T7506] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  252.629513][ T7506] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  252.653301][ T7506] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  252.684699][   T48] Bluetooth: hci4: command 0x0406 tx timeout
[  252.725811][ T7506] usb 1-1: Product: syz
[  252.749147][ T7506] usb 1-1: Manufacturer: syz
[  252.762314][ T7506] usb 1-1: SerialNumber: syz
[  252.868483][ T4851] tipc: Left network mode
[  253.049578][ T7506] usb 1-1: 0:2 : does not exist
[  253.067407][ T7506] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[  253.130797][ T7506] usb 1-1: USB disconnect, device number 12
[  253.399727][ T4259] udevd[4259]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  253.486201][ T7591] loop1: detected capacity change from 0 to 512
[  253.527513][ T7591] EXT4-fs: quotafile must be on filesystem root
[  254.762425][ T7627] binder: 7626:7627 ioctl c0306201 2000000003c0 returned -14
[  254.849820][ T7630] binder: 7628:7630 ioctl c0306201 200000000180 returned -14
[  255.728763][ T1274] ieee802154 phy0 wpan0: encryption failed: -22
[  255.743269][ T1274] ieee802154 phy1 wpan1: encryption failed: -22
[  259.819158][ T7698] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  261.115561][ T7506] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  261.584524][ T7506] usb 1-1: Using ep0 maxpacket: 16
[  261.593070][ T7506] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  261.604399][ T7506] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  261.626455][ T7506] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  261.644578][ T7506] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  261.652627][ T7506] usb 1-1: Product: syz
[  261.657356][ T7506] usb 1-1: Manufacturer: syz
[  261.661983][ T7506] usb 1-1: SerialNumber: syz
[  261.905761][ T7506] usb 1-1: 0:2 : does not exist
[  261.932199][ T7506] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[  262.023945][ T7506] usb 1-1: USB disconnect, device number 13
[  262.119622][ T7744] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  262.295285][ T7712] udevd[7712]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  264.925038][ T4851] device hsr_slave_0 left promiscuous mode
[  265.008982][ T4851] device hsr_slave_1 left promiscuous mode
[  265.119727][ T4851] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  265.233645][ T4851] batman_adv: batadv0: Removing interface: batadv_slave_0
[  265.422455][ T4851] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  265.548264][ T4851] batman_adv: batadv0: Removing interface: batadv_slave_1
[  265.701091][ T4851] device bridge_slave_1 left promiscuous mode
[  265.775794][ T4851] bridge0: port 2(bridge_slave_1) entered disabled state
[  265.854950][ T4851] device bridge_slave_0 left promiscuous mode
[  265.899253][ T4851] bridge0: port 1(bridge_slave_0) entered disabled state
[  266.148107][ T4851] device veth1_macvtap left promiscuous mode
[  266.156267][ T4851] device veth0_macvtap left promiscuous mode
[  266.213425][ T4851] device veth1_vlan left promiscuous mode
[  266.241085][ T4851] device veth0_vlan left promiscuous mode
[  268.845627][ T7829] loop1: detected capacity change from 0 to 512
[  268.961169][ T7829] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  268.979939][ T7829] ext4 filesystem being mounted at /170/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  269.055000][ T4851] team0 (unregistering): Port device team_slave_1 removed
[  269.088974][ T7829] EXT4-fs warning (device loop1): ext4_read_inode_bitmap:149: Cannot read inode bitmap - block_group = 0, inode_bitmap = 704643200
[  269.148169][ T4851] team0 (unregistering): Port device team_slave_0 removed
[  269.202915][ T4851] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  269.217701][ T4270] EXT4-fs (loop1): unmounting filesystem.
[  269.286503][ T4851] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  269.671403][ T4851] bond0 (unregistering): Released all slaves
[  270.066154][ T7848] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1094'.
[  270.188196][ T7854] kvm: vcpu 0: requested 768 ns lapic timer period limited to 200000 ns
[  270.284010][ T7856] kvm: pic: non byte write
[  271.640419][ T7879] loop0: detected capacity change from 0 to 128
[  272.529160][ T7889] loop0: detected capacity change from 128 to 4
[  272.591018][ T7879] syz.0.1103: attempt to access beyond end of device
[  272.591018][ T7879] loop0: rw=2049, sector=4, nr_sectors = 2 limit=4
[  272.619661][ T7879] Buffer I/O error on dev loop0, logical block 2, lost sync page write
[  272.686421][ T7879] syz.0.1103: attempt to access beyond end of device
[  272.686421][ T7879] loop0: rw=2049, sector=4, nr_sectors = 2 limit=4
[  272.763084][ T7879] Buffer I/O error on dev loop0, logical block 2, lost sync page write
[  272.961910][ T7909] overlayfs: failed to clone upperpath
[  273.019080][ T7712] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  275.527536][ T7937] overlayfs: failed to clone upperpath
[  275.543710][ T7940] netlink: 'syz.2.1120': attribute type 1 has an invalid length.
[  275.561162][ T7940] 8021q: adding VLAN 0 to HW filter on device bond1
[  275.773469][ T7940] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1120'.
[  275.809385][ T7940] device bond1 entered promiscuous mode
[  275.836985][ T7940] bond1: (slave dummy0): making interface the new active one
[  275.844407][ T7940] device dummy0 entered promiscuous mode
[  275.901056][ T7940] bond1: (slave dummy0): Enslaving as an active interface with an up link
[  275.967424][ T4727] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  276.715425][ T7963] rdma_rxe: rxe_register_device failed with error -23
[  276.859221][ T7963] rdma_rxe: failed to add syz_tun
[  280.117258][ T8002] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1135'.
[  281.225104][ T8016] netlink: 'syz.1.1139': attribute type 1 has an invalid length.
[  281.290924][ T8016] 8021q: adding VLAN 0 to HW filter on device bond1
[  281.337246][ T8022] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1139'.
[  281.367921][ T8022] device bond1 entered promiscuous mode
[  281.489377][ T8028] rdma_rxe: rxe_register_device failed with error -23
[  281.507114][ T8028] rdma_rxe: failed to add syz_tun
[  281.561212][ T8016] bond1: (slave dummy0): making interface the new active one
[  281.581424][ T8016] device dummy0 entered promiscuous mode
[  281.620349][ T8016] bond1: (slave dummy0): Enslaving as an active interface with an up link
[  281.636391][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  283.890054][ T8069] netlink: 'syz.3.1154': attribute type 1 has an invalid length.
[  284.020054][ T8069] device bond1 entered promiscuous mode
[  284.053707][ T8069] 8021q: adding VLAN 0 to HW filter on device bond1
[  284.152274][ T8081] bond1: (slave bridge1): making interface the new active one
[  284.175114][ T8081] device bridge1 entered promiscuous mode
[  284.197817][ T8081] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  284.214142][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  284.384514][   T26] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  285.303494][ T8093] netlink: 'syz.5.1160': attribute type 1 has an invalid length.
[  285.326779][ T8093] 8021q: adding VLAN 0 to HW filter on device bond1
[  285.349818][ T8093] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1160'.
[  285.370991][ T8093] device bond1 entered promiscuous mode
[  285.386787][   T26] usb 2-1: unable to get BOS descriptor or descriptor too short
[  285.401966][   T26] usb 2-1: config 63 has an invalid interface number: 66 but max is 0
[  285.425562][ T8093] bond1: (slave dummy0): making interface the new active one
[  285.433117][   T26] usb 2-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config
[  285.453947][ T8093] device dummy0 entered promiscuous mode
[  285.460337][   T26] usb 2-1: config 63 has no interface number 0
[  285.475397][ T8093] bond1: (slave dummy0): Enslaving as an active interface with an up link
[  285.484113][   T26] usb 2-1: config 63 interface 66 has no altsetting 0
[  285.504510][ T8097] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1158'.
[  285.526593][   T26] usb 2-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4
[  285.544413][   T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  285.560218][   T26] usb 2-1: Product: syz
[  285.569284][   T26] usb 2-1: Manufacturer: syz
[  285.579572][   T26] usb 2-1: SerialNumber: syz
[  285.636517][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  285.826110][   T26] usb 2-1: USB disconnect, device number 13
[  286.981650][ T8113] loop5: detected capacity change from 0 to 256
[  286.999971][ T8086] loop0: detected capacity change from 0 to 40427
[  287.012533][ T8117] rdma_rxe: rxe_register_device failed with error -23
[  287.029974][ T8117] rdma_rxe: failed to add ipvlan0
[  287.045330][ T8086] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  287.083920][ T8086] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  287.162512][ T8086] F2FS-fs (loop0): Found nat_bits in checkpoint
[  288.784568][   T26] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  288.984593][   T26] usb 1-1: Using ep0 maxpacket: 32
[  288.992117][   T26] usb 1-1: config index 0 descriptor too short (expected 29220, got 36)
[  289.004895][   T26] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  289.013965][   T26] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81
[  289.028073][   T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  289.038618][   T26] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  289.048884][   T26] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  289.062274][   T26] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  289.071699][   T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  289.082559][   T26] usb 1-1: config 0 descriptor??
[  289.296927][   T26] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  290.270490][ T5629] usb 1-1: USB disconnect, device number 14
[  290.288345][ T5629] usblp0: removed
[  290.456880][ T8186] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  290.557473][ T8186] device syzkaller0 entered promiscuous mode
[  290.657489][ T8186] tipc: Resetting bearer <eth:syzkaller0>
[  291.125308][ T8185] tipc: Resetting bearer <eth:syzkaller0>
[  291.824322][ T8221] xt_CT: You must specify a L4 protocol and not use inversions on it
[  293.974924][   T26] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  294.174674][   T26] usb 6-1: Using ep0 maxpacket: 32
[  294.597337][   T26] usb 6-1: unable to get BOS descriptor or descriptor too short
[  294.623828][   T26] usb 6-1: unable to read config index 0 descriptor/start: -71
[  294.632186][   T26] usb 6-1: can't read configurations, error -71
[  296.193901][   T26] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  296.744657][   T26] usb 6-1: Using ep0 maxpacket: 32
[  296.752110][   T26] usb 6-1: config index 0 descriptor too short (expected 29220, got 36)
[  296.767402][   T26] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  296.776299][   T26] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81
[  296.785539][   T26] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  296.795959][   T26] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  296.805719][   T26] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  296.818821][   T26] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  296.829142][   T26] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  296.843175][   T26] usb 6-1: config 0 descriptor??
[  297.069288][   T26] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  297.345646][   T26] usb 6-1: USB disconnect, device number 10
[  297.920074][   T26] usblp0: removed
[  299.094963][ T8299] overlayfs: failed to clone upperpath
[  301.538212][ T8323] loop5: detected capacity change from 0 to 128
[  304.250201][ T8185] tipc: Disabling bearer <eth:syzkaller0>
[  305.514713][ T8377] loop1: detected capacity change from 0 to 128
[  306.336832][ T8377] syz.1.1234: attempt to access beyond end of device
[  306.336832][ T8377] loop1: rw=2049, sector=138, nr_sectors = 112 limit=128
[  306.855016][ T8388] loop1: detected capacity change from 128 to 1
[  306.882023][ T8377] syz.1.1234: attempt to access beyond end of device
[  306.882023][ T8377] loop1: rw=2049, sector=10, nr_sectors = 16 limit=1
[  306.984179][ T8399] syz.1.1234: attempt to access beyond end of device
[  306.984179][ T8399] loop1: rw=2049, sector=6, nr_sectors = 2 limit=1
[  307.052659][ T8377] syz.1.1234: attempt to access beyond end of device
[  307.052659][ T8377] loop1: rw=2049, sector=138, nr_sectors = 2 limit=1
[  307.084724][ T8399] Buffer I/O error on dev loop1, logical block 3, lost sync page write
[  307.524796][ T4270] syz-executor: attempt to access beyond end of device
[  307.524796][ T4270] loop1: rw=2049, sector=6, nr_sectors = 2 limit=1
[  307.545166][ T4270] Buffer I/O error on dev loop1, logical block 3, lost sync page write
[  307.564898][   T48] Bluetooth: hci4: command 0x2016 tx timeout
[  307.588543][ T4270] syz-executor: attempt to access beyond end of device
[  307.588543][ T4270] loop1: rw=2049, sector=6, nr_sectors = 2 limit=1
[  307.602244][ T4270] Buffer I/O error on dev loop1, logical block 3, lost sync page write
[  307.610937][ T4270] FAT-fs (loop1): Failed to update on disk inode for unused fallocated blocks, inode could be corrupted. Please run fsck
[  307.832366][ T8422] ipt_REJECT: ECHOREPLY no longer supported.
[  310.373041][ T8455] device syzkaller0 entered promiscuous mode
[  312.869372][ T8488] loop1: detected capacity change from 0 to 1024
[  313.367284][ T8488] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  313.378626][ T8488] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (27642!=20869)
[  313.391637][ T8488] JBD2: no valid journal superblock found
[  313.397482][ T8488] EXT4-fs (loop1): error loading journal
[  314.898904][ T8499] capability: warning: `syz.3.1266' uses 32-bit capabilities (legacy support in use)
[  315.333257][ T8504] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1269'.
[  316.481654][ T8519] tipc: Enabled bearer <udp:syz2>, priority 10
[  316.985594][ T8533] loop5: detected capacity change from 0 to 4096
[  317.033684][ T8533] NILFS (loop5): invalid segment: Checksum error in segment payload
[  317.078586][ T8533] NILFS (loop5): trying rollback from an earlier position
[  317.172875][ T1274] ieee802154 phy0 wpan0: encryption failed: -22
[  317.179253][ T1274] ieee802154 phy1 wpan1: encryption failed: -22
[  317.191078][ T8533] NILFS (loop5): recovery complete
[  317.210183][ T8550] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  317.437383][ T8547] loop0: detected capacity change from 0 to 2048
[  317.539492][ T8547]  loop0: p1 < > p4
[  317.561316][ T8547] loop0: p4 start 42180 is beyond EOD, truncated
[  318.546379][ T8566] loop1: detected capacity change from 0 to 1024
[  318.633980][ T8566] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  319.227436][ T8575] loop5: detected capacity change from 0 to 128
[  319.839214][ T4270] EXT4-fs (loop1): unmounting filesystem.
[  319.954989][ T8575] loop5: detected capacity change from 128 to 1
[  319.965739][ T8585] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1283'.
[  320.020825][ T8581] syz.5.1280: attempt to access beyond end of device
[  320.020825][ T8581] loop5: rw=2049, sector=4, nr_sectors = 2 limit=1
[  320.074710][ T8581] Buffer I/O error on dev loop5, logical block 2, lost sync page write
[  320.139137][ T8581] syz.5.1280: attempt to access beyond end of device
[  320.139137][ T8581] loop5: rw=1, sector=2, nr_sectors = 2 limit=1
[  320.264900][ T8581] Buffer I/O error on dev loop5, logical block 1, lost sync page write
[  320.661713][ T8608] netlink: 'syz.2.1294': attribute type 1 has an invalid length.
[  320.699345][ T8608] device bond2 entered promiscuous mode
[  320.705630][ T8608] 8021q: adding VLAN 0 to HW filter on device bond2
[  320.744002][ T8606] device syzkaller0 entered promiscuous mode
[  320.842518][ T8608] bond2: (slave bridge1): making interface the new active one
[  320.850576][ T8608] device bridge1 entered promiscuous mode
[  320.858366][ T8608] bond2: (slave bridge1): Enslaving as an active interface with an up link
[  320.870969][ T8615] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  321.244692][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready
[  322.198078][ T8644] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  323.886126][ T5629] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  324.114566][ T5629] usb 2-1: Using ep0 maxpacket: 16
[  324.126254][ T5629] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  324.200999][ T5629] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  324.254154][ T5629] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  324.294058][ T5629] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  324.334369][ T5629] usb 2-1: Product: syz
[  324.361795][ T5629] usb 2-1: Manufacturer: syz
[  324.368940][ T5629] usb 2-1: SerialNumber: syz
[  324.610797][ T5629] usb 2-1: 0:2 : does not exist
[  324.636684][ T5629] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[  324.879557][ T5629] usb 2-1: USB disconnect, device number 14
[  324.982327][ T8694] gfs2: not a GFS2 filesystem
[  325.503268][ T7712] udevd[7712]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  327.128768][ T8732] loop5: detected capacity change from 0 to 64
[  333.642411][ T8787] device syzkaller0 entered promiscuous mode
[  333.656610][ T5629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  333.700491][ T8787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  335.398716][ T8813] rdma_rxe: rxe_register_device failed with error -23
[  335.405693][ T8813] rdma_rxe: failed to add syz_tun
[  335.487400][ T8814] device syzkaller0 entered promiscuous mode
[  336.423004][ T8828] device syzkaller0 entered promiscuous mode
[  336.473576][ T8828] 0: reclassify loop, rule prio 0, protocol 800
[  338.051659][ T8846] device syzkaller0 entered promiscuous mode
[  339.679416][ T8876] loop5: detected capacity change from 0 to 512
[  339.775869][ T8876] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  339.791066][ T8879] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  339.857693][ T8876] EXT4-fs (loop5): invalid journal inode
[  339.890035][ T8876] EXT4-fs (loop5): can't get journal size
[  340.513310][ T8876] EXT4-fs (loop5): 1 truncate cleaned up
[  340.546085][ T8876] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  341.856640][ T6439] EXT4-fs (loop5): unmounting filesystem.
[  346.035176][ T8930] loop1: detected capacity change from 0 to 128
[  347.527713][ T8948] loop5: detected capacity change from 0 to 4096
[  350.554115][ T8974] tipc: Started in network mode
[  350.575895][ T8974] tipc: Node identity ac1414aa, cluster identity 4711
[  350.581998][ T8978] input: syz1 as /devices/virtual/input/input8
[  350.685634][ T8974] tipc: Enabled bearer <udp:syz2>, priority 10
[  351.703793][ T5635] tipc: Node number set to 2886997162
[  352.354750][ T5635] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  352.569620][ T5635] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  352.655669][ T5635] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  352.781361][ T5635] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  353.613034][ T5635] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  353.685270][ T8997] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  354.534650][   T26] usb 6-1: USB disconnect, device number 11
[  355.969595][ T7716] udevd[7716]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  356.280355][ T9045] device syzkaller0 entered promiscuous mode
[  356.376060][ T9047] IPVS: rr: FWM 3 0x00000003 - no destination available
[  357.144666][ T4313] usb 2-1: new full-speed USB device number 15 using dummy_hcd
[  357.350200][ T4313] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  357.372910][ T4313] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  357.591293][ T4313] usb 2-1: config 0 descriptor??
[  357.599910][ T4313] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  357.865011][ T4313] gp8psk: usb in 128 operation failed.
[  358.077821][ T4313] gp8psk: usb in 146 operation failed.
[  358.098743][ T4313] gp8psk: failed to get FW version
[  358.149562][ T4313] gp8psk: usb in 149 operation failed.
[  358.175952][ T4313] gp8psk: failed to get FPGA version
[  358.295473][ T4313] gp8psk: usb in 138 operation failed.
[  358.376437][ T4313] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  358.605719][ T4313] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  358.619441][ T4313] usb 2-1: USB disconnect, device number 15
[  359.343761][ T9093] loop0: detected capacity change from 0 to 128
[  362.177577][ T9134] loop0: detected capacity change from 0 to 512
[  362.239916][ T9134] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  362.278299][ T9134] EXT4-fs (loop0): invalid journal inode
[  362.304585][ T9134] EXT4-fs (loop0): can't get journal size
[  362.327683][ T9134] EXT4-fs (loop0): 1 truncate cleaned up
[  362.333384][ T9134] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  363.130476][ T4267] EXT4-fs (loop0): unmounting filesystem.
[  363.460924][ T9155] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.1424'.
[  367.090549][ T4311] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  367.624526][ T4311] usb 2-1: Using ep0 maxpacket: 32
[  367.724361][ T4311] usb 2-1: device descriptor read/all, error -71
[  367.742099][ T9184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1432'.
[  368.186554][ T9193] Bluetooth: MGMT ver 1.22
[  368.243138][ T9198] loop1: detected capacity change from 0 to 512
[  368.306096][ T9198] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  368.335701][ T9198] EXT4-fs (loop1): invalid journal inode
[  368.392231][ T9198] EXT4-fs (loop1): can't get journal size
[  368.456803][ T9198] EXT4-fs (loop1): 1 truncate cleaned up
[  368.462643][ T9198] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  371.600443][ T4270] EXT4-fs (loop1): unmounting filesystem.
[  374.294809][ T9259] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1451'.
[  374.621532][ T9256] loop0: detected capacity change from 0 to 4096
[  374.722402][ T9256] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  375.427871][ T9256] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096)
[  376.305540][ T9275] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  376.687779][ T9280] overlayfs: upper fs does not support tmpfile.
[  376.704979][ T9280] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  376.713665][ T9280] overlayfs: failed to set xattr on upper
[  376.720041][ T9280] overlayfs: ...falling back to index=off,metacopy=off.
[  377.073209][ T9285] loop1: detected capacity change from 0 to 64
[  377.444056][ T4267] NILFS (loop0): DAT doesn't have a block to manage vblocknr = 648518346341351424
[  377.790027][ T4267] NILFS error (device loop0): nilfs_bmap_truncate: broken bmap (inode number=12)
[  378.230416][ T4267] Remounting filesystem read-only
[  378.262011][ T4267] NILFS (loop0): error -5 truncating bmap (ino=12)
[  378.353405][ T4267] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer
[  378.389779][ T9292] device syzkaller0 entered promiscuous mode
[  378.556996][ T9294] loop0: detected capacity change from 0 to 1024
[  378.606977][ T1274] ieee802154 phy0 wpan0: encryption failed: -22
[  378.613604][ T1274] ieee802154 phy1 wpan1: encryption failed: -22
[  379.535479][ T9294] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  379.656594][   T27] audit: type=1800 audit(1773085286.112:28): pid=9294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1469" name="file1" dev="loop0" ino=15 res=0 errno=0
[  379.745012][   T27] audit: type=1107 audit(1773085286.192:29): pid=9310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  379.930094][ T9294] EXT4-fs error (device loop0): __ext4_get_inode_loc:4513: comm syz.0.1469: Invalid inode table block 11374347512208409343 in block_group 0
[  380.137112][ T9325] EXT4-fs error (device loop0): __ext4_get_inode_loc:4513: comm syz.0.1469: Invalid inode table block 11374347512208409343 in block_group 0
[  380.230449][ T9294] EXT4-fs error (device loop0): __ext4_get_inode_loc:4513: comm syz.0.1469: Invalid inode table block 11374347512208409343 in block_group 0
[  380.252213][ T9294] EXT4-fs error (device loop0): __ext4_get_inode_loc:4513: comm syz.0.1469: Invalid inode table block 11374347512208409343 in block_group 0
[  380.824907][ T9306] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:477: comm ext4lazyinit: Invalid block bitmap block 12912728108132444414 in block_group 0
[  381.103551][ T9325] EXT4-fs error (device loop0): __ext4_get_inode_loc:4513: comm syz.0.1469: Invalid inode table block 11374347512208409343 in block_group 0
[  381.271941][ T9294] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5933: Corrupt filesystem
[  383.090966][ T9294] EXT4-fs error (device loop0): ext4_dirty_inode:6137: inode #15: comm syz.0.1469: mark_inode_dirty error
[  383.250481][ T9325] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5933: Corrupt filesystem
[  383.265084][   T27] audit: type=1800 audit(1773085289.722:30): pid=9294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1469" name="file1" dev="loop0" ino=15 res=0 errno=0
[  383.324947][ T9325] EXT4-fs error (device loop0): ext4_setattr:5615: inode #15: comm syz.0.1469: mark_inode_dirty error
[  383.355002][ T9350] device syzkaller0 entered promiscuous mode
[  383.497543][ T4267] EXT4-fs (loop0): unmounting filesystem.
[  384.016475][ T9358] kvm: pic: non byte write
[  387.255951][ T9395] vivid-001: disconnect
[  388.252021][ T9388] vivid-001: reconnect
[  388.428339][ T9399] device syzkaller0 entered promiscuous mode
[  389.380408][ T9409] loop1: detected capacity change from 0 to 4096
[  391.980362][ T9418] loop5: detected capacity change from 0 to 64
[  394.233498][ T9444] loop5: detected capacity change from 0 to 1024
[  399.424656][ T7506] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  399.952720][ T7506] usb 1-1: config 0 has no interfaces?
[  399.964582][ T7506] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  399.993400][ T7506] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  400.021628][ T7506] usb 1-1: config 0 descriptor??
[  400.573677][ T7506] usb 1-1: USB disconnect, device number 15
[  401.496575][ T7506] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  401.697619][ T7506] usb 1-1: unable to get BOS descriptor or descriptor too short
[  401.713616][ T7506] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7
[  401.739418][ T7506] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7
[  401.791213][ T7506] usb 1-1: string descriptor 0 read error: -22
[  401.807221][ T7506] usb 1-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40
[  401.834460][ T7506] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  402.064020][ T7506] usb 1-1: Can't get UAC3 power state for id 10
[  403.699765][ T7506] usb 1-1: 2:0: failed to get current value for ch 0 (-71)
[  403.742764][ T7506] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2)
[  403.836397][ T7506] usb 1-1: USB disconnect, device number 16
[  405.947871][ T9587] device syzkaller0 entered promiscuous mode
[  407.233861][ T9617] device syzkaller0 entered promiscuous mode
[  408.712207][ T9631] device syzkaller0 entered promiscuous mode
[  410.485012][ T9654] loop5: detected capacity change from 0 to 4096
[  410.498848][ T9654] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[  410.512798][ T9654] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 4096)
[  412.175746][ T9662] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  412.232586][ T9664] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1556'.
[  412.626003][ T9670] overlayfs: upper fs does not support tmpfile.
[  412.635796][ T9670] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  412.642863][ T9670] overlayfs: failed to set xattr on upper
[  412.648755][ T9670] overlayfs: ...falling back to index=off,metacopy=off.
[  413.037990][ T6439] NILFS (loop5): DAT doesn't have a block to manage vblocknr = 648518346341351424
[  413.039302][ T6439] NILFS error (device loop5): nilfs_bmap_truncate: broken bmap (inode number=12)
[  413.079433][ T6439] Remounting filesystem read-only
[  413.080059][ T6439] NILFS (loop5): error -5 truncating bmap (ino=12)
[  413.241461][ T6439] NILFS (loop5): disposed unprocessed dirty file(s) when detaching log writer
[  413.602411][ T9675] device syzkaller0 entered promiscuous mode
[  414.808704][ T9694] device syzkaller0 entered promiscuous mode
[  415.099929][ T9699] loop5: detected capacity change from 0 to 8192
[  416.487376][ T9710] device bridge1 entered promiscuous mode
[  418.203749][ T9716] syz.1.1572 (9716): drop_caches: 2
[  422.802655][   T48] Bluetooth: hci5: command 0x0406 tx timeout
[  422.997273][ T9753] overlayfs: failed to clone upperpath
[  424.205895][ T9776] device syzkaller0 entered promiscuous mode
[  425.283357][ T9796] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready
[  427.996434][ T9824] device syzkaller0 entered promiscuous mode
[  428.131085][ T9828] loop5: detected capacity change from 0 to 4096
[  429.378433][ T9833] device syzkaller0 entered promiscuous mode
[  430.387628][ T9854] input: syz1 as /devices/virtual/input/input9
[  433.929875][ T9868] netlink: 'syz.5.1610': attribute type 10 has an invalid length.
[  433.952295][ T9868] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  439.911500][ T9878] device syzkaller0 entered promiscuous mode
[  440.048052][ T1274] ieee802154 phy0 wpan0: encryption failed: -22
[  440.054471][ T1274] ieee802154 phy1 wpan1: encryption failed: -22
[  443.761270][ T9918] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  444.414582][ T9961] vivid-003: disconnect
[  445.226420][ T9948] vivid-003: reconnect
[  446.739959][ T9983] loop1: detected capacity change from 0 to 32768
[  446.765207][ T9983] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.1636 (9983)
[  447.945788][ T9983] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  447.957093][ T9983] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  447.965859][ T9983] BTRFS info (device loop1): enabling disk space caching
[  447.972916][ T9983] BTRFS info (device loop1): force clearing of disk cache
[  447.980068][ T9983] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  447.989552][ T9983] BTRFS info (device loop1): use zstd compression, level 3
[  447.996759][ T9983] BTRFS info (device loop1): disk space caching is enabled
[  448.679625][ T9983] BTRFS info (device loop1): enabling ssd optimizations
[  448.693874][ T9983] BTRFS info (device loop1): rebuilding free space tree
[  448.952442][ T9983] BTRFS info (device loop1): disabling free space tree
[  448.960206][ T9983] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  448.970493][ T9983] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  450.516204][ T4270] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  451.401113][T10060] device syzkaller0 entered promiscuous mode
[  451.726233][T10072] vivid-001: disconnect
[  453.236926][T10059] vivid-001: reconnect
[  454.206785][T10095] loop1: detected capacity change from 0 to 4096
[  454.280543][T10095] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  454.355714][T10095] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096)
[  454.859694][T10102] loop0: detected capacity change from 0 to 1024
[  454.940259][T10106] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  454.973928][T10102] EXT4-fs: Ignoring removed bh option
[  455.627850][T10113] overlayfs: upper fs does not support tmpfile.
[  455.634553][T10113] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  455.641558][T10113] overlayfs: failed to set xattr on upper
[  455.647415][T10113] overlayfs: ...falling back to index=off,metacopy=off.
[  455.965271][T10102] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  455.985524][ T4270] NILFS (loop1): DAT doesn't have a block to manage vblocknr = 648518346341351424
[  456.124792][ T4270] NILFS error (device loop1): nilfs_bmap_truncate: broken bmap (inode number=12)
[  456.184463][   T27] audit: type=1800 audit(1773085362.612:31): pid=10102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1658" name="file1" dev="loop0" ino=15 res=0 errno=0
[  456.231700][ T4270] Remounting filesystem read-only
[  456.254645][ T4270] NILFS (loop1): error -5 truncating bmap (ino=12)
[  456.291588][T10120] loop5: detected capacity change from 0 to 40427
[  456.303629][T10120] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504)
[  456.310702][T10120] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  456.322292][T10120] F2FS-fs (loop5): invalid crc value
[  456.330736][T10120] F2FS-fs (loop5): Found nat_bits in checkpoint
[  456.363620][   T27] audit: type=1800 audit(1773085362.622:32): pid=10102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1658" name="file1" dev="loop0" ino=15 res=0 errno=0
[  456.395142][T10120] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  456.402856][T10120] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  456.430766][ T4270] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer
[  457.034894][ T4267] EXT4-fs (loop0): unmounting filesystem.
[  457.071522][T10131] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1662'.
[  457.856995][T10141] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  457.914744][T10134] tipc: Resetting bearer <eth:syzkaller0>
[  457.932797][T10149] kAFS: unable to lookup cell ''
[  458.099102][T10133] tipc: Disabling bearer <eth:syzkaller0>
[  458.888923][T10156] device vlan2 entered promiscuous mode
[  458.960069][T10156] device team0 entered promiscuous mode
[  458.992816][T10156] device team_slave_0 entered promiscuous mode
[  459.108441][T10156] device team_slave_1 entered promiscuous mode
[  459.515329][T10164] loop5: detected capacity change from 0 to 256
[  459.535188][T10164] exfat: Unknown parameter '@'
[  460.745097][ T7506] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  460.960734][ T7506] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  460.973355][ T7506] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  460.986271][ T7506] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  461.106215][ T7506] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  461.298199][T10179] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  462.881317][  T129] usb 1-1: USB disconnect, device number 17
[  462.973559][T10201] vivid-001: disconnect
[  463.225757][T10182] vivid-001: reconnect
[  467.069765][T10242] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer.
[  467.620380][T10252] binder: 10251:10252 ioctl 4018620d 0 returned -22
[  470.874571][T10276] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1698'.
[  471.306132][T10270] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  471.441907][T10270] device syzkaller0 entered promiscuous mode
[  472.364351][T10270] tipc: Resetting bearer <eth:syzkaller0>
[  473.172232][ T7506] libceph: connect (1)[c::]:6789 error -101
[  473.181619][T10265] tipc: Resetting bearer <eth:syzkaller0>
[  473.185555][ T7506] libceph: mon0 (1)[c::]:6789 connect error
[  473.285417][T10265] tipc: Disabling bearer <eth:syzkaller0>
[  473.452716][T10307] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  473.463875][  T129] libceph: connect (1)[c::]:6789 error -101
[  473.484934][  T129] libceph: mon0 (1)[c::]:6789 connect error
[  473.494893][T10292] ceph: No mds server is up or the cluster is laggy
[  473.515743][T10308] device syzkaller0 entered promiscuous mode
[  473.599583][T10307] tipc: Resetting bearer <eth:syzkaller0>
[  473.625929][T10306] tipc: Resetting bearer <eth:syzkaller0>
[  473.748686][T10306] tipc: Disabling bearer <eth:syzkaller0>
[  473.898854][ T7506] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  475.377550][ T7506] usb 2-1: config 0 has no interfaces?
[  475.394755][ T7506] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[  475.403855][ T7506] usb 2-1: New USB device strings: Mfr=6, Product=0, SerialNumber=0
[  475.446476][ T7506] usb 2-1: Manufacturer: syz
[  475.467015][ T7506] usb 2-1: config 0 descriptor??
[  476.821523][ T7506] usb 2-1: USB disconnect, device number 18
[  477.130927][T10334] sctp: [Deprecated]: syz.3.1715 (pid 10334) Use of struct sctp_assoc_value in delayed_ack socket option.
[  477.130927][T10334] Use struct sctp_sack_info instead
[  478.980217][T10355] loop5: detected capacity change from 0 to 131072
[  479.028215][T10355] F2FS-fs (loop5): invalid crc value
[  479.146682][T10355] F2FS-fs (loop5): Found nat_bits in checkpoint
[  479.191764][T10355] F2FS-fs (loop5): Cannot turn on quotas: -2 on 2
[  479.201865][T10355] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  479.347374][T10355] fuse: Bad value for 'fd'
[  483.056480][T10395] syz.2.1729 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  484.704590][   T26] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  485.660451][   T26] usb 2-1: config 0 has no interfaces?
[  485.668321][   T26] usb 2-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49
[  485.688096][   T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  486.302015][   T26] usb 2-1: Product: syz
[  486.306519][   T26] usb 2-1: Manufacturer: syz
[  486.311142][   T26] usb 2-1: SerialNumber: syz
[  486.318433][   T26] usb 2-1: config 0 descriptor??
[  486.644604][T10435] overlayfs: failed to resolve './file0': -2
[  486.702995][ T5625] usb 2-1: USB disconnect, device number 19
[  493.534521][ T5625] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  493.736079][ T5625] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  493.769184][ T5625] usb 1-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[  493.798844][ T5625] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  493.836523][ T5625] usb 1-1: Product: syz
[  493.855188][ T5625] usb 1-1: Manufacturer: syz
[  493.859816][ T5625] usb 1-1: SerialNumber: syz
[  493.934608][ T5625] usb 1-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[  494.357050][ T5625] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  494.409674][ T5625] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0)
[  494.438706][ T5625] usb 1-1: media controller created
[  494.482948][ T5625] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  494.594486][ T7506] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  495.106468][ T7506] usb 6-1: config 0 has no interfaces?
[  495.113073][ T7506] usb 6-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[  495.143746][ T7506] usb 6-1: New USB device strings: Mfr=6, Product=0, SerialNumber=0
[  495.201506][ T7506] usb 6-1: Manufacturer: syz
[  495.212041][ T5625] usb 1-1: USB disconnect, device number 18
[  495.216862][ T7506] usb 6-1: config 0 descriptor??
[  495.355867][T10490] device syzkaller0 entered promiscuous mode
[  495.383747][T10490] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  495.403375][T10490] tipc: Resetting bearer <eth:syzkaller0>
[  495.418773][T10489] tipc: Resetting bearer <eth:syzkaller0>
[  495.440871][T10489] tipc: Disabling bearer <eth:syzkaller0>
[  498.812300][T10504] device syzkaller0 entered promiscuous mode
[  499.766053][T10073] usb 6-1: USB disconnect, device number 12
[  501.185097][T10518] device syzkaller0 entered promiscuous mode
[  502.074696][ T1274] ieee802154 phy0 wpan0: encryption failed: -22
[  502.081119][ T1274] ieee802154 phy1 wpan1: encryption failed: -22
[  505.283254][T10561] loop5: detected capacity change from 0 to 1024
[  505.290272][T10561] EXT4-fs: Ignoring removed nomblk_io_submit option
[  505.356511][T10561] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  505.487672][T10567] loop0: detected capacity change from 0 to 64
[  505.849438][T10567] hfs: unable to locate alternate MDB
[  505.855773][T10567] hfs: continuing without an alternate MDB
[  506.397927][ T6439] EXT4-fs (loop5): unmounting filesystem.
[  514.337372][T10624] loop5: detected capacity change from 0 to 2048
[  514.405908][T10625] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  514.517753][T10624] NILFS (loop5): unrecognized mount option "˙˙˙˙˙˙˙˙˙˙˙˙˙˙18446744073709551615˙˙˙˙š@­LqE:†‹ á艞Őt}˛0ü$‰"
[  515.949090][ T4280] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  515.961743][ T4280] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  515.971460][ T4280] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  515.979523][ T4280] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  515.987225][ T4280] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  515.995528][ T4280] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  518.053255][ T4277] Bluetooth: hci2: command 0x0409 tx timeout
[  518.968853][T10634] device syzkaller0 entered promiscuous mode
[  520.124623][ T4277] Bluetooth: hci2: command 0x041b tx timeout
[  522.173760][T10675] loop0: detected capacity change from 0 to 32768
[  522.204518][ T4277] Bluetooth: hci2: command 0x040f tx timeout
[  522.665627][T10675] JBD2: Ignoring recovery information on journal
[  522.823117][T10675] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  523.401396][ T4267] ocfs2: Unmounting device (7,0) on (node local)
[  524.297516][ T4277] Bluetooth: hci2: command 0x0419 tx timeout
[  526.049868][T10698] loop0: detected capacity change from 0 to 512
[  526.057162][T10698] EXT4-fs: Ignoring removed nomblk_io_submit option
[  526.065741][T10698] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  526.101059][T10698] EXT4-fs (loop0): 1 truncate cleaned up
[  526.107353][T10698] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  527.098612][ T4267] EXT4-fs (loop0): unmounting filesystem.
[  531.505870][   T48] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  531.517383][   T48] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  531.525875][   T48] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  531.533696][   T48] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  531.541482][   T48] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  531.548739][   T48] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  533.667863][ T4277] Bluetooth: hci3: command 0x0409 tx timeout
[  535.356730][T10709] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1801'.
[  536.868210][ T4277] Bluetooth: hci3: command 0x041b tx timeout
[  538.081062][T10636] chnl_net:caif_netlink_parms(): no params data found
[  538.089219][ T4280] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  538.183060][ T4280] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  538.191838][ T4280] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  538.214978][ T4280] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  538.224270][ T4280] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  538.235401][ T4280] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  538.926874][ T4280] Bluetooth: hci3: command 0x040f tx timeout
[  539.239905][ T9288] smc: removing ib device syz1
[  539.539332][T10636] bridge0: port 1(bridge_slave_0) entered blocking state
[  539.547924][T10636] bridge0: port 1(bridge_slave_0) entered disabled state
[  539.592338][T10636] device bridge_slave_0 entered promiscuous mode
[  539.637441][T10636] bridge0: port 2(bridge_slave_1) entered blocking state
[  539.659403][T10636] bridge0: port 2(bridge_slave_1) entered disabled state
[  539.692731][T10636] device bridge_slave_1 entered promiscuous mode
[  539.793102][T10636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  539.822838][T10636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  539.986035][T10636] team0: Port device team_slave_0 added
[  540.089525][T10636] team0: Port device team_slave_1 added
[  540.198260][T10780] loop0: detected capacity change from 0 to 128
[  540.295087][ T4277] Bluetooth: hci5: command 0x0409 tx timeout
[  540.309934][T10636] batman_adv: batadv0: Adding interface: batadv_slave_0
[  540.356911][T10636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  540.429913][T10780] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  540.451392][T10780] ext4 filesystem being mounted at /306/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  540.484619][T10636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  540.715903][ T4394] tipc: Left network mode
[  540.719402][T10731] chnl_net:caif_netlink_parms(): no params data found
[  541.061893][ T4277] Bluetooth: hci3: command 0x0419 tx timeout
[  541.097136][T10636] batman_adv: batadv0: Adding interface: batadv_slave_1
[  541.124710][T10636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  541.278510][ T4267] EXT4-fs (loop0): unmounting filesystem.
[  541.286954][T10636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  541.456396][T10790] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  541.463968][T10790] overlayfs: failed to set xattr on upper
[  541.469881][T10790] overlayfs: ...falling back to index=off,metacopy=off.
[  541.980418][T10636] device hsr_slave_0 entered promiscuous mode
[  541.995454][T10636] device hsr_slave_1 entered promiscuous mode
[  542.014479][T10636] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  542.022077][T10636] Cannot create hsr debugfs directory
[  542.364654][ T4280] Bluetooth: hci5: command 0x041b tx timeout
[  543.173266][T10761] chnl_net:caif_netlink_parms(): no params data found
[  543.197382][T10731] bridge0: port 1(bridge_slave_0) entered blocking state
[  543.206835][T10731] bridge0: port 1(bridge_slave_0) entered disabled state
[  543.253962][T10731] device bridge_slave_0 entered promiscuous mode
[  544.101845][T10731] bridge0: port 2(bridge_slave_1) entered blocking state
[  544.114559][T10731] bridge0: port 2(bridge_slave_1) entered disabled state
[  544.145808][T10731] device bridge_slave_1 entered promiscuous mode
[  544.444545][ T4280] Bluetooth: hci5: command 0x040f tx timeout
[  545.708931][T10731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  546.584560][ T4280] Bluetooth: hci5: command 0x0419 tx timeout
[  546.771183][T10731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  546.940755][T10761] bridge0: port 1(bridge_slave_0) entered blocking state
[  546.952120][T10761] bridge0: port 1(bridge_slave_0) entered disabled state
[  546.962549][T10761] device bridge_slave_0 entered promiscuous mode
[  547.048055][T10731] team0: Port device team_slave_0 added
[  547.056384][T10761] bridge0: port 2(bridge_slave_1) entered blocking state
[  547.063739][T10761] bridge0: port 2(bridge_slave_1) entered disabled state
[  547.619340][T10761] device bridge_slave_1 entered promiscuous mode
[  548.097582][T10731] team0: Port device team_slave_1 added
[  548.192784][T10761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  548.323472][T10867] loop0: detected capacity change from 0 to 256
[  548.409112][T10867] FAT-fs (loop0): Directory bread(block 64) failed
[  548.415993][T10867] FAT-fs (loop0): Directory bread(block 65) failed
[  548.422962][T10867] FAT-fs (loop0): Directory bread(block 66) failed
[  548.429686][T10867] FAT-fs (loop0): Directory bread(block 67) failed
[  548.436865][T10867] FAT-fs (loop0): Directory bread(block 68) failed
[  548.443487][T10867] FAT-fs (loop0): Directory bread(block 69) failed
[  548.450514][T10867] FAT-fs (loop0): Directory bread(block 70) failed
[  548.457189][T10867] FAT-fs (loop0): Directory bread(block 71) failed
[  548.464231][T10867] FAT-fs (loop0): Directory bread(block 72) failed
[  548.470919][T10867] FAT-fs (loop0): Directory bread(block 73) failed
[  548.689223][T10761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  548.782914][T10731] batman_adv: batadv0: Adding interface: batadv_slave_0
[  548.794405][T10731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  548.874576][T10731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  548.963819][ T4394] device hsr_slave_0 left promiscuous mode
[  548.979657][ T4394] device hsr_slave_1 left promiscuous mode
[  548.986651][ T4394] batman_adv: batadv0: Removing interface: batadv_slave_0
[  548.995099][ T4394] batman_adv: batadv0: Removing interface: batadv_slave_1
[  549.003141][ T4394] device bridge_slave_1 left promiscuous mode
[  549.012778][ T4394] bridge0: port 2(bridge_slave_1) entered disabled state
[  549.051326][ T4394] device bridge_slave_0 left promiscuous mode
[  549.085694][ T4394] bridge0: port 1(bridge_slave_0) entered disabled state
[  550.739075][ T4394] bond1 (unregistering): (slave dummy0): Releasing active interface
[  550.747510][ T4394] device dummy0 left promiscuous mode
[  550.753820][ T4394] bond1 (unregistering): Released all slaves
[  551.551999][ T4394] device team_slave_1 left promiscuous mode
[  551.569632][ T4394] team0 (unregistering): Port device team_slave_1 removed
[  551.622606][ T4394] device team_slave_0 left promiscuous mode
[  551.630346][ T4394] team0 (unregistering): Port device team_slave_0 removed
[  551.699212][ T4394] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  551.756239][ T4394] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  552.171754][ T4394] bond0 (unregistering): Released all slaves
[  552.267363][T10761] team0: Port device team_slave_0 added
[  552.275823][T10731] batman_adv: batadv0: Adding interface: batadv_slave_1
[  552.282966][T10731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  552.310765][T10731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  552.367178][T10878] device bridge2 entered promiscuous mode
[  552.454792][T10761] team0: Port device team_slave_1 added
[  552.497270][T10636] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  552.514999][T10761] batman_adv: batadv0: Adding interface: batadv_slave_0
[  552.521977][T10761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  552.586381][T10761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  552.756379][T10636] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  552.766726][T10636] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  552.781156][T10761] batman_adv: batadv0: Adding interface: batadv_slave_1
[  552.803313][T10761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  553.424580][T10761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  553.458348][T10731] device hsr_slave_0 entered promiscuous mode
[  553.475527][T10731] device hsr_slave_1 entered promiscuous mode
[  553.492571][T10731] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  553.512125][T10731] Cannot create hsr debugfs directory
[  553.522802][T10636] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  554.189138][T10761] device hsr_slave_0 entered promiscuous mode
[  554.316485][T10761] device hsr_slave_1 entered promiscuous mode
[  554.423980][T10761] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  554.523666][T10761] Cannot create hsr debugfs directory
[  555.098176][T10636] 8021q: adding VLAN 0 to HW filter on device bond0
[  555.248153][ T4394] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  555.353631][ T7048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  555.362286][ T7048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  555.413404][ T4394] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  555.442108][T10636] 8021q: adding VLAN 0 to HW filter on device team0
[  555.482716][ T5912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  555.524938][ T5912] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  555.533744][ T5912] bridge0: port 1(bridge_slave_0) entered blocking state
[  555.540925][ T5912] bridge0: port 1(bridge_slave_0) entered forwarding state
[  555.553673][ T5625] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  555.599782][ T4394] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  555.641238][T10731] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  555.652336][ T5912] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  555.661470][ T5912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  555.670698][ T5912] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  555.679506][ T5912] bridge0: port 2(bridge_slave_1) entered blocking state
[  555.686677][ T5912] bridge0: port 2(bridge_slave_1) entered forwarding state
[  555.694942][ T5912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  555.720162][T10731] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  555.731101][T10731] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  555.742261][ T5912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  555.744663][ T5625] usb 1-1: Using ep0 maxpacket: 8
[  555.757785][ T5912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  555.770223][ T5912] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  555.796043][ T5625] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  555.804112][ T5625] usb 1-1: config 0 has no interface number 0
[  555.807812][ T4394] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  555.811087][ T5625] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  555.833409][ T5625] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  555.842891][ T5625] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  555.853362][ T5625] usb 1-1: config 0 descriptor??
[  555.865016][T10731] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  555.865807][ T5625] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  555.912610][ T5912] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  555.920976][ T5912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  555.931317][ T5912] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  555.941049][ T5912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  555.949920][ T5912] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  555.958722][ T5912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  555.967974][ T5912] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  555.986670][T10636] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  556.079618][T10761] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  556.153719][T10761] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  556.194701][T10761] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  556.209774][ T4313] usb 1-1: USB disconnect, device number 19
[  556.285586][T10761] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  556.386972][T10731] 8021q: adding VLAN 0 to HW filter on device bond0
[  556.454808][T10731] 8021q: adding VLAN 0 to HW filter on device team0
[  556.475216][ T7048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  556.487667][ T7048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  556.558518][ T9288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  556.575323][ T9288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  556.595538][ T9288] bridge0: port 1(bridge_slave_0) entered blocking state
[  556.602704][ T9288] bridge0: port 1(bridge_slave_0) entered forwarding state
[  556.641565][ T4394] tipc: Left network mode
[  556.650973][ T9288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  556.675775][ T9288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  556.697455][ T9288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  556.710683][ T9288] bridge0: port 2(bridge_slave_1) entered blocking state
[  556.717858][ T9288] bridge0: port 2(bridge_slave_1) entered forwarding state
[  556.880882][ T9288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  556.899696][ T9288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  556.914157][ T9288] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  556.933668][ T9288] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  556.971679][T10636] 8021q: adding VLAN 0 to HW filter on device batadv0
[  557.065406][ T6650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  557.097893][ T6650] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  557.185505][ T6650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  557.205332][ T6650] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  557.251383][T10731] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  557.325042][T10731] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  557.459473][T10761] 8021q: adding VLAN 0 to HW filter on device bond0
[  557.694007][T10761] 8021q: adding VLAN 0 to HW filter on device team0
[  558.209482][ T6650] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  558.224333][ T6650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  558.248481][ T6650] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  558.264250][ T6650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  558.303727][ T6650] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  558.313610][ T6650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  558.322399][ T6650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  558.330646][ T6650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  558.349529][ T6650] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  558.358618][ T6650] bridge0: port 1(bridge_slave_0) entered blocking state
[  558.365800][ T6650] bridge0: port 1(bridge_slave_0) entered forwarding state
[  558.379876][ T6650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  558.393284][ T6650] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  558.407282][ T6650] bridge0: port 2(bridge_slave_1) entered blocking state
[  558.414531][ T6650] bridge0: port 2(bridge_slave_1) entered forwarding state
[  558.508137][ T6650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  559.425158][ T6650] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  559.432481][T10967] lo speed is unknown, defaulting to 1000
[  559.441297][ T6650] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  559.465630][ T6650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  559.490383][ T6650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  559.518282][ T6650] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  559.537207][ T6650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  559.563751][ T6650] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  559.584116][ T6650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  559.602356][ T6650] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  559.613740][ T6650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  559.629979][ T6650] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  559.643070][T10972] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1845'.
[  559.654745][T10973] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1845'.
[  559.705119][T10967] lo speed is unknown, defaulting to 1000
[  559.706573][ T6650] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  559.730639][T10761] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  559.755286][T10967] lo speed is unknown, defaulting to 1000
[  559.800157][T10967] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  560.040928][T10967] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  560.141967][ T6437] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  560.162384][ T6437] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  560.186885][ T6437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  560.207276][ T6437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  560.285752][T10731] 8021q: adding VLAN 0 to HW filter on device batadv0
[  560.515365][ T4394] bond0: (slave wlan1): Releasing backup interface
[  560.567641][T10967] lo speed is unknown, defaulting to 1000
[  560.591619][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  560.603499][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  560.628762][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  560.661846][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  560.708975][T10636] device veth0_vlan entered promiscuous mode
[  560.876557][T10636] device veth1_vlan entered promiscuous mode
[  560.887185][T10967] lo speed is unknown, defaulting to 1000
[  560.913442][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  560.927313][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  560.948021][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  560.981730][T10761] 8021q: adding VLAN 0 to HW filter on device batadv0
[  561.036152][T10967] lo speed is unknown, defaulting to 1000
[  561.049399][ T6437] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  561.066765][ T6437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  561.085037][ T6437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  561.106273][T10636] device veth0_macvtap entered promiscuous mode
[  561.128705][T10636] device veth1_macvtap entered promiscuous mode
[  561.158500][T10967] lo speed is unknown, defaulting to 1000
[  561.178935][T10636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  561.226088][T10636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  561.236571][T10636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  561.254323][T10636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  561.304014][T10636] batman_adv: batadv0: Interface activated: batadv_slave_0
[  561.343690][ T6437] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  561.364876][ T6437] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  561.387494][ T6437] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  561.413936][ T6437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  561.443642][T11007] device syzkaller0 entered promiscuous mode
[  561.466943][T10636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  561.480308][T10636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  561.491463][T10636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  561.502582][T10636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  561.514148][T10636] batman_adv: batadv0: Interface activated: batadv_slave_1
[  561.522612][T10967] lo speed is unknown, defaulting to 1000
[  561.578115][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  561.596026][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  561.627306][T10636] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  561.654646][T10636] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  561.663497][T10636] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  561.694734][T10636] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  561.714269][T10967] lo speed is unknown, defaulting to 1000
[  561.746212][ T7048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  561.769047][ T7048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  561.804240][ T7048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  561.813382][ T7048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  561.871593][ T7048] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  561.883377][ T7048] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  561.903364][T10731] device veth0_vlan entered promiscuous mode
[  561.944176][T11020] device syzkaller0 entered promiscuous mode
[  562.003093][T10967] lo speed is unknown, defaulting to 1000
[  562.010172][T10731] device veth1_vlan entered promiscuous mode
[  562.023393][ T7048] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  562.042343][ T7048] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  562.061399][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  562.076971][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  562.086102][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  562.138797][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  562.155793][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  562.169730][T10731] device veth0_macvtap entered promiscuous mode
[  562.182013][ T4851] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  562.191215][ T4851] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  562.208576][T10731] device veth1_macvtap entered promiscuous mode
[  562.218821][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  562.229778][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  562.242241][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  562.258725][ T7048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  562.276749][ T7048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  562.313470][T10731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  562.340094][T10731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  562.351885][T10731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  562.372781][T10731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  562.390520][T10731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  562.401261][T10731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  562.465289][T10731] batman_adv: batadv0: Interface activated: batadv_slave_0
[  562.486243][ T4394] device hsr_slave_0 left promiscuous mode
[  562.500812][ T4394] device hsr_slave_1 left promiscuous mode
[  562.507839][ T4394] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  562.544982][ T4394] batman_adv: batadv0: Removing interface: batadv_slave_0
[  562.553064][ T4394] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  562.574481][ T4394] batman_adv: batadv0: Removing interface: batadv_slave_1
[  562.587949][ T4394] device bridge_slave_1 left promiscuous mode
[  562.594222][ T4394] bridge0: port 2(bridge_slave_1) entered disabled state
[  562.613184][ T4394] device bridge_slave_0 left promiscuous mode
[  562.763072][ T4394] bridge0: port 1(bridge_slave_0) entered disabled state
[  562.938666][ T1274] ieee802154 phy0 wpan0: encryption failed: -22
[  562.945108][ T1274] ieee802154 phy1 wpan1: encryption failed: -22
[  563.286461][ T4394] device veth1_macvtap left promiscuous mode
[  563.292501][ T4394] device veth0_macvtap left promiscuous mode
[  563.320417][ T4394] device veth1_vlan left promiscuous mode
[  563.340117][ T4394] device veth0_vlan left promiscuous mode
[  565.813699][ T4394] bond1 (unregistering): (slave dummy0): Releasing active interface
[  565.830929][ T4394] device dummy0 left promiscuous mode
[  565.843008][ T4394] bond1 (unregistering): Released all slaves
[  566.875505][ T4394] team0 (unregistering): Port device team_slave_1 removed
[  566.946905][ T4394] team0 (unregistering): Port device team_slave_0 removed
[  567.036333][ T4394] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  567.125556][ T4394] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  567.702134][ T4394] bond0 (unregistering): Released all slaves
[  567.817725][ T7048] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  567.830219][ T7048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  567.850461][T11051] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  567.859512][T11051] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  567.868234][T11051] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  567.876954][T11051] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  567.919020][T11051] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  567.928169][T11051] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  567.937106][T11051] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  567.945999][T11051] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  568.012143][T11054] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  568.021446][T11054] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  568.030224][T11054] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  568.038959][T11054] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  568.588721][T11054] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  568.597713][T11054] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  568.607075][T11054] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  568.616056][T11054] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  569.746250][T10731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  569.764410][T10731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  569.784665][T10731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  569.808976][T10731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  569.831110][T10731] batman_adv: batadv0: Interface activated: batadv_slave_1
[  569.883507][T10731] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  569.906651][T10731] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  569.952151][T10731] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  569.966645][T10731] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  570.071225][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  570.414270][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  570.493709][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  570.736823][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  570.765864][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  570.786101][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  570.831961][T10761] device veth0_vlan entered promiscuous mode
[  570.891620][T11077] netlink: 'syz.0.1858': attribute type 1 has an invalid length.
[  572.017057][ T4399] ------------[ cut here ]------------
[  572.022949][ T4399] WARNING: CPU: 1 PID: 4399 at io_uring/io_uring.c:2890 io_ring_exit_work+0x336/0x763
[  572.032618][ T4399] Modules linked in:
[  572.036572][ T4399] CPU: 1 PID: 4399 Comm: kworker/u4:8 Not tainted syzkaller #0
[  572.044131][ T4399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  572.054250][ T4399] Workqueue: events_unbound io_ring_exit_work
[  572.060380][ T4399] RIP: 0010:io_ring_exit_work+0x336/0x763
[  572.066154][ T4399] Code: 89 de 48 8b 7c 24 30 48 8b 74 24 10 e8 1b 2d 11 00 48 85 c0 48 8b 5c 24 28 75 3b e8 1c d5 5d f7 e9 16 fe ff ff e8 12 d5 5d f7 <0f> 0b b8 70 17 00 00 48 89 44 24 10 eb c7 44 89 f1 80 e1 07 80 c1
[  572.085829][ T4399] RSP: 0018:ffffc900049f7ac0 EFLAGS: 00010293
[  572.091919][ T4399] RAX: ffffffff8a249d9e RBX: ffff88805a3d3018 RCX: ffff888027805940
[  572.099960][ T4399] RDX: 0000000000000000 RSI: ffffffffffffffd9 RDI: 0000000000000000
[  572.107988][ T4399] RBP: ffffc900049f7c30 R08: ffffc900049f7a47 R09: 1ffff9200093ef48
[  572.116036][ T4399] R10: dffffc0000000000 R11: fffff5200093ef49 R12: dffffc0000000000
[  572.124032][ T4399] R13: ffff88805a3d3000 R14: 0000000100006966 R15: 000000010000698d
[  572.132061][ T4399] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  572.141044][ T4399] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  572.147675][ T4399] CR2: 00007f66d9b84d58 CR3: 0000000058f26000 CR4: 00000000003506e0
[  572.155704][ T4399] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  572.163696][ T4399] DR3: 000000000000ffe8 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  572.171720][ T4399] Call Trace:
[  572.175038][ T4399]  <TASK>
[  572.177990][ T4399]  ? io_ring_ctx_wait_and_kill+0x2e6/0x2e6
[  572.183838][ T4399]  ? _raw_spin_unlock_irq+0x1f/0x40
[  572.189115][ T4399]  ? process_one_work+0x7b0/0x1160
[  572.194250][ T4399]  process_one_work+0x8a2/0x1160
[  572.199277][ T4399]  ? worker_detach_from_pool+0x240/0x240
[  572.204966][ T4399]  ? _raw_spin_lock_irq+0xb7/0xf0
[  572.210011][ T4399]  ? _raw_spin_lock_irqsave+0x100/0x100
[  572.215620][ T4399]  ? kthread_data+0x4b/0xc0
[  572.220152][ T4399]  worker_thread+0xaa2/0x1270
[  572.224906][ T4399]  ? _raw_spin_unlock_irqrestore+0xbc/0x120
[  572.230826][ T4399]  ? __kthread_parkme+0x162/0x1c0
[  572.235914][ T4399]  kthread+0x29d/0x330
[  572.240012][ T4399]  ? worker_clr_flags+0x1a0/0x1a0
[  572.245095][ T4399]  ? kthread_blkcg+0xd0/0xd0
[  572.249695][ T4399]  ret_from_fork+0x1f/0x30
[  572.254144][ T4399]  </TASK>
[  572.257228][ T4399] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  572.264510][ T4399] CPU: 1 PID: 4399 Comm: kworker/u4:8 Not tainted syzkaller #0
[  572.272066][ T4399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  572.282136][ T4399] Workqueue: events_unbound io_ring_exit_work
[  572.288230][ T4399] Call Trace:
[  572.291518][ T4399]  <TASK>
[  572.294457][ T4399]  dump_stack_lvl+0x188/0x24e
[  572.299153][ T4399]  ? memcpy+0x3c/0x60
[  572.303144][ T4399]  ? show_regs_print_info+0x12/0x12
[  572.308362][ T4399]  ? load_image+0x400/0x400
[  572.312896][ T4399]  panic+0x2e5/0x730
[  572.316822][ T4399]  ? bpf_jit_dump+0xd0/0xd0
[  572.321344][ T4399]  ? ret_from_fork+0x1f/0x30
[  572.325973][ T4399]  __warn+0x2f8/0x4f0
[  572.329966][ T4399]  ? io_ring_exit_work+0x336/0x763
[  572.335104][ T4399]  ? io_ring_exit_work+0x336/0x763
[  572.340240][ T4399]  report_bug+0x2ba/0x4f0
[  572.344584][ T4399]  ? io_ring_exit_work+0x336/0x763
[  572.349718][ T4399]  handle_bug+0x3a/0x70
[  572.353895][ T4399]  exc_invalid_op+0x16/0x40
[  572.358428][ T4399]  asm_exc_invalid_op+0x16/0x20
[  572.363297][ T4399] RIP: 0010:io_ring_exit_work+0x336/0x763
[  572.369024][ T4399] Code: 89 de 48 8b 7c 24 30 48 8b 74 24 10 e8 1b 2d 11 00 48 85 c0 48 8b 5c 24 28 75 3b e8 1c d5 5d f7 e9 16 fe ff ff e8 12 d5 5d f7 <0f> 0b b8 70 17 00 00 48 89 44 24 10 eb c7 44 89 f1 80 e1 07 80 c1
[  572.388629][ T4399] RSP: 0018:ffffc900049f7ac0 EFLAGS: 00010293
[  572.394688][ T4399] RAX: ffffffff8a249d9e RBX: ffff88805a3d3018 RCX: ffff888027805940
[  572.402647][ T4399] RDX: 0000000000000000 RSI: ffffffffffffffd9 RDI: 0000000000000000
[  572.410607][ T4399] RBP: ffffc900049f7c30 R08: ffffc900049f7a47 R09: 1ffff9200093ef48
[  572.418571][ T4399] R10: dffffc0000000000 R11: fffff5200093ef49 R12: dffffc0000000000
[  572.426535][ T4399] R13: ffff88805a3d3000 R14: 0000000100006966 R15: 000000010000698d
[  572.434505][ T4399]  ? io_ring_exit_work+0x336/0x763
[  572.439625][ T4399]  ? io_ring_ctx_wait_and_kill+0x2e6/0x2e6
[  572.445433][ T4399]  ? _raw_spin_unlock_irq+0x1f/0x40
[  572.450624][ T4399]  ? process_one_work+0x7b0/0x1160
[  572.455728][ T4399]  process_one_work+0x8a2/0x1160
[  572.460674][ T4399]  ? worker_detach_from_pool+0x240/0x240
[  572.466410][ T4399]  ? _raw_spin_lock_irq+0xb7/0xf0
[  572.471429][ T4399]  ? _raw_spin_lock_irqsave+0x100/0x100
[  572.476971][ T4399]  ? kthread_data+0x4b/0xc0
[  572.481475][ T4399]  worker_thread+0xaa2/0x1270
[  572.486153][ T4399]  ? _raw_spin_unlock_irqrestore+0xbc/0x120
[  572.492038][ T4399]  ? __kthread_parkme+0x162/0x1c0
[  572.497059][ T4399]  kthread+0x29d/0x330
[  572.501115][ T4399]  ? worker_clr_flags+0x1a0/0x1a0
[  572.506128][ T4399]  ? kthread_blkcg+0xd0/0xd0
[  572.510706][ T4399]  ret_from_fork+0x1f/0x30
[  572.515124][ T4399]  </TASK>
[  572.518509][ T4399] Kernel Offset: disabled
[  572.522912][ T4399] Rebooting in 86400 seconds..