last executing test programs:

2m48.299976838s ago: executing program 1 (id=494):
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0})
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0)

2m48.246408438s ago: executing program 1 (id=497):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x83, 0x66, 0x7d, 0x10, 0x2040, 0x264, 0x4ed1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x90, 0xf1, 0x9c, 0x0, [], [{{0x9, 0x5, 0x84}}]}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x18, &(0x7f0000000280)={0x20, 0x16, 0x2, "1202"}, 0x0, 0x0, 0x0, 0x0})

2m47.702738131s ago: executing program 1 (id=502):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080), 0x4)
r1 = socket$packet(0x11, 0x2, 0x300)
unshare(0x24020400)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x3c, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x8}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2400c000}, 0x880)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$F2FS_IOC_DECOMPRESS_FILE(r4, 0xf517, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_subtree(r6, &(0x7f0000000080), 0x2, 0x0)
write$cgroup_subtree(r7, 0x0, 0x5)
openat$cgroup_int(r5, &(0x7f0000000140)='cpu.max.burst\x00', 0x2, 0x0)
r8 = openat$cgroup_subtree(r6, &(0x7f0000000040), 0x2, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000400)=ANY=[@ANYBLOB='-cpu'], 0x5)
socket$inet6(0xa, 0x802, 0x0)
pselect6(0x63, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0xfffffffffffffffe}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x2}, 0x0, 0x0)
r9 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000080)={0x1}, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x2000}, 0x4)

2m47.243907743s ago: executing program 1 (id=510):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000040)='.\x00', r0, &(0x7f0000000580)='./file0\x00', 0x0)
unshare(0x20000)

2m47.227911553s ago: executing program 1 (id=512):
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$rds(0x15, 0x5, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$packet(0x11, 0x4000000000002, 0x300)
syz_open_procfs(0x0, &(0x7f00000001c0)='net/rt_acct\x00')
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58)
accept4(r1, 0x0, 0x0, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="93630100200501001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r2], 0x4c}}, 0x0)

2m46.705045616s ago: executing program 1 (id=522):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet(0x2, 0x80001, 0x84)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000)={r2, 0x100}, &(0x7f0000000040)=0x8)

2m46.673101096s ago: executing program 32 (id=522):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet(0x2, 0x80001, 0x84)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000)={r2, 0x100}, &(0x7f0000000040)=0x8)

2m40.413724367s ago: executing program 2 (id=613):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x25dfdbff, {{@in=@private=0xa010101, @in6=@local, 0x4e22, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}, {0x0, 0x401, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4c041}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0)
r2 = syz_open_dev$hiddev(&(0x7f0000000180), 0x0, 0x80200)
ioctl$HIDIOCGUSAGE(r2, 0xc018480b, 0x0)
r3 = socket(0x840000000002, 0x3, 0xfa)
setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, 0x0, 0xff00)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0)
syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_INQUIRY_CANCEL={{}, 0x1}}}, 0x7)

2m39.73988508s ago: executing program 2 (id=621):
syz_usb_connect(0x2, 0x3f, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0xd4, 0xcd, 0x23, 0x8, 0xf11, 0x2010, 0x782a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x36, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x14, 0x0, 0x3, 0xe7, 0x5b, 0x5d, 0x92, [], [{{0x9, 0x5, 0x3, 0x8, 0x40, 0x9, 0x1}}, {{0x9, 0x5, 0x2, 0x3, 0x40, 0x8, 0x0, 0x7}}, {{0x9, 0x5, 0xa, 0x0, 0x400, 0x7, 0x4, 0x81}}]}}]}}]}}, 0x0)
socket(0x11, 0x800000003, 0x0)
socket$netlink(0x10, 0x3, 0x0)

2m39.064635824s ago: executing program 2 (id=631):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7fffffff}]})
semget$private(0x0, 0x20000000102, 0x0)

2m38.919784494s ago: executing program 2 (id=633):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000040)='.\x00', r0, &(0x7f0000000580)='./file0\x00', 0x0)
move_mount(r0, &(0x7f0000000300)='./file0\x00', r0, &(0x7f0000000280)='./file0\x00', 0x22)

2m38.889702005s ago: executing program 2 (id=636):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40050)

2m38.291956387s ago: executing program 2 (id=641):
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x4, {0x0, 0x1}, {0x4a, 0x2}, @ramp={0x200, 0x1, {0x2fa, 0xffc0, 0x802, 0x1000}}})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250)

2m38.265069467s ago: executing program 33 (id=641):
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x4, {0x0, 0x1}, {0x4a, 0x2}, @ramp={0x200, 0x1, {0x2fa, 0xffc0, 0x802, 0x1000}}})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250)

1m47.03999144s ago: executing program 5 (id=924):
r0 = socket$inet6(0xa, 0x3, 0x20)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty=0x18}}, 0x1c)
connect$inet6(r0, &(0x7f0000000680)={0xa, 0x0, 0xf15, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c)

1m47.02727459s ago: executing program 5 (id=925):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e0001000000000000000000"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[], 0x188}}, 0x0)

1m45.816251587s ago: executing program 5 (id=927):
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$rds(0x15, 0x5, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$packet(0x11, 0x4000000000002, 0x300)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$alg(0x26, 0x5, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$packet(0x11, 0x3, 0x300)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="93630100200501001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r1], 0x4c}}, 0x0)

1m45.18355739s ago: executing program 5 (id=932):
r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000000000202505a8a440000102030109021b00010100000009040000010701010009050102"], 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000b40)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x20, 0x0, 0x1}})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r1, &(0x7f0000000140)="83", 0x1)

1m42.867711061s ago: executing program 5 (id=939):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000f2d07c40501d89601dd0000000010902120001000000000904"], 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000080)={0x34, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f00000017c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0xf, 0x2, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1m42.225985015s ago: executing program 5 (id=945):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
read$alg(r1, &(0x7f0000000080)=""/16, 0x10)
recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x4c, 0x1, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4841}, 0x8000)
read$alg(r1, &(0x7f0000000300)=""/99, 0x63)

1m27.145847399s ago: executing program 34 (id=945):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
read$alg(r1, &(0x7f0000000080)=""/16, 0x10)
recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x4c, 0x1, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4841}, 0x8000)
read$alg(r1, &(0x7f0000000300)=""/99, 0x63)

1m16.076000504s ago: executing program 0 (id=1045):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r3=>0x0})
syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000300)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x3, 0x40, 0x6, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x7, 0x1, 0x3, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x8, 0x92, 0x4}}}}}]}}]}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=@dellink={0x20, 0x11, 0x101, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0)

1m12.976056219s ago: executing program 0 (id=1061):
socket$inet6(0xa, 0x3, 0x6)
syz_emit_ethernet(0x56, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60cd8fdb0020060000000000020000000000ffffac1e0001ff020000000000000000000000000001"], 0x0)

1m12.915445069s ago: executing program 0 (id=1062):
socket$nl_route(0x10, 0x3, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
socket$xdp(0x2c, 0x3, 0x0)
socket$inet_dccp(0x2, 0x6, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x801, 0x0)
socket$alg(0x26, 0x5, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100))
r0 = socket(0x1, 0x803, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000030400000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="7fff000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x44}}, 0x0)

1m12.093927273s ago: executing program 0 (id=1065):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x89901)
mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0)

1m11.834366635s ago: executing program 0 (id=1069):
syz_open_dev$dri(0x0, 0x1ff, 0x0)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3)
syz_io_uring_setup(0x119, 0x0, 0x0, &(0x7f0000000280)=<r2=>0x0)
r3 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r3, 0x0, 0x0, 0x0)
syz_io_uring_submit(0x0, r2, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246)
read$FUSE(r0, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0x541b, &(0x7f0000000040)={<r6=>0xffffffffffffffff, 0xfffffffffffffffe, 0x9, 0xfffffffffffffffc})
close_range(r6, 0xffffffffffffffff, 0x0)

1m10.950703019s ago: executing program 0 (id=1071):
socket(0x40000000015, 0x5, 0x0)
unshare(0x8000400)
mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x20000000, 0x4000000000003, 0x2})

1m10.78105469s ago: executing program 35 (id=1071):
socket(0x40000000015, 0x5, 0x0)
unshare(0x8000400)
mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x20000000, 0x4000000000003, 0x2})

12.192876619s ago: executing program 3 (id=1356):
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$rds(0x15, 0x5, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$packet(0x11, 0x4000000000002, 0x300)
syz_open_procfs(0x0, &(0x7f00000001c0)='net/rt_acct\x00')
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$alg(0x26, 0x5, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
socket$packet(0x11, 0x3, 0x300)
socket$key(0xf, 0x3, 0x2)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)

10.946713045s ago: executing program 3 (id=1360):
syz_usb_connect(0x0, 0x24, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0xdc, 0x7a, 0x22, 0x40, 0xac8, 0x321, 0xa1c9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x68, 0x20, 0x0, 0x63, 0x74, 0x11}}]}}]}}, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x40044160, 0x3)

8.724464576s ago: executing program 3 (id=1367):
r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90a, 0x8000, '\x00', @ptr=0x20002000}})

8.713848156s ago: executing program 8 (id=1368):
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
dup(r3)
socket$nl_route(0x10, 0x3, 0x0)

7.135946854s ago: executing program 3 (id=1369):
syz_open_dev$dri(0x0, 0x1ff, 0x0)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3)
syz_io_uring_setup(0x119, 0x0, 0x0, &(0x7f0000000280)=<r2=>0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_io_uring_submit(0x0, r2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$PPPIOCSFLAGS1(r3, 0x4004743a, &(0x7f0000000300))
read$FUSE(r0, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$F2FS_IOC_MOVE_RANGE(r4, 0x541b, &(0x7f0000000040)={<r5=>0xffffffffffffffff, 0xfffffffffffffffe, 0x9, 0xfffffffffffffffc})
close_range(r5, 0xffffffffffffffff, 0x0)

7.101403224s ago: executing program 4 (id=1370):
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$rds(0x15, 0x5, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$packet(0x11, 0x4000000000002, 0x300)
syz_open_procfs(0x0, &(0x7f00000001c0)='net/rt_acct\x00')
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$alg(0x26, 0x5, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
socket$packet(0x11, 0x3, 0x300)
socket$key(0xf, 0x3, 0x2)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)

5.89985178s ago: executing program 3 (id=1374):
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x8, &(0x7f0000000180)={[{@nodiscard}, {}, {@alloc_mode_def}, {@fsync_mode_posix}, {@noflush_merge}, {@disable_roll_forward}, {@age_extent_cache}, {@noacl}, {@heap}, {@resuid}, {@noextent_cache}, {@resuid}, {@jqfmt_vfsold}]}, 0x1, 0x5505, &(0x7f0000002480)="$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")
open_by_handle_at(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c)
sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0xff80}], 0x1, 0x0, 0x0, 0x2c}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
io_setup(0x3fe, &(0x7f0000000100))

5.89322398s ago: executing program 8 (id=1375):
ioctl$VIDIOC_G_PRIORITY(0xffffffffffffffff, 0x80045643, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = dup(r3)
write$UHID_INPUT(r4, &(0x7f0000000000)={0xfc, {"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", 0x1000}}, 0x1006)
preadv(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000000)=""/34, 0x22}], 0x1, 0xffffffff, 0x40000002)

5.772673841s ago: executing program 4 (id=1376):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x40000000000011a, 0x44000)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x22100, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f00000004c0)={0x400, 0x300, 0x300, 0x0, 0xffffffff, 0x0, 0x0, 0x2000000, {}, {}, {0xffffffff, 0x4}, {0x0, 0x0, 0x8}, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x4, 0x20, 0x0, 0x0, 0x3c, 0x0, 0x0, 0xc})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)

4.097083089s ago: executing program 4 (id=1379):
syz_usb_connect(0x0, 0x24, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x2e, 0xb5, 0xbd, 0x40, 0xc45, 0x6025, 0x4112, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9, 0xd7, 0x40}}]}}]}}, 0x0)

4.069342069s ago: executing program 6 (id=1380):
socket$nl_route(0x10, 0x3, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
socket$xdp(0x2c, 0x3, 0x0)
socket$inet_dccp(0x2, 0x6, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x801, 0x0)
socket$alg(0x26, 0x5, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100))
r0 = socket(0x1, 0x803, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)

3.79603667s ago: executing program 7 (id=1381):
syz_open_dev$dri(0x0, 0x1ff, 0x0)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3)
syz_io_uring_setup(0x119, 0x0, 0x0, &(0x7f0000000280)=<r2=>0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_io_uring_submit(0x0, r2, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$PPPIOCSFLAGS1(r3, 0x4004743a, &(0x7f0000000300))
read$FUSE(r0, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$F2FS_IOC_MOVE_RANGE(r4, 0x541b, &(0x7f0000000040)={<r5=>0xffffffffffffffff, 0xfffffffffffffffe, 0x9, 0xfffffffffffffffc})
close_range(r5, 0xffffffffffffffff, 0x0)

3.79561117s ago: executing program 6 (id=1382):
r0 = io_uring_setup(0x7691, &(0x7f0000000140)={0x0, 0x58fb, 0x10, 0x801, 0x23f})
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x6, &(0x7f0000000140)={0x12, {{0x29, 0x0, 0x3000000, @rand_addr=' \x01\x00', 0x5}}}, 0x88)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
socket$packet(0x11, 0x3, 0x300)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000000c0)={0x80000043, 0x0, 0x0, 0x3}, 0x10)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
listen(r2, 0x101)
r3 = socket$inet_dccp(0x2, 0x6, 0x0)
setsockopt(r3, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1)
connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
close_range(r0, 0xffffffffffffffff, 0x0)

3.020773125s ago: executing program 3 (id=1383):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x3, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x6, 0x1, 0x1})
close(r3)

3.009412374s ago: executing program 4 (id=1384):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r4, 0x5, 0x0, 0xffffffff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='F'}]}, 0x24}, 0x1, 0x0, 0x0, 0x2004c000}, 0x0)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x1e}]}, 0x2c}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)={0x50, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {}, @broadcast, @device_a, @from_mac=@broadcast, {0x0, 0xff}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x0, 0x2}, @val={0x76, 0x6, {0x4, 0x5, 0x19, 0x3}}}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x0)

2.945482045s ago: executing program 7 (id=1385):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200))
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x6, &(0x7f0000000680)=@framed={{0x18, 0x8, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xbb}, @exit]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f00000001c0)=@req={0x74ce, 0x1, 0x69a56bb7, 0x101}, 0x10)

2.841258385s ago: executing program 6 (id=1386):
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$rds(0x15, 0x5, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$packet(0x11, 0x4000000000002, 0x300)
syz_open_procfs(0x0, &(0x7f00000001c0)='net/rt_acct\x00')
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$alg(0x26, 0x5, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
socket$packet(0x11, 0x3, 0x300)
socket$key(0xf, 0x3, 0x2)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)

2.703979386s ago: executing program 4 (id=1387):
epoll_create1(0x0)
epoll_create1(0x80000)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$packet(0x11, 0xa, 0x300)
socket$kcm(0x2, 0x200000000000001, 0x106)
syz_open_dev$vivid(&(0x7f0000000100), 0x1, 0x2)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4000, 0x0, 0x3e4}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000c0000000c00008008"], 0x20}}, 0x0)

2.558142717s ago: executing program 6 (id=1388):
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x20}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {}, {0x1c, 0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0xfffffffa}]}}]}, 0x3c}}, 0x44050)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

2.557248247s ago: executing program 4 (id=1389):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380))
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x40000000000011a, 0x44000)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x22100, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f00000004c0)={0x400, 0x300, 0x300, 0x0, 0xffffffff, 0x0, 0x0, 0x2000000, {}, {}, {0xffffffff, 0x4}, {0x0, 0x0, 0x8}, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x4, 0x20, 0x0, 0x0, 0x3c, 0x0, 0x0, 0xc})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)

2.335051138s ago: executing program 6 (id=1390):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
read$char_usb(r0, &(0x7f0000000440)=""/156, 0x94)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

1.691949531s ago: executing program 7 (id=1391):
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{}, 0x0, 0x0}, 0x20)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))

1.537927222s ago: executing program 7 (id=1392):
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x2c, 0x0, 0x1, 0x0, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote={0xac, 0x3}}}}]}]}, 0x2c}}, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000000002000000000000000000000000000010000180f7000280050001000000000030"], 0x58}}, 0x0)
sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000000aa63d9ae5000380080001"], 0x28}}, 0x0)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="d824000028000100020000080000000009"], 0x24d8}], 0x1}, 0x0)

1.535094951s ago: executing program 8 (id=1393):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0)
mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001dc0)={0x7, 0x0, 0x20000}, 0x20)

1.383855182s ago: executing program 7 (id=1394):
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x8, &(0x7f0000000180)={[{@nodiscard}, {}, {@alloc_mode_def}, {@fsync_mode_posix}, {@noflush_merge}, {@disable_roll_forward}, {@age_extent_cache}, {@noacl}, {@heap}, {@resuid}, {@noextent_cache}, {@resuid}, {@jqfmt_vfsold}]}, 0x1, 0x5505, &(0x7f0000002480)="$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")
open_by_handle_at(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c)
sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0xff80}], 0x1, 0x0, 0x0, 0x2c}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
io_setup(0x3fe, &(0x7f0000000100))

1.383713792s ago: executing program 8 (id=1395):
syz_open_dev$dri(0x0, 0x1ff, 0x0)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3)
syz_io_uring_setup(0x119, 0x0, 0x0, &(0x7f0000000280)=<r2=>0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_io_uring_submit(0x0, r2, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$PPPIOCSFLAGS1(r3, 0x4004743a, &(0x7f0000000300))
read$FUSE(r0, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$F2FS_IOC_MOVE_RANGE(r4, 0x541b, &(0x7f0000000040)={<r5=>0xffffffffffffffff, 0xfffffffffffffffe, 0x9, 0xfffffffffffffffc})
close_range(r5, 0xffffffffffffffff, 0x0)

924.966785ms ago: executing program 8 (id=1396):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x9, 0x80, 0x0, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x404}, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000340)=[@window, @mss={0x2, 0x1}, @window, @timestamp, @sack_perm, @timestamp, @timestamp, @sack_perm], 0x2000000000000024)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f0000000200))
sendto$inet(r3, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6)

304.450108ms ago: executing program 6 (id=1397):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200000038000480340001800b0001007461726765740000240002801000010043"], 0xa0}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r3, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x808)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYRES32=r7, @ANYBLOB="08002600ad1600004000330010000000080211000000080211000000080211000001000000000000010001002d1a40000b0000000000000000040003000b0000000600500000000304006c"], 0x68}}, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r8, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000080)=0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0)
ioctl$EVIOCGPROP(r10, 0x40047438, &(0x7f0000000180)=""/246)
writev(r10, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1)

106.740519ms ago: executing program 7 (id=1398):
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$rds(0x15, 0x5, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$packet(0x11, 0x4000000000002, 0x300)
syz_open_procfs(0x0, &(0x7f00000001c0)='net/rt_acct\x00')
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$alg(0x26, 0x5, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
socket$packet(0x11, 0x3, 0x300)
socket$key(0xf, 0x3, 0x2)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x4c}}, 0x0)

0s ago: executing program 8 (id=1399):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
socket$netlink(0x10, 0x3, 0x0)
ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x84)
sendto$inet6(r3, &(0x7f00000002c0)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r3, 0x84, 0x6d, &(0x7f0000002280)=""/4090, &(0x7f0000000040)=0xffa)

kernel console output (not intermixed with test programs):

 failed to load regulatory.db
[   64.627628][ T4249] Zero length message leads to an empty skb
[   64.635966][ T4205] BTRFS error (device loop1): open_ctree failed
[   64.714548][ T4255] loop0: detected capacity change from 0 to 128
[   64.811769][ T4255] EXT4-fs (loop0): Ignoring removed oldalloc option
[   64.849748][ T4255] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c01c, mo2=0002]
[   64.851642][ T4255] System zones: 1-3, 19-19, 35-36
[   64.867334][ T4255] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,stripe=0x0000000000000007,acl,oldalloc,debug,,errors=continue. Quota mode: none.
[   66.468478][ T4268] bpf_jit: unknown atomic op code 50
[   67.271000][ T4252] loop4: detected capacity change from 0 to 32768
[   67.439828][ T4272] loop2: detected capacity change from 0 to 40427
[   67.456606][ T4252] XFS: ikeep mount option is deprecated.
[   67.478271][ T4272] F2FS-fs (loop2): Unrecognized mount option "age_extent_cache" or missing value
[   67.620767][ T4252] XFS (loop4): Mounting V5 Filesystem
[   67.698487][ T4276] loop1: detected capacity change from 0 to 32768
[   68.527578][ T4252] XFS (loop4): log mount failed
[   68.532369][ T4276] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.33 (4276)
[   68.595108][    C1] sched: RT throttling activated
[   68.608696][ T4276] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm
[   68.610679][ T4276] BTRFS info (device loop1): enabling ssd optimizations
[   68.618463][ T4276] BTRFS info (device loop1): using spread ssd allocation scheme
[   68.622494][ T4276] BTRFS info (device loop1): using free space tree
[   68.629958][ T4276] BTRFS info (device loop1): has skinny extents
[   68.743739][ T4306] netlink: 20 bytes leftover after parsing attributes in process `syz.0.38'.
[   68.882387][ T4302] loop2: detected capacity change from 0 to 4096
[   68.931560][ T4302] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512)
[   70.211183][ T2053] ieee802154 phy0 wpan0: encryption failed: -22
[   70.233623][ T2053] ieee802154 phy1 wpan1: encryption failed: -22
[   70.557017][ T4303] loop3: detected capacity change from 0 to 32768
[   70.609247][ T4303] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.39 (4303)
[   70.815527][ T4338] loop0: detected capacity change from 0 to 40427
[   71.021129][ T4338] F2FS-fs (loop0): Unrecognized mount option "age_extent_cache" or missing value
[   71.880179][ T4303] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm
[   71.882317][ T4303] BTRFS info (device loop3): setting nodatacow, compression disabled
[   71.896379][ T4303] BTRFS info (device loop3): enabling auto defrag
[   71.914191][ T4303] BTRFS info (device loop3): max_inline at 0
[   71.919021][ T4303] BTRFS info (device loop3): using free space tree
[   71.920596][ T4303] BTRFS info (device loop3): has skinny extents
[   72.815605][ T4303] BTRFS error (device loop3): open_ctree failed
[   73.033133][ T4383] netlink: 20 bytes leftover after parsing attributes in process `syz.4.58'.
[   74.336098][ T4349] loop0: detected capacity change from 0 to 32768
[   74.489157][ T4397] loop4: detected capacity change from 0 to 40427
[   74.503646][ T4397] F2FS-fs (loop4): Unrecognized mount option "age_extent_cache" or missing value
[   74.575781][ T4349] XFS: ikeep mount option is deprecated.
[   75.555358][ T4414] udc-core: couldn't find an available UDC or it's busy
[   75.563942][ T4414] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   75.681251][ T4424] udc-core: couldn't find an available UDC or it's busy
[   75.682791][ T4424] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   76.195536][ T4431] loop0: detected capacity change from 0 to 40427
[   76.200403][ T4427] udc-core: couldn't find an available UDC or it's busy
[   76.202692][ T4427] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   76.283033][ T4431] F2FS-fs (loop0): Unrecognized mount option "age_extent_cache" or missing value
[   76.307149][ T4434] udc-core: couldn't find an available UDC or it's busy
[   76.308849][ T4434] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   77.983922][ T4466] udc-core: couldn't find an available UDC or it's busy
[   78.245165][ T4466] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   79.447036][ T4477] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   79.449474][ T4477] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[   80.745641][ T4482] delete_channel: no stack
[   80.856246][ T4490] loop4: detected capacity change from 0 to 2048
[   80.958148][ T4492] loop2: detected capacity change from 0 to 256
[   80.960651][ T4490] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[   80.962883][ T4490] NILFS (loop4): mounting unchecked fs
[   80.971159][ T4490] NILFS (loop4): recovery cancelled because norecovery option was specified for a read/write mount
[   80.983990][ T4181] udevd[4181]: incorrect nilfs2 checksum on /dev/loop4
[   81.006838][ T4492] FAT-fs (loop2): Unrecognized mount option "shortUame=lower" or missing value
[   82.347912][ T4492] loop2: detected capacity change from 0 to 4096
[   82.406118][ T4492] =======================================================
[   82.406118][ T4492] WARNING: The mand mount option has been deprecated and
[   82.406118][ T4492]          and is ignored by this kernel. Remove the mand
[   82.406118][ T4492]          option from the mount to silence this warning.
[   82.406118][ T4492] =======================================================
[   82.419097][ T4492] ntfs3: Unknown parameter '#! 
[   82.419097][ T4492] '
[   82.986576][ T4509] loop0: detected capacity change from 0 to 40427
[   83.043026][ T4509] F2FS-fs (loop0): Unrecognized mount option "age_extent_cache" or missing value
[   84.168948][ T4512] loop2: detected capacity change from 0 to 8192
[   84.810832][ T4518] delete_channel: no stack
[   84.852068][ T4512] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[   84.854194][ T4512] REISERFS (device loop2): using ordered data mode
[   84.864239][ T4512] reiserfs: using flush barriers
[   84.882302][ T4512] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   84.899331][ T4512] REISERFS (device loop2): checking transaction log (loop2)
[   85.004486][ T4512] REISERFS (device loop2): Using rupasov hash to sort names
[   85.006751][ T4512] REISERFS (device loop2): using 3.5.x disk format
[   86.413009][ T4550] loop0: detected capacity change from 0 to 40427
[   86.488391][ T4550] F2FS-fs (loop0): Unrecognized mount option "age_extent_cache" or missing value
[   89.564041][ T4566] delete_channel: no stack
[   89.760824][ T4582] loop4: detected capacity change from 0 to 256
[   89.812072][ T4582] FAT-fs (loop4): Unrecognized mount option "shortUame=lower" or missing value
[   91.393280][ T4582] loop4: detected capacity change from 0 to 4096
[   91.424182][ T4582] ntfs3: Unknown parameter '#! 
[   91.424182][ T4582] '
[   91.939653][ T4599] loop4: detected capacity change from 0 to 8192
[   92.058656][ T4599] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
[   92.060817][ T4599] REISERFS (device loop4): using ordered data mode
[   92.062223][ T4599] reiserfs: using flush barriers
[   92.069850][ T4599] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   92.073933][ T4599] REISERFS (device loop4): checking transaction log (loop4)
[   92.098658][ T4599] REISERFS (device loop4): Using rupasov hash to sort names
[   92.100466][ T4599] REISERFS (device loop4): using 3.5.x disk format
[   92.286807][ T4606] loop3: detected capacity change from 0 to 40427
[   93.185334][ T4606] F2FS-fs (loop3): Unrecognized mount option "age_extent_cache" or missing value
[   93.204038][ T4613] netlink: 24 bytes leftover after parsing attributes in process `syz.0.138'.
[   94.940514][ T4620] delete_channel: no stack
[   96.552236][ T4650] loop2: detected capacity change from 0 to 256
[   96.586085][ T4650] FAT-fs (loop2): Unrecognized mount option "shortUame=lower" or missing value
[   97.778081][ T4650] loop2: detected capacity change from 0 to 4096
[   97.816668][ T4653] loop0: detected capacity change from 0 to 40427
[   97.846676][ T4650] ntfs3: Unknown parameter '#! 
[   97.846676][ T4650] '
[   97.847664][ T4653] F2FS-fs (loop0): Unrecognized mount option "age_extent_cache" or missing value
[  100.612653][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.824792][ T4729] binder: BINDER_SET_CONTEXT_MGR already set
[  102.858168][ T4729] binder: 4728:4729 ioctl 4018620d 20000040 returned -16
[  102.860434][ T4729] binder: tried to use weak ref as strong ref
[  102.861884][ T4729] binder: 4728:4729 Acquire 1 refcount change on invalid ref 0 ret -22
[  102.878704][ T4729] binder: 4728:4729 got transaction to invalid handle, 1
[  102.880308][ T4729] binder: 4728:4729 transaction failed 29201/-22, size 72-24 line 2917
[  103.784562][ T4106] binder: undelivered TRANSACTION_ERROR: 29201
[  103.841359][ T4739] loop1: detected capacity change from 0 to 256
[  103.875936][ T4739] FAT-fs (loop1): Unrecognized mount option "shortUame=lower" or missing value
[  104.092517][ T4739] loop1: detected capacity change from 0 to 4096
[  104.095267][ T4739] ntfs3: Unknown parameter '#! 
[  104.095267][ T4739] '
[  106.855993][ T4767] udc-core: couldn't find an available UDC or it's busy
[  106.857495][ T4767] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  108.027090][ T4775] netlink: 24 bytes leftover after parsing attributes in process `syz.2.196'.
[  109.229359][ T4801] loop1: detected capacity change from 0 to 256
[  109.325973][ T4801] FAT-fs (loop1): Unrecognized mount option "shortUame=lower" or missing value
[  110.576288][ T4817] device team_slave_0 entered promiscuous mode
[  110.577920][ T4817] device team_slave_1 entered promiscuous mode
[  110.587974][ T4817] device macsec1 entered promiscuous mode
[  110.596190][ T4817] device team0 entered promiscuous mode
[  110.610638][ T4817] team0: Device macsec1 is already an upper device of the team interface
[  110.623072][ T4801] loop1: detected capacity change from 0 to 4096
[  110.627338][ T4817] device team0 left promiscuous mode
[  110.628912][ T4817] device team_slave_0 left promiscuous mode
[  110.630322][ T4817] device team_slave_1 left promiscuous mode
[  110.666933][ T4801] ntfs3: Unknown parameter '#! 
[  110.666933][ T4801] '
[  110.744289][ T4819] device pim6reg1 entered promiscuous mode
[  110.821743][ T4030] Bluetooth: to_multiplier 44037 > 3200
[  111.958725][ T4801] loop1: detected capacity change from 0 to 8192
[  111.973516][ T4831] dccp_v4_rcv: dropped packet with invalid checksum
[  112.025659][ T4801] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
[  112.027815][ T4801] REISERFS (device loop1): using ordered data mode
[  112.029168][ T4801] reiserfs: using flush barriers
[  112.032696][ T4801] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  112.051639][ T4801] REISERFS (device loop1): checking transaction log (loop1)
[  112.085311][ T4801] REISERFS (device loop1): Using rupasov hash to sort names
[  112.087014][ T4801] REISERFS (device loop1): using 3.5.x disk format
[  112.825445][ T4106] Bluetooth: hci2: command 0x2021 tx timeout
[  113.367244][ T4847] loop3: detected capacity change from 0 to 40427
[  113.562663][ T4847] F2FS-fs (loop3): Unrecognized mount option "age_extent_cache" or missing value
[  115.098674][ T4880] loop4: detected capacity change from 0 to 256
[  115.142113][ T4880] FAT-fs (loop4): Unrecognized mount option "shortUame=lower" or missing value
[  115.403327][ T4880] loop4: detected capacity change from 0 to 4096
[  116.335916][ T4880] ntfs3: Unknown parameter '#! 
[  116.335916][ T4880] '
[  116.691157][ T4894] netlink: 48 bytes leftover after parsing attributes in process `syz.1.238'.
[  116.770541][ T4890] loop4: detected capacity change from 0 to 8192
[  116.841731][ T4890] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
[  116.843877][ T4890] REISERFS (device loop4): using ordered data mode
[  116.861637][ T4890] reiserfs: using flush barriers
[  116.867416][ T4890] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  116.871146][ T4890] REISERFS (device loop4): checking transaction log (loop4)
[  116.902580][ T4890] REISERFS (device loop4): Using rupasov hash to sort names
[  116.904382][ T4890] REISERFS (device loop4): using 3.5.x disk format
[  117.308261][ T4904] udc-core: couldn't find an available UDC or it's busy
[  117.312258][ T4904] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  119.727242][ T4924] loop2: detected capacity change from 0 to 7
[  119.755235][ T4924] Dev loop2: unable to read RDB block 7
[  119.773204][ T4924]  loop2: unable to read partition table
[  119.774602][ T4924] loop2: partition table beyond EOD, truncated
[  119.795134][ T4924] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  119.802849][ T4933] loop3: detected capacity change from 0 to 256
[  119.886025][ T4933] FAT-fs (loop3): Unrecognized mount option "shortUame=lower" or missing value
[  120.205660][ T4933] loop3: detected capacity change from 0 to 4096
[  120.207641][ T4933] ntfs3: Unknown parameter '#! 
[  120.207641][ T4933] '
[  120.216079][ T4939] loop1: detected capacity change from 0 to 40427
[  120.360203][ T4939] F2FS-fs (loop1): Unrecognized mount option "age_extent_cache" or missing value
[  120.562791][ T4944] loop3: detected capacity change from 0 to 8192
[  120.663458][ T4944] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[  120.665975][ T4944] REISERFS (device loop3): using ordered data mode
[  120.674158][ T4944] reiserfs: using flush barriers
[  120.682586][ T4944] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  120.691690][ T4944] REISERFS (device loop3): checking transaction log (loop3)
[  120.694849][ T4944] REISERFS (device loop3): Using rupasov hash to sort names
[  120.702021][ T4944] REISERFS (device loop3): using 3.5.x disk format
[  121.974313][ T4970] netlink: 104 bytes leftover after parsing attributes in process `syz.3.264'.
[  122.780922][ T4972] netlink: 16 bytes leftover after parsing attributes in process `syz.3.265'.
[  123.145073][ T4985] loop3: detected capacity change from 0 to 256
[  123.235536][ T4985] FAT-fs (loop3): Unrecognized mount option "shortUame=lower" or missing value
[  123.356935][ T4985] loop3: detected capacity change from 0 to 4096
[  123.396129][ T4985] ntfs3: Unknown parameter '#! 
[  123.396129][ T4985] '
[  123.798085][ T4990] loop3: detected capacity change from 0 to 8192
[  124.577467][ T4990] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[  124.579547][ T4990] REISERFS (device loop3): using ordered data mode
[  124.580939][ T4990] reiserfs: using flush barriers
[  124.586277][ T4990] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  124.603503][ T4990] REISERFS (device loop3): checking transaction log (loop3)
[  124.611486][ T4990] REISERFS (device loop3): Using rupasov hash to sort names
[  124.613685][ T4990] REISERFS (device loop3): using 3.5.x disk format
[  124.931497][ T5001] sctp: failed to load transform for md5: -2
[  127.504986][ T5045] netlink: 60 bytes leftover after parsing attributes in process `syz.2.287'.
[  127.537920][ T5040] loop0: detected capacity change from 0 to 40427
[  127.583196][ T5040] F2FS-fs (loop0): Unrecognized mount option "age_extent_cache" or missing value
[  129.241245][ T5068] loop3: detected capacity change from 0 to 256
[  129.306156][ T5068] FAT-fs (loop3): Unrecognized mount option "shortUame=lower" or missing value
[  130.013895][ T5068] loop3: detected capacity change from 0 to 4096
[  130.056044][ T5068] ntfs3: Unknown parameter '#! 
[  130.056044][ T5068] '
[  130.474212][ T5068] loop3: detected capacity change from 0 to 8192
[  131.288399][ T2053] ieee802154 phy0 wpan0: encryption failed: -22
[  131.289853][ T2053] ieee802154 phy1 wpan1: encryption failed: -22
[  131.385659][ T5068] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[  131.387717][ T5068] REISERFS (device loop3): using ordered data mode
[  131.389074][ T5068] reiserfs: using flush barriers
[  131.390909][ T5068] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  131.394389][ T5068] REISERFS (device loop3): checking transaction log (loop3)
[  131.414333][ T5068] REISERFS (device loop3): Using rupasov hash to sort names
[  131.415931][ T5068] REISERFS (device loop3): using 3.5.x disk format
[  131.539975][ T5100] netlink: 60 bytes leftover after parsing attributes in process `syz.2.301'.
[  133.004713][ T5120] udc-core: couldn't find an available UDC or it's busy
[  133.021650][ T5120] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  133.273947][ T5129] loop0: detected capacity change from 0 to 256
[  133.276056][ T5120] udc-core: couldn't find an available UDC or it's busy
[  133.277628][ T5120] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  133.365910][ T5129] FAT-fs (loop0): Unrecognized mount option "shortUame=lower" or missing value
[  133.705498][ T5139] loop1: detected capacity change from 0 to 40427
[  133.758356][ T5139] F2FS-fs (loop1): Unrecognized mount option "age_extent_cache" or missing value
[  133.816926][ T5142] netlink: 60 bytes leftover after parsing attributes in process `syz.0.319'.
[  135.845551][ T5162] netlink: 4 bytes leftover after parsing attributes in process `syz.4.325'.
[  135.927462][ T5168] loop0: detected capacity change from 0 to 256
[  136.065957][ T5168] FAT-fs (loop0): Unrecognized mount option "shortUame=lower" or missing value
[  136.392197][ T5168] loop0: detected capacity change from 0 to 8192
[  136.569781][ T5168] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[  136.571922][ T5168] REISERFS (device loop0): using ordered data mode
[  136.573316][ T5168] reiserfs: using flush barriers
[  136.581925][ T5168] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  136.585606][ T5168] REISERFS (device loop0): checking transaction log (loop0)
[  136.589797][ T5168] REISERFS (device loop0): Using rupasov hash to sort names
[  136.591405][ T5168] REISERFS (device loop0): using 3.5.x disk format
[  136.938980][ T5187] netlink: 60 bytes leftover after parsing attributes in process `syz.4.334'.
[  137.012781][   T26] audit: type=1326 audit(136.980:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5189 comm="syz.0.336" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a28b368 code=0x7ffc0000
[  137.065075][   T26] audit: type=1326 audit(137.030:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5189 comm="syz.0.336" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff9a28b368 code=0x7ffc0000
[  137.075456][   T26] audit: type=1326 audit(137.050:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5189 comm="syz.0.336" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a28b368 code=0x7ffc0000
[  137.094613][   T26] audit: type=1326 audit(137.050:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5189 comm="syz.0.336" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=69 compat=0 ip=0xffff9a28b368 code=0x7ffc0000
[  137.127212][   T26] audit: type=1326 audit(137.060:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5189 comm="syz.0.336" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a28b368 code=0x7ffc0000
[  138.766543][ T5198] netlink: 4 bytes leftover after parsing attributes in process `syz.1.339'.
[  138.768615][ T5198] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  138.770351][ T5198] batman_adv: batadv0: Removing interface: batadv_slave_0
[  138.837836][ T5198] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  138.839740][ T5198] batman_adv: batadv0: Removing interface: batadv_slave_1
[  139.027745][ T5211] device vlan2 entered promiscuous mode
[  139.029767][ T5211] device dummy0 entered promiscuous mode
[  139.032971][ T5211] bond0: (slave vlan2): Enslaving as an active interface with an up link
[  139.418058][ T5233] netlink: 60 bytes leftover after parsing attributes in process `syz.2.350'.
[  140.777216][ T5242] binder: 5241:5242 tried to acquire reference to desc 0, got 1 instead
[  140.780863][ T5242] binder: 5241:5242 got transaction to context manager from process owning it
[  140.854160][ T5249] netlink: 'syz.2.358': attribute type 12 has an invalid length.
[  140.925430][ T5242] binder: 5241:5242 transaction failed 29201/-22, size 0-0 line 2908
[  140.931202][ T4173] binder: release 5241:5242 transaction 13 out, still active
[  140.933701][ T4173] binder: undelivered TRANSACTION_COMPLETE
[  140.935049][ T4173] binder: undelivered TRANSACTION_ERROR: 29201
[  140.950917][ T4173] binder: send failed reply for transaction 13, target dead
[  141.090284][ T5226] syz.1.349 uses obsolete (PF_INET,SOCK_PACKET)
[  143.267905][ T5313] loop3: detected capacity change from 0 to 256
[  143.325490][ T5313] FAT-fs (loop3): Unrecognized mount option "shortUame=lower" or missing value
[  144.295688][ T5316] netlink: 4 bytes leftover after parsing attributes in process `syz.1.385'.
[  144.297763][ T5316] bond0: Unable to set down delay as MII monitoring is disabled
[  144.507917][ T5313] loop3: detected capacity change from 0 to 4096
[  144.509842][ T5313] ntfs3: Unknown parameter '#! 
[  144.509842][ T5313] '
[  145.031338][ T5331] device vlan2 entered promiscuous mode
[  145.033001][ T5331] device vlan0 entered promiscuous mode
[  145.053100][ T5331] team0: Port device vlan2 added
[  145.058229][ T5336] netlink: 24 bytes leftover after parsing attributes in process `syz.2.393'.
[  145.245516][ T4105] bridge0: port 2(bridge_slave_1) entered disabled state
[  145.401286][ T5359] loop2: detected capacity change from 0 to 256
[  145.502995][ T5359] FAT-fs (loop2): Unrecognized mount option "shortUame=lower" or missing value
[  145.696301][ T5359] loop2: detected capacity change from 0 to 4096
[  145.698340][ T5359] ntfs3: Unknown parameter '#! 
[  145.698340][ T5359] '
[  145.984261][ T5373] loop2: detected capacity change from 0 to 8192
[  146.034196][ T5373] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[  146.036421][ T5373] REISERFS (device loop2): using ordered data mode
[  146.036885][ T5379] capability: warning: `syz.3.412' uses 32-bit capabilities (legacy support in use)
[  146.037808][ T5373] reiserfs: using flush barriers
[  146.052698][ T5373] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  146.056616][ T5373] REISERFS (device loop2): checking transaction log (loop2)
[  146.059584][ T5373] REISERFS (device loop2): Using rupasov hash to sort names
[  146.061446][ T5373] REISERFS (device loop2): using 3.5.x disk format
[  146.884066][ T4065] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  147.175667][ T5415] udc-core: couldn't find an available UDC or it's busy
[  147.177210][ T5415] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  148.135264][ T4065] usb 1-1: New USB device found, idVendor=0c45, idProduct=6025, bcdDevice=41.12
[  148.137501][ T4065] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.144336][ T4065] usb 1-1: config 0 descriptor??
[  148.187422][ T5423] udc-core: couldn't find an available UDC or it's busy
[  148.188994][ T5423] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  148.206750][ T4065] hub 1-1:0.0: bad descriptor, ignoring hub
[  148.208196][ T4065] hub: probe of 1-1:0.0 failed with error -5
[  148.211580][ T4065] gspca_main: sonixb-2.14.0 probing 0c45:6025
[  148.426417][ T4065] sonixb 1-1:0.0: Error reading register 00: -71
[  148.471295][ T4065] usb 1-1: USB disconnect, device number 2
[  149.501882][ T5450] loop3: detected capacity change from 0 to 256
[  149.535948][ T5450] FAT-fs (loop3): Unrecognized mount option "shortUame=lower" or missing value
[  149.738521][ T5450] loop3: detected capacity change from 0 to 4096
[  149.741360][ T5450] ntfs3: Unknown parameter '#! 
[  149.741360][ T5450] '
[  149.895259][ T4172] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  149.910649][ T5455] netlink: 'syz.2.442': attribute type 1 has an invalid length.
[  150.012160][ T5458] tipc: Started in network mode
[  150.017334][ T5456] loop3: detected capacity change from 0 to 8192
[  150.030639][ T5458] tipc: Node identity ac1414bb, cluster identity 4711
[  150.032421][ T5458] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  150.079782][ T5446] loop1: detected capacity change from 0 to 40427
[  150.099455][ T5456] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[  150.101461][ T5456] REISERFS (device loop3): using ordered data mode
[  150.102964][ T5456] reiserfs: using flush barriers
[  150.105955][ T5456] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  150.109823][ T5456] REISERFS (device loop3): checking transaction log (loop3)
[  150.120040][ T5456] REISERFS (device loop3): Using rupasov hash to sort names
[  150.121810][ T5456] REISERFS (device loop3): using 3.5.x disk format
[  150.135218][ T4172] usb 1-1: Using ep0 maxpacket: 16
[  150.158750][ T5446] F2FS-fs (loop1): Unrecognized mount option "age_extent_cache" or missing value
[  150.255353][ T4172] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  150.260444][ T4172] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  150.263306][ T4172] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.272351][ T4172] usb 1-1: config 0 descriptor??
[  150.287355][ T5466] udc-core: couldn't find an available UDC or it's busy
[  150.288887][ T5466] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  150.318794][ T4172] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input4
[  150.525387][ T4172] bcm5974 1-1:0.0: could not read from device
[  150.630583][ T4172] input: failed to attach handler mousedev to device input4, error: -5
[  150.639348][ T4172] usb 1-1: USB disconnect, device number 3
[  151.365613][   T26] audit: type=1326 audit(151.330:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5494 comm="syz.1.454" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa468368 code=0x7ffc0000
[  151.371439][   T26] audit: type=1326 audit(151.340:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5494 comm="syz.1.454" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=201 compat=0 ip=0xffffaa468368 code=0x7ffc0000
[  151.531094][   T26] audit: type=1326 audit(151.500:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5494 comm="syz.1.454" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa468368 code=0x7ffc0000
[  151.540773][   T26] audit: type=1326 audit(151.500:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5494 comm="syz.1.454" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa468368 code=0x7ffc0000
[  151.619872][ T5505] loop4: detected capacity change from 0 to 256
[  151.792390][ T5510] udc-core: couldn't find an available UDC or it's busy
[  151.796246][ T5510] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  151.976366][ T5505] FAT-fs (loop4): Unrecognized mount option "shortUame=lower" or missing value
[  152.106846][ T5505] loop4: detected capacity change from 0 to 4096
[  152.108750][ T5505] ntfs3: Unknown parameter '#! 
[  152.108750][ T5505] '
[  152.370392][ T5525] loop4: detected capacity change from 0 to 8192
[  152.489357][ T5525] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
[  152.491589][ T5525] REISERFS (device loop4): using ordered data mode
[  152.493029][ T5525] reiserfs: using flush barriers
[  152.495314][ T5525] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  152.499172][ T5525] REISERFS (device loop4): checking transaction log (loop4)
[  152.504580][ T5525] REISERFS (device loop4): Using rupasov hash to sort names
[  152.506331][ T5525] REISERFS (device loop4): using 3.5.x disk format
[  152.804193][ T5545] udc-core: couldn't find an available UDC or it's busy
[  152.814129][ T5545] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  153.437461][ T5570] udc-core: couldn't find an available UDC or it's busy
[  153.459778][ T5570] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  153.984945][ T5608] udc-core: couldn't find an available UDC or it's busy
[  153.986846][ T5608] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  154.859212][ T5630] udc-core: couldn't find an available UDC or it's busy
[  154.860795][ T5630] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  155.080432][ T5643] netlink: 4 bytes leftover after parsing attributes in process `syz.2.513'.
[  155.080932][ T5644] netlink: 'syz.4.514': attribute type 10 has an invalid length.
[  155.085069][ T5643] netlink: 'syz.2.513': attribute type 1 has an invalid length.
[  155.090794][ T5644] device syz_tun entered promiscuous mode
[  155.122199][ T5644] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  155.163393][ T5649] netlink: 'syz.4.516': attribute type 2 has an invalid length.
[  155.165026][ T5649] netlink: 'syz.4.516': attribute type 8 has an invalid length.
[  155.167737][ T5649] netlink: 32 bytes leftover after parsing attributes in process `syz.4.516'.
[  155.172645][ T5649] netlink: 'syz.4.516': attribute type 39 has an invalid length.
[  155.446804][ T5657] udc-core: couldn't find an available UDC or it's busy
[  155.448837][ T5657] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  155.625615][ T4068] Bluetooth: hci4: command 0x0406 tx timeout
[  155.792755][ T4194] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.840409][ T4194] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.858211][ T5674] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  155.860814][ T5674] device batadv_slave_0 entered promiscuous mode
[  155.891140][ T4194] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.946035][ T4194] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.967806][ T5678] udc-core: couldn't find an available UDC or it's busy
[  155.971695][ T5678] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  155.995506][   T26] audit: type=1326 audit(155.970:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5680 comm="syz.3.529" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4728368 code=0x7ffc0000
[  156.003786][   T26] audit: type=1326 audit(155.970:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5680 comm="syz.3.529" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=34 compat=0 ip=0xffffa4728368 code=0x7ffc0000
[  156.010553][   T26] audit: type=1326 audit(155.980:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5680 comm="syz.3.529" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4728368 code=0x7ffc0000
[  156.020454][   T26] audit: type=1326 audit(155.980:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5680 comm="syz.3.529" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=34 compat=0 ip=0xffffa4728368 code=0x7ffc0000
[  156.030675][   T26] audit: type=1326 audit(155.980:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5680 comm="syz.3.529" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4728368 code=0x7ffc0000
[  156.037370][ T5667] chnl_net:caif_netlink_parms(): no params data found
[  156.037928][   T26] audit: type=1326 audit(155.990:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5680 comm="syz.3.529" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=276 compat=0 ip=0xffffa4728368 code=0x7ffc0000
[  156.166393][ T5689] device vlan2 entered promiscuous mode
[  156.167841][ T5689] device dummy0 entered promiscuous mode
[  156.180171][ T5689] team0: Port device vlan2 added
[  156.185661][ T5667] bridge0: port 1(bridge_slave_0) entered blocking state
[  156.187326][ T5667] bridge0: port 1(bridge_slave_0) entered disabled state
[  156.189487][ T5667] device bridge_slave_0 entered promiscuous mode
[  156.191753][ T5678] udc-core: couldn't find an available UDC or it's busy
[  156.193300][ T5678] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  156.203758][ T5667] bridge0: port 2(bridge_slave_1) entered blocking state
[  156.205337][ T5667] bridge0: port 2(bridge_slave_1) entered disabled state
[  156.212013][ T5667] device bridge_slave_1 entered promiscuous mode
[  156.260981][ T5667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  156.278465][ T5667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  156.351320][ T5667] team0: Port device team_slave_0 added
[  156.377514][ T5667] team0: Port device team_slave_1 added
[  156.431316][ T5667] batman_adv: batadv0: Adding interface: batadv_slave_0
[  156.432913][ T5667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  156.438870][ T5702] netlink: 'syz.3.536': attribute type 29 has an invalid length.
[  156.455608][ T5667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  156.513796][ T5702] netlink: 'syz.3.536': attribute type 29 has an invalid length.
[  156.516967][ T5667] batman_adv: batadv0: Adding interface: batadv_slave_1
[  156.518499][ T5667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  156.533164][ T5667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  156.539757][ T5707] netlink: 'syz.3.536': attribute type 29 has an invalid length.
[  156.571136][ T5702] netlink: 'syz.3.536': attribute type 29 has an invalid length.
[  156.626251][ T5719] udc-core: couldn't find an available UDC or it's busy
[  156.628235][ T5719] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  156.631550][ T5719] udc-core: couldn't find an available UDC or it's busy
[  156.633060][ T5719] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  156.647777][ T5667] device hsr_slave_0 entered promiscuous mode
[  156.675825][ T5667] device hsr_slave_1 entered promiscuous mode
[  156.706458][ T5667] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  156.708214][ T5667] Cannot create hsr debugfs directory
[  156.721581][ T5723] syzkaller0: tun_chr_ioctl cmd 1074025677
[  156.723573][ T5723] syzkaller0: linktype set to 804
[  156.825486][ T4069] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  156.843944][ T5719] udc-core: couldn't find an available UDC or it's busy
[  156.845756][ T5719] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  156.869169][ T5667] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  156.949396][ T5667] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  157.003293][ T5667] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  157.074498][ T5667] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  157.123050][ T5754] udc-core: couldn't find an available UDC or it's busy
[  157.124675][ T5754] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  157.186157][ T4069] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  157.188613][ T4069] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  157.191526][ T4069] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  157.194572][ T4069] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.200031][ T4069] usb 1-1: config 0 descriptor??
[  157.226976][ T5714] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  157.240769][ T5667] 8021q: adding VLAN 0 to HW filter on device bond0
[  157.244668][ T5759] binder: 5757:5759 BC_ACQUIRE_DONE uffffffffffffffff no match
[  157.249253][ T4069] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  157.260500][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  157.263134][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  157.286304][ T5667] 8021q: adding VLAN 0 to HW filter on device team0
[  157.302167][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  157.304736][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  157.308272][  T148] bridge0: port 1(bridge_slave_0) entered blocking state
[  157.309999][  T148] bridge0: port 1(bridge_slave_0) entered forwarding state
[  157.329865][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  157.335042][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  157.354432][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  157.363524][  T148] bridge0: port 2(bridge_slave_1) entered blocking state
[  157.365040][  T148] bridge0: port 2(bridge_slave_1) entered forwarding state
[  157.368618][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  157.421995][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  157.424581][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  157.440195][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  157.452694][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  157.466303][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  157.471197][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  157.483686][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  157.490283][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  157.496316][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  157.501182][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  157.511399][ T5667] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  157.705361][ T4029] Bluetooth: hci0: command 0x0409 tx timeout
[  157.772934][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  157.775521][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  157.800346][ T5667] 8021q: adding VLAN 0 to HW filter on device batadv0
[  157.889535][ T5785] udc-core: couldn't find an available UDC or it's busy
[  157.891400][ T5785] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  157.983265][ T4194] device hsr_slave_0 left promiscuous mode
[  158.025728][ T4194] device hsr_slave_1 left promiscuous mode
[  158.081555][ T5824] udc-core: couldn't find an available UDC or it's busy
[  158.083384][ T5824] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  158.125903][ T4194] device bridge_slave_1 left promiscuous mode
[  158.128481][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state
[  158.190114][ T4194] device bridge_slave_0 left promiscuous mode
[  158.191698][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state
[  158.275848][ T4194] device veth1_macvtap left promiscuous mode
[  158.277608][ T4194] device veth0_macvtap left promiscuous mode
[  158.279211][ T4194] device veth1_vlan left promiscuous mode
[  158.280612][ T4194] device veth0_vlan left promiscuous mode
[  158.561723][ T5838] udc-core: couldn't find an available UDC or it's busy
[  158.563663][ T5838] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  158.564384][ T4194] team0 (unregistering): Port device team_slave_1 removed
[  158.580645][ T4194] team0 (unregistering): Port device team_slave_0 removed
[  158.598502][ T4194] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  158.639028][ T4194] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  158.790798][ T4194] bond0 (unregistering): Released all slaves
[  158.960132][ T4105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  158.963078][ T4105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  159.008695][ T5841] device vlan3 entered promiscuous mode
[  159.022975][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  159.026265][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  159.030381][ T5667] device veth0_vlan entered promiscuous mode
[  159.054170][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  159.056592][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  159.061199][ T5667] device veth1_vlan entered promiscuous mode
[  159.088955][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  159.091383][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  159.094829][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  159.099851][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  159.105046][ T5667] device veth0_macvtap entered promiscuous mode
[  159.110735][ T5667] device veth1_macvtap entered promiscuous mode
[  159.129279][ T5843] udc-core: couldn't find an available UDC or it's busy
[  159.131090][ T5843] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  159.144820][ T5667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  159.147696][ T5667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  159.149987][ T5667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  159.152427][ T5667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  159.154721][ T5667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  159.160827][ T5667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  159.165946][ T5667] batman_adv: batadv0: Interface activated: batadv_slave_0
[  159.167883][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  159.170091][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  159.172357][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  159.183067][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  159.198636][ T5667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  159.201264][ T5667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  159.204090][ T5667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  159.207249][ T5667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  159.209616][ T5667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  159.213559][ T5667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  159.223814][ T5667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  159.227174][ T5667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  159.243304][ T5667] batman_adv: batadv0: Interface activated: batadv_slave_1
[  159.246585][ T4105] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  159.249157][ T4105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  159.254866][ T5667] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  159.272305][ T5667] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  159.274302][ T5667] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  159.296662][ T5667] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  159.395728][ T4442] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  159.397671][ T4442] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  159.402976][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  159.428958][  T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  159.431131][  T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  159.434501][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  159.553962][ T4065] usb 1-1: USB disconnect, device number 4
[  159.782693][ T5883] netlink: 68 bytes leftover after parsing attributes in process `syz.3.580'.
[  159.785550][ T4065] Bluetooth: hci0: command 0x041b tx timeout
[  159.854995][ T5886] netlink: 132 bytes leftover after parsing attributes in process `syz.5.581'.
[  159.897708][ T5890] udc-core: couldn't find an available UDC or it's busy
[  159.907657][ T5890] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  160.153416][ T5903] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  160.490435][ T5929] udc-core: couldn't find an available UDC or it's busy
[  160.491970][ T5929] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  160.510982][ T5929] udc-core: couldn't find an available UDC or it's busy
[  160.517728][ T5929] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  161.109798][ T5961] udc-core: couldn't find an available UDC or it's busy
[  161.111395][ T5961] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  161.161827][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  161.838896][ T5997] loop8: detected capacity change from 0 to 7
[  161.859895][ T5997] Dev loop8: unable to read RDB block 7
[  161.861286][ T5997]  loop8: unable to read partition table
[  161.862526][ T5997] loop8: partition table beyond EOD, truncated
[  161.863896][ T5997] loop_reread_partitions: partition scan of loop8 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨�â·û
[  161.863896][ T5997] 
) failed (rc=-5)
[  161.865437][ T4065] Bluetooth: hci0: command 0x040f tx timeout
[  161.894648][ T6002] udc-core: couldn't find an available UDC or it's busy
[  161.905142][ T6002] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  161.963067][ T6008] udc-core: couldn't find an available UDC or it's busy
[  161.964676][ T6008] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  162.147824][ T4065] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  162.324743][ T6023] af_packet: tpacket_rcv: packet too big, clamped from 2 to 4294967272. macoff=96
[  162.385243][ T4065] usb 1-1: Using ep0 maxpacket: 32
[  162.488096][ T6027] udc-core: couldn't find an available UDC or it's busy
[  162.494419][ T6027] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  162.505360][ T4065] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  162.507771][ T4065] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  162.509806][ T4065] usb 1-1: New USB device found, idVendor=2133, idProduct=0018, bcdDevice= 0.00
[  162.511901][ T4065] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  162.518998][ T4065] usb 1-1: config 0 descriptor??
[  162.571178][ T6030] device vlan3 entered promiscuous mode
[  162.593044][ T6030] device dummy0 entered promiscuous mode
[  162.596432][ T6030] bond0: (slave vlan3): Enslaving as an active interface with an up link
[  162.790464][ T5998] udc-core: couldn't find an available UDC or it's busy
[  162.792127][ T5998] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  162.962430][ T6042] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  162.975398][ T4065] usbhid 1-1:0.0: can't add hid device: -71
[  162.977036][ T4065] usbhid: probe of 1-1:0.0 failed with error -71
[  162.980581][ T4065] usb 1-1: USB disconnect, device number 5
[  163.244480][ T6057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.632'.
[  163.945185][ T4065] Bluetooth: hci0: command 0x0419 tx timeout
[  164.164059][ T4194] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.228509][ T4194] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.273529][ T4194] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.332377][ T4194] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.711011][ T6092] netlink: 60 bytes leftover after parsing attributes in process `syz.0.645'.
[  164.716771][ T4194] tipc: Left network mode
[  164.727663][ T6080] chnl_net:caif_netlink_parms(): no params data found
[  165.282407][ T6080] bridge0: port 1(bridge_slave_0) entered blocking state
[  165.289663][ T6122] input: syz0 as /devices/virtual/input/input5
[  165.300265][ T6080] bridge0: port 1(bridge_slave_0) entered disabled state
[  165.305937][ T6080] device bridge_slave_0 entered promiscuous mode
[  165.313131][ T6080] bridge0: port 2(bridge_slave_1) entered blocking state
[  165.314961][ T6080] bridge0: port 2(bridge_slave_1) entered disabled state
[  165.320848][ T6080] device bridge_slave_1 entered promiscuous mode
[  165.363061][ T6080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  165.370924][ T6080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  165.487224][ T6080] team0: Port device team_slave_0 added
[  165.500025][ T6080] team0: Port device team_slave_1 added
[  165.526308][ T6130] loop4: detected capacity change from 0 to 66
[  165.578790][ T6080] batman_adv: batadv0: Adding interface: batadv_slave_0
[  165.585326][ T6080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  165.600684][ T6080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  165.611618][ T6080] batman_adv: batadv0: Adding interface: batadv_slave_1
[  165.616514][ T6080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  165.628520][ T6080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  165.757975][ T6080] device hsr_slave_0 entered promiscuous mode
[  165.775800][ T6080] device hsr_slave_1 entered promiscuous mode
[  166.195326][ T4180] Bluetooth: hci3: command 0x0409 tx timeout
[  166.309193][ T6080] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  166.357160][ T6080] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  166.375828][ T6166] udc-core: couldn't find an available UDC or it's busy
[  166.380920][ T6166] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  166.406983][ T6080] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  166.455224][ T6080] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  166.955144][ T4065] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  166.964817][ T6080] 8021q: adding VLAN 0 to HW filter on device bond0
[  167.205946][ T4065] usb 1-1: Using ep0 maxpacket: 8
[  167.920991][ T6080] 8021q: adding VLAN 0 to HW filter on device team0
[  167.995808][ T4065] usb 1-1: config 0 has no interfaces?
[  167.998830][ T4065] usb 1-1: New USB device found, idVendor=056a, idProduct=0015, bcdDevice= 0.00
[  168.000975][ T4065] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  168.031496][ T4065] usb 1-1: config 0 descriptor??
[  168.172014][ T6080] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  168.184986][ T6080] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  168.316186][ T4065] usb 1-1: USB disconnect, device number 6
[  168.394361][ T4069] Bluetooth: hci3: command 0x041b tx timeout
[  168.396099][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  168.405822][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  168.408105][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  168.417967][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  168.422420][ T4442] bridge0: port 1(bridge_slave_0) entered blocking state
[  168.423952][ T4442] bridge0: port 1(bridge_slave_0) entered forwarding state
[  168.444608][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  168.447758][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  168.449790][ T4442] bridge0: port 2(bridge_slave_1) entered blocking state
[  168.451139][ T6224] input: syz1 as /devices/virtual/input/input6
[  168.451254][ T4442] bridge0: port 2(bridge_slave_1) entered forwarding state
[  168.454438][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  168.456992][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  168.459841][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  168.462360][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  168.464900][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  168.468004][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  168.470258][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  168.472564][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  168.475638][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  168.477767][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  168.480112][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  168.482356][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  168.484516][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  168.692275][ T4194] device hsr_slave_0 left promiscuous mode
[  168.985246][ T4188] Bluetooth: hci4: command 0x0406 tx timeout
[  168.987957][ T4188] Bluetooth: hci1: command 0x0406 tx timeout
[  168.990878][ T4188] Bluetooth: hci2: command 0x0406 tx timeout
[  169.009785][ T4194] device hsr_slave_1 left promiscuous mode
[  169.526900][ T6243] udc-core: couldn't find an available UDC or it's busy
[  169.528616][ T6243] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  169.625738][ T4194] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  169.627602][ T4194] batman_adv: batadv0: Removing interface: batadv_slave_0
[  169.636385][ T4194] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  169.638092][ T4194] batman_adv: batadv0: Removing interface: batadv_slave_1
[  169.640411][ T4194] device bridge_slave_1 left promiscuous mode
[  169.641970][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state
[  169.696182][ T4194] device bridge_slave_0 left promiscuous mode
[  169.697898][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.760576][ T4194] device dummy0 left promiscuous mode
[  169.866601][ T4174] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  169.869444][ T4174] Bluetooth: hci4: Injecting HCI hardware error event
[  169.871946][  T144] Bluetooth: hci4: hardware error 0x00
[  169.975192][ T4180] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  170.245835][ T4194] device veth1_macvtap left promiscuous mode
[  170.247334][ T4194] device veth0_macvtap left promiscuous mode
[  170.248728][ T4194] device veth1_vlan left promiscuous mode
[  170.250011][ T4194] device veth0_vlan left promiscuous mode
[  170.514963][ T4180] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  170.521076][ T4180] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 31, changing to 7
[  170.525480][ T4180] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  170.530315][ T4174] Bluetooth: hci3: command 0x040f tx timeout
[  170.539580][ T4194] team0 (unregistering): Port device vlan2 removed
[  170.573197][ T6288] syz.3.701 sent an empty control message without MSG_MORE.
[  171.787539][ T4194] team0 (unregistering): Port device team_slave_1 removed
[  171.816054][ T4194] team0 (unregistering): Port device team_slave_0 removed
[  171.851609][ T4194] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  172.092578][ T4194] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  172.228178][ T4180] usb 1-1: string descriptor 0 read error: -22
[  172.230059][ T4180] usb 1-1: New USB device found, idVendor=2013, idProduct=0251, bcdDevice=e8.6e
[  172.232099][ T4180] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  172.243377][ T4180] usb 1-1: config 0 descriptor??
[  172.610798][ T4180] em28xx 1-1:0.0: New device   @ 480 Mbps (2013:0251, interface 0, class 0)
[  172.742096][ T4180] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class)
[  173.101745][ T4065] Bluetooth: hci3: command 0x0419 tx timeout
[  173.165944][ T4194] bond0 (unregistering): Released all slaves
[  173.285987][ T4180] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[  173.289505][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  173.291298][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  173.303130][ T6302] netlink: 24 bytes leftover after parsing attributes in process `syz.4.706'.
[  173.306453][ T4180] em28xx 1-1:0.0: Config register raw data: 0xfffffffb
[  173.325403][ T4180] em28xx 1-1:0.0: AC97 chip type couldn't be determined
[  173.327521][ T4180] em28xx 1-1:0.0: No AC97 audio processor
[  173.341393][ T4180] usb 1-1: USB disconnect, device number 7
[  173.343225][ T4180] em28xx 1-1:0.0: Disconnecting em28xx
[  173.356744][ T4180] em28xx 1-1:0.0: Freeing device
[  173.370822][ T6318] device bridge0 entered promiscuous mode
[  173.372255][ T6318] device bridge0 left promiscuous mode
[  173.387648][ T6080] 8021q: adding VLAN 0 to HW filter on device batadv0
[  173.544098][   T26] kauditd_printk_skb: 1 callbacks suppressed
[  173.544110][   T26] audit: type=1326 audit(173.510:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6350 comm="syz.0.722" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a28b368 code=0x7ffc0000
[  173.600617][ T6355] mmap: syz.3.724 (6355) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[  173.615355][   T26] audit: type=1326 audit(173.590:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6350 comm="syz.0.722" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a28b368 code=0x7ffc0000
[  173.665419][   T26] audit: type=1326 audit(173.640:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6350 comm="syz.0.722" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=178 compat=0 ip=0xffff9a28b368 code=0x7ffc0000
[  173.672147][   T26] audit: type=1326 audit(173.640:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6350 comm="syz.0.722" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a28b368 code=0x7ffc0000
[  173.710793][   T26] audit: type=1326 audit(173.640:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6350 comm="syz.0.722" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a28b368 code=0x7ffc0000
[  173.790730][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  173.793206][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  173.823610][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  173.826023][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  173.828320][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  173.832673][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  173.847506][ T6080] device veth0_vlan entered promiscuous mode
[  173.874765][ T6080] device veth1_vlan entered promiscuous mode
[  173.921579][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  173.923937][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  173.928297][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  173.930995][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  173.935457][ T6080] device veth0_macvtap entered promiscuous mode
[  173.939262][ T6080] device veth1_macvtap entered promiscuous mode
[  173.950364][ T6080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  173.955244][ T6080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  173.957580][ T6080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  173.960366][ T6080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  173.963792][ T6080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  173.971144][ T6080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.808442][ T6080] batman_adv: batadv0: Interface activated: batadv_slave_0
[  174.811250][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  174.813539][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  174.815974][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  174.818531][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  174.853170][ T6080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  174.865499][ T6080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.877967][ T6080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  174.883974][ T6080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.892943][ T6080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  174.895268][ T6080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.897356][ T6080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  174.899640][ T6080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.903030][ T6080] batman_adv: batadv0: Interface activated: batadv_slave_1
[  174.909216][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  174.911658][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  174.916608][ T6080] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  174.918562][ T6080] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  174.920333][ T6080] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  174.922266][ T6080] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  174.925461][ T4068] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  174.980179][  T606] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  174.982139][  T606] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  174.984908][  T606] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  175.018143][  T606] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  175.020776][  T606] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  175.063151][  T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  175.285376][ T4068] usb 1-1: config 0 has an invalid interface number: 104 but max is 0
[  175.287285][ T4068] usb 1-1: config 0 has no interface number 0
[  175.296227][ T4068] usb 1-1: config 0 interface 104 has no altsetting 0
[  175.396598][ T6403] netlink: 8 bytes leftover after parsing attributes in process `syz.3.735'.
[  175.455368][ T4068] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=a1.c9
[  175.457319][ T4068] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  175.458975][ T4068] usb 1-1: Product: syz
[  175.459870][ T4068] usb 1-1: Manufacturer: syz
[  175.460827][ T4068] usb 1-1: SerialNumber: syz
[  175.463877][ T4068] usb 1-1: config 0 descriptor??
[  175.517508][ T4068] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  176.536269][ T4068] gspca_vc032x: reg_r err -110
[  176.537402][ T4068] gspca_vc032x: I2c Bus Busy Wait 00
[  176.538547][ T4068] gspca_vc032x: I2c Bus Busy Wait 00
[  176.539714][ T4068] gspca_vc032x: I2c Bus Busy Wait 00
[  176.540903][ T4068] gspca_vc032x: I2c Bus Busy Wait 00
[  176.542006][ T4068] gspca_vc032x: I2c Bus Busy Wait 00
[  176.543151][ T4068] gspca_vc032x: I2c Bus Busy Wait 00
[  176.544252][ T4068] gspca_vc032x: I2c Bus Busy Wait 00
[  176.555130][ T4068] gspca_vc032x: I2c Bus Busy Wait 00
[  176.556255][ T4068] gspca_vc032x: I2c Bus Busy Wait 00
[  176.557442][ T4068] gspca_vc032x: I2c Bus Busy Wait 00
[  176.558595][ T4068] gspca_vc032x: I2c Bus Busy Wait 00
[  176.559723][ T4068] gspca_vc032x: I2c Bus Busy Wait 00
[  176.560856][ T4068] gspca_vc032x: I2c Bus Busy Wait 00
[  176.562023][ T4068] gspca_vc032x: I2c Bus Busy Wait 00
[  176.563687][ T4068] gspca_vc032x: I2c Bus Busy Wait 00
[  176.564863][ T4068] gspca_vc032x: I2c Bus Busy Wait 00
[  176.575229][ T4068] gspca_vc032x: I2c Bus Busy Wait 00
[  176.576308][ T4068] gspca_vc032x: I2c Bus Busy Wait 00
[  176.577341][ T4068] gspca_vc032x: Unknown sensor...
[  176.578396][ T4068] vc032x: probe of 1-1:0.104 failed with error -22
[  176.617727][ T6417] device vlan4 entered promiscuous mode
[  176.655718][ T6421] sctp: [Deprecated]: syz.5.741 (pid 6421) Use of struct sctp_assoc_value in delayed_ack socket option.
[  176.655718][ T6421] Use struct sctp_sack_info instead
[  176.735935][ T6426] udc-core: couldn't find an available UDC or it's busy
[  176.745279][ T6426] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  176.969741][ T6440] loop3: detected capacity change from 0 to 256
[  176.994746][ T4069] usb 1-1: USB disconnect, device number 8
[  177.057956][ T6440] FAT-fs (loop3): Unrecognized mount option "shortUame=lower" or missing value
[  177.241958][ T6390] loop6: detected capacity change from 0 to 40427
[  177.360099][ T6440] loop3: detected capacity change from 0 to 4096
[  177.362052][ T6440] ntfs3: Unknown parameter '#! 
[  177.362052][ T6440] '
[  177.560982][ T6390] F2FS-fs (loop6): Unrecognized mount option "age_extent_cache" or missing value
[  179.418665][ T6483] device vlan2 entered promiscuous mode
[  179.474214][ T6490] udc-core: couldn't find an available UDC or it's busy
[  179.484711][ T6490] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  179.525637][ T6492] udc-core: couldn't find an available UDC or it's busy
[  179.527210][ T6492] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  180.083198][ T6510] loop3: detected capacity change from 0 to 256
[  180.186290][ T6510] FAT-fs (loop3): Unrecognized mount option "shortUame=lower" or missing value
[  180.301218][ T6510] loop3: detected capacity change from 0 to 4096
[  180.303168][ T6510] ntfs3: Unknown parameter '#! 
[  180.303168][ T6510] '
[  180.567563][ T6522] loop3: detected capacity change from 0 to 8192
[  180.616256][ T6522] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[  180.618545][ T6522] REISERFS (device loop3): using ordered data mode
[  180.620007][ T6522] reiserfs: using flush barriers
[  180.621945][ T6522] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  180.625703][ T6522] REISERFS (device loop3): checking transaction log (loop3)
[  180.628614][ T6522] REISERFS (device loop3): Using rupasov hash to sort names
[  180.630156][ T6522] REISERFS (device loop3): using 3.5.x disk format
[  182.010885][ T6550] netlink: 24 bytes leftover after parsing attributes in process `syz.5.770'.
[  183.086820][ T6545] loop3: detected capacity change from 0 to 40427
[  183.126333][ T6585] loop4: detected capacity change from 0 to 256
[  183.128476][ T6545] F2FS-fs (loop3): Unrecognized mount option "age_extent_cache" or missing value
[  183.158610][ T6585] FAT-fs (loop4): Unrecognized mount option "shortUame=lower" or missing value
[  183.475228][ T6585] loop4: detected capacity change from 0 to 4096
[  183.565859][ T6585] ntfs3: Unknown parameter '#! 
[  183.565859][ T6585] '
[  183.873746][ T6610] device bond_slave_0 entered promiscuous mode
[  183.873830][ T6610] device bond_slave_1 entered promiscuous mode
[  183.874002][ T6610] device macsec1 entered promiscuous mode
[  183.874016][ T6610] device bond0 entered promiscuous mode
[  183.962237][ T6615] loop4: detected capacity change from 0 to 8192
[  183.970353][ T6610] device bond0 left promiscuous mode
[  183.972144][ T6610] device bond_slave_0 left promiscuous mode
[  183.973602][ T6610] device bond_slave_1 left promiscuous mode
[  183.979995][ T6615] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
[  183.982188][ T6615] REISERFS (device loop4): using ordered data mode
[  183.983578][ T6615] reiserfs: using flush barriers
[  183.993265][ T6615] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  183.997079][ T6615] REISERFS (device loop4): checking transaction log (loop4)
[  184.000806][ T6615] REISERFS (device loop4): Using rupasov hash to sort names
[  184.002317][ T6615] REISERFS (device loop4): using 3.5.x disk format
[  185.539800][ T6647] netlink: 'syz.4.786': attribute type 10 has an invalid length.
[  185.598471][ T6647] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  186.131832][ T6676] loop0: detected capacity change from 0 to 256
[  186.175887][ T6676] FAT-fs (loop0): Unrecognized mount option "shortUame=lower" or missing value
[  186.316201][ T6676] loop0: detected capacity change from 0 to 4096
[  186.356255][ T6676] ntfs3: Unknown parameter '#! 
[  186.356255][ T6676] '
[  186.684619][ T6684] loop0: detected capacity change from 0 to 8192
[  186.797736][ T6684] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[  186.799951][ T6684] REISERFS (device loop0): using ordered data mode
[  186.801413][ T6684] reiserfs: using flush barriers
[  186.808443][ T6684] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  186.812277][ T6684] REISERFS (device loop0): checking transaction log (loop0)
[  186.823796][ T6684] REISERFS (device loop0): Using rupasov hash to sort names
[  186.825579][ T6684] REISERFS (device loop0): using 3.5.x disk format
[  188.257565][ T6715] netlink: 4 bytes leftover after parsing attributes in process `syz.6.799'.
[  188.428213][ T6723] sch_fq: defrate 0 ignored.
[  188.515241][ T4069] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  188.880333][ T6747] loop3: detected capacity change from 0 to 256
[  188.935972][ T6747] FAT-fs (loop3): Unrecognized mount option "shortUame=lower" or missing value
[  188.945799][ T4069] usb 1-1: too many configurations: 9, using maximum allowed: 8
[  188.996875][ T6747] loop3: detected capacity change from 0 to 4096
[  189.035732][ T6747] ntfs3: Unknown parameter '#! 
[  189.035732][ T6747] '
[  189.045391][ T4069] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  189.047515][ T4069] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  189.049947][ T4069] usb 1-1: config 0 interface 0 has no altsetting 0
[  189.339835][ T6752] loop3: detected capacity change from 0 to 8192
[  189.407346][ T4069] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  189.409501][ T4069] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  189.411996][ T4069] usb 1-1: config 0 interface 0 has no altsetting 0
[  189.436895][ T6752] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[  189.439047][ T6752] REISERFS (device loop3): using ordered data mode
[  189.440512][ T6752] reiserfs: using flush barriers
[  189.442565][ T6752] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  189.446402][ T6752] REISERFS (device loop3): checking transaction log (loop3)
[  189.458964][ T6752] REISERFS (device loop3): Using rupasov hash to sort names
[  189.460516][ T6752] REISERFS (device loop3): using 3.5.x disk format
[  189.495338][ T4069] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  189.498252][ T4069] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  189.500720][ T4069] usb 1-1: config 0 interface 0 has no altsetting 0
[  189.605562][ T4069] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  189.607880][ T4069] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  189.613634][ T4069] usb 1-1: config 0 interface 0 has no altsetting 0
[  189.733230][ T4069] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  189.756538][ T4069] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  189.758896][ T4069] usb 1-1: config 0 interface 0 has no altsetting 0
[  190.795364][ T4069] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  190.797841][ T4069] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  190.800451][ T4069] usb 1-1: config 0 interface 0 has no altsetting 0
[  190.847046][ T6771] device vlan2 entered promiscuous mode
[  190.885336][ T4069] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  190.887465][ T4069] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  190.889955][ T4069] usb 1-1: config 0 interface 0 has no altsetting 0
[  190.965366][ T4069] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  190.967577][ T4069] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  190.970167][ T4069] usb 1-1: config 0 interface 0 has no altsetting 0
[  191.155291][ T4069] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  191.157615][ T4069] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  191.159448][ T4069] usb 1-1: Product: syz
[  191.160265][ T4069] usb 1-1: Manufacturer: syz
[  191.161285][ T4069] usb 1-1: SerialNumber: syz
[  191.169209][ T4069] usb 1-1: config 0 descriptor??
[  191.272290][ T4069] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0
[  191.283843][ T4069] usb 1-1: USB disconnect, device number 9
[  191.293134][ T4069] yurex 1-1:0.0: USB YUREX #0 now disconnected
[  191.540535][ T6798] loop4: detected capacity change from 0 to 256
[  191.696357][ T6798] FAT-fs (loop4): Unrecognized mount option "shortUame=lower" or missing value
[  192.106114][ T6804] loop4: detected capacity change from 0 to 8192
[  192.113742][ T6804] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
[  192.115825][ T6804] REISERFS (device loop4): using ordered data mode
[  192.117300][ T6804] reiserfs: using flush barriers
[  192.119416][ T6804] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  192.123289][ T6804] REISERFS (device loop4): checking transaction log (loop4)
[  192.135529][ T6804] REISERFS (device loop4): Using rupasov hash to sort names
[  192.137110][ T6804] REISERFS (device loop4): using 3.5.x disk format
[  192.269028][ T6784] loop3: detected capacity change from 0 to 40427
[  192.342204][ T6784] F2FS-fs (loop3): Unrecognized mount option "age_extent_cache" or missing value
[  192.519949][ T2053] ieee802154 phy0 wpan0: encryption failed: -22
[  192.521406][ T2053] ieee802154 phy1 wpan1: encryption failed: -22
[  192.678070][ T6813] udc-core: couldn't find an available UDC or it's busy
[  192.721174][ T6813] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  193.901085][ T6822] device vlan2 entered promiscuous mode
[  193.930697][ T6825] device team0 entered promiscuous mode
[  193.932100][ T6825] device team_slave_0 entered promiscuous mode
[  193.933469][ T6825] device team_slave_1 entered promiscuous mode
[  193.936216][ T6824] device team0 left promiscuous mode
[  193.937350][ T6824] device team_slave_0 left promiscuous mode
[  193.938914][ T6824] device team_slave_1 left promiscuous mode
[  193.962046][ T6827] process 'syz.4.826' launched '/dev/fd/4/./file1' with NULL argv: empty string added
[  193.988404][ T6829] udc-core: couldn't find an available UDC or it's busy
[  194.000397][ T6829] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  194.151619][ T6837] loop4: detected capacity change from 0 to 256
[  194.284702][ T6829] udc-core: couldn't find an available UDC or it's busy
[  194.288303][ T6837] FAT-fs (loop4): Unrecognized mount option "shortUame=lower" or missing value
[  194.290298][ T6829] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  194.479842][ T6837] loop4: detected capacity change from 0 to 4096
[  194.480271][ T6837] ntfs3: Unknown parameter '#! 
[  194.480271][ T6837] '
[  194.738097][ T6846] loop4: detected capacity change from 0 to 8192
[  194.788866][ T6846] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
[  194.791212][ T6846] REISERFS (device loop4): using ordered data mode
[  194.792649][ T6846] reiserfs: using flush barriers
[  194.794760][ T6846] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  194.798554][ T6846] REISERFS (device loop4): checking transaction log (loop4)
[  194.873233][ T6852] udc-core: couldn't find an available UDC or it's busy
[  194.874920][ T6852] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  194.877068][ T6846] REISERFS (device loop4): Using rupasov hash to sort names
[  194.878826][ T6846] REISERFS (device loop4): using 3.5.x disk format
[  197.548711][ T6905] loop0: detected capacity change from 0 to 256
[  197.618404][ T6905] FAT-fs (loop0): Unrecognized mount option "shortUame=lower" or missing value
[  197.808753][ T6905] loop0: detected capacity change from 0 to 4096
[  197.811076][ T6905] ntfs3: Unknown parameter '#! 
[  197.811076][ T6905] '
[  198.156284][ T6920] loop0: detected capacity change from 0 to 8192
[  198.987579][ T6920] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[  198.989777][ T6920] REISERFS (device loop0): using ordered data mode
[  198.991258][ T6920] reiserfs: using flush barriers
[  198.993539][ T6920] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  198.997259][ T6920] REISERFS (device loop0): checking transaction log (loop0)
[  199.002068][ T6920] REISERFS (device loop0): Using rupasov hash to sort names
[  199.003518][ T6920] REISERFS (device loop0): using 3.5.x disk format
[  199.236253][ T6931] udc-core: couldn't find an available UDC or it's busy
[  199.237951][ T6931] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  199.302343][ T6935] netlink: 8 bytes leftover after parsing attributes in process `syz.0.853'.
[  200.514521][ T6945] device vlan2 entered promiscuous mode
[  201.628201][ T6956] loop4: detected capacity change from 0 to 256
[  201.630367][ T6956] FAT-fs (loop4): Unrecognized mount option "shortUame=lower" or missing value
[  201.807063][ T6956] loop4: detected capacity change from 0 to 4096
[  201.855648][ T6956] ntfs3: Unknown parameter '#! 
[  201.855648][ T6956] '
[  202.238162][ T6967] loop4: detected capacity change from 0 to 8192
[  202.620801][ T6967] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
[  202.622899][ T6967] REISERFS (device loop4): using ordered data mode
[  202.624414][ T6967] reiserfs: using flush barriers
[  202.626523][ T6967] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  202.630353][ T6967] REISERFS (device loop4): checking transaction log (loop4)
[  202.633557][ T6967] REISERFS (device loop4): Using rupasov hash to sort names
[  202.635180][ T6967] REISERFS (device loop4): using 3.5.x disk format
[  202.719035][ T6954] loop3: detected capacity change from 0 to 40427
[  203.608601][ T6954] F2FS-fs (loop3): Unrecognized mount option "age_extent_cache" or missing value
[  203.779509][ T6986] device vlan2 entered promiscuous mode
[  205.027740][ T7011] ALSA: seq fatal error: cannot create timer (-22)
[  205.065840][ T7016] loop3: detected capacity change from 0 to 256
[  205.195934][ T7016] FAT-fs (loop3): Unrecognized mount option "shortUame=lower" or missing value
[  206.381681][ T7016] loop3: detected capacity change from 0 to 4096
[  206.515616][ T7016] ntfs3: Unknown parameter '#! 
[  206.515616][ T7016] '
[  207.655328][ T7046] loop3: detected capacity change from 0 to 8192
[  207.717350][ T7046] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[  207.719595][ T7046] REISERFS (device loop3): using ordered data mode
[  207.721054][ T7046] reiserfs: using flush barriers
[  207.723068][ T7046] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  207.726960][ T7046] REISERFS (device loop3): checking transaction log (loop3)
[  207.730299][ T7046] REISERFS (device loop3): Using rupasov hash to sort names
[  207.732013][ T7046] REISERFS (device loop3): using 3.5.x disk format
[  208.186865][ T7057] loop0: detected capacity change from 0 to 40427
[  208.198979][ T7062] device vlan2 entered promiscuous mode
[  208.228223][ T7057] F2FS-fs (loop0): Unrecognized mount option "age_extent_cache" or missing value
[  210.754026][ T7138] netlink: 16 bytes leftover after parsing attributes in process `syz.4.909'.
[  211.042141][ T7140] loop4: detected capacity change from 0 to 40427
[  211.312592][ T7140] F2FS-fs (loop4): Unrecognized mount option "age_extent_cache" or missing value
[  213.465620][ T7161] device vlan2 entered promiscuous mode
[  213.644840][ T7165] netlink: 8 bytes leftover after parsing attributes in process `syz.4.915'.
[  213.682847][ T7165] netlink: 104 bytes leftover after parsing attributes in process `syz.4.915'.
[  213.794268][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  215.663200][ T7205] loop6: detected capacity change from 0 to 40427
[  216.252572][ T7205] F2FS-fs (loop6): Unrecognized mount option "age_extent_cache" or missing value
[  216.561938][ T7217] device vlan2 entered promiscuous mode
[  217.126364][ T7236] udc-core: couldn't find an available UDC or it's busy
[  217.127940][ T7236] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  219.417749][ T7268] udc-core: couldn't find an available UDC or it's busy
[  219.419413][ T7268] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  219.422573][ T4106] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  219.424797][ T4106] Bluetooth: hci0: Injecting HCI hardware error event
[  219.427211][ T7267] udc-core: couldn't find an available UDC or it's busy
[  219.428731][ T7267] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  219.430779][  T144] Bluetooth: hci0: hardware error 0x00
[  219.885646][ T7277] netlink: 6 bytes leftover after parsing attributes in process `syz.3.943'.
[  219.887661][ T7277] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  219.905469][ T7277] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  224.517097][ T7331] device vlan4 entered promiscuous mode
[  225.196186][ T7343] netlink: 8 bytes leftover after parsing attributes in process `syz.4.964'.
[  225.198245][ T7343] netlink: 16 bytes leftover after parsing attributes in process `syz.4.964'.
[  226.475317][ T7353] netlink: 'syz.4.967': attribute type 4 has an invalid length.
[  226.729342][ T7363] udc-core: couldn't find an available UDC or it's busy
[  226.731105][ T7363] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  226.732898][ T7361] device vlan3 entered promiscuous mode
[  226.832907][ T7365] xt_NFQUEUE: number of total queues is 0
[  227.966306][ T7373] x_tables: duplicate underflow at hook 2
[  227.996544][ T7376] udc-core: couldn't find an available UDC or it's busy
[  227.998167][ T7376] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  230.303038][ T7399] device vlan4 entered promiscuous mode
[  231.684367][ T7418] udc-core: couldn't find an available UDC or it's busy
[  231.693473][ T7418] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  238.255979][ T7478] netlink: 708 bytes leftover after parsing attributes in process `syz.4.1005'.
[  239.247966][ T4172] Bluetooth: hci5: command 0x0409 tx timeout
[  240.236467][ T7459] chnl_net:caif_netlink_parms(): no params data found
[  240.735380][ T7517] udc-core: couldn't find an available UDC or it's busy
[  240.737187][ T7517] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  240.888662][ T7459] bridge0: port 1(bridge_slave_0) entered blocking state
[  240.890412][ T7459] bridge0: port 1(bridge_slave_0) entered disabled state
[  240.892778][ T7459] device bridge_slave_0 entered promiscuous mode
[  240.923165][ T7459] bridge0: port 2(bridge_slave_1) entered blocking state
[  240.944747][ T7459] bridge0: port 2(bridge_slave_1) entered disabled state
[  240.958062][ T7459] device bridge_slave_1 entered promiscuous mode
[  241.110815][ T7459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  241.126573][ T7459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  241.157987][   T26] audit: type=1326 audit(753.121:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7525 comm="syz.6.1021" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c61a368 code=0x7ffc0000
[  241.166009][   T26] audit: type=1326 audit(753.131:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7525 comm="syz.6.1021" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c61a368 code=0x7ffc0000
[  241.177860][   T26] audit: type=1326 audit(753.131:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7525 comm="syz.6.1021" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff8c61a368 code=0x7ffc0000
[  241.188220][   T26] audit: type=1326 audit(753.131:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7525 comm="syz.6.1021" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c61a368 code=0x7ffc0000
[  241.198674][   T26] audit: type=1326 audit(753.131:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7525 comm="syz.6.1021" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff8c61a368 code=0x7ffc0000
[  241.209088][   T26] audit: type=1326 audit(753.131:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7525 comm="syz.6.1021" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c61a368 code=0x7ffc0000
[  241.220106][   T26] audit: type=1326 audit(753.131:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7525 comm="syz.6.1021" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=208 compat=0 ip=0xffff8c61a368 code=0x7ffc0000
[  241.220814][ T7459] team0: Port device team_slave_0 added
[  241.230427][   T26] audit: type=1326 audit(753.131:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7525 comm="syz.6.1021" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c61a368 code=0x7ffc0000
[  241.248564][ T7459] team0: Port device team_slave_1 added
[  241.250184][   T26] audit: type=1326 audit(753.141:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7525 comm="syz.6.1021" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=203 compat=0 ip=0xffff8c61a368 code=0x7ffc0000
[  241.299656][ T7459] batman_adv: batadv0: Adding interface: batadv_slave_0
[  241.301307][ T7459] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  241.307959][ T4188] Bluetooth: hci5: command 0x041b tx timeout
[  241.325131][ T7459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  241.330543][ T7459] batman_adv: batadv0: Adding interface: batadv_slave_1
[  241.332231][ T7459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  241.366528][ T7459] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  241.588236][ T7459] device hsr_slave_0 entered promiscuous mode
[  241.628371][ T7459] device hsr_slave_1 entered promiscuous mode
[  242.125386][ T7459] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  242.127141][ T7459] Cannot create hsr debugfs directory
[  243.251087][ T7459] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  243.957509][ T7459] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  244.055620][ T4172] Bluetooth: hci5: command 0x040f tx timeout
[  244.094257][ T7558] device erspan0 entered promiscuous mode
[  244.097120][ T7561] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1034'.
[  244.128064][ T7459] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  244.334420][ T7459] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  244.346125][ T7571] udc-core: couldn't find an available UDC or it's busy
[  244.347601][ T7571] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  245.176850][ T7459] 8021q: adding VLAN 0 to HW filter on device bond0
[  245.189747][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  245.192203][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  245.204280][ T7459] 8021q: adding VLAN 0 to HW filter on device team0
[  245.404665][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  245.407447][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  245.409622][ T4481] bridge0: port 1(bridge_slave_0) entered blocking state
[  245.411240][ T4481] bridge0: port 1(bridge_slave_0) entered forwarding state
[  245.413305][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  245.416752][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  245.418931][ T4481] bridge0: port 2(bridge_slave_1) entered blocking state
[  245.420563][ T4481] bridge0: port 2(bridge_slave_1) entered forwarding state
[  245.422889][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  245.425717][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  245.428285][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  246.095288][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  246.098098][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  246.106360][ T7595] udc-core: couldn't find an available UDC or it's busy
[  246.107837][ T7595] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  246.115445][ T4069] Bluetooth: hci5: command 0x0419 tx timeout
[  246.144604][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  246.204079][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  246.208532][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  246.231888][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  246.234313][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  246.261739][ T7459] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  246.269121][ T7459] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  246.285828][ T4080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  246.288056][ T4080] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  246.295037][ T7598] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1046'.
[  246.412487][ T7598] device hsr_slave_1 left promiscuous mode
[  246.449255][ T7601] device vlan2 entered promiscuous mode
[  246.575813][ T4180] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  246.712590][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  246.714592][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  246.764306][ T7459] 8021q: adding VLAN 0 to HW filter on device batadv0
[  247.931573][ T4173] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  248.033716][ T4180] usb 1-1: Using ep0 maxpacket: 16
[  248.035765][ T4173] Bluetooth: hci3: Injecting HCI hardware error event
[  248.037519][ T4030] Bluetooth: hci3: hardware error 0x00
[  248.079320][ T7622] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1052'.
[  248.418957][ T4080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  248.422115][ T4080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  248.517424][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  248.538384][ T4180] usb 1-1: unable to get BOS descriptor or descriptor too short
[  248.835433][ T4180] usb 1-1: unable to read config index 0 descriptor/start: -71
[  248.837228][ T4180] usb 1-1: can't read configurations, error -71
[  248.859718][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  248.876821][ T7459] device veth0_vlan entered promiscuous mode
[  248.883716][ T7459] device veth1_vlan entered promiscuous mode
[  248.910985][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  248.917413][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  248.923168][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  248.964081][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  248.996766][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  248.999143][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  249.014031][ T7459] device veth0_macvtap entered promiscuous mode
[  249.071833][ T7459] device veth1_macvtap entered promiscuous mode
[  249.115292][ T7459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  249.117532][ T7459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  249.135248][ T7459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  249.150151][ T7459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  249.152370][ T7459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  249.203999][ T7459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  249.221441][ T7459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  249.234315][ T7459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  249.256519][ T7459] batman_adv: batadv0: Interface activated: batadv_slave_0
[  249.258436][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  249.260846][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  249.272683][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  249.287015][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  249.318721][ T7459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  249.320915][ T7459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  249.323017][ T7459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  249.359439][ T7459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  249.361642][ T7459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  249.363882][ T7459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  249.378151][ T7459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  249.383939][ T7459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  249.395193][ T7459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  249.400017][ T7459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  249.466978][ T7459] batman_adv: batadv0: Interface activated: batadv_slave_1
[  249.471102][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  249.474161][  T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  249.568416][ T7459] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  249.570363][ T7459] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  249.572131][ T7459] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  249.574578][ T7459] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  250.228484][ T4171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  250.230526][ T4171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  250.270109][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  250.378220][ T4481] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  250.380177][ T4481] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  250.383048][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  251.327701][ T4481] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  251.509162][ T4481] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  252.417834][ T4481] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  252.505054][ T4481] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  252.564125][  T144] Bluetooth: hci5: Dropping invalid advertising data
[  253.947506][ T2053] ieee802154 phy0 wpan0: encryption failed: -22
[  253.949052][ T2053] ieee802154 phy1 wpan1: encryption failed: -22
[  254.112826][ T7711] udc-core: couldn't find an available UDC or it's busy
[  254.124235][ T7711] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  254.847353][ T7691] chnl_net:caif_netlink_parms(): no params data found
[  254.897909][ T4070] Bluetooth: hci4: command 0x0409 tx timeout
[  255.026849][ T7691] bridge0: port 1(bridge_slave_0) entered blocking state
[  255.054230][ T7691] bridge0: port 1(bridge_slave_0) entered disabled state
[  255.096079][ T7691] device bridge_slave_0 entered promiscuous mode
[  255.168270][ T4481] device erspan0 left promiscuous mode
[  255.235392][ T7691] bridge0: port 2(bridge_slave_1) entered blocking state
[  255.237031][ T7691] bridge0: port 2(bridge_slave_1) entered disabled state
[  255.239378][ T7691] device bridge_slave_1 entered promiscuous mode
[  255.329589][ T7691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  255.340502][ T7691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  255.401291][ T7691] team0: Port device team_slave_0 added
[  255.421462][ T7691] team0: Port device team_slave_1 added
[  255.473685][ T7691] batman_adv: batadv0: Adding interface: batadv_slave_0
[  255.475987][ T7691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  255.504042][ T7691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  255.542052][ T7691] batman_adv: batadv0: Adding interface: batadv_slave_1
[  255.543540][ T7691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  255.563315][ T7691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  255.666892][ T7749] udc-core: couldn't find an available UDC or it's busy
[  255.670593][ T7749] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  255.805979][ T7726] loop3: detected capacity change from 0 to 40427
[  255.817568][ T7691] device hsr_slave_0 entered promiscuous mode
[  255.848027][ T7691] device hsr_slave_1 entered promiscuous mode
[  255.856331][ T7726] F2FS-fs (loop3): Unrecognized mount option "age_extent_cache" or missing value
[  255.885347][ T7691] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  255.887093][ T7691] Cannot create hsr debugfs directory
[  256.178609][ T4481] device hsr_slave_0 left promiscuous mode
[  256.221782][ T4481] device hsr_slave_1 left promiscuous mode
[  256.305339][ T4481] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  256.307323][ T4481] batman_adv: batadv0: Removing interface: batadv_slave_0
[  256.309973][ T4481] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  256.311642][ T4481] batman_adv: batadv0: Removing interface: batadv_slave_1
[  256.313875][ T4481] device bridge_slave_1 left promiscuous mode
[  256.465224][ T4481] bridge0: port 2(bridge_slave_1) entered disabled state
[  256.516616][ T4481] device bridge_slave_0 left promiscuous mode
[  256.518130][ T4481] bridge0: port 1(bridge_slave_0) entered disabled state
[  256.581232][ T4481] device dummy0 left promiscuous mode
[  256.696429][ T4481] device veth1_macvtap left promiscuous mode
[  256.697937][ T4481] device veth0_macvtap left promiscuous mode
[  256.699452][ T4481] device veth1_vlan left promiscuous mode
[  256.700871][ T4481] device veth0_vlan left promiscuous mode
[  256.907736][ T1534] Bluetooth: hci4: command 0x041b tx timeout
[  257.132113][ T4481] bond0 (unregistering): (slave vlan2): Releasing backup interface
[  257.307977][ T4481] team0 (unregistering): Port device team_slave_1 removed
[  257.317132][ T4481] team0 (unregistering): Port device team_slave_0 removed
[  257.324401][ T4481] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  257.360114][ T4481] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  257.572810][ T4481] bond0 (unregistering): Released all slaves
[  257.578024][ T7783] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1099'.
[  257.697609][ T7766] device vlan2 entered promiscuous mode
[  257.705312][ T7772] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  257.707236][ T7772] IPv6: NLM_F_CREATE should be set when creating new route
[  257.819205][ T7691] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  257.877780][ T7691] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  257.907452][ T7691] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  257.928059][ T7804] udc-core: couldn't find an available UDC or it's busy
[  257.932024][ T7804] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  257.958390][ T7691] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  258.280223][ T7818] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1108'.
[  258.994251][ T4068] Bluetooth: hci4: command 0x040f tx timeout
[  259.119177][ T7691] 8021q: adding VLAN 0 to HW filter on device bond0
[  259.126885][ T4080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  259.128918][ T4080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  259.133934][ T7691] 8021q: adding VLAN 0 to HW filter on device team0
[  259.139269][ T4080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  259.141505][ T4080] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  259.143508][ T4080] bridge0: port 1(bridge_slave_0) entered blocking state
[  259.145146][ T4080] bridge0: port 1(bridge_slave_0) entered forwarding state
[  259.151815][ T4080] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  259.153960][ T4080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  259.165624][ T4080] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  259.183271][ T4080] bridge0: port 2(bridge_slave_1) entered blocking state
[  259.184912][ T4080] bridge0: port 2(bridge_slave_1) entered forwarding state
[  259.194141][ T4080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  259.199024][ T4080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  259.255567][ T4080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  259.266493][ T4080] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  259.276117][ T4080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  259.285825][ T4080] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  259.301599][ T7691] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  259.304073][ T7691] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  259.350088][ T4080] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  259.353056][ T4080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  259.358615][ T4080] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  260.186526][ T4080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  260.211102][ T4080] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  260.233076][ T4080] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  260.407470][ T7834] device vlan4 entered promiscuous mode
[  260.485597][ T7853] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  261.190024][ T4172] Bluetooth: hci4: command 0x0419 tx timeout
[  262.133288][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  262.135971][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  262.166877][ T7691] 8021q: adding VLAN 0 to HW filter on device batadv0
[  263.300716][ T7899] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1128'.
[  263.323904][ T7901] device vlan2 entered promiscuous mode
[  264.752326][ T7871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  264.754705][ T7871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  264.810653][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  264.813300][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  264.821286][ T7691] device veth0_vlan entered promiscuous mode
[  264.839035][ T7691] device veth1_vlan entered promiscuous mode
[  264.885940][ T4080] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  264.892079][ T4080] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  264.942748][ T4080] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  264.974855][ T7941] netlink: 'syz.4.1141': attribute type 1 has an invalid length.
[  265.032553][ T7941] 8021q: adding VLAN 0 to HW filter on device bond1
[  265.058336][ T7871] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  265.126237][ T7871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  265.128814][ T7871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  265.133413][ T7691] device veth0_macvtap entered promiscuous mode
[  265.168513][ T7945] bond1: (slave gretap1): making interface the new active one
[  265.178020][ T7945] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  265.182989][ T7691] device veth1_macvtap entered promiscuous mode
[  265.185057][ T4080] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  265.202807][ T4080] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  265.217418][ T4080] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  265.234213][ T7691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  265.273411][ T7691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  265.285189][ T7691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  265.287473][ T7691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  265.305199][ T7691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  265.305241][ T7691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  265.305265][ T7691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  265.353312][ T7691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  265.379026][ T7691] batman_adv: batadv0: Interface activated: batadv_slave_0
[  265.384623][  T535] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  265.393787][  T535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  265.414326][ T7691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  265.433904][ T7691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  265.455257][ T7691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  265.457616][ T7691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  265.459630][ T7691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  265.461930][ T7691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  265.505663][ T7691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  265.520077][ T7691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  265.522195][ T7691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  265.524508][ T7691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  265.566810][ T7691] batman_adv: batadv0: Interface activated: batadv_slave_1
[  265.577689][ T7691] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  265.605212][ T7691] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  265.607231][ T7691] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  265.608985][ T7691] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  265.637796][ T4080] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  265.640232][ T4080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  265.820463][ T4194] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  265.822621][ T4194] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  265.834176][  T535] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  265.868661][ T7966] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1144'.
[  265.878449][ T4080] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  265.880392][ T4080] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  265.883901][ T4080] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  267.188447][ T7989] device vlan2 entered promiscuous mode
[  268.265252][ T1534] Bluetooth: hci1: command 0x0409 tx timeout
[  269.689507][ T8039] udc-core: couldn't find an available UDC or it's busy
[  269.691138][ T8039] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  270.737080][ T4481] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  270.830775][ T8056] udc-core: couldn't find an available UDC or it's busy
[  270.832395][ T8056] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  270.839381][ T8052] netlink: 'syz.8.1164': attribute type 1 has an invalid length.
[  270.840985][ T8052] netlink: 256 bytes leftover after parsing attributes in process `syz.8.1164'.
[  270.848372][ T4481] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  270.903530][ T4481] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  270.940303][ T8060] device vlan2 entered promiscuous mode
[  270.963730][ T8064] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1167'.
[  271.102516][ T4481] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  274.075949][ T8102] Can't find ip_set type h
[  274.087320][ T4106] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0
[  274.089031][ T4106] Bluetooth: hci5: Injecting HCI hardware error event
[  274.090809][ T4022] Bluetooth: hci5: hardware error 0x00
[  274.453547][ T8112] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1178'.
[  274.700842][ T8119] device vlan2 entered promiscuous mode
[  277.677836][ T8150] udc-core: couldn't find an available UDC or it's busy
[  277.679732][ T8150] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  278.089121][   T26] audit: type=1326 audit(790.051:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8158 comm="syz.7.1189" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc716368 code=0x0
[  278.497405][ T8176] device vlan2 entered promiscuous mode
[  279.809086][ T8198] Cannot find add_set index 0 as target
[  281.004120][ T8217] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1204'.
[  281.011082][ T8217] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  281.137490][ T8221] udc-core: couldn't find an available UDC or it's busy
[  281.139030][ T8221] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  282.731946][ T8245] device vlan2 entered promiscuous mode
[  282.809992][ T8249] udc-core: couldn't find an available UDC or it's busy
[  282.811707][ T8249] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  282.890318][ T4481] device hsr_slave_0 left promiscuous mode
[  282.946165][ T4481] device hsr_slave_1 left promiscuous mode
[  283.045698][ T4481] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  283.047398][ T4481] batman_adv: batadv0: Removing interface: batadv_slave_0
[  283.050286][ T4481] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  283.052241][ T4481] batman_adv: batadv0: Removing interface: batadv_slave_1
[  283.061266][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  283.066799][ T4481] device bridge_slave_1 left promiscuous mode
[  283.068289][ T4481] bridge0: port 2(bridge_slave_1) entered disabled state
[  283.174551][ T4481] device bridge_slave_0 left promiscuous mode
[  283.176171][ T4481] bridge0: port 1(bridge_slave_0) entered disabled state
[  283.825959][ T4481] device veth1_macvtap left promiscuous mode
[  283.833959][ T4481] device veth0_macvtap left promiscuous mode
[  284.257356][ T4481] device veth1_vlan left promiscuous mode
[  284.258738][ T4481] device veth0_vlan left promiscuous mode
[  285.075838][ T4481] team0 (unregistering): Port device team_slave_1 removed
[  285.083970][ T4481] team0 (unregistering): Port device team_slave_0 removed
[  285.094906][ T4481] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  285.151842][ T4481] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  286.953588][ T8298] udc-core: couldn't find an available UDC or it's busy
[  286.964203][ T8298] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  287.267428][ T4481] bond0 (unregistering): Released all slaves
[  287.328698][   T26] audit: type=1326 audit(799.291:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8299 comm="syz.4.1226" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa209c368 code=0x7ffc0000
[  287.333779][   T26] audit: type=1326 audit(799.291:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8299 comm="syz.4.1226" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa209c368 code=0x7ffc0000
[  287.339153][   T26] audit: type=1326 audit(799.291:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8299 comm="syz.4.1226" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa209c368 code=0x7ffc0000
[  287.343945][   T26] audit: type=1326 audit(799.291:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8299 comm="syz.4.1226" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa209c368 code=0x7ffc0000
[  287.349164][   T26] audit: type=1326 audit(799.291:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8299 comm="syz.4.1226" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa209c368 code=0x7ffc0000
[  287.353983][   T26] audit: type=1326 audit(799.291:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8299 comm="syz.4.1226" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa209c368 code=0x7ffc0000
[  287.359060][   T26] audit: type=1326 audit(799.291:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8299 comm="syz.4.1226" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa209c368 code=0x7ffc0000
[  287.364368][   T26] audit: type=1326 audit(799.291:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8299 comm="syz.4.1226" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa209c368 code=0x7ffc0000
[  287.372157][   T26] audit: type=1326 audit(799.291:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8299 comm="syz.4.1226" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffa209c368 code=0x7ffc0000
[  287.377254][   T26] audit: type=1326 audit(799.291:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8299 comm="syz.4.1226" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa209c368 code=0x7ffc0000
[  288.522530][ T8347] udc-core: couldn't find an available UDC or it's busy
[  288.522552][ T8347] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  288.602418][ T8349] x_tables: duplicate underflow at hook 1
[  288.932015][ T8358] device vlan2 entered promiscuous mode
[  289.630769][ T8387] udc-core: couldn't find an available UDC or it's busy
[  289.632323][ T8387] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  289.634919][ T8388] udc-core: couldn't find an available UDC or it's busy
[  289.645348][ T8388] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  290.253406][ T8405] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  290.255068][ T8405] IPv6: NLM_F_CREATE should be set when creating new route
[  290.431492][ T8414] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  290.462859][ T8414] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  290.473198][ T8414] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  290.498069][ T8414] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  290.537904][ T8419] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  290.581418][ T8419] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  290.590898][ T8419] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  292.346630][   T26] kauditd_printk_skb: 24 callbacks suppressed
[  292.346653][   T26] audit: type=1326 audit(804.311:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8456 comm="syz.6.1267" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff8c61a368 code=0x7ffc0000
[  292.352875][   T26] audit: type=1326 audit(804.311:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8456 comm="syz.6.1267" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c61a368 code=0x7ffc0000
[  292.467076][   T26] audit: type=1326 audit(804.311:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8456 comm="syz.6.1267" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c61a368 code=0x7ffc0000
[  292.473398][   T26] audit: type=1326 audit(804.311:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8456 comm="syz.6.1267" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=200 compat=0 ip=0xffff8c61a368 code=0x7ffc0000
[  292.525813][   T26] audit: type=1326 audit(804.311:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8456 comm="syz.6.1267" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c61a368 code=0x7ffc0000
[  292.530744][   T26] audit: type=1326 audit(804.311:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8456 comm="syz.6.1267" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c61a368 code=0x7ffc0000
[  292.536122][   T26] audit: type=1326 audit(804.311:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8456 comm="syz.6.1267" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=203 compat=0 ip=0xffff8c61a368 code=0x7ffc0000
[  292.540890][   T26] audit: type=1326 audit(804.311:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8456 comm="syz.6.1267" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c61a368 code=0x7ffc0000
[  292.545485][   T26] audit: type=1326 audit(804.311:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8456 comm="syz.6.1267" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c61a368 code=0x7ffc0000
[  292.550179][   T26] audit: type=1326 audit(804.311:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8456 comm="syz.6.1267" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff8c61a368 code=0x7ffc0000
[  293.338594][ T4106] Bluetooth: hci4: command 0x0411 tx timeout
[  295.569605][ T8518] lo speed is unknown, defaulting to 1000
[  295.571213][ T8518] lo speed is unknown, defaulting to 1000
[  295.590501][ T8518] lo speed is unknown, defaulting to 1000
[  295.621470][ T8518] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  295.639002][ T8518] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  295.770679][ T8518] lo speed is unknown, defaulting to 1000
[  295.788989][ T8518] lo speed is unknown, defaulting to 1000
[  295.790885][ T8518] lo speed is unknown, defaulting to 1000
[  295.807460][ T8518] lo speed is unknown, defaulting to 1000
[  295.826443][ T8518] lo speed is unknown, defaulting to 1000
[  296.244092][ T8552] device vlan2 entered promiscuous mode
[  299.014850][ T8598] udc-core: couldn't find an available UDC or it's busy
[  299.030496][ T8598] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  299.731627][ T8613] ieee802154 phy1 wpan1: encryption failed: -22
[  299.868731][ T8620] device vlan2 entered promiscuous mode
[  300.120824][ T8629] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1305'.
[  300.128605][ T8627] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1304'.
[  307.736423][ T8778] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1345'.
[  307.804797][ T8785] netlink: 'syz.8.1347': attribute type 10 has an invalid length.
[  307.906757][ T8785] 8021q: adding VLAN 0 to HW filter on device batadv0
[  307.918941][ T8785] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  311.220942][ T8828] udc-core: couldn't find an available UDC or it's busy
[  311.222612][ T8828] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  312.025891][ T8834] udc-core: couldn't find an available UDC or it's busy
[  312.027509][ T8834] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  312.127005][ T8839] udc-core: couldn't find an available UDC or it's busy
[  312.128626][ T8839] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  315.066869][ T8870] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1368'.
[  316.196238][ T2053] ieee802154 phy1 wpan1: encryption failed: -22
[  316.719723][ T8892] loop3: detected capacity change from 0 to 40427
[  317.835777][ T8913] udc-core: couldn't find an available UDC or it's busy
[  317.835800][ T8913] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  318.151277][ T8921] udc-core: couldn't find an available UDC or it's busy
[  318.153315][ T8921] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  318.183783][ T8892] F2FS-fs (loop3): Unrecognized mount option "age_extent_cache" or missing value
[  319.383621][    C0] Unknown status report in ack skb
[  319.993366][ T8976] udc-core: couldn't find an available UDC or it's busy
[  320.009019][ T8976] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  321.094712][ T9006] loop7: detected capacity change from 0 to 40427
[  321.132668][ T9006] F2FS-fs (loop7): Unrecognized mount option "age_extent_cache" or missing value
[  322.483457][    C1] ------------[ cut here ]------------
[  322.484727][    C1] WARNING: CPU: 1 PID: 9030 at net/mac80211/tx.c:4851 __ieee80211_beacon_get+0x143c/0x1b54
[  322.487013][    C1] Modules linked in:
[  322.487829][    C1] CPU: 1 PID: 9030 Comm: syz.8.1399 Not tainted 5.15.173-syzkaller #0
[  322.489580][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  322.491778][    C1] pstate: 40400005 (nZcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
[  322.493495][    C1] pc : __ieee80211_beacon_get+0x143c/0x1b54
[  322.494720][    C1] lr : __ieee80211_beacon_get+0x143c/0x1b54
[  322.495950][    C1] sp : ffff8000080177e0
[  322.496909][    C1] x29: ffff8000080179e0 x28: ffff800008017860 x27: ffff0000d8940dc0
[  322.498592][    C1] x26: ffff0000d190cc80 x25: ffff700001002f0c x24: ffff800008017950
[  322.500359][    C1] x23: dfff800000000000 x22: ffffffffffffe9e8 x21: 0000000000000000
[  322.502133][    C1] x20: ffff0000d001b800 x19: ffff0000d190e298 x18: 0000000000000101
[  322.503901][    C1] x17: 0000000000000000 x16: ffff8000084c42fc x15: 0000000000000007
[  322.505552][    C1] x14: ffff0000d7368000 x13: 0000000000ff0100 x12: ffffffffffffffff
[  322.507234][    C1] x11: 0000000000000101 x10: 0000000000000000 x9 : ffff0000d7368000
[  322.508950][    C1] x8 : ffff8000114d8a60 x7 : ffff8000114e1d08 x6 : 0000000000000000
[  322.510631][    C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000002
[  322.512399][    C1] x2 : 0000000000000008 x1 : 0000000000000000 x0 : 0000000000000000
[  322.514067][    C1] Call trace:
[  322.514777][    C1]  __ieee80211_beacon_get+0x143c/0x1b54
[  322.515913][    C1]  ieee80211_beacon_get_tim+0xb8/0x840
[  322.517046][    C1]  mac80211_hwsim_beacon_tx+0x110/0x7d4
[  322.518252][    C1]  __iterate_interfaces+0x204/0x484
[  322.519419][    C1]  ieee80211_iterate_active_interfaces_atomic+0xd4/0x180
[  322.520986][    C1]  mac80211_hwsim_beacon+0xa0/0x184
[  322.522114][    C1]  __hrtimer_run_queues+0x484/0xca4
[  322.523238][    C1]  hrtimer_run_softirq+0x158/0x21c
[  322.524295][    C1]  handle_softirqs+0x384/0xdbc
[  322.525438][    C1]  __irq_exit_rcu+0x268/0x4d8
[  322.526398][    C1]  irq_exit+0x14/0x88
[  322.527331][    C1]  handle_domain_irq+0xf4/0x178
[  322.528438][    C1]  gic_handle_irq+0x78/0x1c8
[  322.529406][    C1]  call_on_irq_stack+0x24/0x4c
[  322.530528][    C1]  do_interrupt_handler+0x74/0x94
[  322.531562][    C1]  el1_interrupt+0x30/0x58
[  322.532541][    C1]  el1h_64_irq_handler+0x18/0x24
[  322.533516][    C1]  el1h_64_irq+0x78/0x7c
[  322.534378][    C1]  check_preemption_disabled+0x34/0x164
[  322.535532][    C1]  debug_smp_processor_id+0x20/0x2c
[  322.536685][    C1]  rcu_is_watching+0x5c/0x18c
[  322.537614][    C1]  lock_release+0xe4/0xa1c
[  322.538660][    C1]  __might_fault+0xf4/0x128
[  322.539702][    C1]  do_recvmmsg+0x334/0x9a4
[  322.540675][    C1]  __arm64_sys_recvmmsg+0x180/0x23c
[  322.541840][    C1]  invoke_syscall+0x98/0x2b8
[  322.542743][    C1]  el0_svc_common+0x138/0x258
[  322.543774][    C1]  do_el0_svc+0x58/0x14c
[  322.544757][    C1]  el0_svc+0x7c/0x1f0
[  322.545586][    C1]  el0t_64_sync_handler+0x84/0xe4
[  322.546588][    C1]  el0t_64_sync+0x1a0/0x1a4
[  322.547612][    C1] irq event stamp: 43545
[  322.548525][    C1] hardirqs last  enabled at (43544): [<ffff800011b8f340>] _raw_spin_unlock_irqrestore+0xac/0x158
[  322.550865][    C1] hardirqs last disabled at (43545): [<ffff800011ab40c0>] el1_dbg+0x24/0x80
[  322.552670][    C1] softirqs last  enabled at (41750): [<ffff8000081b691c>] handle_softirqs+0xb88/0xdbc
[  322.554844][    C1] softirqs last disabled at (43541): [<ffff8000081b6fb4>] __irq_exit_rcu+0x268/0x4d8
[  322.556892][    C1] ---[ end trace 4a0c84713ce4f02c ]---
[  322.558141][    C1] vkms_vblank_simulate: vblank timer overrun