last executing test programs:

14m11.373917572s ago: executing program 32 (id=244):
openat$zero(0xffffffffffffff9c, 0x0, 0xb8140, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='io_uring_link\x00', r0, 0x0, 0x4}, 0x18)
r1 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfffffffc}, &(0x7f00000007c0)=<r2=>0x0, &(0x7f0000000800)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0x0, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x44, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000022})
io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0)

12m6.084161706s ago: executing program 33 (id=643):
r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfffffffc}, &(0x7f00000007c0)=<r1=>0x0, &(0x7f0000000800)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
socket$key(0xf, 0x3, 0x2)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x13f}}, 0x20)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x44, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000022})
io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0)

11m55.375898653s ago: executing program 34 (id=665):
mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000600)=ANY=[@ANYBLOB="0100000000000000f2000040"])
openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94)
io_uring_setup(0x1fc2, 0x0)
getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000240)={'mangle\x00', 0x0, [0x1fe, 0x1c14, 0xffffffff, 0x42, 0x2]}, 0x0)
syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000440)={0x2c, 0x0, 0x1, 0x3, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4004004)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRESHEX=0x0, @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
syz_open_dev$vbi(0x0, 0x3, 0x2)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000050000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000002114001180090001"], 0xd0}}, 0x0)
fstat(0xffffffffffffffff, 0x0)

11m41.726424822s ago: executing program 35 (id=685):
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x11a082)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
syz_init_net_socket$bt_rfcomm(0x1f, 0x2, 0x3)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000080)=@t={0x81, 0x5, 0x7, 0x0, @generic=0x386a2156})
r2 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r2, 0x84, 0x84, &(0x7f0000000000), 0x90)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
r3 = socket(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b8, 0x148, 0x178, 0xc, 0x0, 0x178, 0x258, 0x258, 0x258, 0x258, 0x258, 0x3, 0x0, {[{{@ipv6={@loopback={0x1f0}, @mcast2, [], [], 'team_slave_0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30}}, {{@ipv6={@private1, @mcast1, [], [], 'wg1\x00', 'hsr0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x8000, 0x80, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x318)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8)
r5 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r5, &(0x7f0000003f40)={0x0, 0x0, &(0x7f0000003f00)={&(0x7f0000000000)=ANY=[@ANYBLOB="e000000011000109000000000000000072666337353339657370286f666228746561292c"], 0xe0}}, 0x0)

11m27.980297279s ago: executing program 36 (id=699):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, 0x0, 0x2000c800)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socket(0xa, 0x3, 0x3a)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3)
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0)
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000001340)={'syz0\x00', {0x5, 0xb, 0x1, 0x6}, 0x1d, [0x800, 0x3, 0xdf4, 0xfffffffe, 0x400, 0x3, 0x9, 0x7, 0x100, 0x7, 0xf0, 0x6, 0x7fffffff, 0x85, 0x1, 0x9, 0xee20, 0x1, 0x10000, 0x0, 0x3, 0x2, 0x297, 0x1, 0x44, 0x400, 0x5, 0x3, 0x7fffffff, 0x5, 0x0, 0xffffff73, 0x80000, 0x5, 0x1, 0x9, 0xe000000, 0xf, 0xe, 0x101, 0xffffffff, 0x2, 0x4, 0x1e, 0x4, 0xcda, 0x101, 0x6, 0x7fff, 0x9, 0x1, 0x1, 0x20000c, 0xffffffc0, 0x2, 0x5, 0xade8, 0xec, 0x4fa, 0xff, 0x5, 0x81, 0xfffffeff, 0x3], [0x2, 0x4, 0xb, 0x88b, 0x8001, 0x80, 0x854, 0x7, 0x55, 0x80000008, 0x68, 0xf, 0x80007f, 0x3, 0x2, 0x0, 0x0, 0xd, 0x4, 0xa, 0x20008000, 0x7f, 0x4, 0xe84, 0xfffffff8, 0x4, 0x200000, 0xa, 0x94, 0x0, 0xfee7, 0x0, 0xf, 0x2, 0x6aac, 0x847, 0x3, 0xffffffff, 0x1, 0xa40, 0x8, 0x600004, 0x0, 0x8, 0x0, 0x2c6, 0x2f, 0x400ef, 0x2, 0x89, 0x2, 0xfffffff8, 0x7, 0x5, 0x3, 0x7, 0x0, 0xd, 0x3, 0x6, 0xa, 0x401, 0x2, 0x1], [0x3, 0xd4, 0x8, 0x2, 0x7fff, 0x3, 0xf, 0x1000, 0x0, 0xfffffbff, 0x1ff, 0x7, 0x1000, 0x2, 0x7, 0xfffffffd, 0x1, 0x503, 0x22d, 0x7a6, 0x8, 0x46, 0x1, 0xc415, 0x400004, 0x5, 0x0, 0x6, 0xfff, 0x3, 0x4, 0xff, 0xfffffff0, 0x109, 0x0, 0x1, 0xd, 0x8, 0x7, 0x5, 0x97f, 0xfffffffd, 0x6, 0x8, 0x2, 0xb62, 0x2000004, 0x2, 0xe26c, 0x81, 0x80, 0x7, 0x73f0, 0x9, 0x2, 0xffffffff, 0x8, 0xffffffff, 0x7fff, 0x7, 0x81, 0x4a4, 0xfffffff8, 0x8], [0xfedc, 0xe, 0x7, 0xc3ba, 0x3, 0xffff6aca, 0x7, 0x2, 0x7ff, 0x1, 0x180000, 0x0, 0xfffffffc, 0x8, 0x54, 0x0, 0x0, 0x3, 0x1, 0x2, 0x8d9, 0x9, 0x8, 0x6d09ab3d, 0x800000, 0x8000, 0x5, 0x23f, 0x2, 0xffffbffa, 0x6, 0xfffffffb, 0x8bf9, 0x7f, 0x10000, 0x8, 0x6, 0x7, 0xffff, 0x6, 0x7, 0x10000, 0x10, 0x6, 0xfffffff8, 0xfc, 0x4, 0x0, 0x2, 0x80000000, 0x8, 0x55, 0x400, 0x0, 0x6, 0x936d, 0x6, 0x0, 0x1, 0xfff, 0xfffff000, 0x4, 0x6, 0x5]}, 0x45c)
munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000)
mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, 0xffffffffffffffff, 0x0)

11m13.475901615s ago: executing program 37 (id=705):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2240, 0x0)
r3 = dup(r2)
ioctl$PTP_EXTTS_REQUEST2(r3, 0x40603d07, 0x0)
r4 = userfaultfd(0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x45fa7bc6a3de8e42)
r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4)
getresuid(0x0, 0x0, &(0x7f0000000300)=<r6=>0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {&(0x7f00000000c0)}], 0x2, &(0x7f0000000540)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r4, r4, r1]}}, @cred={{0x1c, 0x1, 0x2, {r0, r6}}}, @rights={{0x14, 0x1, 0x1, [r4]}}], 0xb0, 0x20000800}, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000500)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01')
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8814}}, {{&(0x7f0000001480)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40010}}], 0x2, 0x24048880)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x3c}}, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58)
r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
r8 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x102)
r9 = dup(r8)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x13, r9, 0x0)
ioctl$USBDEVFS_SUBMITURB(r9, 0x8038550a, &(0x7f0000000100)=@urb_type_control={0x2, {}, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7f, 0x0})
sendmsg$kcm(r7, &(0x7f0000001880)={0x0, 0x0, 0x0}, 0x0)
r10 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x101000)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r10, 0x40045532, &(0x7f0000000080)=0x4)

10m37.805690819s ago: executing program 38 (id=733):
syz_open_dev$tty1(0xc, 0x4, 0x1)
socket$inet(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x3fe455fe)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, 0x0)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
sendmmsg$sock(r1, &(0x7f00000044c0), 0x4000000000001c0, 0x0)

10m37.728977079s ago: executing program 7 (id=749):
socket(0x2, 0x80805, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)

10m31.384124635s ago: executing program 7 (id=756):
openat$kvm(0xffffffffffffff9c, 0x0, 0x8001, 0x0)
r0 = socket(0x10, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000002180)=0x10005, 0x4)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0x0, 0x2, 0x18}, 0xc)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$inet6(0xa, 0x3, 0x8000000003c)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r3=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f0000000100)={0x1, &(0x7f0000000200)=[{0x6, 0xff}]}, 0x10)
connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e24, 0x0, @dev, 0x9}, 0x1c)
r4 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x430)
sendmsg(r2, &(0x7f00000000c0)={0x0, 0x9506, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x58c}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

10m16.164440749s ago: executing program 39 (id=756):
openat$kvm(0xffffffffffffff9c, 0x0, 0x8001, 0x0)
r0 = socket(0x10, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000002180)=0x10005, 0x4)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0x0, 0x2, 0x18}, 0xc)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$inet6(0xa, 0x3, 0x8000000003c)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r3=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f0000000100)={0x1, &(0x7f0000000200)=[{0x6, 0xff}]}, 0x10)
connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e24, 0x0, @dev, 0x9}, 0x1c)
r4 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x430)
sendmsg(r2, &(0x7f00000000c0)={0x0, 0x9506, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x58c}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

9m47.390227414s ago: executing program 40 (id=792):
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000940)={{}, 'syz0\x00', 0x40})
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12)
socket$inet6(0xa, 0x6, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000087}, 0x0)
epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000040)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000180)={0x28, 0x4, r2, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7})
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0)
close(r1)
msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6)
syz_open_dev$MSR(0x0, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000200)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000280)={@local})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000080)={{@any, 0xffffffff}, @local, 0x0, 0x6, 0x7ffe, 0x800000000000001, 0x6, 0x9, 0x7f})
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20049809)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000200)={0x60, 0x0, &(0x7f00000a2000/0x4000)=nil, &(0x7f00004fc000/0x3000)=nil, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x51})
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000c80)=[{0x20, 0xfc, 0x0, 0xfffff00c}]}, 0x8)
socket$inet6_tcp(0xa, 0x1, 0x0)

9m40.752047474s ago: executing program 41 (id=799):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000001ffce4bc15b723c42a9ffcd8fa4d71e5c000008"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="000000000000000000004f000010000000000022fee139c0a1228e167ac3bc3400049535cde5698ee28cf49e417163aaccb4f928", @ANYRES32=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000980)='sys_enter\x00', r4}, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r5)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000240)={0x38, r6, 0x805, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}]}, 0x38}}, 0x0)
add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
request_key(&(0x7f0000000300)='keyring\x00', &(0x7f0000000800)={'syz', 0x3}, 0x0, 0xfffffffffffffffe)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x84}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xa0}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0xffffff1f}, 0x20}}, 0x0)
syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)

9m14.193811455s ago: executing program 42 (id=823):
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000900), 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=<r0=>0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket(0x40000000015, 0x5, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x9)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
close(r3)
connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10)
socket$inet6_icmp(0xa, 0x2, 0x3a)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{0x0}], 0x1}, 0x0)
migrate_pages(0x0, 0x3, &(0x7f0000000300)=0x3, &(0x7f0000000340)=0x13e)
recvmmsg(r2, &(0x7f000000c7c0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x40000120, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b18, &(0x7f0000000000)={'wlan1\x00'})
sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x73)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000)=0x8, 0x4)
recvmmsg(0xffffffffffffffff, &(0x7f0000000740), 0x0, 0x40000102, 0x0)
syz_open_procfs(0x0, 0x0)
r4 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000400)={0xf0f01b, 0x1})

9m9.221013089s ago: executing program 5 (id=837):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x200100, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='kfree\x00', r1}, 0x10)
mkdir(0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0)
rename(0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0)
r2 = userfaultfd(0x801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000})

9m6.752812177s ago: executing program 5 (id=838):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(0x0, r0)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x14, r1, 0x1, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x24008004}, 0x40000)

9m5.656511256s ago: executing program 5 (id=839):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}}, 0x0)

9m4.146821366s ago: executing program 5 (id=840):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x2200c851, 0x0, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x10020, 0x0, 0x0)

9m3.11664165s ago: executing program 5 (id=841):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[@ANYBLOB="38000000090601020000000000000000000000000900020073797a310000000005"], 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)

9m2.534545511s ago: executing program 43 (id=834):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10)
accept4(r0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff}, 0x6)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
unshare(0x2040400)
syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="02c82028002400010007d3040007c4faff020c04000300d3"], 0x2d)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)

9m1.744759883s ago: executing program 5 (id=843):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10)
accept4(r0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff}, 0x6)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="02c82028002400010007d3040007c4faff020c04"], 0x2d)

8m45.756918701s ago: executing program 44 (id=843):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10)
accept4(r0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff}, 0x6)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="02c82028002400010007d3040007c4faff020c04"], 0x2d)

8m3.158303379s ago: executing program 4 (id=875):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000440)={r0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323695c58d66500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200"}})

7m59.417807768s ago: executing program 4 (id=877):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001e00)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x10, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x80715054d6510416}]}}]}, 0x3c}}, 0x0)
syz_open_dev$video4linux(&(0x7f0000000000), 0x101, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r2, 0xae9a)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="a903000000003349000032000000080040"], 0x1c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x2ec, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff2e, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0)
sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004841}, 0x4810)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000002, 0x5, 0xfffffffffffffffe, 0x4, 0x2, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x3], 0x0, 0x41901})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

7m56.639664527s ago: executing program 4 (id=878):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f000009f580), r0)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000015c0)={0x14, r1, 0x303, 0xfffff7fb, 0x25dfdbfb, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40000a4)

7m54.051396242s ago: executing program 4 (id=879):
bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @empty, 0x1}, 0x10)
r0 = syz_io_uring_setup(0x324b, &(0x7f0000000080)={0x0, 0xadf0, 0x13580, 0x2}, &(0x7f0000000100)=<r1=>0x0, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x8, 0x0, @fd_index=0x4, 0x9, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r0, 0x54, 0x96d7, 0x1, 0x0, 0x0)

7m52.41031183s ago: executing program 4 (id=880):
sched_setscheduler(0x0, 0x2, 0x0)
getpid()
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000047fd17e5ffff0800040000000000", 0x36}], 0x1)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000000c0)={0x0, 0x100, 0x9f7b}, 0x8)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000340)={0x0, 0x3}, 0x8)

7m49.743308862s ago: executing program 4 (id=881):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f00000021c0)='b', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705a", 0xc0, 0xffffffffffffffff)
keyctl$dh_compute(0x17, &(0x7f0000000240)={r2, r3, r2}, &(0x7f0000002b00)=""/206, 0xce, &(0x7f00000003c0)={&(0x7f0000000340)={'sha224-generic\x00'}})
syz_io_uring_setup(0x10d, 0x0, &(0x7f0000000340), &(0x7f0000000280))
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x30, 0x0, 0x0, 0x0, 0x128}, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15)
r4 = socket(0x840000000002, 0x3, 0xff)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
connect$inet(r4, &(0x7f0000000540)={0x2, 0x0, @dev}, 0x10)
recvmsg$can_raw(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)=""/168, 0xa8}], 0x1, &(0x7f0000000440)=""/97, 0x61}, 0x22)

7m47.571181732s ago: executing program 45 (id=876):
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12)
r0 = socket$inet6(0xa, 0x6, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000087}, 0x0)
epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6)
syz_open_dev$MSR(0x0, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000200)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000280)={@local})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000080)={{@any, 0xffffffff}, @local, 0x0, 0x6, 0x7ffe, 0x800000000000001, 0x6, 0x9, 0x7f})
sendmsg$NFT_BATCH(r1, 0x0, 0x20049809)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

7m33.939595579s ago: executing program 46 (id=881):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f00000021c0)='b', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705a", 0xc0, 0xffffffffffffffff)
keyctl$dh_compute(0x17, &(0x7f0000000240)={r2, r3, r2}, &(0x7f0000002b00)=""/206, 0xce, &(0x7f00000003c0)={&(0x7f0000000340)={'sha224-generic\x00'}})
syz_io_uring_setup(0x10d, 0x0, &(0x7f0000000340), &(0x7f0000000280))
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x30, 0x0, 0x0, 0x0, 0x128}, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15)
r4 = socket(0x840000000002, 0x3, 0xff)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
connect$inet(r4, &(0x7f0000000540)={0x2, 0x0, @dev}, 0x10)
recvmsg$can_raw(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)=""/168, 0xa8}], 0x1, &(0x7f0000000440)=""/97, 0x61}, 0x22)

4m55.246413794s ago: executing program 7 (id=850):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x111}}, 0x20)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]})
chdir(0x0)
close_range(r2, 0xffffffffffffffff, 0x0)

4m52.520626586s ago: executing program 7 (id=889):
write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e)
ppoll(&(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3, 0x0, 0x2}}, 0x2e)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="2503000000060000000008"], 0x14}}, 0x0)

4m50.529151777s ago: executing program 7 (id=895):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0x20000030, &(0x7f0000000440)=ANY=[@ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={{}, {0x0, 0xea60}})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', <r2=>0x0})
mount(0x0, 0x0, &(0x7f0000000040)='ramfs\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000001100010029bd7000fedbdf2500000000", @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
syz_emit_ethernet(0x3e, &(0x7f0000000680)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x8, 0x67, 0x0, @dev, @local, {[@fragment={0x21}]}}}}}, 0x0)

4m49.54431264s ago: executing program 7 (id=899):
r0 = timerfd_create(0x0, 0x0)
timerfd_settime(r0, 0x3, 0x0, 0x0)
syz_extract_tcp_res(0x0, 0xfffffc01, 0x7)
creat(0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xfffffffffffffffe}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r2, 0xdb4, 0x0, 0x0, 0x0, 0x0)

4m33.844771228s ago: executing program 47 (id=899):
r0 = timerfd_create(0x0, 0x0)
timerfd_settime(r0, 0x3, 0x0, 0x0)
syz_extract_tcp_res(0x0, 0xfffffc01, 0x7)
creat(0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xfffffffffffffffe}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r2, 0xdb4, 0x0, 0x0, 0x0, 0x0)

4m5.682089691s ago: executing program 6 (id=974):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/59, 0x232000, 0x1000}, 0x20)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', <r2=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4)
bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2, 0x26, r0}, 0x10)

4m3.195343427s ago: executing program 6 (id=977):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000580))
syz_open_dev$sndpcmp(0x0, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000440), 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

4m0.969251051s ago: executing program 6 (id=982):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x9)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmmsg(r1, 0x0, 0x0, 0x20044000)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}]}]}, 0x30}}, 0x44)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000)

3m59.48436883s ago: executing program 6 (id=984):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x9)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}]}]}, 0x30}}, 0x44)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000)

3m58.15148587s ago: executing program 6 (id=987):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r2 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
socket(0x10, 0x3, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000040)=[@in={0x2, 0x0, @rand_addr=0x64010100}], 0x10)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000680)=@assoc_value={0x0, 0x7}, 0x8)

3m52.709060426s ago: executing program 9 (id=995):
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000001}]}}}]}]}], {0x14}}, 0xc0}, 0x1, 0x0, 0x0, 0x880}, 0x0)

3m52.584602895s ago: executing program 6 (id=997):
socket$igmp6(0xa, 0x3, 0x2)
set_mempolicy(0x4005, &(0x7f0000000080)=0x7, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
open$dir(0x0, 0x200040, 0x40)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = gettid()
sendmsg$unix(r2, &(0x7f0000000800)={&(0x7f0000000580)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f00000007c0)=[@cred={{0x1c, 0x1, 0x2, {r3}}}], 0x20, 0x40}, 0x4000850)
setregid(0x0, 0x0)
dup(0xffffffffffffffff)

3m50.667936969s ago: executing program 9 (id=998):
socket$nl_rdma(0x10, 0x3, 0x14)
syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), 0xffffffffffffffff)
futex_waitv(&(0x7f0000001700)=[{0x7, &(0x7f00000001c0), 0x82}, {0x3, &(0x7f0000000500)=0x80000001, 0x82}, {0xe1b, 0x0, 0x2}, {0x9, &(0x7f0000000400)=0x9, 0x82}, {0x2, &(0x7f0000000480)=0xfff, 0x82}, {0x0, 0x0, 0x2}, {0x8001, 0x0, 0x82}, {0x78e55cfd, 0x0, 0x82}, {0xfff, &(0x7f00000006c0)=0x10000, 0x2}, {0xf61b, 0x0, 0x82}, {0x80000001, &(0x7f0000000800)=0xb, 0x82}, {0x2, &(0x7f0000000880)=0x3, 0x2}, {0x80, 0x0, 0x2}, {0x0, 0x0, 0x2}, {0x1, 0x0, 0x2}], 0xf, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$BTRFS_IOC_GET_FEATURES(0xffffffffffffffff, 0x80189439, &(0x7f0000000000))
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f00000002c0))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r3 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x40, 0x0, 0x0)
mq_timedreceive(r3, &(0x7f0000000000)=""/83, 0x9b0c4f391059f39b, 0x20000000, &(0x7f0000000100)={0x77359400})
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)

3m45.853526006s ago: executing program 9 (id=1008):
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000180), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
socket(0x10, 0x3, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet6(0xa, 0x802, 0x1ff)
syz_open_procfs(0x0, &(0x7f00000021c0)='maps\x00')
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
setgroups(0x0, &(0x7f0000000080))
lseek(r3, 0x9, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c0000000a000000070000000000000e02000000001b78ae92898124ed00000c00000000000000000000002e2e"], &(0x7f00000001c0)=""/250, 0x3e, 0xfa, 0x1, 0x0, 0x0, @void, @value}, 0x20)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001080)=ANY=[@ANYBLOB="e61006c61ed2fccdf80aa7072a39d120d80358167f7f81fd7ec9cd5b722d5d24330a5052fbf4c73e1b93b5af38bdb8d85ba50471896fbd6f3c1612b275825162f27b2bd3c3e7af41f2076b843a908a4af70fac98e5819a169c42a0b62c2379da53931650837ba3338f55ec4f2bfddafd40dd95f3b7ed6f3a0aac9ca1b7", @ANYRES16=r5, @ANYBLOB="01000000000000"], 0x14}}, 0x0)
close(r4)
read$msr(r0, &(0x7f0000000400)=""/228, 0xe4)
pipe(&(0x7f00000000c0))
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0xd0, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30000000000800024000000001cc000000030a010200000000000000000200000009000100"], 0x1e4}}, 0x0)

3m41.460274134s ago: executing program 9 (id=1015):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000440)={r0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323695c58d66500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200"}})
ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000140)={0x0, {}, 0x0, {}, 0x6000, 0x6, 0x4, 0x0, "cd0d05a286a8d9c7b438dd4350274fc803519e3d7d156d943d4034728428556b2b5a97d6203497d63e98ec46bc3116e3930f9b02cdc0f982e0d499db318cb04c", "e39fb4a6d3333aba8405d70d523a5a783847b8bc04869aad25d757c86a08e932", [0xd026, 0x52]})
ioctl$LOOP_CHANGE_FD(r1, 0x4c09, r0)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x9cb901)
ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f00000012c0)=""/198)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
write$uinput_user_dev(r3, &(0x7f0000001280)={'syz0\x00', {0x9, 0x0, 0x0, 0x3}, 0x48, [0x1400000, 0x1, 0xd0, 0x7fff, 0x5, 0x7, 0x4, 0x6aa51a28, 0x1891ffb7, 0x2, 0x6e8, 0x7, 0x6, 0x3, 0x10000, 0x7, 0x8, 0x2, 0x1, 0xd, 0x5c01, 0x1, 0x80b7, 0x6, 0xb4, 0x7595, 0x8, 0x8, 0x8, 0xd, 0x0, 0x2, 0x9, 0x2e5, 0x4c, 0x3, 0x2, 0x0, 0x8001, 0x4, 0x0, 0x1, 0xf, 0xfff, 0xfffffe00, 0x80000001, 0x7, 0x9, 0x2, 0x6, 0x6, 0x0, 0x401, 0x7, 0xffff, 0x9, 0x3, 0x2, 0xe4, 0x23380, 0x8, 0xfff, 0x3d4fffc, 0x200], [0x8, 0xe, 0xf2de, 0x8, 0x8, 0x10, 0xe, 0x6, 0xfffffffa, 0x8, 0x3dc6, 0x9, 0x9, 0xd361, 0x8000, 0x6, 0x4, 0x2489, 0x9d, 0xfff, 0x10, 0x61, 0xc0, 0xb, 0x8, 0x563, 0x5, 0x2c308c93, 0x7fffffff, 0x71e6, 0xe, 0xe969, 0x2, 0x2, 0x6, 0x0, 0xc0000, 0x74cb9859, 0x2, 0xfffffff7, 0x4, 0x6, 0x7, 0x7, 0x80, 0x72012756, 0x6, 0x152, 0xc, 0x6, 0x0, 0x7, 0x2, 0x80000000, 0x5, 0x3, 0x3, 0x3ff, 0x7, 0xfd2e, 0x3ff, 0x5, 0x5, 0xe], [0x101, 0x2, 0x23f4, 0x3, 0x34, 0x55, 0x63, 0xffffffff, 0x9, 0x101, 0x3c6, 0x1, 0x1, 0x9, 0xffff, 0xfff, 0x2, 0x1ff, 0x7, 0x200, 0x0, 0x0, 0x8, 0x34c, 0x2, 0x8001, 0x92, 0x0, 0xfffffe00, 0x2, 0x7fff, 0xfc, 0x8, 0x3ff, 0x5, 0x3, 0xde3, 0x6, 0x5, 0xfffff25a, 0x3, 0x9, 0x40, 0x6, 0x6, 0x9d, 0x3, 0x7, 0x168e, 0x9, 0x4, 0x15c, 0x9, 0x9d, 0xfffffffe, 0x401, 0x3f, 0xfc8a, 0x4, 0x7fff, 0x7, 0x7f, 0x1, 0xa23], [0x100, 0x8, 0x5, 0x8d1, 0x0, 0x6, 0xfffff665, 0x834, 0x6, 0x9, 0x5, 0x4, 0x80000001, 0x81, 0x4, 0x0, 0x0, 0x241, 0x401, 0x5, 0x4, 0x9, 0x3, 0xf4b, 0x1, 0xfffffffd, 0x7, 0x7, 0x1fb, 0xb7, 0x7, 0x401, 0xd, 0x4, 0x1, 0x401, 0x9, 0x9, 0x0, 0x4, 0x9, 0xfffffffc, 0x5606, 0x3, 0x4, 0x0, 0x2, 0x3, 0xfae7, 0x1, 0x0, 0x1, 0x8, 0x100, 0x2, 0xffffffff, 0x5, 0xfffff82c, 0x8, 0x4, 0x6, 0x81, 0x6, 0xffff4609]}, 0x45c)
ioctl$UI_DEV_CREATE(r3, 0x5501)
ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x1c)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1f, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd4c, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x103000, 0x0)
ioctl$SNDCTL_DSP_SYNC(r5, 0x5001, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
setresgid(0xee01, 0x0, 0x0)
gettid()
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000003d000920000000000000000001000000040000000c00018008fd0f800400de80080002"], 0x2c}}, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="40000000010101010000000000000000020000000c001980080001000502000020000180060003400000000014000180080001"], 0x40}}, 0x0)
sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xcc, 0x0, 0x0, 0x70bd25, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x3}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40}, 0x80)

3m38.877082486s ago: executing program 9 (id=1022):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="2503000000060000000008"], 0x14}}, 0x0)

3m37.631687282s ago: executing program 9 (id=1025):
r0 = gettid()
timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0)
flock(r1, 0x5)
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
mount$tmpfs(0x0, 0x0, 0x0, 0x101a001, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000190001000000000000000000021800000003ff00000000"], 0x30}}, 0x0)

3m37.011444983s ago: executing program 48 (id=997):
socket$igmp6(0xa, 0x3, 0x2)
set_mempolicy(0x4005, &(0x7f0000000080)=0x7, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
open$dir(0x0, 0x200040, 0x40)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = gettid()
sendmsg$unix(r2, &(0x7f0000000800)={&(0x7f0000000580)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f00000007c0)=[@cred={{0x1c, 0x1, 0x2, {r3}}}], 0x20, 0x40}, 0x4000850)
setregid(0x0, 0x0)
dup(0xffffffffffffffff)

3m21.725576902s ago: executing program 49 (id=1025):
r0 = gettid()
timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0)
flock(r1, 0x5)
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
mount$tmpfs(0x0, 0x0, 0x0, 0x101a001, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000190001000000000000000000021800000003ff00000000"], 0x30}}, 0x0)

3m19.248698264s ago: executing program 2 (id=1051):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6349, 0x1400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_TLB_DYNAMIC_LB={0x5}]}}}]}, 0x3c}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)={{0x1, 0x0, 0x80}, "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", "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"})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0xaaaad61, 0x0, 0x0, 0xfd66)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3m15.745376398s ago: executing program 2 (id=1055):
syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xbd, 0xf7, 0x13, 0x8, 0x2770, 0x930c, 0x8d6a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2a, 0xc5, 0x98}}]}}]}}, 0x0)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', <r1=>0x0})
bind$can_raw(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000200)={0x4, 0x114000, 0x1})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x7000, 0x1})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

3m10.914075262s ago: executing program 8 (id=1058):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

3m9.29199184s ago: executing program 8 (id=1060):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000440)={r0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323695c58d66500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200"}})
ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000140)={0x0, {}, 0x0, {}, 0x6000, 0x6, 0x4, 0x0, "cd0d05a286a8d9c7b438dd4350274fc803519e3d7d156d943d4034728428556b2b5a97d6203497d63e98ec46bc3116e3930f9b02cdc0f982e0d499db318cb04c", "e39fb4a6d3333aba8405d70d523a5a783847b8bc04869aad25d757c86a08e932", [0xd026, 0x52]})
ioctl$LOOP_CHANGE_FD(r1, 0x4c09, r0)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x9cb901)
ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f00000012c0)=""/198)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
write$uinput_user_dev(r3, &(0x7f0000001280)={'syz0\x00', {0x9, 0x0, 0x0, 0x3}, 0x48, [0x1400000, 0x1, 0xd0, 0x7fff, 0x5, 0x7, 0x4, 0x6aa51a28, 0x1891ffb7, 0x2, 0x6e8, 0x7, 0x6, 0x3, 0x10000, 0x7, 0x8, 0x2, 0x1, 0xd, 0x5c01, 0x1, 0x80b7, 0x6, 0xb4, 0x7595, 0x8, 0x8, 0x8, 0xd, 0x0, 0x2, 0x9, 0x2e5, 0x4c, 0x3, 0x2, 0x0, 0x8001, 0x4, 0x0, 0x1, 0xf, 0xfff, 0xfffffe00, 0x80000001, 0x7, 0x9, 0x2, 0x6, 0x6, 0x0, 0x401, 0x7, 0xffff, 0x9, 0x3, 0x2, 0xe4, 0x23380, 0x8, 0xfff, 0x3d4fffc, 0x200], [0x8, 0xe, 0xf2de, 0x8, 0x8, 0x10, 0xe, 0x6, 0xfffffffa, 0x8, 0x3dc6, 0x9, 0x9, 0xd361, 0x8000, 0x6, 0x4, 0x2489, 0x9d, 0xfff, 0x10, 0x61, 0xc0, 0xb, 0x8, 0x563, 0x5, 0x2c308c93, 0x7fffffff, 0x71e6, 0xe, 0xe969, 0x2, 0x2, 0x6, 0x0, 0xc0000, 0x74cb9859, 0x2, 0xfffffff7, 0x4, 0x6, 0x7, 0x7, 0x80, 0x72012756, 0x6, 0x152, 0xc, 0x6, 0x0, 0x7, 0x2, 0x80000000, 0x5, 0x3, 0x3, 0x3ff, 0x7, 0xfd2e, 0x3ff, 0x5, 0x5, 0xe], [0x101, 0x2, 0x23f4, 0x3, 0x34, 0x55, 0x63, 0xffffffff, 0x9, 0x101, 0x3c6, 0x1, 0x1, 0x9, 0xffff, 0xfff, 0x2, 0x1ff, 0x7, 0x200, 0x0, 0x0, 0x8, 0x34c, 0x2, 0x8001, 0x92, 0x0, 0xfffffe00, 0x2, 0x7fff, 0xfc, 0x8, 0x3ff, 0x5, 0x3, 0xde3, 0x6, 0x5, 0xfffff25a, 0x3, 0x9, 0x40, 0x6, 0x6, 0x9d, 0x3, 0x7, 0x168e, 0x9, 0x4, 0x15c, 0x9, 0x9d, 0xfffffffe, 0x401, 0x3f, 0xfc8a, 0x4, 0x7fff, 0x7, 0x7f, 0x1, 0xa23], [0x100, 0x8, 0x5, 0x8d1, 0x0, 0x6, 0xfffff665, 0x834, 0x6, 0x9, 0x5, 0x4, 0x80000001, 0x81, 0x4, 0x0, 0x0, 0x241, 0x401, 0x5, 0x4, 0x9, 0x3, 0xf4b, 0x1, 0xfffffffd, 0x7, 0x7, 0x1fb, 0xb7, 0x7, 0x401, 0xd, 0x4, 0x1, 0x401, 0x9, 0x9, 0x0, 0x4, 0x9, 0xfffffffc, 0x5606, 0x3, 0x4, 0x0, 0x2, 0x3, 0xfae7, 0x1, 0x0, 0x1, 0x8, 0x100, 0x2, 0xffffffff, 0x5, 0xfffff82c, 0x8, 0x4, 0x6, 0x81, 0x6, 0xffff4609]}, 0x45c)
ioctl$UI_DEV_CREATE(r3, 0x5501)
ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x1c)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1f, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd4c, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x103000, 0x0)
ioctl$SNDCTL_DSP_SYNC(r5, 0x5001, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
setresgid(0xee01, 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000003d000920000000000000000001000000040000000c00018008fd0f800400de80080002"], 0x2c}}, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="40000000010101010000000000000000020000000c001980080001000502000020000180060003400000000014000180080001"], 0x40}}, 0x0)
sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xcc, 0x0, 0x0, 0x70bd25, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x3}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40}, 0x80)

3m9.291724941s ago: executing program 2 (id=1061):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000780)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000e6000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000070a000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0}, 0x68)
mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4004, 0x5)

3m7.232832158s ago: executing program 2 (id=1064):
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB, @ANYBLOB="f7", @ANYRESOCT], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
epoll_create1(0x0)

3m4.563665361s ago: executing program 8 (id=1065):
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB, @ANYRESOCT], 0x0)
syz_usb_connect(0x0, 0x3f, 0x0, 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000006c0)={0x80000008})

3m2.719000817s ago: executing program 2 (id=1066):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3, 0x0, 0x2}}, 0x2e)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="2503000000060000000008"], 0x14}}, 0x0)

3m0.640140074s ago: executing program 8 (id=1067):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0200000002"], 0x10)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r3, r4, 0x2, 0x2, 0x0, @void, @value}, 0x10)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r2, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

3m0.029686707s ago: executing program 2 (id=1068):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/178, 0xb2, 0x1, &(0x7f00000004c0)=""/235, 0xeb}, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket(0x40000000015, 0x5, 0x40001)
bind$inet(r4, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57)
iopl(0x3)
recvmmsg(r4, 0x0, 0x0, 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4004, 0x5)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}}, 0x0)

2m59.394970388s ago: executing program 8 (id=1069):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000000d060106"], 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x4000)

2m58.380584073s ago: executing program 8 (id=1070):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0xa00965, 0x5})

2m42.712863284s ago: executing program 50 (id=1068):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/178, 0xb2, 0x1, &(0x7f00000004c0)=""/235, 0xeb}, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket(0x40000000015, 0x5, 0x40001)
bind$inet(r4, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57)
iopl(0x3)
recvmmsg(r4, 0x0, 0x0, 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4004, 0x5)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}}, 0x0)

1m34.571041352s ago: executing program 3 (id=1129):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x9)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, 0x0, 0x44)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000)

1m33.692378963s ago: executing program 3 (id=1130):
socket$kcm(0x10, 0x3, 0x10)
r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
close(r3)
r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000340)={r4, r4, 0x8, 0x0, 0x0, 0xb, 0x1, 0x15c2, 0x40, 0x3, 0x0, 0x8, 'syz0\x00'})
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff)
ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff)
ioctl$NBD_DO_IT(r0, 0xab03)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000580)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_COALESCE(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x28, r7, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7, 0x2d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x2404c004}, 0x800)
r9 = socket(0x2, 0x80805, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r9, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x1)

1m25.106833048s ago: executing program 3 (id=1137):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x3, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x0, "fe87840657211afbbf021d295cb4bbc2eb4cf62f70c055ef641ebe444730e65b", "9e85f8dc41f7a82f92a5f71205526c01", {"90448204e463a21e24fa2555ce566c5c", "f959485d1247c17acabfdcaadb78c63c"}}}}}}}, 0x0)
recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000004780)=""/198, 0xc6}], 0x1}, 0x1}], 0x1, 0x10001, 0x0)

1m23.390729675s ago: executing program 3 (id=1138):
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00')
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r2, &(0x7f0000000040), 0x3d)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x800000000}, {0x0, 0xb7f, 0x0, 0x3, 0x4, 0x7, 0x20, 0x0, 0x8, 0x0, 0x40}, {0x0, 0x0, 0x10, 0x2, 0x0, 0x1, 0xf}], 0x1})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffc], 0x0, 0x200})
r4 = eventfd2(0x44, 0x80001)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000000)={r4, 0x3, 0x2, r4})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1m20.992566975s ago: executing program 3 (id=1140):
lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, r1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$inet6(0xa, 0xa, 0x0)
bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c)
listen(r2, 0x3)
r3 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r3, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10)
accept4(r2, 0x0, 0x0, 0x0)
r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r5}, 0x38)
openat$fb0(0xffffffffffffff9c, 0x0, 0x80800, 0x0)
ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f00000001c0)={0xf0f022})
ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000000c0)={0x2, @sdr={0x35315241, 0x8}})

1m10.367463368s ago: executing program 3 (id=1147):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = dup(r1)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000000, 0x42032, 0xffffffffffffffff, 0x0)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="140000001000010000000000000000"], 0x3c4}, 0x1, 0x0, 0x0, 0x20000800}, 0x800)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0)

54.69219587s ago: executing program 51 (id=1147):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = dup(r1)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000000, 0x42032, 0xffffffffffffffff, 0x0)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="140000001000010000000000000000"], 0x3c4}, 0x1, 0x0, 0x0, 0x20000800}, 0x800)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0)

9.316324584s ago: executing program 1 (id=1198):
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$FS_IOC_GETVERSION(r0, 0x40025b0c, &(0x7f0000000040))

8.136227091s ago: executing program 1 (id=1200):
r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x301)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000080)=@urb_type_control={0x2, {}, 0xfffffff8, 0x0, &(0x7f0000000000)={0x20, 0x1, 0x11, 0x2}, 0x8, 0xa0400000, 0x0, 0x0, 0x0, 0x20000, 0x0})

7.0804178s ago: executing program 1 (id=1202):
getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, <r0=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000370400"/20, @ANYRES32=r0, @ANYBLOB="c5c876d700000000240012800b00010067726574617000001400028008000100", @ANYRES32=r0, @ANYBLOB="06000e0007"], 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x0)

6.364648837s ago: executing program 0 (id=1203):
syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x24, 0x4}, {0xd2, 0x8}}}}, 0x11)
syz_emit_vhci(0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000640)={0x0, 0x1, 0x6, @local}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
sendmsg$IPVS_CMD_FLUSH(r1, 0x0, 0x80)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0)

5.896250665s ago: executing program 1 (id=1204):
syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0x0, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0xd}}}, 0xe)

5.182799176s ago: executing program 1 (id=1205):
r0 = socket$kcm(0x10, 0x3, 0x10)
r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
close(r4)
r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000340)={r5, r5, 0x8, 0x0, 0x0, 0xb, 0x1, 0x15c2, 0x40, 0x3, 0x0, 0x8, 'syz0\x00'})
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff)
ioctl$NBD_DO_IT(r1, 0xab03)
sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="1400000016004163d25a80648c2594f91724fc60", 0x14}], 0x1}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000580)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_COALESCE(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x28, r8, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x7, 0x2d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x2404c004}, 0x800)
r10 = socket(0x2, 0x80805, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r10, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x1)

4.179808489s ago: executing program 0 (id=1206):

3.276261336s ago: executing program 0 (id=1207):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x20, 0x0, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080))
r2 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0)
ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1000001000104)
ioctl$NBD_SET_SOCK(r1, 0xab00, r0)
ioctl$NBD_DO_IT(r1, 0xab03)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)

2.051786827s ago: executing program 0 (id=1208):
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
fstat(r0, &(0x7f00000006c0))

1.33891486s ago: executing program 0 (id=1209):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x400000000000003, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7}, @sadb_sa={0x2, 0x1, 0x4d6, 0x2, 0x9, 0xbc, 0x4}]}, 0x30}}, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)={0x4})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

141.980548ms ago: executing program 0 (id=1210):
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
timer_create(0x2, 0x0, 0x0)
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='nr0\x00', 0x10)
sendmmsg$inet(r0, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1}}], 0x400000000000029, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)

0s ago: executing program 1 (id=1211):
r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x1)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x0, &(0x7f0000000040), 0x0, 0x4)
ioctl$UFFDIO_COPY(r1, 0x8010aa02, &(0x7f0000000400)={&(0x7f0000272000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x4000})
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)

kernel console output (not intermixed with test programs):

ig 1 has an invalid descriptor of length 55, skipping remainder of the config
[  970.642027][ T5847] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[  970.651495][ T5847] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14129, setting to 64
[  970.720727][ T5847] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  970.730779][ T5847] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  970.739566][ T5847] usb 1-1: Product: syz
[  970.743244][ T5839] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  970.744086][ T5847] usb 1-1: Manufacturer: syz
[  971.045400][ T5847] cdc_wdm 1-1:1.0: skipping garbage
[  971.051098][ T5847] cdc_wdm 1-1:1.0: skipping garbage
[  971.056869][ T5847] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22
[  971.242212][ T5839] usb 9-1: device descriptor read/8, error -71
[  971.261881][T10597] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1025'.
[  971.480636][ T9931] usb 1-1: USB disconnect, device number 6
[  971.514950][ T5839] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  971.975258][ T5839] usb 9-1: device descriptor read/8, error -71
[  972.622087][ T5839] usb usb9-port1: unable to enumerate USB device
[  972.647749][ T5791] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  972.657743][ T5791] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  972.668817][ T5791] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  972.682661][ T5791] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  972.695717][ T5791] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  972.719300][ T5791] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  973.299620][T10604] netlink: 'syz.2.1027': attribute type 21 has an invalid length.
[  973.308038][T10604] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1027'.
[  974.463003][T10603] chnl_net:caif_netlink_parms(): no params data found
[  975.005373][ T5791] Bluetooth: hci3: command tx timeout
[  975.310084][T10633] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1033'.
[  975.319460][T10633] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1033'.
[  975.328796][T10633] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1033'.
[  975.338065][T10633] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1033'.
[  977.084210][T10184] Bluetooth: hci3: command tx timeout
[  977.127965][T10603] bridge0: port 1(bridge_slave_0) entered blocking state
[  977.135863][T10603] bridge0: port 1(bridge_slave_0) entered disabled state
[  977.144140][T10603] bridge_slave_0: entered allmulticast mode
[  977.153470][T10603] bridge_slave_0: entered promiscuous mode
[  977.228419][T10645] input: syz0 as /devices/virtual/input/input58
[  977.327294][T10603] bridge0: port 2(bridge_slave_1) entered blocking state
[  977.335176][T10603] bridge0: port 2(bridge_slave_1) entered disabled state
[  977.343136][T10603] bridge_slave_1: entered allmulticast mode
[  977.352781][T10603] bridge_slave_1: entered promiscuous mode
[  977.541568][T10644] Invalid logical block size (3)
[  977.764724][ T5847] libceph: connect (1)[c::]:6789 error -101
[  977.771115][T10644] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1032'.
[  977.771407][ T5847] libceph: mon0 (1)[c::]:6789 connect error
[  977.812607][T10603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  978.005815][T10603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  978.254884][ T5847] libceph: connect (1)[c::]:6789 error -101
[  978.261129][ T5847] libceph: mon0 (1)[c::]:6789 connect error
[  978.610454][T10603] team0: Port device team_slave_0 added
[  978.729012][T10603] team0: Port device team_slave_1 added
[  978.837142][ T5847] libceph: connect (1)[c::]:6789 error -101
[  978.843525][ T5847] libceph: mon0 (1)[c::]:6789 connect error
[  979.005529][T10184] Bluetooth: hci4: command 0x0406 tx timeout
[  979.125781][T10648] ceph: No mds server is up or the cluster is laggy
[  979.275259][T10184] Bluetooth: hci3: command tx timeout
[  979.625543][T10603] batman_adv: batadv0: Adding interface: batadv_slave_0
[  979.632743][T10603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  979.659356][T10603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  979.939362][T10603] batman_adv: batadv0: Adding interface: batadv_slave_1
[  979.947002][T10603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  979.979037][T10603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  981.071095][T10603] hsr_slave_0: entered promiscuous mode
[  981.144038][ T9931] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[  981.297242][T10603] hsr_slave_1: entered promiscuous mode
[  981.324766][ T9931] usb 9-1: device descriptor read/64, error -71
[  981.335576][ T5791] Bluetooth: hci3: command tx timeout
[  981.433783][T10603] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  981.441773][T10603] Cannot create hsr debugfs directory
[  981.590479][ T9931] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[  982.083047][ T9931] usb 9-1: device descriptor read/64, error -71
[  982.218533][ T9931] usb usb9-port1: attempt power cycle
[  982.762923][ T5847] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  982.775222][ T9931] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[  982.994176][ T9931] usb 9-1: device descriptor read/8, error -71
[  983.343771][T10677] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1041'.
[  983.641751][ T5847] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  983.651027][ T5847] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  983.672570][ T5847] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  983.685779][ T5847] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14129, setting to 64
[  983.935105][ T5847] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  983.944730][ T5847] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  983.952946][ T5847] usb 3-1: Product: syz
[  983.957396][ T5847] usb 3-1: Manufacturer: syz
[  983.988849][ T5847] cdc_wdm 3-1:1.0: skipping garbage
[  983.995214][ T5847] cdc_wdm 3-1:1.0: skipping garbage
[  984.000770][ T5847] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22
[  984.055018][ T9931] usb 9-1: new high-speed USB device number 13 using dummy_hcd
[  984.373948][ T9931] usb 9-1: device descriptor read/8, error -71
[  984.566290][ T5847] usb 3-1: USB disconnect, device number 6
[  984.614571][ T9931] usb usb9-port1: unable to enumerate USB device
[  985.261111][T10685] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1043'.
[  985.271184][T10685] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1043'.
[  985.280612][T10685] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1043'.
[  985.289950][T10685] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1043'.
[  985.700319][T10603] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  986.804240][T10603] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  986.864751][T10699] Invalid logical block size (3)
[  986.934644][T10697] input: syz0 as /devices/virtual/input/input59
[  986.995099][T10603] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  987.130097][T10184] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  987.138844][T10184] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  987.167781][T10184] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  987.220785][T10184] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  987.262710][T10184] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  987.272216][T10184] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  987.295220][T10603] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  987.467261][T10702] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1047'.
[  989.204707][T10603] 8021q: adding VLAN 0 to HW filter on device bond0
[  989.251171][T10603] 8021q: adding VLAN 0 to HW filter on device team0
[  989.416032][ T8855] bridge0: port 1(bridge_slave_0) entered blocking state
[  989.423965][ T8855] bridge0: port 1(bridge_slave_0) entered forwarding state
[  989.439453][ T8855] bridge0: port 2(bridge_slave_1) entered blocking state
[  989.447248][ T8855] bridge0: port 2(bridge_slave_1) entered forwarding state
[  989.529865][T10184] Bluetooth: hci6: command tx timeout
[  989.875069][T10694] chnl_net:caif_netlink_parms(): no params data found
[  991.474004][ T9931] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  991.724519][T10184] Bluetooth: hci6: command tx timeout
[  991.857070][ T9931] usb 1-1: device descriptor read/64, error -71
[  991.979978][T10603] 8021q: adding VLAN 0 to HW filter on device batadv0
[  992.224130][T10603] veth0_vlan: entered promiscuous mode
[  992.313997][ T5847] usb 9-1: new high-speed USB device number 14 using dummy_hcd
[  992.333672][T10603] veth1_vlan: entered promiscuous mode
[  992.492478][ T5847] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  992.501451][ T5847] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  992.511978][ T5847] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66
[  992.521219][ T5847] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14129, setting to 64
[  992.753228][ T9931] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  993.021278][ T5847] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  993.030730][ T5847] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  993.039237][ T5847] usb 9-1: Product: syz
[  993.043523][ T5847] usb 9-1: Manufacturer: syz
[  993.074713][ T9931] usb 1-1: device descriptor read/64, error -71
[  993.101719][T10603] veth0_macvtap: entered promiscuous mode
[  993.154862][T10603] veth1_macvtap: entered promiscuous mode
[  993.238264][ T5847] cdc_wdm 9-1:1.0: skipping garbage
[  993.244093][ T5847] cdc_wdm 9-1:1.0: skipping garbage
[  993.244588][T10603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  993.249568][ T5847] cdc_wdm 9-1:1.0: probe with driver cdc_wdm failed with error -22
[  993.260026][T10603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  993.260103][T10603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  993.295359][T10603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  993.307237][T10603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  993.318029][T10603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  993.329851][T10603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  993.340641][T10603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  993.351321][T10603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  993.363738][T10603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  993.374007][T10603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  993.384767][T10603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  993.401161][T10603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  993.413826][T10603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  993.424112][T10603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  993.434891][T10603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  993.445021][T10603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  993.455797][T10603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  993.465935][T10603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  993.476751][T10603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  993.500548][T10603] batman_adv: batadv0: Interface activated: batadv_slave_0
[  993.561947][ T9931] usb usb1-port1: attempt power cycle
[  993.644235][ T5847] usb 9-1: USB disconnect, device number 14
[  993.896600][T10184] Bluetooth: hci6: command tx timeout
[  993.999360][T10603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  994.017194][T10603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  994.029008][T10603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  994.039917][T10603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  994.050725][T10603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  994.061474][T10603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  994.071899][T10603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  994.082696][T10603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  994.092861][T10603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  994.110002][T10603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  994.121753][T10603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  994.132671][T10603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  994.142820][T10603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  994.153684][T10603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  994.164778][T10603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  994.175530][T10603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  994.185679][T10603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  994.196498][T10603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  994.213421][T10603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  994.227207][T10603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  994.241981][T10603] batman_adv: batadv0: Interface activated: batadv_slave_1
[  994.368382][T10694] bridge0: port 1(bridge_slave_0) entered blocking state
[  994.376401][T10694] bridge0: port 1(bridge_slave_0) entered disabled state
[  994.385103][T10694] bridge_slave_0: entered allmulticast mode
[  994.393388][T10694] bridge_slave_0: entered promiscuous mode
[  994.456259][T10603] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  994.465568][T10603] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  994.475339][T10603] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  994.485372][T10603] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  994.584940][ T5847] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  994.666524][T10694] bridge0: port 2(bridge_slave_1) entered blocking state
[  994.674257][T10694] bridge0: port 2(bridge_slave_1) entered disabled state
[  994.681955][T10694] bridge_slave_1: entered allmulticast mode
[  994.691119][T10694] bridge_slave_1: entered promiscuous mode
[  994.855724][ T5847] usb 3-1: Using ep0 maxpacket: 8
[  995.352574][ T5847] usb 3-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[  995.362360][ T5847] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  995.371128][ T5847] usb 3-1: Product: syz
[  995.375693][ T5847] usb 3-1: Manufacturer: syz
[  995.380535][ T5847] usb 3-1: SerialNumber: syz
[  995.425223][T10694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  995.652787][T10694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  995.709682][ T5847] usb 3-1: config 0 descriptor??
[  995.797536][ T5847] gspca_main: sq930x-2.14.0 probing 2770:930c
[  995.966612][T10184] Bluetooth: hci6: command tx timeout
[  996.133742][T10694] team0: Port device team_slave_0 added
[  996.179659][T10694] team0: Port device team_slave_1 added
[  996.342332][ T5847] gspca_sq930x: reg_r 001f failed -110
[  996.349457][ T5847] sq930x 3-1:0.0: probe with driver sq930x failed with error -110
[  996.525894][T10756] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1056'.
[  996.536156][T10756] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1056'.
[  996.545783][T10756] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1056'.
[  996.555084][T10756] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1056'.
[  996.811920][ T9931] usb 3-1: USB disconnect, device number 7
[  996.932141][T10694] batman_adv: batadv0: Adding interface: batadv_slave_0
[  996.939824][T10694] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  996.966423][T10694] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  997.409239][T10694] batman_adv: batadv0: Adding interface: batadv_slave_1
[  997.416601][T10694] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  997.443009][T10694] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  999.277047][T10694] hsr_slave_0: entered promiscuous mode
[  999.346328][T10694] hsr_slave_1: entered promiscuous mode
[  999.374497][T10769] Invalid logical block size (3)
[  999.401328][T10694] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  999.411042][T10694] Cannot create hsr debugfs directory
[  999.704683][T10769] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1060'.
[ 1001.457487][ T5847] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[ 1001.653997][ T5847] usb 3-1: device descriptor read/64, error -71
[ 1001.904217][ T5847] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[ 1002.125133][ T5847] usb 3-1: device descriptor read/64, error -71
[ 1002.238804][ T5847] usb usb3-port1: attempt power cycle
[ 1002.634252][ T5847] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[ 1002.695199][ T5847] usb 3-1: device descriptor read/8, error -71
[ 1002.963999][ T5847] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[ 1003.065693][ T5847] usb 3-1: device descriptor read/8, error -71
[ 1003.184492][ T5847] usb usb3-port1: unable to enumerate USB device
[ 1003.784098][T10778] syz_tun: entered allmulticast mode
[ 1004.458353][ T5847] usb 9-1: new high-speed USB device number 15 using dummy_hcd
[ 1004.524162][ T5791] Bluetooth: hci5: command 0x0406 tx timeout
[ 1004.785682][ T5847] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1004.794591][ T5847] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1004.805198][ T5847] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1004.814442][ T5847] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14129, setting to 64
[ 1005.334442][ T5847] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1005.343950][ T5847] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1005.352110][ T5847] usb 9-1: Product: syz
[ 1005.356611][ T5847] usb 9-1: Manufacturer: syz
[ 1005.756811][ T5847] cdc_wdm 9-1:1.0: skipping garbage
[ 1005.762183][ T5847] cdc_wdm 9-1:1.0: skipping garbage
[ 1005.768002][ T5847] cdc_wdm 9-1:1.0: probe with driver cdc_wdm failed with error -22
[ 1006.178050][ T5847] usb 9-1: USB disconnect, device number 15
[ 1007.697109][T10694] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1007.902565][T10694] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1008.099089][T10694] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1008.294975][T10694] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1009.482190][ T1098] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1009.829575][ T1098] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1010.208542][ T1098] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1011.464041][T10694] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1012.501231][ T1098] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1012.824719][T10694] 8021q: adding VLAN 0 to HW filter on device team0
[ 1012.913685][ T8855] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1012.921143][ T8855] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1013.046377][ T8855] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1013.054186][ T8855] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1013.384627][T10694] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1013.395538][T10694] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1014.190323][ T5791] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1014.494232][ T1098] bridge_slave_1: left allmulticast mode
[ 1014.500168][ T1098] bridge_slave_1: left promiscuous mode
[ 1014.506984][ T1098] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1014.537489][ T4691] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1014.545787][ T4691] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1014.566533][ T5791] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1014.601542][ T5791] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1014.633401][ T5791] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1014.644052][ T5791] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 1014.652836][ T5791] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1014.869235][ T1098] bridge_slave_0: left allmulticast mode
[ 1014.875493][ T1098] bridge_slave_0: left promiscuous mode
[ 1014.881733][ T1098] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1016.300864][ T1098] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1016.410400][ T1098] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1016.469367][ T1098] bond0 (unregistering): Released all slaves
[ 1016.724075][ T9261] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1016.732148][ T9261] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1017.166161][T10184] Bluetooth: hci1: command tx timeout
[ 1017.425923][T10694] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1017.889689][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[ 1017.896667][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[ 1018.655570][T10859] Invalid logical block size (3)
[ 1019.393310][ T5791] Bluetooth: hci1: command tx timeout
[ 1019.526240][ T1098] hsr_slave_0: left promiscuous mode
[ 1019.546270][ T1098] hsr_slave_1: left promiscuous mode
[ 1019.753002][ T1098] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1019.761023][ T1098] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1019.785864][ T1098] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1019.794039][ T1098] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1019.837259][T10865] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1073'.
[ 1019.866819][ T1098] veth1_vlan: left promiscuous mode
[ 1019.872499][ T1098] veth0_vlan: left promiscuous mode
[ 1020.805594][ T5847] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[ 1021.015945][ T5847] usb 2-1: device descriptor read/64, error -71
[ 1021.676314][ T5791] Bluetooth: hci1: command tx timeout
[ 1022.547091][ T5847] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[ 1023.867676][T10184] Bluetooth: hci1: command tx timeout
[ 1024.535412][ T1098] team0 (unregistering): Port device team_slave_1 removed
[ 1024.613964][ T1098] team0 (unregistering): Port device team_slave_0 removed
[ 1025.024768][ T9657] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[ 1025.303184][T10827] chnl_net:caif_netlink_parms(): no params data found
[ 1025.452439][ T9657] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1025.463084][ T9657] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1025.473755][ T9657] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1025.482952][ T9657] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14129, setting to 64
[ 1025.808984][ T9657] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1025.818389][ T9657] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1025.826648][ T9657] usb 1-1: Product: syz
[ 1025.830936][ T9657] usb 1-1: Manufacturer: syz
[ 1025.988045][ T9657] cdc_wdm 1-1:1.0: skipping garbage
[ 1025.993417][ T9657] cdc_wdm 1-1:1.0: skipping garbage
[ 1025.998997][ T9657] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22
[ 1026.175912][ T9657] usb 1-1: USB disconnect, device number 10
[ 1026.815778][ T5800] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1026.835085][ T5800] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1026.845876][ T5800] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1026.946181][ T5800] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1026.968205][ T5800] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1026.998305][ T5800] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1029.165992][ T5800] Bluetooth: hci4: command tx timeout
[ 1029.980919][T10886] chnl_net:caif_netlink_parms(): no params data found
[ 1030.125642][T10827] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1030.133393][T10827] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1030.141756][T10827] bridge_slave_0: entered allmulticast mode
[ 1030.159259][T10827] bridge_slave_0: entered promiscuous mode
[ 1030.175088][T10827] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1030.182886][T10827] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1030.190942][T10827] bridge_slave_1: entered allmulticast mode
[ 1030.200526][T10827] bridge_slave_1: entered promiscuous mode
[ 1031.251240][ T5800] Bluetooth: hci4: command tx timeout
[ 1031.745196][T10886] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1031.752704][T10886] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1031.760794][T10886] bridge_slave_0: entered allmulticast mode
[ 1031.770835][T10886] bridge_slave_0: entered promiscuous mode
[ 1031.876832][T10886] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1031.886329][T10886] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1031.905762][T10886] bridge_slave_1: entered allmulticast mode
[ 1031.916256][T10886] bridge_slave_1: entered promiscuous mode
[ 1032.145180][T10886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1032.235658][T10886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1032.598750][T10694] veth0_vlan: entered promiscuous mode
[ 1032.721946][T10886] team0: Port device team_slave_0 added
[ 1032.771825][T10827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1032.797447][T10886] team0: Port device team_slave_1 added
[ 1032.846114][T10694] veth1_vlan: entered promiscuous mode
[ 1033.140751][T10827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1033.335440][ T5800] Bluetooth: hci4: command tx timeout
[ 1034.170967][T10827] team0: Port device team_slave_0 added
[ 1034.191064][T10694] veth0_macvtap: entered promiscuous mode
[ 1034.285785][T10911] Invalid logical block size (3)
[ 1034.340332][T10911] input: syz0 as /devices/virtual/input/input61
[ 1034.387140][T10886] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1034.394466][T10886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1034.422462][T10886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1034.690407][T10827] team0: Port device team_slave_1 added
[ 1034.708146][T10886] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1034.715473][T10886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1034.742041][T10886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1034.944167][T10912] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1084'.
[ 1035.404435][ T5800] Bluetooth: hci4: command tx timeout
[ 1035.520661][T10694] veth1_macvtap: entered promiscuous mode
[ 1035.871491][T10827] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1035.878847][T10827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1035.918508][T10827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1035.946381][T10886] hsr_slave_0: entered promiscuous mode
[ 1035.981184][T10886] hsr_slave_1: entered promiscuous mode
[ 1036.033408][T10886] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1036.044574][T10886] Cannot create hsr debugfs directory
[ 1036.217038][T10694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1036.227899][T10694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1036.240840][T10694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1036.251801][T10694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1036.261938][T10694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1036.272720][T10694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1036.282916][T10694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1036.299719][T10694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1036.311483][T10694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1036.322850][T10694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1036.333004][T10694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1036.343946][T10694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1036.354092][T10694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1036.364889][T10694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1036.375011][T10694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1036.385750][T10694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1036.402165][T10694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1036.415466][T10694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1036.425795][T10694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1036.436659][T10694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1036.451990][T10694] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1036.535113][T10694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1036.547471][T10694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1036.557609][T10694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1036.568267][T10694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1036.580093][T10694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1036.590766][T10694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1036.611403][T10694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1036.626213][T10694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1036.636270][T10694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1036.646915][T10694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1036.658640][T10694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1036.669307][T10694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1036.679316][T10694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1036.691605][T10694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1036.712512][T10694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1036.727319][T10694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1036.737411][T10694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1036.748032][T10694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1036.759944][T10694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1036.770577][T10694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1036.785994][T10694] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1036.829902][T10694] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1036.839036][T10694] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1036.849652][T10694] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1036.858640][T10694] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1036.926148][T10827] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1036.933240][T10827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1036.961227][T10827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1039.817993][T10923] bio_check_eod: 2 callbacks suppressed
[ 1039.818045][T10923] syz.1.1086: attempt to access beyond end of device
[ 1039.818045][T10923] nbd1: rw=0, sector=64, nr_sectors = 1 limit=0
[ 1039.837349][T10923] syz.1.1086: attempt to access beyond end of device
[ 1039.837349][T10923] nbd1: rw=0, sector=256, nr_sectors = 1 limit=0
[ 1039.852139][T10923] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256
[ 1039.862300][T10923] syz.1.1086: attempt to access beyond end of device
[ 1039.862300][T10923] nbd1: rw=0, sector=512, nr_sectors = 1 limit=0
[ 1039.878342][T10923] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512
[ 1039.896649][T10923] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found
[ 1039.908520][T10923] UDF-fs: Scanning with blocksize 512 failed
[ 1040.173225][T10827] hsr_slave_0: entered promiscuous mode
[ 1040.315338][T10827] hsr_slave_1: entered promiscuous mode
[ 1040.361659][T10827] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1040.369841][T10827] Cannot create hsr debugfs directory
[ 1040.565654][ T9657] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[ 1040.668724][T10923] syz.1.1086: attempt to access beyond end of device
[ 1040.668724][T10923] nbd1: rw=0, sector=64, nr_sectors = 2 limit=0
[ 1040.682421][T10923] syz.1.1086: attempt to access beyond end of device
[ 1040.682421][T10923] nbd1: rw=0, sector=512, nr_sectors = 2 limit=0
[ 1040.702190][T10923] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256
[ 1040.714000][T10923] syz.1.1086: attempt to access beyond end of device
[ 1040.714000][T10923] nbd1: rw=0, sector=1024, nr_sectors = 2 limit=0
[ 1040.727534][T10923] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512
[ 1040.737405][T10923] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found
[ 1040.745360][T10923] UDF-fs: Scanning with blocksize 1024 failed
[ 1040.761539][T10923] syz.1.1086: attempt to access beyond end of device
[ 1040.761539][T10923] nbd1: rw=0, sector=64, nr_sectors = 4 limit=0
[ 1040.797707][T10923] syz.1.1086: attempt to access beyond end of device
[ 1040.797707][T10923] nbd1: rw=0, sector=1024, nr_sectors = 4 limit=0
[ 1040.821632][T10923] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256
[ 1040.838144][T10923] syz.1.1086: attempt to access beyond end of device
[ 1040.838144][T10923] nbd1: rw=0, sector=2048, nr_sectors = 4 limit=0
[ 1040.851538][T10923] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512
[ 1040.861373][T10923] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found
[ 1040.871028][T10923] UDF-fs: Scanning with blocksize 2048 failed
[ 1041.073739][T10923] syz.1.1086: attempt to access beyond end of device
[ 1041.073739][T10923] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0
[ 1041.088064][T10923] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256
[ 1041.098298][T10923] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512
[ 1041.114968][T10923] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found
[ 1041.122746][T10923] UDF-fs: Scanning with blocksize 4096 failed
[ 1041.131062][T10923] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1)
[ 1041.229284][ T9657] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1041.241077][ T9657] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1041.252404][ T9657] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1041.262288][ T9657] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14129, setting to 64
[ 1041.411289][ T9657] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1041.440111][ T9657] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1041.448588][ T9657] usb 1-1: Product: syz
[ 1041.453009][ T9657] usb 1-1: Manufacturer: syz
[ 1041.848144][ T9657] cdc_wdm 1-1:1.0: skipping garbage
[ 1041.853815][ T9657] cdc_wdm 1-1:1.0: skipping garbage
[ 1041.859377][ T9657] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22
[ 1041.882254][ T5800] Bluetooth: hci0: command 0x0406 tx timeout
[ 1041.985530][ T5847] usb 1-1: USB disconnect, device number 11
[ 1042.358973][T10935] 9pnet_virtio: no channels available for device syz
[ 1045.694254][T10827] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1045.831662][T10886] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1045.942226][T10827] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1046.146986][T10886] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1046.200931][T10827] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1046.304134][T10886] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1046.364627][T10827] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1046.581943][T10886] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1047.175296][T10827] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1047.226939][T10827] 8021q: adding VLAN 0 to HW filter on device team0
[ 1047.338209][ T4572] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1047.345737][ T4572] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1047.370941][ T4572] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1047.378645][ T4572] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1047.646006][T10827] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1047.657716][T10827] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1048.223375][T10962] input: syz0 as /devices/virtual/input/input62
[ 1048.344162][T10964] Invalid logical block size (3)
[ 1049.867335][T10886] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1049.952347][ T5800] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 1049.975175][ T5800] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 1049.988440][ T5800] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 1050.006730][ T5800] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 1050.137549][ T5800] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[ 1050.146390][ T5800] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 1050.196569][T10964] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1094'.
[ 1050.552083][T10886] 8021q: adding VLAN 0 to HW filter on device team0
[ 1050.810302][ T4691] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1051.104105][ T4691] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1051.570768][ T9261] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1051.578331][ T9261] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1051.870265][ T4691] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1051.918208][T10973] bio_check_eod: 2 callbacks suppressed
[ 1051.918260][T10973] syz.1.1096: attempt to access beyond end of device
[ 1051.918260][T10973] nbd1: rw=0, sector=64, nr_sectors = 1 limit=0
[ 1051.939170][T10973] syz.1.1096: attempt to access beyond end of device
[ 1051.939170][T10973] nbd1: rw=0, sector=256, nr_sectors = 1 limit=0
[ 1051.952334][T10973] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256
[ 1051.971773][T10973] syz.1.1096: attempt to access beyond end of device
[ 1051.971773][T10973] nbd1: rw=0, sector=512, nr_sectors = 1 limit=0
[ 1051.990633][T10973] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512
[ 1052.000365][T10973] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found
[ 1052.008131][T10973] UDF-fs: Scanning with blocksize 512 failed
[ 1052.018136][T10973] syz.1.1096: attempt to access beyond end of device
[ 1052.018136][T10973] nbd1: rw=0, sector=64, nr_sectors = 2 limit=0
[ 1052.031445][T10973] syz.1.1096: attempt to access beyond end of device
[ 1052.031445][T10973] nbd1: rw=0, sector=512, nr_sectors = 2 limit=0
[ 1052.047028][T10973] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256
[ 1052.056962][T10973] syz.1.1096: attempt to access beyond end of device
[ 1052.056962][T10973] nbd1: rw=0, sector=1024, nr_sectors = 2 limit=0
[ 1052.079258][T10973] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512
[ 1052.092975][T10973] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found
[ 1052.100806][T10973] UDF-fs: Scanning with blocksize 1024 failed
[ 1052.112162][T10973] syz.1.1096: attempt to access beyond end of device
[ 1052.112162][T10973] nbd1: rw=0, sector=64, nr_sectors = 4 limit=0
[ 1052.128131][T10973] syz.1.1096: attempt to access beyond end of device
[ 1052.128131][T10973] nbd1: rw=0, sector=1024, nr_sectors = 4 limit=0
[ 1052.141350][T10973] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256
[ 1052.151339][T10973] syz.1.1096: attempt to access beyond end of device
[ 1052.151339][T10973] nbd1: rw=0, sector=2048, nr_sectors = 4 limit=0
[ 1052.176937][T10973] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512
[ 1052.189009][T10973] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found
[ 1052.198476][T10973] UDF-fs: Scanning with blocksize 2048 failed
[ 1052.294123][T10827] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1052.436223][ T5800] Bluetooth: hci7: command tx timeout
[ 1052.507619][ T9261] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1052.515130][ T9261] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1052.655465][T10973] syz.1.1096: attempt to access beyond end of device
[ 1052.655465][T10973] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0
[ 1052.669569][T10973] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256
[ 1052.690394][T10973] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512
[ 1052.702605][T10973] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found
[ 1052.712074][T10973] UDF-fs: Scanning with blocksize 4096 failed
[ 1052.718371][T10973] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1)
[ 1052.740554][T10886] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1052.751224][T10886] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1052.803486][ T4691] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1053.794389][ T4691] bridge_slave_1: left allmulticast mode
[ 1053.800325][ T4691] bridge_slave_1: left promiscuous mode
[ 1053.814528][ T4691] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1053.960884][ T4691] bridge_slave_0: left allmulticast mode
[ 1053.968725][ T4691] bridge_slave_0: left promiscuous mode
[ 1053.975446][ T4691] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1054.198027][ T5865] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[ 1054.364803][ T5865] usb 2-1: device descriptor read/64, error -71
[ 1054.445510][ T5800] Bluetooth: hci7: command tx timeout
[ 1054.540117][ T4691] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1054.571001][ T4691] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1054.603056][ T4691] bond0 (unregistering): Released all slaves
[ 1054.647749][ T5865] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[ 1054.896569][ T5865] usb 2-1: device descriptor read/64, error -71
[ 1054.979457][ T4691] hsr_slave_0: left promiscuous mode
[ 1054.999215][ T4691] hsr_slave_1: left promiscuous mode
[ 1055.019230][ T5865] usb usb2-port1: attempt power cycle
[ 1055.053354][ T4691] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1055.062075][ T4691] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1055.168403][ T4691] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1055.178838][ T4691] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1055.300675][ T4691] veth1_macvtap: left promiscuous mode
[ 1055.306490][ T4691] veth0_macvtap: left promiscuous mode
[ 1055.312209][ T4691] veth1_vlan: left promiscuous mode
[ 1055.317858][ T4691] veth0_vlan: left promiscuous mode
[ 1055.455687][ T5865] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[ 1055.705189][ T5865] usb 2-1: device descriptor read/8, error -71
[ 1056.000421][ T5865] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[ 1056.072146][ T5865] usb 2-1: device descriptor read/8, error -71
[ 1056.201200][ T5865] usb usb2-port1: unable to enumerate USB device
[ 1056.613749][ T5800] Bluetooth: hci7: command tx timeout
[ 1057.227024][ T4691] team0 (unregistering): Port device team_slave_1 removed
[ 1057.297385][ T4691] team0 (unregistering): Port device team_slave_0 removed
[ 1057.723297][T10969] chnl_net:caif_netlink_parms(): no params data found
[ 1058.691391][ T5800] Bluetooth: hci7: command tx timeout
[ 1059.839094][T10886] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1060.239127][T10827] veth0_vlan: entered promiscuous mode
[ 1060.545801][T10827] veth1_vlan: entered promiscuous mode
[ 1060.706172][T11010] Invalid logical block size (3)
[ 1060.827997][T11010] input: syz0 as /devices/virtual/input/input63
[ 1061.468236][T10886] veth0_vlan: entered promiscuous mode
[ 1061.515969][T10969] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1061.523460][T10969] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1061.534929][T10969] bridge_slave_0: entered allmulticast mode
[ 1061.543239][T10969] bridge_slave_0: entered promiscuous mode
[ 1061.816714][T10827] veth0_macvtap: entered promiscuous mode
[ 1061.861012][T10886] veth1_vlan: entered promiscuous mode
[ 1061.992997][T10969] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1062.014045][T10969] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1062.021842][T10969] bridge_slave_1: entered allmulticast mode
[ 1062.030265][T10969] bridge_slave_1: entered promiscuous mode
[ 1062.060036][T10827] veth1_macvtap: entered promiscuous mode
[ 1063.038967][T10886] veth0_macvtap: entered promiscuous mode
[ 1063.105959][T10969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1063.182022][T10827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1063.194576][T10827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1063.204767][T10827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1063.215423][T10827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1063.237693][T10827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1063.252652][T10827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1063.265142][T10827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1063.275789][T10827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1063.285822][T10827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1063.298107][T10827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1063.308135][T10827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1063.318767][T10827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1063.341025][T10827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1063.354259][T10827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1063.365996][T10827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1063.376671][T10827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1063.386756][T10827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1063.399056][T10827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1063.410292][T10827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1063.421274][T10827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1063.448660][T10827] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1063.523033][T10886] veth1_macvtap: entered promiscuous mode
[ 1063.781388][T10969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1063.860665][T11020] dummy0: entered promiscuous mode
[ 1063.872881][T11020] bond0: (slave macvlan2): Enslaving as an active interface with an up link
[ 1064.521560][T10969] team0: Port device team_slave_0 added
[ 1064.623306][T10886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1064.635744][T10886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1064.645841][T10886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1064.668097][T10886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1064.682344][T10886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1064.693105][T10886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1064.703121][T10886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1064.715482][T10886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1064.725657][T10886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1064.736277][T10886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1064.747921][T10886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1064.758566][T10886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1064.777839][T10886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1064.792626][T10886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1064.802666][T10886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1064.813314][T10886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1064.825095][T10886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1064.835760][T10886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1064.845944][T10886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1064.858285][T10886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1064.877530][T10886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1064.892299][T10886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1064.906028][T10886] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1065.029804][T10969] team0: Port device team_slave_1 added
[ 1065.853365][T10827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1065.865957][T10827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1065.876098][T10827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1065.898203][T10827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1065.912736][T10827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1065.923414][T10827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1065.935343][T10827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1065.946108][T10827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1065.956148][T10827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1065.968923][T10827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1065.979055][T10827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1066.000662][T10827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1066.015490][T10827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1066.026290][T10827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1066.038060][T10827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1066.049439][T10827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1066.059892][T10827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1066.072243][T10827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1066.082466][T10827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1066.103766][T10827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1066.122155][T10827] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1066.152112][T10969] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1066.160127][T10969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1066.189186][T10969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1066.220200][T10886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1066.230943][T10886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1066.241099][T10886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1066.253417][T10886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1066.263466][T10886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1066.276012][T10886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1066.286591][T10886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1066.307925][T10886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1066.322059][T10886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1066.332780][T10886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1066.342828][T10886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1066.355196][T10886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1066.365828][T10886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1066.377207][T10886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1066.388991][T10886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1066.410465][T10886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1066.424655][T10886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1066.435310][T10886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1066.448160][T10886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1066.459206][T10886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1066.469297][T10886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1066.481673][T10886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1066.495296][T10886] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1066.528331][T10886] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1066.537412][T10886] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1066.547990][T10886] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1066.556984][T10886] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1066.619407][T10969] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1066.627204][T10969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1066.655191][T10969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1066.691011][T10827] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1066.700054][T10827] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1066.719253][T10827] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1066.732519][T10827] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1068.078627][T10969] hsr_slave_0: entered promiscuous mode
[ 1068.296575][T10969] hsr_slave_1: entered promiscuous mode
[ 1068.357882][ T5865] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[ 1068.400173][T10969] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1068.408155][T10969] Cannot create hsr debugfs directory
[ 1068.543847][ T5865] usb 2-1: device descriptor read/64, error -71
[ 1068.868035][ T5865] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[ 1069.104329][ T5865] usb 2-1: device descriptor read/64, error -71
[ 1069.248134][ T5865] usb usb2-port1: attempt power cycle
[ 1069.703878][ T5865] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[ 1069.836178][ T5865] usb 2-1: device descriptor read/8, error -71
[ 1070.165796][ T5865] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[ 1070.257896][ T5865] usb 2-1: device descriptor read/8, error -71
[ 1070.422754][ T5865] usb usb2-port1: unable to enumerate USB device
[ 1072.233712][T10969] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1072.414405][T11060] Invalid logical block size (3)
[ 1072.491574][T10969] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1072.507461][T11060] input: syz0 as /devices/virtual/input/input64
[ 1072.710931][T10969] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1072.873251][T10969] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1076.216705][ T5791] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1076.254591][ T5791] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1076.280145][ T5791] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1076.297710][ T5791] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1076.311797][ T5791] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[ 1076.326769][ T5791] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1076.927719][T10969] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1078.068930][T10969] 8021q: adding VLAN 0 to HW filter on device team0
[ 1078.424881][ T1081] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1078.432331][ T1081] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1078.684297][ T5791] Bluetooth: hci6: command tx timeout
[ 1079.026215][ T1081] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1079.033948][ T1081] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1079.075961][T11081] chnl_net:caif_netlink_parms(): no params data found
[ 1079.280542][ T8168] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1079.436369][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[ 1079.443171][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[ 1079.557905][T10969] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1079.572978][T10969] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1080.247673][ T8168] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1080.678996][ T8168] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1080.764150][ T5791] Bluetooth: hci6: command tx timeout
[ 1081.160108][ T4572] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1081.171892][ T4572] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1081.229962][ T8168] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1081.500655][ T8855] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1081.509541][ T8855] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1082.138563][ T8168] bridge_slave_1: left allmulticast mode
[ 1082.144604][ T8168] bridge_slave_1: left promiscuous mode
[ 1082.150922][ T8168] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1082.369394][ T8168] bridge_slave_0: left allmulticast mode
[ 1082.396240][ T8168] bridge_slave_0: left promiscuous mode
[ 1082.403023][ T8168] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1083.009858][ T5791] Bluetooth: hci6: command tx timeout
[ 1083.791417][ T8168] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1083.948282][ T8168] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1084.086570][ T8168] bond0 (unregistering): Released all slaves
[ 1084.777827][ T8168] hsr_slave_0: left promiscuous mode
[ 1084.909091][ T8168] hsr_slave_1: left promiscuous mode
[ 1085.024598][ T8168] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1085.032339][ T8168] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1085.119975][ T5791] Bluetooth: hci6: command tx timeout
[ 1085.357646][ T8168] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1085.368491][ T8168] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1085.625300][ T8168] veth1_macvtap: left promiscuous mode
[ 1085.630974][ T8168] veth0_macvtap: left promiscuous mode
[ 1085.638653][ T8168] veth1_vlan: left promiscuous mode
[ 1085.644983][ T8168] veth0_vlan: left promiscuous mode
[ 1085.744010][ T5847] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[ 1086.126111][T11132] Invalid logical block size (3)
[ 1086.146643][ T5847] usb 1-1: device descriptor read/64, error -71
[ 1086.234388][T11132] input: syz0 as /devices/virtual/input/input65
[ 1086.488498][ T5847] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[ 1086.764257][ T5847] usb 1-1: device descriptor read/64, error -71
[ 1086.912988][ T5847] usb usb1-port1: attempt power cycle
[ 1087.445545][ T5847] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[ 1087.515248][ T5847] usb 1-1: device descriptor read/8, error -71
[ 1087.874560][ T5847] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[ 1088.076352][ T5847] usb 1-1: device descriptor read/8, error -71
[ 1088.234447][ T5847] usb usb1-port1: unable to enumerate USB device
[ 1088.888983][ T8168] team0 (unregistering): Port device team_slave_1 removed
[ 1089.147915][ T8168] team0 (unregistering): Port device team_slave_0 removed
[ 1089.972195][T11147] nbd: must specify an index to disconnect
[ 1090.738831][T11081] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1090.746489][T11081] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1090.756232][T11081] bridge_slave_0: entered allmulticast mode
[ 1090.766546][T11081] bridge_slave_0: entered promiscuous mode
[ 1091.212536][T10969] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1091.356021][T11081] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1091.363743][T11081] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1091.371480][T11081] bridge_slave_1: entered allmulticast mode
[ 1091.381574][T11081] bridge_slave_1: entered promiscuous mode
[ 1092.399730][T11081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1092.705828][T11081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1095.839192][T11081] team0: Port device team_slave_0 added
[ 1096.262703][T11081] team0: Port device team_slave_1 added
[ 1096.743325][T11081] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1096.743381][T11081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1096.743477][T11081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1096.772514][T11081] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1096.772595][T11081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1096.772747][T11081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1097.354290][ T5791] Bluetooth: hci3: command 0x0406 tx timeout
[ 1097.560094][T11081] hsr_slave_0: entered promiscuous mode
[ 1097.695965][T11081] hsr_slave_1: entered promiscuous mode
[ 1097.884048][T11081] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1097.884138][T11081] Cannot create hsr debugfs directory
[ 1099.185467][ T5865] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[ 1099.445855][ T5865] usb 1-1: device descriptor read/64, error -71
[ 1099.537014][T10969] veth0_vlan: entered promiscuous mode
[ 1099.775986][ T5865] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[ 1099.921395][T10969] veth1_vlan: entered promiscuous mode
[ 1100.102148][ T5865] usb 1-1: device descriptor read/64, error -71
[ 1100.247793][ T5865] usb usb1-port1: attempt power cycle
[ 1100.718675][ T5865] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[ 1100.747648][ T5865] usb 1-1: device descriptor read/8, error -71
[ 1100.979295][T10969] veth0_macvtap: entered promiscuous mode
[ 1101.094372][ T5865] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[ 1101.195903][T10969] veth1_macvtap: entered promiscuous mode
[ 1101.304603][ T5865] usb 1-1: device descriptor read/8, error -71
[ 1101.488332][ T5865] usb usb1-port1: unable to enumerate USB device
[ 1101.652560][T10969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1101.665198][T10969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1101.675291][T10969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1101.685974][T10969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1101.697691][T10969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1101.708322][T10969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1101.718376][T10969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1101.741702][T10969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1101.754787][T10969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1101.767134][T10969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1101.777170][T10969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1101.787882][T10969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1101.799562][T10969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1101.810230][T10969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1101.820283][T10969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1101.843910][T10969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1101.858444][T10969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1101.869123][T10969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1101.879182][T10969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1101.893124][T10969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1101.903163][T10969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1101.915540][T10969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1101.929050][T10969] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1102.220434][T11081] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1102.576490][T11081] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1102.926796][T10969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1102.937564][T10969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1102.949332][T10969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1102.970450][T10969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1102.985051][T10969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1102.995803][T10969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1103.007585][T10969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1103.018278][T10969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1103.028309][T10969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1103.040624][T10969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1103.050686][T10969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1103.071907][T10969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1103.086608][T10969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1103.097310][T10969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1103.107363][T10969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1103.119699][T10969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1103.129769][T10969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1103.140428][T10969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1103.152145][T10969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1103.174069][T10969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1103.188895][T10969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1103.199537][T10969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1103.213048][T10969] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1103.226190][T11081] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1103.500257][T11081] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1104.609390][T10969] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1104.620221][T10969] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1104.629369][T10969] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1104.638466][T10969] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1104.713992][ T5865] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[ 1104.943315][ T5865] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1104.956554][ T5865] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[ 1105.066025][T11222] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[ 1105.102251][ T5865] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1105.125447][ T5865] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1105.133987][ T5865] usb 1-1: Product: syz
[ 1105.138397][ T5865] usb 1-1: Manufacturer: syz
[ 1105.143244][ T5865] usb 1-1: SerialNumber: syz
[ 1105.262780][T11227] kvm: pic: level sensitive irq not supported
[ 1105.263024][T11227] kvm: pic: non byte read
[ 1105.737912][T11219] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1106.681197][T11081] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1107.019541][T11081] 8021q: adding VLAN 0 to HW filter on device team0
[ 1107.192661][ T4902] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1107.200266][ T4902] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1107.482110][T11219] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1107.511220][ T4902] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1107.518729][ T4902] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1108.001965][T11081] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1108.012725][T11081] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1108.668612][ T5865] cdc_mbim 1-1:1.0: MAC-Address: 42:42:42:42:42:42
[ 1108.675542][ T5865] cdc_mbim 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[ 1108.683263][ T5865] cdc_mbim 1-1:1.0: setting rx_max = 2048
[ 1109.083327][ T5800] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1109.218909][ T5865] cdc_mbim 1-1:1.0: setting tx_max = 184
[ 1109.229007][ T5800] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1109.246873][ T5865] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device
[ 1109.260002][ T5800] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1109.284594][ T5800] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1109.297106][ T5800] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 1109.334276][ T5800] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1109.495030][ T5865] wwan wwan0: port wwan0mbim0 attached
[ 1109.867555][ T5865] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, 42:42:42:42:42:42
[ 1110.718018][ T9656] usb 1-1: USB disconnect, device number 20
[ 1110.725076][ T9656] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM
[ 1111.346288][ T9656] wwan wwan0: port wwan0mbim0 disconnected
[ 1111.480506][ T5800] Bluetooth: hci1: command tx timeout
[ 1113.083356][T11081] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1113.620609][ T5800] Bluetooth: hci1: command tx timeout
[ 1114.366540][T11240] chnl_net:caif_netlink_parms(): no params data found
[ 1115.180826][ T5865] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[ 1115.474238][ T5865] usb 1-1: device descriptor read/64, error -71
[ 1115.498127][ T9261] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1115.648626][ T5800] Bluetooth: hci1: command tx timeout
[ 1115.772986][ T5865] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[ 1115.887004][ T9261] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1116.076834][ T5865] usb 1-1: device descriptor read/64, error -71
[ 1116.201319][ T5865] usb usb1-port1: attempt power cycle
[ 1116.259057][ T9261] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1116.667224][ T9261] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1116.712532][ T5865] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[ 1116.835914][ T5865] usb 1-1: device descriptor read/8, error -71
[ 1117.155498][ T5865] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[ 1117.273110][ T5865] usb 1-1: device descriptor read/8, error -71
[ 1117.426807][ T5865] usb usb1-port1: unable to enumerate USB device
[ 1117.746182][ T5800] Bluetooth: hci1: command tx timeout
[ 1118.686487][ T9261] bridge_slave_1: left allmulticast mode
[ 1118.692308][ T9261] bridge_slave_1: left promiscuous mode
[ 1118.698795][ T9261] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1118.950020][ T9261] bridge_slave_0: left allmulticast mode
[ 1118.956305][ T9261] bridge_slave_0: left promiscuous mode
[ 1118.962613][ T9261] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1120.511169][ T9261] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1120.641239][ T9261] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1120.798249][ T9261] bond0 (unregistering): Released all slaves
[ 1120.933717][T11240] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1120.941290][T11240] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1120.951257][T11240] bridge_slave_0: entered allmulticast mode
[ 1120.959664][T11240] bridge_slave_0: entered promiscuous mode
[ 1121.477811][ T9261] hsr_slave_0: left promiscuous mode
[ 1121.616983][ T9261] hsr_slave_1: left promiscuous mode
[ 1121.670789][ T9261] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1121.679037][ T9261] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1121.845348][ T9261] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1121.853033][ T9261] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1122.069051][ T9261] veth1_macvtap: left promiscuous mode
[ 1122.074894][ T9261] veth0_macvtap: left promiscuous mode
[ 1122.080608][ T9261] veth1_vlan: left promiscuous mode
[ 1122.086216][ T9261] veth0_vlan: left promiscuous mode
[ 1124.452368][ T9261] team0 (unregistering): Port device team_slave_1 removed
[ 1124.643164][ T9261] team0 (unregistering): Port device team_slave_0 removed
[ 1125.435109][T11240] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1125.442611][T11240] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1125.452641][T11240] bridge_slave_1: entered allmulticast mode
[ 1125.462904][T11240] bridge_slave_1: entered promiscuous mode
[ 1126.320771][T11081] veth0_vlan: entered promiscuous mode
[ 1126.644306][T11240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1126.829138][T11081] veth1_vlan: entered promiscuous mode
[ 1126.882364][T11240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1127.711824][T11240] team0: Port device team_slave_0 added
[ 1127.873453][T11240] team0: Port device team_slave_1 added
[ 1128.061262][ T9656] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[ 1128.101928][T11081] veth0_macvtap: entered promiscuous mode
[ 1128.215650][ T9656] usb 2-1: device descriptor read/64, error -71
[ 1128.296173][T11240] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1128.303363][T11240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1128.331446][T11240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1128.373618][T11081] veth1_macvtap: entered promiscuous mode
[ 1128.576168][ T9656] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[ 1128.778644][T11081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1128.789472][T11081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1128.799519][T11081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1128.811815][T11081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1128.821892][T11081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1128.832577][T11081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1128.844408][T11081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1128.855054][T11081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1128.876312][T11081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1128.891368][T11081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1128.901437][T11081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1128.912123][T11081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1128.925619][T11081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1128.936284][T11081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1128.946381][T11081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1128.958704][T11081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1128.979564][T11081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1128.994809][T11081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1129.005407][T11081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1129.017700][T11081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1129.027758][T11081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1129.038467][T11081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1129.053451][T11081] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1129.198881][T11240] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1129.206174][T11240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1129.234245][T11240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1129.345511][ T9656] usb 2-1: device descriptor read/64, error -71
[ 1129.361106][T11081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1129.373701][T11081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1129.397545][T11081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1129.411766][T11081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1129.424139][T11081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1129.434994][T11081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1129.446680][T11081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1129.457373][T11081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1129.467441][T11081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1129.491338][T11081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1129.504738][T11081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1129.517132][T11081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1129.527189][T11081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1129.537902][T11081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1129.549737][T11081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1129.560443][T11081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1129.570631][T11081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1129.594512][T11081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1129.607338][T11081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1129.619634][T11081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1129.629718][T11081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1129.640377][T11081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1129.655558][T11081] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1129.665653][ T9656] usb usb2-port1: attempt power cycle
[ 1130.023890][ T9656] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[ 1130.118074][ T9656] usb 2-1: device descriptor read/8, error -71
[ 1130.288394][T11081] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1130.310418][T11081] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1130.324393][T11081] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1130.333287][T11081] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1130.387626][T11240] hsr_slave_0: entered promiscuous mode
[ 1130.412452][ T9656] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[ 1130.520276][ T9656] usb 2-1: device descriptor read/8, error -71
[ 1130.587179][T11240] hsr_slave_1: entered promiscuous mode
[ 1130.685019][ T9656] usb usb2-port1: unable to enumerate USB device
[ 1130.695330][T11240] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1130.703125][T11240] Cannot create hsr debugfs directory
[ 1134.642746][T11240] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1134.772916][T11240] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1135.158069][T11240] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1135.371005][T11240] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1136.125124][ T5791] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 1136.159601][ T5791] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 1136.173048][ T5791] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 1136.209707][ T5791] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 1136.228451][ T5791] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[ 1136.250909][ T5791] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 1136.708674][ T5800] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[ 1136.719071][ T5800] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[ 1136.730684][ T5800] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[ 1136.772668][ T5800] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[ 1136.842866][ T5800] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[ 1136.870725][T10184] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[ 1137.893017][T11383] 9pnet_virtio: no channels available for device syz
[ 1138.301973][T11383] tmpfs: Unknown parameter 'usrquotal'
[ 1138.724274][T11240] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1138.761298][T11240] 8021q: adding VLAN 0 to HW filter on device team0
[ 1138.866066][T11240] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1138.876718][T11240] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1138.993720][ T5791] Bluetooth: hci7: command tx timeout
[ 1139.021651][ T5791] Bluetooth: hci8: command tx timeout
[ 1139.269907][ T8855] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1139.277739][ T8855] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1139.297351][ T8855] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1139.305148][ T8855] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1141.353546][ T5791] Bluetooth: hci8: command tx timeout
[ 1141.363927][ T5791] Bluetooth: hci7: command tx timeout
[ 1141.477640][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[ 1141.484752][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[ 1141.519112][T11364] chnl_net:caif_netlink_parms(): no params data found
[ 1142.097306][T11369] chnl_net:caif_netlink_parms(): no params data found
[ 1142.252352][   T34] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1142.574075][ T5847] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[ 1143.341280][   T34] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1143.409238][T10184] Bluetooth: hci7: command tx timeout
[ 1143.415334][ T5791] Bluetooth: hci8: command tx timeout
[ 1143.438665][ T5847] usb 2-1: Using ep0 maxpacket: 8
[ 1143.451978][   T34] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1143.475964][ T5847] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[ 1143.493027][ T5847] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1143.516502][ T5847] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1143.529626][ T5847] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1143.546187][ T5847] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1143.556601][ T5847] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1143.697934][   T34] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1144.067273][ T5847] usb 2-1: GET_CAPABILITIES returned 0
[ 1144.073123][ T5847] usbtmc 2-1:16.0: can't read capabilities
[ 1144.267999][ T5847] usb 2-1: USB disconnect, device number 24
[ 1144.692194][T11240] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1144.702197][   T34] bridge_slave_1: left allmulticast mode
[ 1144.710141][   T34] bridge_slave_1: left promiscuous mode
[ 1144.716586][   T34] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1144.998318][   T34] bridge_slave_0: left allmulticast mode
[ 1145.005542][   T34] bridge_slave_0: left promiscuous mode
[ 1145.012135][   T34] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1145.215205][ T5865] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[ 1145.483833][T10184] Bluetooth: hci7: command tx timeout
[ 1145.489527][T10184] Bluetooth: hci8: command tx timeout
[ 1145.652508][ T5865] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1145.672494][ T5865] usb 1-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config
[ 1145.685655][ T5865] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1145.696653][ T5865] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1145.857593][ T5865] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1145.875595][ T5865] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1145.888375][ T5865] usb 1-1: Product: syz
[ 1145.892688][ T5865] usb 1-1: Manufacturer: syz
[ 1146.085872][ T5865] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22
[ 1146.301347][   T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1146.415606][   T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1146.500441][ T5865] usb 1-1: USB disconnect, device number 25
[ 1146.537448][   T34] bond0 (unregistering): Released all slaves
[ 1147.027246][T11364] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1147.036667][T11364] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1147.044585][T11364] bridge_slave_0: entered allmulticast mode
[ 1147.052900][T11364] bridge_slave_0: entered promiscuous mode
[ 1147.281872][T11364] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1147.289599][T11364] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1147.312960][T11364] bridge_slave_1: entered allmulticast mode
[ 1147.321566][T11364] bridge_slave_1: entered promiscuous mode
[ 1147.496172][   T34] hsr_slave_0: left promiscuous mode
[ 1147.568224][   T34] hsr_slave_1: left promiscuous mode
[ 1147.682051][   T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1147.690491][   T34] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1147.787782][   T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1147.795812][   T34] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1148.077692][   T34] veth1_macvtap: left promiscuous mode
[ 1148.084079][   T34] veth0_macvtap: left promiscuous mode
[ 1148.089971][   T34] veth1_vlan: left promiscuous mode
[ 1148.095889][   T34] veth0_vlan: left promiscuous mode
[ 1150.341816][   T34] team0 (unregistering): Port device team_slave_1 removed
[ 1150.955615][   T34] team0 (unregistering): Port device team_slave_0 removed
[ 1152.578381][T11444] Bluetooth: MGMT ver 1.23
[ 1153.455431][ T9656] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[ 1153.683814][ T9656] usb 2-1: Using ep0 maxpacket: 32
[ 1153.738830][ T9656] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1153.758393][ T9656] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1153.772721][ T9656] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 1153.785909][ T9656] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[ 1153.797063][ T9656] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1154.081805][ T9656] usb 2-1: config 0 descriptor??
[ 1154.856731][ T9656] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0002/input/input66
[ 1155.038223][ T9656] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0002/input/input67
[ 1155.265290][ T9656] kye 0003:0458:5011.0002: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.1-1/input0
[ 1155.481508][ T9656] usb 2-1: USB disconnect, device number 25
[ 1157.092295][T11364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1157.150755][T11369] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1157.158408][T11369] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1157.168030][T11369] bridge_slave_0: entered allmulticast mode
[ 1157.176413][T11369] bridge_slave_0: entered promiscuous mode
[ 1157.302086][T11364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1157.598954][T11369] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1157.608442][T11369] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1157.618038][T11369] bridge_slave_1: entered allmulticast mode
[ 1157.626481][T11369] bridge_slave_1: entered promiscuous mode
[ 1157.864362][T11364] team0: Port device team_slave_0 added
[ 1158.372193][T11364] team0: Port device team_slave_1 added
[ 1158.489317][   T34] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1158.579100][T11369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1158.676898][T11471] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1179'.
[ 1158.686149][T11471] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1179'.
[ 1159.047816][T11369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1159.090810][T11364] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1159.098014][T11364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1159.125922][T11364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1159.143128][T11468] dccp_close: ABORT with 32 bytes unread
[ 1159.252369][   T34] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1159.535706][T11364] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1159.542902][T11364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1159.570063][T11364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1159.630286][T11369] team0: Port device team_slave_0 added
[ 1159.665818][   T34] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1159.810820][T11369] team0: Port device team_slave_1 added
[ 1159.920885][   T34] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1160.540365][T11240] veth0_vlan: entered promiscuous mode
[ 1160.575046][T11240] veth1_vlan: entered promiscuous mode
[ 1160.577323][T10184] block nbd1: Receive control failed (result -107)
[ 1160.670791][T11240] veth0_macvtap: entered promiscuous mode
[ 1160.693290][T11240] veth1_macvtap: entered promiscuous mode
[ 1160.752711][T11240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1160.763726][T11240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1160.773956][T11240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1160.784827][T11240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1160.794981][T11240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1160.803826][T11483] nbd1: detected capacity change from 0 to 67108884
[ 1160.806595][T11240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1160.830300][T11240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1160.841139][T11240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1160.851409][T11240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1160.862307][T11240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1160.862701][T11463] block nbd1: Dead connection, failed to find a fallback
[ 1160.872351][T11240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1160.879694][T11463] block nbd1: shutting down sockets
[ 1160.890218][T11240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1160.890302][T11240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1160.890390][T11240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1160.890474][T11240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1160.890561][T11240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1160.890644][T11240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1160.890731][T11240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1160.890815][T11240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1160.890902][T11240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1160.890982][T11240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1160.891103][T11240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1160.895949][T11240] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1160.898289][T11463] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1160.928568][T11240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1160.928668][T11240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1160.928732][T11240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1160.928819][T11240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1160.928880][T11240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1160.928966][T11240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1160.929024][T11240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1160.929116][T11240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1160.929196][T11240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1160.929282][T11240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1160.929351][T11240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1160.929437][T11240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1160.929505][T11240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1160.929592][T11240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1160.929661][T11240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1160.929745][T11240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1160.929814][T11240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1160.929901][T11240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1160.929970][T11240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1160.930057][T11240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1160.930131][T11240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1160.930218][T11240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1160.934695][T11240] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1160.946895][T11240] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1160.957856][T11463] Buffer I/O error on dev nbd1, logical block 0, async page read
[ 1160.961666][T11240] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1160.971236][T11463] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1160.981472][T11240] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1160.981685][T11240] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1161.037445][T11369] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1161.037523][T11369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1161.037669][T11369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1161.055575][T11369] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1161.055651][T11369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1161.055795][T11369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1161.687001][T11463] Buffer I/O error on dev nbd1, logical block 0, async page read
[ 1161.695442][T11463] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1161.707559][T11463] Buffer I/O error on dev nbd1, logical block 0, async page read
[ 1161.715978][T11463] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1161.725443][T11463] Buffer I/O error on dev nbd1, logical block 0, async page read
[ 1161.753927][T11463] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1161.763294][T11463] Buffer I/O error on dev nbd1, logical block 0, async page read
[ 1161.779196][T11463] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1161.788821][T11463] Buffer I/O error on dev nbd1, logical block 0, async page read
[ 1161.797200][T11463] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1161.809297][T11463] Buffer I/O error on dev nbd1, logical block 0, async page read
[ 1161.817634][T11463] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1161.827120][T11463] Buffer I/O error on dev nbd1, logical block 0, async page read
[ 1161.857637][T11463] ldm_validate_partition_table(): Disk read failed.
[ 1161.871429][T11463] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1161.880969][T11463] Buffer I/O error on dev nbd1, logical block 0, async page read
[ 1161.889405][T11463] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1161.901540][T11463] Buffer I/O error on dev nbd1, logical block 0, async page read
[ 1161.910186][T11463] Dev nbd1: unable to read RDB block 0
[ 1161.916885][T11463]  nbd1: unable to read partition table
[ 1162.132052][T11463] ldm_validate_partition_table(): Disk read failed.
[ 1162.140550][T11463] Dev nbd1: unable to read RDB block 0
[ 1162.160755][T11463]  nbd1: unable to read partition table
[ 1162.427336][T11482] ldm_validate_partition_table(): Disk read failed.
[ 1162.435253][T11482] Dev nbd1: unable to read RDB block 0
[ 1162.441836][T11482]  nbd1: unable to read partition table
[ 1162.465259][T11482] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256
[ 1162.475467][T11482] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=33554441, location=33554441
[ 1162.488164][T11482] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=33554185, location=33554185
[ 1162.499156][T11482] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=33554440, location=33554440
[ 1162.509949][T11482] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=33554184, location=33554184
[ 1162.522475][T11482] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=33554439, location=33554439
[ 1162.534012][T11482] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=33554183, location=33554183
[ 1162.546746][T11482] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=33554291, location=33554291
[ 1162.567710][T11482] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=33554035, location=33554035
[ 1162.582891][T11482] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=33554289, location=33554289
[ 1162.593866][T11482] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=33554033, location=33554033
[ 1162.606868][T11482] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512
[ 1162.815891][T11482] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256
[ 1162.826135][T11482] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16777220, location=16777220
[ 1162.837135][T11482] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16776964, location=16776964
[ 1162.849649][T11482] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16777219, location=16777219
[ 1162.871491][T11482] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16776963, location=16776963
[ 1162.886854][T11482] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16777218, location=16777218
[ 1162.897650][T11482] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16776962, location=16776962
[ 1162.908500][T11482] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16777070, location=16777070
[ 1162.921032][T11482] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16776814, location=16776814
[ 1162.931880][T11482] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16777068, location=16777068
[ 1162.942743][T11482] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16776812, location=16776812
[ 1162.955525][T11482] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512
[ 1162.981011][T11482] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256
[ 1162.992817][T11482] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388609, location=8388609
[ 1163.003853][T11482] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388353, location=8388353
[ 1163.016244][T11482] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388608, location=8388608
[ 1163.026906][T11482] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388352, location=8388352
[ 1163.037570][T11482] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388607, location=8388607
[ 1163.049942][T11482] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388351, location=8388351
[ 1163.060634][T11482] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388459, location=8388459
[ 1163.081168][T11482] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388203, location=8388203
[ 1163.096484][T11482] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388457, location=8388457
[ 1163.107226][T11482] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388201, location=8388201
[ 1163.119564][T11482] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512
[ 1163.129372][T11482] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1)
[ 1163.206735][T11369] hsr_slave_0: entered promiscuous mode
[ 1163.406183][T11369] hsr_slave_1: entered promiscuous mode
[ 1163.494248][T11369] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1163.502062][T11369] Cannot create hsr debugfs directory
[ 1163.534267][T11364] hsr_slave_0: entered promiscuous mode
[ 1163.566684][T11364] hsr_slave_1: entered promiscuous mode
[ 1163.627041][T11364] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1163.639828][T11364] Cannot create hsr debugfs directory
[ 1163.934175][T11497] syz.1.1182 uses obsolete (PF_INET,SOCK_PACKET)
[ 1164.146902][   T34] bridge_slave_1: left allmulticast mode
[ 1164.152803][   T34] bridge_slave_1: left promiscuous mode
[ 1164.159528][   T34] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1164.341239][   T34] bridge_slave_0: left allmulticast mode
[ 1164.347517][   T34] bridge_slave_0: left promiscuous mode
[ 1164.354562][   T34] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1165.070107][   T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1165.165997][   T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1165.245958][   T34] bond0 (unregistering): Released all slaves
[ 1165.536938][T11508] netlink: 'syz.0.1184': attribute type 13 has an invalid length.
[ 1165.545194][T11508] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1184'.
[ 1165.819967][T11508] syz_tun: refused to change device tx_queue_len
[ 1165.828152][T11508] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[ 1167.193761][   T34] hsr_slave_0: left promiscuous mode
[ 1167.211063][   T34] hsr_slave_1: left promiscuous mode
[ 1167.286368][   T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1167.294658][   T34] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1167.362963][   T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1167.378848][   T34] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1167.515397][ T5847] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[ 1167.532811][   T34] veth1_macvtap: left promiscuous mode
[ 1167.538811][   T34] veth0_macvtap: left promiscuous mode
[ 1167.545125][   T34] veth1_vlan: left promiscuous mode
[ 1167.550818][   T34] veth0_vlan: left promiscuous mode
[ 1167.754732][ T5847] usb 2-1: Using ep0 maxpacket: 8
[ 1167.853751][ T5847] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1167.864099][ T5847] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1167.877007][ T5847] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1167.898143][ T5847] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1167.917775][ T5847] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1167.927311][ T5847] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1168.572456][ T5847] usb 2-1: usb_control_msg returned -32
[ 1168.578830][ T5847] usbtmc 2-1:16.0: can't read capabilities
[ 1169.450036][   T34] team0 (unregistering): Port device team_slave_1 removed
[ 1169.478276][   T34] team0 (unregistering): Port device team_slave_0 removed
[ 1170.090323][ T5791] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1170.110570][ T5791] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1170.123333][ T5791] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1170.172678][ T5791] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1170.189102][ T5791] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 1170.198534][ T5791] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1170.930512][ T5791] Bluetooth: hci0: unexpected event for opcode 0x2036
[ 1171.097374][ T9931] usb 2-1: USB disconnect, device number 26
[ 1171.381979][   T34] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1171.731868][   T34] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1171.955337][ T5847] hid-generic 0005:0C45:0008.0003: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa
[ 1172.299626][ T5791] Bluetooth: hci2: command tx timeout
[ 1172.572880][T11550] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 1172.584399][T11550] overlayfs: maximum fs stacking depth exceeded
[ 1172.643183][T11550] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 1172.654591][T11550] overlayfs: maximum fs stacking depth exceeded
[ 1172.713413][   T34] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1173.062615][   T34] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1173.553341][T11369] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1173.775614][T11369] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1174.366176][ T5791] Bluetooth: hci2: command tx timeout
[ 1174.390540][T11369] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1175.004491][T11369] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1175.116778][   T34] bridge_slave_1: left allmulticast mode
[ 1175.122724][   T34] bridge_slave_1: left promiscuous mode
[ 1175.132160][   T34] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1175.261644][   T34] bridge_slave_0: left allmulticast mode
[ 1175.270065][   T34] bridge_slave_0: left promiscuous mode
[ 1175.281907][   T34] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1176.121857][   T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1176.155756][   T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1176.193179][   T34] bond0 (unregistering): Released all slaves
[ 1176.447713][ T5791] Bluetooth: hci2: command tx timeout
[ 1177.165872][T11369] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1177.411009][T11364] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1177.750631][T11369] 8021q: adding VLAN 0 to HW filter on device team0
[ 1177.804038][ T8855] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1177.811765][ T8855] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1177.900340][T11535] chnl_net:caif_netlink_parms(): no params data found
[ 1178.157521][T11364] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1178.199172][ T4572] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1178.206942][ T4572] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1178.385680][T11364] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1178.445371][T11364] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1178.531993][ T5791] Bluetooth: hci2: command tx timeout
[ 1178.915766][   T34] hsr_slave_0: left promiscuous mode
[ 1178.965927][   T34] hsr_slave_1: left promiscuous mode
[ 1179.065745][   T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1179.074165][   T34] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1179.117357][   T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1179.126176][   T34] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1179.304487][   T34] veth1_macvtap: left promiscuous mode
[ 1179.310285][   T34] veth0_macvtap: left promiscuous mode
[ 1179.319116][   T34] veth1_vlan: left promiscuous mode
[ 1179.324882][   T34] veth0_vlan: left promiscuous mode
[ 1180.967912][T11598] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1201'.
[ 1181.825998][   T34] team0 (unregistering): Port device team_slave_1 removed
[ 1181.998937][ T5791] Bluetooth: Wrong link type (-57)
[ 1182.146109][   T34] team0 (unregistering): Port device team_slave_0 removed
[ 1183.480404][   T34] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1183.676400][   T34] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1183.886121][   T34] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1184.093331][   T34] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1184.758377][   T34] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1185.201399][   T34] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1185.222402][ T5791] block nbd0: Receive control failed (result -107)
[ 1185.297067][T11627] block nbd0: shutting down sockets
[ 1185.344635][T11364] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1185.438969][T11535] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1185.446888][T11535] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1185.457663][T11535] bridge_slave_0: entered allmulticast mode
[ 1185.467328][T11535] bridge_slave_0: entered promiscuous mode
[ 1185.482289][T11535] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1185.509193][T11535] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1185.519975][T11535] bridge_slave_1: entered allmulticast mode
[ 1185.530025][T11535] bridge_slave_1: entered promiscuous mode
[ 1185.672405][   T34] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1185.930224][   T34] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1186.161171][T11535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1186.263847][T11364] 8021q: adding VLAN 0 to HW filter on device team0
[ 1186.320923][T11535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1186.367116][ T4691] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1186.374904][ T4691] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1186.475717][T11369] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1186.902343][ T4691] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1186.910150][ T4691] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1187.064835][T11535] team0: Port device team_slave_0 added
[ 1187.132783][   T34] bridge_slave_1: left allmulticast mode
[ 1187.139068][   T34] bridge_slave_1: left promiscuous mode
[ 1187.145856][   T34] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1187.250588][   T34] bridge_slave_0: left allmulticast mode
[ 1187.258667][   T34] bridge_slave_0: left promiscuous mode
[ 1187.265405][   T34] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1187.351254][   T34] bridge_slave_1: left allmulticast mode
[ 1187.357760][   T34] bridge_slave_1: left promiscuous mode
[ 1187.364477][   T34] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1187.479673][   T34] bridge_slave_0: left allmulticast mode
[ 1187.486323][   T34] bridge_slave_0: left promiscuous mode
[ 1187.492967][   T34] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1188.197681][T11646] =====================================================
[ 1188.205098][T11646] BUG: KMSAN: uninit-value in ax25cmp+0x3a5/0x470
[ 1188.211837][T11646]  ax25cmp+0x3a5/0x470
[ 1188.216309][T11646]  nr_dev_get+0x20e/0x450
[ 1188.220824][T11646]  nr_route_frame+0x1a2/0xfe0
[ 1188.225919][T11646]  nr_xmit+0x5a/0x1c0
[ 1188.230074][T11646]  dev_hard_start_xmit+0x247/0xa20
[ 1188.235494][T11646]  __dev_queue_xmit+0x366a/0x57d0
[ 1188.240702][T11646]  raw_sendmsg+0x6b5/0xdf0
[ 1188.245503][T11646]  ieee802154_sock_sendmsg+0x96/0xd0
[ 1188.251021][T11646]  __sock_sendmsg+0x30f/0x380
[ 1188.256052][T11646]  ____sys_sendmsg+0x903/0xb60
[ 1188.261019][T11646]  ___sys_sendmsg+0x28d/0x3c0
[ 1188.266028][T11646]  __sys_sendmmsg+0x41d/0x880
[ 1188.270911][T11646]  __ia32_compat_sys_sendmmsg+0xc8/0x140
[ 1188.276939][T11646]  ia32_sys_call+0x22f1/0x4180
[ 1188.281897][T11646]  __do_fast_syscall_32+0xb0/0x110
[ 1188.287326][T11646]  do_fast_syscall_32+0x38/0x80
[ 1188.292361][T11646]  do_SYSENTER_32+0x1f/0x30
[ 1188.297188][T11646]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1188.303883][T11646] 
[ 1188.306307][T11646] Uninit was created at:
[ 1188.310842][T11646]  kmem_cache_alloc_node_noprof+0x907/0xe00
[ 1188.317109][T11646]  kmalloc_reserve+0x13d/0x4a0
[ 1188.322057][T11646]  __alloc_skb+0x363/0x7b0
[ 1188.326797][T11646]  alloc_skb_with_frags+0xc8/0xd00
[ 1188.332102][T11646]  sock_alloc_send_pskb+0xa81/0xbf0
[ 1188.337662][T11646]  raw_sendmsg+0x367/0xdf0
[ 1188.342271][T11646]  ieee802154_sock_sendmsg+0x96/0xd0
[ 1188.347914][T11646]  __sock_sendmsg+0x30f/0x380
[ 1188.352822][T11646]  ____sys_sendmsg+0x903/0xb60
[ 1188.357982][T11646]  ___sys_sendmsg+0x28d/0x3c0
[ 1188.362889][T11646]  __sys_sendmmsg+0x41d/0x880
[ 1188.367906][T11646]  __ia32_compat_sys_sendmmsg+0xc8/0x140
[ 1188.373890][T11646]  ia32_sys_call+0x22f1/0x4180
[ 1188.378852][T11646]  __do_fast_syscall_32+0xb0/0x110
[ 1188.384301][T11646]  do_fast_syscall_32+0x38/0x80
[ 1188.389334][T11646]  do_SYSENTER_32+0x1f/0x30
[ 1188.394165][T11646]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1188.400743][T11646] 
[ 1188.403217][T11646] CPU: 0 UID: 0 PID: 11646 Comm: syz.0.1210 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0
[ 1188.414318][T11646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[ 1188.424681][T11646] =====================================================
[ 1188.431739][T11646] Disabling lock debugging due to kernel taint
[ 1188.438157][T11646] Kernel panic - not syncing: kmsan.panic set ...
[ 1188.444727][T11646] CPU: 0 UID: 0 PID: 11646 Comm: syz.0.1210 Tainted: G    B              6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0
[ 1188.457200][T11646] Tainted: [B]=BAD_PAGE
[ 1188.461478][T11646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[ 1188.471695][T11646] Call Trace:
[ 1188.475086][T11646]  <TASK>
[ 1188.478123][T11646]  dump_stack_lvl+0x216/0x2d0
[ 1188.483014][T11646]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[ 1188.489009][T11646]  dump_stack+0x1e/0x24
[ 1188.493348][T11646]  panic+0x4e2/0xcf0
[ 1188.497433][T11646]  ? kmsan_get_metadata+0xf1/0x1c0
[ 1188.502743][T11646]  kmsan_report+0x2c7/0x2d0
[ 1188.507421][T11646]  ? _raw_spin_unlock_irqrestore+0x3f/0x60
[ 1188.513432][T11646]  ? __msan_warning+0x95/0x120
[ 1188.518405][T11646]  ? ax25cmp+0x3a5/0x470
[ 1188.522830][T11646]  ? nr_dev_get+0x20e/0x450
[ 1188.527517][T11646]  ? nr_route_frame+0x1a2/0xfe0
[ 1188.532547][T11646]  ? nr_xmit+0x5a/0x1c0
[ 1188.536860][T11646]  ? dev_hard_start_xmit+0x247/0xa20
[ 1188.542341][T11646]  ? __dev_queue_xmit+0x366a/0x57d0
[ 1188.547734][T11646]  ? raw_sendmsg+0x6b5/0xdf0
[ 1188.552514][T11646]  ? ieee802154_sock_sendmsg+0x96/0xd0
[ 1188.558161][T11646]  ? __sock_sendmsg+0x30f/0x380
[ 1188.563308][T11646]  ? ____sys_sendmsg+0x903/0xb60
[ 1188.568435][T11646]  ? ___sys_sendmsg+0x28d/0x3c0
[ 1188.573463][T11646]  ? __sys_sendmmsg+0x41d/0x880
[ 1188.578503][T11646]  ? __ia32_compat_sys_sendmmsg+0xc8/0x140
[ 1188.584523][T11646]  ? ia32_sys_call+0x22f1/0x4180
[ 1188.589634][T11646]  ? __do_fast_syscall_32+0xb0/0x110
[ 1188.595088][T11646]  ? do_fast_syscall_32+0x38/0x80
[ 1188.600277][T11646]  ? do_SYSENTER_32+0x1f/0x30
[ 1188.605113][T11646]  ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1188.611851][T11646]  ? kmsan_internal_poison_memory+0x49/0x90
[ 1188.617965][T11646]  ? kmsan_slab_alloc+0xdf/0x160
[ 1188.623107][T11646]  ? kmem_cache_alloc_node_noprof+0x907/0xe00
[ 1188.629473][T11646]  ? kmalloc_reserve+0x13d/0x4a0
[ 1188.634574][T11646]  ? __alloc_skb+0x363/0x7b0
[ 1188.639327][T11646]  ? alloc_skb_with_frags+0xc8/0xd00
[ 1188.644797][T11646]  ? sock_alloc_send_pskb+0xa81/0xbf0
[ 1188.650367][T11646]  ? raw_sendmsg+0x367/0xdf0
[ 1188.655139][T11646]  ? ieee802154_sock_sendmsg+0x96/0xd0
[ 1188.660801][T11646]  ? __sock_sendmsg+0x30f/0x380
[ 1188.665873][T11646]  ? ____sys_sendmsg+0x903/0xb60
[ 1188.671010][T11646]  ? ___sys_sendmsg+0x28d/0x3c0
[ 1188.676040][T11646]  ? __sys_sendmmsg+0x41d/0x880
[ 1188.681082][T11646]  ? __ia32_compat_sys_sendmmsg+0xc8/0x140
[ 1188.687099][T11646]  ? ia32_sys_call+0x22f1/0x4180
[ 1188.692213][T11646]  ? __do_fast_syscall_32+0xb0/0x110
[ 1188.697673][T11646]  ? do_fast_syscall_32+0x38/0x80
[ 1188.702865][T11646]  ? do_SYSENTER_32+0x1f/0x30
[ 1188.707714][T11646]  ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1188.714473][T11646]  ? kmsan_get_metadata+0x13e/0x1c0
[ 1188.719847][T11646]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[ 1188.725834][T11646]  ? kmem_cache_alloc_node_noprof+0x79/0xe00
[ 1188.732038][T11646]  ? kmsan_get_metadata+0x13e/0x1c0
[ 1188.737401][T11646]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[ 1188.743380][T11646]  ? kmsan_get_metadata+0x13e/0x1c0
[ 1188.748842][T11646]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[ 1188.754828][T11646]  __msan_warning+0x95/0x120
[ 1188.759626][T11646]  ax25cmp+0x3a5/0x470
[ 1188.763889][T11646]  nr_dev_get+0x20e/0x450
[ 1188.768408][T11646]  nr_route_frame+0x1a2/0xfe0
[ 1188.773284][T11646]  ? validate_xmit_xfrm+0x8b/0x1bc0
[ 1188.778696][T11646]  ? kmsan_get_metadata+0x13e/0x1c0
[ 1188.784083][T11646]  nr_xmit+0x5a/0x1c0
[ 1188.788233][T11646]  ? __pfx_nr_xmit+0x10/0x10
[ 1188.792988][T11646]  dev_hard_start_xmit+0x247/0xa20
[ 1188.798301][T11646]  __dev_queue_xmit+0x366a/0x57d0
[ 1188.803505][T11646]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[ 1188.809551][T11646]  ? _copy_from_iter+0x9ae/0x2b00
[ 1188.814765][T11646]  ? __dev_queue_xmit+0x3d6/0x57d0
[ 1188.820085][T11646]  raw_sendmsg+0x6b5/0xdf0
[ 1188.824694][T11646]  ? __pfx_raw_sendmsg+0x10/0x10
[ 1188.829808][T11646]  ieee802154_sock_sendmsg+0x96/0xd0
[ 1188.835292][T11646]  ? __pfx_ieee802154_sock_sendmsg+0x10/0x10
[ 1188.841471][T11646]  ? __pfx_ieee802154_sock_sendmsg+0x10/0x10
[ 1188.847648][T11646]  __sock_sendmsg+0x30f/0x380
[ 1188.852545][T11646]  ____sys_sendmsg+0x903/0xb60
[ 1188.857515][T11646]  ___sys_sendmsg+0x28d/0x3c0
[ 1188.862378][T11646]  ? kmsan_get_metadata+0x13e/0x1c0
[ 1188.867752][T11646]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[ 1188.873756][T11646]  ? __rcu_read_unlock+0x7b/0xe0
[ 1188.878923][T11646]  ? __fget_files+0x42b/0x500
[ 1188.883797][T11646]  ? kmsan_get_metadata+0x13e/0x1c0
[ 1188.889171][T11646]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[ 1188.895161][T11646]  __sys_sendmmsg+0x41d/0x880
[ 1188.900208][T11646]  ? do_futex+0x341/0x4a0
[ 1188.904703][T11646]  ? kmsan_get_metadata+0x13e/0x1c0
[ 1188.910070][T11646]  ? perf_event_bpf_event+0x7c0/0x1480
[ 1188.915731][T11646]  __ia32_compat_sys_sendmmsg+0xc8/0x140
[ 1188.921592][T11646]  ia32_sys_call+0x22f1/0x4180
[ 1188.926530][T11646]  __do_fast_syscall_32+0xb0/0x110
[ 1188.931819][T11646]  ? irqentry_exit+0x16/0x60
[ 1188.936619][T11646]  do_fast_syscall_32+0x38/0x80
[ 1188.941633][T11646]  do_SYSENTER_32+0x1f/0x30
[ 1188.946312][T11646]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1188.952890][T11646] RIP: 0023:0xf7f0f579
[ 1188.957095][T11646] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1188.976913][T11646] RSP: 002b:00000000f506655c EFLAGS: 00000206 ORIG_RAX: 0000000000000159
[ 1188.985529][T11646] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200020c0
[ 1188.993667][T11646] RDX: 0000000000000029 RSI: 0000000000000000 RDI: 0000000000000000
[ 1189.001781][T11646] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1189.009899][T11646] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1189.018014][T11646] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1189.026144][T11646]  </TASK>
[ 1189.029566][T11646] Kernel Offset: disabled
[ 1189.033980][T11646] Rebooting in 86400 seconds..