last executing test programs:

9m4.259374603s ago: executing program 32 (id=45):
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_pidfd_open(0x0, 0x0)
ioctl$XFS_IOC_SCRUBV_METADATA(0xffffffffffffffff, 0xc0285840, 0x0)
add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)

4m57.016757626s ago: executing program 5 (id=544):
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
dup3(r1, r0, 0x80000)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xffffffffffffff9a, 0x1000000, 0x0})

4m53.240236111s ago: executing program 5 (id=556):
r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x3, 0xb, &(0x7f0000000900)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x0, 0x0, 'lblc\x00', 0x1e, 0x80}, 0x2c)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000140)="f3", 0x1}], 0x1}, 0x20000000}], 0x1, 0x0)

4m52.093093977s ago: executing program 5 (id=559):
r0 = userfaultfd(0x1)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5})
read(r0, &(0x7f0000000140)=""/116, 0x74)

4m50.352545715s ago: executing program 5 (id=562):
r0 = socket(0x40000000015, 0x5, 0x0)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="4274aa814c8f6ea8d8db43", 0xb}, {&(0x7f0000000280)="da3b7d7035cdbd35bccc23a2f8164fe26ad17c1668bf60cc412d60d7b02fe70f0d4c385a653d469c0888c116c5e9393ca029e477f71c7707c0e59c992ef8bb099330a50fb6057761ab0f200736ceae852a03caf381f413af6c96075ecb03b216edfcdf6142457f01689d1141660d64a06272cf6d", 0x74}, {&(0x7f0000000600)="1a13a7837ea8ca56a91f616de628b8b1b2107d046bccc3025bbe70905237ffee5666e0e28cfda9249a7beaeaab10864089fb7c447ce7416d", 0x38}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78add2ab0812de906e5545585d6aadca938d5a62632604101886bd45bc15550815c5dcec420b547b43f88b56489e54d47307371d68817c7eca00a16bce0ea94917082d622301673217c8ca26b5", 0xa4}], 0x4}, 0x41)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x5, 0x12)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
syz_emit_vhci(&(0x7f0000000340)=ANY=[], 0xd)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

4m48.638606497s ago: executing program 5 (id=568):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
syz_open_dev$sg(0x0, 0x208, 0x2c41)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6(0xa, 0x80002, 0x0)
getsockopt$inet6_buf(r3, 0x29, 0x3d, 0x0, &(0x7f0000000140))
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0)
ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000000c0)={'pcl818\x00', [0x100, 0x6, 0x1, 0xc, 0x11, 0x5, 0x79, 0x3, 0x80008, 0x8, 0x2, 0x1, 0x7, 0x1, 0x1, 0xfd, 0xfffffffb, 0x20000009, 0x3, 0x7fffffff, 0xfffffffc, 0xca9f, 0x0, 0x8, 0xfffffffb, 0xf39e, 0xffffffff, 0x8, 0xa6b5, 0x0, 0xfffffff8]})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0)
socket$inet6(0xa, 0x400000000001, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

4m48.567005669s ago: executing program 0 (id=569):
r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x3, 0xb, &(0x7f0000000900)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x0, 0x0, 'lblc\x00', 0x1e, 0x80}, 0x2c)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000140)="f3", 0x1}], 0x1}, 0x20000000}], 0x1, 0x0)

4m47.189278379s ago: executing program 0 (id=572):
syz_usb_connect$uac1(0x7, 0x71, &(0x7f0000000040)=ANY=[@ANYBLOB="00406b1d0101"], 0x0)
r0 = syz_usb_connect(0x0, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102882333404f17cf8af4390102030109024500013f064004090442"], &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0})
r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x64, 0x0, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r3 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0x8752, 0x4000, 0xfffffffc, 0x17e})
io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000001380)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1)
r4 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5})
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs2/custom1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1001, 0x1})
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r7 = dup3(r6, r5, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, 0x0)
connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @remote}, 0x2, 0x3, 0x0, 0x1}}, 0x2e)
ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000})
r8 = syz_open_procfs$pagemap(0x0, &(0x7f0000000340))
readv(r8, &(0x7f0000005400)=[{0x0}], 0x1)
migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa)
process_vm_readv(0x0, &(0x7f0000002440)=[{&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000023c0)=""/86, 0x56}], 0x2, &(0x7f0000003640)=[{&(0x7f0000003480)=""/133, 0x85}, {0x0}], 0x2, 0x0)
ioctl$BTRFS_IOC_INO_PATHS(r1, 0xc0389423, &(0x7f0000000300)={0x800, 0x0, [0x15142068, 0x7, 0x1, 0x20c], &(0x7f00000000c0)})
syz_usb_disconnect(r0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect$uac2(0x3, 0xa4, &(0x7f0000002480)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x200c, 0x100b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x3, 0x1, 0x6, 0x30, 0xef, {0x8, 0xb, 0x2, 0x2, 0x1, 0x3, 0x20, 0x4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x0, 0x7, 0x9, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x7, 0x1a, 0x1, 0x1001, 0x9, 0x7fff, 0xb}, @as_header={0x10, 0x24, 0x1, 0x2, 0xf8, 0x0, 0x1, 0x8a, 0x8}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x4, 0xe, 0x0, {0x8, 0x25, 0x1, 0x1, 0xd, 0xe, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x29, 0x7, 0xd, 0x0, 0xff}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x3, 0x67, 0x1, {0x8, 0x25, 0x1, 0x0, 0x3f, 0x54, 0x5}}}}}}}}]}}, &(0x7f0000002940)={0x0, 0x0, 0x11e, &(0x7f00000029c0)={0x5, 0xf, 0x11e, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x7, 0x1, 0x0, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x10, 0x6, 0x47, 0x3}, @generic={0xe5, 0x10, 0x1, "551b8e72e9428c39ec09e6c55e76902768242d8328a05a6567b9ef9959c31af666384daa3a27e7ac0c87a857a16b9afe1631035e7aad6b3994846c8dab49f72451f2a510f79c644470217a5b88d9b605320d0e8377e4ab8f3785b9c8b9cc31e1e83ad783db02e1442de97543fef3dfc2841e2633595e817eae2a6bb681ccb2613a89852be720772d277638b95ba1176ef5ebb7a5df18e027e88a2ce0bf1af9aaf1fddfc270834e5d5bb2200f40c95131f3dfbe340ac47aae13d00469a5cfd3695cc1eb7d4e5dce8d024cf796fcbda3986fda4c6ed68eb25ec10710dcd9201cea90cc"}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "0f1e21d38b1d5cae2eee9919b492c003"}, @ssp_cap={0xc, 0x10, 0xa, 0xd, 0x0, 0x5, 0x770f, 0x2}]}, 0x8, [{0x7, &(0x7f00000026c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00']}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x40b}}, {0x0, 0x0}, {0x4, &(0x7f0000002780)=@lang_id={0x4, 0x3, 0x446}}, {0x81, &(0x7f00000027c0)=ANY=[@ANYBLOB="8103aae0d578504ebdb9d46b673552f0daa132865ab789f494ed73f3cd29e22d702d10d99ddf12c5192b8ac32f2230741be056d54f5d282169947be55b070056b439d4faa8d5b5e5825a53d5add77b7a7a862f4642d5402899df0e0cce8a0b70ff322faa8e4cc0a8be7e71dd54b43a3d5858f6034823e8b7bb8b38c45f"]}, {0x4, &(0x7f0000002880)=@lang_id={0x4, 0x3, 0x44b}}, {0x4, &(0x7f00000028c0)=@lang_id={0x4, 0x3, 0x1801}}, {0x4, &(0x7f0000002900)=@lang_id={0x4, 0x3, 0x2409}}]})
syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000100)=ANY=[@ANYBLOB="400c01000000fb86cdcc710e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

4m47.061437629s ago: executing program 5 (id=573):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02})
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5})
r4 = socket$netlink(0x10, 0x3, 0x0)
preadv(r2, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/14, 0xe}], 0x1, 0x0, 0x1)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})

4m43.070444808s ago: executing program 0 (id=582):
r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x3, 0xb, &(0x7f0000000900)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x0, 0x0, 'lblc\x00', 0x1e, 0x80}, 0x2c)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000140)="f3", 0x1}], 0x1}, 0x20000000}], 0x1, 0x0)

4m41.900843372s ago: executing program 0 (id=584):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0})
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

4m41.71409194s ago: executing program 0 (id=586):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100001080000000000000000", @ANYRES32, @ANYBLOB="b6c903f2"], 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)
r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0})
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

4m41.570526587s ago: executing program 0 (id=588):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)}], 0x1}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e2b, @local}, 0x3, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x2, 0x20000044)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00', <r0=>0x0})
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000100)=@multiplanar_overlay={0x0, 0xd, 0x4, 0x80, 0x2, {0x0, 0x2710}, {0x3, 0xc, 0x3c, 0x5, 0x3, 0x5, ']EVv'}, 0x9cf, 0x3, {0x0}, 0x2})
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0)
preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000140)=""/4078, 0xfee}], 0x1, 0xed, 0x207fff)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0)
syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000bfe000/0x400000)=nil)
syz_usb_connect(0x4, 0x29e, &(0x7f0000001600)={{0x12, 0x1, 0x110, 0x6b, 0xd2, 0x78, 0xff, 0x17a8, 0x5, 0x8b9e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x28c, 0x1, 0x4b, 0x1, 0xb0, 0xb, "", [{{0x9, 0x4, 0x72, 0x2, 0x7, 0xc2, 0xf, 0xbf, 0x9, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "06f414fa885d"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x9, 0x0, 0xfa}}, @generic={0x17, 0x22, "dc18ffa56b88c91cf826bf9af4fcb8b91f3729e3a3"}], [{{0x9, 0x5, 0x2, 0x10, 0x10, 0x9, 0x0, 0x42, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x5}]}}, {{0x9, 0x5, 0xf, 0x8, 0x10, 0x9, 0xdb, 0x1, [@generic={0x2f, 0x5, "e02d445a237f7e38d12a55d30b777b3e32b3b9122286b587f66d616520d33917272bf2b1b18aa485f6a33640c7"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x10, 0x75, 0x23, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7f, 0xceb4}]}}, {{0x9, 0x5, 0x1, 0x0, 0x400, 0x9, 0x7f, 0x0, [@generic={0x99, 0x4, "bfc726695c3a35b0a914b9b91a695a36f352343aac85c7bea9a43db9c81f4a275d0a4be00dd66887c9d3baa5866910786d010b00057a7db0143fbd1d075a8bc9159a40cd5568ecaccaaea14420addc45cfaeb006a11388abd9d84e5d9c127688ffd3aa47edec6af3c344ffd12b654bee5fe77fd336d56cccb1fb2575dc0114994a0efd69ce5ec0e26cf59e8f357c40f1df22d5e70d1ea8"}, @generic={0x7d, 0x7, "4a1e14eaceb5f692d68d95b953f20a4793a92a54c2045455450c18cff69e544e7397ded88a1ed7c7902f7cbb5e8d93faf0a25b01a4281e19699ef38a607b5752c9e4c8f1ec8da0c58296914c1aeef1ca1b6081714d90621c808239b044ef2900beb4d2a2e5054a78ebce4f7161b437e51e3bb125b22c7eb250b77c"}]}}, {{0x9, 0x5, 0x3, 0x4, 0x3ff, 0x4, 0x4, 0x70, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x7d, 0x8001}, @generic={0x1e, 0x22, "fae95515649ed2d625428b910973775dfc23b93e4e5d5450df8e2ef7"}]}}, {{0x9, 0x5, 0x2, 0xc, 0x20, 0x1, 0xff, 0xa, [@generic={0x6a, 0xd, "79ca462f6f6175a303cf504955387551b1b2e8fafda8f045e66fb05fc9680ddfcf3d9d4016678067b1abb9ff050bea53fb39965fbd50c4add37de35ad2d37cc0793fe772c5b42f049c2b03b4ccb834471cf09fe594005b28fd68382f5877596c52d0aba2cb67cac3"}, @generic={0x25, 0xe, "d9eeb140fbeb72e3ae1f58ed32fc9737f0e728e75ee23c6b68923ec50fa7069db6c44b"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x20, 0x4, 0x8d, 0x6}}]}}]}}]}}, &(0x7f0000001cc0)={0xa, &(0x7f0000001980)={0xa, 0x6, 0x250, 0xb2, 0x25, 0x7, 0x40, 0x96}, 0x95, &(0x7f0000001380)=ANY=[@ANYBLOB="050f9500060b10010cae0008010001051410040334e85c8f6f181c451c2b7a643255ac3e03100b2e100b5cedcff9a96681ac319d477488d63e7157d0ef22976b3e7ab028ab2e57f5330448a63953b7a4b6161356d224100a96060020000f780800c0000000000000003f3fff00c00000006f00ff00000000001c100a04a4bc1b000f00040000c00000c03f0000afc0fe013f000000"], 0x5, [{0x4, &(0x7f0000001240)=@lang_id={0x4, 0x3, 0xca3e3a43493e1508}}, {0x4, &(0x7f0000001ac0)=@lang_id={0x4, 0x3, 0x44d}}, {0xf4, &(0x7f0000001140)=@string={0xf4, 0x3, "4527be8a1cb45db394ce43ce3cf66e86a1f3718f99958960e49d3186cce9249c78cf00abffa08409f98f6984121f9b6287f681445f6600313b6196cbf74d06a98a9f4740cb3240c63efcf54b1af16b301045d49068617fdd042fe04847595ba9ffbc7cee5543578a4b176f7ed00f5d0f979339c6a1592282e36d4131c911915495875740e44f81253768fcf1d8071ad8224dbb70ece71a9f6fdfb71dba17c5959cbba9f69631ab4c60b70863c4dde2092d6194b70576c10278abff5bd9a641d9e5095fb98e43fd09e21d17f1d938402de9ff9f6ed799fb9d6187a2445ccfc5bcd0bbc6aaf7f9099c2f92b26124fbde1a43ab"}}, {0x6c, &(0x7f0000001c00)=@string={0x6c, 0x3, "48e9c11f966279087fb005073d085caf7fd5b377150b4b6565324c843ce8598cb47b4273e708a667d1d781340efdaf73451952d25170bda5dfd9914c74cedcb9b8f1551fd99c2f64b78d015ab4990ca4b20b9cd6149d7857808bfca0d123fce81816db708ee0fb8cf653"}}, {0x4, &(0x7f0000001c80)=@lang_id={0x4, 0x3, 0x414}}]})
r5 = syz_usb_connect(0x5, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="12010601bc3bd020402012c651e50102030109021200017b63200909040002"], 0x0)
syz_usb_control_io(r5, &(0x7f0000000b00)={0x2c, 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0043020000000203"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$lan78xx(r5, 0x0, 0x0)
r6 = syz_open_dev$sndctrl(&(0x7f0000001280), 0x0, 0x0)
mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r6, 0xc1205531, &(0x7f00000101c0)={0x0, 0x2, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x8001, 0x0, 0x1000000, "64f778ddcf2907e63600"})
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r3, 0x4020aed2, &(0x7f00000000c0)={0xe000, 0x201000, 0x8})
sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10010002}, 0xc, &(0x7f0000000c80)={&(0x7f0000000e00)=ANY=[@ANYRES16, @ANYRES32, @ANYRES32=r0, @ANYBLOB="400001801400020070696d36726567300000000000"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
r7 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6)
r8 = accept4(r7, 0x0, 0x0, 0x800)
sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45", 0xc8}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r9 = socket(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r9)
write(r9, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24)
recvmmsg(r9, &(0x7f0000000d80), 0x0, 0x0, 0x0)

4m37.712794512s ago: executing program 2 (id=594):
r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x3, 0xb, &(0x7f0000000900)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
r4 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r4, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000140)="f3", 0x1}], 0x1}, 0x20000000}], 0x1, 0x0)

4m36.395667737s ago: executing program 2 (id=595):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000000)=[0x0], 0x0, 0x0, 0x0, 0x1})

4m34.941347143s ago: executing program 2 (id=596):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x3, 0x3003}, 0x4)
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0xc2100)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000000bc0)={{0x0, 0x1}, {0xe}, 0xbf, 0xbf00})

4m34.110559099s ago: executing program 2 (id=598):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100001080000000000000000", @ANYRES32, @ANYBLOB="b6c903f2"], 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)
r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0})
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

4m34.049018031s ago: executing program 2 (id=599):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048054}, 0x0)
r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0})
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

4m33.989294368s ago: executing program 2 (id=600):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001280)=@newlink={0x20, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2017, 0x2021}}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8000002)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

4m31.998030937s ago: executing program 33 (id=573):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02})
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5})
r4 = socket$netlink(0x10, 0x3, 0x0)
preadv(r2, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/14, 0xe}], 0x1, 0x0, 0x1)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})

4m25.255992445s ago: executing program 34 (id=588):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)}], 0x1}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e2b, @local}, 0x3, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x2, 0x20000044)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00', <r0=>0x0})
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000100)=@multiplanar_overlay={0x0, 0xd, 0x4, 0x80, 0x2, {0x0, 0x2710}, {0x3, 0xc, 0x3c, 0x5, 0x3, 0x5, ']EVv'}, 0x9cf, 0x3, {0x0}, 0x2})
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0)
preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000140)=""/4078, 0xfee}], 0x1, 0xed, 0x207fff)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0)
syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000bfe000/0x400000)=nil)
syz_usb_connect(0x4, 0x29e, &(0x7f0000001600)={{0x12, 0x1, 0x110, 0x6b, 0xd2, 0x78, 0xff, 0x17a8, 0x5, 0x8b9e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x28c, 0x1, 0x4b, 0x1, 0xb0, 0xb, "", [{{0x9, 0x4, 0x72, 0x2, 0x7, 0xc2, 0xf, 0xbf, 0x9, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "06f414fa885d"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x9, 0x0, 0xfa}}, @generic={0x17, 0x22, "dc18ffa56b88c91cf826bf9af4fcb8b91f3729e3a3"}], [{{0x9, 0x5, 0x2, 0x10, 0x10, 0x9, 0x0, 0x42, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x5}]}}, {{0x9, 0x5, 0xf, 0x8, 0x10, 0x9, 0xdb, 0x1, [@generic={0x2f, 0x5, "e02d445a237f7e38d12a55d30b777b3e32b3b9122286b587f66d616520d33917272bf2b1b18aa485f6a33640c7"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x10, 0x75, 0x23, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7f, 0xceb4}]}}, {{0x9, 0x5, 0x1, 0x0, 0x400, 0x9, 0x7f, 0x0, [@generic={0x99, 0x4, "bfc726695c3a35b0a914b9b91a695a36f352343aac85c7bea9a43db9c81f4a275d0a4be00dd66887c9d3baa5866910786d010b00057a7db0143fbd1d075a8bc9159a40cd5568ecaccaaea14420addc45cfaeb006a11388abd9d84e5d9c127688ffd3aa47edec6af3c344ffd12b654bee5fe77fd336d56cccb1fb2575dc0114994a0efd69ce5ec0e26cf59e8f357c40f1df22d5e70d1ea8"}, @generic={0x7d, 0x7, "4a1e14eaceb5f692d68d95b953f20a4793a92a54c2045455450c18cff69e544e7397ded88a1ed7c7902f7cbb5e8d93faf0a25b01a4281e19699ef38a607b5752c9e4c8f1ec8da0c58296914c1aeef1ca1b6081714d90621c808239b044ef2900beb4d2a2e5054a78ebce4f7161b437e51e3bb125b22c7eb250b77c"}]}}, {{0x9, 0x5, 0x3, 0x4, 0x3ff, 0x4, 0x4, 0x70, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x7d, 0x8001}, @generic={0x1e, 0x22, "fae95515649ed2d625428b910973775dfc23b93e4e5d5450df8e2ef7"}]}}, {{0x9, 0x5, 0x2, 0xc, 0x20, 0x1, 0xff, 0xa, [@generic={0x6a, 0xd, "79ca462f6f6175a303cf504955387551b1b2e8fafda8f045e66fb05fc9680ddfcf3d9d4016678067b1abb9ff050bea53fb39965fbd50c4add37de35ad2d37cc0793fe772c5b42f049c2b03b4ccb834471cf09fe594005b28fd68382f5877596c52d0aba2cb67cac3"}, @generic={0x25, 0xe, "d9eeb140fbeb72e3ae1f58ed32fc9737f0e728e75ee23c6b68923ec50fa7069db6c44b"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x20, 0x4, 0x8d, 0x6}}]}}]}}]}}, &(0x7f0000001cc0)={0xa, &(0x7f0000001980)={0xa, 0x6, 0x250, 0xb2, 0x25, 0x7, 0x40, 0x96}, 0x95, &(0x7f0000001380)=ANY=[@ANYBLOB="050f9500060b10010cae0008010001051410040334e85c8f6f181c451c2b7a643255ac3e03100b2e100b5cedcff9a96681ac319d477488d63e7157d0ef22976b3e7ab028ab2e57f5330448a63953b7a4b6161356d224100a96060020000f780800c0000000000000003f3fff00c00000006f00ff00000000001c100a04a4bc1b000f00040000c00000c03f0000afc0fe013f000000"], 0x5, [{0x4, &(0x7f0000001240)=@lang_id={0x4, 0x3, 0xca3e3a43493e1508}}, {0x4, &(0x7f0000001ac0)=@lang_id={0x4, 0x3, 0x44d}}, {0xf4, &(0x7f0000001140)=@string={0xf4, 0x3, "4527be8a1cb45db394ce43ce3cf66e86a1f3718f99958960e49d3186cce9249c78cf00abffa08409f98f6984121f9b6287f681445f6600313b6196cbf74d06a98a9f4740cb3240c63efcf54b1af16b301045d49068617fdd042fe04847595ba9ffbc7cee5543578a4b176f7ed00f5d0f979339c6a1592282e36d4131c911915495875740e44f81253768fcf1d8071ad8224dbb70ece71a9f6fdfb71dba17c5959cbba9f69631ab4c60b70863c4dde2092d6194b70576c10278abff5bd9a641d9e5095fb98e43fd09e21d17f1d938402de9ff9f6ed799fb9d6187a2445ccfc5bcd0bbc6aaf7f9099c2f92b26124fbde1a43ab"}}, {0x6c, &(0x7f0000001c00)=@string={0x6c, 0x3, "48e9c11f966279087fb005073d085caf7fd5b377150b4b6565324c843ce8598cb47b4273e708a667d1d781340efdaf73451952d25170bda5dfd9914c74cedcb9b8f1551fd99c2f64b78d015ab4990ca4b20b9cd6149d7857808bfca0d123fce81816db708ee0fb8cf653"}}, {0x4, &(0x7f0000001c80)=@lang_id={0x4, 0x3, 0x414}}]})
r5 = syz_usb_connect(0x5, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="12010601bc3bd020402012c651e50102030109021200017b63200909040002"], 0x0)
syz_usb_control_io(r5, &(0x7f0000000b00)={0x2c, 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0043020000000203"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$lan78xx(r5, 0x0, 0x0)
r6 = syz_open_dev$sndctrl(&(0x7f0000001280), 0x0, 0x0)
mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r6, 0xc1205531, &(0x7f00000101c0)={0x0, 0x2, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x8001, 0x0, 0x1000000, "64f778ddcf2907e63600"})
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r3, 0x4020aed2, &(0x7f00000000c0)={0xe000, 0x201000, 0x8})
sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10010002}, 0xc, &(0x7f0000000c80)={&(0x7f0000000e00)=ANY=[@ANYRES16, @ANYRES32, @ANYRES32=r0, @ANYBLOB="400001801400020070696d36726567300000000000"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
r7 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6)
r8 = accept4(r7, 0x0, 0x0, 0x800)
sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45", 0xc8}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r9 = socket(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r9)
write(r9, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24)
recvmmsg(r9, &(0x7f0000000d80), 0x0, 0x0, 0x0)

4m18.826394731s ago: executing program 35 (id=600):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001280)=@newlink={0x20, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2017, 0x2021}}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8000002)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

4m18.712946352s ago: executing program 3 (id=635):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0xc2100)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000bc0)={{0x0, 0x1}, {0xe}, 0xbf, 0xbf00})

4m18.680260255s ago: executing program 3 (id=636):
getpgrp(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x28011, r3, 0x0)

4m17.384861159s ago: executing program 3 (id=637):
syz_usb_connect(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0)
io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x2f)

4m13.744833025s ago: executing program 3 (id=647):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010800"/18, @ANYRES32, @ANYBLOB="b6c903f2"], 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)
r0 = io_uring_setup(0x524, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0})
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

4m13.739946938s ago: executing program 3 (id=648):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)
r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0})
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

4m13.677680571s ago: executing program 3 (id=649):
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00')
preadv(r0, &(0x7f00000026c0)=[{&(0x7f0000002700)=""/4088, 0xff8}], 0x1, 0x15c, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4)
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000080))
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f0000005e40)="170000000a0001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8", 0x32)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
syz_open_dev$radio(&(0x7f00000003c0), 0x3, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r2 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x9, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd, 0x1000001000, 0x46}, 0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0)
r4 = userfaultfd(0x1)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100))
read(r4, &(0x7f0000000140)=""/116, 0x74)
syz_io_uring_setup(0x131, &(0x7f0000000600)={0x0, 0x800006, 0x2}, &(0x7f0000ffe000), 0x0, 0x0)

3m58.159479988s ago: executing program 36 (id=649):
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00')
preadv(r0, &(0x7f00000026c0)=[{&(0x7f0000002700)=""/4088, 0xff8}], 0x1, 0x15c, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4)
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000080))
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f0000005e40)="170000000a0001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8", 0x32)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
syz_open_dev$radio(&(0x7f00000003c0), 0x3, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r2 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x9, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd, 0x1000001000, 0x46}, 0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0)
r4 = userfaultfd(0x1)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100))
read(r4, &(0x7f0000000140)=""/116, 0x74)
syz_io_uring_setup(0x131, &(0x7f0000000600)={0x0, 0x800006, 0x2}, &(0x7f0000ffe000), 0x0, 0x0)

2m26.540052915s ago: executing program 4 (id=765):
mkdir(0x0, 0xb)
mkdir(0x0, 0x0)
mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0)
syz_open_dev$loop(0x0, 0x2, 0x2001)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x2, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{0x0}], 0x1)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcmda12\x00', [0x100, 0x80000000, 0x2, 0x400, 0xe, 0x800005, 0x7, 0x6, 0x8, 0xfd, 0xffffffff, 0x1, 0x1, 0x1, 0x10000b, 0xfd, 0x5, 0x7a, 0x3, 0x40000003, 0x89, 0x12, 0x7f, 0x0, 0x5, 0xe66, 0x1, 0x2000008, 0xa6b5, 0x0, 0x1]})

2m26.389711937s ago: executing program 4 (id=766):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x7, &(0x7f0000002480))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x123802, 0x0)
prctl$PR_SET_MM_MAP(0x49, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x3, 0xc1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

2m25.658661724s ago: executing program 4 (id=767):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0x18, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000feffffff1809000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000030000008500000006000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc)

2m25.449015942s ago: executing program 4 (id=768):
r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x350})
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

2m25.396759309s ago: executing program 4 (id=769):
openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
socket$nl_route(0x10, 0x3, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
r2 = openat(r1, &(0x7f0000000280)='.\x00', 0x2000, 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00\x00'], 0x30002)

2m25.118661366s ago: executing program 4 (id=770):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0)
close(r2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140))
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_devices(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="1e030800d3ff71ef288563"], 0xffdd)
syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00')
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7ffffffb}]})
close_range(r3, 0xffffffffffffffff, 0x0)

2m10.000226427s ago: executing program 37 (id=770):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0)
close(r2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140))
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_devices(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="1e030800d3ff71ef288563"], 0xffdd)
syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00')
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7ffffffb}]})
close_range(r3, 0xffffffffffffffff, 0x0)

14.122075978s ago: executing program 9 (id=970):
r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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")
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa00000000000000000100008510000006000000180000", @ANYBLOB], 0x0, 0x9, 0x0, 0x0, 0x41100, 0x8}, 0x94)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40e8662e, &(0x7f00000000c0)={0x43a0, 0x100000000, 0x7ffffffffff00002, 0x1, 0xffffdeff})

13.799171418s ago: executing program 1 (id=975):
r0 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x39, 0x0, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="00020401"], 0x18)
connect$inet6(r0, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001840), 0x3b, 0x0)

12.99775042s ago: executing program 9 (id=977):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, 0x0, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000000)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000740)={0x0, 0x0, r5, 0x0, 0x14bc, 0x4, 0xa8b5, 0xb, {0x0, 0x4a, 0x5, 0x8c, 0x8000, 0xa49, 0xe964, 0x7ff, 0x4, 0x5, 0x9, 0xffff, 0xd, 0x8, "d95a0fd2d5834d7eb2fe58d003501c2633a1b1c76ceb8ae57aef35aa08c611a5"}})

12.582833547s ago: executing program 1 (id=979):
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20000)
ioctl$SG_BLKTRACETEARDOWN(r0, 0x1276, 0x0)

11.740938308s ago: executing program 1 (id=981):
syz_usb_connect(0x4, 0x24, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
prctl$PR_SET_MM(0x23, 0x1, &(0x7f00002d5000/0x2000)=nil)

10.222410391s ago: executing program 9 (id=985):
openat$sndseq(0xffffffffffffff9c, 0x0, 0x40)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r4, 0x0, 0x0)
sendmsg(r4, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

8.865948775s ago: executing program 8 (id=992):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
sigaltstack(&(0x7f0000000480)={&(0x7f0000004000)=""/4126, 0x80000001, 0x101e}, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x1, 0x0, 0x0)

8.44090576s ago: executing program 8 (id=994):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40003}, 0x4040850)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r1 = socket(0xa, 0x3, 0xff)
sendmsg$inet6(r1, &(0x7f0000001c00)={&(0x7f0000000000)={0xa, 0xd, 0x7, @mcast2}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000040)="671723d7c6012b", 0x7}, {&(0x7f0000000100)="9e91d93a92dc7c8fff658bb539e2a1485d4c9223a7dfe538a2e2fea2", 0x1c}, {&(0x7f0000000200)='\x00\x00\x00\x00', 0x4}, {&(0x7f0000000140)="23c420", 0x3}], 0x4}, 0x20008b88)

8.371734106s ago: executing program 7 (id=995):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000004780)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{0x0}], 0x1}}], 0x2, 0x0)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0xff, 0x3, [0x7, 0x0, 0x6]}, 0xe)

7.922834876s ago: executing program 8 (id=996):
r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000c80)={0x84, &(0x7f0000000640)={0x40, 0x12}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)

7.769355526s ago: executing program 7 (id=997):
memfd_create(&(0x7f0000000580)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1a\x86i)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\xb8\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97\t#[\xb7\xfa', 0x2)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0)
r1 = socket$inet(0x2, 0x80001, 0x84)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)="1632800e13", 0x5}], 0x1)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8)
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

7.509196242s ago: executing program 7 (id=998):
syz_usb_connect$uac1(0x7, 0x71, &(0x7f0000000040)=ANY=[@ANYBLOB="00406b1d0101"], 0x0)
r0 = syz_usb_connect(0x0, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102882333404f17cf8af4390102030109024500013f064004090442"], &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0})
r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x64, 0x0, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r3 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0x8752, 0x4000, 0xfffffffc, 0x17e})
io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000001380)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1)
r4 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5})
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs2/custom1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1001, 0x1})
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r7 = dup3(r6, r5, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, 0x0)
connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @remote}, 0x2, 0x3, 0x0, 0x1}}, 0x2e)
ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000})
r8 = syz_open_procfs$pagemap(0x0, &(0x7f0000000340))
readv(r8, &(0x7f0000005400)=[{0x0}], 0x1)
migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa)
process_vm_readv(0x0, &(0x7f0000002440)=[{&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000023c0)=""/86, 0x56}], 0x2, &(0x7f0000003640)=[{&(0x7f0000003480)=""/133, 0x85}, {0x0}], 0x2, 0x0)
ioctl$BTRFS_IOC_INO_PATHS(r1, 0xc0389423, &(0x7f0000000300)={0x800, 0x0, [0x15142068, 0x7, 0x1, 0x20c], &(0x7f00000000c0)})
syz_usb_disconnect(r0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect$uac2(0x3, 0xa4, &(0x7f0000002480)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x200c, 0x100b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x3, 0x1, 0x6, 0x30, 0xef, {0x8, 0xb, 0x2, 0x2, 0x1, 0x3, 0x20, 0x4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x0, 0x7, 0x9, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x7, 0x1a, 0x1, 0x1001, 0x9, 0x7fff, 0xb}, @as_header={0x10, 0x24, 0x1, 0x2, 0xf8, 0x0, 0x1, 0x8a, 0x8}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x4, 0xe, 0x0, {0x8, 0x25, 0x1, 0x1, 0xd, 0xe, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x29, 0x7, 0xd, 0x0, 0xff}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x3, 0x67, 0x1, {0x8, 0x25, 0x1, 0x0, 0x3f, 0x54, 0x5}}}}}}}}]}}, &(0x7f0000002940)={0x0, 0x0, 0x11e, &(0x7f00000029c0)={0x5, 0xf, 0x11e, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x7, 0x1, 0x0, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x10, 0x6, 0x47, 0x3}, @generic={0xe5, 0x10, 0x1, "551b8e72e9428c39ec09e6c55e76902768242d8328a05a6567b9ef9959c31af666384daa3a27e7ac0c87a857a16b9afe1631035e7aad6b3994846c8dab49f72451f2a510f79c644470217a5b88d9b605320d0e8377e4ab8f3785b9c8b9cc31e1e83ad783db02e1442de97543fef3dfc2841e2633595e817eae2a6bb681ccb2613a89852be720772d277638b95ba1176ef5ebb7a5df18e027e88a2ce0bf1af9aaf1fddfc270834e5d5bb2200f40c95131f3dfbe340ac47aae13d00469a5cfd3695cc1eb7d4e5dce8d024cf796fcbda3986fda4c6ed68eb25ec10710dcd9201cea90cc"}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "0f1e21d38b1d5cae2eee9919b492c003"}, @ssp_cap={0xc, 0x10, 0xa, 0xd, 0x0, 0x5, 0x770f, 0x2}]}, 0x8, [{0x7, &(0x7f00000026c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00']}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x40b}}, {0x0, 0x0}, {0x4, &(0x7f0000002780)=@lang_id={0x4, 0x3, 0x446}}, {0x81, &(0x7f00000027c0)=ANY=[@ANYBLOB="8103aae0d578504ebdb9d46b673552f0daa132865ab789f494ed73f3cd29e22d702d10d99ddf12c5192b8ac32f2230741be056d54f5d282169947be55b070056b439d4faa8d5b5e5825a53d5add77b7a7a862f4642d5402899df0e0cce8a0b70ff322faa8e4cc0a8be7e71dd54b43a3d5858f6034823e8b7bb8b38c45f606fd6af"]}, {0x4, &(0x7f0000002880)=@lang_id={0x4, 0x3, 0x44b}}, {0x4, &(0x7f00000028c0)=@lang_id={0x4, 0x3, 0x1801}}, {0x4, &(0x7f0000002900)=@lang_id={0x4, 0x3, 0x2409}}]})
syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000100)=ANY=[@ANYBLOB="400c01000000fb86cd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

5.968842925s ago: executing program 9 (id=1000):
socket$netlink(0x10, 0x3, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
userfaultfd(0x80001)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x543ddcb2c1ce9a4c)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0xe07e872420dfefca)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
recvfrom$l2tp6(r2, 0x0, 0x0, 0x61, 0x0, 0x0)
r3 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r3, &(0x7f0000000140)={0x18, 0x2, {0xffff, @dev={0xac, 0x14, 0x14, 0x1c}}}, 0x1e)
r4 = socket$rxrpc(0x21, 0x2, 0x2)
setsockopt$RXRPC_SECURITY_KEYRING(r4, 0x110, 0x2, 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000180))
connect$pptp(r3, &(0x7f0000000280)={0x18, 0x2, {0x4, @remote}}, 0x1e)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x202, 0x0)
ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000040)=0x1)
ioctl$PPPIOCSMRRU(r5, 0x4004743b, &(0x7f0000000300)=0xc7)
write(r5, &(0x7f00000003c0)="0000f289c3848dfe23eb3eca82d185b6ac515d6fd43b7d44c66176d761a646d62ef34e39ed0fe777918c9f05d7fcaa922ffdeabfe81001911c95c213f6a8543cea2d7e5acbf69022931a1ad0153f9944b2f07696f3da8c436c128bea55b4f21bbdbe71ad56821155ed518c677d48766be5eab0a72d567433febcfa86ffbf0f8b776b84384d85cd77b1d903c02a69eb5686c348d1861455eabb4c16984ee9bc87c69df90998858f336251fd4ceb", 0xad)
setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c)
poll(&(0x7f0000000440), 0x0, 0x101)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffcb9}]})
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x8, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x6, 0xf, 0x80000006}, 0x0, 0x0)

4.156931212s ago: executing program 1 (id=1003):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000001080)=ANY=[@ANYBLOB="000086dd03000a0000008d0000006809c2b4006806fffc010000000000000000000000000000ff0200000000000000000000000000015e06000000000000042f109971b5"], 0x9e)

4.14535746s ago: executing program 6 (id=1004):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
sigaltstack(&(0x7f0000000480)={&(0x7f0000004000)=""/4126, 0x80000001, 0x101e}, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x1, 0x0, 0x0)

4.034158241s ago: executing program 6 (id=1005):
r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x2, 0xc1})
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

3.881007883s ago: executing program 6 (id=1006):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000003f40)={0x0, 0x0, &(0x7f0000003f00)={&(0x7f00000001c0)={0x50, 0x1, 0x2, 0x3, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x20000000)

3.870810533s ago: executing program 7 (id=1007):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0xff, 0x3, [0x7, 0x0, 0x6]}, 0xe)

3.681882916s ago: executing program 6 (id=1008):
memfd_create(&(0x7f0000000580)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1a\x86i)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\xb8\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97\t#[\xb7\xfa', 0x2)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0)
r1 = socket$inet(0x2, 0x80001, 0x84)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)="1632800e13", 0x5}], 0x1)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8)
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

3.528950721s ago: executing program 7 (id=1009):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xcd, 0x4, 0xffffffffffffffff, 0x64, 0x7}, 0x3d}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2)
close(r4)
socket(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0000000025c10200000011125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005)

3.438431567s ago: executing program 1 (id=1010):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f0000000280)={'veth1_virt_wifi\x00', {0x2, 0x4e21, @rand_addr=0x64010100}})

3.397855645s ago: executing program 8 (id=1011):
r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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")
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa00000000000000000100008510000006000000180000", @ANYBLOB="00000000000000000d08000000000000180000000000000000000000000000009500000000000000360a02000000000018"], 0x0, 0x9, 0x0, 0x0, 0x41100, 0x8}, 0x94)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40e8662e, &(0x7f00000000c0)={0x43a0, 0x100000000, 0x7ffffffffff00002, 0x1, 0xffffdeff})

3.380775214s ago: executing program 6 (id=1012):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
r1 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, 0x0, &(0x7f0000000380))
setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$TCSETS2(r2, 0x402c542b, &(0x7f0000000240)={0xc2f8, 0xde6, 0x1000002, 0xb1, 0x6, "ed216a2ee808186197b3191fae64299f98c111", 0x81ca, 0xff})
read(r2, &(0x7f0000000000)=""/41, 0x29)
sendmsg$xdp(r1, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040))
close_range(r3, 0xffffffffffffffff, 0x200000000000000)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="660a000000000000611059948c857cb3c1132eac00000000009500000001000000"], &(0x7f0000000540)='GPL\x00'}, 0x94)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r6 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0)
mq_timedsend(r5, 0x0, 0x0, 0x5, 0x0)
close(r4)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)

1.77246707s ago: executing program 1 (id=1013):
syz_usb_connect(0x4, 0x24, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
prctl$PR_SET_MM(0x23, 0x1, &(0x7f00002d5000/0x2000)=nil)

1.651505223s ago: executing program 8 (id=1014):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0)
get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000001000/0x4000)=nil, 0x3)

1.299688384s ago: executing program 8 (id=1015):
r0 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001})

1.252931938s ago: executing program 7 (id=1016):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000140)=0x200000000)
write$vhost_msg_v2(r3, &(0x7f0000000980)={0x2, 0x0, {0x0, 0x4b, 0x0, 0x0, 0x2}}, 0x48)
write$vhost_msg_v2(r3, &(0x7f0000000440)={0x2, 0x0, {&(0x7f0000000180)=""/123, 0x7b, 0x0, 0x1, 0x2}}, 0x48)
write$vhost_msg_v2(r3, &(0x7f0000000200)={0x2, 0x0, {0x0, 0xd, 0x0, 0x0, 0x3}}, 0x48)

1.05328063s ago: executing program 6 (id=1017):
kexec_load(0x3, 0x7, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b612f1f4cbfdfa7bcb9bd2a0fbc8d7786bb68cff61167b98ef0adfbb79545bbb2c409be3adb3b54846920f1b194db5258279e8d06b863d51c0f90cd79ecb1f5ed3c44eb6353c0b451fe3f9b118422addd3f936d8cd5562d6ce55bf378ee8c0d0fc56a4a866c499b04ef61edca4fc06d78b964868e16d82c97be81055b072720c06a8b8b3daad5131e84447a4809d131ce0927ee8ec587e37e0f2df3499327f170b861", 0xdf, 0x5, 0xff}, {&(0x7f0000000200)="d8f3aabb28de3faf55566e010b6ef42f8002b91bf54d78caa3135bc4a5d30a8fd06d1e70130a8d2b505e9abe3aef1de2219df6f5f695131fe4fc01630cb7751927628d8d7ec59d998200794f89eea832f53f0f9aa4c91322544bc7f07e8c", 0x5e, 0x5, 0x4}, {0x0, 0x0, 0x100000000000, 0x8}, {&(0x7f0000000340)="8c4e55be8948c65379def4df90ce301f71e7d4e4921490b3aacd4082ccf6531bb82dbd4d13dbfbeb16dd11b3c041c780b7caed488a35c2a00906fbd0e2fa", 0x3e, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}, {&(0x7f0000000480), 0x0, 0x2, 0xfffffffffffffffa}, {&(0x7f00000004c0)="fd7cd1d51fb9987e67d12dded82fd30b5e7675f10da30291367bede16a4fe296961baf3caee5bd5c0d76b25c3de77c56ddefc936fa712ec3d7e51f4b16e682d3ee59b2abf6c05927c1edb91d54f66cf99928f710cf98acec87a3d75a6388bab3c5a1474d29cae1f0fd92cde6f444bf490f27f37e198aa55b403df846ce1732f7cf4c12d92aece1289b4b10b7d84532a07762548e3f3915b6575e8ef8130395476b9a721a7668c608c4d2f70aee2be4ae96ff0e5925b138fec99f91f19d8618037fe2842d248c8d44f425e54da4a668059f5124222cb4955f073d318b2f0dcecec611448d4ec0fd6b9bd0eac6bea1", 0xee, 0x5, 0x6}], 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="4274aa814c8f6ea8d8db43178dd2f41ef596a3ca46", 0x15}, {&(0x7f0000000280)="da3b7d7035cdbd35bccc23a2f8164fe26ad17c1668bf60cc412d60d7b02fe70f0d4c385a653d469c0888c116c5e9393ca029e477f71c7707c0e59c992ef8bb099330a50fb6057761ab0f200736ceae852a03caf381f413af6c96075ecb03b216edfcdf6142457f01689d1141660d64a06272cf6d7741d88888d2c4a16b91149c931132847fb96d3d02", 0x89}, {&(0x7f0000000600)="1a13a7837ea8ca56a91f616de628b8b1b2107d046bccc3025bbe70905237ffee5666e0e28cfda9249a7beaeaab10864089fb7c447ce7416df7c0aea488b69d959465338a35aabfb0ed3524428b68945f0a2c8f90e1ced4718c7695aed1e852be6f9a23087af497642cd2560ef1e10729", 0x70}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78add2ab0812de906e5545585d6aadca938d5a62632604101886bd45bc15550815c5dcec420b547b43f88b56489e54d47307371d68817c7eca00a16bce0ea94917082d622301673217c8ca26b5a362745ea01486a2ba576eb6601dfa400bb8", 0xb6}], 0x4}, 0x41)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348", 0xf}], 0x2, 0x0, 0x0, 0x10}, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x5, 0x12)
r2 = socket$alg(0x26, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33"], 0xd)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

660.443814ms ago: executing program 9 (id=1018):
r0 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d4"])
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x1, @empty, 0xfffffffc}, 0x1c)
listen(0xffffffffffffffff, 0x8)
syz_emit_ethernet(0x4a, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6056040000140600fe8000000000000000000000000000aaff02000000000000000000000000000100004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[<r2=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, 0x0)
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r1, 0xc01864b0, &(0x7f0000000080)={r2, 0x0, 0x0, 0x0, 0x4})
close(r1)

0s ago: executing program 9 (id=1019):
r0 = socket(0x40000000015, 0x5, 0x0)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)}, {&(0x7f0000000280)="da3b7d7035cdbd35bccc23a2f8164fe26ad17c1668bf60cc412d60d7b02fe70f0d4c385a653d469c0888c116c5e9393ca029e477f71c7707c0e59c992ef8bb099330a50fb6057761ab0f200736ceae852a03caf381f413af6c96075ecb03b216edfcdf6142457f01689d1141660d64a06272cf6d", 0x74}, {&(0x7f0000000600)="1a13a7837ea8ca56a91f616de628b8b1b2107d046bccc3025bbe70905237ffee5666e0e28cfda9249a7beaeaab10864089fb7c447ce7416df7c0aea488b69d959465338a35aabfb0ed3524428b68945f0a2c8f90e1ced4718c7695aed1e852be6f9a23087af497642cd2560ef1e10729", 0x70}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78add2ab0812de906e5545585d6aadca938d5a62632604101886bd45bc15550815c5dcec420b547b43f88b56489e54d47307371d68817c7eca00a16bce0ea94917082d622301673217c8ca26b5a362745ea0", 0xa9}], 0x4}, 0x41)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x5, 0x12)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33"], 0xd)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

kernel console output (not intermixed with test programs):

9] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  473.629739][ T5629] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  473.650403][ T5629] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  473.651252][ T5629] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  473.786144][   T44] bridge_slave_1: left allmulticast mode
[  473.786176][   T44] bridge_slave_1: left promiscuous mode
[  473.789958][   T44] bridge0: port 2(bridge_slave_1) entered disabled state
[  473.967236][   T44] bridge_slave_0: left allmulticast mode
[  473.967271][   T44] bridge_slave_0: left promiscuous mode
[  473.967551][   T44] bridge0: port 1(bridge_slave_0) entered disabled state
[  473.994986][ T5630] Bluetooth: hci1: command tx timeout
[  474.511579][   T44] bridge_slave_1: left allmulticast mode
[  474.511612][   T44] bridge_slave_1: left promiscuous mode
[  474.511866][   T44] bridge0: port 2(bridge_slave_1) entered disabled state
[  474.819332][   T44] bridge_slave_0: left allmulticast mode
[  474.819395][   T44] bridge_slave_0: left promiscuous mode
[  474.830031][   T44] bridge0: port 1(bridge_slave_0) entered disabled state
[  475.191063][   T44] bridge_slave_1: left allmulticast mode
[  475.191130][   T44] bridge_slave_1: left promiscuous mode
[  475.227459][   T44] bridge0: port 2(bridge_slave_1) entered disabled state
[  475.385093][   T44] bridge_slave_0: left allmulticast mode
[  475.385117][   T44] bridge_slave_0: left promiscuous mode
[  475.385332][   T44] bridge0: port 1(bridge_slave_0) entered disabled state
[  475.834997][ T5630] Bluetooth: hci3: command tx timeout
[  476.086088][ T5630] Bluetooth: hci1: command tx timeout
[  476.546162][   T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  476.624914][   T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  476.666014][   T44] bond0 (unregistering): Released all slaves
[  477.224609][   T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  477.304961][   T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  477.350152][   T44] bond0 (unregistering): Released all slaves
[  477.916493][ T5630] Bluetooth: hci3: command tx timeout
[  480.000609][ T5630] Bluetooth: hci3: command tx timeout
[  480.844739][   T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  480.925435][   T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  480.967076][   T44] bond0 (unregistering): Released all slaves
[  481.109287][ T5277] 8021q: adding VLAN 0 to HW filter on device eth12
[  481.779725][ T8468] bridge0: port 1(bridge_slave_0) entered blocking state
[  481.779990][ T8468] bridge0: port 1(bridge_slave_0) entered disabled state
[  481.780286][ T8468] bridge_slave_0: entered allmulticast mode
[  481.783620][ T8468] bridge_slave_0: entered promiscuous mode
[  481.860922][ T8468] bridge0: port 2(bridge_slave_1) entered blocking state
[  481.861258][ T8468] bridge0: port 2(bridge_slave_1) entered disabled state
[  481.861544][ T8468] bridge_slave_1: entered allmulticast mode
[  481.885480][ T8468] bridge_slave_1: entered promiscuous mode
[  482.080359][ T5630] Bluetooth: hci3: command tx timeout
[  482.319206][ T8468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  482.387118][ T8468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  482.630903][ T8597] hub 8-0:1.0: USB hub found
[  482.639722][ T8597] hub 8-0:1.0: 1 port detected
[  484.095564][ T8468] team0: Port device team_slave_0 added
[  484.124694][ T8468] team0: Port device team_slave_1 added
[  484.649542][ T8468] batman_adv: batadv0: Adding interface: batadv_slave_0
[  484.649558][ T8468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  484.649578][ T8468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  484.728862][ T8468] batman_adv: batadv0: Adding interface: batadv_slave_1
[  484.728877][ T8468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  484.728902][ T8468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  484.885260][ T5277] 8021q: adding VLAN 0 to HW filter on device eth13
[  485.679504][ T8468] hsr_slave_0: entered promiscuous mode
[  485.683381][ T8468] hsr_slave_1: entered promiscuous mode
[  485.690865][ T8468] debugfs: 'hsr0' already exists in 'hsr'
[  485.690888][ T8468] Cannot create hsr debugfs directory
[  488.580875][ T8694] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available
[  488.937923][ T8199] 8021q: adding VLAN 0 to HW filter on device batadv0
[  490.307014][ T8406] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  490.347484][ T8406] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  490.483313][ T8406] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  490.547464][ T8406] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  490.577530][ T8406] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  490.633168][ T8406] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  490.932376][ T8406] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  490.983682][ T8406] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  491.033093][ T8542] bridge0: port 1(bridge_slave_0) entered blocking state
[  491.033283][ T8542] bridge0: port 1(bridge_slave_0) entered disabled state
[  491.033534][ T8542] bridge_slave_0: entered allmulticast mode
[  491.046624][ T8542] bridge_slave_0: entered promiscuous mode
[  491.092345][ T8542] bridge0: port 2(bridge_slave_1) entered blocking state
[  491.092562][ T8542] bridge0: port 2(bridge_slave_1) entered disabled state
[  491.092837][ T8542] bridge_slave_1: entered allmulticast mode
[  491.116689][ T8542] bridge_slave_1: entered promiscuous mode
[  491.265199][   T44] hsr_slave_0: left promiscuous mode
[  491.305963][   T44] hsr_slave_1: left promiscuous mode
[  491.306687][   T44] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  491.306718][   T44] batman_adv: batadv0: Removing interface: batadv_slave_0
[  491.335273][   T44] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  491.335298][   T44] batman_adv: batadv0: Removing interface: batadv_slave_1
[  491.504297][   T44] hsr_slave_0: left promiscuous mode
[  491.524775][   T44] hsr_slave_1: left promiscuous mode
[  491.525806][   T44] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  491.525828][   T44] batman_adv: batadv0: Removing interface: batadv_slave_0
[  491.575306][   T44] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  491.575332][   T44] batman_adv: batadv0: Removing interface: batadv_slave_1
[  491.884253][   T44] hsr_slave_0: left promiscuous mode
[  491.924259][   T44] hsr_slave_1: left promiscuous mode
[  491.925716][   T44] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  491.925733][   T44] batman_adv: batadv0: Removing interface: batadv_slave_0
[  492.265314][   T44] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  492.265342][   T44] batman_adv: batadv0: Removing interface: batadv_slave_1
[  492.801391][ T8748] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available
[  493.046793][   T44] veth1_macvtap: left promiscuous mode
[  493.046855][   T44] veth0_macvtap: left promiscuous mode
[  493.047010][   T44] veth1_vlan: left promiscuous mode
[  493.047117][   T44] veth0_vlan: left promiscuous mode
[  493.242082][ T8752] comedi comedi3: pcl818: I/O port conflict (0x100,16)
[  494.103587][   T44] veth1_macvtap: left promiscuous mode
[  494.107327][ T5629] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  494.145857][   T44] veth0_macvtap: left promiscuous mode
[  494.146158][   T44] veth1_vlan: left promiscuous mode
[  494.146338][   T44] veth0_vlan: left promiscuous mode
[  494.160816][ T5629] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  494.162553][ T5629] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  494.163517][ T5629] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  494.172841][ T5629] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  495.135457][   T44] veth1_macvtap: left promiscuous mode
[  495.135561][   T44] veth0_macvtap: left promiscuous mode
[  495.135849][   T44] veth1_vlan: left promiscuous mode
[  495.138989][   T44] veth0_vlan: left promiscuous mode
[  496.882963][ T5630] Bluetooth: hci4: command tx timeout
[  498.954195][ T5630] Bluetooth: hci4: command tx timeout
[  499.574817][   T44] team0 (unregistering): Port device team_slave_1 removed
[  500.636565][   T44] team0 (unregistering): Port device team_slave_0 removed
[  501.034519][ T5630] Bluetooth: hci4: command tx timeout
[  501.358434][ T1336] ieee802154 phy0 wpan0: encryption failed: -22
[  501.358531][ T1336] ieee802154 phy1 wpan1: encryption failed: -22
[  502.364742][   T44] team0 (unregistering): Port device team_slave_1 removed
[  502.424934][   T44] team0 (unregistering): Port device team_slave_0 removed
[  503.498621][ T5630] Bluetooth: hci4: command tx timeout
[  503.874185][ T1009] usb 5-1: new full-speed USB device number 42 using dummy_hcd
[  504.043272][ T1009] usb 5-1: config 0 has an invalid descriptor of length 64, skipping remainder of the config
[  504.057531][ T1009] usb 5-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24
[  504.057558][ T1009] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  504.057576][ T1009] usb 5-1: Product: syz
[  504.057588][ T1009] usb 5-1: Manufacturer: syz
[  504.057601][ T1009] usb 5-1: SerialNumber: syz
[  504.093113][ T1009] usb 5-1: config 0 descriptor??
[  504.119912][ T1009] powermate 5-1:0.0: probe with driver powermate failed with error -22
[  504.349568][ T1009] usb 5-1: USB disconnect, device number 42
[  504.804827][   T44] team0 (unregistering): Port device team_slave_1 removed
[  504.846287][   T44] team0 (unregistering): Port device team_slave_0 removed
[  506.477031][ T8542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  506.506716][ T8542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  506.661839][ T8542] team0: Port device team_slave_0 added
[  506.759390][ T8542] team0: Port device team_slave_1 added
[  506.899078][ T8812] loop4: detected capacity change from 0 to 512
[  507.055012][   T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  507.084686][   T57] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  507.169111][   T57] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  507.260383][   T57] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  507.260652][   T57] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  507.288911][   T57] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  507.304423][   T57] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  507.324524][ T2985] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  507.342606][ T6926] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  507.376919][ T2985] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  507.377658][ T2985] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  507.411712][ T2985] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  507.425193][ T2985] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  507.426548][ T2985] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  507.427157][ T2985] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1
[  507.518564][ T8812] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[  507.522617][ T8812] EXT4-fs (loop4): 1 truncate cleaned up
[  507.541383][ T8812] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  507.541566][ T6926] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  507.541835][   T57] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  507.597077][ T2985] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  507.648348][   T13] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  507.746152][ T6926] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  507.819417][ T5616] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  507.918445][ T5277] 8021q: adding VLAN 0 to HW filter on device eth14
[  508.016191][ T6591] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1
[  508.047329][ T5616] __loop_clr_fd(loop4) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  508.327296][ T8542] batman_adv: batadv0: Adding interface: batadv_slave_0
[  508.327313][ T8542] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  508.327336][ T8542] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  508.332688][ T8542] batman_adv: batadv0: Adding interface: batadv_slave_1
[  508.332702][ T8542] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  508.332724][ T8542] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  508.485703][ T7647] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[  508.519573][ T8542] hsr_slave_0: entered promiscuous mode
[  508.520773][ T8542] hsr_slave_1: entered promiscuous mode
[  508.654257][ T7647] usb 5-1: Using ep0 maxpacket: 16
[  508.656019][ T7647] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  508.656067][ T7647] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  508.656092][ T7647] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  508.656111][ T7647] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  508.656132][ T7647] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  508.657244][ T7647] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  508.657267][ T7647] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  508.657285][ T7647] usb 5-1: Manufacturer: syz
[  508.770008][ T7647] usb 5-1: config 0 descriptor??
[  509.114217][ T7647] rc_core: IR keymap rc-hauppauge not found
[  509.114235][ T7647] Registered IR keymap rc-empty
[  509.122141][ T7647] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  509.135562][ T7647] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  509.174561][ T7647] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  509.177863][ T7647] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input9
[  509.307651][ T7647] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  509.326968][ T7647] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  509.367825][ T7647] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  509.384643][ T7647] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  509.404710][ T7647] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  509.451406][ T7647] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  509.465826][ T7647] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  509.494629][ T7647] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  509.515649][ T7647] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  509.535302][ T7647] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  509.560540][ T7647] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  509.560562][ T7647] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  509.586574][ T7647] usb 5-1: USB disconnect, device number 43
[  509.894852][ T5277] 8021q: adding VLAN 0 to HW filter on device eth15
[  510.120414][ T8468] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  510.195092][ T8468] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  510.232118][ T8468] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  510.282886][ T8468] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  510.320510][ T8406] 8021q: adding VLAN 0 to HW filter on device bond0
[  510.321493][ T8468] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  510.422895][ T8468] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  510.650623][ T8468] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  510.710608][ T8468] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  511.117941][ T8406] 8021q: adding VLAN 0 to HW filter on device team0
[  511.242221][ T3065] bridge0: port 1(bridge_slave_0) entered blocking state
[  511.252036][ T3065] bridge0: port 1(bridge_slave_0) entered forwarding state
[  511.647773][ T6926] bridge0: port 2(bridge_slave_1) entered blocking state
[  511.648263][ T6926] bridge0: port 2(bridge_slave_1) entered forwarding state
[  511.690060][ T8754] bridge0: port 1(bridge_slave_0) entered blocking state
[  511.690313][ T8754] bridge0: port 1(bridge_slave_0) entered disabled state
[  511.690534][ T8754] bridge_slave_0: entered allmulticast mode
[  511.716622][ T8754] bridge_slave_0: entered promiscuous mode
[  511.738450][ T8754] bridge0: port 2(bridge_slave_1) entered blocking state
[  511.739372][ T8754] bridge0: port 2(bridge_slave_1) entered disabled state
[  511.739645][ T8754] bridge_slave_1: entered allmulticast mode
[  511.742844][ T8754] bridge_slave_1: entered promiscuous mode
[  512.202254][ T8754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  512.207543][ T5277] 8021q: adding VLAN 0 to HW filter on device eth16
[  512.225402][ T8754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  512.300800][ T8754] team0: Port device team_slave_0 added
[  512.317934][ T8754] team0: Port device team_slave_1 added
[  512.431514][ T8754] batman_adv: batadv0: Adding interface: batadv_slave_0
[  512.431525][ T8754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  512.431546][ T8754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  512.515932][ T8754] batman_adv: batadv0: Adding interface: batadv_slave_1
[  512.515947][ T8754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  512.515973][ T8754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  512.758915][   T44] IPVS: stop unused estimator thread 0...
[  512.764887][   T44] IPVS: stop unused estimator thread 0...
[  512.771645][   T44] IPVS: stop unused estimator thread 0...
[  513.122060][ T8754] hsr_slave_0: entered promiscuous mode
[  513.133736][ T8754] hsr_slave_1: entered promiscuous mode
[  513.142417][ T8754] debugfs: 'hsr0' already exists in 'hsr'
[  513.142440][ T8754] Cannot create hsr debugfs directory
[  513.412362][ T5277] 8021q: adding VLAN 0 to HW filter on device eth17
[  513.496609][ T8468] 8021q: adding VLAN 0 to HW filter on device bond0
[  514.650765][ T8542] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  514.693827][ T8542] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  514.737169][ T8542] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  514.782854][ T8542] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  516.126094][ T8542] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  516.173396][ T8542] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  516.201210][ T8542] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  516.230455][ T8542] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  516.306611][ T7647] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[  516.474491][ T7647] usb 5-1: Using ep0 maxpacket: 16
[  516.506216][ T7647] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  516.506253][ T7647] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  516.506267][ T7647] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  516.506278][ T7647] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  516.506289][ T7647] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  516.507314][ T7647] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  516.507338][ T7647] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  516.507356][ T7647] usb 5-1: Manufacturer: syz
[  516.510637][ T7647] usb 5-1: config 0 descriptor??
[  516.707531][ T8468] 8021q: adding VLAN 0 to HW filter on device team0
[  516.810459][ T8406] 8021q: adding VLAN 0 to HW filter on device batadv0
[  516.830372][   T57] bridge0: port 1(bridge_slave_0) entered blocking state
[  516.830605][   T57] bridge0: port 1(bridge_slave_0) entered forwarding state
[  516.845341][ T7647] rc_core: IR keymap rc-hauppauge not found
[  516.845359][ T7647] Registered IR keymap rc-empty
[  516.845506][ T7647] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  516.864369][ T7647] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  516.886867][ T7647] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  516.891628][ T7647] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input10
[  516.921344][ T7647] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  516.944327][ T7647] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  516.964281][ T7647] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  517.011886][ T7647] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  517.025586][ T7647] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  517.045186][ T7647] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  517.064367][ T7647] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  517.084349][ T7647] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  517.114345][ T7647] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  517.137482][ T7647] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  517.209480][ T3065] bridge0: port 2(bridge_slave_1) entered blocking state
[  517.209572][ T3065] bridge0: port 2(bridge_slave_1) entered forwarding state
[  517.213825][ T7647] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  517.213849][ T7647] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  517.343550][ T7647] usb 5-1: USB disconnect, device number 44
[  519.202073][ T5277] 8021q: adding VLAN 0 to HW filter on device eth18
[  519.376314][ T8406] veth0_vlan: entered promiscuous mode
[  519.403799][ T8542] 8021q: adding VLAN 0 to HW filter on device bond0
[  519.540332][   T44] bridge_slave_1: left allmulticast mode
[  519.540365][   T44] bridge_slave_1: left promiscuous mode
[  519.540618][   T44] bridge0: port 2(bridge_slave_1) entered disabled state
[  519.815125][   T44] bridge_slave_0: left allmulticast mode
[  519.815149][   T44] bridge_slave_0: left promiscuous mode
[  519.815340][   T44] bridge0: port 1(bridge_slave_0) entered disabled state
[  520.915783][   T44] bridge_slave_1: left allmulticast mode
[  520.915815][   T44] bridge_slave_1: left promiscuous mode
[  520.916053][   T44] bridge0: port 2(bridge_slave_1) entered disabled state
[  520.929263][ T5629] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  520.961236][ T5629] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  520.986469][ T5629] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  521.013648][ T5629] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  521.021461][ T5629] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  521.147262][   T44] bridge_slave_0: left allmulticast mode
[  521.149278][   T44] bridge_slave_0: left promiscuous mode
[  521.149518][   T44] bridge0: port 1(bridge_slave_0) entered disabled state
[  521.424264][   T44] bridge_slave_1: left allmulticast mode
[  521.424290][   T44] bridge_slave_1: left promiscuous mode
[  521.424456][   T44] bridge0: port 2(bridge_slave_1) entered disabled state
[  521.525745][   T44] bridge_slave_0: left allmulticast mode
[  521.525769][   T44] bridge_slave_0: left promiscuous mode
[  521.525934][   T44] bridge0: port 1(bridge_slave_0) entered disabled state
[  521.744475][   T44] bridge_slave_1: left allmulticast mode
[  521.744509][   T44] bridge_slave_1: left promiscuous mode
[  521.744753][   T44] bridge0: port 2(bridge_slave_1) entered disabled state
[  521.845048][   T44] bridge_slave_0: left allmulticast mode
[  521.845074][   T44] bridge_slave_0: left promiscuous mode
[  521.845245][   T44] bridge0: port 1(bridge_slave_0) entered disabled state
[  522.795047][   T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  522.856290][   T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  522.896613][   T44] bond0 (unregistering): Released all slaves
[  523.114552][ T5630] Bluetooth: hci5: command tx timeout
[  523.434845][   T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  523.496458][   T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  523.535934][   T44] bond0 (unregistering): Released all slaves
[  524.114721][   T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  524.235913][   T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  524.296272][   T44] bond0 (unregistering): Released all slaves
[  524.625020][   T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  524.725069][   T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  524.805657][   T44] bond0 (unregistering): Released all slaves
[  525.195623][ T5630] Bluetooth: hci5: command tx timeout
[  525.409905][ T8542] 8021q: adding VLAN 0 to HW filter on device team0
[  525.560018][ T6907] bridge0: port 1(bridge_slave_0) entered blocking state
[  525.560174][ T6907] bridge0: port 1(bridge_slave_0) entered forwarding state
[  526.175814][ T6907] bridge0: port 2(bridge_slave_1) entered blocking state
[  526.175955][ T6907] bridge0: port 2(bridge_slave_1) entered forwarding state
[  526.844182][   T44] hsr_slave_0: left promiscuous mode
[  526.889928][   T44] hsr_slave_1: left promiscuous mode
[  526.890952][   T44] batman_adv: batadv0: Removing interface: batadv_slave_0
[  526.925039][   T44] batman_adv: batadv0: Removing interface: batadv_slave_1
[  527.134166][   T44] hsr_slave_0: left promiscuous mode
[  527.174274][   T44] hsr_slave_1: left promiscuous mode
[  527.175155][   T44] batman_adv: batadv0: Removing interface: batadv_slave_0
[  527.217984][   T44] batman_adv: batadv0: Removing interface: batadv_slave_1
[  527.284317][ T5630] Bluetooth: hci5: command tx timeout
[  527.394136][   T44] hsr_slave_0: left promiscuous mode
[  527.450855][ T5629] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  527.477306][   T44] hsr_slave_1: left promiscuous mode
[  527.479891][   T44] batman_adv: batadv0: Removing interface: batadv_slave_0
[  527.488684][ T5629] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  527.499554][ T5629] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  527.504676][   T44] batman_adv: batadv0: Removing interface: batadv_slave_1
[  527.515101][ T5629] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  527.518823][ T5629] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  527.706854][   T44] hsr_slave_0: left promiscuous mode
[  527.744199][   T44] hsr_slave_1: left promiscuous mode
[  527.745309][   T44] batman_adv: batadv0: Removing interface: batadv_slave_0
[  527.784936][   T44] batman_adv: batadv0: Removing interface: batadv_slave_1
[  528.334869][   T44] team0 (unregistering): Port device team_slave_1 removed
[  528.395320][   T44] team0 (unregistering): Port device team_slave_0 removed
[  528.794766][   T44] team0 (unregistering): Port device team_slave_1 removed
[  528.835443][   T44] team0 (unregistering): Port device team_slave_0 removed
[  529.278181][   T44] team0 (unregistering): Port device team_slave_1 removed
[  529.324618][   T44] team0 (unregistering): Port device team_slave_0 removed
[  529.354185][ T5630] Bluetooth: hci5: command tx timeout
[  529.675601][ T5630] Bluetooth: hci2: command tx timeout
[  529.724879][   T44] team0 (unregistering): Port device team_slave_1 removed
[  529.774851][   T44] team0 (unregistering): Port device team_slave_0 removed
[  529.951677][ T8468] 8021q: adding VLAN 0 to HW filter on device batadv0
[  530.066996][ T5277] 8021q: adding VLAN 0 to HW filter on device eth19
[  531.754330][ T5630] Bluetooth: hci2: command tx timeout
[  533.566281][ T5629] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  533.568840][ T5629] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  533.569940][ T5629] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  533.570875][ T5629] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  533.571756][ T5629] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  533.836587][ T5630] Bluetooth: hci2: command tx timeout
[  535.678161][ T5630] Bluetooth: hci1: command tx timeout
[  535.914510][ T5630] Bluetooth: hci2: command tx timeout
[  537.754400][ T5630] Bluetooth: hci1: command tx timeout
[  539.848465][ T5630] Bluetooth: hci1: command tx timeout
[  541.914175][ T5630] Bluetooth: hci1: command tx timeout
[  542.069435][ T5629] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  542.172038][ T5629] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  542.173935][ T5629] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  542.236033][ T5629] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  542.236891][ T5629] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  544.314216][ T5630] Bluetooth: hci6: command tx timeout
[  546.397404][ T5630] Bluetooth: hci6: command tx timeout
[  547.827063][ T5277] 8021q: adding VLAN 0 to HW filter on device eth20
[  547.852087][ T8754] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  547.899581][ T8754] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  547.947764][ T8754] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  547.987489][ T8754] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  548.008810][ T8754] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  548.048736][ T8754] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  548.081598][ T8754] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  548.107789][ T8754] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  548.478614][ T5630] Bluetooth: hci6: command tx timeout
[  548.516621][ T8986] bridge0: port 1(bridge_slave_0) entered blocking state
[  548.516843][ T8986] bridge0: port 1(bridge_slave_0) entered disabled state
[  548.517177][ T8986] bridge_slave_0: entered allmulticast mode
[  548.518935][ T8986] bridge_slave_0: entered promiscuous mode
[  548.588984][ T8986] bridge0: port 2(bridge_slave_1) entered blocking state
[  548.589237][ T8986] bridge0: port 2(bridge_slave_1) entered disabled state
[  548.589488][ T8986] bridge_slave_1: entered allmulticast mode
[  548.592771][ T8986] bridge_slave_1: entered promiscuous mode
[  548.798264][ T8986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  548.898288][ T8986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  549.030131][ T9040] bridge0: port 1(bridge_slave_0) entered blocking state
[  549.030328][ T9040] bridge0: port 1(bridge_slave_0) entered disabled state
[  549.030525][ T9040] bridge_slave_0: entered allmulticast mode
[  549.032406][ T9040] bridge_slave_0: entered promiscuous mode
[  549.068258][ T9040] bridge0: port 2(bridge_slave_1) entered blocking state
[  549.068441][ T9040] bridge0: port 2(bridge_slave_1) entered disabled state
[  549.068593][ T9040] bridge_slave_1: entered allmulticast mode
[  549.070439][ T9040] bridge_slave_1: entered promiscuous mode
[  549.075087][ T8986] team0: Port device team_slave_0 added
[  549.142994][ T8986] team0: Port device team_slave_1 added
[  549.279073][ T9040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  549.350020][ T9047] bridge0: port 1(bridge_slave_0) entered blocking state
[  549.350217][ T9047] bridge0: port 1(bridge_slave_0) entered disabled state
[  549.350387][ T9047] bridge_slave_0: entered allmulticast mode
[  549.352146][ T9047] bridge_slave_0: entered promiscuous mode
[  549.406591][ T9040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  549.408354][ T8986] batman_adv: batadv0: Adding interface: batadv_slave_0
[  549.408368][ T8986] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  549.408392][ T8986] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  549.474532][ T9047] bridge0: port 2(bridge_slave_1) entered blocking state
[  549.474708][ T9047] bridge0: port 2(bridge_slave_1) entered disabled state
[  549.474898][ T9047] bridge_slave_1: entered allmulticast mode
[  549.476744][ T9047] bridge_slave_1: entered promiscuous mode
[  549.493072][ T8986] batman_adv: batadv0: Adding interface: batadv_slave_1
[  549.493082][ T8986] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  549.493095][ T8986] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  549.618189][ T9040] team0: Port device team_slave_0 added
[  549.647808][ T9047] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  549.650915][ T9040] team0: Port device team_slave_1 added
[  549.651819][ T9052] bridge0: port 1(bridge_slave_0) entered blocking state
[  549.652120][ T9052] bridge0: port 1(bridge_slave_0) entered disabled state
[  549.652271][ T9052] bridge_slave_0: entered allmulticast mode
[  549.661659][ T9052] bridge_slave_0: entered promiscuous mode
[  549.696934][ T9047] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  549.746169][ T9052] bridge0: port 2(bridge_slave_1) entered blocking state
[  549.746346][ T9052] bridge0: port 2(bridge_slave_1) entered disabled state
[  549.746547][ T9052] bridge_slave_1: entered allmulticast mode
[  549.748359][ T9052] bridge_slave_1: entered promiscuous mode
[  550.256875][ T9040] batman_adv: batadv0: Adding interface: batadv_slave_0
[  550.256886][ T9040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  550.256901][ T9040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  550.288478][ T8986] hsr_slave_0: entered promiscuous mode
[  550.290609][ T8986] hsr_slave_1: entered promiscuous mode
[  550.292216][ T8986] debugfs: 'hsr0' already exists in 'hsr'
[  550.292237][ T8986] Cannot create hsr debugfs directory
[  550.309638][ T9047] team0: Port device team_slave_0 added
[  550.317287][ T9040] batman_adv: batadv0: Adding interface: batadv_slave_1
[  550.317300][ T9040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  550.317323][ T9040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  550.332272][ T9052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  550.346736][ T9047] team0: Port device team_slave_1 added
[  550.381622][ T9052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  550.490404][ T9047] batman_adv: batadv0: Adding interface: batadv_slave_0
[  550.490419][ T9047] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  550.490449][ T9047] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  550.554251][ T5630] Bluetooth: hci6: command tx timeout
[  550.599567][ T9047] batman_adv: batadv0: Adding interface: batadv_slave_1
[  550.599578][ T9047] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  550.599592][ T9047] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  550.603023][ T9052] team0: Port device team_slave_0 added
[  550.707850][ T9052] team0: Port device team_slave_1 added
[  550.723287][ T9040] hsr_slave_0: entered promiscuous mode
[  550.730373][ T9040] hsr_slave_1: entered promiscuous mode
[  550.731448][ T9040] debugfs: 'hsr0' already exists in 'hsr'
[  550.731469][ T9040] Cannot create hsr debugfs directory
[  550.837663][ T9052] batman_adv: batadv0: Adding interface: batadv_slave_0
[  550.837674][ T9052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  550.837688][ T9052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  550.913421][ T9052] batman_adv: batadv0: Adding interface: batadv_slave_1
[  550.913433][ T9052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  550.913449][ T9052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  550.965304][ T9047] hsr_slave_0: entered promiscuous mode
[  550.966587][ T9047] hsr_slave_1: entered promiscuous mode
[  550.967560][ T9047] debugfs: 'hsr0' already exists in 'hsr'
[  550.967582][ T9047] Cannot create hsr debugfs directory
[  551.537056][ T9052] hsr_slave_0: entered promiscuous mode
[  551.538746][ T9052] hsr_slave_1: entered promiscuous mode
[  551.546214][ T9052] debugfs: 'hsr0' already exists in 'hsr'
[  551.546240][ T9052] Cannot create hsr debugfs directory
[  551.597569][ T8754] 8021q: adding VLAN 0 to HW filter on device bond0
[  552.466958][ T8754] 8021q: adding VLAN 0 to HW filter on device team0
[  553.012383][   T57] bridge0: port 1(bridge_slave_0) entered blocking state
[  553.012533][   T57] bridge0: port 1(bridge_slave_0) entered forwarding state
[  553.270046][ T1311] bridge0: port 2(bridge_slave_1) entered blocking state
[  553.270294][ T1311] bridge0: port 2(bridge_slave_1) entered forwarding state
[  554.518886][ T5629] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  554.609852][ T5629] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  554.623119][ T5629] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  554.653217][ T5629] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  554.653940][ T5629] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  556.432040][   T44] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  556.806250][ T5629] Bluetooth: hci0: command tx timeout
[  556.972000][   T44] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  557.422479][   T44] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  557.480891][ T5277] 8021q: adding VLAN 0 to HW filter on device eth21
[  557.769209][   T44] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  557.818823][ T9147] bridge0: port 1(bridge_slave_0) entered blocking state
[  557.819022][ T9147] bridge0: port 1(bridge_slave_0) entered disabled state
[  557.819182][ T9147] bridge_slave_0: entered allmulticast mode
[  557.820948][ T9147] bridge_slave_0: entered promiscuous mode
[  557.826961][ T9147] bridge0: port 2(bridge_slave_1) entered blocking state
[  557.827233][ T9147] bridge0: port 2(bridge_slave_1) entered disabled state
[  557.827485][ T9147] bridge_slave_1: entered allmulticast mode
[  557.830560][ T9147] bridge_slave_1: entered promiscuous mode
[  558.083785][ T9147] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  558.100539][ T9147] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  558.164963][ T9147] team0: Port device team_slave_0 added
[  558.168691][ T9147] team0: Port device team_slave_1 added
[  558.220437][ T9147] batman_adv: batadv0: Adding interface: batadv_slave_0
[  558.220450][ T9147] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  558.220469][ T9147] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  558.223274][ T9147] batman_adv: batadv0: Adding interface: batadv_slave_1
[  558.223283][ T9147] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  558.223296][ T9147] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  558.470105][ T9147] hsr_slave_0: entered promiscuous mode
[  558.471316][ T9147] hsr_slave_1: entered promiscuous mode
[  558.472259][ T9147] debugfs: 'hsr0' already exists in 'hsr'
[  558.472280][ T9147] Cannot create hsr debugfs directory
[  558.874853][ T5629] Bluetooth: hci0: command tx timeout
[  559.205688][   T44] bridge_slave_1: left allmulticast mode
[  559.205736][   T44] bridge_slave_1: left promiscuous mode
[  559.208007][   T44] bridge0: port 2(bridge_slave_1) entered disabled state
[  559.345228][   T44] bridge_slave_0: left allmulticast mode
[  559.345252][   T44] bridge_slave_0: left promiscuous mode
[  559.345418][   T44] bridge0: port 1(bridge_slave_0) entered disabled state
[  559.545151][   T44] bridge_slave_1: left allmulticast mode
[  559.545175][   T44] bridge_slave_1: left promiscuous mode
[  559.545336][   T44] bridge0: port 2(bridge_slave_1) entered disabled state
[  559.665189][   T44] bridge_slave_0: left allmulticast mode
[  559.665213][   T44] bridge_slave_0: left promiscuous mode
[  559.665371][   T44] bridge0: port 1(bridge_slave_0) entered disabled state
[  559.864245][   T44] bridge_slave_1: left allmulticast mode
[  559.864280][   T44] bridge_slave_1: left promiscuous mode
[  559.864543][   T44] bridge0: port 2(bridge_slave_1) entered disabled state
[  559.965178][   T44] bridge_slave_0: left allmulticast mode
[  559.965200][   T44] bridge_slave_0: left promiscuous mode
[  559.965379][   T44] bridge0: port 1(bridge_slave_0) entered disabled state
[  560.185831][   T44] bridge_slave_1: left allmulticast mode
[  560.185867][   T44] bridge_slave_1: left promiscuous mode
[  560.186196][   T44] bridge0: port 2(bridge_slave_1) entered disabled state
[  560.306773][   T44] bridge_slave_0: left allmulticast mode
[  560.306804][   T44] bridge_slave_0: left promiscuous mode
[  560.307183][   T44] bridge0: port 1(bridge_slave_0) entered disabled state
[  560.954241][ T5629] Bluetooth: hci0: command tx timeout
[  561.364666][   T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  561.424904][   T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  561.466490][   T44] bond0 (unregistering): Released all slaves
[  562.055649][   T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  562.134878][   T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  562.158780][   T44] bond0 (unregistering): Released all slaves
[  562.684994][   T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  562.764990][   T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  562.801603][ T1336] ieee802154 phy0 wpan0: encryption failed: -22
[  562.801661][ T1336] ieee802154 phy1 wpan1: encryption failed: -22
[  562.819489][   T44] bond0 (unregistering): Released all slaves
[  563.036032][ T5629] Bluetooth: hci0: command tx timeout
[  563.365033][   T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  563.424796][   T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  563.467363][   T44] bond0 (unregistering): Released all slaves
[  564.965409][ T5277] 8021q: adding VLAN 0 to HW filter on device eth23
[  566.284175][   T44] hsr_slave_0: left promiscuous mode
[  566.324126][   T44] hsr_slave_1: left promiscuous mode
[  566.324953][   T44] batman_adv: batadv0: Removing interface: batadv_slave_0
[  566.365066][   T44] batman_adv: batadv0: Removing interface: batadv_slave_1
[  566.564183][   T44] hsr_slave_0: left promiscuous mode
[  566.584190][   T44] hsr_slave_1: left promiscuous mode
[  566.584908][   T44] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  566.584925][   T44] batman_adv: batadv0: Removing interface: batadv_slave_0
[  566.624945][   T44] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  566.624970][   T44] batman_adv: batadv0: Removing interface: batadv_slave_1
[  566.784176][   T44] hsr_slave_0: left promiscuous mode
[  566.824223][   T44] hsr_slave_1: left promiscuous mode
[  566.824935][   T44] batman_adv: batadv0: Removing interface: batadv_slave_0
[  566.845128][   T44] batman_adv: batadv0: Removing interface: batadv_slave_1
[  567.004259][   T44] hsr_slave_0: left promiscuous mode
[  567.024267][   T44] hsr_slave_1: left promiscuous mode
[  567.024996][   T44] batman_adv: batadv0: Removing interface: batadv_slave_0
[  567.064883][   T44] batman_adv: batadv0: Removing interface: batadv_slave_1
[  567.146892][   T44] veth1_macvtap: left promiscuous mode
[  567.146952][   T44] veth0_macvtap: left promiscuous mode
[  567.147108][   T44] veth1_vlan: left promiscuous mode
[  567.147220][   T44] veth0_vlan: left promiscuous mode
[  567.285922][   T44] veth0_vlan: left promiscuous mode
[  567.874713][   T44] team0 (unregistering): Port device team_slave_1 removed
[  567.925228][   T44] team0 (unregistering): Port device team_slave_0 removed
[  568.484905][   T44] team0 (unregistering): Port device team_slave_1 removed
[  568.526615][   T44] team0 (unregistering): Port device team_slave_0 removed
[  568.936133][   T44] team0 (unregistering): Port device team_slave_1 removed
[  568.974688][   T44] team0 (unregistering): Port device team_slave_0 removed
[  569.419839][   T44] team0 (unregistering): Port device team_slave_1 removed
[  569.454809][   T44] team0 (unregistering): Port device team_slave_0 removed
[  569.696638][ T8986] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  569.727043][ T8986] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  569.741384][ T8986] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  569.779766][ T8986] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  569.786451][ T8986] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  569.826348][ T8986] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  569.999117][ T8986] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  570.102366][ T8986] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  570.286389][ T9040] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  570.340344][ T9040] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  570.353402][ T9040] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  570.416204][ T9040] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  570.453231][ T9040] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  570.503526][ T9040] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  570.554754][ T9040] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  570.628013][ T9040] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  570.661470][ T5277] 8021q: adding VLAN 0 to HW filter on device eth21
[  570.941335][ T9047] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  570.973810][ T9047] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  570.993176][ T9047] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  571.051564][ T9047] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  571.441028][ T9047] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  571.477829][ T9047] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  571.502387][ T9047] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  571.537363][ T9047] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  572.338742][ T8986] 8021q: adding VLAN 0 to HW filter on device bond0
[  572.703334][ T8986] 8021q: adding VLAN 0 to HW filter on device team0
[  572.753380][   T57] bridge0: port 1(bridge_slave_0) entered blocking state
[  572.753611][   T57] bridge0: port 1(bridge_slave_0) entered forwarding state
[  572.787762][ T9040] 8021q: adding VLAN 0 to HW filter on device bond0
[  572.832885][   T57] bridge0: port 2(bridge_slave_1) entered blocking state
[  572.833040][   T57] bridge0: port 2(bridge_slave_1) entered forwarding state
[  572.971570][ T9040] 8021q: adding VLAN 0 to HW filter on device team0
[  573.055349][ T1311] bridge0: port 1(bridge_slave_0) entered blocking state
[  573.055505][ T1311] bridge0: port 1(bridge_slave_0) entered forwarding state
[  573.181852][ T9047] 8021q: adding VLAN 0 to HW filter on device bond0
[  573.347638][ T1017] bridge0: port 2(bridge_slave_1) entered blocking state
[  573.347791][ T1017] bridge0: port 2(bridge_slave_1) entered forwarding state
[  573.420982][ T5277] 8021q: adding VLAN 0 to HW filter on device eth22
[  573.643213][ T9047] 8021q: adding VLAN 0 to HW filter on device team0
[  573.789323][ T1311] bridge0: port 1(bridge_slave_0) entered blocking state
[  573.789494][ T1311] bridge0: port 1(bridge_slave_0) entered forwarding state
[  573.947039][ T6591] bridge0: port 2(bridge_slave_1) entered blocking state
[  573.947181][ T6591] bridge0: port 2(bridge_slave_1) entered forwarding state
[  574.283968][ T9052] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  574.320023][ T9052] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  574.338926][ T9052] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  574.436822][ T9052] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  574.482206][ T9052] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  574.521934][ T9052] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  574.670221][ T9052] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  574.713451][ T9052] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  575.107691][ T9147] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  575.139433][ T9147] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  575.147483][ T9147] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  575.214440][ T9147] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  575.234574][ T9147] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  575.275801][ T9147] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  575.300682][ T9147] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  575.352325][ T9147] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  575.508428][   T44] IPVS: stop unused estimator thread 0...
[  575.770113][ T9040] 8021q: adding VLAN 0 to HW filter on device batadv0
[  575.822022][ T8986] 8021q: adding VLAN 0 to HW filter on device batadv0
[  576.216611][ T9052] 8021q: adding VLAN 0 to HW filter on device bond0
[  576.515923][   T57] bridge_slave_1: left allmulticast mode
[  576.515956][   T57] bridge_slave_1: left promiscuous mode
[  576.516220][   T57] bridge0: port 2(bridge_slave_1) entered disabled state
[  576.675753][   T57] bridge_slave_0: left allmulticast mode
[  576.675782][   T57] bridge_slave_0: left promiscuous mode
[  576.675999][   T57] bridge0: port 1(bridge_slave_0) entered disabled state
[  577.464580][   T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  577.545820][   T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  577.566362][   T57] bond0 (unregistering): Released all slaves
[  577.668825][ T9052] 8021q: adding VLAN 0 to HW filter on device team0
[  577.782533][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  577.782812][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  577.884555][ T9147] 8021q: adding VLAN 0 to HW filter on device bond0
[  577.905949][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  577.906185][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  578.164365][   T57] hsr_slave_0: left promiscuous mode
[  578.204204][   T57] hsr_slave_1: left promiscuous mode
[  578.204859][   T57] batman_adv: batadv0: Removing interface: batadv_slave_0
[  578.246127][   T57] batman_adv: batadv0: Removing interface: batadv_slave_1
[  578.726158][   T57] team0 (unregistering): Port device team_slave_1 removed
[  578.764595][   T57] team0 (unregistering): Port device team_slave_0 removed
[  578.956071][ T9047] 8021q: adding VLAN 0 to HW filter on device batadv0
[  579.050123][ T9147] 8021q: adding VLAN 0 to HW filter on device team0
[  579.171619][ T3065] bridge0: port 1(bridge_slave_0) entered blocking state
[  579.173334][ T3065] bridge0: port 1(bridge_slave_0) entered forwarding state
[  579.226590][ T9040] veth0_vlan: entered promiscuous mode
[  579.350439][ T8986] veth0_vlan: entered promiscuous mode
[  579.370689][ T1017] bridge0: port 2(bridge_slave_1) entered blocking state
[  579.370869][ T1017] bridge0: port 2(bridge_slave_1) entered forwarding state
[  579.557872][ T8986] veth1_vlan: entered promiscuous mode
[  579.574705][ T9040] veth1_vlan: entered promiscuous mode
[  580.052900][ T9040] veth0_macvtap: entered promiscuous mode
[  580.166673][ T8986] veth0_macvtap: entered promiscuous mode
[  580.227954][ T9040] veth1_macvtap: entered promiscuous mode
[  580.240095][ T8986] veth1_macvtap: entered promiscuous mode
[  580.249918][ T9047] veth0_vlan: entered promiscuous mode
[  580.371500][ T9047] veth1_vlan: entered promiscuous mode
[  580.441341][ T9040] batman_adv: batadv0: Interface activated: batadv_slave_0
[  580.467069][ T8986] batman_adv: batadv0: Interface activated: batadv_slave_0
[  580.543120][ T8986] batman_adv: batadv0: Interface activated: batadv_slave_1
[  580.566714][ T9040] batman_adv: batadv0: Interface activated: batadv_slave_1
[  580.647704][ T6591] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  580.669606][ T6591] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  580.673399][ T6591] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  580.683174][ T6591] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  580.690080][ T6591] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  580.718207][ T6591] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  580.756793][ T6591] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  580.782658][   T44] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  581.217351][ T9047] veth0_macvtap: entered promiscuous mode
[  581.245845][ T9052] 8021q: adding VLAN 0 to HW filter on device batadv0
[  581.497589][ T9047] veth1_macvtap: entered promiscuous mode
[  582.000183][ T5630] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  582.062340][ T5630] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  582.063944][ T5630] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  582.069831][ T5630] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  582.089197][ T5630] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  582.295492][ T9047] batman_adv: batadv0: Interface activated: batadv_slave_0
[  582.340695][ T6907] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  582.340715][ T6907] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  582.406333][ T9147] 8021q: adding VLAN 0 to HW filter on device batadv0
[  582.494699][ T9047] batman_adv: batadv0: Interface activated: batadv_slave_1
[  582.603917][ T6907] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  582.781675][ T6907] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  582.856092][ T6907] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  582.860780][ T6907] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  582.881113][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  582.881130][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  583.387845][ T9052] veth0_vlan: entered promiscuous mode
[  584.063224][ T9052] veth1_vlan: entered promiscuous mode
[  584.154256][ T5630] Bluetooth: hci3: command tx timeout
[  584.388551][ T6907] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  584.559201][ T2425] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  584.559220][ T2425] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  585.059881][ T6907] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  585.310206][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  585.310225][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  585.556087][ T6907] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  585.602678][ T9147] veth0_vlan: entered promiscuous mode
[  585.685995][ T9052] veth0_macvtap: entered promiscuous mode
[  585.752609][ T9147] veth1_vlan: entered promiscuous mode
[  585.987712][ T6907] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  586.101857][ T9052] veth1_macvtap: entered promiscuous mode
[  586.234833][ T5630] Bluetooth: hci3: command tx timeout
[  586.410354][ T9052] batman_adv: batadv0: Interface activated: batadv_slave_0
[  586.513172][ T9052] batman_adv: batadv0: Interface activated: batadv_slave_1
[  586.612688][   T44] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  586.613495][   T44] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  586.613721][   T44] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  586.614687][   T44] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  586.661474][ T9147] veth0_macvtap: entered promiscuous mode
[  586.857146][ T9147] veth1_macvtap: entered promiscuous mode
[  588.318291][ T5630] Bluetooth: hci3: command tx timeout
[  588.460479][ T9487] bridge0: port 1(bridge_slave_0) entered blocking state
[  588.465640][ T9487] bridge0: port 1(bridge_slave_0) entered disabled state
[  588.465922][ T9487] bridge_slave_0: entered allmulticast mode
[  588.472783][ T9487] bridge_slave_0: entered promiscuous mode
[  588.590319][ T9487] bridge0: port 2(bridge_slave_1) entered blocking state
[  588.590604][ T9487] bridge0: port 2(bridge_slave_1) entered disabled state
[  588.590876][ T9487] bridge_slave_1: entered allmulticast mode
[  588.613160][ T9487] bridge_slave_1: entered promiscuous mode
[  588.755934][ T6907] bridge_slave_1: left allmulticast mode
[  588.755967][ T6907] bridge_slave_1: left promiscuous mode
[  588.756230][ T6907] bridge0: port 2(bridge_slave_1) entered disabled state
[  588.918042][ T6907] bridge_slave_0: left allmulticast mode
[  588.918074][ T6907] bridge_slave_0: left promiscuous mode
[  588.918309][ T6907] bridge0: port 1(bridge_slave_0) entered disabled state
[  588.962976][ T9658] loop8: detected capacity change from 0 to 256
[  588.973788][ T9658] vfat: Unknown parameter 'gi1/ô-å«IdéîÝã!”'
[  588.988386][ T2425] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  589.007435][ T2425] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  589.026894][ T2425] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  589.031356][ T6591] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  589.032053][ T6591] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  589.032651][ T6591] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  589.068214][ T6591] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  589.068807][ T6591] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  589.074664][   T13] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  589.109205][ T9468] __loop_clr_fd(loop8) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  589.271102][ T9667] loop8: detected capacity change from 0 to 1024
[  589.289348][ T1017] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  589.312273][ T1017] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  589.357929][ T1017] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  589.357980][ T1017] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  589.399221][ T1017] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  589.429208][ T6591] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1
[  589.438968][ T6591] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  589.442246][ T6591] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  589.447440][ T6591] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  589.466508][ T1017] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1
[  589.484790][   T44] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  589.490245][   T44] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1
[  589.519194][   T44] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  589.548974][ T6591] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  589.549022][ T6591] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  589.549045][ T6591] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  589.551065][   T44] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  589.551725][   T44] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  589.552957][   T44] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  589.580516][ T9667] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  589.631378][   T44] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  589.758141][ T9047] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  589.811607][   T44] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1
[  589.824914][   T44] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1
[  589.832438][ T9047] __loop_clr_fd(loop8) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  590.404748][ T5630] Bluetooth: hci3: command tx timeout
[  591.161488][ T6907] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  591.352440][ T6907] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  591.546943][ T6907] bond0 (unregistering): Released all slaves
[  593.286486][ T9147] batman_adv: batadv0: Interface activated: batadv_slave_0
[  594.532954][ T3065] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  594.532973][ T3065] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  594.571539][ T9487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  594.593549][ T9147] batman_adv: batadv0: Interface activated: batadv_slave_1
[  594.640494][ T9487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  594.800066][ T6907] hsr_slave_0: left promiscuous mode
[  594.834511][ T6907] hsr_slave_1: left promiscuous mode
[  594.835552][ T6907] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  594.835575][ T6907] batman_adv: batadv0: Removing interface: batadv_slave_0
[  594.886133][ T6907] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  594.886161][ T6907] batman_adv: batadv0: Removing interface: batadv_slave_1
[  595.063698][ T6907] veth1_macvtap: left promiscuous mode
[  595.063806][ T6907] veth0_macvtap: left promiscuous mode
[  595.065999][ T6907] veth1_vlan: left promiscuous mode
[  595.066177][ T6907] veth0_vlan: left promiscuous mode
[  595.639404][ T9713] loop7: detected capacity change from 0 to 164
[  595.660569][ T3065] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  595.722721][ T3065] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  595.740293][   T13] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  595.742031][   T13] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  595.742630][   T13] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  595.743268][   T13] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  595.745570][ T1311] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  595.747833][   T13] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  595.749594][   T13] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  595.753883][   T13] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  595.898428][ T2985] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  595.910752][ T2985] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  595.943618][ T2425] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  595.970600][ T2985] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  596.034239][ T1311] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  596.111279][   T38] kauditd_printk_skb: 13 callbacks suppressed
[  596.111295][   T38] audit: type=1326 audit(1779165119.116:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9714 comm="syz.8.807" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73bb69ce59 code=0x7ffc0000
[  596.111425][   T38] audit: type=1326 audit(1779165119.116:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9714 comm="syz.8.807" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73bb69ce59 code=0x7ffc0000
[  596.112483][   T38] audit: type=1326 audit(1779165119.116:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9714 comm="syz.8.807" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73bb69ce59 code=0x7ffc0000
[  596.112670][   T38] audit: type=1326 audit(1779165119.116:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9714 comm="syz.8.807" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73bb69ce59 code=0x7ffc0000
[  596.112712][   T38] audit: type=1326 audit(1779165119.116:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9714 comm="syz.8.807" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f73bb69ce59 code=0x7ffc0000
[  596.112987][   T38] audit: type=1326 audit(1779165119.116:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9714 comm="syz.8.807" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73bb69ce59 code=0x7ffc0000
[  596.113144][   T38] audit: type=1326 audit(1779165119.116:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9714 comm="syz.8.807" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73bb69ce59 code=0x7ffc0000
[  596.119562][   T38] audit: type=1326 audit(1779165119.116:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9714 comm="syz.8.807" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73bb69ce59 code=0x7ffc0000
[  596.119606][   T38] audit: type=1326 audit(1779165119.126:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9714 comm="syz.8.807" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73bb69ce59 code=0x7ffc0000
[  596.119643][   T38] audit: type=1326 audit(1779165119.126:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9714 comm="syz.8.807" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f73bb69ce59 code=0x7ffc0000
[  596.248895][ T9040] __loop_clr_fd(loop7) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  596.311174][ T9718] loop8: detected capacity change from 0 to 256
[  596.319275][ T9718] vfat: Unknown parameter 'gi1/ô-å«IdéîÝã!”'
[  596.319700][ T9718] __loop_clr_fd(loop8) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  596.553193][ T9723] loop8: detected capacity change from 0 to 512
[  596.556979][ T9723] EXT4-fs: Ignoring removed bh option
[  596.581611][ T2985] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  596.583111][ T2985] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  596.601035][ T1311] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  596.647164][   T64] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  596.647222][   T64] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  596.648082][   T64] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  596.648717][   T64] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  596.649363][   T64] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  596.649985][ T2985] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  596.650017][ T2985] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  596.650038][ T2985] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  596.650741][   T64] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  596.651372][ T2985] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  596.668697][ T2985] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  596.671896][ T6907] team0 (unregistering): Port device team_slave_1 removed
[  596.766633][   T64] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  596.767248][ T6907] team0 (unregistering): Port device team_slave_0 removed
[  596.771001][ T2985] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  596.771145][ T9723] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  596.771160][ T9723] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended
[  596.771173][ T9723] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem
[  596.831192][   T64] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  596.860418][   T64] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  596.861383][ T2985] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  596.863674][   T64] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  596.867243][ T9723] EXT4-fs (loop8): warning: mounting unchecked fs, running e2fsck is recommended
[  596.880429][ T2985] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1
[  596.887910][ T9723] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006]
[  596.909806][ T2985] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  596.910528][ T2985] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  596.911248][ T2985] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  596.912115][ T2985] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  596.913754][   T64] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  596.939776][   T64] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  597.140296][ T9723] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  597.179479][ T9723] fscrypt (loop8, inode 12): Error -61 getting encryption context
[  597.276280][ T9047] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  597.343759][   T13] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1
[  597.380492][ T9047] __loop_clr_fd(loop8) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  597.471171][ T2985] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  597.479784][ T9487] team0: Port device team_slave_0 added
[  597.489437][ T2985] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  597.502468][ T9487] team0: Port device team_slave_1 added
[  597.510215][ T2985] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  597.511725][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  597.511740][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  597.548453][ T2985] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  597.954136][ T5625] usb 9-1: new full-speed USB device number 2 using dummy_hcd
[  598.106392][ T5625] usb 9-1: config 0 has an invalid descriptor of length 64, skipping remainder of the config
[  598.121032][ T5625] usb 9-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24
[  598.121058][ T5625] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  598.121076][ T5625] usb 9-1: Product: syz
[  598.121089][ T5625] usb 9-1: Manufacturer: syz
[  598.121101][ T5625] usb 9-1: SerialNumber: syz
[  598.228622][ T5625] usb 9-1: config 0 descriptor??
[  598.252732][ T5625] powermate 9-1:0.0: probe with driver powermate failed with error -22
[  598.460224][ T5625] usb 9-1: USB disconnect, device number 2
[  598.735959][ T9487] batman_adv: batadv0: Adding interface: batadv_slave_0
[  598.735974][ T9487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  598.735993][ T9487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  598.872325][ T9487] batman_adv: batadv0: Adding interface: batadv_slave_1
[  598.872340][ T9487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  598.872360][ T9487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  602.887041][ T5631] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  602.922077][ T9487] hsr_slave_0: entered promiscuous mode
[  602.941546][ T9771] loop7: detected capacity change from 0 to 1024
[  602.942393][ T9487] hsr_slave_1: entered promiscuous mode
[  602.949241][ T9771] EXT4-fs: Ignoring removed bh option
[  602.984230][ T1017] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  602.984553][ T1017] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  602.985751][ T1017] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  602.986927][ T1017] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1
[  602.993639][ T2985] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  602.993655][ T2985] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  603.000536][ T1017] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  603.041042][ T2425] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1
[  603.152611][ T6926] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  603.152746][ T6926] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  603.172240][   T44] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1
[  603.399637][ T2425] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  603.399686][ T2425] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  603.433762][ T1017] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  603.433813][ T1017] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  603.469918][ T9771] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  603.493865][   T44] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  603.505891][ T5277] 8021q: adding VLAN 0 to HW filter on device eth4
[  603.506647][ T2985] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  603.579004][ T6926] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  603.589417][ T6926] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  603.589465][ T6926] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  603.589488][ T6926] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  603.590236][ T6926] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  603.590934][ T6926] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  603.592704][   T64] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  603.594368][   T64] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  603.850942][ T3065] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  603.850960][ T3065] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  603.859327][ T9040] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  603.861085][ T1017] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1
[  603.861431][ T1017] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1
[  603.861645][ T1017] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1
[  603.912047][ T9040] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  603.951826][ T2425] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1
[  603.979936][   T64] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1
[  603.994889][ T9040] __loop_clr_fd(loop7) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  604.065473][ T1009] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  604.261106][ T1009] usb 2-1: unable to get BOS descriptor or descriptor too short
[  604.262746][ T1009] usb 2-1: config 63 has an invalid interface number: 66 but max is 0
[  604.262769][ T1009] usb 2-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config
[  604.262786][ T1009] usb 2-1: config 63 has no interface number 0
[  604.287389][ T1009] usb 2-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4
[  604.287416][ T1009] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  604.287434][ T1009] usb 2-1: Product: syz
[  604.287447][ T1009] usb 2-1: Manufacturer: syz
[  604.287460][ T1009] usb 2-1: SerialNumber: syz
[  604.739804][ T1009] usb 2-1: USB disconnect, device number 2
[  604.984348][ T5753] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  605.914787][ T5753] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  605.914829][ T5753] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  605.914883][ T5753] usb 9-1: Product: syz
[  605.914995][ T5753] usb 9-1: Manufacturer: syz
[  605.915070][ T5753] usb 9-1: SerialNumber: syz
[  607.088440][ T5873] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  608.558683][ T5753] usb 9-1: can't set config #1, error -71
[  608.578141][ T5753] usb 9-1: USB disconnect, device number 4
[  610.905120][ T5631] usb 10-1: new full-speed USB device number 2 using dummy_hcd
[  611.047474][ T5631] usb 10-1: device descriptor read/64, error -71
[  611.424337][ T5631] usb 10-1: new full-speed USB device number 3 using dummy_hcd
[  611.614140][ T5631] usb 10-1: device descriptor read/64, error -71
[  611.734314][ T5631] usb usb10-port1: attempt power cycle
[  611.775436][ T9844] loop7: detected capacity change from 0 to 1024
[  611.783798][ T6926] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  611.819961][ T2985] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  611.827601][ T6926] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  611.827647][ T6926] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  611.830012][ T6926] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  611.834424][ T6926] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  611.855002][ T6926] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  611.869401][ T2425] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  611.874178][ T3056] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  611.902619][   T57] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1
[  611.910888][ T1311] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  611.910924][ T1311] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  611.910945][ T1311] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  611.934379][ T1311] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  611.959273][ T1017] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  611.967237][ T2985] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  611.973526][ T1017] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1
[  611.988875][ T1017] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  611.998982][ T1017] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  612.066440][   T57] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1
[  612.124141][ T5631] usb 10-1: new full-speed USB device number 4 using dummy_hcd
[  612.144764][ T5631] usb 10-1: device descriptor read/8, error -71
[  612.166334][ T9844] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  612.455352][ T9851] loop9: detected capacity change from 0 to 512
[  612.462867][ T1017] lo_rw_aio(loop9) starting read with raw_refcnt=0x0, refcnt=1
[  612.490179][ T1017] lo_rw_aio(loop9) starting read with raw_refcnt=0x0, refcnt=1
[  612.521199][ T1017] lo_rw_aio(loop9) starting read with raw_refcnt=0x0, refcnt=1
[  612.633820][ T3065] lo_rw_aio(loop9) starting read with raw_refcnt=0x0, refcnt=1
[  612.656050][ T3065] lo_rw_aio(loop9) starting read with raw_refcnt=0x0, refcnt=1
[  612.661539][ T3065] lo_rw_aio(loop9) starting read with raw_refcnt=0x0, refcnt=1
[  612.667371][ T2985] lo_rw_aio(loop9) starting read with raw_refcnt=0x0, refcnt=1
[  612.667414][ T2985] lo_rw_aio(loop9) starting read with raw_refcnt=0x0, refcnt=1
[  612.691635][ T9851] EXT4-fs (loop9): revision level too high, forcing read-only mode
[  612.692215][ T9851] EXT4-fs (loop9): orphan cleanup on readonly fs
[  612.726874][ T3065] lo_rw_aio(loop9) starting read with raw_refcnt=0x0, refcnt=1
[  612.732980][ T3065] lo_rw_aio(loop9) starting read with raw_refcnt=0x0, refcnt=1
[  612.797593][ T3065] lo_rw_aio(loop9) starting read with raw_refcnt=0x0, refcnt=1
[  612.798875][ T3065] lo_rw_aio(loop9) starting read with raw_refcnt=0x0, refcnt=1
[  612.805127][  T105] lo_rw_aio(loop9) starting read with raw_refcnt=0x0, refcnt=1
[  612.809267][ T3065] lo_rw_aio(loop9) starting read with raw_refcnt=0x0, refcnt=1
[  612.863495][ T9040] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  612.922826][ T3065] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1
[  612.972728][  T105] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1
[  612.974899][  T105] lo_rw_aio(loop9) starting read with raw_refcnt=0x0, refcnt=1
[  612.997846][ T9040] __loop_clr_fd(loop7) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  613.029596][ T9851] __quota_error: 4 callbacks suppressed
[  613.029609][ T9851] Quota error (device loop9): find_block_dqentry: Quota for id 0 referenced but not present
[  613.029688][ T9851] Quota error (device loop9): qtree_read_dquot: Can't read quota structure for id 0
[  613.029700][ T9851] EXT4-fs error (device loop9): ext4_acquire_dquot:7034: comm syz.9.837: Failed to acquire dquot type 1
[  613.029832][ T9851] loop9: lost filesystem error report for type 5 error -5
[  613.034192][    C0] EXT4-fs (loop9): error count since last fsck: 1
[  613.034211][    C0] EXT4-fs (loop9): initial error at time 1779165136: ext4_acquire_dquot:7034
[  613.034233][    C0] EXT4-fs (loop9): last error at time 1779165136: ext4_acquire_dquot:7034
[  613.066439][ T2985] lo_rw_aio(loop9) starting write with raw_refcnt=0x0, refcnt=1
[  613.344206][ T2985] lo_rw_aio(loop9) starting read with raw_refcnt=0x0, refcnt=1
[  613.705070][ T9851] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.837: bg 0: block 40: padding at end of block bitmap is not set
[  613.705093][ T9851] loop9: lost filesystem error report for type 5 error -117
[  613.707041][ T6926] lo_rw_aio(loop9) starting write with raw_refcnt=0x0, refcnt=1
[  613.713337][ T9851] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6679: Corrupt filesystem
[  613.713358][ T9851] loop9: lost filesystem error report for type 5 error -117
[  613.735982][ T6926] lo_rw_aio(loop9) starting write with raw_refcnt=0x0, refcnt=1
[  613.801379][ T9851] EXT4-fs warning (device loop9): ext4_evict_inode:195: inode #16: comm syz.9.837: data will be lost
[  613.801562][ T9851] EXT4-fs (loop9): 1 truncate cleaned up
[  613.813718][ T9851] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  614.133286][ T9147] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  614.218055][ T3056] lo_rw_aio(loop9) starting write with raw_refcnt=0x0, refcnt=1
[  614.234524][ T5875] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  614.238216][ T3056] lo_rw_aio(loop9) starting write with raw_refcnt=0x0, refcnt=1
[  614.279037][ T9147] __loop_clr_fd(loop9) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  616.760154][ T9885] loop9: detected capacity change from 0 to 256
[  616.813387][ T9885] vfat: Unknown parameter 'gi1/ô-å«IdéîÝã!”'
[  616.855054][ T9885] __loop_clr_fd(loop9) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  617.451541][ T5875] usb 2-1: string descriptor 0 read error: -71
[  617.451669][ T5875] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  617.451691][ T5875] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  617.477360][ T5875] usb 2-1: can't set config #1, error -71
[  617.479627][ T5875] usb 2-1: USB disconnect, device number 4
[  617.986000][ T9900] loop7: detected capacity change from 0 to 1024
[  617.987144][ T9900] EXT4-fs: Ignoring removed orlov option
[  617.987203][ T9900] ext4: Unknown parameter 'smackfsdef'
[  617.987623][ T9900] __loop_clr_fd(loop7) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  618.036271][ T9900] loop7: detected capacity change from 0 to 4096
[  618.037991][ T2985] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  618.091429][ T9807] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  618.102319][ T9807] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  618.439372][ T9807] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  618.439424][ T9807] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  618.468668][ T9807] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1
[  618.483593][ T9807] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  618.493984][ T9807] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  618.506362][ T9900] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  618.586096][ T9900] EXT4-fs (loop7): shut down requested (1)
[  618.714171][    T9] usb 10-1: new full-speed USB device number 6 using dummy_hcd
[  618.857326][    T9] usb 10-1: device descriptor read/64, error -71
[  618.910930][ T2425] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  618.970256][ T6926] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  618.970930][ T6926] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  618.975926][ T6926] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  618.987335][ T2985] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  618.988725][ T2985] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  618.993194][ T2985] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  619.040681][ T2985] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  619.045254][ T6926] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  619.047143][ T6926] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  619.048577][ T2425] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  619.049200][ T2425] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  619.049826][ T2425] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  619.050377][ T2425] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  619.050954][ T2425] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  619.051510][ T2425] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  619.054281][ T2425] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  619.168069][ T9807] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  619.168129][ T9807] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  619.229486][   T13] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  619.232271][   T13] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  619.258167][    T9] usb 10-1: new full-speed USB device number 7 using dummy_hcd
[  619.259332][   T13] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  619.261082][   T13] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  619.289854][ T3056] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  619.304164][ T3056] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  619.362504][ T9919] netlink: 68 bytes leftover after parsing attributes in process `syz.8.850'.
[  619.414706][    T9] usb 10-1: device descriptor read/64, error -71
[  619.449910][ T9040] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  619.522999][ T9807] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  619.535246][    T9] usb usb10-port1: attempt power cycle
[  619.543523][ T9807] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  619.547052][ T9807] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  619.550739][ T9807] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  619.562716][   T64] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  619.579613][ T9807] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  619.584850][   T13] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  619.586543][   T13] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  619.606599][   T12] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  619.616002][ T9807] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  619.623892][ T9807] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  619.629609][   T13] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  619.662330][   T12] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  619.677834][ T9807] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  619.700834][ T9807] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  619.728591][ T6926] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  619.744151][ T6926] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  619.813222][   T12] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  619.855446][   T64] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  619.862215][   T13] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  619.872835][  T105] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  619.886752][  T105] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  619.897273][  T105] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  619.909561][   T64] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  619.926241][ T3056] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  619.967959][    T9] usb 10-1: new full-speed USB device number 8 using dummy_hcd
[  619.985391][    T9] usb 10-1: device descriptor read/8, error -71
[  620.051421][ T9812] __loop_clr_fd(loop7) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  620.235778][    T9] usb 10-1: new full-speed USB device number 9 using dummy_hcd
[  620.254853][    T9] usb 10-1: device descriptor read/8, error -71
[  620.364429][    T9] usb usb10-port1: unable to enumerate USB device
[  620.495991][ T1009] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  620.726992][ T1009] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  620.727021][ T1009] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  620.727038][ T1009] usb 8-1: Product: syz
[  620.727051][ T1009] usb 8-1: Manufacturer: syz
[  620.727062][ T1009] usb 8-1: SerialNumber: syz
[  621.053984][ T9977] loop1: detected capacity change from 0 to 256
[  621.055007][ T9977] vfat: Unknown parameter 'gi1/ô-å«IdéîÝã!”'
[  621.055410][ T9977] __loop_clr_fd(loop1) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  621.100091][ T1009] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  621.100144][ T1009] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32
[  621.100174][ T1009] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  621.248081][ T1009] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -32
[  623.268627][ T9487] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  623.374129][ T7647] usb 2-1: new full-speed USB device number 5 using dummy_hcd
[  623.505633][ T7647] usb 2-1: device descriptor read/64, error -71
[  623.583157][ T5875] usb 8-1: USB disconnect, device number 2
[  623.602511][ T9487] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  623.627259][ T9487] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  623.744156][ T7647] usb 2-1: new full-speed USB device number 6 using dummy_hcd
[  623.827453][ T9487] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  623.842730][ T9487] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  623.891353][ T7647] usb 2-1: device descriptor read/64, error -71
[  624.010463][ T7647] usb usb2-port1: attempt power cycle
[  624.010639][ T9487] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  624.045101][ T9487] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  624.083349][ T9487] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  624.237720][ T1336] ieee802154 phy0 wpan0: encryption failed: -22
[  624.237812][ T1336] ieee802154 phy1 wpan1: encryption failed: -22
[  624.374149][ T7647] usb 2-1: new full-speed USB device number 7 using dummy_hcd
[  624.394912][ T7647] usb 2-1: device descriptor read/8, error -71
[  624.654202][ T7647] usb 2-1: new full-speed USB device number 8 using dummy_hcd
[  624.685161][ T7647] usb 2-1: device descriptor read/8, error -71
[  624.797814][ T7647] usb usb2-port1: unable to enumerate USB device
[  625.297431][ T9487] 8021q: adding VLAN 0 to HW filter on device bond0
[  625.401331][ T9487] 8021q: adding VLAN 0 to HW filter on device team0
[  625.417947][T10068] loop1: detected capacity change from 0 to 256
[  625.451612][   T44] bridge0: port 1(bridge_slave_0) entered blocking state
[  625.452405][   T44] bridge0: port 1(bridge_slave_0) entered forwarding state
[  625.500312][ T6907] bridge0: port 2(bridge_slave_1) entered blocking state
[  625.500978][ T6907] bridge0: port 2(bridge_slave_1) entered forwarding state
[  625.551593][T10068] vfat: Unknown parameter 'gi1/ô-å«IdéîÝã!”'
[  625.552006][T10068] __loop_clr_fd(loop1) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  627.996498][ T5630] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  627.996615][ T5630] Bluetooth: hci2: Injecting HCI hardware error event
[  627.998740][ T5629] Bluetooth: hci2: hardware error 0x00
[  628.043498][T10094] loop1: detected capacity change from 0 to 128
[  628.092876][   T44] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  628.166564][   T44] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  628.175056][ T6591] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  628.175151][ T6591] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  628.194518][ T6591] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  628.194557][ T6591] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  628.255608][ T6926] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  628.260319][ T2425] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  628.264529][ T9965] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  628.276874][ T9809] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  628.329373][T10094] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  628.361672][   T44] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  628.361722][   T44] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  628.361746][   T44] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  628.379485][ T9957] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  628.422322][ T9957] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  628.435489][T10094] ext4 filesystem being mounted at /21/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  628.493981][   T44] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1
[  628.778182][ T9052] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  628.887706][ T9957] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1
[  628.941107][ T9052] __loop_clr_fd(loop1) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  629.123755][   T38] audit: type=1326 audit(1779165152.116:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10113 comm="syz.1.883" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f798211ce59 code=0x7ffc0000
[  629.123802][   T38] audit: type=1326 audit(1779165152.126:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10113 comm="syz.1.883" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f798211ce59 code=0x7ffc0000
[  629.123840][   T38] audit: type=1326 audit(1779165152.126:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10113 comm="syz.1.883" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f798211ce59 code=0x7ffc0000
[  629.147676][   T38] audit: type=1326 audit(1779165152.156:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10113 comm="syz.1.883" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f798211ce59 code=0x7ffc0000
[  629.147723][   T38] audit: type=1326 audit(1779165152.156:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10113 comm="syz.1.883" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f798211ce59 code=0x7ffc0000
[  629.147760][   T38] audit: type=1326 audit(1779165152.156:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10113 comm="syz.1.883" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f798211ce59 code=0x7ffc0000
[  629.147797][   T38] audit: type=1326 audit(1779165152.156:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10113 comm="syz.1.883" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f798211ce59 code=0x7ffc0000
[  629.147832][   T38] audit: type=1326 audit(1779165152.156:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10113 comm="syz.1.883" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f798211ce59 code=0x7ffc0000
[  629.147869][   T38] audit: type=1326 audit(1779165152.156:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10113 comm="syz.1.883" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f798211ce59 code=0x7ffc0000
[  629.152448][   T38] audit: type=1326 audit(1779165152.156:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10113 comm="syz.1.883" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7f798211ce59 code=0x7ffc0000
[  629.305838][T10118] The dccp option matching is deprecated and scheduled to be removed in 2027.
[  629.305838][T10118] Please contact the netfilter-devel mailing list or update your nftables rules.
[  629.458130][T10119] ieee802154 phy0 wpan0: encryption failed: -22
[  629.847257][ T9487] 8021q: adding VLAN 0 to HW filter on device batadv0
[  630.555508][ T5629] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  632.004291][ T9487] veth0_vlan: entered promiscuous mode
[  632.108669][ T9487] veth1_vlan: entered promiscuous mode
[  632.155052][ T5629] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  632.155275][ T5629] Bluetooth: hci1: Injecting HCI hardware error event
[  632.158463][ T5630] Bluetooth: hci1: hardware error 0x00
[  633.409027][ T9487] veth0_macvtap: entered promiscuous mode
[  633.427750][ T9487] veth1_macvtap: entered promiscuous mode
[  633.534245][ T9487] batman_adv: batadv0: Interface activated: batadv_slave_0
[  633.588821][ T9487] batman_adv: batadv0: Interface activated: batadv_slave_1
[  633.757709][   T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  633.757884][   T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  633.759502][   T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  633.759543][   T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  634.103178][T10176] netlink: 12 bytes leftover after parsing attributes in process `syz.7.896'.
[  634.201132][T10176] l2tp_ppp: sess 2/0: no socket in recv
[  635.362879][ T5630] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  635.892575][ T2425] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  635.892590][ T2425] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  636.685711][ T9970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  636.685731][ T9970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  637.700117][T10213] Illegal XDP return value 4294967294 on prog  (id 38) dev syz_tun, expect packet loss!
[  639.081498][T10222] netlink: 12 bytes leftover after parsing attributes in process `syz.9.905'.
[  641.219904][T10250] ªªªªªª: renamed from vlan0 (while UP)
[  645.594902][ T5875] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  645.757286][ T5875] usb 2-1: Using ep0 maxpacket: 32
[  645.775295][ T5875] usb 2-1: config 0 has an invalid interface number: 67 but max is 0
[  645.775320][ T5875] usb 2-1: config 0 has no interface number 0
[  645.778009][ T5875] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  645.778034][ T5875] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  645.778052][ T5875] usb 2-1: Product: syz
[  645.778064][ T5875] usb 2-1: Manufacturer: syz
[  645.778077][ T5875] usb 2-1: SerialNumber: syz
[  645.840947][ T5875] usb 2-1: config 0 descriptor??
[  646.486245][ T5875] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  646.486341][ T5875] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  646.688717][ T5875] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61
[  646.689109][ T5875] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -61
[  648.735668][T10340] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  648.735668][T10340] The task syz.8.932 (10340) triggered the difference, watch for misbehavior.
[  648.970126][T10343] syzkaller0: entered promiscuous mode
[  648.970150][T10343] syzkaller0: entered allmulticast mode
[  649.222413][ T7647] usb 2-1: USB disconnect, device number 9
[  649.434213][ T5630] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  649.434454][ T5630] Bluetooth: hci3: Injecting HCI hardware error event
[  649.444345][ T5630] Bluetooth: hci3: hardware error 0x00
[  651.928294][ T5630] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  652.243217][T10383] loop8: detected capacity change from 0 to 512
[  652.262469][ T6926] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  652.281150][ T9957] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  652.281877][ T9957] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  652.283195][ T9957] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  652.283811][ T9957] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  652.288046][ T9957] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1
[  652.288108][ T9957] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  652.289408][ T9957] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  652.291645][ T9957] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  652.292282][ T9957] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  652.294154][ T9957] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  652.307551][   T13] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  652.322231][ T6926] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  652.322392][   T13] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1
[  652.323022][   T13] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  652.323200][   T13] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  652.329323][ T6926] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1
[  652.373595][ T6907] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  652.427987][T10383] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  652.428124][T10383] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  652.646371][ T6591] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  652.956072][ T9047] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  653.058901][ T9957] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1
[  653.149722][ T6907] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1
[  653.187311][ T9047] __loop_clr_fd(loop8) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  655.813475][T10435] netlink: 4 bytes leftover after parsing attributes in process `syz.1.956'.
[  655.813702][T10435] netlink: 24 bytes leftover after parsing attributes in process `syz.1.956'.
[  655.813719][T10435] netlink: 716 bytes leftover after parsing attributes in process `syz.1.956'.
[  655.813736][T10435] netlink: 24 bytes leftover after parsing attributes in process `syz.1.956'.
[  657.012925][T10460] loop6: detected capacity change from 0 to 512
[  657.061134][ T9965] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1
[  657.242625][ T9970] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1
[  657.259660][ T9970] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1
[  657.280495][ T9970] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1
[  657.297467][ T9965] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1
[  657.297523][ T9965] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1
[  657.298232][ T9970] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1
[  657.301109][ T9965] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1
[  657.303012][ T9970] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1
[  657.303057][ T9970] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1
[  657.317467][ T2425] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1
[  657.323818][ T9965] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1
[  657.324697][ T2425] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1
[  657.329213][ T2425] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1
[  657.331975][ T2425] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1
[  657.339100][ T9965] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1
[  657.348110][ T9970] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1
[  657.351130][ T9970] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1
[  657.354442][ T5926] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  657.363168][ T9970] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1
[  657.364215][ T9970] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1
[  657.366395][ T9970] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1
[  657.412476][ T9970] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1
[  657.428612][T10460] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  657.428757][T10460] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  657.524088][ T5926] usb 8-1: Using ep0 maxpacket: 16
[  657.526093][ T5926] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  657.526144][ T5926] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  657.526169][ T5926] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  657.526188][ T5926] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  657.526209][ T5926] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  657.527317][ T5926] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  657.527339][ T5926] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  657.527357][ T5926] usb 8-1: Manufacturer: syz
[  657.548325][ T5926] usb 8-1: config 0 descriptor??
[  657.900247][T10475] loop9: detected capacity change from 0 to 128
[  657.918818][ T6591] lo_rw_aio(loop9) starting read with raw_refcnt=0x0, refcnt=1
[  657.932057][ T5926] rc_core: IR keymap rc-hauppauge not found
[  657.932075][ T5926] Registered IR keymap rc-empty
[  657.932214][ T5926] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  657.946292][ T5926] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  657.948949][ T6591] lo_rw_aio(loop9) starting read with raw_refcnt=0x0, refcnt=1
[  657.965754][ T5926] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0
[  658.000907][ T5926] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input11
[  658.014786][ T6907] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1
[  658.055653][ T6907] lo_rw_aio(loop9) starting read with raw_refcnt=0x0, refcnt=1
[  658.055703][ T6907] lo_rw_aio(loop9) starting read with raw_refcnt=0x0, refcnt=1
[  658.071951][ T5926] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  658.084328][ T5926] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  658.110161][ T5926] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  658.114104][ T2425] lo_rw_aio(loop9) starting write with raw_refcnt=0x0, refcnt=1
[  658.125890][ T5926] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  658.161416][ T5926] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  658.231766][T10475] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  658.233232][ T9970] lo_rw_aio(loop9) starting write with raw_refcnt=0x0, refcnt=1
[  658.240433][T10475] ext4 filesystem being mounted at /30/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  658.272331][ T5926] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  658.286581][ T5926] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  658.331802][ T5926] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  658.351575][ T5926] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  658.367719][ T5926] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  658.389036][ T5926] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  658.389242][T10466] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  658.417942][ T9957] lo_rw_aio(loop9) starting write with raw_refcnt=0x0, refcnt=1
[  658.487113][ T5630] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  658.487278][ T5630] Bluetooth: hci0: Injecting HCI hardware error event
[  658.515678][ T5630] Bluetooth: hci0: hardware error 0x00
[  658.515771][ T5926] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  658.515790][ T5926] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  658.565510][ T9970] lo_rw_aio(loop9) starting read with raw_refcnt=0x0, refcnt=1
[  658.565560][ T9970] lo_rw_aio(loop9) starting read with raw_refcnt=0x0, refcnt=1
[  658.570155][ T9970] lo_rw_aio(loop9) starting read with raw_refcnt=0x0, refcnt=1
[  658.826823][ T9970] lo_rw_aio(loop9) starting read with raw_refcnt=0x0, refcnt=1
[  658.843739][ T9957] lo_rw_aio(loop9) starting read with raw_refcnt=0x0, refcnt=1
[  658.872830][   T44] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1
[  658.872912][   T44] lo_rw_aio(loop9) starting read with raw_refcnt=0x0, refcnt=1
[  658.872943][   T44] lo_rw_aio(loop9) starting read with raw_refcnt=0x0, refcnt=1
[  658.872963][   T44] lo_rw_aio(loop9) starting read with raw_refcnt=0x0, refcnt=1
[  658.960248][   T13] lo_rw_aio(loop9) starting read with raw_refcnt=0x0, refcnt=1
[  658.965957][ T9957] lo_rw_aio(loop9) starting read with raw_refcnt=0x0, refcnt=1
[  659.022917][ T5926] usb 8-1: USB disconnect, device number 3
[  659.373261][ T6907] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1
[  659.868668][ T9487] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  659.967950][ T1188] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1
[  660.013207][ T2425] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1
[  660.049563][ T9487] __loop_clr_fd(loop6) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  660.104755][ T9147] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  660.241916][ T6591] lo_rw_aio(loop9) starting write with raw_refcnt=0x0, refcnt=1
[  660.408990][ T9147] __loop_clr_fd(loop9) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  662.023328][T10522] loop7: detected capacity change from 0 to 128
[  662.037828][ T1401] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  662.046638][ T1401] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  662.072052][ T9965] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  662.072194][ T9965] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  662.107620][ T1401] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  662.108876][ T1401] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  662.113965][   T44] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  662.118997][ T1401] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  662.119166][ T1401] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  662.119490][ T1401] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1
[  662.179208][   T44] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  662.179261][   T44] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  662.179285][   T44] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  662.201947][T10522] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  662.202700][ T9807] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1
[  662.229657][T10522] ext4 filesystem being mounted at /66/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  662.265593][   T44] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  662.266309][   T44] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1
[  662.266440][   T44] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1
[  662.394143][ T5630] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  662.454133][ T9040] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  662.504322][ T9807] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1
[  662.611014][ T9040] __loop_clr_fd(loop7) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  662.916046][ T5873] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  663.065657][ T5873] usb 7-1: Using ep0 maxpacket: 16
[  663.069468][ T5873] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  663.069528][ T5873] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  663.069552][ T5873] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  663.069571][ T5873] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  663.069591][ T5873] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  663.136430][ T5873] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  663.136467][ T5873] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  663.136485][ T5873] usb 7-1: Manufacturer: syz
[  663.183628][ T5873] usb 7-1: config 0 descriptor??
[  663.505511][ T5873] rc_core: IR keymap rc-hauppauge not found
[  663.505529][ T5873] Registered IR keymap rc-empty
[  663.505663][ T5873] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  663.549637][ T5873] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  663.575381][ T5873] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0
[  663.578546][ T5873] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input12
[  663.591183][ T5873] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  663.634283][ T5873] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  663.656572][ T5873] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  663.677135][ T5873] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  663.695707][ T5873] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  663.714179][ T5873] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  663.735066][ T5873] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  663.754505][ T5873] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  663.774210][ T5873] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  663.795781][ T5873] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  663.814211][ T5873] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  663.892662][ T5873] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  663.892686][ T5873] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  663.968971][ T5873] usb 7-1: USB disconnect, device number 2
[  664.355451][ T9317] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  665.852549][ T9317] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  665.852578][ T9317] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  665.852597][ T9317] usb 9-1: Product: syz
[  665.852610][ T9317] usb 9-1: Manufacturer: syz
[  665.852621][ T9317] usb 9-1: SerialNumber: syz
[  665.946571][T10579] loop6: detected capacity change from 0 to 128
[  665.962723][   T57] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1
[  665.964221][ T5734] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  665.973227][ T1188] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1
[  666.129765][ T5734] usb 8-1: unable to get BOS descriptor or descriptor too short
[  666.131804][ T5734] usb 8-1: config 63 has an invalid interface number: 66 but max is 0
[  666.131826][ T5734] usb 8-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config
[  666.131844][ T5734] usb 8-1: config 63 has no interface number 0
[  666.143862][ T6926] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1
[  666.144959][ T6926] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1
[  666.159552][ T6926] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1
[  666.163296][ T6926] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1
[  666.170401][ T2425] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1
[  666.223471][ T5734] usb 8-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4
[  666.223498][ T5734] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  666.223515][ T5734] usb 8-1: Product: syz
[  666.223528][ T5734] usb 8-1: Manufacturer: syz
[  666.223540][ T5734] usb 8-1: SerialNumber: syz
[  666.327762][ T1401] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1
[  666.335809][ T1401] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1
[  666.356361][ T9317] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  666.356417][ T9317] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  666.365837][   T44] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1
[  666.366305][   T44] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1
[  666.366700][ T2425] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1
[  666.369691][ T2425] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1
[  666.377159][   T44] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1
[  666.416111][ T6926] lo_rw_aio(loop6) starting read with raw_refcnt=0x0, refcnt=1
[  666.703622][ T5734] usb 8-1: USB disconnect, device number 4
[  666.712762][T10579] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  666.730929][   T44] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1
[  666.731248][T10579] ext4 filesystem being mounted at /15/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  666.781439][   T44] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1
[  666.978682][ T9317] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPIPE
[  666.978735][ T9317] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  667.028533][ T9317] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  667.039240][ T9487] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  667.085632][ T9317] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -32
[  667.178125][ T6926] lo_rw_aio(loop6) starting write with raw_refcnt=0x0, refcnt=1
[  667.224126][ T5734] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  667.251333][ T9487] __loop_clr_fd(loop6) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  667.364622][ T5734] usb 8-1: device descriptor read/64, error -71
[  667.604514][ T5734] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  667.744239][ T5734] usb 8-1: device descriptor read/64, error -71
[  667.846975][ T5630] Bluetooth: hci6: command 0x0406 tx timeout
[  667.854893][ T5734] usb usb8-port1: attempt power cycle
[  668.403889][   T37] usb 9-1: USB disconnect, device number 5
[  669.306476][T10640] loop8: detected capacity change from 0 to 128
[  669.769947][ T3065] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  669.773496][ T6926] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  669.838304][ T3065] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  669.838577][ T3065] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  669.839347][ T3065] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  669.843422][ T3065] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  669.865380][ T9965] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  669.866222][ T3065] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  669.867605][ T3065] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  669.868259][ T3065] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1
[  669.883500][ T3065] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1
[  669.892617][T10640] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  669.895396][ T9809] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1
[  669.896166][T10640] ext4 filesystem being mounted at /65/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  670.002945][ T1188] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1
[  670.243037][ T9047] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  670.326903][ T1188] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1
[  670.377204][ T9721] __loop_clr_fd(loop8) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  671.885620][T10670] ==================================================================
[  671.885649][T10670] BUG: KASAN: slab-use-after-free in reverse_path_check_proc+0x5b/0x240
[  671.885766][T10670] Read of size 8 at addr ffff88803abe84a0 by task syz.8.1015/10670
[  671.885783][T10670] 
[  671.885803][T10670] CPU: 0 UID: 0 PID: 10670 Comm: syz.8.1015 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  671.885825][T10670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  671.885843][T10670] Call Trace:
[  671.885852][T10670]  <TASK>
[  671.885862][T10670]  dump_stack_lvl+0xe8/0x150
[  671.885886][T10670]  print_address_description+0x55/0x1e0
[  671.885920][T10670]  ? reverse_path_check_proc+0x5b/0x240
[  671.885938][T10670]  print_report+0x58/0x70
[  671.885958][T10670]  kasan_report+0x117/0x150
[  671.886024][T10670]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  671.886078][T10670]  ? reverse_path_check_proc+0x5b/0x240
[  671.886099][T10670]  ? ep_insert+0xbbb/0x1820
[  671.886114][T10670]  reverse_path_check_proc+0x5b/0x240
[  671.886134][T10670]  ? ep_insert+0xbbb/0x1820
[  671.886149][T10670]  ep_insert+0xc6c/0x1820
[  671.886171][T10670]  ? __pfx_ep_insert+0x10/0x10
[  671.886192][T10670]  ? lockdep_hardirqs_on+0x7a/0x110
[  671.886207][T10670]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  671.886224][T10670]  ? mutex_lock_nested+0x152/0x1d0
[  671.886271][T10670]  ? do_epoll_ctl_file+0xc69/0xed0
[  671.886325][T10670]  do_epoll_ctl_file+0x8bb/0xed0
[  671.886351][T10670]  ? do_epoll_ctl_file+0xac3/0xed0
[  671.886375][T10670]  ? __pfx_do_epoll_ctl_file+0x10/0x10
[  671.886402][T10670]  ? __fget_files+0x3a6/0x420
[  671.886476][T10670]  ? __fget_files+0x2a/0x420
[  671.886504][T10670]  __se_sys_epoll_ctl+0x14e/0x210
[  671.886521][T10670]  ? __pfx___se_sys_epoll_ctl+0x10/0x10
[  671.886541][T10670]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  671.886559][T10670]  do_syscall_64+0x15f/0xf80
[  671.886576][T10670]  ? trace_irq_disable+0x3b/0x140
[  671.886621][T10670]  ? clear_bhb_loop+0x40/0x90
[  671.886650][T10670]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  671.886667][T10670] RIP: 0033:0x7f73bb69ce59
[  671.886690][T10670] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  671.886705][T10670] RSP: 002b:00007f73b9489028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9
[  671.886724][T10670] RAX: ffffffffffffffda RBX: 00007f73bb916270 RCX: 00007f73bb69ce59
[  671.886737][T10670] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000006
[  671.886749][T10670] RBP: 00007f73bb732d6f R08: 0000000000000000 R09: 0000000000000000
[  671.886760][T10670] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  671.886774][T10670] R13: 00007f73bb916308 R14: 00007f73bb916270 R15: 00007ffde99da978
[  671.886794][T10670]  </TASK>
[  671.886801][T10670] 
[  671.886805][T10670] Allocated by task 10664:
[  671.886820][T10670]  kasan_save_track+0x3e/0x80
[  671.886874][T10670]  __kasan_slab_alloc+0x6c/0x80
[  671.886890][T10670]  kmem_cache_alloc_noprof+0x33b/0x680
[  671.886964][T10670]  ep_insert+0x512/0x1820
[  671.886978][T10670]  do_epoll_ctl_file+0x8bb/0xed0
[  671.887003][T10670]  __se_sys_epoll_ctl+0x14e/0x210
[  671.887017][T10670]  do_syscall_64+0x15f/0xf80
[  671.887033][T10670]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  671.887049][T10670] 
[  671.887053][T10670] Freed by task 10664:
[  671.887061][T10670]  kasan_save_track+0x3e/0x80
[  671.887084][T10670]  kasan_save_free_info+0x46/0x50
[  671.887104][T10670]  __kasan_slab_free+0x5c/0x80
[  671.887118][T10670]  kmem_cache_free+0x187/0x6c0
[  671.887133][T10670]  eventpoll_release_file+0xc2/0x240
[  671.887157][T10670]  __fput+0x83c/0xa70
[  671.887177][T10670]  task_work_run+0x1d9/0x270
[  671.887196][T10670]  get_signal+0x11eb/0x1330
[  671.887218][T10670]  arch_do_signal_or_restart+0xbc/0x840
[  671.887236][T10670]  exit_to_user_mode_loop+0x8c/0x4d0
[  671.887253][T10670]  do_syscall_64+0x33e/0xf80
[  671.887268][T10670]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  671.887284][T10670] 
[  671.887289][T10670] The buggy address belongs to the object at ffff88803abe84a0
[  671.887289][T10670]  which belongs to the cache ep_head of size 16
[  671.887304][T10670] The buggy address is located 0 bytes inside of
[  671.887304][T10670]  freed 16-byte region [ffff88803abe84a0, ffff88803abe84b0)
[  671.887322][T10670] 
[  671.887327][T10670] The buggy address belongs to the physical page:
[  671.887345][T10670] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803abe8f40 pfn:0x3abe8
[  671.887366][T10670] memcg:ffff888040214001
[  671.887374][T10670] flags: 0x80000000000200(workingset|node=0|zone=1)
[  671.887392][T10670] page_type: f5(slab)
[  671.887409][T10670] raw: 0080000000000200 ffff88814041ac80 ffffea0000e02f50 ffff888020ac9f88
[  671.887426][T10670] raw: ffff88803abe8f40 000000080080003f 00000000f5000000 ffff888040214001
[  671.887435][T10670] page dumped because: kasan: bad access detected
[  671.887447][T10670] page_owner tracks the page as allocated
[  671.887455][T10670] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4991, tgid 4991 (udevd), ts 37682533179, free_ts 37465519008
[  671.887485][T10670]  post_alloc_hook+0x1f9/0x250
[  671.887575][T10670]  get_page_from_freelist+0x27d6/0x2850
[  671.887594][T10670]  __alloc_frozen_pages_noprof+0x18d/0x380
[  671.887613][T10670]  allocate_slab+0x74/0x5e0
[  671.887663][T10670]  refill_objects+0x33c/0x3d0
[  671.887682][T10670]  __pcs_replace_empty_main+0x373/0x720
[  671.887704][T10670]  kmem_cache_alloc_noprof+0x433/0x680
[  671.887728][T10670]  ep_insert+0x512/0x1820
[  671.887741][T10670]  do_epoll_ctl_file+0x8bb/0xed0
[  671.887764][T10670]  __se_sys_epoll_ctl+0x14e/0x210
[  671.887779][T10670]  do_syscall_64+0x15f/0xf80
[  671.887794][T10670]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  671.887810][T10670] page last free pid 21 tgid 21 stack trace:
[  671.887820][T10670]  __free_frozen_pages+0x1075/0x11b0
[  671.887835][T10670]  tlb_remove_table_rcu+0x85/0x100
[  671.887883][T10670]  rcu_cpu_kthread+0x99e/0x1470
[  671.887927][T10670]  smpboot_thread_fn+0x541/0xa50
[  671.887942][T10670]  kthread+0x389/0x470
[  671.887959][T10670]  ret_from_fork+0x514/0xb70
[  671.887978][T10670]  ret_from_fork_asm+0x1a/0x30
[  671.888001][T10670] 
[  671.888005][T10670] Memory state around the buggy address:
[  671.888016][T10670]  ffff88803abe8380: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc
[  671.888027][T10670]  ffff88803abe8400: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc
[  671.888038][T10670] >ffff88803abe8480: 00 00 fc fc fa fb fc fc fa fb fc fc fa fb fc fc
[  671.888047][T10670]                                ^
[  671.888056][T10670]  ffff88803abe8500: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc
[  671.888068][T10670]  ffff88803abe8580: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc
[  671.888076][T10670] ==================================================================
[  671.891752][T10670] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  671.891777][T10670] CPU: 0 UID: 0 PID: 10670 Comm: syz.8.1015 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  671.891800][T10670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  671.891811][T10670] Call Trace:
[  671.891819][T10670]  <TASK>
[  671.891827][T10670]  vpanic+0x56c/0xa60
[  671.891857][T10670]  ? __pfx_vpanic+0x10/0x10
[  671.891883][T10670]  panic+0xc5/0xd0
[  671.891905][T10670]  ? __pfx_panic+0x10/0x10
[  671.891927][T10670]  ? preempt_schedule_thunk+0x16/0x40
[  671.891946][T10670]  ? preempt_schedule_thunk+0x16/0x40
[  671.891964][T10670]  ? reverse_path_check_proc+0x5b/0x240
[  671.891981][T10670]  check_panic_on_warn+0x89/0xb0
[  671.892002][T10670]  ? reverse_path_check_proc+0x5b/0x240
[  671.892020][T10670]  end_report+0x73/0x170
[  671.892038][T10670]  ? reverse_path_check_proc+0x5b/0x240
[  671.892056][T10670]  kasan_report+0x128/0x150
[  671.892072][T10670]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  671.892092][T10670]  ? reverse_path_check_proc+0x5b/0x240
[  671.892113][T10670]  ? ep_insert+0xbbb/0x1820
[  671.892129][T10670]  reverse_path_check_proc+0x5b/0x240
[  671.892149][T10670]  ? ep_insert+0xbbb/0x1820
[  671.892165][T10670]  ep_insert+0xc6c/0x1820
[  671.892187][T10670]  ? __pfx_ep_insert+0x10/0x10
[  671.892207][T10670]  ? lockdep_hardirqs_on+0x7a/0x110
[  671.892225][T10670]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  671.892243][T10670]  ? mutex_lock_nested+0x152/0x1d0
[  671.892265][T10670]  ? do_epoll_ctl_file+0xc69/0xed0
[  671.892292][T10670]  do_epoll_ctl_file+0x8bb/0xed0
[  671.892318][T10670]  ? do_epoll_ctl_file+0xac3/0xed0
[  671.892345][T10670]  ? __pfx_do_epoll_ctl_file+0x10/0x10
[  671.892371][T10670]  ? __fget_files+0x3a6/0x420
[  671.892395][T10670]  ? __fget_files+0x2a/0x420
[  671.892423][T10670]  __se_sys_epoll_ctl+0x14e/0x210
[  671.892442][T10670]  ? __pfx___se_sys_epoll_ctl+0x10/0x10
[  671.892463][T10670]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  671.892481][T10670]  do_syscall_64+0x15f/0xf80
[  671.892499][T10670]  ? trace_irq_disable+0x3b/0x140
[  671.892515][T10670]  ? clear_bhb_loop+0x40/0x90
[  671.892534][T10670]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  671.892552][T10670] RIP: 0033:0x7f73bb69ce59
[  671.892568][T10670] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  671.892584][T10670] RSP: 002b:00007f73b9489028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9
[  671.892604][T10670] RAX: ffffffffffffffda RBX: 00007f73bb916270 RCX: 00007f73bb69ce59
[  671.892618][T10670] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000006
[  671.892638][T10670] RBP: 00007f73bb732d6f R08: 0000000000000000 R09: 0000000000000000
[  671.892649][T10670] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  671.892662][T10670] R13: 00007f73bb916308 R14: 00007f73bb916270 R15: 00007ffde99da978
[  671.892683][T10670]  </TASK>
[  671.892992][T10670] Kernel Offset: disabled